last executing test programs: 4m3.577076663s ago: executing program 2 (id=790): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4m1.286837566s ago: executing program 2 (id=802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4m0.846086899s ago: executing program 2 (id=803): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) 4m0.392888332s ago: executing program 2 (id=805): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000400)={[{@user_xattr}, {@noauto_da_alloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x5a0, &(0x7f0000000c80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 3m59.684632217s ago: executing program 2 (id=809): r0 = userfaultfd(0x80801) unshare(0x20000400) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x0, 0x6, 0x7ff, 0x401, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) 3m58.628312377s ago: executing program 2 (id=820): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000407d1e2e2c0000000000010902240001000040b1090400000103000100092101019f0122050009058103ff"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400306"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m57.953628236s ago: executing program 32 (id=820): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000407d1e2e2c0000000000010902240001000040b1090400000103000100092101019f0122050009058103ff"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400306"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.60496725s ago: executing program 0 (id=2534): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.010649978s ago: executing program 3 (id=2541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x11, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f0708"], 0x0}, 0x0) 3.920164714s ago: executing program 0 (id=2545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x44084) 3.513220111s ago: executing program 0 (id=2548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) 3.247203135s ago: executing program 0 (id=2549): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080)="c70582e1aa96fa90", 0x8, 0x800, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 2.936243824s ago: executing program 0 (id=2553): r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.49939197s ago: executing program 0 (id=2555): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88, 0x0, 0x1, 0x0, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) unlink(&(0x7f0000000100)='./file2\x00') 2.499160237s ago: executing program 6 (id=2557): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.499106533s ago: executing program 4 (id=2558): munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.200975511s ago: executing program 5 (id=2560): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2.140521758s ago: executing program 1 (id=2561): r0 = socket$packet(0x11, 0x3, 0x300) setuid(0xee01) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x1, &(0x7f0000000140)={0x11, 0x20, r1, 0x1, 0x0, 0x6, @local}, 0x14) 2.124653795s ago: executing program 4 (id=2562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.098583367s ago: executing program 6 (id=2563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800), &(0x7f0000000180), 0x130, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r1}, 0xc) 1.846039712s ago: executing program 1 (id=2564): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x2bc, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x286, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private1, [{0x5, 0xd, "52811c8f7eefb435b3fcbd906282e8dcc4436572645e443db860c149c04bcefadad96545eeae73819162fe2099e06d52c1e95acc597cfea679351e8fe58afb31e3076c9074c81020a1aec96e31fde771cad6784b75ad75a7e23b50a17c6f7a4197df2c7a32b4e6d48ac88c"}, {0x19, 0x8, "16198027b1d7011df55036b41e693daaa3a374e951a3bd1e7a794eb3d4a4aea35967f1f412c3f66dc291723df062329c1eef10de42e5015e82a0a0fcfbb4dc10031b"}, {0x18, 0x37, "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"}]}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) 1.84424976s ago: executing program 5 (id=2565): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xdffe, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "500a8bb8f4ebacb174dcffd62f77f2cadcfd39b8e2ad32cb894b431c2b9fc5b9", "8ea40286a0dc071fcf9d280fae29d0b6", {"4cced5dd12919355c84f8a2bc1621e6d", "7465589e425722095ed4b8e02bdf7189"}}}}}}}, 0x0) 1.782607467s ago: executing program 3 (id=2566): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.744932021s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 1.680435402s ago: executing program 6 (id=2568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x81f, 0xa}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x71, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000005500)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x401, @remote, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000180)='[', 0x1}], 0x1}}], 0x1, 0x0) 1.546755828s ago: executing program 5 (id=2569): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.527577676s ago: executing program 1 (id=2570): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.42415854s ago: executing program 3 (id=2571): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @empty, 0x4, 0x4000002}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 1.309407492s ago: executing program 6 (id=2572): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.284171313s ago: executing program 1 (id=2573): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x60, 0xe, 0x0, &(0x7f0000000240)="9daaad999f69c48373a1ee00001f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.270808966s ago: executing program 4 (id=2574): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030006ac0f"], 0x58}}, 0x0) 1.132801186s ago: executing program 3 (id=2575): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.002404158s ago: executing program 5 (id=2576): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x22, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@arp={0x806, @generic={0x312, 0xa00, 0x6, 0x0, 0xa, @broadcast, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}}}}, 0x0) 974.109589ms ago: executing program 4 (id=2577): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 892.879653ms ago: executing program 6 (id=2578): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 388.966701ms ago: executing program 4 (id=2579): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x11, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f0708"], 0x0}, 0x0) 386.311308ms ago: executing program 1 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20008000) 385.68127ms ago: executing program 3 (id=2580): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x50, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x8}}]}, 0xc4}}, 0x2c000010) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @private1, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x10, 0x80}}}}}}, 0x0) 303.47685ms ago: executing program 5 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 116.328496ms ago: executing program 3 (id=2582): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x5, 0x3, "82a8eb"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0xc0, 0x5, 0x6, "02bddd0033df"}, &(0x7f0000000540)={0x40, 0x5, 0x6, "5446ea3cfb17"}}) 116.11364ms ago: executing program 6 (id=2583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00028006"], 0x24}}, 0x0) 115.972441ms ago: executing program 1 (id=2584): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2585): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) kernel console output (not intermixed with test programs): , dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.414605][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.422892][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.432138][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.444716][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.453984][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.456450][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 355.471724][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.480948][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.489108][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.498358][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.506423][T11101] ldm_validate_partition_table(): Disk read failed. [ 355.527945][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.537245][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.557606][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.566895][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.577548][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.586834][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.601836][T11101] Dev loop9: unable to read RDB block 0 [ 355.628450][T11101] loop9: unable to read partition table [ 355.654081][T11101] loop9: partition table beyond EOD, truncated [ 355.678154][T11101] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 355.739177][T11107] loop1: detected capacity change from 0 to 1024 [ 355.785518][T11107] ext3: Unknown parameter 'noacl' [ 356.185401][ T5630] Bluetooth: hci3: command tx timeout [ 356.231119][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 356.248398][ T89] team0 (unregistering): Port device team_slave_1 removed [ 356.305181][ T89] team0 (unregistering): Port device team_slave_0 removed [ 356.548608][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 356.946852][T11131] loop3: detected capacity change from 0 to 128 [ 356.975341][ T30] audit: type=1326 audit(1778296339.644:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.040446][T11131] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 357.074348][T11131] hpfs: filesystem error: improperly stopped [ 357.085466][T11131] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 357.104818][ T30] audit: type=1326 audit(1778296339.644:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.113169][T11131] hpfs: You really don't want any checks? You are crazy... [ 357.192594][T11131] hpfs: hpfs_map_sector(): read error [ 357.209262][T11131] hpfs: code page support is disabled [ 357.226325][ T30] audit: type=1326 audit(1778296339.694:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.239863][T11131] hpfs: hpfs_map_4sectors(): unaligned read [ 357.323177][T11131] hpfs: hpfs_map_4sectors(): unaligned read [ 357.350246][ T30] audit: type=1326 audit(1778296339.694:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.359116][T11131] hpfs: filesystem error: unable to find root dir [ 357.484807][ T30] audit: type=1326 audit(1778296339.724:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.544321][ T30] audit: type=1326 audit(1778296339.724:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.569802][ T30] audit: type=1326 audit(1778296339.724:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.601260][ T30] audit: type=1326 audit(1778296339.724:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.629455][ T30] audit: type=1326 audit(1778296339.724:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.840460][ T30] audit: type=1326 audit(1778296339.724:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.4.1952" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f5ca319cdd9 code=0x7ffc0000 [ 357.894539][T11153] loop5: detected capacity change from 0 to 1024 [ 358.065506][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.106105][T11153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 358.113626][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.133023][T11153] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.210062][T10928] bridge_slave_0: entered allmulticast mode [ 358.228547][T11153] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1958: lblock 3 mapped to illegal pblock 3 (length 1) [ 358.263575][T10928] bridge_slave_0: entered promiscuous mode [ 358.302687][ T5631] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 358.318745][T11153] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.1958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.327121][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.398830][T11171] loop8: detected capacity change from 0 to 7 [ 358.429531][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.465490][T10928] bridge_slave_1: entered allmulticast mode [ 358.468686][ T5631] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.502469][T10928] bridge_slave_1: entered promiscuous mode [ 358.518204][T11171] loop8: [POWERTEC] [ 358.529070][ T5631] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.570667][ T5631] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.632131][ T5631] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 358.680916][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 358.695991][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.722203][T10928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.792882][T11164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 358.817634][T10928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.863953][T11181] loop3: detected capacity change from 0 to 64 [ 358.993893][T11181] hfs: request for non-existent node 131072 in B*Tree [ 359.045082][T11181] hfs: request for non-existent node 131072 in B*Tree [ 359.191494][T10928] team0: Port device team_slave_0 added [ 359.238352][T10928] team0: Port device team_slave_1 added [ 359.486676][T11192] loop3: detected capacity change from 0 to 64 [ 359.544254][T10928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.874246][T11194] loop5: detected capacity change from 0 to 32768 [ 359.884308][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.910879][T10928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.937495][ T5631] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 359.941665][T11194] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 359.950413][ T5631] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input31 [ 359.980799][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 360.034386][T11194] XFS (loop5): Starting recovery (logdev: internal) [ 360.059717][T11194] XFS (loop5): Metadata CRC error detected at xfs_refcountbt_read_verify+0x26/0xe0, xfs_refcountbt block 0x8 [ 360.071684][T11194] XFS (loop5): Unmount and run xfs_repair [ 360.077431][T11194] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 360.086497][T11194] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff R3FC............ [ 360.095397][T11194] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 360.104579][T11194] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 360.113551][T11194] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 360.118033][T10928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.122455][T11194] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 360.122496][T11194] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.122534][T11194] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.122571][T11194] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.167222][T11194] XFS (loop5): Filesystem has been shut down due to log error (0x2). [ 360.175358][T11194] XFS (loop5): Please unmount the filesystem and rectify the problem(s). [ 360.184837][T11194] XFS (loop5): log mount/recovery failed: error -74 [ 360.207110][T11194] XFS (loop5): log mount failed [ 360.246883][ T5631] usb 5-1: USB disconnect, device number 12 [ 360.253011][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 360.264514][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.358524][T10928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.603814][ T57] tipc: Subscription rejected, illegal request [ 360.650604][T10928] hsr_slave_0: entered promiscuous mode [ 360.672818][T10928] hsr_slave_1: entered promiscuous mode [ 360.693229][T10928] debugfs: 'hsr0' already exists in 'hsr' [ 360.699337][T10928] Cannot create hsr debugfs directory [ 361.017301][T11212] loop4: detected capacity change from 0 to 128 [ 361.046817][T11211] loop3: detected capacity change from 0 to 1024 [ 361.108892][T11211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.140806][T11187] loop0: detected capacity change from 0 to 32768 [ 361.187336][T11212] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.253026][T11212] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.424377][T11187] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.695565][T11187] XFS (loop0): Ending clean mount [ 361.807429][ T5626] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.832776][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.173463][ T5621] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 362.237698][T11242] loop4: detected capacity change from 0 to 2048 [ 362.326765][T11244] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.785809][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.111861][T11242] Remounting filesystem read-only [ 363.149674][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.244048][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.266586][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.343109][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.371844][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.410746][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.449379][T11242] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 363.509186][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 363.509212][ T30] audit: type=1800 audit(1778296346.174:51): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1975" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 363.690710][ T5626] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 365.332892][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 365.420553][T11316] netem: change failed [ 365.531920][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.560277][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.598046][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 365.622846][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.675531][ T24] usb 5-1: Product: syz [ 365.690252][ T24] usb 5-1: Manufacturer: syz [ 365.713158][ T24] usb 5-1: SerialNumber: syz [ 365.748144][ T24] usb 5-1: config 0 descriptor?? [ 365.873467][T11330] loop5: detected capacity change from 0 to 256 [ 365.906811][T11330] exfat: Deprecated parameter 'utf8' [ 365.956364][T11330] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 366.093416][ T30] audit: type=1800 audit(1778296348.764:52): pid=11330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2005" name="file1" dev="loop5" ino=1048704 res=0 errno=0 [ 366.124493][ T24] usb 5-1: USB disconnect, device number 13 [ 366.244521][T10928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.257676][T11339] loop3: detected capacity change from 0 to 512 [ 366.302238][T11339] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.336355][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.336861][T11339] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.373223][T10928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.387702][T11339] EXT4-fs: Ignoring removed oldalloc option [ 366.429306][T11339] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.450874][T11339] EXT4-fs (loop3): Test dummy encryption mode enabled [ 366.467576][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.488022][T11339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 366.503870][T10928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.563002][T11339] EXT4-fs (loop3): 1 truncate cleaned up [ 366.569164][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.592429][T10928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.614986][T11339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.635102][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.034494][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.046142][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.173357][T10928] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.313231][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.320453][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.410640][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.417899][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.588207][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2018'. [ 367.931453][ T2165] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 368.014927][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 368.046584][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 368.120430][ T2165] usb 6-1: Using ep0 maxpacket: 8 [ 368.139543][ T2165] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 368.142415][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 368.181042][ T2165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.219426][ T2165] usb 6-1: Product: syz [ 368.237811][ T2165] usb 6-1: Manufacturer: syz [ 368.255893][ T2165] usb 6-1: SerialNumber: syz [ 368.285708][ T2165] usb 6-1: config 0 descriptor?? [ 368.351409][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 368.384441][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 368.419369][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.448556][ T9] usb 5-1: Product: syz [ 368.463751][ T9] usb 5-1: Manufacturer: syz [ 368.487279][ T9] usb 5-1: SerialNumber: syz [ 368.502253][ T5952] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 368.523365][ T2165] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 368.523434][ T9] usb 5-1: config 0 descriptor?? [ 368.569076][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 368.605705][ T2165] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 368.638113][ T2165] usb 6-1: USB disconnect, device number 17 [ 368.692000][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 368.710247][ T5952] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 368.731551][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.754388][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.764546][ T5952] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 368.773741][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.790318][ T5952] usb 2-1: config 0 descriptor?? [ 368.945043][T11411] loop3: detected capacity change from 0 to 256 [ 369.007003][T11411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 369.269551][ T5952] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 369.301439][ T5952] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 369.336041][ T5952] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 369.363575][ T5952] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 369.405617][ T5952] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 369.414782][T11420] loop3: detected capacity change from 0 to 16 [ 369.431641][ T9] gspca_ov534_9: reg_w failed -71 [ 369.440732][T11420] erofs (device loop3): mounted with root inode @ nid 36. [ 369.455542][ T5952] logitech 0003:046D:C29C.0014: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 369.462992][T10928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.711101][ T5952] logitech 0003:046D:C29C.0014: no inputs found [ 369.741303][ T9] gspca_ov534_9: Unknown sensor 0000 [ 369.741394][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 369.776224][ T5952] usb 2-1: USB disconnect, device number 13 [ 369.847915][ T9] usb 5-1: USB disconnect, device number 14 [ 370.613866][T11446] input: syz0 as /devices/virtual/input/input32 [ 370.646409][T10928] veth0_vlan: entered promiscuous mode [ 370.714192][T10928] veth1_vlan: entered promiscuous mode [ 370.937829][T10928] veth0_macvtap: entered promiscuous mode [ 370.994245][T10928] veth1_macvtap: entered promiscuous mode [ 371.109482][T10928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.191392][T10928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.220093][T11469] loop4: detected capacity change from 0 to 64 [ 371.257165][ T1160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.293382][ T1160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.350178][ T1160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.388516][ T1160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.893347][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.914269][T11478] netlink: 'syz.0.2057': attribute type 14 has an invalid length. [ 371.928798][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.177303][T11484] loop5: detected capacity change from 0 to 256 [ 372.220916][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.236693][T11484] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 372.264801][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.651959][T11497] loop4: detected capacity change from 0 to 512 [ 372.768517][T11497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 373.006610][T11497] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 373.330762][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.678675][T11525] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2059'. [ 373.737857][T11528] loop6: detected capacity change from 0 to 512 [ 373.767334][T11528] EXT4-fs: Ignoring removed nobh option [ 373.795847][T11528] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 373.849737][T11528] EXT4-fs (loop6): 1 truncate cleaned up [ 373.858811][T11528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.943858][T10928] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.381835][ T2165] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 374.551390][ T2165] usb 7-1: Using ep0 maxpacket: 16 [ 374.576716][ T2165] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 374.615243][ T2165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.642734][ T2165] usb 7-1: Product: syz [ 374.650892][ T2165] usb 7-1: Manufacturer: syz [ 374.667283][ T2165] usb 7-1: SerialNumber: syz [ 374.688165][ T2165] usb 7-1: config 0 descriptor?? [ 375.058097][T11538] loop1: detected capacity change from 0 to 32768 [ 375.135662][ T2165] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 375.201795][ T2165] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.250985][ T2165] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 375.276315][ T2165] usb 7-1: media controller created [ 375.360391][ T2165] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.361529][T11558] block nbd4: server does not support multiple connections per device. [ 375.402498][T11558] block nbd4: shutting down sockets [ 375.506127][ T2165] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 375.545281][ T2165] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 375.748164][T11564] loop5: detected capacity change from 0 to 2048 [ 375.815204][T11564] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 375.848640][ T2165] usb 7-1: USB disconnect, device number 10 [ 375.880185][T11564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.069652][ T2165] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 376.411534][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 376.593475][ T24] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.635393][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 376.658600][ T24] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 376.670171][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.687596][ T24] usb 2-1: config 0 descriptor?? [ 377.065408][ T5952] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 377.148508][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.166526][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.185178][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.203455][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.216412][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.246178][ T5952] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 377.261552][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.280789][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.290968][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.298616][ T5952] usb 7-1: Product: syz [ 377.307310][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.318200][ T5952] usb 7-1: Manufacturer: syz [ 377.327873][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.335417][ T5952] usb 7-1: SerialNumber: syz [ 377.355820][ T24] greenasia 0003:0E8F:0012.0015: unknown main item tag 0x0 [ 377.403524][ T24] greenasia 0003:0E8F:0012.0015: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 377.429132][ T24] greenasia 0003:0E8F:0012.0015: no inputs found [ 377.466190][ T24] usb 2-1: USB disconnect, device number 14 [ 377.750823][ T5952] rtl8150 7-1:1.0: couldn't reset the device [ 377.776117][ T5952] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 377.827413][ T5952] usb 7-1: USB disconnect, device number 11 [ 377.840604][T11601] fido_id[11601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 377.954422][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.960836][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.636526][T11631] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.651574][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2112'. [ 379.871343][ T5758] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 380.000410][T11656] loop0: detected capacity change from 0 to 128 [ 380.002860][T11659] loop3: detected capacity change from 0 to 512 [ 380.074522][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.085676][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 380.093406][ T5758] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 380.099860][T11656] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.102999][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.126921][ T5758] usb 5-1: config 0 descriptor?? [ 380.137819][T11656] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.180487][T11659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.209887][T11659] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.273034][T11659] EXT4-fs warning (device loop3): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 380.350576][T11661] loop5: detected capacity change from 0 to 4096 [ 380.444015][T11661] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0002] [ 380.473464][T11661] System zones: 0-5 [ 380.506673][T11661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.527621][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.566300][ T5621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.594167][ T5758] greenasia 0003:0E8F:0012.0016: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 380.648178][ T5758] greenasia 0003:0E8F:0012.0016: no inputs found [ 380.695243][T11661] EXT4-fs (loop5): shut down requested (1) [ 380.950013][ T5758] usb 5-1: USB disconnect, device number 15 [ 381.054256][T11671] fido_id[11671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 381.217119][T11680] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 381.406392][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.572228][ T30] audit: type=1326 audit(1778296364.234:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 381.694168][ T30] audit: type=1326 audit(1778296364.234:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 381.727028][T11693] IPv6: Can't replace route, no match found [ 381.819787][ T30] audit: type=1326 audit(1778296364.264:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 381.957371][ T30] audit: type=1326 audit(1778296364.264:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 382.033915][T11698] input: syz1 as /devices/virtual/input/input33 [ 382.067084][T11701] netlink: 'syz.4.2131': attribute type 10 has an invalid length. [ 382.080465][ T30] audit: type=1326 audit(1778296364.264:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 382.093827][T11705] loop5: detected capacity change from 0 to 256 [ 382.173959][T11701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.189097][T11705] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 382.205396][ T30] audit: type=1326 audit(1778296364.264:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 382.232555][T11709] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2131'. [ 382.302772][T11701] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 382.316771][ T30] audit: type=1326 audit(1778296364.264:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 382.420781][ T30] audit: type=1326 audit(1778296364.264:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.3.2125" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b199cdd9 code=0x7ffc0000 [ 382.562372][ T30] audit: type=1800 audit(1778296365.054:61): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2132" name="file2" dev="loop5" ino=1048716 res=0 errno=0 [ 382.619658][T11709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.648153][T11705] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 382.674664][T11709] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 382.694429][T11705] exFAT-fs (loop5): Filesystem has been set read-only [ 382.722319][T11709] bond0 (unregistering): Released all slaves [ 383.270557][T11728] loop1: detected capacity change from 0 to 64 [ 383.520246][T11717] syz.3.2136 (11717) used greatest stack depth: 18864 bytes left [ 383.709120][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.858208][T11737] loop0: detected capacity change from 0 to 512 [ 383.910371][T11737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.983318][T11737] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.2144: invalid indirect mapped block 256 (level 2) [ 384.034475][T11737] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 384.041244][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 384.056921][ C1] EXT4-fs (loop0): initial error at time 1778296366: ext4_free_branches:1020: inode 11 [ 384.062739][T11737] EXT4-fs (loop0): 2 truncates cleaned up [ 384.066647][ C1] EXT4-fs (loop0): last error at time 1778296366: ext4_free_branches:1020: inode 11 [ 384.105896][T11737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.354892][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 384.440159][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 384.488749][T11750] input: syz1 as /devices/virtual/input/input34 [ 384.490038][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 384.490038][ T12] [ 384.557552][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 384.582554][ T12] EXT4-fs (loop0): Free/Dirty block details [ 384.609018][ T12] EXT4-fs (loop0): free_blocks=0 [ 384.621551][ T12] EXT4-fs (loop0): dirty_blocks=0 [ 384.641311][ T12] EXT4-fs (loop0): Block reservation details [ 384.665954][ T12] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 384.695989][ T5621] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 384.755837][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.782354][T11754] dummy0: entered allmulticast mode [ 384.867450][T11754] dummy0: left allmulticast mode [ 385.193904][T11741] loop6: detected capacity change from 0 to 32768 [ 385.304594][T11766] loop4: detected capacity change from 0 to 4096 [ 385.331072][T11766] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0002] [ 385.340439][T11766] System zones: 0-5 [ 385.344793][T11741] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 385.372863][ T30] audit: type=1326 audit(1778296368.034:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11763 comm="syz.0.2158" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7fc00000 [ 385.375568][T11766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.446134][T11766] EXT4-fs (loop4): shut down requested (1) [ 385.514244][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.956006][T11745] loop1: detected capacity change from 0 to 32768 [ 386.056013][T11745] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 386.230223][T11745] XFS (loop1): Ending clean mount [ 386.261514][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 386.651328][ T5623] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 386.749520][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 386.749547][ T30] audit: type=1326 audit(1778296369.414:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 386.823286][ T30] audit: type=1326 audit(1778296369.414:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 386.856507][ T30] audit: type=1326 audit(1778296369.454:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 386.921586][ T30] audit: type=1326 audit(1778296369.454:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 386.950288][T11796] No memory to map [ 386.998162][ T30] audit: type=1326 audit(1778296369.454:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 387.093726][ T30] audit: type=1326 audit(1778296369.454:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 387.206745][T11773] loop5: detected capacity change from 0 to 32768 [ 387.231051][ T30] audit: type=1326 audit(1778296369.454:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 387.262118][T11799] loop0: detected capacity change from 0 to 512 [ 387.274513][T11773] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2160 (11773) [ 387.302705][T10928] ocfs2: Unmounting device (7,6) on (node local) [ 387.311936][T11773] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 387.323759][T11799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 387.371414][ T30] audit: type=1326 audit(1778296369.454:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 387.380070][T11799] EXT4-fs (loop0): orphan file too big: 4294967295 [ 387.446126][T11799] EXT4-fs (loop0): mount failed [ 387.455047][ T30] audit: type=1326 audit(1778296369.454:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.0.2165" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 387.480446][ T30] audit: type=1800 audit(1778296369.564:81): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2146" name="file2" dev="loop6" ino=17059 res=0 errno=0 [ 387.493207][T11773] BTRFS info (device loop5): using blake2b checksum algorithm [ 387.775718][T11773] BTRFS info (device loop5): enabling ssd optimizations [ 387.804125][T11773] BTRFS info (device loop5): turning on async discard [ 387.821340][T11773] BTRFS info (device loop5): enabling free space tree [ 388.721417][T11833] loop3: detected capacity change from 0 to 128 [ 388.936622][ T5624] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 389.242655][T11820] loop4: detected capacity change from 0 to 32768 [ 389.899081][T11851] loop5: detected capacity change from 0 to 512 [ 389.983514][T11851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.060130][T11851] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2183: iget: bad i_size value: 38620345925642 [ 390.147699][T11851] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.151242][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 390.166944][ C1] EXT4-fs (loop5): initial error at time 1778296372: ext4_orphan_get:1397: inode 15 [ 390.176419][ C1] EXT4-fs (loop5): last error at time 1778296372: ext4_orphan_get:1397: inode 15 [ 390.210386][T11851] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2183: couldn't read orphan inode 15 (err -117) [ 390.241633][T11851] loop5: lost filesystem error report for type 5 error -117 [ 390.290009][T11851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.534029][T11863] loop0: detected capacity change from 0 to 2048 [ 390.541379][T11864] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.2183: bg 0: block 5: invalid block bitmap [ 390.582365][T11863] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 390.670256][T11863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.685486][T11864] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 390.754671][T11864] EXT4-fs (loop5): This should not happen!! Data will be lost [ 390.754671][T11864] [ 390.832461][T11864] EXT4-fs (loop5): Total free blocks count 0 [ 390.862891][T11864] EXT4-fs (loop5): Free/Dirty block details [ 390.888703][T11864] EXT4-fs (loop5): free_blocks=0 [ 390.916971][T11864] EXT4-fs (loop5): dirty_blocks=124 [ 390.933141][T11864] EXT4-fs (loop5): Block reservation details [ 390.950814][T11864] EXT4-fs (loop5): i_reserved_data_blocks=124 [ 391.222770][T11879] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.239438][ T152] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 120 with max blocks 4 with error 28 [ 391.285537][T11846] loop3: detected capacity change from 0 to 32768 [ 391.347227][ T5624] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 391.830655][T11889] loop1: detected capacity change from 0 to 128 [ 391.945729][T11885] loop5: detected capacity change from 0 to 4096 [ 392.470780][T11896] loop6: detected capacity change from 0 to 512 [ 392.497694][T11896] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 392.527171][T11896] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2200: bad orphan inode 131083 [ 392.554018][T11896] loop6: lost filesystem error report for type 5 error -117 [ 392.563074][T11896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.627972][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 392.627999][ T30] audit: type=1326 audit(1778296375.294:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.736102][T11896] EXT4-fs error (device loop6): ext4_empty_dir:3124: inode #2: block 13: comm syz.6.2200: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 392.743086][ T30] audit: type=1326 audit(1778296375.344:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.795555][ T30] audit: type=1326 audit(1778296375.354:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.822855][ T30] audit: type=1326 audit(1778296375.354:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.849502][ T30] audit: type=1326 audit(1778296375.354:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.875220][ T30] audit: type=1326 audit(1778296375.354:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.939343][ T30] audit: type=1326 audit(1778296375.364:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 392.970303][T10928] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.029171][ T30] audit: type=1326 audit(1778296375.394:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 393.113600][ T30] audit: type=1326 audit(1778296375.394:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 393.119792][T11902] loop4: detected capacity change from 0 to 256 [ 393.175671][T11902] exfat: Deprecated parameter 'utf8' [ 393.190120][T11904] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 393.215457][ T30] audit: type=1326 audit(1778296375.404:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2199" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f173799cdd9 code=0x7ffc0000 [ 393.255949][T11902] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 394.324560][T11931] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.934771][T11948] netlink: 'syz.1.2220': attribute type 1 has an invalid length. [ 395.245348][T11953] netlink: 'syz.6.2221': attribute type 10 has an invalid length. [ 395.269326][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.288382][T11953] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 395.356249][T11953] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2221'. [ 395.461552][ T5772] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 395.471853][T11953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.504876][T11953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.531921][T11953] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 395.562680][T11953] bond0 (unregistering): Released all slaves [ 395.631283][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 395.648201][ T5772] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.678864][ T5772] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.711038][ T5772] usb 2-1: config 0 interface 0 has no altsetting 0 [ 395.728094][ T5772] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 395.747804][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.776752][ T5772] usb 2-1: config 0 descriptor?? [ 396.044812][T11965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 396.069952][T11965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.100545][T11965] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 396.126910][T11965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.148882][T11965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.162975][T11965] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 396.163387][T11972] loop6: detected capacity change from 0 to 128 [ 396.253220][T11965] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 396.280688][T11972] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.330104][T11972] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.371605][T11954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.416207][T11954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.693494][ T5772] hid_parser_main: 66 callbacks suppressed [ 396.693548][ T5772] hid-corsair-void 0003:1B1C:1B25.0017: unknown main item tag 0x0 [ 396.741710][ T5630] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 396.750173][ T5772] hid-corsair-void 0003:1B1C:1B25.0017: unknown main item tag 0x1 [ 396.750212][ T5772] hid-corsair-void 0003:1B1C:1B25.0017: item fetching failed at offset 4/5 [ 396.750849][ T5772] hid-corsair-void 0003:1B1C:1B25.0017: parse failed (reason: -22) [ 396.750962][ T5772] hid-corsair-void 0003:1B1C:1B25.0017: probe with driver hid-corsair-void failed with error -22 [ 396.958315][T10928] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.992395][ T5758] usb 2-1: USB disconnect, device number 15 [ 397.316367][T11991] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.2238'. [ 397.578033][T11997] loop6: detected capacity change from 0 to 256 [ 397.640849][T11997] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x142f93c7, utbl_chksum : 0xe619d30d) [ 397.711147][T12002] binder: BC_ATTEMPT_ACQUIRE not supported [ 397.744859][T12002] binder: 12001:12002 ioctl c0306201 200000000180 returned -22 [ 398.101987][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 398.102011][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 398.102054][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 398.182004][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.188486][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 398.631957][T11995] loop4: detected capacity change from 0 to 32768 [ 398.744253][T12028] loop6: detected capacity change from 0 to 128 [ 398.802417][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2256'. [ 398.838387][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2256'. [ 398.879713][T12028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 398.914230][T12028] System zones: 1-3, 19-19, 35-36 [ 398.922740][T12028] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 398.943969][T12028] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 399.259246][T10928] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.496853][T12042] loop5: detected capacity change from 0 to 128 [ 399.770391][T12048] loop0: detected capacity change from 0 to 1024 [ 399.902401][T12048] hfsplus: can't free extent: start 2889, count 1 [ 400.014248][T12052] loop4: detected capacity change from 0 to 128 [ 400.064722][T12052] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 400.117110][T12052] hpfs: filesystem error: improperly stopped [ 400.150457][T12052] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 400.188920][T12052] hpfs: You really don't want any checks? You are crazy... [ 400.214810][T12052] hpfs: Code page index out of array [ 400.241295][T12052] hpfs: code page support is disabled [ 400.267638][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.291082][T12052] hpfs: hpfs_map_4sectors(): unaligned read [ 400.302567][T12052] hpfs: hpfs_map_4sectors(): unaligned read [ 400.346597][T12052] hpfs: filesystem error: unable to find root dir [ 400.679682][T12061] loop3: detected capacity change from 0 to 128 [ 401.470031][T12054] loop6: detected capacity change from 0 to 32768 [ 401.487882][T12081] loop5: detected capacity change from 0 to 64 [ 401.511093][T12054] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 401.582264][T12054] XFS (loop6): Ending clean mount [ 401.588719][T12054] XFS (loop6): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x10 [ 401.603237][T12091] misc userio: Begin command sent, but we're already running [ 401.606145][T12054] XFS (loop6): Unmount and run xfs_repair [ 401.677652][T12054] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 401.714599][T12054] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 401.756698][T12054] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 401.785478][T12054] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 401.811520][T12054] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 401.850626][T12054] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 401.871634][T12054] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 401.884266][T12054] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 401.893768][T12054] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 401.907454][T12054] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x10 len 4 error 74 [ 401.948343][T12054] loop6: lost filesystem error report for type 5 error -117 [ 401.948515][T12054] XFS (loop6): Failed to initialize disk quotas, err -117. [ 402.111278][T12054] XFS (loop6): User initiated shutdown received. [ 402.125990][ T2165] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 402.142196][T12054] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 402.194814][T12054] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 402.268788][T12073] loop1: detected capacity change from 0 to 32768 [ 402.294319][ T2165] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 402.317522][ T2165] usb 4-1: config 0 has no interface number 0 [ 402.342112][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 402.348091][ T2165] usb 4-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 402.380075][T10928] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 402.387242][ T2165] usb 4-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 402.467656][ T2165] usb 4-1: config 0 interface 66 has no altsetting 0 [ 402.497557][ T2165] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.557563][ T2165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.631273][ T2165] usb 4-1: config 0 descriptor?? [ 402.651115][ T2165] cp210x 4-1:0.66: cp210x converter detected [ 403.029709][T12111] loop6: detected capacity change from 0 to 512 [ 403.065028][ T2165] cp210x 4-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 403.076485][T12111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.101765][ T2165] usb 4-1: cp210x converter now attached to ttyUSB0 [ 403.126434][T12111] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2286: iget: bad i_size value: 38620345925642 [ 403.144450][ T2165] usb 4-1: USB disconnect, device number 18 [ 403.155308][T12111] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.158230][T12111] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.2286: couldn't read orphan inode 15 (err -117) [ 403.167594][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 403.167631][ C1] EXT4-fs (loop6): initial error at time 1778296385: ext4_orphan_get:1397: inode 15 [ 403.167688][ C1] EXT4-fs (loop6): last error at time 1778296385: ext4_orphan_get:1397: inode 15 [ 403.185010][T12115] block nbd4: Unsupported socket: should be TCP or UNIX. [ 403.206649][T12111] loop6: lost filesystem error report for type 5 error -117 [ 403.282156][T12111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.339918][ T2165] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 403.392061][ T2165] cp210x 4-1:0.66: device disconnected [ 403.488607][T12121] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.2286: bg 0: block 5: invalid block bitmap [ 403.545579][T12121] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 403.652557][T12121] EXT4-fs (loop6): This should not happen!! Data will be lost [ 403.652557][T12121] [ 403.688319][T12121] EXT4-fs (loop6): Total free blocks count 0 [ 403.727194][T12121] EXT4-fs (loop6): Free/Dirty block details [ 403.761461][T12121] EXT4-fs (loop6): free_blocks=0 [ 403.788708][T12121] EXT4-fs (loop6): dirty_blocks=184 [ 403.798852][T12123] loop5: detected capacity change from 0 to 2048 [ 403.811064][T12121] EXT4-fs (loop6): Block reservation details [ 403.834543][T12121] EXT4-fs (loop6): i_reserved_data_blocks=184 [ 403.840712][T12123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.042246][T10928] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 404.077325][T10928] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.354833][T12142] loop6: detected capacity change from 0 to 256 [ 404.382836][T12142] exfat: Deprecated parameter 'namecase' [ 404.407540][T12142] exfat: Deprecated parameter 'namecase' [ 404.433480][T12142] exfat: Deprecated parameter 'namecase' [ 404.489042][T12142] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 405.137693][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 405.162365][ T5772] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 405.293732][T12139] loop3: detected capacity change from 0 to 32768 [ 405.324359][T12139] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 405.334316][ T5772] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 405.354944][T12165] loop0: detected capacity change from 0 to 512 [ 405.362739][ T5772] usb 2-1: config 0 has no interface number 0 [ 405.372331][ T5772] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.388443][ T5772] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 405.399567][T12139] JBD2: Ignoring recovery information on journal [ 405.409985][T12165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 405.412732][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.426981][ T5772] usb 2-1: Product: syz [ 405.431263][ T5772] usb 2-1: Manufacturer: syz [ 405.435968][ T5772] usb 2-1: SerialNumber: syz [ 405.483134][ T5772] usb 2-1: config 0 descriptor?? [ 405.502923][T12139] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 405.510418][T12165] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2312: iget: bad i_size value: 38620345925642 [ 405.522593][ T5772] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 405.623416][T12165] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.624063][T12165] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.2312: couldn't read orphan inode 15 (err -117) [ 405.633404][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 405.633435][ C1] EXT4-fs (loop0): initial error at time 1778296388: ext4_orphan_get:1397: inode 15 [ 405.633492][ C1] EXT4-fs (loop0): last error at time 1778296388: ext4_orphan_get:1397: inode 15 [ 405.683932][T12165] loop0: lost filesystem error report for type 5 error -117 [ 405.694518][T12165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.853429][ T5758] usb 2-1: USB disconnect, device number 16 [ 405.897207][ T5758] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 405.908626][T12172] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.2312: bg 0: block 5: invalid block bitmap [ 405.946067][T12139] OCFS2: ERROR (device loop3): ocfs2_validate_gd_self: Group descriptor #32 has an invalid fs_generation of #1 [ 405.965219][T12172] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 208 with error 28 [ 405.982813][T12139] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 405.994229][T12139] OCFS2: File system is now read-only. [ 406.006535][T12172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 406.006535][T12172] [ 406.021064][T12139] (syz.3.2300,12139,1):ocfs2_search_chain:1913 ERROR: status = -30 [ 406.039516][T12139] (syz.3.2300,12139,1):ocfs2_search_chain:2036 ERROR: status = -30 [ 406.062071][T12172] EXT4-fs (loop0): Total free blocks count 0 [ 406.069390][T12139] (syz.3.2300,12139,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 406.087383][T12172] EXT4-fs (loop0): Free/Dirty block details [ 406.103211][T12139] (syz.3.2300,12139,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 406.114197][T12172] EXT4-fs (loop0): free_blocks=0 [ 406.121661][T12172] EXT4-fs (loop0): dirty_blocks=212 [ 406.128574][T12139] (syz.3.2300,12139,1):__ocfs2_claim_clusters:2557 ERROR: status = -30 [ 406.148621][T12172] EXT4-fs (loop0): Block reservation details [ 406.162089][T12139] (syz.3.2300,12139,1):__ocfs2_claim_clusters:2565 ERROR: status = -30 [ 406.186107][T12172] EXT4-fs (loop0): i_reserved_data_blocks=212 [ 406.201766][T12139] (syz.3.2300,12139,1):ocfs2_local_alloc_new_window:1197 ERROR: status = -30 [ 406.236983][T12139] (syz.3.2300,12139,1):ocfs2_local_alloc_new_window:1222 ERROR: status = -30 [ 406.281350][T12139] (syz.3.2300,12139,1):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30 [ 406.318705][T12139] (syz.3.2300,12139,1):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 406.365824][T12139] (syz.3.2300,12139,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 406.394959][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 208 with max blocks 4 with error 28 [ 406.409653][T12139] (syz.3.2300,12139,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 406.465742][T12139] (syz.3.2300,12139,1):ocfs2_reserve_clusters_with_limit:1266 ERROR: status = -30 [ 406.487417][ T5621] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 406.518731][T12139] (syz.3.2300,12139,1):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -30 [ 406.550113][T12182] loop6: detected capacity change from 0 to 128 [ 406.550405][T12139] (syz.3.2300,12139,1):ocfs2_symlink:1924 ERROR: status = -30 [ 406.615095][T12139] (syz.3.2300,12139,1):ocfs2_symlink:2078 ERROR: status = -30 [ 406.817349][T12186] loop0: detected capacity change from 0 to 256 [ 406.917487][T12186] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 407.042979][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 407.043006][ T30] audit: type=1800 audit(1778296389.714:205): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2318" name="file2" dev="loop0" ino=1048733 res=0 errno=0 [ 407.136549][T12186] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 407.144986][T12186] exFAT-fs (loop0): Filesystem has been set read-only [ 407.211541][T12176] loop4: detected capacity change from 0 to 32768 [ 407.271930][ T2165] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 407.295989][T12176] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 407.332224][ T5622] ocfs2: Unmounting device (7,3) on (node local) [ 407.368894][T12176] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 407.484587][ T2165] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 407.536852][ T2165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.592562][T12194] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2324'. [ 407.609301][ T2165] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 407.649475][ T2165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.695900][ T2165] usb 2-1: Product: syz [ 407.722351][ T2165] usb 2-1: Manufacturer: syz [ 407.746726][ T2165] usb 2-1: SerialNumber: syz [ 407.814323][ T2165] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input36 [ 407.995380][ T4972] bcm5974 2-1:1.0: could not read from device [ 408.080013][ T30] audit: type=1800 audit(1778296390.744:206): pid=12176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2315" name="file2" dev="loop4" ino=17059 res=0 errno=0 [ 408.145354][ T2165] bcm5974 2-1:1.0: could not read from device [ 408.262244][ T4972] bcm5974 2-1:1.0: could not read from device [ 408.351816][ T2165] input: failed to attach handler mousedev to device input36, error: -5 [ 408.373407][ T5626] ocfs2: Unmounting device (7,4) on (node local) [ 408.466950][ T2165] usb 2-1: USB disconnect, device number 17 [ 408.467570][ T4972] bcm5974 2-1:1.0: could not read from device [ 408.536713][ T4972] bcm5974 2-1:1.0: could not read from device [ 409.053896][T12224] loop1: detected capacity change from 0 to 256 [ 409.072417][ T5772] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 409.081812][T12224] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 409.143695][ T30] audit: type=1800 audit(1778296391.814:207): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2336" name="file2" dev="loop1" ino=1048734 res=0 errno=0 [ 409.155972][T12227] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2337'. [ 409.184776][ T5771] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 409.187362][T12227] netlink: 'syz.6.2337': attribute type 1 has an invalid length. [ 409.223893][T12224] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 409.246284][T12224] exFAT-fs (loop1): Filesystem has been set read-only [ 409.272693][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 409.311374][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.367422][ T5771] usb 5-1: Using ep0 maxpacket: 32 [ 409.377796][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.394783][T12232] loop5: detected capacity change from 0 to 128 [ 409.401766][ T5771] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 409.421937][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.444937][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.470501][ T5772] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.480566][T12232] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.490818][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.518359][ T5771] usb 5-1: config 0 descriptor?? [ 409.538904][ T5772] usb 4-1: config 0 descriptor?? [ 409.570437][T12232] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.629817][T12236] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2341'. [ 409.764552][ T5771] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 409.832804][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.866441][ T5771] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 409.905693][ T5771] usb 5-1: media controller created [ 409.929241][ T5624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.019411][ T5772] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 410.040270][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.056988][ T5772] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 410.073653][ T5772] microsoft 0003:045E:07DA.0018: implement() called with n (152) > 32! (kworker/0:5) [ 410.190272][ T5771] az6027: usb out operation failed. (-71) [ 410.199243][ T5772] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 410.217946][ T5771] az6027: usb out operation failed. (-71) [ 410.229664][ T5771] stb0899_attach: Driver disabled by Kconfig [ 410.248230][ T5771] az6027: no front-end attached [ 410.248230][ T5771] [ 410.262094][ T5772] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 410.295979][ T5771] az6027: usb out operation failed. (-71) [ 410.306370][ T5772] microsoft 0003:045E:07DA.0018: no inputs found [ 410.316251][ T5771] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 410.330182][ T5772] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 410.358088][ T5771] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 410.413078][ T5771] dvb-usb: schedule remote query interval to 400 msecs. [ 410.439624][ T5772] usb 4-1: USB disconnect, device number 19 [ 410.450048][ T5771] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 410.499755][ T5771] usb 5-1: USB disconnect, device number 16 [ 410.667960][T12250] fido_id[12250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 410.796346][ T5771] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 411.731586][ T5758] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 411.912554][ T5758] usb 2-1: Using ep0 maxpacket: 16 [ 411.940874][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.992030][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.028024][T12258] loop4: detected capacity change from 0 to 40427 [ 412.038640][ T5758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.057469][T12258] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 412.096844][T12258] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 412.098826][ T5758] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.137637][T12258] F2FS-fs (loop4): build fault injection rate: 17008 [ 412.159546][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.167758][T12258] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 412.218154][T12258] F2FS-fs (loop4): invalid crc value [ 412.236746][ T5758] usb 2-1: config 0 descriptor?? [ 412.387903][T12283] loop3: detected capacity change from 0 to 2048 [ 412.437919][T12283] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 412.536348][T12283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.597715][T12258] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 412.704296][T12258] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 412.715877][T12258] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 412.732514][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.756874][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.780280][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.808190][T12270] loop6: detected capacity change from 0 to 32768 [ 412.822916][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.844950][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.859776][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.886065][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.922024][T12270] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 412.943370][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.991030][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 412.998293][T12270] XFS (loop6): Ending clean mount [ 413.027319][ T5626] syz-executor: attempt to access beyond end of device [ 413.027319][ T5626] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 413.054853][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 413.054914][ T5626] Tainted: [L]=SOFTLOCKUP [ 413.054925][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.054945][ T5626] Call Trace: [ 413.054957][ T5626] [ 413.054970][ T5626] dump_stack_lvl+0x100/0x190 [ 413.055017][ T5626] f2fs_stop_checkpoint+0x600/0x9b0 [ 413.055078][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.055124][ T5626] ? errseq_set+0xe3/0x150 [ 413.055164][ T5626] ? errseq_set+0xe3/0x150 [ 413.055200][ T5626] f2fs_write_end_io+0xf59/0x1340 [ 413.055243][ T5626] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 413.055291][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.055344][ T5626] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 413.055381][ T5626] bio_endio+0x78f/0x8f0 [ 413.055434][ T5626] submit_bio_noacct+0x64c/0x2000 [ 413.055486][ T5626] f2fs_submit_write_bio+0x135/0x340 [ 413.055547][ T5626] __submit_merged_bio+0x331/0x780 [ 413.055595][ T5626] __submit_merged_write_cond+0x3fe/0x510 [ 413.055643][ T5626] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 413.055696][ T5626] ? __pfx___might_resched+0x10/0x10 [ 413.055750][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.055805][ T5626] f2fs_write_cache_pages+0x20e9/0x2630 [ 413.055879][ T5626] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 413.055945][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.055992][ T5626] ? __lock_acquire+0xd73/0x2630 [ 413.056061][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.056127][ T5626] ? debug_check_no_obj_freed+0x31f/0x630 [ 413.056240][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.056286][ T5626] ? rcu_is_watching+0x12/0xc0 [ 413.056349][ T5626] f2fs_write_data_pages+0x799/0x16d0 [ 413.056412][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 413.056478][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.056526][ T5626] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 413.056578][ T5626] do_writepages+0x278/0x600 [ 413.056648][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 413.056707][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 413.056764][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.056810][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 413.056869][ T5626] filemap_writeback+0x22d/0x2e0 [ 413.056916][ T5626] ? __pfx_filemap_writeback+0x10/0x10 [ 413.056979][ T5626] ? check_noncircular+0x97/0x160 [ 413.057073][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.057119][ T5626] ? find_held_lock+0x2b/0x80 [ 413.057178][ T5626] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 413.057226][ T5626] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 413.057275][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.057334][ T5626] f2fs_sync_dirty_inodes+0x469/0x990 [ 413.057405][ T5626] block_operations+0x2a6/0xfc0 [ 413.057453][ T5626] ? __bfs+0x150/0x2a0 [ 413.057498][ T5626] ? __pfx_block_operations+0x10/0x10 [ 413.057549][ T5626] ? check_noncircular+0x97/0x160 [ 413.057643][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.057695][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.057742][ T5626] ? rcu_is_watching+0x12/0xc0 [ 413.057799][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.057853][ T5626] f2fs_write_checkpoint+0x582/0x5550 [ 413.057919][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.057965][ T5626] ? _raw_spin_unlock_irq+0x2e/0x50 [ 413.058018][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.058064][ T5626] ? __wait_for_common+0x1f3/0x4c0 [ 413.058122][ T5626] ? __pfx_schedule_timeout+0x10/0x10 [ 413.058178][ T5626] ? __pfx___wait_for_common+0x10/0x10 [ 413.058238][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 413.058301][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.058347][ T5626] ? rcu_is_watching+0x12/0xc0 [ 413.058404][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.058451][ T5626] ? kthread_stop+0x280/0x640 [ 413.058498][ T5626] kill_f2fs_super+0x3f1/0x4a0 [ 413.058550][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 413.058623][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 413.058680][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.058728][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.058792][ T5626] deactivate_locked_super+0xc1/0x1b0 [ 413.058851][ T5626] deactivate_super+0xe7/0x110 [ 413.058914][ T5626] cleanup_mnt+0x21f/0x450 [ 413.058954][ T5626] task_work_run+0x150/0x240 [ 413.059004][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 413.059056][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.059102][ T5626] ? rcu_is_watching+0x12/0xc0 [ 413.059167][ T5626] exit_to_user_mode_loop+0x100/0x4a0 [ 413.059218][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.059275][ T5626] do_syscall_64+0x706/0xf80 [ 413.059334][ T5626] ? irqentry_exit+0x117/0x790 [ 413.059396][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.059436][ T5626] RIP: 0033:0x7f5ca319e017 [ 413.059466][ T5626] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 413.059503][ T5626] RSP: 002b:00007ffd25936e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 413.059539][ T5626] RAX: 0000000000000000 RBX: 00007f5ca3232120 RCX: 00007f5ca319e017 [ 413.059563][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd25936f40 [ 413.059586][ T5626] RBP: 00007ffd25936f40 R08: 00007ffd25937f40 R09: 00000000ffffffff [ 413.059612][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd25937fd0 [ 413.059635][ T5626] R13: 00007f5ca3232120 R14: 0000000000064c93 R15: 00007ffd25938010 [ 413.059686][ T5626] [ 413.060738][ T5626] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 413.086929][ T5758] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 413.290778][T12300] loop3: detected capacity change from 0 to 512 [ 413.332135][ T5758] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 413.498826][T12302] loop5: detected capacity change from 0 to 128 [ 413.653713][T12300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 413.715854][T12300] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2363: iget: bad i_size value: 38620345925642 [ 413.732230][ T5758] microsoft 0003:045E:07DA.0019: no inputs found [ 413.738611][ T5758] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 413.752364][ T5758] usb 2-1: USB disconnect, device number 18 [ 413.765479][T12300] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.769190][T12300] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2363: couldn't read orphan inode 15 (err -117) [ 413.773135][T10928] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.778472][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 413.805179][ C0] EXT4-fs (loop3): initial error at time 1778296396: ext4_orphan_get:1397: inode 15 [ 413.814685][ C0] EXT4-fs (loop3): last error at time 1778296396: ext4_orphan_get:1397: inode 15 [ 413.874732][T12302] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.915848][T12302] ext4 filesystem being mounted at /407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.962197][T12300] loop3: lost filesystem error report for type 5 error -117 [ 413.990166][T12300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.325197][T12315] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.2363: bg 0: block 5: invalid block bitmap [ 414.433974][T12315] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 414.458772][T12317] lo: entered promiscuous mode [ 414.502732][T12315] EXT4-fs (loop3): This should not happen!! Data will be lost [ 414.502732][T12315] [ 414.512871][ T5758] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 414.516011][T12317] lo: left promiscuous mode [ 414.592870][T12315] EXT4-fs (loop3): Total free blocks count 0 [ 414.626693][T12315] EXT4-fs (loop3): Free/Dirty block details [ 414.671483][T12315] EXT4-fs (loop3): free_blocks=0 [ 414.689773][T12315] EXT4-fs (loop3): dirty_blocks=184 [ 414.711671][T12315] EXT4-fs (loop3): Block reservation details [ 414.717301][ T5758] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.736535][T12315] EXT4-fs (loop3): i_reserved_data_blocks=184 [ 414.760309][ T5758] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 414.774996][ T5624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.799625][ T5758] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 414.885436][ T5758] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.911625][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.956271][ T5622] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 414.968496][ T5758] usb 7-1: Product: syz [ 414.977970][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.982940][ T5758] usb 7-1: Manufacturer: syz [ 415.001840][ T5758] usb 7-1: SerialNumber: syz [ 415.249147][T12314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 415.268082][T12314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 415.702560][ T152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 415.850969][T12341] loop3: detected capacity change from 0 to 1024 [ 415.937893][ T5758] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 415.974583][T12341] hfsplus: can't free extent: start 2889, count 1 [ 415.974688][ T5758] cdc_ncm 7-1:1.0: bind() failure [ 416.056175][ T5758] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 416.085613][ T5758] cdc_ncm 7-1:1.1: bind() failure [ 416.207085][ T5758] usb 7-1: USB disconnect, device number 12 [ 416.456159][T12353] loop3: detected capacity change from 0 to 512 [ 416.483073][T12353] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 416.511804][T12355] kernel read not supported for file /file0 (pid: 12355 comm: syz.5.2388) [ 416.549460][ T30] audit: type=1800 audit(1778296399.214:208): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2388" name="file0" dev="mqueue" ino=29885 res=0 errno=0 [ 416.580458][T12353] EXT4-fs (loop3): 1 truncate cleaned up [ 416.632831][T12353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.933316][T12372] loop4: detected capacity change from 0 to 512 [ 416.970451][T12372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 417.046167][T12372] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2389: iget: bad i_size value: 38620345925642 [ 417.114374][T12372] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 417.120435][T12372] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2389: couldn't read orphan inode 15 (err -117) [ 417.129756][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 417.129794][ C1] EXT4-fs (loop4): initial error at time 1778296399: ext4_orphan_get:1397: inode 15 [ 417.129849][ C1] EXT4-fs (loop4): last error at time 1778296399: ext4_orphan_get:1397: inode 15 [ 417.170023][T12372] loop4: lost filesystem error report for type 5 error -117 [ 417.172896][T12372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.354569][T12376] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.2389: bg 0: block 5: invalid block bitmap [ 417.435573][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.490438][T12376] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 132 with error 28 [ 417.579858][T12376] EXT4-fs (loop4): This should not happen!! Data will be lost [ 417.579858][T12376] [ 417.643545][T12378] netlink: 'syz.6.2396': attribute type 12 has an invalid length. [ 417.664140][T12376] EXT4-fs (loop4): Total free blocks count 0 [ 417.677527][T12378] netlink: 'syz.6.2396': attribute type 29 has an invalid length. [ 417.696163][T12376] EXT4-fs (loop4): Free/Dirty block details [ 417.705872][T12378] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2396'. [ 417.726509][T12376] EXT4-fs (loop4): free_blocks=0 [ 417.750164][T12376] EXT4-fs (loop4): dirty_blocks=136 [ 417.771373][T12376] EXT4-fs (loop4): Block reservation details [ 417.786695][T12376] EXT4-fs (loop4): i_reserved_data_blocks=136 [ 418.057308][T12371] loop1: detected capacity change from 0 to 32768 [ 418.066381][T12368] loop5: detected capacity change from 0 to 32768 [ 418.096693][T12368] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 418.107796][T12371] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 418.164942][T12371] XFS (loop1): Ending clean mount [ 418.204669][T12368] XFS (loop5): Ending clean mount [ 418.242299][T12368] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x10 [ 418.271731][T12368] XFS (loop5): Unmount and run xfs_repair [ 418.288996][ T89] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 132 with max blocks 4 with error 28 [ 418.301738][T12368] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 418.329891][T12371] XFS (loop1): User initiated shutdown received. [ 418.336220][T12368] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 418.367317][ T5626] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 418.399578][T12368] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 418.432789][T12371] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 418.445309][T12368] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 418.485858][T12368] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 418.532929][T12371] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 418.548142][T12368] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 418.591013][T12368] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 418.643998][T12368] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 418.693293][T12368] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 418.747959][T12368] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x10 len 4 error 74 [ 418.808057][T12368] loop5: lost filesystem error report for type 5 error -117 [ 418.808214][T12368] XFS (loop5): Failed to initialize disk quotas, err -117. [ 418.860609][ T5623] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 419.076632][T12368] XFS (loop5): User initiated shutdown received. [ 419.145672][T12368] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 419.213256][T12368] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 419.342924][T12417] loop3: detected capacity change from 0 to 2048 [ 419.407407][ T5624] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 419.417459][T12419] vivid-000: disconnect [ 419.461686][T12420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.477593][T12418] vivid-000: reconnect [ 419.490542][T12420] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 419.532197][T12420] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 419.680409][T12420] Remounting filesystem read-only [ 419.695723][T12417] NILFS (loop3): mounting fs with errors [ 419.725450][T12417] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 419.785867][T12417] Remounting filesystem read-only [ 419.881615][T12424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.916540][T12424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.934597][ T5622] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 419.954331][T12424] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 419.978208][T12424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.998924][T12424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 421.432842][T12469] loop3: detected capacity change from 0 to 256 [ 421.698493][T12443] loop4: detected capacity change from 0 to 32768 [ 421.780959][T12443] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 421.941800][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 421.947965][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.950156][T12443] XFS (loop4): Ending clean mount [ 422.022231][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 422.022418][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout [ 422.032427][ T5644] Bluetooth: hci5: command 0x0c1a tx timeout [ 422.131932][T12443] XFS (loop4): User initiated shutdown received. [ 422.190447][T12489] nbd4: detected capacity change from 0 to 63 [ 422.242287][ T5644] block nbd4: Receive control failed (result -32) [ 422.261967][T12443] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 422.278381][ T5745] block nbd4: Dead connection, failed to find a fallback [ 422.287842][T12493] loop3: detected capacity change from 0 to 7 [ 422.332394][T12443] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 422.343976][ C1] blk_print_req_error: 10 callbacks suppressed [ 422.344002][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.359422][ C1] buffer_io_error: 10 callbacks suppressed [ 422.359449][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.373888][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.374444][ T5745] block nbd4: shutting down sockets [ 422.383118][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.392713][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.409185][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.430453][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.439759][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.447979][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.457257][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.471459][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.480717][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.494740][ T5745] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.505907][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.505964][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.508913][T12493] ldm_validate_partition_table(): Disk read failed. [ 422.518823][ T5745] Buffer I/O error on dev nbd4, logical block 0, async page read [ 422.547484][ T5745] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.557431][ T5745] Buffer I/O error on dev nbd4, logical block 1, async page read [ 422.567337][ T5745] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.577044][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 422.586649][T12493] Dev loop3: unable to read RDB block 0 [ 422.600840][T12493] loop3: unable to read partition table [ 422.607216][T12493] loop3: partition table beyond EOD, truncated [ 422.620495][T12493] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 422.665610][ T5626] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 422.725716][ T5745] ldm_validate_partition_table(): Disk read failed. [ 422.766915][ T5745] Dev nbd4: unable to read RDB block 0 [ 422.816236][ T5745] nbd4: unable to read partition table [ 422.939473][ T5745] ldm_validate_partition_table(): Disk read failed. [ 422.989506][ T5745] Dev nbd4: unable to read RDB block 0 [ 423.038880][ T5745] nbd4: unable to read partition table [ 423.514642][T12514] loop6: detected capacity change from 0 to 512 [ 423.548998][T12514] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 423.609759][T12514] EXT4-fs (loop6): 1 truncate cleaned up [ 423.663058][T12514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.917620][T12497] loop1: detected capacity change from 0 to 32768 [ 424.053851][T12497] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 424.366558][T10928] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.464016][ T30] audit: type=1800 audit(1778296407.134:209): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2434" name="file2" dev="loop1" ino=17059 res=0 errno=0 [ 424.773648][ T5623] ocfs2: Unmounting device (7,1) on (node local) [ 425.144016][T12544] loop4: detected capacity change from 0 to 128 [ 425.210020][T12544] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.233231][T12544] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.519684][T12553] loop1: detected capacity change from 0 to 512 [ 425.573858][T12553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.614749][ T5626] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.952579][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.191734][T12570] team0: Device ipvlan1 failed to register rx_handler [ 426.448219][T12551] loop5: detected capacity change from 0 to 32768 [ 426.650747][T12579] loop6: detected capacity change from 0 to 2048 [ 426.718515][T12579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.782325][T12579] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.982962][T12579] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 427.159767][T12587] vxcan0: tx address claim with dest, not broadcast [ 427.167579][T10928] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.680920][T12598] loop0: detected capacity change from 0 to 128 [ 427.759676][T12598] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.821782][T12602] loop1: detected capacity change from 0 to 16 [ 427.902528][T12602] erofs (device loop1): mounted with root inode @ nid 36. [ 427.923518][T12598] ext4 filesystem being mounted at /437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 428.382729][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'. [ 428.440785][T12620] loop6: detected capacity change from 0 to 256 [ 428.494814][T12619] loop3: detected capacity change from 0 to 1024 [ 428.560830][T12620] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 428.649306][ T30] audit: type=1800 audit(1778296411.314:210): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2479" name="file2" dev="loop6" ino=1048736 res=0 errno=0 [ 428.777392][T12620] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 428.817854][T12620] exFAT-fs (loop6): Filesystem has been set read-only [ 428.915784][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.927670][T12625] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.947558][ T5621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.475287][ T5644] Bluetooth: hci1: Malformed LE Event: 0x0d [ 429.576892][T12639] loop6: detected capacity change from 0 to 16 [ 429.616027][T12639] erofs (device loop6): mounted with root inode @ nid 36. [ 429.670623][T12639] syz.6.2492: attempt to access beyond end of device [ 429.670623][T12639] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 429.731908][T12639] syz.6.2492: attempt to access beyond end of device [ 429.731908][T12639] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 429.793819][ T30] audit: type=1800 audit(1778296412.464:211): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2492" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 429.821547][ T5758] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 430.002041][ T5758] usb 5-1: Using ep0 maxpacket: 32 [ 430.027119][ T5758] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 430.073193][ T5758] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 430.111262][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.158215][ T5758] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 430.188797][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.206425][T12648] tap0: tun_chr_ioctl cmd 1074025678 [ 430.220451][ T5758] usb 5-1: Product: syz [ 430.221571][T12648] tap0: group set to 0 [ 430.239199][ T5758] usb 5-1: Manufacturer: syz [ 430.257502][ T5758] usb 5-1: SerialNumber: syz [ 430.277635][T12652] binder: 12650:12652 ioctl c0306201 2000000004c0 returned -14 [ 430.303429][ T5758] usb 5-1: config 0 descriptor?? [ 430.390261][T12629] loop0: detected capacity change from 0 to 32768 [ 430.708764][T12663] loop6: detected capacity change from 0 to 64 [ 430.767467][ T5758] gs_usb 5-1:0.0: Configuring for 137 interfaces [ 430.988531][ T5758] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 431.048497][ T5758] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 431.058692][T10928] hfs: node 4:3 still has 1 user(s)! [ 431.259478][ T5771] usb 5-1: USB disconnect, device number 17 [ 431.415606][T12675] batman_adv: batadv0: Adding interface: vlan2 [ 431.446633][T12675] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.524880][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.547096][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.571916][T12675] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 431.783435][T12684] loop3: detected capacity change from 0 to 128 [ 432.352872][T12670] loop1: detected capacity change from 0 to 40427 [ 432.388738][T12670] F2FS-fs (loop1): invalid crc value [ 432.455422][T12701] loop3: detected capacity change from 0 to 16 [ 432.501642][T12701] erofs (device loop3): mounted with root inode @ nid 36. [ 432.551479][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 432.556034][T12701] syz.3.2519: attempt to access beyond end of device [ 432.556034][T12701] loop3: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 432.625992][T12701] syz.3.2519: attempt to access beyond end of device [ 432.625992][T12701] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 432.710292][T12670] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 432.719038][T12701] syz.3.2519: attempt to access beyond end of device [ 432.719038][T12701] loop3: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 432.759746][T12701] erofs (device loop3): read error -5 @ 0 of nid 89 [ 432.778804][ T30] audit: type=1800 audit(1778296415.444:212): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2519" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 432.851856][T12670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 433.254562][ T5623] syz-executor: attempt to access beyond end of device [ 433.254562][ T5623] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 433.305219][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 433.305279][ T5623] Tainted: [L]=SOFTLOCKUP [ 433.305291][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.305313][ T5623] Call Trace: [ 433.305328][ T5623] [ 433.305340][ T5623] dump_stack_lvl+0x100/0x190 [ 433.305390][ T5623] f2fs_stop_checkpoint+0x600/0x9b0 [ 433.305451][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.305500][ T5623] ? errseq_set+0xe3/0x150 [ 433.305541][ T5623] ? errseq_set+0xe3/0x150 [ 433.305581][ T5623] f2fs_write_end_io+0xf59/0x1340 [ 433.305628][ T5623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 433.305676][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.305741][ T5623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 433.305805][ T5623] bio_endio+0x78f/0x8f0 [ 433.305881][ T5623] submit_bio_noacct+0x64c/0x2000 [ 433.305960][ T5623] f2fs_submit_write_bio+0x135/0x340 [ 433.306039][ T5623] __submit_merged_bio+0x331/0x780 [ 433.306100][ T5623] __submit_merged_write_cond+0x3fe/0x510 [ 433.306152][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 433.306210][ T5623] ? __pfx___might_resched+0x10/0x10 [ 433.306266][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306326][ T5623] f2fs_write_cache_pages+0x20e9/0x2630 [ 433.306402][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306451][ T5623] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 433.306499][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306548][ T5623] ? trace_pelt_se_tp+0x13b/0x190 [ 433.306600][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306646][ T5623] ? __kasan_check_byte+0x13/0x50 [ 433.306703][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306750][ T5623] ? unwind_next_frame+0x3be/0x2090 [ 433.306806][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306852][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.306918][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.306977][ T5623] ? bpf_ksym_find+0x124/0x1c0 [ 433.307093][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.307144][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.307191][ T5623] ? add_lock_to_list+0x99/0x110 [ 433.307227][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.307271][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.307336][ T5623] f2fs_write_data_pages+0x799/0x16d0 [ 433.307402][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 433.307450][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.307508][ T5623] ? do_writepages+0x4b5/0x600 [ 433.307569][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.307622][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 433.307674][ T5623] do_writepages+0x278/0x600 [ 433.307743][ T5623] ? __pfx_do_writepages+0x10/0x10 [ 433.307806][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.307852][ T5623] ? _raw_spin_unlock+0x3e/0x50 [ 433.307916][ T5623] filemap_writeback+0x22d/0x2e0 [ 433.307956][ T5623] ? __pfx_filemap_writeback+0x10/0x10 [ 433.308073][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.308120][ T5623] ? preempt_schedule_common+0x42/0xc0 [ 433.308178][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.308225][ T5623] ? preempt_schedule_thunk+0x16/0x30 [ 433.308299][ T5623] f2fs_sync_dirty_inodes+0x469/0x990 [ 433.308372][ T5623] block_operations+0x2a6/0xfc0 [ 433.308419][ T5623] ? __bfs+0x150/0x2a0 [ 433.308465][ T5623] ? __pfx_block_operations+0x10/0x10 [ 433.308516][ T5623] ? check_noncircular+0x97/0x160 [ 433.308611][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.308662][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.308710][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.308767][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.308822][ T5623] f2fs_write_checkpoint+0x582/0x5550 [ 433.308882][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.308934][ T5623] ? _raw_spin_unlock_irq+0x2e/0x50 [ 433.308986][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.309032][ T5623] ? __wait_for_common+0x1f3/0x4c0 [ 433.309090][ T5623] ? __pfx_schedule_timeout+0x10/0x10 [ 433.309145][ T5623] ? __pfx___wait_for_common+0x10/0x10 [ 433.309206][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 433.309270][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.309317][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.309374][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.309421][ T5623] ? kthread_stop+0x280/0x640 [ 433.309469][ T5623] kill_f2fs_super+0x3f1/0x4a0 [ 433.309517][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 433.309588][ T5623] ? lockdep_hardirqs_on+0x78/0x100 [ 433.309646][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.309692][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.309754][ T5623] deactivate_locked_super+0xc1/0x1b0 [ 433.309813][ T5623] deactivate_super+0xe7/0x110 [ 433.309871][ T5623] cleanup_mnt+0x21f/0x450 [ 433.309917][ T5623] task_work_run+0x150/0x240 [ 433.309966][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 433.310018][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.310064][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.310128][ T5623] exit_to_user_mode_loop+0x100/0x4a0 [ 433.310176][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.310228][ T5623] do_syscall_64+0x706/0xf80 [ 433.310287][ T5623] ? irqentry_exit+0x117/0x790 [ 433.310351][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.310391][ T5623] RIP: 0033:0x7f4b06f9e017 [ 433.310421][ T5623] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 433.310459][ T5623] RSP: 002b:00007ffd8208a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 433.310494][ T5623] RAX: 0000000000000000 RBX: 00007f4b07032120 RCX: 00007f4b06f9e017 [ 433.310518][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8208a270 [ 433.310542][ T5623] RBP: 00007ffd8208a270 R08: 00007ffd8208b270 R09: 00000000ffffffff [ 433.310566][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8208b300 [ 433.310590][ T5623] R13: 00007f4b07032120 R14: 0000000000069bf1 R15: 00007ffd8208b340 [ 433.310641][ T5623] [ 433.968865][T12700] loop6: detected capacity change from 0 to 32768 [ 433.977469][ T5623] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 433.986267][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 433.986320][ T5623] Tainted: [L]=SOFTLOCKUP [ 433.986335][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.986357][ T5623] Call Trace: [ 433.986369][ T5623] [ 433.986383][ T5623] dump_stack_lvl+0x100/0x190 [ 433.986433][ T5623] f2fs_stop_checkpoint+0x600/0x9b0 [ 433.986501][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.986564][ T5623] ? errseq_set+0xe3/0x150 [ 433.986602][ T5623] ? errseq_set+0xe3/0x150 [ 433.986640][ T5623] f2fs_write_end_io+0xf59/0x1340 [ 433.986689][ T5623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 433.986734][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.986791][ T5623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 433.986830][ T5623] bio_endio+0x78f/0x8f0 [ 433.986886][ T5623] submit_bio_noacct+0x64c/0x2000 [ 433.986940][ T5623] f2fs_submit_write_bio+0x135/0x340 [ 433.987005][ T5623] __submit_merged_bio+0x331/0x780 [ 433.987052][ T5623] __submit_merged_write_cond+0x3fe/0x510 [ 433.987103][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 433.987156][ T5623] ? __pfx___might_resched+0x10/0x10 [ 433.987209][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987266][ T5623] f2fs_write_cache_pages+0x20e9/0x2630 [ 433.987335][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987383][ T5623] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 433.987430][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987480][ T5623] ? trace_pelt_se_tp+0x13b/0x190 [ 433.987549][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987595][ T5623] ? __kasan_check_byte+0x13/0x50 [ 433.987657][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987704][ T5623] ? unwind_next_frame+0x3be/0x2090 [ 433.987757][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987802][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.987858][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.987920][ T5623] ? bpf_ksym_find+0x124/0x1c0 [ 433.988032][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.988082][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.988129][ T5623] ? add_lock_to_list+0x99/0x110 [ 433.988165][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.988211][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.988274][ T5623] f2fs_write_data_pages+0x799/0x16d0 [ 433.988335][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 433.988382][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.988439][ T5623] ? do_writepages+0x4b5/0x600 [ 433.988497][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.988566][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 433.988619][ T5623] do_writepages+0x278/0x600 [ 433.988693][ T5623] ? __pfx_do_writepages+0x10/0x10 [ 433.988757][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.988803][ T5623] ? _raw_spin_unlock+0x3e/0x50 [ 433.988860][ T5623] filemap_writeback+0x22d/0x2e0 [ 433.988899][ T5623] ? __pfx_filemap_writeback+0x10/0x10 [ 433.989018][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989064][ T5623] ? preempt_schedule_common+0x42/0xc0 [ 433.989121][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989167][ T5623] ? preempt_schedule_thunk+0x16/0x30 [ 433.989241][ T5623] f2fs_sync_dirty_inodes+0x469/0x990 [ 433.989311][ T5623] block_operations+0x2a6/0xfc0 [ 433.989357][ T5623] ? __bfs+0x150/0x2a0 [ 433.989403][ T5623] ? __pfx_block_operations+0x10/0x10 [ 433.989454][ T5623] ? check_noncircular+0x97/0x160 [ 433.989562][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989615][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989666][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.989722][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989776][ T5623] f2fs_write_checkpoint+0x582/0x5550 [ 433.989834][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989880][ T5623] ? _raw_spin_unlock_irq+0x2e/0x50 [ 433.989931][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.989977][ T5623] ? __wait_for_common+0x1f3/0x4c0 [ 433.990036][ T5623] ? __pfx_schedule_timeout+0x10/0x10 [ 433.990090][ T5623] ? __pfx___wait_for_common+0x10/0x10 [ 433.990150][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 433.990211][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.990257][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.990312][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.990359][ T5623] ? kthread_stop+0x280/0x640 [ 433.990406][ T5623] kill_f2fs_super+0x3f1/0x4a0 [ 433.990457][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 433.990543][ T5623] ? lockdep_hardirqs_on+0x78/0x100 [ 433.990602][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.990654][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.990715][ T5623] deactivate_locked_super+0xc1/0x1b0 [ 433.990775][ T5623] deactivate_super+0xe7/0x110 [ 433.990833][ T5623] cleanup_mnt+0x21f/0x450 [ 433.990873][ T5623] task_work_run+0x150/0x240 [ 433.990923][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 433.990974][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.991019][ T5623] ? rcu_is_watching+0x12/0xc0 [ 433.991082][ T5623] exit_to_user_mode_loop+0x100/0x4a0 [ 433.991128][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.991179][ T5623] do_syscall_64+0x706/0xf80 [ 433.991237][ T5623] ? irqentry_exit+0x117/0x790 [ 433.991300][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.991339][ T5623] RIP: 0033:0x7f4b06f9e017 [ 433.991368][ T5623] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 433.991405][ T5623] RSP: 002b:00007ffd8208a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 433.991441][ T5623] RAX: 0000000000000000 RBX: 00007f4b07032120 RCX: 00007f4b06f9e017 [ 433.991464][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8208a270 [ 433.991488][ T5623] RBP: 00007ffd8208a270 R08: 00007ffd8208b270 R09: 00000000ffffffff [ 433.991512][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8208b300 [ 433.991553][ T5623] R13: 00007f4b07032120 R14: 0000000000069bf1 R15: 00007ffd8208b340 [ 433.991604][ T5623] [ 434.610341][ T5623] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 435.195134][T12727] loop4: detected capacity change from 0 to 32768 [ 435.247626][T12727] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 435.287605][T12727] JBD2: Ignoring recovery information on journal [ 435.477562][T12727] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 435.516242][T12733] loop3: detected capacity change from 0 to 512 [ 435.568426][T12733] EXT4-fs (loop3): Test dummy encryption mode enabled [ 435.602310][T12733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 435.636846][T12733] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2533: bad orphan inode 131083 [ 435.647470][T12733] loop3: lost filesystem error report for type 5 error -117 [ 435.650814][T12733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.688462][T12733] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 435.764225][T12720] loop5: detected capacity change from 0 to 32768 [ 435.802198][T12720] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 435.877051][T12720] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 436.070003][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.353762][T12744] loop3: detected capacity change from 0 to 128 [ 436.385413][T12744] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 436.521630][ T30] audit: type=1800 audit(1778296419.184:213): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2526" name="file2" dev="loop5" ino=17059 res=0 errno=0 [ 436.528115][T12744] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 436.643760][ T5626] ocfs2: Unmounting device (7,4) on (node local) [ 437.097318][ T5624] ocfs2: Unmounting device (7,5) on (node local) [ 437.211886][ T5771] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 437.276671][T12762] loop1: detected capacity change from 0 to 256 [ 437.295476][T12762] exfat: Deprecated parameter 'namecase' [ 437.302794][T12762] exfat: Deprecated parameter 'utf8' [ 437.318517][T12762] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 437.382722][ T5771] usb 4-1: Using ep0 maxpacket: 16 [ 437.400530][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.429842][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.487331][ T5771] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 437.524248][ T5771] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 437.534229][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.549814][ T5771] usb 4-1: config 0 descriptor?? [ 437.977881][T12777] loop4: detected capacity change from 0 to 512 [ 438.005543][T12777] EXT4-fs (loop4): 1 truncate cleaned up [ 438.008700][ T5771] hid_parser_main: 7 callbacks suppressed [ 438.008730][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.014100][T12777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.080679][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.130588][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.177481][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.202667][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.222500][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.234404][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.245752][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.255882][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.270913][ T5771] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 438.292316][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.317826][ T5771] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 438.377126][ T5771] microsoft 0003:045E:07DA.001A: no inputs found [ 438.414608][ T5771] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 438.442769][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2557'. [ 438.483008][ T5771] usb 4-1: USB disconnect, device number 20 [ 438.749789][T12790] fido_id[12790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 439.387818][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.395339][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.776822][T12791] loop0: detected capacity change from 0 to 32768 [ 439.889104][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2576'. [ 439.933979][T12791] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 439.968243][T12833] ipvlan2: entered allmulticast mode [ 439.973747][T12833] syz_tun: entered allmulticast mode [ 440.065029][T12836] bad cache= option: none68 [ 440.065029][T12836] nr_mlock 0 [ 440.065029][T12836] nr_zspages 0 [ 440.065029][T12836] nr_free_cma 0 [ 440.065029][T12836] numa_hit 1730146 [ 440.065029][T12836] numa_miss 0 [ 440.065029][T12836] numa_foreign 0 [ 440.065029][T12836] numa_interleave 12371 [ 440.065029][T12836] numa_local 1723790 [ 440.065029][T12836] numa_other 6356 [ 440.065029][T12836] nr_inactive_anon 0 [ 440.065029][T12836] nr_active_anon 11360 [ 440.065029][T12836] nr_inactive_file 40210 [ 440.065029][T12836] nr_active_file 15815 [ 440.065029][T12836] nr_unevictable 768 [ 440.065029][T12836] nr_slab_reclaimable 11080 [ 440.065029][T12836] nr_slab_unreclaimable 103203 [ 440.065029][T12836] nr_isolated_anon 0 [ 440.065029][T12836] nr_isolated_file 0 [ 440.065029][T12836] workingset_nodes 0 [ 440.065029][T12836] workingset_refault_anon 4719 [ 440.065029][T12836] workingset_refault_file 0 [ 440.065029][T12836] workingset_activate_anon 260 [ 440.065029][T12836] workingset_activate_file 0 [ 440.065029][T12836] workingset_restore_anon 0 [ 440.065029][T12836] workingset_restore_file 0 [ 440.065029][T12836] workingset_nodereclaim 0 [ 440.065029][T12836] nr_anon_pages 6645 [ 440.065029][T12836] nr_mapped 35917 [ 440.065029][T12836] nr_file_pages 61500 [ 440.065029][T12836] nr_dirty 568 [ 440.065029][T12836] nr_writeback 0 [ 440.065029][T12836] nr_shmem 5512 [ 440.065029][T12836] nr_shmem_hugepages 0 [ 440.065029][T12836] nr_shmem_pmdmapped 0 [ 440.065029][T12836] nr_file_hugepages 0 [ 440.065029][T12836] nr_file_pmdmapped 0 [ 440.065029][T12836] nr_anon_transparent_hugepages 0 [ 440.065029][T12836] nr_vmscan_write 22203 [ 440.065029][T12836] nr_vmscan_immediate_reclaim 0 [ 440.065029][T12836] nr_dirtied 15227 [ 440.065029][T12836] nr_written 14064 [ 440.065029][T12836] nr_throttled_written 0 [ 440.065029][T12836] nr_kernel_misc_reclaimable 0 [ 440.065029][T12836] nr_foll_pin_acquired 7472 [ 440.065029][T12836] nr_foll_pin_released 7474 [ 440.065788][T12836] CIFS: VFS: bad cache= option: none68 [ 440.065788][T12836] nr_mlock 0 [ 440.065788][T12836] nr_zspages 0 [ 440.065788][T12836] nr_free_cma 0 [ 440.065788][T12836] numa_hit 1730146 [ 440.065788][T12836] numa_miss 0 [ 440.065788][T12836] numa_foreign 0 [ 440.065788][T12836] numa_interleave 12371 [ 440.065788][T12836] numa_local 1723790 [ 440.065788][T12836] numa_other 6356 [ 440.065788][T12836] nr_inactive_anon 0 [ 440.065788][T12836] nr_active_anon 11360 [ 440.065788][T12836] nr_inactive_file 40210 [ 440.065788][T12836] nr_active_file 15815 [ 440.065788][T12836] nr_unevictable 768 [ 440.065788][T12836] nr_slab_reclaimable 11080 [ 440.065788][T12836] nr_slab_unreclaimable 103203 [ 440.065788][T12836] nr_isolated_anon 0 [ 440.065788][T12836] nr_isolated_file 0 [ 440.065788][T12836] workingset_nodes 0 [ 440.065788][T12836] workingset_refault_anon 4719 [ 440.065788][T12836] workingset_refault_file 0 [ 440.065788][T12836] workingset_activate_anon 260 [ 440.065788][T12836] workingset_activate_file 0 [ 440.065788][T12836] workingset_restore_anon 0 [ 440.065788][T12836] workingset_restore_file 0 [ 440.065788][T12836] workingset_nodereclaim 0 [ 440.065788][T12836] nr_anon_pages 6645 [ 440.065788][T12836] nr_mapped 35917 [ 440.065788][T12836] nr_file_pages 61500 [ 440.065788][T12836] nr_dirty 568 [ 440.065788][T12836] nr_writeback 0 [ 440.065788][T12836] nr_shmem 5512 [ 440.065788][T12836] nr_shmem_hugepages 0 [ 440.065788][T12836] nr_shmem_pmdmapped 0 [ 440.065788][T12836] nr_file_hugepages 0 [ 440.065788][T12836] nr_file_pmdmapped 0 [ 440.065788][T12836] nr_anon_transparent_hugepages 0 [ 440.065788][T12836] nr_vmscan_write 22203 [ 440.065788][T12836] nr_vmscan_immediate_reclaim 0 [ 440.065788][T12836] nr_dirtied 15227 [ 440.065788][T12836] nr_written 14064 [ 440.065788][T12836] nr_throttled_written 0 [ 440.065788][T12836] nr_kernel_misc_reclaimable 0 [ 440.065788][T12836] nr_foll_pin_acquired 7472 [ 440.065788][T12836] nr_foll_pin_released 7474 [ 440.840311][ T30] audit: type=1800 audit(1778296423.504:214): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2555" name="file2" dev="loop0" ino=17059 res=0 errno=0 [ 440.844724][ T2165] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 441.143463][T12855] [ 441.145844][T12855] ====================================================== [ 441.152879][T12855] WARNING: possible circular locking dependency detected [ 441.159912][T12855] syzkaller #0 Tainted: G L [ 441.165903][T12855] ------------------------------------------------------ [ 441.172930][T12855] syz.1.2584/12855 is trying to acquire lock: [ 441.178998][T12855] ffff88807c1c10e0 (&resv_map->rw_sema){++++}-{4:4}, at: hugetlb_vma_lock_write+0x109/0x140 [ 441.189173][T12855] [ 441.189173][T12855] but task is already holding lock: [ 441.196558][T12855] ffff888036bb27f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 441.205599][T12855] [ 441.205599][T12855] which lock already depends on the new lock. [ 441.205599][T12855] [ 441.216014][T12855] [ 441.216014][T12855] the existing dependency chain (in reverse order) is: [ 441.225036][T12855] [ 441.225036][T12855] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 441.232647][T12855] __might_fault+0xde/0x140 [ 441.237703][T12855] _copy_from_user+0x29/0xd0 [ 441.242849][T12855] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 441.249377][T12855] ip_generic_getfrag+0x172/0x270 [ 441.254957][T12855] raw6_getfrag+0x235/0x2a0 [ 441.259997][T12855] __ip6_append_data+0x4058/0x4bf0 [ 441.265683][T12855] ip6_append_data+0x10b/0x410 [ 441.270998][T12855] rawv6_sendmsg+0x169c/0x4420 [ 441.276302][T12855] inet_sendmsg+0x11c/0x140 [ 441.281334][T12855] ____sys_sendmsg+0x98d/0xb70 [ 441.286643][T12855] ___sys_sendmsg+0x190/0x1e0 [ 441.291886][T12855] __sys_sendmsg+0x170/0x220 [ 441.297012][T12855] do_syscall_64+0x10b/0xf80 [ 441.302146][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.308569][T12855] [ 441.308569][T12855] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 441.316328][T12855] lock_sock_nested+0x41/0xf0 [ 441.321549][T12855] inet_shutdown+0x67/0x410 [ 441.326598][T12855] nbd_mark_nsock_dead+0xae/0x5c0 [ 441.332147][T12855] sock_shutdown+0x16b/0x200 [ 441.337257][T12855] nbd_config_put+0x1eb/0x750 [ 441.342461][T12855] nbd_genl_connect+0xaf8/0x1a40 [ 441.347954][T12855] genl_family_rcv_msg_doit+0x214/0x300 [ 441.354052][T12855] genl_rcv_msg+0x560/0x800 [ 441.359104][T12855] netlink_rcv_skb+0x159/0x420 [ 441.364407][T12855] genl_rcv+0x28/0x40 [ 441.368936][T12855] netlink_unicast+0x585/0x850 [ 441.374238][T12855] netlink_sendmsg+0x8b0/0xda0 [ 441.379544][T12855] ____sys_sendmsg+0x9e1/0xb70 [ 441.384849][T12855] ___sys_sendmsg+0x190/0x1e0 [ 441.390066][T12855] __sys_sendmsg+0x170/0x220 [ 441.395182][T12855] do_syscall_64+0x10b/0xf80 [ 441.400323][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.406743][T12855] [ 441.406743][T12855] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 441.414407][T12855] __mutex_lock+0x1a4/0x1b10 [ 441.419544][T12855] nbd_queue_rq+0x428/0x1080 [ 441.424664][T12855] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 441.430747][T12855] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 441.437607][T12855] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 441.444129][T12855] blk_mq_run_hw_queue+0x23c/0x670 [ 441.449852][T12855] blk_mq_dispatch_list+0x51d/0x1360 [ 441.455665][T12855] blk_mq_flush_plug_list+0x130/0x600 [ 441.461575][T12855] __blk_flush_plug+0x2c4/0x4b0 [ 441.466955][T12855] __submit_bio+0x584/0x6c0 [ 441.471982][T12855] submit_bio_noacct_nocheck+0x543/0xbf0 [ 441.478148][T12855] submit_bio_noacct+0xd18/0x2000 [ 441.483697][T12855] submit_bh_wbc+0x681/0x890 [ 441.488821][T12855] block_read_full_folio+0x264/0x8e0 [ 441.494651][T12855] filemap_read_folio+0xfc/0x3b0 [ 441.500125][T12855] do_read_cache_folio+0x2d7/0x6b0 [ 441.505772][T12855] read_part_sector+0xd1/0x370 [ 441.511061][T12855] adfspart_check_ICS+0x91/0x7d0 [ 441.516526][T12855] bdev_disk_changed+0x7a3/0x1250 [ 441.522075][T12855] blkdev_get_whole+0x187/0x290 [ 441.527451][T12855] bdev_open+0x2c7/0xe40 [ 441.532218][T12855] blkdev_open+0x34e/0x4f0 [ 441.537161][T12855] do_dentry_open+0x6d8/0x1660 [ 441.542468][T12855] vfs_open+0x82/0x3f0 [ 441.547066][T12855] path_openat+0x208c/0x31a0 [ 441.552184][T12855] do_file_open+0x20e/0x430 [ 441.557214][T12855] do_sys_openat2+0x10d/0x1e0 [ 441.562423][T12855] __x64_sys_openat+0x12d/0x210 [ 441.567986][T12855] do_syscall_64+0x10b/0xf80 [ 441.573123][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.579547][T12855] [ 441.579547][T12855] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 441.586781][T12855] __mutex_lock+0x1a4/0x1b10 [ 441.591922][T12855] nbd_queue_rq+0xba/0x1080 [ 441.597166][T12855] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 441.603270][T12855] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 441.610138][T12855] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 441.616654][T12855] blk_mq_run_hw_queue+0x23c/0x670 [ 441.622418][T12855] blk_mq_dispatch_list+0x51d/0x1360 [ 441.628244][T12855] blk_mq_flush_plug_list+0x130/0x600 [ 441.634159][T12855] __blk_flush_plug+0x2c4/0x4b0 [ 441.639571][T12855] __submit_bio+0x584/0x6c0 [ 441.644606][T12855] submit_bio_noacct_nocheck+0x543/0xbf0 [ 441.650773][T12855] submit_bio_noacct+0xd18/0x2000 [ 441.656336][T12855] submit_bh_wbc+0x681/0x890 [ 441.661467][T12855] block_read_full_folio+0x264/0x8e0 [ 441.667303][T12855] filemap_read_folio+0xfc/0x3b0 [ 441.672778][T12855] do_read_cache_folio+0x2d7/0x6b0 [ 441.678434][T12855] read_part_sector+0xd1/0x370 [ 441.683727][T12855] adfspart_check_ICS+0x91/0x7d0 [ 441.689192][T12855] bdev_disk_changed+0x7a3/0x1250 [ 441.694747][T12855] blkdev_get_whole+0x187/0x290 [ 441.700132][T12855] bdev_open+0x2c7/0xe40 [ 441.704903][T12855] blkdev_open+0x34e/0x4f0 [ 441.709852][T12855] do_dentry_open+0x6d8/0x1660 [ 441.715166][T12855] vfs_open+0x82/0x3f0 [ 441.719770][T12855] path_openat+0x208c/0x31a0 [ 441.724889][T12855] do_file_open+0x20e/0x430 [ 441.729928][T12855] do_sys_openat2+0x10d/0x1e0 [ 441.735139][T12855] __x64_sys_openat+0x12d/0x210 [ 441.740527][T12855] do_syscall_64+0x10b/0xf80 [ 441.745664][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.752089][T12855] [ 441.752089][T12855] -> #4 (set->srcu){.+.+}-{0:0}: [ 441.759237][T12855] __synchronize_srcu+0xa2/0x300 [ 441.764722][T12855] blk_mq_quiesce_queue+0x149/0x1c0 [ 441.770476][T12855] elevator_switch+0x17b/0x7e0 [ 441.775804][T12855] elevator_change+0x352/0x530 [ 441.781137][T12855] elevator_set_default+0x29e/0x360 [ 441.786869][T12855] blk_register_queue+0x48e/0x630 [ 441.792452][T12855] __add_disk+0x73f/0xe40 [ 441.797325][T12855] add_disk_fwnode+0x118/0x5c0 [ 441.802632][T12855] nbd_dev_add+0x77a/0xb10 [ 441.807582][T12855] nbd_init+0x291/0x2b0 [ 441.812279][T12855] do_one_initcall+0x121/0x750 [ 441.817590][T12855] kernel_init_freeable+0x6ea/0x7b0 [ 441.823341][T12855] kernel_init+0x1f/0x1e0 [ 441.828203][T12855] ret_from_fork+0x72b/0xd50 [ 441.833332][T12855] ret_from_fork_asm+0x1a/0x30 [ 441.838644][T12855] [ 441.838644][T12855] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 441.846488][T12855] __mutex_lock+0x1a4/0x1b10 [ 441.851670][T12855] elevator_change+0x1bc/0x530 [ 441.856990][T12855] elevator_set_none+0x92/0xf0 [ 441.862289][T12855] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 441.868640][T12855] nbd_start_device+0x1a6/0xbd0 [ 441.874032][T12855] nbd_genl_connect+0xff2/0x1a40 [ 441.879510][T12855] genl_family_rcv_msg_doit+0x214/0x300 [ 441.885612][T12855] genl_rcv_msg+0x560/0x800 [ 441.890668][T12855] netlink_rcv_skb+0x159/0x420 [ 441.895979][T12855] genl_rcv+0x28/0x40 [ 441.900518][T12855] netlink_unicast+0x585/0x850 [ 441.905829][T12855] netlink_sendmsg+0x8b0/0xda0 [ 441.911148][T12855] ____sys_sendmsg+0x9e1/0xb70 [ 441.916471][T12855] ___sys_sendmsg+0x190/0x1e0 [ 441.921732][T12855] __sys_sendmsg+0x170/0x220 [ 441.926863][T12855] do_syscall_64+0x10b/0xf80 [ 441.932007][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.938465][T12855] [ 441.938465][T12855] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 441.947118][T12855] blk_alloc_queue+0x610/0x790 [ 441.952423][T12855] blk_mq_alloc_queue+0x174/0x290 [ 441.958001][T12855] __blk_mq_alloc_disk+0x29/0x120 [ 441.963576][T12855] nbd_dev_add+0x492/0xb10 [ 441.968534][T12855] nbd_init+0x291/0x2b0 [ 441.973237][T12855] do_one_initcall+0x121/0x750 [ 441.978555][T12855] kernel_init_freeable+0x6ea/0x7b0 [ 441.984304][T12855] kernel_init+0x1f/0x1e0 [ 441.989174][T12855] ret_from_fork+0x72b/0xd50 [ 441.994303][T12855] ret_from_fork_asm+0x1a/0x30 [ 441.999614][T12855] [ 441.999614][T12855] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 442.007211][T12855] fs_reclaim_acquire+0xc4/0x100 [ 442.012711][T12855] prepare_alloc_pages+0x166/0x5f0 [ 442.018381][T12855] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 442.024823][T12855] alloc_pages_mpol+0x1fb/0x540 [ 442.030235][T12855] alloc_pages_noprof+0x1a/0x160 [ 442.035707][T12855] __pud_alloc+0x3b/0x690 [ 442.040585][T12855] huge_pte_alloc+0x55a/0x730 [ 442.045809][T12855] hugetlb_fault+0x369/0x1410 [ 442.051039][T12855] handle_mm_fault+0x5f1/0xa20 [ 442.056338][T12855] __get_user_pages+0x1178/0x32a0 [ 442.061917][T12855] populate_vma_page_range+0x267/0x3f0 [ 442.067920][T12855] __mm_populate+0x107/0x3a0 [ 442.073036][T12855] vm_mmap_pgoff+0x37f/0x470 [ 442.078183][T12855] ksys_mmap_pgoff+0x285/0x610 [ 442.083495][T12855] __x64_sys_mmap+0x125/0x190 [ 442.088709][T12855] do_syscall_64+0x10b/0xf80 [ 442.093844][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.100264][T12855] [ 442.100264][T12855] -> #0 (&resv_map->rw_sema){++++}-{4:4}: [ 442.108193][T12855] __lock_acquire+0x14b8/0x2630 [ 442.113582][T12855] lock_acquire+0x1b1/0x370 [ 442.118617][T12855] down_write+0x8b/0x1f0 [ 442.123407][T12855] hugetlb_vma_lock_write+0x109/0x140 [ 442.129320][T12855] __hugetlb_zap_begin+0x1e9/0x2b0 [ 442.134980][T12855] unmap_vmas+0x3dc/0x5f0 [ 442.140028][T12855] unmap_region+0x1bc/0x3b0 [ 442.145085][T12855] __mmap_region+0x1b06/0x2da0 [ 442.150381][T12855] mmap_region+0x527/0x620 [ 442.155333][T12855] do_mmap+0xc63/0x12f0 [ 442.160032][T12855] vm_mmap_pgoff+0x29e/0x470 [ 442.165194][T12855] ksys_mmap_pgoff+0x285/0x610 [ 442.170505][T12855] __x64_sys_mmap+0x125/0x190 [ 442.175736][T12855] do_syscall_64+0x10b/0xf80 [ 442.180876][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.187300][T12855] [ 442.187300][T12855] other info that might help us debug this: [ 442.187300][T12855] [ 442.197518][T12855] Chain exists of: [ 442.197518][T12855] &resv_map->rw_sema --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 442.197518][T12855] [ 442.210849][T12855] Possible unsafe locking scenario: [ 442.210849][T12855] [ 442.218289][T12855] CPU0 CPU1 [ 442.223644][T12855] ---- ---- [ 442.228998][T12855] lock(&mm->mmap_lock); [ 442.233333][T12855] lock(sk_lock-AF_INET6); [ 442.240361][T12855] lock(&mm->mmap_lock); [ 442.247213][T12855] lock(&resv_map->rw_sema); [ 442.251896][T12855] [ 442.251896][T12855] *** DEADLOCK *** [ 442.251896][T12855] [ 442.260032][T12855] 1 lock held by syz.1.2584/12855: [ 442.265135][T12855] #0: ffff888036bb27f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 442.274605][T12855] [ 442.274605][T12855] stack backtrace: [ 442.280512][T12855] CPU: 1 UID: 0 PID: 12855 Comm: syz.1.2584 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.280563][T12855] Tainted: [L]=SOFTLOCKUP [ 442.280576][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.280597][T12855] Call Trace: [ 442.280609][T12855] [ 442.280621][T12855] dump_stack_lvl+0x100/0x190 [ 442.280662][T12855] print_circular_bug.cold+0x178/0x1c7 [ 442.280727][T12855] check_noncircular+0x146/0x160 [ 442.280774][T12855] __lock_acquire+0x14b8/0x2630 [ 442.280828][T12855] lock_acquire+0x1b1/0x370 [ 442.280869][T12855] ? hugetlb_vma_lock_write+0x109/0x140 [ 442.280925][T12855] ? __pfx___might_resched+0x10/0x10 [ 442.280976][T12855] ? mtree_range_walk+0x72b/0xb70 [ 442.281030][T12855] down_write+0x8b/0x1f0 [ 442.281062][T12855] ? hugetlb_vma_lock_write+0x109/0x140 [ 442.281110][T12855] ? __pfx_down_write+0x10/0x10 [ 442.281146][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.281195][T12855] hugetlb_vma_lock_write+0x109/0x140 [ 442.281247][T12855] __hugetlb_zap_begin+0x1e9/0x2b0 [ 442.281308][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.281354][T12855] unmap_vmas+0x3dc/0x5f0 [ 442.281416][T12855] ? __pfx_unmap_vmas+0x10/0x10 [ 442.281469][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.281512][T12855] ? mas_prev_range+0x9b/0xf0 [ 442.281545][T12855] ? __pfx_mas_prev_range+0x10/0x10 [ 442.281578][T12855] ? vms_gather_munmap_vmas+0x1187/0x1720 [ 442.281627][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.281669][T12855] ? vms_gather_munmap_vmas+0xc85/0x1720 [ 442.281718][T12855] unmap_region+0x1bc/0x3b0 [ 442.281757][T12855] ? __pfx_unmap_region+0x10/0x10 [ 442.281813][T12855] __mmap_region+0x1b06/0x2da0 [ 442.281857][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.281899][T12855] ? __lock_acquire+0x4a5/0x2630 [ 442.281946][T12855] ? __pfx___mmap_region+0x10/0x10 [ 442.281993][T12855] ? rcu_is_watching+0x12/0xc0 [ 442.282045][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282088][T12855] ? trace_pelt_se_tp+0x13b/0x190 [ 442.282135][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282178][T12855] ? do_raw_spin_lock+0x128/0x260 [ 442.282231][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282273][T12855] ? __lock_acquire+0x4a5/0x2630 [ 442.282316][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282358][T12855] ? do_raw_spin_unlock+0x145/0x1e0 [ 442.282409][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282465][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282508][T12855] ? rcu_is_watching+0x12/0xc0 [ 442.282558][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282601][T12855] ? trace_hrtimer_start+0x79/0x230 [ 442.282653][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282695][T12855] ? hrtimer_start_range_ns+0x860/0x1a50 [ 442.282749][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282792][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.282834][T12855] ? find_held_lock+0x2b/0x80 [ 442.282892][T12855] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 442.282958][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283000][T12855] ? mark_held_locks+0x40/0x70 [ 442.283041][T12855] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 442.283098][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283176][T12855] ? rcu_is_watching+0x12/0xc0 [ 442.283227][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283275][T12855] mmap_region+0x527/0x620 [ 442.283322][T12855] ? __pfx_mmap_region+0x10/0x10 [ 442.283366][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283408][T12855] ? hugetlb_get_unmapped_area+0x184/0x270 [ 442.283461][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283504][T12855] ? cap_mmap_addr+0x4b/0x120 [ 442.283556][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283599][T12855] ? security_mmap_addr+0x71/0x1e0 [ 442.283639][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283682][T12855] ? __get_unmapped_area+0x255/0x3e0 [ 442.283742][T12855] do_mmap+0xc63/0x12f0 [ 442.283802][T12855] ? __pfx_do_mmap+0x10/0x10 [ 442.283856][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.283900][T12855] ? __pfx_down_write_killable+0x10/0x10 [ 442.283945][T12855] vm_mmap_pgoff+0x29e/0x470 [ 442.284009][T12855] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 442.284064][T12855] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 442.284110][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.284159][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.284207][T12855] ksys_mmap_pgoff+0x285/0x610 [ 442.284265][T12855] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 442.284318][T12855] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 442.284372][T12855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.284420][T12855] __x64_sys_mmap+0x125/0x190 [ 442.284466][T12855] do_syscall_64+0x10b/0xf80 [ 442.284519][T12855] ? irqentry_exit+0x117/0x790 [ 442.284576][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.284612][T12855] RIP: 0033:0x7f4b06f9cdd9 [ 442.284639][T12855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.284674][T12855] RSP: 002b:00007f4b07db0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 442.284707][T12855] RAX: ffffffffffffffda RBX: 00007f4b07216090 RCX: 00007f4b06f9cdd9 [ 442.284730][T12855] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 442.284753][T12855] RBP: 00007f4b07032d69 R08: ffffffffffffffff R09: 0000000000000000 [ 442.284776][T12855] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 442.284797][T12855] R13: 00007f4b07216128 R14: 00007f4b07216090 R15: 00007ffd8208af48 [ 442.284835][T12855] [ 442.875165][ T5621] ocfs2: Unmounting device (7,0) on (node local) [ 442.891324][ T5758] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 443.025114][ T2165] usb 5-1: Using ep0 maxpacket: 16 [ 443.031955][ T2165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.042945][ T2165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.053749][ T2165] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.067008][ T2165] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.076096][ T2165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.085797][ T2165] usb 5-1: config 0 descriptor?? [ 443.106873][ T5758] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 443.115976][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.124825][ T5758] usb 4-1: Product: syz [ 443.129013][ T5758] usb 4-1: Manufacturer: syz [ 443.133679][ T5758] usb 4-1: SerialNumber: syz [ 443.501605][ T2165] hid_parser_main: 7 callbacks suppressed [ 443.501630][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.518298][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.525658][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.533026][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.540264][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.547810][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.555602][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.563084][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.570359][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.577625][ T2165] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 443.592710][ T2165] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 443.604229][ T2165] microsoft 0003:045E:07DA.001B: no inputs found [ 443.611128][ T2165] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 443.720168][ T2165] usb 5-1: USB disconnect, device number 18 [ 443.761035][ T5758] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 443.971272][ T2165] usb 4-1: USB disconnect, device number 21 [ 447.702494][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.621377][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!