last executing test programs: 13.540503419s ago: executing program 1 (id=847): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) 12.815763645s ago: executing program 0 (id=848): mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[], [{@flag='lazytime'}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) 11.724377721s ago: executing program 1 (id=851): openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) 10.312810683s ago: executing program 2 (id=855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 9.364059945s ago: executing program 2 (id=857): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xb2ad, 0x2, 0x7, 0x5, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x870bd2c, 0x25dfdbfc, {0x1c}}, 0x14}}, 0x890) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 7.746272472s ago: executing program 3 (id=858): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) 7.685432343s ago: executing program 2 (id=859): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r1 = eventfd2(0x4f9e1aa, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.525085767s ago: executing program 3 (id=860): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) 7.507406208s ago: executing program 0 (id=861): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.981853359s ago: executing program 0 (id=862): mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkaller%d', 0xb) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r1) nanosleep(0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 6.484451701s ago: executing program 3 (id=863): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) 6.144922189s ago: executing program 3 (id=864): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.802290357s ago: executing program 0 (id=865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 5.069558034s ago: executing program 1 (id=866): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0xe4a, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, r2, r3, 0x1000, '\x00', 0x6, 0xffff, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0x1, 0xc}, {0x1ffffff, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x574, 0x9db, 0xbb4}}}}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) 4.983236956s ago: executing program 2 (id=867): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xb2ad, 0x2, 0x7, 0x5, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x870bd2c, 0x25dfdbfc, {0x1c}}, 0x14}}, 0x890) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 3.91702919s ago: executing program 0 (id=868): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) r4 = dup(r0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) 3.911729511s ago: executing program 2 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) 3.625097587s ago: executing program 1 (id=870): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.374824453s ago: executing program 3 (id=871): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file2\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x286, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970840, 0x6ab858183a7ef6cb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) truncate(&(0x7f0000000040)='./file2\x00', 0xf1e0) finit_module(r0, 0xfffffffffffffffe, 0x1) 3.07524438s ago: executing program 0 (id=872): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) 2.966618332s ago: executing program 1 (id=873): mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkaller%d', 0xb) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r1) nanosleep(0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 964.416068ms ago: executing program 2 (id=874): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 684.654275ms ago: executing program 3 (id=875): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 0s ago: executing program 1 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003f40)=""/4080, 0xff0}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) kernel console output (not intermixed with test programs): readahead error at folio 51 @ nid 36 [ 104.640512][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 104.651312][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 104.660524][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 104.672779][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 104.682040][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 104.691292][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 104.701966][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 104.711175][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 104.721862][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 104.731076][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 104.741704][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 104.750948][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 104.761598][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 104.771640][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 104.780910][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 104.790265][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 104.799652][ T5936] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 104.810361][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 104.819909][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 104.830883][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 104.841295][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 104.850759][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 104.860222][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 104.870211][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 104.879415][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 104.888772][ T5936] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 104.898289][ T5936] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 104.907543][ T5936] bio_check_eod: 1 callbacks suppressed [ 104.907557][ T5936] syz.0.29: attempt to access beyond end of device [ 104.907557][ T5936] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 104.927164][ T5936] syz.0.29: attempt to access beyond end of device [ 104.927164][ T5936] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 104.941251][ T5936] syz.0.29: attempt to access beyond end of device [ 104.941251][ T5936] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 104.955181][ T5936] syz.0.29: attempt to access beyond end of device [ 104.955181][ T5936] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 104.969550][ T5936] syz.0.29: attempt to access beyond end of device [ 104.969550][ T5936] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 104.984795][ T5936] syz.0.29: attempt to access beyond end of device [ 104.984795][ T5936] loop0: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 104.998672][ T5936] syz.0.29: attempt to access beyond end of device [ 104.998672][ T5936] loop0: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 105.012432][ T5936] syz.0.29: attempt to access beyond end of device [ 105.012432][ T5936] loop0: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 105.026755][ T5936] syz.0.29: attempt to access beyond end of device [ 105.026755][ T5936] loop0: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 105.041012][ T5936] syz.0.29: attempt to access beyond end of device [ 105.041012][ T5936] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 107.420409][ T5946] fuse: Bad value for 'fd' [ 108.643619][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.965676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.375558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.207528][ T5959] loop2: detected capacity change from 0 to 16 [ 110.236248][ T5959] erofs: (device loop2): mounted with root inode @ nid 36. [ 110.476018][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 110.485219][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 110.494802][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 110.504940][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 110.514214][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 110.523668][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 110.533019][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 110.542196][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 110.552843][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 110.561991][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 110.572631][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 110.581859][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 110.591287][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 110.600488][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 110.610366][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 110.621023][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 110.630200][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 110.640845][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 110.650013][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 110.659209][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 110.670116][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 110.679298][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 110.689979][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 110.699131][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 110.710246][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 110.719422][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 110.730059][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 110.739270][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 110.748431][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 110.758204][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 110.767531][ T5960] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 110.778169][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 110.787463][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 110.796665][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 110.805990][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 110.815921][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 110.825206][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 110.834400][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 110.843484][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 110.852689][ T5960] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 110.862110][ T5960] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 110.871263][ T5960] bio_check_eod: 1 callbacks suppressed [ 110.871272][ T5960] syz.2.40: attempt to access beyond end of device [ 110.871272][ T5960] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 110.890467][ T5960] syz.2.40: attempt to access beyond end of device [ 110.890467][ T5960] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 110.904456][ T5960] syz.2.40: attempt to access beyond end of device [ 110.904456][ T5960] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 110.919163][ T5960] syz.2.40: attempt to access beyond end of device [ 110.919163][ T5960] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 110.933427][ T5960] syz.2.40: attempt to access beyond end of device [ 110.933427][ T5960] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 110.947673][ T5960] syz.2.40: attempt to access beyond end of device [ 110.947673][ T5960] loop2: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 110.961116][ T5960] syz.2.40: attempt to access beyond end of device [ 110.961116][ T5960] loop2: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 110.974755][ T5960] syz.2.40: attempt to access beyond end of device [ 110.974755][ T5960] loop2: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 110.989002][ T5960] syz.2.40: attempt to access beyond end of device [ 110.989002][ T5960] loop2: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 111.003210][ T5960] syz.2.40: attempt to access beyond end of device [ 111.003210][ T5960] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 112.925547][ C0] sched: RT throttling activated [ 113.173660][ T5969] fuse: Bad value for 'fd' [ 113.676092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 114.085794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.314129][ T5978] loop0: detected capacity change from 0 to 256 [ 116.835378][ T5980] Zero length message leads to an empty skb [ 118.419748][ T5989] loop2: detected capacity change from 0 to 2048 [ 118.472004][ T5991] loop3: detected capacity change from 0 to 2048 [ 118.504234][ T5989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.620496][ T5991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.762794][ T5998] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 118.778929][ T5998] EXT4-fs error (device loop3) in ext4_setattr:5683: error 28 [ 118.836051][ T5994] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 119.298531][ T5989] EXT4-fs error (device loop2) in ext4_setattr:5683: error 28 [ 119.415940][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.615539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 120.388183][ T6010] loop1: detected capacity change from 0 to 16 [ 120.427193][ T6010] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.661364][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 120.670574][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 120.680048][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 120.689241][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 120.698475][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 120.708178][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 120.717440][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 120.726618][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 120.737272][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 120.747300][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 120.758017][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 120.767227][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 120.776511][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 120.785720][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 120.794899][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 120.805583][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 120.814744][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 120.825369][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 120.835380][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 120.845303][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 120.855981][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 120.865105][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 120.875753][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 120.884885][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 120.895424][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 120.904601][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 120.915173][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 120.924341][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 120.933572][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 120.942854][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 120.952689][ T6010] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 120.963350][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 120.972660][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 120.981894][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 120.991399][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 121.000720][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 121.010086][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 121.019246][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 121.028357][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 121.037560][ T6010] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 121.046981][ T6010] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 121.056949][ T6010] bio_check_eod: 1 callbacks suppressed [ 121.056963][ T6010] syz.1.52: attempt to access beyond end of device [ 121.056963][ T6010] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 121.076379][ T6010] syz.1.52: attempt to access beyond end of device [ 121.076379][ T6010] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 121.090471][ T6010] syz.1.52: attempt to access beyond end of device [ 121.090471][ T6010] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 121.104355][ T6010] syz.1.52: attempt to access beyond end of device [ 121.104355][ T6010] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 121.118615][ T6010] syz.1.52: attempt to access beyond end of device [ 121.118615][ T6010] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 121.132929][ T6010] syz.1.52: attempt to access beyond end of device [ 121.132929][ T6010] loop1: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 121.146375][ T6010] syz.1.52: attempt to access beyond end of device [ 121.146375][ T6010] loop1: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 121.160558][ T6010] syz.1.52: attempt to access beyond end of device [ 121.160558][ T6010] loop1: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 121.174746][ T6010] syz.1.52: attempt to access beyond end of device [ 121.174746][ T6010] loop1: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 121.189006][ T6010] syz.1.52: attempt to access beyond end of device [ 121.189006][ T6010] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 121.541663][ T6014] fuse: Bad value for 'fd' [ 122.876508][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.325839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.236294][ T6031] loop2: detected capacity change from 0 to 256 [ 126.278782][ T6035] configfs-gadget.g_syz gadget.0: HOST MAC 96:33:ca:53:01:6c [ 126.327038][ T6035] configfs-gadget.g_syz gadget.0: MAC de:6a:25:db:9d:43 [ 126.678254][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.919889][ T8] usb 1-1: Dual-Role OTG device on HNP port [ 126.945648][ T8] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 126.972869][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.112939][ T6050] loop0: detected capacity change from 0 to 2048 [ 127.134403][ T8] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 96:33:ca:53:01:6c [ 127.234022][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.463061][ T6060] loop1: detected capacity change from 0 to 16 [ 127.566198][ T6060] erofs: (device loop1): mounted with root inode @ nid 36. [ 127.801920][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 127.811684][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 127.823473][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 127.833383][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 127.842602][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 127.851985][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 127.861233][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 127.870394][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 127.881046][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 127.890235][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 127.900921][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 127.910829][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 127.920036][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 127.929226][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 127.938452][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 127.949136][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 127.958962][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 127.969605][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 127.978869][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 127.988036][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 127.998695][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 128.007891][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 128.019279][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 128.028882][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 128.039486][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 128.048677][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 128.059207][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 128.068404][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 128.077663][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 128.087005][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 128.096340][ T6060] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 128.107012][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 128.116887][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 128.126103][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 128.135336][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 128.144645][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 128.153941][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 128.163040][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 128.172111][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 128.181337][ T6060] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 128.190785][ T6060] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 128.199966][ T6060] bio_check_eod: 1 callbacks suppressed [ 128.199975][ T6060] syz.1.62: attempt to access beyond end of device [ 128.199975][ T6060] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 128.219635][ T6060] syz.1.62: attempt to access beyond end of device [ 128.219635][ T6060] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 128.233975][ T6060] syz.1.62: attempt to access beyond end of device [ 128.233975][ T6060] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 128.247756][ T6060] syz.1.62: attempt to access beyond end of device [ 128.247756][ T6060] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 128.261959][ T6060] syz.1.62: attempt to access beyond end of device [ 128.261959][ T6060] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 128.276209][ T6060] syz.1.62: attempt to access beyond end of device [ 128.276209][ T6060] loop1: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 128.289620][ T6060] syz.1.62: attempt to access beyond end of device [ 128.289620][ T6060] loop1: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 128.303257][ T6060] syz.1.62: attempt to access beyond end of device [ 128.303257][ T6060] loop1: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 128.317435][ T6060] syz.1.62: attempt to access beyond end of device [ 128.317435][ T6060] loop1: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 128.332203][ T6060] syz.1.62: attempt to access beyond end of device [ 128.332203][ T6060] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 129.445729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 129.975722][ T6067] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 129.991094][ T6067] EXT4-fs error (device loop0) in ext4_setattr:5683: error 28 [ 130.594477][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.862870][ T6074] loop2: detected capacity change from 0 to 2048 [ 132.071847][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.632883][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.646292][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.190388][ T6086] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 134.272657][ T6086] EXT4-fs error (device loop2) in ext4_setattr:5683: error 28 [ 139.767305][ T6125] loop0: detected capacity change from 0 to 16 [ 139.896176][ T6125] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.958102][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 139.967909][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 139.977765][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 139.987073][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 139.997256][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 140.006703][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 140.016053][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 140.025247][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 140.036202][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 140.045363][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 140.056088][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 140.065311][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 140.074517][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 140.083734][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 140.093028][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 140.104298][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 140.113521][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 140.124182][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 140.133362][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 140.142591][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 140.153247][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 140.162445][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 140.173089][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 140.182285][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 140.192952][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 140.202767][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 140.213373][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 140.222641][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 140.232395][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 140.241692][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 140.251028][ T6125] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 140.261733][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 140.271093][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 140.280332][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 140.289643][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 140.299027][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 140.308970][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 140.318200][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 140.327463][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 140.336737][ T6125] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 140.346234][ T6125] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 140.355451][ T6125] bio_check_eod: 1 callbacks suppressed [ 140.355484][ T6125] syz.0.75: attempt to access beyond end of device [ 140.355484][ T6125] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 140.374736][ T6125] syz.0.75: attempt to access beyond end of device [ 140.374736][ T6125] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 140.388792][ T6125] syz.0.75: attempt to access beyond end of device [ 140.388792][ T6125] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 140.404035][ T6125] syz.0.75: attempt to access beyond end of device [ 140.404035][ T6125] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 140.418374][ T6125] syz.0.75: attempt to access beyond end of device [ 140.418374][ T6125] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 140.432692][ T6125] syz.0.75: attempt to access beyond end of device [ 140.432692][ T6125] loop0: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 140.446819][ T6125] syz.0.75: attempt to access beyond end of device [ 140.446819][ T6125] loop0: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 140.460569][ T6125] syz.0.75: attempt to access beyond end of device [ 140.460569][ T6125] loop0: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 140.474895][ T6125] syz.0.75: attempt to access beyond end of device [ 140.474895][ T6125] loop0: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 140.489148][ T6125] syz.0.75: attempt to access beyond end of device [ 140.489148][ T6125] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 140.899553][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.356367][ T6146] loop3: detected capacity change from 0 to 8 [ 145.427243][ T6146] SQUASHFS error: Unable to read inode 0x11f [ 145.516130][ T6146] Non-string source [ 145.758044][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 146.907989][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 146.964059][ T23] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 147.022501][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.072786][ T23] usb 2-1: Product: syz [ 147.084996][ T23] usb 2-1: Manufacturer: syz [ 147.095107][ T23] usb 2-1: SerialNumber: syz [ 147.597052][ T23] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 147.679696][ T6164] loop3: detected capacity change from 0 to 256 [ 147.710465][ T23] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 148.459208][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 148.540597][ T23] usb 2-1: USB disconnect, device number 2 [ 148.720393][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.458332][ T6179] loop0: detected capacity change from 0 to 16 [ 149.493941][ T6179] erofs: (device loop0): mounted with root inode @ nid 36. [ 149.553847][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 149.563158][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 149.572876][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 149.582075][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 149.591358][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 149.600884][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 149.610159][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 149.620094][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 149.634315][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 149.643579][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 149.654250][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 149.663487][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 149.672796][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 149.681977][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 149.691202][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 149.701880][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 149.711098][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 149.722606][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 149.731871][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 149.741565][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 149.752316][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 149.761550][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 149.772220][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 149.781398][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 149.791996][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 149.801350][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 149.811958][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 149.821160][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 149.830949][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 149.840886][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 149.850233][ T6179] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 149.860905][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 149.870567][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 149.879870][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 149.889235][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 149.898622][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 149.908092][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 149.917239][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 149.926930][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 149.936191][ T6179] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 149.945686][ T6179] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 149.954857][ T6179] bio_check_eod: 1 callbacks suppressed [ 149.954866][ T6179] syz.0.84: attempt to access beyond end of device [ 149.954866][ T6179] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 149.974116][ T6179] syz.0.84: attempt to access beyond end of device [ 149.974116][ T6179] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 149.988121][ T6179] syz.0.84: attempt to access beyond end of device [ 149.988121][ T6179] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 150.001963][ T6179] syz.0.84: attempt to access beyond end of device [ 150.001963][ T6179] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 150.016155][ T6179] syz.0.84: attempt to access beyond end of device [ 150.016155][ T6179] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 150.031080][ T6179] syz.0.84: attempt to access beyond end of device [ 150.031080][ T6179] loop0: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 150.044546][ T6179] syz.0.84: attempt to access beyond end of device [ 150.044546][ T6179] loop0: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 150.058230][ T6179] syz.0.84: attempt to access beyond end of device [ 150.058230][ T6179] loop0: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 150.072421][ T6179] syz.0.84: attempt to access beyond end of device [ 150.072421][ T6179] loop0: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 150.086613][ T6179] syz.0.84: attempt to access beyond end of device [ 150.086613][ T6179] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 157.333023][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.356000][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.691762][ T6212] loop2: detected capacity change from 0 to 16 [ 157.727918][ T6212] erofs: (device loop2): mounted with root inode @ nid 36. [ 157.762990][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 157.772342][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 157.782223][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 157.791496][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 157.800824][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 157.811232][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 157.820607][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 157.829847][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 157.840564][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 157.849887][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 157.860619][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 157.869980][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 157.879292][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 157.888617][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 157.897927][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 157.908703][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 157.918806][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 157.929562][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 157.938801][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 157.949701][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 157.960566][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 157.969805][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 157.980656][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 157.990096][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 158.000809][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 158.010057][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 158.021653][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 158.030993][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 158.040247][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 158.049712][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 158.059188][ T6212] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 158.069970][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 158.079417][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 158.088772][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 158.098284][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 158.108869][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 158.119306][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 158.128835][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 158.138072][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 158.147548][ T6212] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 158.157079][ T6212] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 158.166424][ T6212] bio_check_eod: 1 callbacks suppressed [ 158.166440][ T6212] syz.2.93: attempt to access beyond end of device [ 158.166440][ T6212] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 158.186225][ T6212] syz.2.93: attempt to access beyond end of device [ 158.186225][ T6212] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 158.200459][ T6212] syz.2.93: attempt to access beyond end of device [ 158.200459][ T6212] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 158.214388][ T6212] syz.2.93: attempt to access beyond end of device [ 158.214388][ T6212] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 158.229668][ T6212] syz.2.93: attempt to access beyond end of device [ 158.229668][ T6212] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 158.244084][ T6212] syz.2.93: attempt to access beyond end of device [ 158.244084][ T6212] loop2: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 158.258158][ T6212] syz.2.93: attempt to access beyond end of device [ 158.258158][ T6212] loop2: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 158.271939][ T6212] syz.2.93: attempt to access beyond end of device [ 158.271939][ T6212] loop2: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 158.286283][ T6212] syz.2.93: attempt to access beyond end of device [ 158.286283][ T6212] loop2: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 158.300937][ T6212] syz.2.93: attempt to access beyond end of device [ 158.300937][ T6212] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 158.516862][ T6215] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.145403][ T6225] loop2: detected capacity change from 0 to 1764 [ 160.036039][ T6226] loop0: detected capacity change from 0 to 512 [ 160.125816][ T6169] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.331985][ T6249] Bluetooth: MGMT ver 1.22 [ 165.780801][ T6262] loop1: detected capacity change from 0 to 16 [ 165.841142][ T6262] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.897148][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 165.907335][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 165.916941][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 165.926218][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 165.936600][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 165.946195][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 165.955462][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 165.964682][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 165.975416][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 165.984681][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 165.995423][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 166.005586][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 166.014865][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 166.024100][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 166.033481][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 166.044166][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 166.053379][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 166.064048][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 166.073301][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 166.082941][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 166.093646][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 166.102875][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 166.114478][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 166.123720][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 166.134321][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 166.143515][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 166.154144][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 166.163390][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 166.172602][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 166.181986][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 166.191382][ T6262] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 166.202079][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 166.212204][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 166.221639][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 166.232219][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 166.241683][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 166.251117][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 166.260323][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 166.269435][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 166.278995][ T6262] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 166.288441][ T6262] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 166.297706][ T6262] bio_check_eod: 1 callbacks suppressed [ 166.297720][ T6262] syz.1.103: attempt to access beyond end of device [ 166.297720][ T6262] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 166.317943][ T6262] syz.1.103: attempt to access beyond end of device [ 166.317943][ T6262] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 166.332142][ T6262] syz.1.103: attempt to access beyond end of device [ 166.332142][ T6262] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 166.346285][ T6262] syz.1.103: attempt to access beyond end of device [ 166.346285][ T6262] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 166.360787][ T6262] syz.1.103: attempt to access beyond end of device [ 166.360787][ T6262] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 166.375272][ T6262] syz.1.103: attempt to access beyond end of device [ 166.375272][ T6262] loop1: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 166.388913][ T6262] syz.1.103: attempt to access beyond end of device [ 166.388913][ T6262] loop1: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 166.402724][ T6262] syz.1.103: attempt to access beyond end of device [ 166.402724][ T6262] loop1: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 166.417896][ T6262] syz.1.103: attempt to access beyond end of device [ 166.417896][ T6262] loop1: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 166.432245][ T6262] syz.1.103: attempt to access beyond end of device [ 166.432245][ T6262] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 166.730571][ T6265] capability: warning: `syz.1.104' uses 32-bit capabilities (legacy support in use) [ 169.402408][ T6273] loop1: detected capacity change from 0 to 512 [ 169.538719][ T6169] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.653757][ T6288] loop1: detected capacity change from 0 to 256 [ 179.631948][ T6321] loop2: detected capacity change from 0 to 1764 [ 179.666759][ T6321] ======================================================= [ 179.666759][ T6321] WARNING: The mand mount option has been deprecated and [ 179.666759][ T6321] and is ignored by this kernel. Remove the mand [ 179.666759][ T6321] option from the mount to silence this warning. [ 179.666759][ T6321] ======================================================= [ 180.313537][ T6330] loop2: detected capacity change from 0 to 512 [ 180.450572][ T6169] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.290543][ T6343] loop2: detected capacity change from 0 to 512 [ 183.048743][ T6343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.201457][ T6343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.273753][ T6348] loop1: detected capacity change from 0 to 16 [ 183.321821][ T6343] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.359493][ T6348] erofs: (device loop1): mounted with root inode @ nid 36. [ 183.383074][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 183.392833][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 183.402506][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 183.412266][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 183.421514][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 183.430893][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 183.440136][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 183.449419][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 183.460220][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 183.469628][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 183.480300][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 183.489583][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 183.498851][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 183.508087][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 183.517882][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 183.528566][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 183.537758][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 183.548424][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 183.557626][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 183.566809][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 183.577457][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 183.586650][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 183.597301][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 183.606489][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 183.617700][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 183.626885][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 183.637428][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 183.646659][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 183.655840][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 183.665129][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 183.674487][ T6348] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 183.685170][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 183.694498][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 183.703715][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 183.713036][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 183.722967][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 183.732344][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 183.741484][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 183.750609][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 183.759886][ T6348] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 183.769326][ T6348] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 183.778509][ T6348] bio_check_eod: 1 callbacks suppressed [ 183.778546][ T6348] syz.1.112: attempt to access beyond end of device [ 183.778546][ T6348] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 183.797838][ T6348] syz.1.112: attempt to access beyond end of device [ 183.797838][ T6348] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 183.811943][ T6348] syz.1.112: attempt to access beyond end of device [ 183.811943][ T6348] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 183.826393][ T6348] syz.1.112: attempt to access beyond end of device [ 183.826393][ T6348] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 183.840733][ T6348] syz.1.112: attempt to access beyond end of device [ 183.840733][ T6348] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 183.855121][ T6348] syz.1.112: attempt to access beyond end of device [ 183.855121][ T6348] loop1: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 183.868660][ T6348] syz.1.112: attempt to access beyond end of device [ 183.868660][ T6348] loop1: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 183.882491][ T6348] syz.1.112: attempt to access beyond end of device [ 183.882491][ T6348] loop1: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 183.896752][ T6348] syz.1.112: attempt to access beyond end of device [ 183.896752][ T6348] loop1: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 183.911031][ T6348] syz.1.112: attempt to access beyond end of device [ 183.911031][ T6348] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 184.146999][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.416110][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 196.174462][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.187079][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.132682][ T6406] loop1: detected capacity change from 0 to 8 [ 197.193485][ T6406] SQUASHFS error: lzo decompression failed, data probably corrupt [ 197.231548][ T6406] SQUASHFS error: Failed to read block 0x0: -5 [ 197.242524][ T6406] SQUASHFS error: lzo decompression failed, data probably corrupt [ 197.263749][ T6406] SQUASHFS error: Failed to read block 0x0: -5 [ 197.293178][ T28] audit: type=1800 audit(1784992473.745:2): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.130" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 197.502923][ T6411] loop3: detected capacity change from 0 to 512 [ 199.770250][ T6414] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.046595][ T6428] loop1: detected capacity change from 0 to 512 [ 205.054134][ T6428] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.272662][ T6428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.295710][ T6428] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.431837][ T6428] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 205.476047][ T6428] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 205.559107][ T6428] EXT4-fs (loop1): This should not happen!! Data will be lost [ 205.559107][ T6428] [ 205.645633][ T6428] EXT4-fs (loop1): Total free blocks count 0 [ 205.651698][ T6428] EXT4-fs (loop1): Free/Dirty block details [ 205.724758][ T6428] EXT4-fs (loop1): free_blocks=65280 [ 205.768745][ T6428] EXT4-fs (loop1): dirty_blocks=33 [ 205.773948][ T6428] EXT4-fs (loop1): Block reservation details [ 205.865951][ T6428] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 205.916912][ T6441] loop0: detected capacity change from 0 to 2048 [ 206.093084][ T6441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.112929][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.507568][ T6452] process 'syz.1.140' launched './file0' with NULL argv: empty string added [ 207.066592][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 207.072792][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 207.079007][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 207.085279][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 207.847679][ T6467] loop3: detected capacity change from 0 to 256 [ 207.935859][ T55] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 208.065306][ T6461] loop1: detected capacity change from 0 to 512 [ 208.975584][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 209.000560][ T6468] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.503353][ T6473] GUP no longer grows the stack in syz.1.145 (6473): 200000007000-200000008000 (200000004000) [ 209.552103][ T6473] CPU: 1 PID: 6473 Comm: syz.1.145 Not tainted syzkaller #0 [ 209.559483][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.569594][ T6473] Call Trace: [ 209.572933][ T6473] [ 209.575916][ T6473] dump_stack_lvl+0x18c/0x250 [ 209.580633][ T6473] ? show_regs_print_info+0x20/0x20 [ 209.585866][ T6473] ? load_image+0x420/0x420 [ 209.590439][ T6473] ? find_vma+0x134/0x1b0 [ 209.594828][ T6473] fixup_user_fault+0x691/0x750 [ 209.599755][ T6473] fault_in_user_writeable+0x71/0xd0 [ 209.605137][ T6473] futex_lock_pi+0x276/0xa00 [ 209.609778][ T6473] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 209.615230][ T6473] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 209.620820][ T6473] do_futex+0x23d/0x3e0 [ 209.625021][ T6473] ? __ia32_sys_get_robust_list+0x110/0x110 [ 209.630972][ T6473] __se_sys_futex+0x3a9/0x440 [ 209.635676][ T6473] ? __x64_sys_futex+0xf0/0xf0 [ 209.640476][ T6473] ? __x64_sys_futex+0x21/0xf0 [ 209.645266][ T6473] do_syscall_64+0x55/0xb0 [ 209.649704][ T6473] ? clear_bhb_loop+0x40/0x90 [ 209.654408][ T6473] ? clear_bhb_loop+0x40/0x90 [ 209.659115][ T6473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.665042][ T6473] RIP: 0033:0x7f62b739de99 [ 209.669485][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.689147][ T6473] RSP: 002b:00007f62b81de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.697584][ T6473] RAX: ffffffffffffffda RBX: 00007f62b7625fa0 RCX: 00007f62b739de99 [ 209.705579][ T6473] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 209.713570][ T6473] RBP: 00007f62b7433eaf R08: 0000000000000000 R09: 0000000000000082 [ 209.721574][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.729579][ T6473] R13: 00007f62b7626038 R14: 00007f62b7625fa0 R15: 00007ffdee954448 [ 209.737588][ T6473] [ 210.135809][ T6484] loop0: detected capacity change from 0 to 256 [ 210.158016][ T6483] loop1: detected capacity change from 0 to 512 [ 210.206794][ T6484] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x1a218ca7, utbl_chksum : 0xe619d30d) [ 210.254112][ T55] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.263014][ T55] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 210.272545][ T55] usb 3-1: can't read configurations, error -71 [ 210.339165][ T6483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.360065][ T6484] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 210.384230][ T6483] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.547800][ T6489] loop2: detected capacity change from 0 to 2048 [ 210.649397][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.667418][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.039007][ T6489] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 211.053668][ T6489] EXT4-fs error (device loop2) in ext4_setattr:5683: error 28 [ 211.065439][ T6496] loop0: detected capacity change from 0 to 2048 [ 211.143857][ T6496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.399267][ T6507] loop1: detected capacity change from 0 to 256 [ 211.911649][ T6505] loop3: detected capacity change from 0 to 2048 [ 212.733220][ T6505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.972763][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.259359][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.624112][ T6512] syz.0.155 (6512): /proc/6510/oom_adj is deprecated, please use /proc/6510/oom_score_adj instead. [ 215.687585][ T6518] loop2: detected capacity change from 0 to 512 [ 215.759870][ T6518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.837070][ T6518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.931557][ T6518] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.122775][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.415230][ T6530] loop1: detected capacity change from 0 to 512 [ 216.495636][ T6469] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.976640][ T6544] loop3: detected capacity change from 0 to 2048 [ 217.038254][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.301948][ T6548] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 217.321001][ T6548] EXT4-fs error (device loop3) in ext4_setattr:5683: error 28 [ 218.638537][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.654950][ T6553] loop1: detected capacity change from 0 to 1024 [ 218.679172][ T6553] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 218.750468][ T6553] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.167: lblock 2 mapped to illegal pblock 2 (length 1) [ 218.775684][ T6553] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 218.783900][ T6553] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.167: lblock 0 mapped to illegal pblock 48 (length 1) [ 218.799162][ T6553] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 218.810979][ T6553] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.167: Failed to acquire dquot type 0 [ 218.835968][ T6553] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 218.873069][ T6553] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.167: mark_inode_dirty error [ 218.892100][ T6553] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 218.904342][ T6553] EXT4-fs (loop1): 1 orphan inode deleted [ 218.912371][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.925738][ T3445] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 218.933331][ T6558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.168'. [ 218.981636][ T6558] loop3: detected capacity change from 0 to 512 [ 218.999308][ T3445] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 219.017128][ T6558] EXT4-fs: Ignoring removed oldalloc option [ 219.032755][ T3445] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 219.070468][ T6558] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.168: Parent and EA inode have the same ino 15 [ 219.190574][ T6558] EXT4-fs (loop3): 1 orphan inode deleted [ 219.198401][ T6558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.215755][ T1106] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 219.317150][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.581342][ T1106] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 219.699256][ T1106] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 219.934078][ T5779] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 219.987857][ T5779] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 220.005597][ T5779] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 220.053103][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.194585][ T6567] loop2: detected capacity change from 0 to 512 [ 222.240816][ T6573] loop1: detected capacity change from 0 to 16 [ 222.256274][ T6573] erofs: (device loop1): mounted with root inode @ nid 36. [ 222.310119][ T6414] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.603960][ T6577] loop1: detected capacity change from 0 to 1024 [ 223.150431][ T6583] fuse: Bad value for 'fd' [ 224.136131][ T6590] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.245457][ T6594] loop3: detected capacity change from 0 to 736 [ 224.393361][ T6469] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.788223][ T6599] loop3: detected capacity change from 0 to 512 [ 224.882757][ T6469] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.986499][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.017624][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.069992][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.115732][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.372842][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.396751][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.448138][ T8] usb 3-1: config 0 descriptor?? [ 226.630981][ T6615] fuse: Bad value for 'fd' [ 227.430211][ T8] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x4 [ 227.492989][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 227.536143][ T6625] loop1: detected capacity change from 0 to 256 [ 227.593338][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 227.792231][ T6625] FAT-fs (loop1): Directory bread(block 1285) failed [ 227.837215][ T6625] FAT-fs (loop1): Directory bread(block 1286) failed [ 228.615717][ T6625] FAT-fs (loop1): Directory bread(block 1287) failed [ 228.625717][ T8] usb 3-1: USB disconnect, device number 4 [ 228.655995][ T6625] FAT-fs (loop1): Directory bread(block 1288) failed [ 230.869308][ T6635] loop0: detected capacity change from 0 to 128 [ 230.897331][ T6635] fuse: Invalid group_id [ 231.100228][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 231.186949][ T6637] loop0: detected capacity change from 0 to 512 [ 231.772613][ T6650] loop1: detected capacity change from 0 to 2048 [ 231.863322][ T6650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.029039][ T6656] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 232.044270][ T6656] EXT4-fs error (device loop1) in ext4_setattr:5683: error 28 [ 232.959344][ T5790] Bluetooth: Wrong link type (-71) [ 233.150859][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.593366][ T6668] loop1: detected capacity change from 0 to 512 [ 233.625712][ T6670] loop0: detected capacity change from 0 to 16 [ 233.684829][ T6668] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.205: invalid indirect mapped block 256 (level 2) [ 233.716292][ T6670] erofs: (device loop0): mounted with root inode @ nid 36. [ 233.818938][ T6668] EXT4-fs (loop1): 2 truncates cleaned up [ 233.866937][ T6668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.214935][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.422782][ T6682] loop0: detected capacity change from 0 to 512 [ 242.948541][ T6730] loop1: detected capacity change from 0 to 512 [ 243.158540][ T6469] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.819674][ T28] audit: type=1326 audit(1784992525.275:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295319de99 code=0x7ffc0000 [ 248.919954][ T28] audit: type=1326 audit(1784992525.275:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295319de99 code=0x7ffc0000 [ 249.033194][ T28] audit: type=1326 audit(1784992525.335:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f295319de99 code=0x7ffc0000 [ 249.140035][ T28] audit: type=1326 audit(1784992525.335:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295319de99 code=0x7ffc0000 [ 249.255676][ T28] audit: type=1326 audit(1784992525.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f295319de99 code=0x7ffc0000 [ 249.373836][ T6792] loop0: detected capacity change from 0 to 512 [ 251.395884][ T28] audit: type=1326 audit(1784992525.335:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295319de99 code=0x7ffc0000 [ 251.519940][ T6469] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.602296][ T6817] loop1: detected capacity change from 0 to 2048 [ 252.692036][ T6817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.727633][ T6820] loop3: detected capacity change from 0 to 512 [ 252.978318][ T6820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.532841][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.658606][ T6839] loop0: detected capacity change from 0 to 128 [ 255.870827][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.877437][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010053][ T6848] loop1: detected capacity change from 0 to 512 [ 256.080759][ T6469] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.080825][ T6881] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 260.734752][ T6886] loop0: detected capacity change from 0 to 512 [ 260.846278][ T6886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.177036][ T6886] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 261.249446][ T6886] System zones: 0-2, 18-18, 34-35 [ 261.335953][ T6886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.454155][ T6886] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.622351][ T6917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.255'. [ 264.242021][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.332004][ T6928] loop3: detected capacity change from 0 to 2048 [ 266.352732][ T6931] loop0: detected capacity change from 0 to 256 [ 266.401961][ T6928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.412361][ T6931] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.468542][ T6931] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 266.573585][ T6931] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.622098][ T6933] loop2: detected capacity change from 0 to 512 [ 266.680525][ T6933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 266.778148][ T6933] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 266.878882][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.706120][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 271.753504][ T6954] loop0: detected capacity change from 0 to 512 [ 271.823483][ T6954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.871280][ T6954] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 271.898993][ T6954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 272.144654][ T6954] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.217743][ T6954] EXT4-fs (loop0): 1 truncate cleaned up [ 272.224773][ T6954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.708124][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.660242][ T6975] loop0: detected capacity change from 0 to 256 [ 280.464745][ T7000] loop0: detected capacity change from 0 to 512 [ 280.476186][ T7000] EXT4-fs: inline encryption not supported [ 280.499359][ T7000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 280.606275][ T7000] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 280.649287][ T7000] EXT4-fs (loop0): 1 truncate cleaned up [ 280.656445][ T7000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.088927][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.770179][ T7026] loop2: detected capacity change from 0 to 256 [ 282.777000][ T7024] Illegal XDP return value 4294964480 on prog (id 3) dev syz_tun, expect packet loss! [ 282.927619][ T7026] FAT-fs (loop2): Directory bread(block 64) failed [ 282.977007][ T7026] FAT-fs (loop2): Directory bread(block 65) failed [ 283.029366][ T7026] FAT-fs (loop2): Directory bread(block 66) failed [ 283.090859][ T7026] FAT-fs (loop2): Directory bread(block 67) failed [ 283.131958][ T7026] FAT-fs (loop2): Directory bread(block 68) failed [ 283.171471][ T7026] FAT-fs (loop2): Directory bread(block 69) failed [ 283.244849][ T7026] FAT-fs (loop2): Directory bread(block 70) failed [ 283.279929][ T7026] FAT-fs (loop2): Directory bread(block 71) failed [ 283.335785][ T7026] FAT-fs (loop2): Directory bread(block 72) failed [ 283.364088][ T7026] FAT-fs (loop2): Directory bread(block 73) failed [ 285.555721][ T7026] bio_check_eod: 1 callbacks suppressed [ 285.555740][ T7026] syz.2.289: attempt to access beyond end of device [ 285.555740][ T7026] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 285.614580][ T7026] syz.2.289: attempt to access beyond end of device [ 285.614580][ T7026] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 285.660553][ T28] audit: type=1800 audit(1784992562.115:9): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.289" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 286.020081][ T7042] loop3: detected capacity change from 0 to 256 [ 286.283891][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 287.668700][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.727168][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.488765][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 288.500555][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 288.509818][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 288.519446][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 292.531666][ T7101] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.392919][ T7135] loop1: detected capacity change from 0 to 256 [ 296.968224][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.238538][ T7145] tap0: tun_chr_ioctl cmd 2147767507 [ 307.229848][ T7207] loop0: detected capacity change from 0 to 256 [ 310.112400][ T7216] syzkaller0: entered promiscuous mode [ 310.118925][ T7216] syzkaller0: entered allmulticast mode [ 313.153341][ T7248] loop0: detected capacity change from 0 to 256 [ 315.507616][ T7228] netlink: 'syz.2.338': attribute type 5 has an invalid length. [ 315.515338][ T7228] netlink: 17 bytes leftover after parsing attributes in process `syz.2.338'. [ 316.803273][ T7275] loop3: detected capacity change from 0 to 256 [ 319.396058][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.402427][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.573478][ T7288] overlayfs: workdir and upperdir must be separate subtrees [ 321.109099][ T7302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.966116][ T7327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.607585][ T7341] loop0: detected capacity change from 0 to 16 [ 326.686293][ T7341] erofs: (device loop0): mounted with root inode @ nid 36. [ 326.746723][ T7341] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 326.837555][ T7341] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 326.883257][ T7341] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 326.949399][ T7341] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 326.958671][ T7341] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 326.968343][ T7341] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 326.977775][ T7341] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 326.987437][ T7341] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 327.085634][ T7341] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 327.134988][ T28] audit: type=1800 audit(1784992603.585:10): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.383" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 327.157430][ T7341] syz.0.383 (7341) used greatest stack depth: 20208 bytes left [ 327.255373][ T7347] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 327.267234][ T7347] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 332.781130][ T7408] netlink: 'syz.1.390': attribute type 12 has an invalid length. [ 337.927233][ T7458] loop2: detected capacity change from 0 to 8192 [ 337.955539][ T7458] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.030087][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.075099][ T7458] FAT-fs (loop2): Filesystem has been set read-only [ 338.104257][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.158968][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.246302][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.302361][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.341721][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.389802][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.442897][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.492412][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.533608][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'. [ 338.557605][ T7458] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 338.599918][ T28] audit: type=1800 audit(1784992615.055:11): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.418" name="file2" dev="loop2" ino=1048608 res=0 errno=0 [ 338.691555][ T7458] syz.2.418 (7458) used greatest stack depth: 19656 bytes left [ 345.106669][ T7543] syzkaller0: entered promiscuous mode [ 345.112207][ T7543] syzkaller0: entered allmulticast mode [ 353.305873][ T7629] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 359.495967][ T7671] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 361.220890][ T7360] kernel write not supported for file [eventfd] (pid: 7360 comm: kworker/1:7) [ 362.605886][ T7706] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 363.880564][ T7722] loop2: detected capacity change from 0 to 128 [ 363.964896][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 363.999164][ T7722] FAT-fs (loop2): Filesystem has been set read-only [ 364.026557][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.035042][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.116534][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.125124][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.160232][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.187124][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.224895][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.259925][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.280104][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.315808][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.344914][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.366766][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.375351][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.414666][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.449542][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.488999][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.518974][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.537891][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.575535][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.604294][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.625555][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.634093][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.653214][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.689590][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.709230][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.730981][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.750399][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.771550][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.796285][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.815104][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.829162][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.845482][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.865505][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.874169][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.900480][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.919449][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.935332][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.955725][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.964269][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 364.991729][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 365.015623][ T7722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 365.034862][ T28] audit: type=1800 audit(1784992641.485:12): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.489" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 366.735790][ T7747] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 369.259867][ T7767] loop3: detected capacity change from 0 to 128 [ 371.395750][ T7784] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 374.199369][ T7808] loop2: detected capacity change from 0 to 128 [ 374.826955][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 376.025699][ T7815] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 378.750498][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.761887][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.977949][ T7850] loop0: detected capacity change from 0 to 128 [ 380.512299][ T7859] 9pnet_fd: Insufficient options for proto=fd [ 380.664770][ T7863] loop1: detected capacity change from 0 to 128 [ 381.621938][ T7882] loop2: detected capacity change from 0 to 16 [ 381.668127][ T7882] erofs: (device loop2): mounted with root inode @ nid 36. [ 381.709603][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 381.729565][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 381.755362][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 381.775162][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 381.813876][ T7880] loop3: detected capacity change from 0 to 8192 [ 381.820616][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 381.840307][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 381.885791][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 381.913375][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 381.948607][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 381.975558][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 382.018934][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 382.047896][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 382.066398][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 382.125788][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 382.174446][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 382.215483][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 384.146030][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 384.215640][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 384.305622][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 384.378815][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 384.475733][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 384.485038][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 384.635347][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 384.673240][ T7902] dyndbg: bad flag-op d, at start of d*vio. [ 384.725599][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 384.746146][ T7902] dyndbg: flags parse failed [ 384.761005][ T7901] fuse: Bad value for 'group_id' [ 384.809199][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 384.872752][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 384.884499][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 384.893741][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 384.902921][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 384.912286][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 384.921661][ T7882] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 384.956649][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 384.994258][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 385.025547][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 385.034868][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 385.079252][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 385.125734][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 385.145847][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 385.200511][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 385.245791][ T7882] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 385.265505][ T7882] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 385.275382][ T7882] syz.2.528: attempt to access beyond end of device [ 385.275382][ T7882] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 385.286604][ T7908] loop0: detected capacity change from 0 to 128 [ 385.328528][ T7882] syz.2.528: attempt to access beyond end of device [ 385.328528][ T7882] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 385.383899][ T7882] syz.2.528: attempt to access beyond end of device [ 385.383899][ T7882] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 385.452783][ T7882] syz.2.528: attempt to access beyond end of device [ 385.452783][ T7882] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 385.481281][ T7882] syz.2.528: attempt to access beyond end of device [ 385.481281][ T7882] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 385.562047][ T7882] syz.2.528: attempt to access beyond end of device [ 385.562047][ T7882] loop2: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 385.625823][ T7882] syz.2.528: attempt to access beyond end of device [ 385.625823][ T7882] loop2: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 385.660009][ T7882] syz.2.528: attempt to access beyond end of device [ 385.660009][ T7882] loop2: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 385.730180][ T7882] syz.2.528: attempt to access beyond end of device [ 385.730180][ T7882] loop2: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 385.815521][ T7882] syz.2.528: attempt to access beyond end of device [ 385.815521][ T7882] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 387.346842][ T7939] fuse: Bad value for 'group_id' [ 387.883760][ T7946] dyndbg: bad flag-op d, at start of d*vio. [ 387.942344][ T7946] dyndbg: flags parse failed [ 387.967414][ T7951] loop0: detected capacity change from 0 to 128 [ 388.430557][ T7962] loop0: detected capacity change from 0 to 16 [ 388.459003][ T7962] erofs: (device loop0): mounted with root inode @ nid 36. [ 388.521139][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 388.544240][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 388.565848][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 388.588934][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 388.617890][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 388.656067][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 388.669531][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 388.707212][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 388.734864][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 388.785538][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 388.811481][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 388.846367][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 388.914877][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 389.055962][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 389.392969][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 389.633359][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 389.675063][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 389.719878][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 389.771777][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 389.843362][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 389.902769][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 389.983312][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 390.041210][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 390.090101][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 390.162897][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 390.224703][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 390.275044][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 390.320028][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 390.347292][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 391.253623][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 391.297918][ T7962] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 391.346256][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 391.366565][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 391.390188][ T7992] loop2: detected capacity change from 0 to 128 [ 391.396746][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 391.435687][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 391.461585][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 391.511680][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 391.538325][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 391.565632][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 391.607437][ T7962] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 391.641302][ T7962] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 391.656429][ T7996] dyndbg: bad flag-op d, at start of d*vio. [ 391.665476][ T7996] dyndbg: flags parse failed [ 391.673528][ T7962] bio_check_eod: 1 callbacks suppressed [ 391.673566][ T7962] syz.0.551: attempt to access beyond end of device [ 391.673566][ T7962] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 391.709231][ T7962] syz.0.551: attempt to access beyond end of device [ 391.709231][ T7962] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 391.752221][ T7962] syz.0.551: attempt to access beyond end of device [ 391.752221][ T7962] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 391.795334][ T7962] syz.0.551: attempt to access beyond end of device [ 391.795334][ T7962] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 391.835840][ T7962] syz.0.551: attempt to access beyond end of device [ 391.835840][ T7962] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 391.894068][ T7962] syz.0.551: attempt to access beyond end of device [ 391.894068][ T7962] loop0: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 391.960387][ T7962] syz.0.551: attempt to access beyond end of device [ 391.960387][ T7962] loop0: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 391.997359][ T7962] syz.0.551: attempt to access beyond end of device [ 391.997359][ T7962] loop0: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 392.087041][ T7962] syz.0.551: attempt to access beyond end of device [ 392.087041][ T7962] loop0: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 392.106989][ T7962] syz.0.551: attempt to access beyond end of device [ 392.106989][ T7962] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 393.354893][ T8028] loop3: detected capacity change from 0 to 128 [ 393.492745][ T8030] dyndbg: bad flag-op d, at start of d*vio.c [ 393.525231][ T8030] dyndbg: flags parse failed [ 393.979469][ T8047] loop2: detected capacity change from 0 to 16 [ 393.997984][ T8047] erofs: (device loop2): mounted with root inode @ nid 36. [ 394.031663][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 394.052901][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 394.075637][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 394.104503][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 394.152265][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 394.185960][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 394.205667][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 394.245565][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 394.286320][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 394.305577][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 394.333433][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 394.378363][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 394.414130][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 394.439576][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 394.465621][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 394.492556][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 394.515638][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 394.535546][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 394.546849][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 394.565623][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 394.646229][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 394.679098][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 394.706291][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 394.738248][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 394.755661][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 394.764890][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 394.795590][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 394.829490][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 394.880592][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 394.916744][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 394.942384][ T8047] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 394.986282][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 395.004346][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 395.025574][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 395.065593][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 395.074952][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 395.849490][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 395.890457][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 395.977849][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 395.989060][ T8047] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 395.998580][ T8047] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 396.069384][ T8071] loop1: detected capacity change from 0 to 128 [ 396.125950][ T8074] dyndbg: bad flag-op d, at start of d*vio.c [ 396.135427][ T8074] dyndbg: flags parse failed [ 397.333982][ T8108] loop3: detected capacity change from 0 to 16 [ 397.363090][ T8108] erofs: (device loop3): mounted with root inode @ nid 36. [ 397.968671][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 397.977935][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 397.987496][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 397.996722][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 398.005974][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 398.015386][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 398.024689][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 398.033953][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 398.044634][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 398.053833][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 398.064510][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 398.073868][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 398.083154][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 398.092591][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 398.101854][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 398.112535][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 398.121759][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 398.132434][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 398.141637][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 398.150881][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 398.161569][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 398.170791][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 398.181461][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 398.190636][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 398.201219][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 398.210401][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 398.220975][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 398.230197][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 398.239405][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 398.248737][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 398.258134][ T8108] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 398.268847][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 398.279226][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 398.288457][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 398.297857][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 398.307229][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 398.316645][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 398.325848][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 398.334928][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 398.344248][ T8108] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 398.353692][ T8108] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 398.362969][ T8108] bio_check_eod: 12 callbacks suppressed [ 398.362984][ T8108] syz.3.594: attempt to access beyond end of device [ 398.362984][ T8108] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 398.382489][ T8108] syz.3.594: attempt to access beyond end of device [ 398.382489][ T8108] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 398.396632][ T8108] syz.3.594: attempt to access beyond end of device [ 398.396632][ T8108] loop3: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 398.410559][ T8108] syz.3.594: attempt to access beyond end of device [ 398.410559][ T8108] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 398.425015][ T8108] syz.3.594: attempt to access beyond end of device [ 398.425015][ T8108] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 398.439425][ T8108] syz.3.594: attempt to access beyond end of device [ 398.439425][ T8108] loop3: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 398.453076][ T8108] syz.3.594: attempt to access beyond end of device [ 398.453076][ T8108] loop3: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 398.466906][ T8108] syz.3.594: attempt to access beyond end of device [ 398.466906][ T8108] loop3: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 398.481165][ T8108] syz.3.594: attempt to access beyond end of device [ 398.481165][ T8108] loop3: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 398.495531][ T8108] syz.3.594: attempt to access beyond end of device [ 398.495531][ T8108] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 399.178980][ T8127] loop1: detected capacity change from 0 to 128 [ 399.814704][ T8144] ip6gre1: entered promiscuous mode [ 399.844413][ T8144] ip6gre1: entered allmulticast mode [ 401.111001][ T1129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.179463][ T5827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.190436][ T1129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.750659][ T5827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.865706][ T5827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.435949][ T8175] loop3: detected capacity change from 0 to 128 [ 402.661249][ T8174] loop2: detected capacity change from 0 to 256 [ 404.967463][ T8191] loop1: detected capacity change from 0 to 16 [ 405.097147][ T8191] erofs: (device loop1): mounted with root inode @ nid 36. [ 405.189910][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 405.199394][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 405.209202][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 405.218452][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 405.227903][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 405.237666][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 405.247103][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 405.256356][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 405.267099][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 405.276303][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 405.286971][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 405.296210][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 405.305477][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 405.314725][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 405.323983][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 405.334716][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 405.343923][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 405.354668][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 405.363934][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 405.373199][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 405.383927][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 405.393139][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 405.403825][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 405.413053][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 405.423672][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 405.432881][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 405.443514][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 405.452738][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 405.462010][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 405.471460][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 405.480884][ T8191] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 405.491567][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 405.500976][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 405.510274][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 405.519665][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 405.529169][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 405.538729][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 405.548047][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 405.557314][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 405.566680][ T8191] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 405.576174][ T8191] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 405.585435][ T8191] bio_check_eod: 1 callbacks suppressed [ 405.585449][ T8191] syz.1.607: attempt to access beyond end of device [ 405.585449][ T8191] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 405.604900][ T8191] syz.1.607: attempt to access beyond end of device [ 405.604900][ T8191] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 405.619179][ T8191] syz.1.607: attempt to access beyond end of device [ 405.619179][ T8191] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 405.626008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.633470][ T8191] syz.1.607: attempt to access beyond end of device [ 405.633470][ T8191] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 405.655076][ T8191] syz.1.607: attempt to access beyond end of device [ 405.655076][ T8191] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 405.669708][ T8191] syz.1.607: attempt to access beyond end of device [ 405.669708][ T8191] loop1: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 405.683410][ T8191] syz.1.607: attempt to access beyond end of device [ 405.683410][ T8191] loop1: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 405.697244][ T8191] syz.1.607: attempt to access beyond end of device [ 405.697244][ T8191] loop1: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 405.711931][ T8191] syz.1.607: attempt to access beyond end of device [ 405.711931][ T8191] loop1: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 405.726298][ T8191] syz.1.607: attempt to access beyond end of device [ 405.726298][ T8191] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 408.299306][ T8206] loop1: detected capacity change from 0 to 128 [ 409.179597][ T8222] loop2: detected capacity change from 0 to 2048 [ 409.333092][ T8222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.566064][ T8226] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 409.581822][ T8226] EXT4-fs error (device loop2) in ext4_setattr:5683: error 28 [ 410.339076][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.758928][ T8239] loop2: detected capacity change from 0 to 16 [ 411.778352][ T8239] erofs: (device loop2): mounted with root inode @ nid 36. [ 414.357816][ T8245] loop2: detected capacity change from 0 to 128 [ 414.585651][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 416.888389][ T8269] loop2: detected capacity change from 0 to 16 [ 416.946103][ T8269] erofs: (device loop2): mounted with root inode @ nid 36. [ 419.913448][ T8294] loop3: detected capacity change from 0 to 16 [ 419.966493][ T8294] erofs: (device loop3): mounted with root inode @ nid 36. [ 422.861852][ T5820] kernel write not supported for file [eventfd] (pid: 5820 comm: kworker/1:3) [ 432.505600][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.242757][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:1) [ 437.434958][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 441.183675][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.303853][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.330908][ T8464] fuse: Bad value for 'fd' [ 446.970726][ T8489] fuse: Bad value for 'fd' [ 451.495146][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 465.785733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.224774][ T8] kernel write not supported for file [eventfd] (pid: 8 comm: kworker/0:0) [ 490.897508][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'. [ 499.722674][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 502.351073][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.357693][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.903213][ T8911] fuse: Bad value for 'fd' [ 507.110421][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'. [ 509.273672][ T8972] fuse: Bad value for 'fd' [ 511.601109][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.830'. [ 512.200787][ T9011] fuse: Bad value for 'fd' [ 516.150595][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 530.492952][ T9165] loop3: detected capacity change from 0 to 128 [ 530.724977][ T48] bio_check_eod: 1 callbacks suppressed [ 530.724993][ T48] kworker/u4:3: attempt to access beyond end of device [ 530.724993][ T48] loop3: rw=1, sector=156, nr_sectors = 1 limit=128 [ 530.806032][ T48] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 530.814700][ T48] kworker/u4:3: attempt to access beyond end of device [ 530.814700][ T48] loop3: rw=1, sector=157, nr_sectors = 1 limit=128 [ 530.935436][ T48] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 530.944054][ T48] kworker/u4:3: attempt to access beyond end of device [ 530.944054][ T48] loop3: rw=1, sector=158, nr_sectors = 1 limit=128 [ 531.070736][ T48] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 531.145479][ T48] kworker/u4:3: attempt to access beyond end of device [ 531.145479][ T48] loop3: rw=1, sector=159, nr_sectors = 1 limit=128 [ 531.223331][ T48] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 531.263431][ T48] kworker/u4:3: attempt to access beyond end of device [ 531.263431][ T48] loop3: rw=1, sector=160, nr_sectors = 1 limit=128 [ 531.347395][ T48] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 531.358097][ T48] kworker/u4:3: attempt to access beyond end of device [ 531.358097][ T48] loop3: rw=1, sector=161, nr_sectors = 1 limit=128 [ 531.372760][ T48] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 537.465626][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 636.895319][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 636.902313][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8953/1:b..l P48/1:b..l [ 636.911557][ C1] rcu: (detected by 1, t=10502 jiffies, g=34977, q=294 ncpus=2) [ 636.919400][ C1] task:kworker/u4:3 state:R running task stack:21768 pid:48 ppid:2 flags:0x00004000 [ 636.930798][ C1] Workqueue: bat_events batadv_nc_worker [ 636.936564][ C1] Call Trace: [ 636.939887][ C1] [ 636.942862][ C1] __schedule+0x15ae/0x4660 [ 636.947460][ C1] ? asan.module_dtor+0x20/0x20 [ 636.952388][ C1] ? mark_lock+0x94/0x320 [ 636.956740][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 636.962734][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 636.968026][ C1] preempt_schedule_irq+0xbf/0x150 [ 636.973151][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 636.978900][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 636.984731][ C1] irqentry_exit+0x67/0x70 [ 636.989180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 636.995219][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 637.000537][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 637.020195][ C1] RSP: 0018:ffffc90000b8fa40 EFLAGS: 00000206 [ 637.026294][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3afb0dc5f319900 [ 637.034283][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0660 [ 637.042266][ C1] RBP: ffffc90000b8fb48 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 637.050239][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff92000171f54 [ 637.058234][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 637.066246][ C1] ? batadv_nc_worker+0xd2/0x600 [ 637.071198][ C1] ? read_lock_is_recursive+0x20/0x20 [ 637.076579][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 637.082571][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 637.087721][ C1] ? batadv_nc_worker+0xd2/0x600 [ 637.092672][ C1] batadv_nc_worker+0xef/0x600 [ 637.097457][ C1] ? batadv_nc_worker+0xd2/0x600 [ 637.102423][ C1] ? process_scheduled_works+0x975/0x1600 [ 637.108172][ C1] process_scheduled_works+0xa60/0x1600 [ 637.113748][ C1] ? worker_attach_to_pool+0x370/0x370 [ 637.119231][ C1] ? assign_work+0x3cc/0x5d0 [ 637.123844][ C1] worker_thread+0xa5e/0xfe0 [ 637.128461][ C1] kthread+0x2fa/0x390 [ 637.132732][ C1] ? pr_cont_work+0x550/0x550 [ 637.137419][ C1] ? kthread_blkcg+0xd0/0xd0 [ 637.142027][ C1] ret_from_fork+0x48/0x80 [ 637.146503][ C1] ? kthread_blkcg+0xd0/0xd0 [ 637.151099][ C1] ret_from_fork_asm+0x11/0x20 [ 637.155884][ C1] [ 637.158920][ C1] task:syz.1.818 state:R running task stack:23848 pid:8953 ppid:5779 flags:0x00004002 [ 637.169705][ C1] Call Trace: [ 637.172985][ C1] [ 637.175919][ C1] __schedule+0x15ae/0x4660 [ 637.180453][ C1] ? asan.module_dtor+0x20/0x20 [ 637.185332][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 637.191334][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 637.196623][ C1] preempt_schedule_irq+0xbf/0x150 [ 637.201753][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 637.207482][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 637.213317][ C1] irqentry_exit+0x67/0x70 [ 637.217772][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.223772][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 637.229496][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 637.249189][ C1] RSP: 0018:ffffc9000c69f240 EFLAGS: 00000206 [ 637.255277][ C1] RAX: e0f6525fc7bb7c00 RBX: ffff888022a89e00 RCX: e0f6525fc7bb7c00 [ 637.263293][ C1] RDX: ffff888022a89e00 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0660 [ 637.271874][ C1] RBP: 0000000000000001 R08: ffffea000167c1b7 R09: 1ffffd40002cf836 [ 637.279845][ C1] R10: dffffc0000000000 R11: fffff940002cf837 R12: 0000000000000000 [ 637.287839][ C1] R13: 0000000000000246 R14: ffffffff8d131da0 R15: ffff888022a8a8e0 [ 637.295852][ C1] xas_reload+0x19c/0x470 [ 637.300210][ C1] find_lock_entries+0x3da/0x1020 [ 637.305233][ C1] ? find_lock_entries+0x120/0x1020 [ 637.310435][ C1] ? find_get_entries+0x900/0x900 [ 637.315473][ C1] shmem_undo_range+0x294/0x1a80 [ 637.320418][ C1] ? verify_lock_unused+0x140/0x140 [ 637.325625][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 637.330836][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 637.336586][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 637.341630][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 637.346662][ C1] shmem_evict_inode+0x285/0xa70 [ 637.351619][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 637.357340][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 637.362890][ C1] ? sb_clear_inode_writeback+0x330/0x330 [ 637.368618][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 637.373665][ C1] ? bit_waitqueue+0x30/0x30 [ 637.378264][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 637.383911][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 637.389469][ C1] evict+0x4b7/0x8a0 [ 637.393371][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 637.398408][ C1] ? proc_nr_inodes+0x230/0x230 [ 637.403293][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 637.408505][ C1] ? _raw_spin_unlock+0x28/0x40 [ 637.413375][ C1] __dentry_kill+0x412/0x630 [ 637.417986][ C1] dentry_kill+0xb8/0x290 [ 637.422342][ C1] ? dput+0x3b/0x1e0 [ 637.426253][ C1] dput+0xfe/0x1e0 [ 637.429995][ C1] __fput+0x5b2/0x940 [ 637.434005][ C1] task_work_run+0x1d4/0x260 [ 637.438614][ C1] ? task_work_cancel+0x220/0x220 [ 637.443671][ C1] do_exit+0x986/0x2530 [ 637.447839][ C1] ? nfs_stat_to_errno+0x170/0x170 [ 637.452961][ C1] ? put_task_struct+0xc0/0xc0 [ 637.457761][ C1] ? lock_chain_count+0x20/0x20 [ 637.462620][ C1] do_group_exit+0x22d/0x2f0 [ 637.467233][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 637.472443][ C1] get_signal+0x12a6/0x1390 [ 637.476974][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 637.482545][ C1] ? get_sigframe_size+0x20/0x20 [ 637.487508][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 637.493530][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 637.499000][ C1] exit_to_user_mode_loop+0x70/0x110 [ 637.504315][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 637.509869][ C1] irqentry_exit_to_user_mode+0x9/0x30 [ 637.515341][ C1] exc_page_fault+0x8c/0x100 [ 637.519943][ C1] asm_exc_page_fault+0x26/0x30 [ 637.524805][ C1] RIP: 0033:0x7f62b739dea1 [ 637.529227][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 637.535350][ C1] RAX: 0000000000000000 RBX: 00007f62b7626090 RCX: 00007f62b739de99 [ 637.543368][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 637.551360][ C1] RBP: 00007f62b7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 637.559331][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 637.567318][ C1] R13: 00007f62b7626128 R14: 00007f62b7626090 R15: 00007ffdee954448 [ 637.575332][ C1] [ 637.578368][ C1] rcu: rcu_preempt kthread starved for 10565 jiffies! g34977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 637.589752][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 637.599719][ C1] rcu: RCU grace-period kthread stack dump: [ 637.605612][ C1] task:rcu_preempt state:R running task stack:26664 pid:17 ppid:2 flags:0x00004000 [ 637.616389][ C1] Call Trace: [ 637.619661][ C1] [ 637.622593][ C1] __schedule+0x15ae/0x4660 [ 637.627113][ C1] ? lock_chain_count+0x20/0x20 [ 637.631968][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 637.637870][ C1] ? asan.module_dtor+0x20/0x20 [ 637.642728][ C1] ? rcu_is_watching+0x15/0xb0 [ 637.647510][ C1] schedule+0xbd/0x170 [ 637.651579][ C1] schedule_timeout+0x188/0x2d0 [ 637.656442][ C1] ? console_conditional_schedule+0x40/0x40 [ 637.662343][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 637.668258][ C1] ? update_process_times+0x1b0/0x1b0 [ 637.673642][ C1] ? prepare_to_swait_event+0x344/0x360 [ 637.679209][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 637.684072][ C1] ? dump_blkd_tasks+0x820/0x820 [ 637.689023][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 637.695005][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 637.700049][ C1] ? rcu_gp_init+0x1530/0x1530 [ 637.704812][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 637.709663][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.714863][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 637.720065][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 637.724651][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 637.729780][ C1] ? __kthread_parkme+0x71/0x1c0 [ 637.734731][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 637.739755][ C1] kthread+0x2fa/0x390 [ 637.743823][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 637.748944][ C1] ? kthread_blkcg+0xd0/0xd0 [ 637.753533][ C1] ret_from_fork+0x48/0x80 [ 637.757955][ C1] ? kthread_blkcg+0xd0/0xd0 [ 637.762549][ C1] ret_from_fork_asm+0x11/0x20 [ 637.767343][ C1] [ 637.770359][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 637.776681][ C1] Sending NMI from CPU 1 to CPUs 0: [ 637.781933][ C0] NMI backtrace for cpu 0 [ 637.781944][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 637.781958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.781985][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 637.782014][ C0] Code: 5e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 6a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 637.782028][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 637.782042][ C0] RAX: e2aebcd5e2ea8d00 RBX: ffffffff81630c31 RCX: e2aebcd5e2ea8d00 [ 637.782055][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 637.782066][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 637.782078][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 637.782090][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 637.782102][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 637.782115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.782126][ C0] CR2: 000000110c4239c7 CR3: 000000002e34f000 CR4: 00000000003506f0 [ 637.782142][ C0] Call Trace: [ 637.782149][ C0] [ 637.782154][ C0] default_idle+0x13/0x20 [ 637.782177][ C0] default_idle_call+0x6c/0xa0 [ 637.782202][ C0] do_idle+0x221/0x5c0 [ 637.782226][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 637.782247][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 637.782285][ C0] cpu_startup_entry+0x43/0x60 [ 637.782322][ C0] rest_init+0x2e2/0x300 [ 637.782345][ C0] ? time_init+0x40/0x40 [ 637.782427][ C0] arch_call_rest_init+0xe/0x10 [ 637.782491][ C0] start_kernel+0x461/0x4e0 [ 637.782515][ C0] x86_64_start_reservations+0x2a/0x30 [ 637.782535][ C0] x86_64_start_kernel+0x60/0x60 [ 637.782554][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 637.782593][ C0]