last executing test programs: 7m42.719796228s ago: executing program 1 (id=519): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000005c0)={0x0, 0x4, 0x69, 0x1}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) sendmmsg$sock(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2}, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="78dd6f4b8e28ab449824e5a8d063bc4787e36405692f7cae5cee5ccf88a632c21d3a0e8898d17beca0451b50680e1e66dee19c728a875b158626108ed41977ed5ee5d58470abbd67ee78824a82630d4270c6953eaf5c03870ea2b7797c8435969c45a32bfe022046cdf2f67e6d5bb4e3af22a2c8e32d2629510056ba", 0x7c}, {&(0x7f0000000380)="1cae7d5068a4d09eee69efacdf6b7b5b1acc61b08f239c7d8ee1de46caf01a557b371fbcd58aa80712fa71f7fbde497da78cf33251db111e7ea07c927b9c64ea21ef03b1ddf4cdf09961e4576e6ee43634074819b0a8de301dae5c63b77aa8e0c7fe3dcfabb3960c5c3d6801dec65a492b21b072e5ff8fd2ec06b9f3d681370d2d09d0634aa218163f57c061638e157859be", 0x92}, {&(0x7f0000000440)="50aad3360d3d70e7202ecd465c85e8874fc898418807992a0f1ecece06868e7c510c9b07da6881cb9bded893e22a1ad484e1d1be3de2c92e6ecce4774b6ab32fa9abb9ac168dbfb894adc5965e5499ea68789c06920d2971402ea46c8e", 0x5d}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="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", 0xe96}], 0x50}}], 0x1, 0x0) 7m42.218914613s ago: executing program 1 (id=525): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, &(0x7f0000000340)=[{0x10, 0x6, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffff}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x5f}) 7m41.977352039s ago: executing program 1 (id=528): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r1, 0xfffffffa, 0x80000003, 0xb, 0x1fd, 0x1}) 7m40.792731529s ago: executing program 1 (id=536): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0xaa0d9a51e63453c5, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 7m40.576212952s ago: executing program 1 (id=539): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m38.106561385s ago: executing program 1 (id=549): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x6}) 7m37.405845133s ago: executing program 32 (id=549): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x6}) 3.840086523s ago: executing program 5 (id=5499): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24018847) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.823146055s ago: executing program 2 (id=5500): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="400e14000000f72a"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.734342594s ago: executing program 4 (id=5501): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x105}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x48, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.502438448s ago: executing program 5 (id=5504): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 3.387986702s ago: executing program 4 (id=5506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 3.16992125s ago: executing program 0 (id=5508): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3.070822249s ago: executing program 2 (id=5510): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_clone3(&(0x7f0000000080)={0x23848000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0xae) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x3, 0xd0c1, {r1}, {0xffffffffffffffff}, 0x8, 0x8}) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x7, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.930150542s ago: executing program 5 (id=5513): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.808947897s ago: executing program 0 (id=5515): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x6a7c1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x800) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f08000000481800100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 2.659122131s ago: executing program 5 (id=5517): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) unshare(0x8000000) 2.350632895s ago: executing program 2 (id=5520): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket(0x1, 0x80005, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r3 = syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) capset(0x0, 0x0) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x4010) 2.156860076s ago: executing program 2 (id=5524): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.918169968s ago: executing program 0 (id=5527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xefff, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 1.838583954s ago: executing program 4 (id=5528): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @local, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04f4030713c6b268b766c47349c17c4f9f"], 0x5b) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x24000084, 0x0, 0x0) 1.838243383s ago: executing program 5 (id=5529): socket$kcm(0x2, 0x200000000000001, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.550296925s ago: executing program 4 (id=5531): socket$inet_udp(0x2, 0x2, 0x0) socket(0x848000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.46017641s ago: executing program 3 (id=5532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="42f7"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.456013349s ago: executing program 2 (id=5533): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8c, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2}, 0x11) 1.392767237s ago: executing program 0 (id=5534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) 1.375768208s ago: executing program 5 (id=5535): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x20000002}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006}) 1.36603058s ago: executing program 4 (id=5536): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$bt_l2cap(r0, &(0x7f00000001c0), &(0x7f0000000240)=0xe, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) pipe2$watch_queue(&(0x7f0000000140), 0x80) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.250933027s ago: executing program 3 (id=5537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 446.424557ms ago: executing program 3 (id=5538): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = inotify_init1(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) read(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 410.220544ms ago: executing program 0 (id=5539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 368.661701ms ago: executing program 2 (id=5540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 367.782705ms ago: executing program 4 (id=5541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000040)={{0x8, 0x1, 0x280, 0x101, 'syz1\x00', 0x7ff}, 0x1, [0x59, 0x0, 0x7ff, 0x4, 0x200, 0x5, 0x7ace, 0x10000, 0x7, 0x1ff, 0x8, 0x0, 0x1, 0x4341, 0x7, 0x8, 0xfffffffffffff01e, 0x4a6, 0x4, 0x3, 0x5831, 0x7fffffff, 0x1, 0x3, 0x7, 0x4, 0x1, 0x1, 0x4cc, 0x8, 0x7fffffff, 0xa, 0x0, 0x1000, 0x8, 0x8, 0x10, 0x8, 0x2, 0xffffffff, 0x5, 0xfffffffffffffffc, 0x3, 0x8, 0x5, 0x7, 0x0, 0x4, 0xa3, 0xfffffffffffffffc, 0x8, 0xcb02, 0xe, 0x40, 0xf5af, 0x3ff, 0x0, 0x8000000000000000, 0xf, 0x5, 0x7, 0x9fc, 0x2, 0x100000001, 0xfffffffffffffffc, 0x29, 0x6, 0xfffffffffffffff8, 0x4, 0xe, 0xa81, 0x8001, 0x7f, 0x3, 0x0, 0x7, 0x3, 0x2, 0x1ff, 0xa, 0x8, 0x5, 0x2, 0x0, 0x8, 0xe5a4, 0x5, 0x101, 0x3, 0x7, 0x10001, 0x752, 0xf, 0x80000001, 0x4eb, 0x9, 0x3, 0x3ff, 0x4, 0x3, 0x10000, 0x4, 0x0, 0x8001, 0x0, 0x100000000, 0x21d, 0x58e, 0x6, 0x2, 0x7f, 0x200000, 0x8, 0x8001, 0x8, 0x0, 0x812, 0x1000006, 0x81, 0x1, 0x10001, 0x5, 0x4, 0x3, 0x34c000000000000, 0x3, 0x800, 0x65]}) 210.355533ms ago: executing program 3 (id=5542): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 86.494359ms ago: executing program 3 (id=5543): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000854000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000e7a000/0x1000)=nil) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) 0s ago: executing program 3 (id=5544): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host16=0xc06, 0x4, 0x80000001, 0x3}}], 0x38}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): op_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 499.927624][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 500.242918][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 500.242951][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.255140][T15543] loop4: detected capacity change from 0 to 40427 [ 500.321524][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.322311][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.323768][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.325884][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.333405][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.334394][ T1026] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.359454][T15543] F2FS-fs (loop4): invalid crc value [ 500.365664][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.370031][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.373810][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.376005][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.392349][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.393593][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.394296][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.401563][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.403024][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.404774][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.410134][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.421306][T13375] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.440569][T13375] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.448173][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.475644][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.476452][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.478611][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.479237][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.479841][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.480413][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.481168][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.481810][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.482477][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.484202][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.492189][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.492257][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.495670][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.497162][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.509904][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.511046][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.514632][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.520343][ T10] usb 3-1: config 0 descriptor?? [ 500.536608][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.536655][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.536686][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.545124][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.545236][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.593723][ T10] cp210x 3-1:0.0: cp210x converter detected [ 500.596224][T13367] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.613103][T15543] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 500.620041][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 500.634601][T15543] F2FS-fs (loop4): Start checkpoint disabled! [ 500.670751][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 500.693572][T13367] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 500.858088][T15543] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 500.868687][T15543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 500.991566][ T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 501.066852][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 501.271051][ T10] usb 3-1: USB disconnect, device number 34 [ 501.487778][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487887][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.514743][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 501.750226][ T12] kworker/u8:0: attempt to access beyond end of device [ 501.750226][ T12] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 501.780092][ T10] cp210x 3-1:0.0: device disconnected [ 501.830065][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 501.830100][ T12] Tainted: [L]=SOFTLOCKUP [ 501.830107][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.830120][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 501.830220][ T12] Call Trace: [ 501.830262][ T12] [ 501.830312][ T12] dump_stack_lvl+0xe8/0x150 [ 501.830397][ T12] f2fs_stop_checkpoint+0x3cd/0x590 [ 501.830482][ T12] f2fs_write_end_io+0x1274/0x1740 [ 501.830583][ T12] __submit_merged_bio+0x256/0x6a0 [ 501.830643][ T12] __submit_merged_write_cond+0x3c9/0x4e0 [ 501.830680][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 501.830761][ T12] f2fs_write_data_pages+0x287e/0x34f0 [ 501.830818][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 501.830860][ T12] ? ktime_get+0x45/0x220 [ 501.830965][ T12] ? __lock_acquire+0x6b5/0x2d10 [ 501.831026][ T12] ? __lock_acquire+0x6b5/0x2d10 [ 501.831071][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 501.831094][ T12] do_writepages+0x32e/0x550 [ 501.831153][ T12] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 501.831210][ T12] ? reacquire_held_locks+0x104/0x190 [ 501.831234][ T12] ? rt_spin_lock+0x1e0/0x400 [ 501.831270][ T12] __writeback_single_inode+0x133/0x10e0 [ 501.831324][ T12] ? rt_spin_unlock+0x160/0x200 [ 501.831352][ T12] writeback_sb_inodes+0x97f/0x1980 [ 501.831399][ T12] ? lockdep_hardirqs_on+0x7a/0x110 [ 501.831454][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 501.831520][ T12] ? rcu_is_watching+0x15/0xb0 [ 501.831602][ T12] wb_writeback+0x445/0xb00 [ 501.831632][ T12] ? queue_io+0x1d1/0x440 [ 501.831664][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 501.831706][ T12] wb_workfn+0x3fd/0xf20 [ 501.831726][ T12] ? look_up_lock_class+0x57/0x110 [ 501.831753][ T12] ? lapic_next_event+0x11/0x20 [ 501.831851][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 501.831875][ T12] ? __pfx___schedule+0x10/0x10 [ 501.831896][ T12] ? irqentry_exit+0x218/0x760 [ 501.831915][ T12] ? trace_irq_disable+0x3b/0x140 [ 501.831966][ T12] ? process_one_work+0x8be/0x1630 [ 501.832020][ T12] ? process_one_work+0x8be/0x1630 [ 501.832051][ T12] ? preempt_schedule_thunk+0x16/0x40 [ 501.832075][ T12] ? process_one_work+0x8be/0x1630 [ 501.832098][ T12] process_one_work+0x98b/0x1630 [ 501.832143][ T12] ? __pfx_process_one_work+0x10/0x10 [ 501.832166][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 501.832233][ T12] worker_thread+0xb49/0x1140 [ 501.832284][ T12] kthread+0x389/0x470 [ 501.832306][ T12] ? __pfx_worker_thread+0x10/0x10 [ 501.832331][ T12] ? __pfx_kthread+0x10/0x10 [ 501.832352][ T12] ret_from_fork+0x514/0xb70 [ 501.832379][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 501.832402][ T12] ? __switch_to+0xc79/0x1410 [ 501.832451][ T12] ? __pfx_kthread+0x10/0x10 [ 501.832468][ T12] ret_from_fork_asm+0x1a/0x30 [ 501.832492][ T12] [ 501.846198][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 501.893595][T15574] fuse: Bad value for 'fd' [ 502.302024][ T181] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 502.507719][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 502.743756][T15589] loop5: detected capacity change from 0 to 32768 [ 502.785365][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.787438][ T6028] loop4: lost filesystem error report for type 5 error -108 [ 502.790001][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.816732][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.816790][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.839136][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.839220][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.863148][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.881103][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.885878][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.886488][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.901322][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.902634][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.921339][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.940990][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.972507][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 502.995978][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 502.997172][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.002096][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.002459][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.013482][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.014151][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.017905][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.019546][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.025589][T15589] JBD2: Ignoring recovery information on journal [ 503.025780][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.026236][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.026356][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.026453][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.033852][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.033903][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.033929][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.033954][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.033979][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034002][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034025][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034049][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034072][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034096][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034120][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034143][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034167][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034190][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034214][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034246][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034268][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034291][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034315][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034338][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034363][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034387][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.034411][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036259][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036397][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036476][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036552][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036620][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036704][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036787][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036859][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.036999][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.039964][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.039994][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.040020][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.040044][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.084996][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085054][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085082][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085107][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085132][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085157][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085181][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085206][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085239][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085263][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085287][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085333][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085357][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085403][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085428][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085451][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085473][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085496][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085519][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085541][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085564][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085586][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085610][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085632][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085656][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085680][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085703][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085726][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085748][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085770][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085793][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085816][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085844][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085866][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085889][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085911][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085934][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085956][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.085979][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.086001][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093037][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093097][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093123][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093148][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093172][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093196][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093227][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093251][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093275][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093298][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093322][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.093345][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094230][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094276][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094302][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094326][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094350][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094374][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094398][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094420][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094443][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094466][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094490][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094513][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094537][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094582][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094606][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094630][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094654][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094677][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094712][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094736][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.094760][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107207][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107244][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107268][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107292][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107316][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107338][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107361][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107384][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107407][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107430][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107452][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107475][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107498][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107521][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107543][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107566][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107589][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.107611][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110189][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110223][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110242][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110262][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110279][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110299][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110318][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110339][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110361][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110383][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110406][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.110429][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122259][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122307][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122327][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122345][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122364][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122383][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122402][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122421][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122441][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122460][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122478][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122497][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122516][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122535][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122553][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122571][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122590][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122611][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122629][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122650][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122670][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122691][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122712][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122733][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122751][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.122770][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124037][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124066][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124089][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124111][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124135][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124158][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124181][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124203][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124233][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124256][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124279][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124301][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124324][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124399][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124422][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124446][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124481][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124504][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124535][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124558][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124580][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124601][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124623][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124655][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124678][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124700][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124723][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124745][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.124767][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126682][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126709][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126732][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126755][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126778][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126801][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126824][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126847][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126869][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126892][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126915][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126938][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126961][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.126984][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127007][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127030][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127052][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127074][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127097][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127120][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127143][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127165][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127188][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127217][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127239][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127262][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127284][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127307][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127329][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127352][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127374][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127396][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127418][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127441][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127464][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127486][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127509][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127532][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127555][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127578][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127601][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127623][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127646][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.127668][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139132][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139187][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139218][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139242][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139265][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139288][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139311][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139334][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139356][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139379][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139402][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139425][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139447][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139470][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.139493][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 503.239276][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 503.258835][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 503.259451][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.259760][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.266342][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.284027][T15589] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 503.315391][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.315448][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.315472][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.315495][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.315518][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.315541][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.318143][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.318984][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.322768][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.328504][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.332013][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.333317][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.351864][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.354696][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.368322][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.384394][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.390450][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.421512][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.453564][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.464356][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.471253][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.485935][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.504058][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.514926][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.576031][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.603876][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.620772][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.637025][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.637078][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.678372][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.696889][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.716720][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.791283][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.810995][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.822052][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.827795][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.843513][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.846844][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.849852][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.849897][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.849927][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.870175][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.870290][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.870356][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.887767][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.887819][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921503][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921564][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921588][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921610][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921632][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921655][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 503.921676][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 504.234725][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 505.647915][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.820892][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 505.822622][ T1026] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 505.929972][ T5618] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 506.105034][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 506.495038][ T75] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 506.506425][ T75] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 506.506499][ T75] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 506.930720][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 507.228261][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.452912][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.454473][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.579574][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.755840][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.757010][ T75] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.757371][ T75] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 507.878577][T15671] syz_tun: entered allmulticast mode [ 508.020501][T15673] loop4: detected capacity change from 0 to 128 [ 508.025851][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 508.026952][T15673] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 508.088311][ T38] audit: type=1326 audit(1779202855.445:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.2.4176" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7fc00000 [ 508.185758][ T75] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 508.509859][ T7245] ocfs2: Unmounting device (7,5) on (node local) [ 508.600712][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 508.641628][ T6028] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 508.794171][ T6028] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.794228][ T6028] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.794253][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.843797][ T6028] usb 3-1: config 0 descriptor?? [ 508.867334][ T6028] pwc: Askey VC010 type 2 USB webcam detected. [ 509.100293][ T6028] pwc: send_video_command error -71 [ 509.100313][ T6028] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 509.100428][ T6028] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 509.136647][ T6028] usb 3-1: USB disconnect, device number 35 [ 509.906234][T15712] bridge0: entered allmulticast mode [ 509.963985][T15712] pim6reg: entered allmulticast mode [ 509.964435][T15714] pim6reg: left allmulticast mode [ 509.965386][T15714] bridge0: left allmulticast mode [ 510.369942][T15724] loop4: detected capacity change from 0 to 8 [ 510.392137][ T181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 510.464959][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 510.527082][ T1166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 510.532226][ T1166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 510.602945][T15734] loop2: detected capacity change from 0 to 128 [ 510.612594][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.612863][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.613015][T15734] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 510.613690][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.614067][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.614424][ T1166] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 510.648439][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.662446][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.662497][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.662520][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.662542][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.662564][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.672874][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.687791][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.700908][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.700959][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.700982][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.701004][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.701026][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.701047][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.702881][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.716084][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.748483][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.760685][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 510.848792][T15738] loop5: detected capacity change from 0 to 7 [ 510.868007][ T1026] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 510.868253][T15738] Dev loop5: unable to read RDB block 7 [ 510.868293][T15738] loop5: AHDI p1 p2 p3 [ 510.868383][T15738] loop5: partition table partially beyond EOD, truncated [ 510.868609][T15738] loop5: p1 size 1986618213 extends beyond EOD, truncated [ 510.907172][T15738] loop5: p2 start 1702059890 is beyond EOD, truncated [ 511.051512][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 511.105027][ T4981] Dev loop5: unable to read RDB block 7 [ 511.105058][ T4981] loop5: AHDI p1 p2 p3 [ 511.105087][ T4981] loop5: partition table partially beyond EOD, truncated [ 511.105320][ T4981] loop5: p1 size 1986618213 extends beyond EOD, truncated [ 511.113835][ T4981] loop5: p2 start 1702059890 is beyond EOD, truncated [ 511.114323][ T4981] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 511.429150][T15733] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 511.604387][ T1166] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 511.609136][ T38] audit: type=1800 audit(1779202858.925:395): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4207" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 511.625427][ T1166] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 511.625512][ T1166] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 511.625555][ T1166] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 511.626485][ T181] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 511.631165][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 511.645181][ T6028] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 511.798655][ T5618] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 511.835541][ T6028] usb 6-1: Using ep0 maxpacket: 32 [ 511.839044][ T6028] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 511.839071][ T6028] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 511.839091][ T6028] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 511.839140][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.839163][ T6028] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 511.839186][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.839207][ T6028] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 511.839229][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 511.839266][ T6028] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 511.839290][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.954355][ T6028] usb 6-1: config 0 descriptor?? [ 512.075144][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 512.314208][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 512.890406][ T6028] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 512.950106][ T6028] usb 6-1: USB disconnect, device number 27 [ 513.616664][ T6028] usblp0: removed [ 513.989094][ T6028] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 514.255005][ T6028] usb 6-1: Using ep0 maxpacket: 32 [ 514.268713][ T6028] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 514.268743][ T6028] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 514.268764][ T6028] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 514.268828][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.268852][ T6028] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.268877][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.268899][ T6028] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 514.268923][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 514.268966][ T6028] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 514.268990][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.424085][T15820] loop4: detected capacity change from 0 to 40427 [ 514.425983][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.426536][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.427167][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.428426][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.428844][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.428964][T15820] F2FS-fs (loop4): invalid crc value [ 514.430807][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.431420][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.434084][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.443469][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.552859][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.570704][ T6028] usb 6-1: config 0 descriptor?? [ 514.573389][T15820] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 514.583394][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.594286][T15820] F2FS-fs (loop4): Start checkpoint disabled! [ 514.609973][ T1166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 514.649684][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 514.655738][T15820] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 514.656162][T15820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 514.688535][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.697424][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.710569][ T6028] usb 6-1: can't set config #0, error -71 [ 514.711256][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.713455][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.721159][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.732198][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.741939][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.754348][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.776137][ T6028] usb 6-1: USB disconnect, device number 28 [ 514.857003][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.862803][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.864507][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.887537][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.898234][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.898908][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.902226][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.905974][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.939947][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.943560][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.952614][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.973746][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.974911][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 514.987698][ T4323] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.005275][ T1459] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.006458][T13371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.008117][T13371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.023447][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.033414][T13371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.039704][ T75] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.042194][T13371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.044567][T13371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.044620][T13371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.049925][ T1459] kworker/u8:12: attempt to access beyond end of device [ 515.049925][ T1459] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 515.049990][ T1459] CPU: 1 UID: 0 PID: 1459 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 515.050017][ T1459] Tainted: [L]=SOFTLOCKUP [ 515.050024][ T1459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.050037][ T1459] Workqueue: writeback wb_workfn (flush-7:4) [ 515.050068][ T1459] Call Trace: [ 515.050076][ T1459] [ 515.050084][ T1459] dump_stack_lvl+0xe8/0x150 [ 515.050113][ T1459] f2fs_stop_checkpoint+0x3cd/0x590 [ 515.050147][ T1459] f2fs_write_end_io+0x1274/0x1740 [ 515.050190][ T1459] __submit_merged_bio+0x256/0x6a0 [ 515.050226][ T1459] __submit_merged_write_cond+0x3c9/0x4e0 [ 515.050263][ T1459] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 515.050314][ T1459] f2fs_write_data_pages+0x287e/0x34f0 [ 515.050376][ T1459] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 515.050412][ T1459] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 515.050472][ T1459] ? __lock_acquire+0x6b5/0x2d10 [ 515.050509][ T1459] ? __lock_acquire+0x6b5/0x2d10 [ 515.050550][ T1459] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 515.050579][ T1459] do_writepages+0x32e/0x550 [ 515.050609][ T1459] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 515.050634][ T1459] ? reacquire_held_locks+0x104/0x190 [ 515.050658][ T1459] ? rt_spin_lock+0x1e0/0x400 [ 515.050691][ T1459] __writeback_single_inode+0x133/0x10e0 [ 515.050720][ T1459] ? rt_spin_unlock+0x160/0x200 [ 515.050749][ T1459] writeback_sb_inodes+0x97f/0x1980 [ 515.050791][ T1459] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.050819][ T1459] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 515.050881][ T1459] ? rcu_is_watching+0x15/0xb0 [ 515.050915][ T1459] wb_writeback+0x445/0xb00 [ 515.050946][ T1459] ? queue_io+0x1d1/0x440 [ 515.050978][ T1459] ? __pfx_wb_writeback+0x10/0x10 [ 515.051018][ T1459] wb_workfn+0x3fd/0xf20 [ 515.051038][ T1459] ? look_up_lock_class+0x57/0x110 [ 515.051060][ T1459] ? trace_hrtimer_start+0x82/0x200 [ 515.051099][ T1459] ? __pfx_wb_workfn+0x10/0x10 [ 515.051124][ T1459] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.051154][ T1459] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.051184][ T1459] ? process_one_work+0x8be/0x1630 [ 515.051213][ T1459] ? process_one_work+0x8be/0x1630 [ 515.051252][ T1459] ? process_one_work+0x8be/0x1630 [ 515.051277][ T1459] process_one_work+0x98b/0x1630 [ 515.051323][ T1459] ? __pfx_process_one_work+0x10/0x10 [ 515.051348][ T1459] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.051391][ T1459] worker_thread+0xb49/0x1140 [ 515.051427][ T1459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.051550][ T1459] kthread+0x389/0x470 [ 515.051579][ T1459] ? __pfx_worker_thread+0x10/0x10 [ 515.051604][ T1459] ? __pfx_kthread+0x10/0x10 [ 515.051625][ T1459] ret_from_fork+0x514/0xb70 [ 515.051649][ T1459] ? __pfx_ret_from_fork+0x10/0x10 [ 515.051671][ T1459] ? __switch_to+0xc79/0x1410 [ 515.051692][ T1459] ? __pfx_kthread+0x10/0x10 [ 515.051711][ T1459] ret_from_fork_asm+0x1a/0x30 [ 515.051749][ T1459] [ 515.081044][ T1459] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 515.176541][ T1459] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.176648][ T1459] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 515.177203][ T1459] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 515.178331][ T1459] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 515.586187][ T38] audit: type=1326 audit(1779202862.945:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15839 comm="syz.0.4247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81916ace59 code=0x7ffc0000 [ 515.605737][ T38] audit: type=1326 audit(1779202862.955:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15839 comm="syz.0.4247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81916ace59 code=0x7ffc0000 [ 515.613061][ T38] audit: type=1326 audit(1779202862.975:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15839 comm="syz.0.4247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81916ace59 code=0x7ffc0000 [ 515.613227][ T38] audit: type=1326 audit(1779202862.975:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15839 comm="syz.0.4247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81916ace59 code=0x7ffc0000 [ 515.613394][ T38] audit: type=1326 audit(1779202862.975:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15839 comm="syz.0.4247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f81916ace59 code=0x7ffc0000 [ 515.645794][ T38] audit: type=1326 audit(1779202863.015:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.5.4249" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e84bce59 code=0x7ffc0000 [ 515.645983][ T38] audit: type=1326 audit(1779202863.015:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.5.4249" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e84bce59 code=0x7ffc0000 [ 515.698441][ T38] audit: type=1326 audit(1779202863.035:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.5.4249" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e84bce59 code=0x7ffc0000 [ 515.698630][ T38] audit: type=1326 audit(1779202863.065:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.5.4249" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e84bce59 code=0x7ffc0000 [ 515.698826][ T38] audit: type=1326 audit(1779202863.065:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.5.4249" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5e84bce59 code=0x7ffc0000 [ 516.432950][ T5618] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 516.822668][T15860] misc userio: Begin command sent, but we're already running [ 518.665156][ T5629] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 518.829376][ T5629] usb 3-1: Using ep0 maxpacket: 8 [ 518.840717][ T5629] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 518.840761][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.842290][ T5629] usb 3-1: Product: syz [ 518.842309][ T5629] usb 3-1: Manufacturer: syz [ 518.842325][ T5629] usb 3-1: SerialNumber: syz [ 518.888832][ T5629] usb 3-1: config 0 descriptor?? [ 518.921903][ T5629] gspca_main: se401-2.14.0 probing 047d:5003 [ 518.987330][T15935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4290'. [ 519.589548][ T5629] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 519.926805][ T5629] usb 3-1: USB disconnect, device number 36 [ 521.921886][T16017] overlayfs: failed to clone upperpath [ 523.076974][T16070] loop5: detected capacity change from 0 to 16 [ 523.104028][T16070] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 523.226413][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 523.303107][ T38] kauditd_printk_skb: 80 callbacks suppressed [ 523.303125][ T38] audit: type=1326 audit(1779202870.665:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.0.4350" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81916ace59 code=0x0 [ 523.374913][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 523.377398][ T9] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 523.377425][ T9] usb 3-1: config 2 has no interface number 0 [ 523.377464][ T9] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 523.377490][ T9] usb 3-1: config 2 interface 88 has no altsetting 0 [ 523.381083][ T9] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 523.381111][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.381131][ T9] usb 3-1: Product: syz [ 523.381145][ T9] usb 3-1: Manufacturer: syz [ 523.381159][ T9] usb 3-1: SerialNumber: syz [ 523.389353][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.475281][T16063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.598746][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 523.703810][T16063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.762845][T16083] loop5: detected capacity change from 0 to 1024 [ 523.785999][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.786332][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.787166][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.790675][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.790734][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.790787][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.790811][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.793715][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.793752][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.793778][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.793802][ T75] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.796264][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.799125][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.800816][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.803510][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.818676][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.821704][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.823199][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.823232][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.823257][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.823280][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.831796][T13371] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.831867][T13371] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.831895][T13371] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.831919][T13371] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.831966][T13371] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.834707][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.834762][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.834979][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.835006][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.839319][ T13] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 523.849872][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.851150][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.852432][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 523.857518][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 524.280587][ T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 524.293211][ T4323] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 524.300572][T13371] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 524.331016][ T9] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 524.331301][ T9] asix 3-1:2.88: probe with driver asix failed with error -71 [ 524.363711][ T9] usb 3-1: USB disconnect, device number 37 [ 524.685695][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 525.875849][T16140] overlayfs: missing 'workdir' [ 525.891565][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4378'. [ 528.945689][T16245] loop5: detected capacity change from 0 to 2048 [ 528.949682][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 528.984997][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 528.993320][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.006886][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.008762][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 529.010342][ T1432] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.020619][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.022524][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.039196][T13367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.051750][ T1432] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.061794][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.063917][ T1459] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 529.064545][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.068489][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.072755][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.141254][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.162448][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.181419][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.181543][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 529.184545][ T1459] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 529.258879][T16245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 530.062548][T16245] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 530.106312][ T1410] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 530.135923][T16245] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 530.135956][T16245] EXT4-fs (loop5): This should not happen!! Data will be lost [ 530.135956][T16245] [ 530.135971][T16245] EXT4-fs (loop5): Total free blocks count 0 [ 530.135985][T16245] EXT4-fs (loop5): Free/Dirty block details [ 530.136048][T16245] EXT4-fs (loop5): free_blocks=2415919104 [ 530.136100][T16245] EXT4-fs (loop5): dirty_blocks=32 [ 530.136113][T16245] EXT4-fs (loop5): Block reservation details [ 530.136126][T16245] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 530.269393][T16260] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 530.530964][T13361] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 530.639919][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 530.668736][T13361] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 530.684707][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 530.833803][T16301] loop5: detected capacity change from 0 to 512 [ 530.853603][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.867950][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.870649][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.871422][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.873885][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.874848][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.875495][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.876988][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.877618][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.889246][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.891487][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.893398][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.898475][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.898540][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.898918][ T1166] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 530.949251][T16301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.991169][ T1432] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.992742][ T1432] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.996426][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 530.998742][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 531.001044][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 531.004152][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 531.007959][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 531.097826][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 531.336922][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 531.337735][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 531.337874][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 531.362102][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 531.362315][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 531.421826][ T7245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.563473][ T1432] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 531.837815][ T5716] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 532.145557][T16321] loop5: detected capacity change from 0 to 32768 [ 532.146677][T16321] btrfs: Deprecated parameter 'usebackuproot' [ 532.146697][T16321] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 532.147224][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.147478][T16321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4439 (16321) [ 532.183414][T16325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.183988][T16325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.240231][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.246599][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.246748][T16321] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.246778][T16321] BTRFS info (device loop5): using crc32c checksum algorithm [ 532.309140][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.310173][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.312295][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.312977][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.313600][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.314200][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.318481][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.319153][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.320397][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.321232][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.321867][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.322493][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.323141][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.325172][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.326809][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.329104][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.330759][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.334310][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.338323][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.343713][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.346831][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.349366][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.350316][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.353496][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.399699][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.541505][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.543769][ T1166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.543796][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.544414][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.546206][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.547016][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.547409][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.547662][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.548341][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.549528][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.582942][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.624038][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.627455][ T181] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 532.627580][T16321] BTRFS error (device loop5): failed to load root extent [ 532.632405][T16321] BTRFS warning (device loop5): try to load backup roots slot 1 [ 532.632690][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.632819][ T1410] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 532.632911][T16321] BTRFS warning (device loop5): couldn't read tree root [ 532.632930][T16321] BTRFS warning (device loop5): try to load backup roots slot 2 [ 532.633148][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.633257][ T1410] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 532.633355][T16321] BTRFS warning (device loop5): couldn't read tree root [ 532.633374][T16321] BTRFS warning (device loop5): try to load backup roots slot 3 [ 532.633566][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.633953][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.634401][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.634750][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.637099][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.637467][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.646041][ T1410] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.659272][T13369] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.664089][T16321] BTRFS info (device loop5): rebuilding free space tree [ 532.773002][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 532.773100][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 532.811373][T16345] loop2: detected capacity change from 0 to 512 [ 532.851274][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 532.902035][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 532.905265][T16345] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 532.905363][T16345] UDF-fs: Scanning with blocksize 512 failed [ 533.104282][ T1410] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.104502][ T1410] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.107338][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.107598][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.107716][T16345] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 533.107733][T16345] UDF-fs: Scanning with blocksize 1024 failed [ 533.132197][ T1410] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.134463][ T1410] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.134518][ T1410] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.134702][T16345] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 533.134720][T16345] UDF-fs: Scanning with blocksize 2048 failed [ 533.135692][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.136106][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.136463][T16345] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 533.138657][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.138706][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.467876][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.488485][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.488835][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.504615][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.512816][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.521696][T13367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 533.530699][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.531717][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.531776][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.599867][T16321] BTRFS info (device loop5): checking UUID tree [ 533.675366][T13361] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.675423][T13361] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.677882][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.707037][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.707175][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.723574][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.736640][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.745104][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.745271][T16345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.763787][ T1432] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 533.773839][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.843096][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 533.947595][T16321] BTRFS info (device loop5): enabling ssd optimizations [ 533.947624][T16321] BTRFS info (device loop5): turning on async discard [ 533.947643][T16321] BTRFS info (device loop5): enabling free space tree [ 533.947660][T16321] BTRFS info (device loop5): force clearing of disk cache [ 533.947677][T16321] BTRFS info (device loop5): enabling auto defrag [ 533.947694][T16321] BTRFS info (device loop5): trying to use backup root at mount time [ 533.947713][T16321] BTRFS info (device loop5): use zstd compression, level 3 [ 534.429224][ T1166] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 534.476867][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 534.629274][T13367] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 534.644192][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 534.667392][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 534.754292][T16368] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.770884][T16368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.770900][T16368] IPv6: NLM_F_CREATE should be set when creating new route [ 534.796958][T16368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.844104][T16368] IPv6: NLM_F_CREATE should be set when creating new route [ 534.845875][T16372] loop2: detected capacity change from 0 to 512 [ 534.846913][T16372] EXT4-fs: Ignoring removed i_version option [ 534.882972][ T1459] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 534.883126][T16372] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 534.906956][ T5838] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 534.986229][ T1166] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 534.986318][ T1166] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.001153][ T1166] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.001211][ T1166] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.018545][ T1459] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.022549][ T7245] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 535.762449][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 536.689507][ T181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 538.863600][T16436] loop2: detected capacity change from 0 to 32768 [ 538.906478][T16436] ocfs2: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 538.906898][T16436] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 539.796695][T16478] loop2: detected capacity change from 0 to 1024 [ 539.811979][ T1459] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.813797][ T1459] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.947016][ T1459] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.951193][ T1459] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.952349][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.953029][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.953732][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.961366][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.965329][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.965720][T16478] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 539.966124][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.966162][ T1432] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.986694][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.986740][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.986775][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.990816][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.993315][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.993350][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.998159][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.998599][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 539.998629][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.009256][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.009924][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.009955][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.016835][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.018573][T13367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.046073][ T1166] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 540.205018][ T5743] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 540.320526][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 540.357654][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 540.359991][ T5743] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 540.360020][ T5743] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 540.360042][ T5743] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 540.360062][ T5743] usb 6-1: config 1 has no interface number 0 [ 540.360106][ T5743] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.360135][ T5743] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 540.360177][ T5743] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 540.360202][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.478151][ T5743] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 540.721054][ T5743] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 541.591033][ T32] usb 6-1: USB disconnect, device number 29 [ 541.619693][ T32] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 541.653994][T16517] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 542.376743][T16517] bond1: entered promiscuous mode [ 542.376803][T16517] bond1: entered allmulticast mode [ 542.404474][T16517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.438844][ T181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.543916][T16520] erspan1: entered allmulticast mode [ 542.601933][T16520] bond1: (slave erspan1): making interface the new active one [ 542.601958][T16520] erspan1: entered promiscuous mode [ 542.667425][T16520] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 542.721334][ T32] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 542.890348][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.890395][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.890438][ T32] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 542.890470][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.943593][ T32] usb 6-1: config 0 descriptor?? [ 543.467805][ T32] hid_parser_main: 40 callbacks suppressed [ 543.467865][ T32] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 543.570883][ T32] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 543.710478][ T32] cp2112 0003:10C4:EA90.000C: error requesting version [ 544.137503][ T32] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 544.162892][ T32] usb 6-1: USB disconnect, device number 30 [ 546.197258][T16635] netlink: 'syz.4.4572': attribute type 4 has an invalid length. [ 547.966694][T16663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4584'. [ 548.006998][T16663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4584'. [ 548.379465][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4589'. [ 548.379491][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4589'. [ 548.379507][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4589'. [ 550.170280][T16732] No memory to map [ 553.605072][ T5629] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 553.770014][ T5629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.790303][ T5629] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 553.790332][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.790351][ T5629] usb 3-1: Product: syz [ 553.790366][ T5629] usb 3-1: Manufacturer: syz [ 553.790379][ T5629] usb 3-1: SerialNumber: syz [ 553.839679][ T5629] usb 3-1: config 0 descriptor?? [ 553.914174][ T5629] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 554.051616][ T5629] usb 3-1: USB disconnect, device number 38 [ 554.332838][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 554.885219][T16877] 9p: Bad value for 'wfdno' [ 555.663073][ T5629] kernel write not supported for file /dsp (pid: 5629 comm: kworker/1:4) [ 555.964945][ T5629] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 556.195133][ T5629] usb 6-1: Using ep0 maxpacket: 16 [ 556.219673][ T5629] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 556.219700][ T5629] usb 6-1: config 66 has 2 interfaces, different from the descriptor's value: 3 [ 556.219762][ T5629] usb 6-1: config 66 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 556.222353][ T5629] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 556.222381][ T5629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.222401][ T5629] usb 6-1: Product: syz [ 556.222415][ T5629] usb 6-1: Manufacturer: syz [ 556.222431][ T5629] usb 6-1: SerialNumber: syz [ 556.695913][ T5629] usb 6-1: Fast Track Pro config OK [ 556.700167][ T5629] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 556.899912][ T5629] usb 6-1: USB disconnect, device number 31 [ 557.220178][ T5716] udevd[5716]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:66.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.351512][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'. [ 559.978615][T17001] EXT4-fs (loop6): unable to read superblock [ 561.649721][ T32] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 561.808740][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 561.812655][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 561.814162][ T32] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 561.814188][ T32] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 561.814209][ T32] usb 6-1: config 13 has no interface number 0 [ 561.814258][ T32] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 561.814285][ T32] usb 6-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 561.814307][ T32] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 561.814331][ T32] usb 6-1: config 13 interface 50 has no altsetting 0 [ 561.865381][ T32] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 561.865411][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.865431][ T32] usb 6-1: Product: syz [ 561.865446][ T32] usb 6-1: Manufacturer: syz [ 561.865461][ T32] usb 6-1: SerialNumber: syz [ 561.932327][T17057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 562.320739][T17072] loop5: detected capacity change from 0 to 16 [ 562.486581][T17072] erofs: Unknown parameter 'ÿ' [ 562.487031][T17072] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 562.868374][ T32] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.868512][ T32] usb 6-1: MIDIStreaming interface descriptor not found [ 562.930198][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.930296][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.277681][ T32] usb 6-1: USB disconnect, device number 32 [ 563.600461][T17093] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.4761'. [ 563.600485][T17093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4761'. [ 564.359479][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.455191][T17137] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 566.481442][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 566.638905][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.638947][ T9] usb 6-1: config 0 has no interfaces? [ 566.638979][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 566.639003][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.673003][ T9] usb 6-1: config 0 descriptor?? [ 566.904475][ T9] usb 6-1: USB disconnect, device number 33 [ 567.790540][T16915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 569.421773][T17295] loop2: detected capacity change from 0 to 1024 [ 569.472689][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.473564][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.501033][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.503126][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.503855][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.533977][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.542573][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.552596][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.570542][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.639515][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.640661][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.641437][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.692838][T16906] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.693828][T16906] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.721541][T16906] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.722326][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.724429][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.749492][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.750234][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.752550][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.754597][ T181] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.798147][T16915] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.817437][T16915] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.819636][T16880] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.958191][T16880] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 569.998469][ T1459] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 570.002180][T16880] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 570.002228][T16880] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 570.002252][T16880] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 570.002275][T16880] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 570.399845][T17295] hfsplus: failed to load extents file [ 570.400593][T17295] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 570.760238][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4843'. [ 570.928022][T17315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.478076][T17334] fuse: fd is not a fuse device [ 571.523304][T17334] overlayfs: failed to clone upperpath [ 571.811835][T17341] fuse: fd is not a fuse device [ 572.466329][ T32] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 572.624939][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 572.627931][ T32] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 572.627957][ T32] usb 3-1: config 0 has no interface number 0 [ 572.627999][ T32] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 572.628024][ T32] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 572.634626][ T32] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 572.634657][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.634677][ T32] usb 3-1: Product: syz [ 572.634692][ T32] usb 3-1: Manufacturer: syz [ 572.634707][ T32] usb 3-1: SerialNumber: syz [ 572.648191][ T32] usb 3-1: config 0 descriptor?? [ 572.649187][T17354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.649367][T17354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.894090][T17372] netlink: 'syz.0.4868': attribute type 1 has an invalid length. [ 572.894112][T17372] netlink: 'syz.0.4868': attribute type 4 has an invalid length. [ 572.894127][T17372] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4868'. [ 572.903238][T17354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.903427][T17354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 573.151585][T17369] overlayfs: failed to set uuid (525/file0, err=-1); falling back to uuid=null. [ 573.151712][T17369] overlayfs: failed to verify upper root origin [ 574.094929][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 574.248401][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.248436][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.248472][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 574.248495][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.295684][ T9] usb 6-1: config 0 descriptor?? [ 574.349594][ T32] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 574.349627][ T32] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 574.349859][ T32] asix 3-1:0.34: probe with driver asix failed with error -71 [ 574.370148][ T32] usb 3-1: USB disconnect, device number 39 [ 574.738194][ T9] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 574.738234][ T9] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 574.738263][ T9] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 574.738291][ T9] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 574.738328][ T9] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 574.832927][ T9] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 575.087478][T16894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.311837][ T9] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 5: -71 [ 575.311879][ T9] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense calibration info: -71 [ 575.311920][ T9] playstation 0003:054C:0DF2.000D: Failed to get calibration data from DualSense [ 575.311942][ T9] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 575.397593][ T9] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71 [ 575.432050][ T9] usb 6-1: USB disconnect, device number 34 [ 576.892667][T17462] io-wq is not configured for unbound workers [ 577.127048][ T5629] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 577.303690][ T5629] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 577.303721][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.303741][ T5629] usb 3-1: Product: syz [ 577.303755][ T5629] usb 3-1: Manufacturer: syz [ 577.303769][ T5629] usb 3-1: SerialNumber: syz [ 577.420655][ T5629] usb 3-1: config 0 descriptor?? [ 577.674658][ T5629] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 578.082525][T17495] netlink: 'syz.0.4919': attribute type 4 has an invalid length. [ 578.123814][ T5743] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 578.189828][T17498] netlink: 'syz.0.4919': attribute type 4 has an invalid length. [ 578.302430][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 578.302480][ T5743] usb 6-1: New USB device found, idVendor=05ac, idProduct=0221, bcdDevice= 0.00 [ 578.302504][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.348265][ T5743] usb 6-1: config 0 descriptor?? [ 578.349480][T17485] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 578.788784][ T5743] apple 0003:05AC:0221.000E: unknown main item tag 0x0 [ 578.788823][ T5743] apple 0003:05AC:0221.000E: unknown main item tag 0x0 [ 578.788851][ T5743] apple 0003:05AC:0221.000E: unknown main item tag 0x0 [ 578.788879][ T5743] apple 0003:05AC:0221.000E: unknown main item tag 0x0 [ 578.788905][ T5743] apple 0003:05AC:0221.000E: unknown main item tag 0x0 [ 578.884418][ T5743] apple 0003:05AC:0221.000E: hidraw0: USB HID v7b.fd Device [HID 05ac:0221] on usb-dummy_hcd.5-1/input0 [ 579.053931][ T32] usb 6-1: USB disconnect, device number 35 [ 579.198817][ T5629] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 579.253840][T17515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.396989][ T5629] usb 3-1: USB disconnect, device number 40 [ 579.588277][T17516] fido_id[17516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 581.343947][T17568] overlayfs: failed to clone lowerpath [ 583.074640][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4974'. [ 584.355563][ T32] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 584.504873][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 584.507239][ T32] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 584.507266][ T32] usb 3-1: config 0 has no interface number 0 [ 584.507392][ T32] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 584.507418][ T32] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 584.510515][ T32] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 584.510543][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.510563][ T32] usb 3-1: Product: syz [ 584.510578][ T32] usb 3-1: Manufacturer: syz [ 584.510593][ T32] usb 3-1: SerialNumber: syz [ 584.596411][ T32] usb 3-1: config 0 descriptor?? [ 584.599756][T17651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 584.600236][T17651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 584.816388][T17651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 584.819109][T17651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 585.322563][T17681] loop5: detected capacity change from 0 to 256 [ 585.373903][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.398440][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.402971][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.407527][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.409785][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.412264][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.428315][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.430847][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.431189][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.431397][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.433687][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.433926][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.434227][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.434425][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.434712][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.436803][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.437134][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.438932][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.439246][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.439446][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.439734][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.439931][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.441236][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.441444][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.488690][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.488940][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.489236][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.489434][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.507006][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.516783][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.592093][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.619177][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.619583][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.619816][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.621873][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.623213][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.626579][T16911] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.627703][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.628484][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.628696][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.726483][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.738039][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.739555][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.742168][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.745337][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.749977][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.751752][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.769755][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.771818][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.773779][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.783181][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.783959][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.788301][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.795733][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.798702][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.802031][T13376] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.807191][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.807531][T13375] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.809064][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.812832][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.813105][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.813378][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.813667][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.814902][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.815423][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 585.815887][T17681] FAT-fs (loop5): Directory bread(block 64) failed [ 585.815914][T17681] FAT-fs (loop5): Directory bread(block 65) failed [ 585.816005][T17681] FAT-fs (loop5): Directory bread(block 66) failed [ 585.816026][T17681] FAT-fs (loop5): Directory bread(block 67) failed [ 585.816344][T17681] FAT-fs (loop5): Directory bread(block 68) failed [ 585.816368][T17681] FAT-fs (loop5): Directory bread(block 69) failed [ 585.816458][T17681] FAT-fs (loop5): Directory bread(block 70) failed [ 585.816479][T17681] FAT-fs (loop5): Directory bread(block 71) failed [ 585.816573][T17681] FAT-fs (loop5): Directory bread(block 72) failed [ 585.816595][T17681] FAT-fs (loop5): Directory bread(block 73) failed [ 585.876814][T13376] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 586.051700][T13375] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 586.111608][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 586.253486][ T32] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 586.253519][ T32] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 586.253760][ T32] asix 3-1:0.34: probe with driver asix failed with error -71 [ 586.347169][ T32] usb 3-1: USB disconnect, device number 41 [ 586.507403][ T5716] udevd[5716]: setting owner of /dev/bus/usb/003/041 to uid=0, gid=0 failed: No such file or directory [ 586.863617][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'. [ 594.642031][T17941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.733948][T17941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.313402][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5114'. [ 595.313428][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5114'. [ 597.017854][ T38] audit: type=1326 audit(1779202944.385:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e9cce59 code=0x7ffc0000 [ 597.017905][ T38] audit: type=1326 audit(1779202944.385:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e9cce59 code=0x7ffc0000 [ 597.074045][ T38] audit: type=1326 audit(1779202944.395:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e9cce59 code=0x7ffc0000 [ 597.074101][ T38] audit: type=1326 audit(1779202944.395:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e9cce59 code=0x7ffc0000 [ 597.079918][ T38] audit: type=1326 audit(1779202944.445:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e9cce59 code=0x7ffc0000 [ 597.079971][ T38] audit: type=1326 audit(1779202944.445:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd87e9ccbc2 code=0x7ffc0000 [ 597.080013][ T38] audit: type=1326 audit(1779202944.445:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd87e9ccc57 code=0x7ffc0000 [ 597.080054][ T38] audit: type=1326 audit(1779202944.445:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd87e989b51 code=0x7ffc0000 [ 597.080104][ T38] audit: type=1326 audit(1779202944.445:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd87e9cdc49 code=0x7ffc0000 [ 597.080144][ T38] audit: type=1326 audit(1779202944.445:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.5138" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd87e989bbb code=0x7ffc0000 [ 598.717621][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 598.875593][ T32] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 598.881515][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'. [ 598.974997][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'. [ 598.975529][ T1459] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.976492][ T1459] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.976530][ T1459] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.976561][ T1459] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.047605][ T32] usb 6-1: config 7 has an invalid interface number: 123 but max is 0 [ 599.047633][ T32] usb 6-1: config 7 has no interface number 0 [ 599.047681][ T32] usb 6-1: config 7 interface 123 has no altsetting 0 [ 599.078473][ T32] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=50.af [ 599.078503][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.078523][ T32] usb 6-1: Product: syz [ 599.078538][ T32] usb 6-1: Manufacturer: syz [ 599.078553][ T32] usb 6-1: SerialNumber: syz [ 600.418096][ T32] uvcvideo 6-1:7.123: Found UVC 0.00 device syz (174f:5212) [ 600.418182][ T32] uvcvideo 6-1:7.123: No valid video chain found. [ 600.438069][ T32] usb 6-1: USB disconnect, device number 36 [ 602.569926][ T5628] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 603.173888][T18210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.243037][T18210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.523396][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5226'. [ 604.403539][T18257] fuse: fd is not a fuse device [ 605.684703][T18293] netlink: 'syz.4.5254': attribute type 39 has an invalid length. [ 606.074122][T18293] syz_tun (unregistering): left allmulticast mode [ 607.089698][T16894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 607.800299][T18362] fuse: fd is not a fuse device [ 609.108784][T18409] netlink: 'syz.0.5306': attribute type 2 has an invalid length. [ 609.328309][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 609.328343][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 612.268507][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 613.220097][T18476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.078299][T18550] binder: BINDER_SET_CONTEXT_MGR already set [ 616.078327][T18550] binder: 18544:18550 ioctl 4018620d 200000000040 returned -16 [ 617.369819][ T5628] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 620.290407][T18700] binder: 18699:18700 ioctl c0306201 200000000080 returned -14 [ 620.326282][T18700] binder: 18699:18700 ioctl c0306201 2000000003c0 returned -14 [ 620.405793][ T38] kauditd_printk_skb: 27 callbacks suppressed [ 620.405811][ T38] audit: type=1326 audit(1779202967.775:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.406441][ T38] audit: type=1326 audit(1779202967.775:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.406486][ T38] audit: type=1326 audit(1779202967.775:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.406864][ T38] audit: type=1326 audit(1779202967.775:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.407295][ T38] audit: type=1326 audit(1779202967.775:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.407614][ T38] audit: type=1326 audit(1779202967.775:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.408194][ T38] audit: type=1326 audit(1779202967.775:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.408374][ T38] audit: type=1326 audit(1779202967.775:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 620.409036][ T38] audit: type=1326 audit(1779202967.775:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.2.5432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa27fdfce59 code=0x7ffc0000 [ 621.680286][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5446'. [ 621.815410][T18743] fuse: fd is not a fuse device [ 622.192381][T18755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.359975][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.360073][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.954606][T18845] loop5: detected capacity change from 0 to 256 [ 625.972342][T18845] exfat: Deprecated parameter 'namecase' [ 625.972370][T18845] exfat: Deprecated parameter 'namecase' [ 625.974543][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.978434][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.978578][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.978675][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.978768][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.978860][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.978952][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.979044][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980281][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980715][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980751][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980774][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980796][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980819][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980841][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.980863][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.984326][T16880] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.984380][T16880] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.988038][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.988107][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.989119][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.989898][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.989934][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.989957][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.989980][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.990002][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.990024][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.990047][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.991479][T16912] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.997842][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 625.999159][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.339281][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.339549][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.342414][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.344297][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.364558][T16915] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.377881][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.379064][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.382746][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.385725][T16889] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.387689][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.389155][T16916] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.391056][T16916] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 626.392930][T18845] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 626.398859][T16894] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.011633][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 627.051241][ T38] audit: type=1800 audit(1779202974.415:533): pid=18845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5489" name="file1" dev="loop5" ino=1048697 res=0 errno=0 [ 627.179797][T16880] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 627.182696][T16880] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 627.198551][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 627.229415][T18858] ref_ctr increment failed for inode: 0x144c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88806261b400 [ 627.365960][T18870] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 627.575142][T18881] loop5: detected capacity change from 0 to 128 [ 627.585360][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.596945][ T1459] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.630356][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.630494][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.630590][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.630680][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.630770][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.630860][ T181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.716414][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.718478][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.718647][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.718777][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.719007][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.719129][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.719255][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.719286][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.719310][T16887] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 627.719911][T16887] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 628.095193][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 628.095273][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 628.095336][ T181] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 628.146856][T13376] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 628.165448][ T7245] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 628.493260][T18905] netlink: 'syz.0.5515': attribute type 1 has an invalid length. [ 628.493283][T18905] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5515'. [ 628.953581][T18925] tipc: Started in network mode [ 628.953613][T18925] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 628.992437][T18925] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 629.008786][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888011ed8400: rx timeout, send abort [ 629.013259][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888011ed8400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 629.371436][T18925] tipc: Enabled bearer , priority 0 [ 629.839686][T13376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 630.427739][ T6028] tipc: Node number set to 1 [ 631.067834][T18953] ================================================================== [ 631.067856][T18953] BUG: KASA[ 631.067856][T18953] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 631.068007][T18953] Read of size 8 at addr ffff888022a9f540 by task syz.5.5535/18953 [ 631.068024][T18953] [ 631.068040][T18953] CPU: 1 UID: 0 PID: 18953 Comm: syz.5.5535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.068068][T18953] Tainted: [L]=SOFTLOCKUP [ 631.068076][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.068100][T18953] Call Trace: [ 631.068109][T18953] [ 631.068120][T18953] dump_stack_lvl+0xe8/0x150 [ 631.068149][T18953] print_address_description+0x55/0x1e0 [ 631.068177][T18953] ? reverse_path_check_proc+0x5b/0x240 [ 631.068201][T18953] print_report+0x58/0x70 [ 631.068224][T18953] kasan_report+0x117/0x150 [ 631.068274][T18953] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.068300][T18953] ? reverse_path_check_proc+0x5b/0x240 [ 631.068325][T18953] ? ep_insert+0xbbb/0x1820 [ 631.068379][T18953] reverse_path_check_proc+0x5b/0x240 [ 631.068405][T18953] ? ep_insert+0xbbb/0x1820 [ 631.068434][T18953] ep_insert+0xc6c/0x1820 [ 631.068470][T18953] ? __pfx_ep_insert+0x10/0x10 [ 631.068504][T18953] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.068526][T18953] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 631.068547][T18953] ? mutex_lock_nested+0x152/0x1d0 [ 631.068574][T18953] ? do_epoll_ctl_file+0xc69/0xed0 [ 631.068603][T18953] do_epoll_ctl_file+0x8bb/0xed0 [ 631.068633][T18953] ? do_epoll_ctl_file+0xac3/0xed0 [ 631.068665][T18953] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 631.068694][T18953] ? __fget_files+0x3a6/0x420 [ 631.068750][T18953] ? __fget_files+0x2a/0x420 [ 631.068779][T18953] __se_sys_epoll_ctl+0x14e/0x210 [ 631.068798][T18953] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 631.068820][T18953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.068838][T18953] do_syscall_64+0x15f/0xf80 [ 631.068859][T18953] ? trace_irq_disable+0x3b/0x140 [ 631.068880][T18953] ? clear_bhb_loop+0x40/0x90 [ 631.068903][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.068923][T18953] RIP: 0033:0x7fe5e84bce59 [ 631.068948][T18953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.068973][T18953] RSP: 002b:00007fe5e66f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 631.069029][T18953] RAX: ffffffffffffffda RBX: 00007fe5e8736090 RCX: 00007fe5e84bce59 [ 631.069045][T18953] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 631.069058][T18953] RBP: 00007fe5e8552d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.069071][T18953] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.069086][T18953] R13: 00007fe5e8736128 R14: 00007fe5e8736090 R15: 00007ffe865ba538 [ 631.069119][T18953] [ 631.069127][T18953] [ 631.069132][T18953] Allocated by task 18950: [ 631.069176][T18953] kasan_save_track+0x3e/0x80 [ 631.069230][T18953] __kasan_slab_alloc+0x6c/0x80 [ 631.069245][T18953] kmem_cache_alloc_noprof+0x33b/0x680 [ 631.069325][T18953] ep_insert+0x512/0x1820 [ 631.069354][T18953] do_epoll_ctl_file+0x8bb/0xed0 [ 631.069380][T18953] __se_sys_epoll_ctl+0x14e/0x210 [ 631.069397][T18953] do_syscall_64+0x15f/0xf80 [ 631.069417][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.069436][T18953] [ 631.069442][T18953] Freed by task 18955: [ 631.069457][T18953] kasan_save_track+0x3e/0x80 [ 631.069481][T18953] kasan_save_free_info+0x46/0x50 [ 631.069530][T18953] __kasan_slab_free+0x5c/0x80 [ 631.069547][T18953] kmem_cache_free+0x187/0x6c0 [ 631.069566][T18953] eventpoll_release_file+0xc2/0x240 [ 631.069593][T18953] __fput+0x83c/0xa70 [ 631.069618][T18953] task_work_run+0x1d9/0x270 [ 631.069640][T18953] get_signal+0x11eb/0x1330 [ 631.069698][T18953] arch_do_signal_or_restart+0xbc/0x840 [ 631.069719][T18953] exit_to_user_mode_loop+0x8c/0x4d0 [ 631.069739][T18953] do_syscall_64+0x33e/0xf80 [ 631.069757][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.069776][T18953] [ 631.069782][T18953] The buggy address belongs to the object at ffff888022a9f540 [ 631.069782][T18953] which belongs to the cache ep_head of size 16 [ 631.069800][T18953] The buggy address is located 0 bytes inside of [ 631.069800][T18953] freed 16-byte region [ffff888022a9f540, ffff888022a9f550) [ 631.069823][T18953] [ 631.069828][T18953] The buggy address belongs to the physical page: [ 631.069881][T18953] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022a9fa20 pfn:0x22a9f [ 631.069905][T18953] memcg:ffff88804eb72801 [ 631.069914][T18953] flags: 0x80000000000200(workingset|node=0|zone=1) [ 631.069935][T18953] page_type: f5(slab) [ 631.069959][T18953] raw: 0080000000000200 ffff88801fe96b40 ffffea0000db2c10 ffff888020aeaf88 [ 631.069979][T18953] raw: ffff888022a9fa20 0000000800800041 00000000f5000000 ffff88804eb72801 [ 631.069990][T18953] page dumped because: kasan: bad access detected [ 631.070004][T18953] page_owner tracks the page as allocated [ 631.070013][T18953] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37069161352, free_ts 37068952300 [ 631.070048][T18953] post_alloc_hook+0x1f9/0x250 [ 631.070176][T18953] get_page_from_freelist+0x28c1/0x2940 [ 631.070199][T18953] __alloc_frozen_pages_noprof+0x18d/0x380 [ 631.070220][T18953] allocate_slab+0x74/0x5e0 [ 631.070244][T18953] refill_objects+0x33c/0x3d0 [ 631.070265][T18953] __pcs_replace_empty_main+0x373/0x720 [ 631.070292][T18953] kmem_cache_alloc_noprof+0x433/0x680 [ 631.070322][T18953] ep_insert+0x512/0x1820 [ 631.070347][T18953] do_epoll_ctl_file+0x8bb/0xed0 [ 631.070374][T18953] __se_sys_epoll_ctl+0x14e/0x210 [ 631.070391][T18953] do_syscall_64+0x15f/0xf80 [ 631.070411][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.070430][T18953] page last free pid 5142 tgid 5142 stack trace: [ 631.070443][T18953] __free_frozen_pages+0x10af/0x1190 [ 631.070460][T18953] __slab_free+0x252/0x2a0 [ 631.070478][T18953] qlist_free_all+0x99/0x100 [ 631.070503][T18953] kasan_quarantine_reduce+0x148/0x160 [ 631.070529][T18953] __kasan_slab_alloc+0x22/0x80 [ 631.070545][T18953] __kmalloc_noprof+0x399/0x7b0 [ 631.070563][T18953] load_elf_binary+0x318/0x29b0 [ 631.070638][T18953] bprm_execve+0x94a/0x1510 [ 631.070683][T18953] do_execveat_common+0x50d/0x690 [ 631.070703][T18953] __x64_sys_execve+0x97/0xc0 [ 631.070718][T18953] do_syscall_64+0x15f/0xf80 [ 631.070738][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.070757][T18953] [ 631.070763][T18953] Memory state around the buggy address: [ 631.070774][T18953] ffff888022a9f400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 631.070789][T18953] ffff888022a9f480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 631.070803][T18953] >ffff888022a9f500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 631.070814][T18953] ^ [ 631.070826][T18953] ffff888022a9f580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 631.070840][T18953] ffff888022a9f600: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 631.070851][T18953] ================================================================== [ 631.083987][T18953] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 631.084017][T18953] CPU: 1 UID: 0 PID: 18953 Comm: syz.5.5535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.084048][T18953] Tainted: [L]=SOFTLOCKUP [ 631.084056][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.084069][T18953] Call Trace: [ 631.084078][T18953] [ 631.084087][T18953] vpanic+0x56c/0xa60 [ 631.084129][T18953] ? __pfx_vpanic+0x10/0x10 [ 631.084161][T18953] panic+0xc5/0xd0 [ 631.084186][T18953] ? __pfx_panic+0x10/0x10 [ 631.084215][T18953] ? preempt_schedule_thunk+0x16/0x40 [ 631.084238][T18953] ? preempt_schedule_thunk+0x16/0x40 [ 631.084260][T18953] ? reverse_path_check_proc+0x5b/0x240 [ 631.084282][T18953] check_panic_on_warn+0x89/0xb0 [ 631.084369][T18953] ? reverse_path_check_proc+0x5b/0x240 [ 631.084391][T18953] end_report+0x73/0x170 [ 631.084413][T18953] ? reverse_path_check_proc+0x5b/0x240 [ 631.084435][T18953] kasan_report+0x128/0x150 [ 631.084455][T18953] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.084479][T18953] ? reverse_path_check_proc+0x5b/0x240 [ 631.084503][T18953] ? ep_insert+0xbbb/0x1820 [ 631.084533][T18953] reverse_path_check_proc+0x5b/0x240 [ 631.084557][T18953] ? ep_insert+0xbbb/0x1820 [ 631.084586][T18953] ep_insert+0xc6c/0x1820 [ 631.084622][T18953] ? __pfx_ep_insert+0x10/0x10 [ 631.084655][T18953] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.084676][T18953] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 631.084697][T18953] ? mutex_lock_nested+0x152/0x1d0 [ 631.084726][T18953] ? do_epoll_ctl_file+0xc69/0xed0 [ 631.084753][T18953] do_epoll_ctl_file+0x8bb/0xed0 [ 631.084782][T18953] ? do_epoll_ctl_file+0xac3/0xed0 [ 631.084810][T18953] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 631.084839][T18953] ? __fget_files+0x3a6/0x420 [ 631.084866][T18953] ? __fget_files+0x2a/0x420 [ 631.084896][T18953] __se_sys_epoll_ctl+0x14e/0x210 [ 631.084916][T18953] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 631.084939][T18953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.084961][T18953] do_syscall_64+0x15f/0xf80 [ 631.084983][T18953] ? trace_irq_disable+0x3b/0x140 [ 631.085004][T18953] ? clear_bhb_loop+0x40/0x90 [ 631.085026][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.085047][T18953] RIP: 0033:0x7fe5e84bce59 [ 631.085066][T18953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.085085][T18953] RSP: 002b:00007fe5e66f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 631.085115][T18953] RAX: ffffffffffffffda RBX: 00007fe5e8736090 RCX: 00007fe5e84bce59 [ 631.085131][T18953] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 631.085144][T18953] RBP: 00007fe5e8552d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.085158][T18953] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.085172][T18953] R13: 00007fe5e8736128 R14: 00007fe5e8736090 R15: 00007ffe865ba538 [ 631.085197][T18953] [ 631.085470][T18953] Kernel Offset: disabled