last executing test programs: 8m23.535104883s ago: executing program 4 (id=591): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000003c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002f80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000003000)='./file2\x00', &(0x7f0000003040)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 8m23.070413186s ago: executing program 4 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000004a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000004a40)='./proc\x00', &(0x7f0000004a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004ac0)='./proc/irq/default_smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000004b00)='2', 0x1) 8m22.745090866s ago: executing program 4 (id=602): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x1}, 0x8) 8m22.626059641s ago: executing program 4 (id=604): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 8m22.039332938s ago: executing program 4 (id=611): recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x10106, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000a00), &(0x7f0000000a40)='./file1\x00', 0x1000800, &(0x7f0000000b00)=ANY=[], 0x2, 0x552c, &(0x7f00000011c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006700)='memory.events\x00', 0x275a, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 8m21.574929867s ago: executing program 4 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x2c, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f431bcc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0xf0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m21.086752668s ago: executing program 32 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x2c, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f431bcc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0xf0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m51.259380001s ago: executing program 3 (id=1335): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000240)) 6m50.808735555s ago: executing program 3 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x4008084) 6m50.58591962s ago: executing program 3 (id=1340): r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010102}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 6m49.96586323s ago: executing program 3 (id=1348): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@test_dummy_encryption_v1}, {@mb_optimize_scan}]}, 0x3, 0x455, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) 6m49.201416888s ago: executing program 3 (id=1353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x8, 0x10}, &(0x7f0000000340)=0xc) 6m48.406938379s ago: executing program 3 (id=1359): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6m48.127677565s ago: executing program 33 (id=1359): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m30.575620289s ago: executing program 5 (id=2315): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4m30.381991919s ago: executing program 5 (id=2317): syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 4m29.896375388s ago: executing program 5 (id=2320): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4309, 0x4) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/212, 0xd4}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x3b99}], 0x2, 0x8140, 0x0) 4m29.544267594s ago: executing program 5 (id=2322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="9b78456a04552051bd7186", 0xb}, {&(0x7f0000000180)='Qj', 0x2}], 0x2) 4m29.269461881s ago: executing program 5 (id=2324): memfd_create(&(0x7f0000000040)='[\v\xc8OS\v\xc2\xee{\x1d\xdbX\xae[\x1a\xa9\xfd\x00\xae\xd1md\xc8\x85H%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00l\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1e\xa0\x8ez\xadT\xc0sr\x95\xbf3\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q\x02\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xb1\xeb?\xaa\xd9\xeb\xb8\x7f\x00\x00\x00\x00\x00\x00\bt\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00\x00Y\xa5T\xa5\x96\x96\xa3\nt\xbe\x95l\xf7\xebQ\xeb\xd0\x87\xa2\xb2aoW\xa2oY\xd1\xb1\xcf2\xf2v\x9c\x1e\xe7\x8e\xab\x19A\xf2\xf4\xed\x02\xb3\xb8\xa4|\xbeb\n\x97\xb14ff\xe2\x12/\xc9Oj\xcc\xfbL\xd2\xd3E\xce\x8e\xa6\xac\"\xf8f\x1e\x95\x85G\xd9\x05\xcb\x94k\x00\x00\x00\x00\x00\x00\x00', 0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb080001000000000008000100020000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 4m28.841824057s ago: executing program 5 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/16384, 0x4000) 4m13.71626075s ago: executing program 34 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/16384, 0x4000) 15.501653413s ago: executing program 0 (id=3598): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000006c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000700)={&(0x7f0000000740)=[{0x7, 0x1, 0x0, 0x0}], 0x1}) 13.434025295s ago: executing program 0 (id=3607): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8c65}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000680)='j?', 0x2}], 0x1}}], 0x2, 0x240408d1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) 13.035514441s ago: executing program 0 (id=3610): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x6, 0xd, 0x4, 0x800001, 0x3ff, {}, {0x4, 0xc, 0x6, 0x2, 0x20, 0x38, "efc4a591"}, 0x1, 0x3, {0x0}, 0x1}) 12.351141228s ago: executing program 0 (id=3614): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'upperdir'}) 11.576268145s ago: executing program 0 (id=3617): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000400)=0x10) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000d00)=""/4102, &(0x7f0000001d40)=0x1006) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.82160755s ago: executing program 0 (id=3622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') sendfile(r0, r0, 0x0, 0x1) 9.70338584s ago: executing program 35 (id=3622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') sendfile(r0, r0, 0x0, 0x1) 8.199470699s ago: executing program 6 (id=3632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003e40), 0x1ab640, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000003e80)={0x25000, 0x9000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000003ec0)={0xb000, 0x103000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000003f00)={0xfffffffffffff001, 0x13000}) 7.730702414s ago: executing program 6 (id=3636): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000040)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000005c0)="60a75dc565ef116aa412580445034943beea59cdd8a174caf38d7adc18", 0x1d}, {&(0x7f0000000240)="f861eab0bb1a8d0d1154d54ecea0f66b736c95", 0x13}], 0x3}, 0x40011) 7.366445744s ago: executing program 7 (id=3639): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000780)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000980)={r2, 0x2}, &(0x7f0000000fc0)=0x8) 7.244406732s ago: executing program 6 (id=3640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000d0f000/0x4000)=nil) 6.703072373s ago: executing program 7 (id=3643): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000220)="837d") 6.507663669s ago: executing program 2 (id=3644): syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0) 6.389499143s ago: executing program 6 (id=3645): syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ttyUSB0\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f00000002c0)="620482", 0x3) 4.930688548s ago: executing program 2 (id=3647): r0 = fanotify_init(0x10, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40442, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fanotify_mark(r0, 0x1, 0x100b, r1, 0x0) 4.392346262s ago: executing program 7 (id=3648): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2000000}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 3.745411562s ago: executing program 7 (id=3649): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0xb87, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x2, 0x20, r4, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0, 0x44}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000780)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 3.078166031s ago: executing program 1 (id=3651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040), 0x8) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 3.016017969s ago: executing program 6 (id=3652): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x9}, {}, 0x5}}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.996239162s ago: executing program 7 (id=3653): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f000028b000/0x3000)=nil, &(0x7f00000bb000/0x2000)=nil, 0x3000, 0x2}) 2.86399959s ago: executing program 2 (id=3654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xda}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfed024fc985380b3}, 0x4008840) 2.528666734s ago: executing program 6 (id=3655): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,nointegrity,nodiscard,iocharset=macinuit,iocharset=cp864,nodiscard,iocharset=cp1251,iocharset=cp860,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x21, 0x61e2, &(0x7f000000c5c0)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x32a, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)) rename(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.501992794s ago: executing program 1 (id=3656): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='3', 0x4e) statx(r0, 0x0, 0x100, 0x7ff, 0x0) 2.259623667s ago: executing program 2 (id=3657): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x4, &(0x7f0000000400)=0x0) r3 = socket$kcm(0x29, 0x2, 0x0) io_submit(r2, 0x3, &(0x7f0000000bc0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x3, r3, 0x0, 0x0, 0x7fff}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x40, r1, 0x0, 0x0, 0x1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x4}]) 1.708097819s ago: executing program 1 (id=3658): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) io_setup(0x4002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010000}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.500805558s ago: executing program 2 (id=3659): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./tracing\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 1.233153613s ago: executing program 1 (id=3660): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xc}}], 0x1, 0x4000000) 783.668049ms ago: executing program 1 (id=3661): mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002740)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0), 0x0, &(0x7f0000002800)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002840)='./file0/file1\x00', 0x103841, 0x186) lseek(r0, 0x0, 0x0) 317.936977ms ago: executing program 2 (id=3662): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) 2.299763ms ago: executing program 1 (id=3663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff15}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 7 (id=3664): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="66b81e000f00d066baf80cb8631ffd81ef66bafc0cb074ee64410f01d166bad00466edb805000000b931c37fea0f01c166baf80cb8a0c20889ef66bafc0c66b8890066ef6766420f3adf62bafc67f30faedb66baf80cb8aa48f08bef66bafc0c66edf3a4", 0x64}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0x7d) kernel console output (not intermixed with test programs): [ 522.123030][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.123051][ T5747] usb 1-1: Product: syz [ 522.123063][ T5747] usb 1-1: Manufacturer: syz [ 522.123074][ T5747] usb 1-1: SerialNumber: syz [ 522.144183][ T5747] usb 1-1: config 0 descriptor?? [ 522.149601][T14665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.194550][T14671] loop7: detected capacity change from 0 to 4096 [ 522.207993][T14671] EXT4-fs: Ignoring removed nobh option [ 522.208047][T14671] EXT4-fs: Ignoring removed bh option [ 522.231429][T14671] EXT4-fs (loop7): Test dummy encryption mode enabled [ 522.268830][T14671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.269859][ T5747] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 522.362387][T14668] rxe_eth0 speed is unknown, defaulting to 1000 [ 522.488242][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 522.649702][ T5747] usb 1-1: USB disconnect, device number 27 [ 522.649786][ C0] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 522.650062][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 522.749982][T12919] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.678348][T14715] md: md6 stopped. [ 524.711393][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.755330][T14718] md: md6 stopped. [ 525.071594][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2981'. [ 526.140207][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 526.290210][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 526.291714][ T10] usb 7-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 526.294012][ T10] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.294034][ T10] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.294051][ T10] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 526.294070][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 526.294093][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.330641][ T10] usb 7-1: config 0 descriptor?? [ 526.532463][T14750] FAULT_INJECTION: forcing a failure. [ 526.532463][T14750] name failslab, interval 1, probability 0, space 0, times 0 [ 526.532491][T14750] CPU: 0 UID: 0 PID: 14750 Comm: syz.7.2993 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.532513][T14750] Tainted: [L]=SOFTLOCKUP [ 526.532519][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 526.532528][T14750] Call Trace: [ 526.532534][T14750] [ 526.532541][T14750] dump_stack_lvl+0xe8/0x150 [ 526.532574][T14750] should_fail_ex+0x3eb/0x540 [ 526.532597][T14750] should_failslab+0xa8/0x100 [ 526.532624][T14750] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 526.532645][T14750] ? alloc_inode+0xb8/0x1b0 [ 526.532662][T14750] ? alloc_inode+0xb8/0x1b0 [ 526.532685][T14750] alloc_inode+0xb8/0x1b0 [ 526.532704][T14750] create_pipe_files+0x51/0x7a0 [ 526.532719][T14750] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 526.532745][T14750] __do_pipe_flags+0x46/0x1f0 [ 526.532761][T14750] do_pipe2+0xaa/0x190 [ 526.532777][T14750] ? __pfx_clockevents_program_event+0x10/0x10 [ 526.532796][T14750] ? __pfx_do_pipe2+0x10/0x10 [ 526.532822][T14750] __x64_sys_pipe+0x3a/0x50 [ 526.532836][T14750] do_syscall_64+0x166/0x520 [ 526.532855][T14750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.532871][T14750] ? clear_bhb_loop+0x70/0xc0 [ 526.532890][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.532905][T14750] RIP: 0033:0x7fd7ed99f559 [ 526.532919][T14750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.532933][T14750] RSP: 002b:00007fd7ee883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 526.532950][T14750] RAX: ffffffffffffffda RBX: 00007fd7edc25fa0 RCX: 00007fd7ed99f559 [ 526.532961][T14750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.532971][T14750] RBP: 00007fd7eda36b20 R08: 0000000000000000 R09: 0000000000000000 [ 526.532980][T14750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.532989][T14750] R13: 00007fd7edc26038 R14: 00007fd7edc25fa0 R15: 00007ffe5508ceb8 [ 526.533027][T14750] [ 526.767113][ T195] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 526.951920][T12920] Bluetooth: hci1: command 0x0405 tx timeout [ 526.956976][ T195] usb 2-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 526.958660][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.958683][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.958711][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.017129][ T195] usb 2-1: config 0 descriptor?? [ 527.156958][T14755] loop2: detected capacity change from 0 to 512 [ 527.186837][T14755] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 527.225721][T14755] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 527.294253][T14755] EXT4-fs (loop2): mount failed [ 527.377046][ T10] usb 7-1: USB disconnect, device number 9 [ 527.397702][T14753] loop7: detected capacity change from 0 to 8192 [ 527.429940][T14753] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 527.490749][ T195] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 527.490836][ T195] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 527.534883][ T195] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001A/input/input36 [ 527.622287][ T195] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 527.754076][ T195] usb 2-1: USB disconnect, device number 27 [ 527.919776][T14760] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 527.919797][T14760] FAT-fs (loop7): Filesystem has been set read-only [ 528.022114][T14762] fido_id[14762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 528.051564][T14765] jffs2: notice: (14765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 528.890350][ T195] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 529.054340][ T195] usb 2-1: Using ep0 maxpacket: 16 [ 529.056406][ T195] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 529.057863][ T195] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.057887][ T195] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.057904][ T195] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 529.057923][ T195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 529.057946][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.135341][ T195] usb 2-1: config 0 descriptor?? [ 529.260198][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 529.350511][T12920] Bluetooth: hci5: command 0x0406 tx timeout [ 529.411960][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 529.412638][ T10] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.413971][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 529.414008][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.414025][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.414043][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.414060][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.414107][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.610978][T14794] loop7: detected capacity change from 0 to 1024 [ 529.673216][T14794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.704587][ T195] hid (null): nested delimiters [ 529.704650][ T195] hid (null): report_id 24797 is invalid [ 529.704918][ T195] hid (null): bogus close delimiter [ 529.776580][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 529.776618][ T10] usbtmc 3-1:16.0: can't read capabilities [ 529.906439][ T10] usb 2-1: USB disconnect, device number 28 [ 530.080209][ T195] usb 3-1: USB disconnect, device number 26 [ 530.650640][T14804] loop1: detected capacity change from 0 to 256 [ 530.718197][ T33] audit: type=1800 audit(2000000357.150:125): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3014" name="file2" dev="loop1" ino=99 res=0 errno=-22 [ 531.003051][T12919] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.313992][T14816] loop2: detected capacity change from 0 to 512 [ 531.746745][T14824] FAULT_INJECTION: forcing a failure. [ 531.746745][T14824] name failslab, interval 1, probability 0, space 0, times 0 [ 531.746773][T14824] CPU: 0 UID: 0 PID: 14824 Comm: syz.6.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.746795][T14824] Tainted: [L]=SOFTLOCKUP [ 531.746802][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 531.746812][T14824] Call Trace: [ 531.746818][T14824] [ 531.746825][T14824] dump_stack_lvl+0xe8/0x150 [ 531.746856][T14824] should_fail_ex+0x3eb/0x540 [ 531.746891][T14824] should_failslab+0xa8/0x100 [ 531.746919][T14824] __kmalloc_cache_noprof+0x9e/0x600 [ 531.746941][T14824] ? qrtr_endpoint_register+0x83/0x640 [ 531.746967][T14824] ? qrtr_endpoint_register+0x83/0x640 [ 531.746995][T14824] qrtr_endpoint_register+0x83/0x640 [ 531.747017][T14824] ? __init_waitqueue_head+0xa8/0x150 [ 531.747046][T14824] qrtr_tun_open+0x134/0x1b0 [ 531.747064][T14824] ? __pfx_qrtr_tun_open+0x10/0x10 [ 531.747078][T14824] misc_open+0x2d5/0x350 [ 531.747099][T14824] chrdev_open+0x4d9/0x600 [ 531.747118][T14824] ? __pfx_chrdev_open+0x10/0x10 [ 531.747134][T14824] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 531.747151][T14824] ? devcgroup_check_permission+0x31/0x8f0 [ 531.747174][T14824] ? __pfx_chrdev_open+0x10/0x10 [ 531.747191][T14824] do_dentry_open+0x80e/0x1360 [ 531.747218][T14824] vfs_open_consume+0x4a/0x350 [ 531.747234][T14824] ? path_openat+0x16e1/0x20f0 [ 531.747261][T14824] path_openat+0x16fc/0x20f0 [ 531.747301][T14824] do_file_open+0x23e/0x4a0 [ 531.747330][T14824] ? __pfx_do_file_open+0x10/0x10 [ 531.747372][T14824] ? _raw_spin_unlock+0x28/0x50 [ 531.747387][T14824] ? alloc_fd+0x6af/0x760 [ 531.747417][T14824] do_sys_openat2+0x115/0x200 [ 531.747435][T14824] ? __se_sys_futex+0x3a8/0x450 [ 531.747452][T14824] ? __pfx_do_sys_openat2+0x10/0x10 [ 531.747475][T14824] ? rcu_is_watching+0x16/0xb0 [ 531.747504][T14824] __x64_sys_openat+0x138/0x170 [ 531.747527][T14824] do_syscall_64+0x166/0x520 [ 531.747546][T14824] ? trace_irq_disable+0x3b/0x140 [ 531.747568][T14824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.747585][T14824] ? clear_bhb_loop+0x70/0xc0 [ 531.747605][T14824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.747621][T14824] RIP: 0033:0x7f7a8279f559 [ 531.747636][T14824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.747649][T14824] RSP: 002b:00007f7a836ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.747666][T14824] RAX: ffffffffffffffda RBX: 00007f7a82a25fa0 RCX: 00007f7a8279f559 [ 531.747678][T14824] RDX: 0000000000101002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 531.747690][T14824] RBP: 00007f7a82836b20 R08: 0000000000000000 R09: 0000000000000000 [ 531.747700][T14824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.747710][T14824] R13: 00007f7a82a26038 R14: 00007f7a82a25fa0 R15: 00007ffc3a85b618 [ 531.747737][T14824] [ 531.883397][ T195] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 532.152963][ T195] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 532.168239][ T195] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 532.168261][ T195] usb 1-1: config 0 has no interface number 0 [ 532.168291][ T195] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.199743][ T195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.199763][ T195] usb 1-1: Product: syz [ 532.199775][ T195] usb 1-1: Manufacturer: syz [ 532.199786][ T195] usb 1-1: SerialNumber: syz [ 532.239231][ T195] usb 1-1: config 0 descriptor?? [ 532.344774][ T195] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 532.689811][T14831] loop6: detected capacity change from 0 to 2048 [ 532.727678][T14831] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 532.727705][T14831] UDF-fs: Scanning with blocksize 512 failed [ 532.823003][T14831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.851641][T14834] FAULT_INJECTION: forcing a failure. [ 532.851641][T14834] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 532.851670][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.2.3027 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.851695][T14834] Tainted: [L]=SOFTLOCKUP [ 532.851701][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 532.851712][T14834] Call Trace: [ 532.851719][T14834] [ 532.851733][T14834] dump_stack_lvl+0xe8/0x150 [ 532.851764][T14834] should_fail_ex+0x3eb/0x540 [ 532.851789][T14834] set_fd_set+0x3a/0xa0 [ 532.851808][T14834] core_sys_select+0x9c1/0xb40 [ 532.851837][T14834] ? __pfx_core_sys_select+0x10/0x10 [ 532.851875][T14834] ? __pfx_set_user_sigmask+0x10/0x10 [ 532.851900][T14834] ? lockdep_hardirqs_on+0x7b/0x110 [ 532.851918][T14834] ? ktime_get_ts64+0x45/0x300 [ 532.851942][T14834] ? ktime_get_ts64+0x28c/0x300 [ 532.851966][T14834] __se_sys_pselect6+0x267/0x320 [ 532.851990][T14834] ? __pfx___se_sys_pselect6+0x10/0x10 [ 532.852015][T14834] ? __x64_sys_pselect6+0x21/0xf0 [ 532.852037][T14834] do_syscall_64+0x166/0x520 [ 532.852056][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.852072][T14834] ? clear_bhb_loop+0x70/0xc0 [ 532.852092][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.852108][T14834] RIP: 0033:0x7efd3719f559 [ 532.852124][T14834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.852138][T14834] RSP: 002b:00007efd380ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 532.852155][T14834] RAX: ffffffffffffffda RBX: 00007efd37425fa0 RCX: 00007efd3719f559 [ 532.852167][T14834] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000020 [ 532.852178][T14834] RBP: 00007efd37236b20 R08: 0000200000000280 R09: 0000200000000300 [ 532.852189][T14834] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 532.852199][T14834] R13: 00007efd37426038 R14: 00007efd37425fa0 R15: 00007ffef145def8 [ 532.852226][T14834] [ 533.148903][T14811] loop1: detected capacity change from 0 to 32768 [ 533.328857][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 533.330630][T10174] usb 1-1: USB disconnect, device number 28 [ 533.361603][T10174] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 533.836461][T14844] evm: overlay not supported [ 534.281094][T14853] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3035'. [ 534.314829][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.619279][T14861] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 534.717731][T14864] loop2: detected capacity change from 0 to 2048 [ 534.778475][T14864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.778581][T14864] ext4 filesystem being mounted at /636/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.996049][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.489438][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3046'. [ 535.489473][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3046'. [ 535.761761][T10174] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 536.812047][T10174] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 536.843149][T10174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.859684][T10174] usb 3-1: config 0 descriptor?? [ 537.117754][T10174] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 537.422551][T10174] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 537.422571][T10174] [drm] Initialized udl on minor 1 [ 537.704466][T14909] loop6: detected capacity change from 0 to 512 [ 537.772055][T14909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.772164][T14909] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 538.375941][T14916] EXT4-fs error (device loop6): ext4_get_first_dir_block:3551: inode #12: comm syz.6.3058: directory missing '.' [ 538.711363][T13465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.292625][ T195] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 539.443189][ T195] usb 2-1: Using ep0 maxpacket: 8 [ 539.445324][ T195] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.468020][ T195] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 539.468080][ T195] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.468097][ T195] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.468115][ T195] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.468132][ T195] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.468164][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.777825][ T195] usb 2-1: usb_control_msg returned -32 [ 539.777878][ T195] usbtmc 2-1:16.0: can't read capabilities [ 540.131406][T14945] ublk1: read batch cmd buffer failed [ 540.131491][T14945] ublk1: read batch cmd buffer failed [ 540.138806][T14948] netlink: 3104 bytes leftover after parsing attributes in process `syz.7.3072'. [ 540.222448][T14945] ublk1: read batch cmd buffer failed [ 540.222557][T14945] ublk1: read batch cmd buffer failed [ 540.250391][ T195] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 540.407793][ T195] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 540.407958][ T5747] usb 2-1: USB disconnect, device number 29 [ 540.427273][ T195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.427298][ T195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.427316][ T195] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.427346][ T195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.482842][ T195] usb 7-1: config 0 descriptor?? [ 540.898835][T14957] loop7: detected capacity change from 0 to 1024 [ 540.926461][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926507][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926527][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926546][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926565][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926584][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926603][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926639][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926659][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 540.926677][ T195] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.045947][T14957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.142965][ T195] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 541.183095][ T195] usb 7-1: USB disconnect, device number 10 [ 541.499667][T14962] fido_id[14962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 541.572832][T12919] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.812618][T14966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.813094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.640320][T10174] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 542.640665][T10174] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 542.643703][ T195] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 542.686060][T10174] usb 3-1: USB disconnect, device number 27 [ 542.748096][ T195] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 542.748245][ T195] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 542.875633][T14992] loop7: detected capacity change from 0 to 16 [ 542.901173][T14992] erofs (device loop7): mounted with root inode @ nid 36. [ 543.375611][T14998] FAULT_INJECTION: forcing a failure. [ 543.375611][T14998] name failslab, interval 1, probability 0, space 0, times 0 [ 543.375638][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.6.3092 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.375662][T14998] Tainted: [L]=SOFTLOCKUP [ 543.375668][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 543.375679][T14998] Call Trace: [ 543.375685][T14998] [ 543.375692][T14998] dump_stack_lvl+0xe8/0x150 [ 543.375724][T14998] should_fail_ex+0x3eb/0x540 [ 543.375748][T14998] should_failslab+0xa8/0x100 [ 543.375776][T14998] __kmalloc_cache_noprof+0x9e/0x600 [ 543.375799][T14998] ? fuse_chan_new+0x4e/0x2f0 [ 543.375823][T14998] ? fuse_chan_new+0x4e/0x2f0 [ 543.375851][T14998] ? __pfx_cuse_channel_open+0x10/0x10 [ 543.375874][T14998] fuse_chan_new+0x4e/0x2f0 [ 543.375900][T14998] ? __pfx_cuse_channel_open+0x10/0x10 [ 543.375921][T14998] fuse_dev_chan_new+0x1c/0x4b0 [ 543.375952][T14998] ? __pfx_cuse_channel_open+0x10/0x10 [ 543.375975][T14998] cuse_channel_open+0x1f/0x7a0 [ 543.376002][T14998] ? __pfx_cuse_channel_open+0x10/0x10 [ 543.376034][T14998] misc_open+0x2d5/0x350 [ 543.376055][T14998] chrdev_open+0x4d9/0x600 [ 543.376074][T14998] ? __pfx_chrdev_open+0x10/0x10 [ 543.376091][T14998] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 543.376107][T14998] ? devcgroup_check_permission+0x31/0x8f0 [ 543.376130][T14998] ? __pfx_chrdev_open+0x10/0x10 [ 543.376146][T14998] do_dentry_open+0x80e/0x1360 [ 543.376173][T14998] vfs_open_consume+0x4a/0x350 [ 543.376189][T14998] ? path_openat+0x16e1/0x20f0 [ 543.376216][T14998] path_openat+0x16fc/0x20f0 [ 543.376255][T14998] do_file_open+0x23e/0x4a0 [ 543.376284][T14998] ? __pfx_do_file_open+0x10/0x10 [ 543.376326][T14998] ? _raw_spin_unlock+0x28/0x50 [ 543.376342][T14998] ? alloc_fd+0x6af/0x760 [ 543.376371][T14998] do_sys_openat2+0x115/0x200 [ 543.376390][T14998] ? __se_sys_futex+0x3a8/0x450 [ 543.376407][T14998] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.376430][T14998] ? rcu_is_watching+0x16/0xb0 [ 543.376460][T14998] __x64_sys_openat+0x138/0x170 [ 543.376483][T14998] do_syscall_64+0x166/0x520 [ 543.376501][T14998] ? trace_irq_disable+0x3b/0x140 [ 543.376523][T14998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.376539][T14998] ? clear_bhb_loop+0x70/0xc0 [ 543.376559][T14998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.376575][T14998] RIP: 0033:0x7f7a8279f559 [ 543.376591][T14998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.376605][T14998] RSP: 002b:00007f7a836ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.376622][T14998] RAX: ffffffffffffffda RBX: 00007f7a82a25fa0 RCX: 00007f7a8279f559 [ 543.376634][T14998] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 543.376645][T14998] RBP: 00007f7a82836b20 R08: 0000000000000000 R09: 0000000000000000 [ 543.376655][T14998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.376678][T14998] R13: 00007f7a82a26038 R14: 00007f7a82a25fa0 R15: 00007ffc3a85b618 [ 543.376703][T14998] [ 543.910707][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.110306][ T195] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 544.261373][ T195] usb 2-1: Using ep0 maxpacket: 16 [ 544.263330][ T195] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 544.266404][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 544.286385][ T195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.286404][ T195] usb 2-1: Product: syz [ 544.286415][ T195] usb 2-1: Manufacturer: syz [ 544.286426][ T195] usb 2-1: SerialNumber: syz [ 544.331189][ T195] usb 2-1: config 0 descriptor?? [ 544.358938][ T195] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 544.359025][ T195] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 544.977850][ T195] em28xx 2-1:0.0: chip ID is em2874 [ 546.135849][T15035] loop2: detected capacity change from 0 to 131072 [ 546.162898][T15035] F2FS-fs (loop2): invalid crc value [ 546.236560][T15035] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 546.250615][T15035] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 546.276470][ T195] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 546.276495][ T195] em28xx 2-1:0.0: board has no eeprom [ 546.380481][ T195] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.380563][ T195] em28xx 2-1:0.0: dvb set to bulk mode. [ 546.423305][ T5747] em28xx 2-1:0.0: Binding DVB extension [ 546.425631][ T195] usb 2-1: USB disconnect, device number 30 [ 546.426881][ T195] em28xx 2-1:0.0: Disconnecting em28xx [ 546.770404][ T5747] em28xx 2-1:0.0: Registering input extension [ 546.997715][T15047] loop1: detected capacity change from 0 to 256 [ 547.132998][T15047] overlay: ./file0 is not a directory [ 547.138063][ T5747] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 547.138078][ T5747] Registered IR keymap rc-empty [ 547.373816][ T5747] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 547.403393][ T5747] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 547.828536][ T5747] em28xx 2-1:0.0: Input extension successfully initialized [ 547.839647][ T195] em28xx 2-1:0.0: Closing input extension [ 548.436987][T15060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3117'. [ 548.458411][T15060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3117'. [ 548.948294][ T195] em28xx: Freeing device [ 549.560192][ T195] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 549.715656][ T195] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 549.729989][ T195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.748983][ T195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.749004][ T195] usb 1-1: Product: syz [ 549.749015][ T195] usb 1-1: Manufacturer: syz [ 549.749026][ T195] usb 1-1: SerialNumber: syz [ 549.968662][T15081] macsec1: entered allmulticast mode [ 549.968682][T15081] veth1_macvtap: entered allmulticast mode [ 549.987078][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3125'. [ 550.593534][T15083] veth1_macvtap (unregistering): left allmulticast mode [ 550.731321][T15088] FAULT_INJECTION: forcing a failure. [ 550.731321][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 550.731352][T15088] CPU: 0 UID: 0 PID: 15088 Comm: syz.2.3127 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.731375][T15088] Tainted: [L]=SOFTLOCKUP [ 550.731381][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.731391][T15088] Call Trace: [ 550.731398][T15088] [ 550.731405][T15088] dump_stack_lvl+0xe8/0x150 [ 550.731444][T15088] should_fail_ex+0x3eb/0x540 [ 550.731468][T15088] should_failslab+0xa8/0x100 [ 550.731494][T15088] ? mas_alloc_nodes+0x291/0x350 [ 550.731514][T15088] kmem_cache_alloc_noprof+0x9c/0x600 [ 550.731536][T15088] ? mas_alloc_nodes+0x291/0x350 [ 550.731561][T15088] mas_alloc_nodes+0x291/0x350 [ 550.731583][T15088] mas_preallocate+0x42a/0x840 [ 550.731603][T15088] ? rcu_is_watching+0x16/0xb0 [ 550.731629][T15088] ? trace_kmem_cache_alloc+0x29/0xe0 [ 550.731648][T15088] ? __pfx_mas_preallocate+0x10/0x10 [ 550.731679][T15088] ? __mas_set_range+0x11a/0x3a0 [ 550.731698][T15088] __split_vma+0x3f7/0xa40 [ 550.731727][T15088] ? __pfx___split_vma+0x10/0x10 [ 550.731754][T15088] ? __lock_acquire+0x747/0x2de0 [ 550.731783][T15088] vma_modify+0xa08/0x24f0 [ 550.731827][T15088] vma_modify_flags+0x2a4/0x3c0 [ 550.731853][T15088] ? __pfx_vma_modify_flags+0x10/0x10 [ 550.731888][T15088] ? __futex_wait+0x3c7/0x470 [ 550.731908][T15088] ? update_protect_slice+0x45/0x320 [ 550.731936][T15088] mlock_fixup+0x3c1/0xf70 [ 550.731970][T15088] ? __pfx_mlock_fixup+0x10/0x10 [ 550.731995][T15088] ? mas_find+0x6d6/0xcb0 [ 550.732019][T15088] apply_vma_lock_flags+0x350/0x4a0 [ 550.732048][T15088] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 550.732083][T15088] ? __pfx_down_write_killable+0x10/0x10 [ 550.732107][T15088] ? do_futex+0x3e7/0x4e0 [ 550.732146][T15088] do_mlock+0x54d/0x760 [ 550.732169][T15088] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.732195][T15088] ? __pfx_do_mlock+0x10/0x10 [ 550.732226][T15088] ? rcu_is_watching+0x16/0xb0 [ 550.732257][T15088] __x64_sys_mlock+0x77/0xa0 [ 550.732280][T15088] do_syscall_64+0x166/0x520 [ 550.732299][T15088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.732316][T15088] ? clear_bhb_loop+0x70/0xc0 [ 550.732337][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.732353][T15088] RIP: 0033:0x7efd3719f559 [ 550.732368][T15088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.732382][T15088] RSP: 002b:00007efd380ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 550.732399][T15088] RAX: ffffffffffffffda RBX: 00007efd37425fa0 RCX: 00007efd3719f559 [ 550.732411][T15088] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 550.732422][T15088] RBP: 00007efd37236b20 R08: 0000000000000000 R09: 0000000000000000 [ 550.732432][T15088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.732448][T15088] R13: 00007efd37426038 R14: 00007efd37425fa0 R15: 00007ffef145def8 [ 550.732475][T15088] [ 551.099777][ T195] cdc_ncm 1-1:1.0: failed to get mac address [ 551.136635][ T195] cdc_ncm 1-1:1.0: bind() failure [ 551.163844][ T195] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 551.176942][ T195] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 551.179914][ T195] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 551.216479][ T195] usb 1-1: USB disconnect, device number 29 [ 551.447334][T15084] loop7: detected capacity change from 0 to 32768 [ 551.466175][T15084] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3126 (15084) [ 551.509919][T15084] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 551.509947][T15084] BTRFS info (device loop7): using blake2b checksum algorithm [ 551.674838][T15084] BTRFS info (device loop7): enabling ssd optimizations [ 551.674874][T15084] BTRFS info (device loop7): turning on async discard [ 551.674887][T15084] BTRFS info (device loop7): enabling free space tree [ 551.674900][T15084] BTRFS info (device loop7): use zlib compression, level 3 [ 551.787390][ T33] audit: type=1800 audit(2000000378.220:126): pid=15084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3126" name="file1" dev="loop7" ino=260 res=0 errno=-22 [ 552.320411][ T195] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 552.475549][ T195] usb 7-1: New USB device found: idVendor=05c6, idProduct=1000, bcdDevice=0.00 [ 552.477848][ T195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.546544][ T195] usb-storage 7-1:1.0: USB Mass Storage device detected [ 552.735851][T15128] loop1: detected capacity change from 0 to 512 [ 552.753064][T15128] EXT4-fs: Ignoring removed bh option [ 552.839253][T15128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.870090][T15128] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.957127][T15128] EXT4-fs (loop1): shut down requested (2) [ 553.142741][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.480347][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 553.512507][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.513782][ T1879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.514309][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.514691][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.515728][T15140] loop2: detected capacity change from 0 to 512 [ 553.573156][T15140] EXT4-fs: Ignoring removed oldalloc option [ 553.573210][T15140] EXT4-fs: Ignoring removed i_version option [ 553.577889][T15140] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.655875][ T195] usb-storage 7-1:1.0: probe with driver usb-storage failed with error -5 [ 553.659732][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 553.693494][T15140] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 553.693514][T15140] loop2: lost filesystem error report for type 5 error -117 [ 553.705926][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 553.705945][ C0] EXT4-fs (loop2): initial error at time 2000000380: ext4_process_orphan:346 [ 553.705962][ C0] EXT4-fs (loop2): last error at time 2000000380: ext4_process_orphan:346 [ 553.743954][ T10] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 553.765627][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.765653][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.765682][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.819465][ T10] usb 1-1: config 0 descriptor?? [ 553.841240][T15140] EXT4-fs (loop2): 2 truncates cleaned up [ 553.848820][T15140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.912087][ T195] usb 7-1: USB disconnect, device number 11 [ 553.950254][T15140] EXT4-fs (loop2): shut down requested (1) [ 553.957444][T12919] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 554.155449][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.345759][ T10] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 554.577916][ T10] usb 1-1: USB disconnect, device number 30 [ 554.732469][T15147] fido_id[15147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 555.433119][T15160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.097946][T15151] loop6: detected capacity change from 0 to 40427 [ 556.156510][T15151] F2FS-fs (loop6): invalid crc value [ 556.495285][T15151] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 556.637064][T15151] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 556.637087][T15151] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 556.637106][T15151] F2FS-fs (loop6): Start checkpoint disabled! [ 556.854980][ T10] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 556.879975][T15151] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 556.895485][T15151] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 557.013235][ T10] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 557.018729][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 557.018756][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 557.018783][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.096710][T15151] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 558.366919][T15197] loop2: detected capacity change from 0 to 32768 [ 558.380458][ T10] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 558.418038][ T10] usb 8-1: USB disconnect, device number 4 [ 558.434727][T15197] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 558.434744][T15197] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 558.483358][T15197] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 558.569929][ T195] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 558.569947][ T195] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 558.632357][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.665800][T15201] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.741124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.741586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.992533][ T195] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 422ms [ 558.997327][ T195] gfs2: fsid=syz:syz.0: jid=0: Done [ 558.997362][T15197] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 559.021674][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3161'. [ 559.810719][ T5747] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 560.005506][ T5747] usb 8-1: unable to get BOS descriptor or descriptor too short [ 560.005545][ T5747] usb 8-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 560.030999][ T5747] usb 8-1: config 12 has an invalid interface number: 99 but max is 0 [ 560.031021][ T5747] usb 8-1: config 12 has no interface number 0 [ 560.031052][ T5747] usb 8-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 560.031072][ T5747] usb 8-1: config 12 interface 99 has no altsetting 0 [ 560.083968][ T5747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.083989][ T5747] usb 8-1: Product: syz [ 560.084000][ T5747] usb 8-1: Manufacturer: syz [ 560.084021][ T5747] usb 8-1: SerialNumber: syz [ 560.783045][ T5747] usb 8-1: no audio or video endpoints found [ 560.817138][ T5747] usb 8-1: USB disconnect, device number 5 [ 561.456099][T15233] loop1: detected capacity change from 0 to 512 [ 562.134494][ T33] audit: type=1326 audit(2000000388.570:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a8279f559 code=0x0 [ 562.193386][ T33] audit: type=1326 audit(2000000388.630:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8279f559 code=0x7ffc0000 [ 562.237129][ T33] audit: type=1326 audit(2000000388.670:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.237407][ T33] audit: type=1326 audit(2000000388.670:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8279f559 code=0x7ffc0000 [ 562.238428][ T33] audit: type=1326 audit(2000000388.670:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.298081][ T33] audit: type=1326 audit(2000000388.730:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.327825][ T33] audit: type=1326 audit(2000000388.760:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.357736][ T33] audit: type=1326 audit(2000000388.790:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.415465][ T33] audit: type=1326 audit(2000000388.850:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.450791][ T33] audit: type=1326 audit(2000000388.890:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.6.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a8275fd8e code=0x7ffc0000 [ 562.801538][T10174] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 562.952980][T10174] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 562.959450][T10174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.959488][T10174] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 562.959507][T10174] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 562.959523][T10174] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 562.959554][T10174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.044510][T15250] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.044596][T15250] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.067639][T10174] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 563.086320][T10174] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 563.086384][T10174] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 563.113109][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.113153][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.118436][T10174] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 563.150399][T10174] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 563.150464][T10174] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 563.158897][T10174] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 563.349815][T15254] rnbd_client L213: map_device: Parameters missing [ 563.734750][T15260] loop1: detected capacity change from 0 to 2048 [ 563.827617][T15260] loop1: p4 < > [ 563.923117][ T195] usb 3-1: USB disconnect, device number 28 [ 563.962840][ T195] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 564.013143][ T195] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 564.013796][ T195] keyspan 3-1:1.0: device disconnected [ 564.293697][T15260] syz.1.3187: attempt to access beyond end of device [ 564.293697][T15260] loop1p4: rw=2048, sector=2, nr_sectors = 1 limit=2 [ 564.293781][T15260] hfsplus: unable to find HFS+ superblock [ 564.662381][T15272] loop1: detected capacity change from 0 to 1024 [ 564.678618][T15272] EXT4-fs: Ignoring removed bh option [ 564.737727][T15272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.411087][ T5747] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 565.493650][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.569831][ T5747] usb 3-1: Using ep0 maxpacket: 8 [ 565.593952][ T5747] usb 3-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 565.624260][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.624282][ T5747] usb 3-1: Product: syz [ 565.624294][ T5747] usb 3-1: Manufacturer: syz [ 565.624305][ T5747] usb 3-1: SerialNumber: syz [ 565.658835][ T5747] usb 3-1: config 0 descriptor?? [ 565.896277][ T5747] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 566.198434][T15288] loop1: detected capacity change from 0 to 32768 [ 566.272457][T15288] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.337582][T15288] XFS (loop1): Ending clean mount [ 566.349585][T15288] XFS (loop1): Quotacheck needed: Please wait. [ 566.638672][ T5747] usb write operation failed. (-71) [ 566.660753][ T5747] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 566.661216][ T5747] dvbdev: DVB: registering new adapter (Terratec H7) [ 566.661251][ T5747] usb 3-1: media controller created [ 566.693087][ T5747] usb read operation failed. (-71) [ 566.698610][ T5747] usb write operation failed. (-71) [ 566.747134][T15288] XFS (loop1): Quotacheck: Done. [ 566.808141][ T5747] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 566.862715][ T5747] usb 3-1: USB disconnect, device number 29 [ 567.660635][ T195] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 567.814618][ T195] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 567.817146][ T195] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.817181][ T195] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x28, changing to 0x8 [ 567.817209][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 567.817228][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 59915, setting to 64 [ 567.817248][ T195] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.817277][ T195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.880262][ T195] usb 1-1: config 0 descriptor?? [ 567.880983][T15305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 568.106507][ T195] ath6kl: Failed to submit usb control message: -71 [ 568.106548][ T195] ath6kl: unable to send the bmi data to the device: -71 [ 568.106560][ T195] ath6kl: Unable to send get target info: -71 [ 568.146947][ T195] ath6kl: Failed to init ath6kl core: -71 [ 568.147432][ T195] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 568.201665][ T195] usb 1-1: USB disconnect, device number 31 [ 568.231434][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.368126][ T5635] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 568.886248][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 570.205134][T15332] loop2: detected capacity change from 0 to 131072 [ 570.205918][T15332] xfs: Deprecated parameter 'ikeep' [ 570.205931][T15332] XFS: ikeep mount option is deprecated. [ 570.208397][T10174] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 570.295325][T15332] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 570.390415][T10174] usb 8-1: Using ep0 maxpacket: 32 [ 570.395154][T10174] usb 8-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 570.397984][T10174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.409108][T10174] usb 8-1: config 0 descriptor?? [ 570.493914][T15332] XFS (loop2): Starting recovery (logdev: internal) [ 570.617360][T15332] XFS (loop2): Ending recovery (logdev: internal) [ 570.731417][T10174] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 570.753398][T10174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.779989][T10174] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 570.780113][T10174] usb 8-1: media controller created [ 570.880755][T10174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.047007][ T5639] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 571.331823][T15349] netlink: 'syz.0.3216': attribute type 16 has an invalid length. [ 571.331843][T15349] netlink: 'syz.0.3216': attribute type 17 has an invalid length. [ 571.394874][T15351] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 571.768983][T15349] erspan0: entered promiscuous mode [ 571.797946][T10174] az6027: usb out operation failed. (-71) [ 571.797961][T10174] stb0899_attach: Driver disabled by Kconfig [ 571.797969][T10174] az6027: no front-end attached [ 571.797969][T10174] [ 571.799400][T15349] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 571.839016][T10174] az6027: usb out operation failed. (-71) [ 571.839033][T10174] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 571.869752][T10174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input38 [ 571.902572][T10174] dvb-usb: schedule remote query interval to 400 msecs. [ 571.902589][T10174] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 571.934230][T10174] usb 8-1: USB disconnect, device number 6 [ 571.973046][T15324] loop6: detected capacity change from 0 to 32768 [ 571.987378][T15324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3210 (15324) [ 572.022253][T15324] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.028974][T15324] BTRFS info (device loop6): using sha256 checksum algorithm [ 572.206920][T15324] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 572.387690][T15324] BTRFS error (device loop6): open_ctree failed: -ENOMEM [ 572.537093][T10174] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 573.006687][T15380] FAULT_INJECTION: forcing a failure. [ 573.006687][T15380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.006718][T15380] CPU: 0 UID: 0 PID: 15380 Comm: syz.6.3223 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.006750][T15380] Tainted: [L]=SOFTLOCKUP [ 573.006759][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 573.006774][T15380] Call Trace: [ 573.006781][T15380] [ 573.006789][T15380] dump_stack_lvl+0xe8/0x150 [ 573.006821][T15380] should_fail_ex+0x3eb/0x540 [ 573.006852][T15380] _copy_from_user+0x2d/0xb0 [ 573.006873][T15380] __sys_bpf+0x2e7/0xe00 [ 573.006896][T15380] ? __pfx___sys_bpf+0x10/0x10 [ 573.006915][T15380] ? do_futex+0x3e7/0x4e0 [ 573.006955][T15380] ? rcu_is_watching+0x16/0xb0 [ 573.006985][T15380] __x64_sys_bpf+0xba/0xd0 [ 573.007012][T15380] do_syscall_64+0x166/0x520 [ 573.007030][T15380] ? trace_irq_disable+0x3b/0x140 [ 573.007053][T15380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.007069][T15380] ? clear_bhb_loop+0x70/0xc0 [ 573.007089][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.007105][T15380] RIP: 0033:0x7f7a8279f559 [ 573.007121][T15380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.007134][T15380] RSP: 002b:00007f7a836ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.007152][T15380] RAX: ffffffffffffffda RBX: 00007f7a82a25fa0 RCX: 00007f7a8279f559 [ 573.007164][T15380] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 573.007174][T15380] RBP: 00007f7a82836b20 R08: 0000000000000000 R09: 0000000000000000 [ 573.007185][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.007195][T15380] R13: 00007f7a82a26038 R14: 00007f7a82a25fa0 R15: 00007ffc3a85b618 [ 573.007221][T15380] [ 573.954219][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'. [ 574.790443][ T10] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 574.950872][ T10] usb 3-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 574.977081][ T10] usb 3-1: string descriptor 0 read error: -22 [ 574.977183][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.032584][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.032624][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 575.384715][ T10] usb 3-1: USB disconnect, device number 30 [ 576.656052][T15449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.013119][T15453] syz_tun: entered allmulticast mode [ 577.082768][T15453] pimreg: entered allmulticast mode [ 577.142761][T15452] syz_tun: left allmulticast mode [ 577.142867][T15452] pimreg: left allmulticast mode [ 577.833752][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.186789][T15466] loop6: detected capacity change from 0 to 1024 [ 579.254127][T15466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.646563][T15474] loop2: detected capacity change from 0 to 1024 [ 580.773229][T15474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 580.784329][T15474] ext4 filesystem being mounted at /675/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.993264][T13465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.102760][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 582.614107][T15482] loop2: detected capacity change from 0 to 32768 [ 582.615620][T15480] loop6: detected capacity change from 0 to 32768 [ 582.703378][ T33] kauditd_printk_skb: 152 callbacks suppressed [ 582.703394][ T33] audit: type=1800 audit(2000000409.140:289): pid=15480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3260" name="file1" dev="loop6" ino=4 res=0 errno=-22 [ 582.969979][ T90] read_mapping_page failed! [ 582.970002][ T90] ERROR: (device loop6): txCommit: [ 582.970002][ T90] [ 583.039418][ T90] ERROR: (device loop6): remounting filesystem as read-only [ 583.039451][ T90] jfs_write_inode: jfs_commit_inode failed! [ 583.317510][ T90] read_mapping_page failed! [ 583.317525][ T90] ERROR: (device loop6): txCommit: [ 583.317525][ T90] [ 583.317550][ T90] ERROR: (device loop6): remounting filesystem as read-only [ 583.317560][ T90] jfs_write_inode: jfs_commit_inode failed! [ 583.449169][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'. [ 583.649408][T15491] ip_tables: iptables: counters copy to user failed while replacing table [ 583.938701][T15489] team0: Port device team_slave_0 removed [ 584.316711][T15499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.575966][T15484] loop7: detected capacity change from 0 to 32768 [ 585.542810][T15519] FAULT_INJECTION: forcing a failure. [ 585.542810][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 585.542838][T15519] CPU: 0 UID: 0 PID: 15519 Comm: syz.0.3275 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.542860][T15519] Tainted: [L]=SOFTLOCKUP [ 585.542867][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 585.542877][T15519] Call Trace: [ 585.542884][T15519] [ 585.542891][T15519] dump_stack_lvl+0xe8/0x150 [ 585.542922][T15519] should_fail_ex+0x3eb/0x540 [ 585.542945][T15519] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 585.542961][T15519] should_failslab+0xa8/0x100 [ 585.542988][T15519] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 585.543002][T15519] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 585.543024][T15519] ? shmem_alloc_inode+0x28/0x40 [ 585.543038][T15519] ? shmem_alloc_inode+0x28/0x40 [ 585.543053][T15519] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.543072][T15519] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 585.543086][T15519] shmem_alloc_inode+0x28/0x40 [ 585.543101][T15519] alloc_inode+0x6a/0x1b0 [ 585.543122][T15519] new_inode+0x1f/0x170 [ 585.543164][T15519] shmem_get_inode+0x3a4/0x1030 [ 585.543207][T15519] ? __pfx_shmem_get_inode+0x10/0x10 [ 585.543231][T15519] ? from_kgid+0x1c6/0x660 [ 585.543253][T15519] ? make_vfsuid+0x49/0xa0 [ 585.543271][T15519] ? generic_permission+0x2ba/0x660 [ 585.543295][T15519] shmem_mknod+0x17d/0x340 [ 585.543327][T15519] shmem_mkdir+0x33/0x70 [ 585.543345][T15519] vfs_mkdir+0x40e/0x630 [ 585.543366][T15519] filename_mkdirat+0x285/0x510 [ 585.543381][T15519] ? __might_fault+0xaf/0x130 [ 585.543402][T15519] ? __pfx_filename_mkdirat+0x10/0x10 [ 585.543421][T15519] ? do_getname+0x151/0x250 [ 585.543442][T15519] __se_sys_mkdirat+0x35/0x150 [ 585.543461][T15519] do_syscall_64+0x166/0x520 [ 585.543480][T15519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.543497][T15519] ? clear_bhb_loop+0x70/0xc0 [ 585.543517][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.543533][T15519] RIP: 0033:0x7f2b1f19f559 [ 585.543548][T15519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.543570][T15519] RSP: 002b:00007f2b200a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 585.543588][T15519] RAX: ffffffffffffffda RBX: 00007f2b1f425fa0 RCX: 00007f2b1f19f559 [ 585.543600][T15519] RDX: 0000000000000137 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 585.543611][T15519] RBP: 00007f2b1f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 585.543621][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.543631][T15519] R13: 00007f2b1f426038 R14: 00007f2b1f425fa0 R15: 00007fffc27fb3f8 [ 585.543658][T15519] [ 586.289305][T12885] IPVS: starting estimator thread 0... [ 586.583897][T15532] loop2: detected capacity change from 0 to 32768 [ 586.641809][T15532] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 586.641826][T15532] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 586.715893][T15532] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 586.725682][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 586.725698][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 586.770128][T15533] IPVS: using max 38 ests per chain, 91200 per kthread [ 587.172651][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 446ms [ 587.188324][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 587.188362][T15532] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 587.448252][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.904283][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3283'. [ 589.833152][T15568] loop7: detected capacity change from 0 to 131072 [ 589.851492][T15568] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0) [ 589.851515][T15568] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 589.852602][T15568] F2FS-fs (loop7): invalid crc value [ 589.933672][T15568] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 589.960376][T15568] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 589.960400][T15568] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 590.109967][T15568] F2FS-fs (loop7): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 590.122277][T15568] F2FS-fs (loop7): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 591.871765][T15588] trusted_key: syz.2.3302 sent an empty control message without MSG_MORE. [ 592.120267][T15594] FAULT_INJECTION: forcing a failure. [ 592.120267][T15594] name failslab, interval 1, probability 0, space 0, times 0 [ 592.120298][T15594] CPU: 0 UID: 0 PID: 15594 Comm: syz.0.3304 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.120320][T15594] Tainted: [L]=SOFTLOCKUP [ 592.120326][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 592.120338][T15594] Call Trace: [ 592.120344][T15594] [ 592.120352][T15594] dump_stack_lvl+0xe8/0x150 [ 592.120385][T15594] should_fail_ex+0x3eb/0x540 [ 592.120417][T15594] should_failslab+0xa8/0x100 [ 592.120446][T15594] __kvmalloc_node_noprof+0x171/0x820 [ 592.120472][T15594] ? __se_sys_setgroups+0xf2/0x4d0 [ 592.120491][T15594] ? __se_sys_setgroups+0xf2/0x4d0 [ 592.120515][T15594] __se_sys_setgroups+0xf2/0x4d0 [ 592.120542][T15594] do_syscall_64+0x166/0x520 [ 592.120561][T15594] ? trace_irq_disable+0x3b/0x140 [ 592.120584][T15594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.120600][T15594] ? clear_bhb_loop+0x70/0xc0 [ 592.120620][T15594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.120636][T15594] RIP: 0033:0x7f2b1f19f559 [ 592.120652][T15594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.120666][T15594] RSP: 002b:00007f2b200a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 592.120684][T15594] RAX: ffffffffffffffda RBX: 00007f2b1f425fa0 RCX: 00007f2b1f19f559 [ 592.120696][T15594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.120705][T15594] RBP: 00007f2b1f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 592.120716][T15594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.120725][T15594] R13: 00007f2b1f426038 R14: 00007f2b1f425fa0 R15: 00007fffc27fb3f8 [ 592.120751][T15594] [ 592.630471][T15600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 594.423424][T15621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 594.712422][T15634] GUP no longer grows the stack in syz.7.3320 (15634): 200000004000-200000005000 (200000002000) [ 594.712455][T15634] CPU: 0 UID: 0 PID: 15634 Comm: syz.7.3320 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.712480][T15634] Tainted: [L]=SOFTLOCKUP [ 594.712486][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 594.712497][T15634] Call Trace: [ 594.712504][T15634] [ 594.712511][T15634] dump_stack_lvl+0xe8/0x150 [ 594.712543][T15634] __get_user_pages+0x23b1/0x2750 [ 594.712593][T15634] get_user_pages_remote+0x305/0xb90 [ 594.712617][T15634] ? __pfx_mtree_load+0x10/0x10 [ 594.712645][T15634] ? __pfx_get_user_pages_remote+0x10/0x10 [ 594.712667][T15634] ? __access_remote_vm+0xa3/0x6f0 [ 594.712684][T15634] ? __access_remote_vm+0x42c/0x6f0 [ 594.712705][T15634] __access_remote_vm+0x222/0x6f0 [ 594.712730][T15634] ? __pfx___access_remote_vm+0x10/0x10 [ 594.712746][T15634] ? __kmalloc_cache_noprof+0x148/0x600 [ 594.712766][T15634] ? proc_pid_cmdline_read+0x41c/0x900 [ 594.712791][T15634] ? proc_pid_cmdline_read+0x41c/0x900 [ 594.712821][T15634] proc_pid_cmdline_read+0x46b/0x900 [ 594.712845][T15634] ? __asan_memset+0x22/0x50 [ 594.712872][T15634] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 594.712900][T15634] ? rw_verify_area+0x24a/0x4c0 [ 594.712926][T15634] vfs_readv+0x57b/0x840 [ 594.712945][T15634] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 594.712974][T15634] ? __pfx_vfs_readv+0x10/0x10 [ 594.713008][T15634] ? __fget_files+0x3a2/0x420 [ 594.713028][T15634] ? __fget_files+0x2a/0x420 [ 594.713052][T15634] ? fdget+0x1ac/0x250 [ 594.713075][T15634] __x64_sys_preadv+0x19c/0x2b0 [ 594.713102][T15634] ? __pfx___x64_sys_preadv+0x10/0x10 [ 594.713137][T15634] do_syscall_64+0x166/0x520 [ 594.713155][T15634] ? trace_irq_disable+0x3b/0x140 [ 594.713178][T15634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.713194][T15634] ? clear_bhb_loop+0x70/0xc0 [ 594.713214][T15634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.713230][T15634] RIP: 0033:0x7fd7ed99f559 [ 594.713246][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.713260][T15634] RSP: 002b:00007fd7ee883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 594.713278][T15634] RAX: ffffffffffffffda RBX: 00007fd7edc25fa0 RCX: 00007fd7ed99f559 [ 594.713290][T15634] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 594.713300][T15634] RBP: 00007fd7eda36b20 R08: 00000000fffffff9 R09: 0000000000000000 [ 594.713311][T15634] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 594.713320][T15634] R13: 00007fd7edc26038 R14: 00007fd7edc25fa0 R15: 00007ffe5508ceb8 [ 594.713347][T15634] [ 595.043767][T15629] loop1: detected capacity change from 0 to 4096 [ 595.163645][T15629] ntfs3(loop1): ino=9, mi_enum_attr [ 595.163682][T15629] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 595.167376][T15629] ntfs3(loop1): ino=9, mi_enum_attr [ 595.167470][T15629] ntfs3(loop1): ino=b, mi_enum_attr [ 595.167528][T15629] ntfs3(loop1): Failed to load $Extend (-22). [ 595.167541][T15629] ntfs3(loop1): Failed to initialize $Extend. [ 595.708926][T15624] loop6: detected capacity change from 0 to 32768 [ 595.733666][T15624] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3317 (15624) [ 595.808786][T15624] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 595.808812][T15624] BTRFS info (device loop6): using blake2b checksum algorithm [ 595.980751][T15624] BTRFS info (device loop6): enabling ssd optimizations [ 595.980773][T15624] BTRFS info (device loop6): turning on async discard [ 595.980785][T15624] BTRFS info (device loop6): enabling free space tree [ 595.980800][T15624] BTRFS info (device loop6): use zstd compression, level 3 [ 596.447429][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 596.627967][T13465] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 597.030504][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.929719][ T195] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 598.081557][ T195] usb 3-1: Using ep0 maxpacket: 8 [ 598.083701][ T195] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 598.085632][ T195] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 598.085681][ T195] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.085698][ T195] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.085717][ T195] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.085735][ T195] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.085765][ T195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.329731][ T195] usb 3-1: usb_control_msg returned -32 [ 598.329768][ T195] usbtmc 3-1:16.0: can't read capabilities [ 598.747514][T15692] usbtmc 3-1:16.0: control status returned 0 [ 598.811896][T15694] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.958727][T10174] usb 3-1: USB disconnect, device number 31 [ 599.810902][T15698] loop1: detected capacity change from 0 to 131072 [ 599.811646][T15698] xfs: Deprecated parameter 'ikeep' [ 599.811661][T15698] XFS: ikeep mount option is deprecated. [ 599.880625][T15698] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 600.001932][T15698] XFS (loop1): Starting recovery (logdev: internal) [ 600.109917][T15698] XFS (loop1): Ending recovery (logdev: internal) [ 601.808168][ T5635] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 601.906094][T15722] ref_ctr_offset mismatch. inode: 0x398 offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 603.221997][T15750] FAULT_INJECTION: forcing a failure. [ 603.221997][T15750] name failslab, interval 1, probability 0, space 0, times 0 [ 603.222025][T15750] CPU: 0 UID: 0 PID: 15750 Comm: syz.2.3357 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.222047][T15750] Tainted: [L]=SOFTLOCKUP [ 603.222053][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 603.222063][T15750] Call Trace: [ 603.222070][T15750] [ 603.222077][T15750] dump_stack_lvl+0xe8/0x150 [ 603.222109][T15750] should_fail_ex+0x3eb/0x540 [ 603.222132][T15750] should_failslab+0xa8/0x100 [ 603.222160][T15750] __kmalloc_cache_noprof+0x9e/0x600 [ 603.222182][T15750] ? watch_queue_init+0x53/0x150 [ 603.222208][T15750] ? watch_queue_init+0x53/0x150 [ 603.222237][T15750] watch_queue_init+0x53/0x150 [ 603.222263][T15750] create_pipe_files+0x2a8/0x7a0 [ 603.222284][T15750] __do_pipe_flags+0x46/0x1f0 [ 603.222301][T15750] do_pipe2+0xaa/0x190 [ 603.222320][T15750] ? __pfx_do_pipe2+0x10/0x10 [ 603.222338][T15750] ? rcu_is_watching+0x16/0xb0 [ 603.222371][T15750] __x64_sys_pipe2+0x5a/0x70 [ 603.222387][T15750] do_syscall_64+0x166/0x520 [ 603.222405][T15750] ? trace_irq_disable+0x3b/0x140 [ 603.222427][T15750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.222443][T15750] ? clear_bhb_loop+0x70/0xc0 [ 603.222463][T15750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.222479][T15750] RIP: 0033:0x7efd3719f559 [ 603.222494][T15750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.222507][T15750] RSP: 002b:00007efd380ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 603.222524][T15750] RAX: ffffffffffffffda RBX: 00007efd37425fa0 RCX: 00007efd3719f559 [ 603.222536][T15750] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 603.222546][T15750] RBP: 00007efd37236b20 R08: 0000000000000000 R09: 0000000000000000 [ 603.222556][T15750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.222565][T15750] R13: 00007efd37426038 R14: 00007efd37425fa0 R15: 00007ffef145def8 [ 603.222591][T15750] [ 603.911921][ T5756] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 604.080261][ T5756] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 604.096185][ T5756] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 604.096206][ T5756] usb 8-1: config 1 has no interface number 0 [ 604.124023][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.124046][ T5756] usb 8-1: Product: syz [ 604.124058][ T5756] usb 8-1: Manufacturer: syz [ 604.124069][ T5756] usb 8-1: SerialNumber: syz [ 604.203742][ T5756] usb 8-1: 3:1 : does not exist [ 604.203762][ T5756] usb 8-1: 3:2 : does not exist [ 604.372117][T15760] netlink: 71 bytes leftover after parsing attributes in process `syz.6.3361'. [ 604.777788][T15767] loop6: detected capacity change from 0 to 2048 [ 604.801700][T15769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.802048][T15769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.842582][T15767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.887364][ T33] audit: type=1800 audit(2000000431.320:290): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3364" name="file1" dev="loop6" ino=1346 res=0 errno=-22 [ 605.195023][ T5756] usb 8-1: USB disconnect, device number 7 [ 606.027945][T15784] jffs2: notice: (15784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 606.049082][T15781] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3370'. [ 606.564477][T15790] loop1: detected capacity change from 0 to 256 [ 606.567296][T15788] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3374'. [ 606.567332][T15788] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3374'. [ 606.630845][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.656747][T15790] exFAT-fs (loop1): error, no upcase table entry. Please run fsck [ 606.656765][T15790] exFAT-fs (loop1): Filesystem has been set read-only [ 606.676712][T15790] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 606.821390][T15794] jffs2: notice: (15794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 607.207104][T15804] loop6: detected capacity change from 0 to 64 [ 608.547288][T15824] jffs2: notice: (15824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 608.821493][ T5748] kernel read not supported for file /kmsg (pid: 5748 comm: kworker/0:4) [ 608.986509][T15835] loop6: detected capacity change from 0 to 2048 [ 609.044711][T15835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.174384][T15835] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 609.340191][T15842] FAULT_INJECTION: forcing a failure. [ 609.340191][T15842] name failslab, interval 1, probability 0, space 0, times 0 [ 609.340219][T15842] CPU: 0 UID: 0 PID: 15842 Comm: syz.1.3391 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.340242][T15842] Tainted: [L]=SOFTLOCKUP [ 609.340249][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 609.340259][T15842] Call Trace: [ 609.340266][T15842] [ 609.340273][T15842] dump_stack_lvl+0xe8/0x150 [ 609.340305][T15842] should_fail_ex+0x3eb/0x540 [ 609.340329][T15842] should_failslab+0xa8/0x100 [ 609.340355][T15842] ? prepare_creds+0x30/0x820 [ 609.340376][T15842] kmem_cache_alloc_noprof+0x9c/0x600 [ 609.340411][T15842] ? prepare_creds+0x30/0x820 [ 609.340436][T15842] prepare_creds+0x30/0x820 [ 609.340460][T15842] lookup_user_key+0x3d7/0x1230 [ 609.340489][T15842] ? __pfx_lookup_user_key+0x10/0x10 [ 609.340515][T15842] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 609.340545][T15842] ? futex_wait+0x2a2/0x390 [ 609.340567][T15842] ? __pfx_futex_wait+0x10/0x10 [ 609.340591][T15842] keyctl_session_to_parent+0x28/0xa20 [ 609.340618][T15842] __se_sys_keyctl+0x822/0xbc0 [ 609.340641][T15842] ? __pfx___se_sys_keyctl+0x10/0x10 [ 609.340665][T15842] ? __pfx_do_futex+0x10/0x10 [ 609.340686][T15842] ? __fget_files+0x3a2/0x420 [ 609.340707][T15842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 609.340752][T15842] ? __se_sys_futex+0x3a8/0x450 [ 609.340775][T15842] ? rcu_is_watching+0x16/0xb0 [ 609.340806][T15842] ? __x64_sys_keyctl+0x20/0xc0 [ 609.340830][T15842] do_syscall_64+0x166/0x520 [ 609.340848][T15842] ? trace_irq_disable+0x3b/0x140 [ 609.340871][T15842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.340887][T15842] ? clear_bhb_loop+0x70/0xc0 [ 609.340907][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.340923][T15842] RIP: 0033:0x7f96e819f559 [ 609.340938][T15842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.340952][T15842] RSP: 002b:00007f96e8ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 609.340974][T15842] RAX: ffffffffffffffda RBX: 00007f96e8425fa0 RCX: 00007f96e819f559 [ 609.340985][T15842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 609.340995][T15842] RBP: 00007f96e8236b20 R08: 0000000000000000 R09: 0000000000000000 [ 609.341005][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.341015][T15842] R13: 00007f96e8426038 R14: 00007f96e8425fa0 R15: 00007ffed9a860f8 [ 609.341040][T15842] [ 609.493100][T13465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.118478][T15852] loop7: detected capacity change from 0 to 64 [ 610.165942][T15851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.166138][T15851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.166329][T15851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.217411][T15850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.217539][T15850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.275727][ T33] audit: type=1800 audit(2000000436.710:291): pid=15852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3397" name="bus" dev="loop7" ino=21 res=0 errno=-22 [ 610.318344][ T33] audit: type=1800 audit(2000000436.750:292): pid=15852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3397" name="bus" dev="loop7" ino=21 res=0 errno=-22 [ 610.369494][T15845] loop2: detected capacity change from 0 to 4096 [ 610.482813][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3396'. [ 610.482942][T15856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.578600][T15845] ntfs3(loop2): Failed to load $Extend (-22). [ 610.578624][T15845] ntfs3(loop2): Failed to initialize $Extend. [ 610.610009][T15856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.308778][T15867] FAULT_INJECTION: forcing a failure. [ 611.308778][T15867] name failslab, interval 1, probability 0, space 0, times 0 [ 611.308807][T15867] CPU: 0 UID: 0 PID: 15867 Comm: syz.7.3403 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.308830][T15867] Tainted: [L]=SOFTLOCKUP [ 611.308836][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 611.308846][T15867] Call Trace: [ 611.308853][T15867] [ 611.308860][T15867] dump_stack_lvl+0xe8/0x150 [ 611.308892][T15867] should_fail_ex+0x3eb/0x540 [ 611.308914][T15867] ? __alloc_skb+0x1db/0x7a0 [ 611.308940][T15867] should_failslab+0xa8/0x100 [ 611.308967][T15867] ? __alloc_skb+0x1db/0x7a0 [ 611.308990][T15867] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 611.309019][T15867] ? __alloc_skb+0x18d/0x7a0 [ 611.309044][T15867] ? __alloc_skb+0x1db/0x7a0 [ 611.309075][T15867] __alloc_skb+0x1db/0x7a0 [ 611.309103][T15867] do_mq_notify+0x16f/0xef0 [ 611.309131][T15867] ? __pfx_do_mq_notify+0x10/0x10 [ 611.309152][T15867] ? __might_fault+0xaf/0x130 [ 611.309174][T15867] __x64_sys_mq_notify+0x134/0x190 [ 611.309196][T15867] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 611.309230][T15867] do_syscall_64+0x166/0x520 [ 611.309248][T15867] ? trace_irq_disable+0x3b/0x140 [ 611.309271][T15867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.309288][T15867] ? clear_bhb_loop+0x70/0xc0 [ 611.309308][T15867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.309325][T15867] RIP: 0033:0x7fd7ed99f559 [ 611.309340][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.309354][T15867] RSP: 002b:00007fd7ee883028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 611.309371][T15867] RAX: ffffffffffffffda RBX: 00007fd7edc25fa0 RCX: 00007fd7ed99f559 [ 611.309383][T15867] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 611.309394][T15867] RBP: 00007fd7eda36b20 R08: 0000000000000000 R09: 0000000000000000 [ 611.309405][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.309414][T15867] R13: 00007fd7edc26038 R14: 00007fd7edc25fa0 R15: 00007ffe5508ceb8 [ 611.309440][T15867] [ 611.744059][T15871] FAULT_INJECTION: forcing a failure. [ 611.744059][T15871] name failslab, interval 1, probability 0, space 0, times 0 [ 611.744087][T15871] CPU: 0 UID: 0 PID: 15871 Comm: syz.6.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.744110][T15871] Tainted: [L]=SOFTLOCKUP [ 611.744116][T15871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 611.744127][T15871] Call Trace: [ 611.744133][T15871] [ 611.744140][T15871] dump_stack_lvl+0xe8/0x150 [ 611.744173][T15871] should_fail_ex+0x3eb/0x540 [ 611.744196][T15871] should_failslab+0xa8/0x100 [ 611.744224][T15871] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 611.744247][T15871] ? kasprintf+0xe2/0x140 [ 611.744266][T15871] ? kasprintf+0xe2/0x140 [ 611.744290][T15871] kvasprintf+0xeb/0x1a0 [ 611.744312][T15871] ? __pfx_kvasprintf+0x10/0x10 [ 611.744334][T15871] ? hook_capable+0x1c3/0x5e0 [ 611.744356][T15871] kasprintf+0xe2/0x140 [ 611.744380][T15871] ? __pfx_kasprintf+0x10/0x10 [ 611.744411][T15871] drm_debugfs_clients_add+0x4e/0x1a0 [ 611.744437][T15871] drm_file_alloc+0x564/0x9c0 [ 611.744459][T15871] drm_open_helper+0x1bf/0x470 [ 611.744479][T15871] drm_open+0x1c8/0x340 [ 611.744494][T15871] ? __pfx_drm_open+0x10/0x10 [ 611.744512][T15871] drm_stub_open+0x207/0x250 [ 611.744534][T15871] chrdev_open+0x4d9/0x600 [ 611.744562][T15871] ? __pfx_chrdev_open+0x10/0x10 [ 611.744578][T15871] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 611.744594][T15871] ? devcgroup_check_permission+0x31/0x8f0 [ 611.744617][T15871] ? __pfx_chrdev_open+0x10/0x10 [ 611.744633][T15871] do_dentry_open+0x80e/0x1360 [ 611.744660][T15871] vfs_open_consume+0x4a/0x350 [ 611.744677][T15871] ? path_openat+0x16e1/0x20f0 [ 611.744704][T15871] path_openat+0x16fc/0x20f0 [ 611.744743][T15871] do_file_open+0x23e/0x4a0 [ 611.744772][T15871] ? __pfx_do_file_open+0x10/0x10 [ 611.744813][T15871] ? _raw_spin_unlock+0x28/0x50 [ 611.744829][T15871] ? alloc_fd+0x6af/0x760 [ 611.744870][T15871] do_sys_openat2+0x115/0x200 [ 611.744890][T15871] ? __pfx_do_sys_openat2+0x10/0x10 [ 611.744913][T15871] ? do_user_addr_fault+0xd3f/0x1480 [ 611.744936][T15871] __x64_sys_openat+0x138/0x170 [ 611.744958][T15871] do_syscall_64+0x166/0x520 [ 611.744976][T15871] ? trace_irq_disable+0x3b/0x140 [ 611.744998][T15871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.745014][T15871] ? clear_bhb_loop+0x70/0xc0 [ 611.745033][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.745048][T15871] RIP: 0033:0x7f7a8275fd8e [ 611.745063][T15871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 611.745077][T15871] RSP: 002b:00007f7a836ebb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.745094][T15871] RAX: ffffffffffffffda RBX: 00007f7a836ec6c0 RCX: 00007f7a8275fd8e [ 611.745105][T15871] RDX: 0000000000000000 RSI: 00007f7a836ebc00 RDI: ffffffffffffff9c [ 611.745116][T15871] RBP: 00007f7a836ebc00 R08: 0000000000000000 R09: 0000000000000000 [ 611.745125][T15871] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 611.745136][T15871] R13: 00007f7a82a26038 R14: 00007f7a82a25fa0 R15: 00007ffc3a85b618 [ 611.745161][T15871] [ 612.207652][T15876] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[12919] was attempted by ""[15876] [ 612.405608][T15879] loop6: detected capacity change from 0 to 512 [ 612.455903][T15879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.455989][T15879] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.694350][T13465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.467927][T15909] input: syz0 as /devices/virtual/input/input39 [ 614.487177][T15908] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 614.487208][T15908] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 614.487239][T15908] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 615.587292][T15910] nvme nvme0: rdma_resolve_addr failed (-99). [ 615.716118][T15925] loop7: detected capacity change from 0 to 1024 [ 615.800751][T15925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 615.800839][T15925] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.135378][T15931] EXT4-fs error (device loop7): ext4_free_blocks:6717: comm syz.7.3426: Freeing blocks not in datazone - block = 0, count = 16 [ 616.230514][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.332636][T12885] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 616.392563][ T5643] Bluetooth: hci1: command 0x0405 tx timeout [ 616.424926][T12885] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 616.424954][T12885] EXT4-fs (loop7): This should not happen!! Data will be lost [ 616.424954][T12885] [ 616.424965][T12885] EXT4-fs (loop7): Total free blocks count 0 [ 616.424976][T12885] EXT4-fs (loop7): Free/Dirty block details [ 616.424986][T12885] EXT4-fs (loop7): free_blocks=16 [ 616.424996][T12885] EXT4-fs (loop7): dirty_blocks=80 [ 616.425006][T12885] EXT4-fs (loop7): Block reservation details [ 616.425015][T12885] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 616.429251][T12885] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 320 with max blocks 64 with error 28 [ 616.515491][T12919] EXT4-fs warning (device loop7): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 617.517523][T15956] loop0: detected capacity change from 0 to 512 [ 618.065866][T15963] veth0: entered promiscuous mode [ 618.119001][T15962] veth0: left promiscuous mode [ 618.134808][T15965] loop0: detected capacity change from 0 to 512 [ 618.153320][T15965] EXT4-fs: Ignoring removed nobh option [ 618.237310][T15965] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 618.237333][T15965] loop0: lost filesystem error report for type 5 error -12 [ 618.240108][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 618.240128][ C0] EXT4-fs (loop0): initial error at time 2000000444: ext4_process_orphan:346 [ 618.240146][ C0] EXT4-fs (loop0): last error at time 2000000444: ext4_process_orphan:346 [ 618.359962][T15965] EXT4-fs (loop0): 2 truncates cleaned up [ 618.373709][T15965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.434969][ T33] audit: type=1800 audit(2000000444.870:293): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3441" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 618.482566][ T33] audit: type=1800 audit(2000000444.920:294): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3441" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 618.847855][T15965] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.3441: bg 0: block 5: invalid block bitmap [ 619.049020][T15965] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 619.049047][T15965] EXT4-fs (loop0): This should not happen!! Data will be lost [ 619.049047][T15965] [ 619.049059][T15965] EXT4-fs (loop0): Total free blocks count 0 [ 619.049069][T15965] EXT4-fs (loop0): Free/Dirty block details [ 619.049080][T15965] EXT4-fs (loop0): free_blocks=0 [ 619.049090][T15965] EXT4-fs (loop0): dirty_blocks=485 [ 619.049100][T15965] EXT4-fs (loop0): Block reservation details [ 619.049110][T15965] EXT4-fs (loop0): i_reserved_data_blocks=485 [ 619.252838][T15971] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 619.832566][T15989] loop7: detected capacity change from 0 to 256 [ 619.882540][T15989] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 619.962695][T15989] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3451'. [ 619.962723][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3451'. [ 620.015682][T15986] loop1: detected capacity change from 0 to 4096 [ 620.032952][T15986] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 620.045178][T15991] loop2: detected capacity change from 0 to 128 [ 620.186305][T15986] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 620.596362][T15991] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 620.634754][T15991] ext4 filesystem being mounted at /718/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.698270][T16001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 620.729563][T16002] loop1: detected capacity change from 0 to 512 [ 621.171875][ T5639] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 622.263691][T16029] loop1: detected capacity change from 0 to 64 [ 622.368947][T16027] loop0: detected capacity change from 0 to 4096 [ 622.383827][ T33] audit: type=1800 audit(2000000448.820:295): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3467" name="file1" dev="loop1" ino=21 res=0 errno=-22 [ 622.662327][T16027] ntfs3(loop0): Failed to load $Extend (-22). [ 622.662347][T16027] ntfs3(loop0): Failed to initialize $Extend. [ 623.175127][T16021] loop6: detected capacity change from 0 to 40427 [ 623.234328][T16021] F2FS-fs (loop6): invalid crc value [ 623.495875][T16044] nvmet: adding nsid 1 to subsystem testsubsys [ 623.561340][T16046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.648714][T16021] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 623.768375][T16021] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 623.768399][T16021] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 623.802406][T16021] F2FS-fs (loop6): Start checkpoint disabled! [ 624.031413][T16021] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 624.054570][T16021] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 624.327976][T16065] vivid-000: disconnect [ 624.483537][T16060] vivid-000: reconnect [ 624.563089][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.563134][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.724680][T16081] loop6: detected capacity change from 0 to 2048 [ 625.767221][T16081] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 625.818673][T16081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.832862][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.027386][T16064] loop7: detected capacity change from 0 to 40427 [ 626.109643][T16064] F2FS-fs (loop7): invalid crc value [ 626.277782][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 626.327439][T16090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3490'. [ 626.554491][T16064] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 626.681990][T16064] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 627.019367][T16105] jffs2: notice: (16105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 628.287912][T16128] jffs2: notice: (16128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 628.351355][T16130] loop1: detected capacity change from 0 to 512 [ 629.548404][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 629.548430][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 629.757070][T16136] loop0: detected capacity change from 0 to 32768 [ 629.775350][T16136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3507 (16136) [ 629.815547][T16136] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.815573][T16136] BTRFS info (device loop0): using sha256 checksum algorithm [ 629.988468][T16136] BTRFS info (device loop0): allowing degraded mounts [ 629.988490][T16136] BTRFS info (device loop0): enabling ssd optimizations [ 629.988503][T16136] BTRFS info (device loop0): turning on sync discard [ 629.988515][T16136] BTRFS info (device loop0): enabling free space tree [ 630.283651][ T5637] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 630.745978][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3518'. [ 631.147560][ T5756] kernel read not supported for file /tomoyo/domain_policy (pid: 5756 comm: kworker/0:5) [ 631.582067][T16191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.582233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.024228][T16197] file system registered [ 632.026716][T16198] unloading [ 632.504401][ T33] audit: type=1326 audit(2000000458.940:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.509481][ T33] audit: type=1326 audit(2000000458.940:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.584988][ T33] audit: type=1326 audit(2000000459.020:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.585028][ T33] audit: type=1326 audit(2000000459.020:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.585061][ T33] audit: type=1326 audit(2000000459.020:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.588660][ T33] audit: type=1326 audit(2000000459.020:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.588880][ T33] audit: type=1326 audit(2000000459.020:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.674296][ T33] audit: type=1326 audit(2000000459.110:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.771838][ T33] audit: type=1326 audit(2000000459.210:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.771879][ T33] audit: type=1326 audit(2000000459.210:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3719f559 code=0x7ffc0000 [ 632.933013][T16217] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 633.418245][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 633.635949][T16238] loop0: detected capacity change from 0 to 256 [ 633.639178][T16238] exfat: Deprecated parameter 'utf8' [ 633.639244][T16238] exfat: Deprecated parameter 'utf8' [ 633.639257][T16238] exfat: Deprecated parameter 'utf8' [ 633.719891][T16238] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 635.053184][T16277] vxcan0: tx address claim with different name [ 635.206089][T16282] loop6: detected capacity change from 0 to 512 [ 635.207014][T16282] EXT4-fs: Ignoring removed bh option [ 635.233658][T16282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.233675][T16282] EXT4-fs (loop6): Test dummy encryption mode enabled [ 635.274405][T16282] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 635.274405][T16282] [ 635.274424][T16282] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 635.317522][T16282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.375230][T16282] EXT4-fs (loop6): shut down requested (2) [ 635.375806][T16282] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 635.375828][T16282] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 635.375841][T16282] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3553: Corrupt directory, running e2fsck is recommended [ 635.430412][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.675229][T13465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.036300][T16260] loop7: detected capacity change from 0 to 40427 [ 636.074182][T16260] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 636.074207][T16260] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 636.084911][T16260] F2FS-fs (loop7): Image doesn't support compression [ 636.084928][T16260] F2FS-fs (loop7): build fault injection rate: 690 [ 636.084939][T16260] F2FS-fs (loop7): build fault injection type: 0x35f7 [ 636.130655][T16260] F2FS-fs (loop7): invalid crc value [ 636.440192][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3561'. [ 636.519817][T16260] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 636.754214][T16260] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 636.754243][T16260] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 636.754264][T16260] F2FS-fs (loop7): Start checkpoint disabled! [ 636.971262][T16260] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 636.994878][T16260] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 636.994918][T16260] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 637.375556][T16322] kworker/u8:15: attempt to access beyond end of device [ 637.375556][T16322] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 637.375641][T16322] CPU: 0 UID: 0 PID: 16322 Comm: kworker/u8:15 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 637.375665][T16322] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 637.375672][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 637.375682][T16322] Workqueue: writeback wb_workfn (flush-7:7) [ 637.375706][T16322] Call Trace: [ 637.375712][T16322] [ 637.375719][T16322] dump_stack_lvl+0xe8/0x150 [ 637.375747][T16322] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 637.375777][T16322] f2fs_write_end_bio+0x118e/0x15d0 [ 637.375810][T16322] __submit_merged_bio+0x258/0x6a0 [ 637.375834][T16322] ? rcu_is_watching+0x16/0xb0 [ 637.375863][T16322] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 637.375890][T16322] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 637.375934][T16322] f2fs_write_data_pages+0x2a13/0x36e0 [ 637.375980][T16322] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 637.376032][T16322] ? __pfx_read_node_cache+0x10/0x10 [ 637.376074][T16322] ? __lock_acquire+0x747/0x2de0 [ 637.376107][T16322] ? __pfx_wake_up_bit+0x10/0x10 [ 637.376133][T16322] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 637.376151][T16322] do_writepages+0x338/0x560 [ 637.376174][T16322] ? reacquire_held_locks+0x117/0x1a0 [ 637.376196][T16322] ? writeback_sb_inodes+0x450/0x1af0 [ 637.376220][T16322] __writeback_single_inode+0x136/0x1220 [ 637.376242][T16322] ? do_raw_spin_unlock+0xf5/0x200 [ 637.376262][T16322] writeback_sb_inodes+0x9de/0x1af0 [ 637.376279][T16322] ? __lock_acquire+0x747/0x2de0 [ 637.376317][T16322] ? lock_acquire+0x115/0x350 [ 637.376342][T16322] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 637.376395][T16322] ? rcu_is_watching+0x16/0xb0 [ 637.376419][T16322] ? queue_io+0x2d3/0x470 [ 637.376441][T16322] wb_writeback+0x41c/0xad0 [ 637.376462][T16322] ? queue_io+0x231/0x470 [ 637.376486][T16322] ? __pfx_wb_writeback+0x10/0x10 [ 637.376504][T16322] ? do_raw_spin_lock+0x12b/0x2f0 [ 637.376533][T16322] wb_workfn+0x431/0x10f0 [ 637.376564][T16322] ? __pfx_wb_workfn+0x10/0x10 [ 637.376584][T16322] ? trace_hrtimer_start+0x82/0x200 [ 637.376608][T16322] ? do_raw_spin_lock+0x12b/0x2f0 [ 637.376631][T16322] ? lock_acquire+0x115/0x350 [ 637.376658][T16322] ? rcu_is_watching+0x16/0xb0 [ 637.376684][T16322] ? process_scheduled_works+0x97a/0x1630 [ 637.376709][T16322] process_scheduled_works+0xc3d/0x1630 [ 637.376759][T16322] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.376789][T16322] ? assign_work+0x3cf/0x5d0 [ 637.376817][T16322] worker_thread+0xa47/0xfb0 [ 637.376854][T16322] kthread+0x38b/0x480 [ 637.376873][T16322] ? __pfx_worker_thread+0x10/0x10 [ 637.376897][T16322] ? __pfx_kthread+0x10/0x10 [ 637.376916][T16322] ret_from_fork+0x514/0xb70 [ 637.376936][T16322] ? __pfx_ret_from_fork+0x10/0x10 [ 637.376955][T16322] ? __switch_to+0xc78/0x1410 [ 637.376982][T16322] ? __pfx_kthread+0x10/0x10 [ 637.377001][T16322] ret_from_fork_asm+0x1a/0x30 [ 637.377031][T16322] [ 637.377037][T16322] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 638.210122][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 638.362304][ T10] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 638.363196][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.363218][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.363235][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.363265][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.365307][ T10] usb 2-1: config 0 descriptor?? [ 638.369579][T16338] input: syz0 as /devices/virtual/input/input40 [ 638.846399][ T10] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 639.152055][ T10] usb 2-1: USB disconnect, device number 31 [ 639.228467][T16355] bridge0: port 4(veth0_to_bridge) entered blocking state [ 639.228599][T16355] bridge0: port 4(veth0_to_bridge) entered disabled state [ 639.228726][T16355] veth0_to_bridge: entered allmulticast mode [ 639.260750][T16355] veth0_to_bridge: entered promiscuous mode [ 639.261197][T16355] bridge0: port 4(veth0_to_bridge) entered blocking state [ 639.261274][T16355] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 639.326176][T16357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 639.495592][T16362] siw: device registration error -23 [ 639.620544][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 639.789548][T16362] nvme nvme0: rdma_resolve_addr failed (-99). [ 639.799181][ T10] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 639.821257][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.821284][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.821300][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.821331][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.830861][ T10] usb 8-1: config 0 descriptor?? [ 640.333555][ T10] hid_parser_main: 5 callbacks suppressed [ 640.333574][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333597][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333616][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333635][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333655][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333674][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333692][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333711][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333730][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.333749][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 640.446756][ T10] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 640.566554][ T10] usb 8-1: USB disconnect, device number 8 [ 640.776297][T16386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.776425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.842532][T16380] fido_id[16380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 641.284715][T16395] loop0: detected capacity change from 0 to 4096 [ 641.303837][T16395] ext4: Unknown parameter 'audit' [ 641.406958][T16388] 8021q: adding VLAN 0 to HW filter on device eth0 [ 641.437777][T16388] 8021q: adding VLAN 0 to HW filter on device eth1 [ 641.492849][T16388] 8021q: adding VLAN 0 to HW filter on device eth2 [ 642.030828][T10174] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 642.181272][T10174] usb 1-1: Using ep0 maxpacket: 16 [ 642.181971][T10174] usb 1-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 642.183362][T10174] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.183384][T10174] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.183401][T10174] usb 1-1: config 0 interface 0 has no altsetting 0 [ 642.183424][T10174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.207032][T10174] usb 1-1: config 0 descriptor?? [ 642.542954][T16388] 8021q: adding VLAN 0 to HW filter on device eth3 [ 642.623242][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.623341][T16323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.735232][T16412] siw: device registration error -23 [ 642.747603][T10174] mcp2221 0003:04D8:00DD.0020: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 642.981560][ T10] usb 1-1: USB disconnect, device number 32 [ 643.045030][T16412] nvme nvme0: rdma_resolve_addr failed (-99). [ 643.355283][T16422] loop6: detected capacity change from 0 to 128 [ 643.385328][T16422] FAT-fs (loop6): Directory bread(block 1048) failed [ 643.385356][T16422] FAT-fs (loop6): Directory bread(block 1049) failed [ 643.385374][T16422] FAT-fs (loop6): Directory bread(block 1050) failed [ 643.385391][T16422] FAT-fs (loop6): Directory bread(block 1051) failed [ 643.385408][T16422] FAT-fs (loop6): Directory bread(block 1052) failed [ 643.385446][T16422] FAT-fs (loop6): Directory bread(block 1053) failed [ 643.385463][T16422] FAT-fs (loop6): Directory bread(block 1054) failed [ 643.385481][T16422] FAT-fs (loop6): Directory bread(block 1055) failed [ 643.476879][T16422] FAT-fs (loop6): Directory bread(block 1048) failed [ 643.476906][T16422] FAT-fs (loop6): Directory bread(block 1049) failed [ 643.924320][ T10] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 644.261662][T16409] loop7: detected capacity change from 0 to 40427 [ 644.324721][T16409] F2FS-fs (loop7): Image doesn't support compression [ 644.324741][T16409] F2FS-fs (loop7): build fault injection rate: 690 [ 644.348968][T16409] F2FS-fs (loop7): invalid crc value [ 644.755816][T16409] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 644.894984][T16444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.994021][T16446] loop0: detected capacity change from 0 to 512 [ 645.024048][T16409] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 645.042948][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.080437][T16446] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 645.080452][T16446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 645.178636][T16446] EXT4-fs (loop0): 1 truncate cleaned up [ 645.179803][T16446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.526324][ T5637] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 645.799593][T13560] bridge0: port 3(syz_tun) entered disabled state [ 645.899966][T13560] syz_tun (unregistering): left promiscuous mode [ 645.900090][T13560] bridge0: port 3(syz_tun) entered disabled state [ 646.113450][T13560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.674200][ T1862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.718766][T12919] syz-executor: attempt to access beyond end of device [ 646.718766][T12919] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 646.778678][T12919] CPU: 0 UID: 0 PID: 12919 Comm: syz-executor Tainted: G L Y syzkaller #0 PREEMPT(full) [ 646.778710][T12919] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 646.778717][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 646.778727][T12919] Call Trace: [ 646.778734][T12919] [ 646.778742][T12919] dump_stack_lvl+0xe8/0x150 [ 646.778773][T12919] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 646.778804][T12919] f2fs_write_end_bio+0x118e/0x15d0 [ 646.778839][T12919] __submit_merged_bio+0x258/0x6a0 [ 646.778863][T12919] ? rcu_is_watching+0x16/0xb0 [ 646.778892][T12919] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 646.778920][T12919] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 646.778964][T12919] f2fs_write_data_pages+0x2a13/0x36e0 [ 646.779011][T12919] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 646.779027][T12919] ? is_bpf_text_address+0x26/0x2b0 [ 646.779054][T12919] ? arch_stack_walk+0xfb/0x150 [ 646.779099][T12919] ? add_lock_to_list+0xc7/0x100 [ 646.779124][T12919] ? lockdep_unlock+0x5c/0xd0 [ 646.779141][T12919] ? __lock_acquire+0x1511/0x2de0 [ 646.779183][T12919] ? do_raw_spin_lock+0x12b/0x2f0 [ 646.779209][T12919] ? do_raw_spin_unlock+0xf5/0x200 [ 646.779225][T12919] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 646.779244][T12919] do_writepages+0x338/0x560 [ 646.779272][T12919] ? do_raw_spin_unlock+0xf5/0x200 [ 646.779293][T12919] filemap_fdatawrite+0x1e9/0x2f0 [ 646.779314][T12919] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 646.779369][T12919] ? do_raw_spin_unlock+0xf5/0x200 [ 646.779389][T12919] f2fs_sync_dirty_inodes+0x471/0x970 [ 646.779421][T12919] f2fs_write_checkpoint+0x860/0x24d0 [ 646.779476][T12919] kill_f2fs_super+0x2dc/0x700 [ 646.779499][T12919] ? rcu_do_enqueue+0x616/0x870 [ 646.779518][T12919] ? lockdep_hardirqs_on+0x7b/0x110 [ 646.779537][T12919] ? __pfx_kill_f2fs_super+0x10/0x10 [ 646.779568][T12919] ? __pfx_call_rcu+0x10/0x10 [ 646.779587][T12919] ? shrinker_free+0x2a7/0x3b0 [ 646.779607][T12919] deactivate_locked_super+0xbe/0x110 [ 646.779629][T12919] cleanup_mnt+0x204/0x2a0 [ 646.779656][T12919] task_work_run+0x1d9/0x260 [ 646.779679][T12919] ? __pfx_task_work_run+0x10/0x10 [ 646.779707][T12919] exit_to_user_mode_loop+0x204/0x770 [ 646.779728][T12919] ? rcu_is_watching+0x16/0xb0 [ 646.779755][T12919] do_syscall_64+0x328/0x520 [ 646.779772][T12919] ? trace_irq_disable+0x3b/0x140 [ 646.779793][T12919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.779809][T12919] ? clear_bhb_loop+0x70/0xc0 [ 646.779829][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.779844][T12919] RIP: 0033:0x7fd7ed9a0797 [ 646.779860][T12919] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 646.779873][T12919] RSP: 002b:00007ffe5508c128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 646.779890][T12919] RAX: 0000000000000000 RBX: 00007fd7eda35f63 RCX: 00007fd7ed9a0797 [ 646.779901][T12919] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5508c1e0 [ 646.779912][T12919] RBP: 00007ffe5508c1e0 R08: 00007ffe5508d1e0 R09: 00000000ffffffff [ 646.779923][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5508d270 [ 646.779933][T12919] R13: 00007fd7eda35f63 R14: 000000000009d868 R15: 00007ffe5508d2b0 [ 646.779959][T12919] [ 646.779965][T12919] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 647.520928][ T1862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.875062][ T1862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.064384][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.085736][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.112562][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.114482][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.114991][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 648.474544][ T1862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.212971][T16497] vhci_hcd vhci_hcd.0: failed to lookup sock [ 649.220835][T16320] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.388412][T16503] loop7: detected capacity change from 0 to 128 [ 649.437485][T16503] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 649.455641][T16503] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.755097][T12885] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.770372][T12919] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.005494][T16515] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3638'. [ 650.009562][T16515] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 650.009596][T16515] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 650.120131][T16323] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.120178][T16323] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.204381][ T1862] veth0_to_bridge: left allmulticast mode [ 650.204402][ T1862] veth0_to_bridge: left promiscuous mode [ 650.204562][ T1862] bridge0: port 4(veth0_to_bridge) entered disabled state [ 650.231541][ T5643] Bluetooth: hci2: command tx timeout [ 650.281175][ T1862] bridge_slave_1: left allmulticast mode [ 650.281196][ T1862] bridge_slave_1: left promiscuous mode [ 650.281368][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.331252][ T1862] bridge_slave_0: left allmulticast mode [ 650.331273][ T1862] bridge_slave_0: left promiscuous mode [ 650.331422][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.389538][ T1862] pim6reg: left allmulticast mode [ 650.870551][ T5748] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 651.023999][ T5748] usb 8-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 651.029454][ T5748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.040787][ T5756] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 651.195967][ T5756] usb 3-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 651.197137][ T5756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.197156][ T5756] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.198090][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 651.198108][ T5756] usb 3-1: SerialNumber: syz [ 651.479824][ T5756] usb 3-1: 0:2 : does not exist [ 651.559960][ T1862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.666485][ T1862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.667813][ T1862] bond0 (unregistering): Released all slaves [ 651.727084][ C0] usb 8-1: NFC: It it not the response to the last command [ 651.740328][ T5748] usb 8-1: NFC: Unable to get FW version [ 651.772486][ T1862] bond1 (unregistering): Released all slaves [ 651.809744][ T5748] pn533_usb 8-1:1.0: probe with driver pn533_usb failed with error -5 [ 651.977495][ T10] usb 8-1: USB disconnect, device number 9 [ 652.072160][T16475] rxe_eth0 speed is unknown, defaulting to 1000 [ 652.111618][ T5756] usb 3-1: USB disconnect, device number 32 [ 652.313332][ T5643] Bluetooth: hci2: command tx timeout [ 652.337127][T13982] udevd[13982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.642512][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 652.748754][T16539] loop1: detected capacity change from 0 to 32768 [ 652.809721][T16539] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 652.884509][T16539] XFS (loop1): Ending clean mount [ 652.996915][T16539] XFS (loop1): User initiated shutdown received. [ 652.996954][T16539] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 652.996988][T16539] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 652.997371][T16560] FAULT_INJECTION: forcing a failure. [ 652.997371][T16560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.997394][T16560] CPU: 0 UID: 0 PID: 16560 Comm: syz.7.3648 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 652.997418][T16560] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 652.997425][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 652.997435][T16560] Call Trace: [ 652.997442][T16560] [ 652.997449][T16560] dump_stack_lvl+0xe8/0x150 [ 652.997479][T16560] should_fail_ex+0x3eb/0x540 [ 652.997502][T16560] _copy_from_user+0x2d/0xb0 [ 652.997523][T16560] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 652.997550][T16560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.997572][T16560] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 652.997610][T16560] ? rcu_is_watching+0x16/0xb0 [ 652.997646][T16560] do_syscall_64+0x166/0x520 [ 652.997664][T16560] ? trace_irq_disable+0x3b/0x140 [ 652.997687][T16560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.997703][T16560] ? clear_bhb_loop+0x70/0xc0 [ 652.997723][T16560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.997740][T16560] RIP: 0033:0x7fd7ed99f559 [ 652.997755][T16560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.997769][T16560] RSP: 002b:00007fd7ee882fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 652.997786][T16560] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fd7ed99f559 [ 652.997798][T16560] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000020 [ 652.997809][T16560] RBP: 00007fd7eda36b20 R08: 0000000000000000 R09: 0000000000000000 [ 652.997820][T16560] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000100 [ 652.997830][T16560] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007ffe5508ceb8 [ 652.997856][T16560] [ 653.409321][ T5635] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 654.390270][ T5643] Bluetooth: hci2: command tx timeout [ 654.993247][T16585] FAULT_INJECTION: forcing a failure. [ 654.993247][T16585] name failslab, interval 1, probability 0, space 0, times 0 [ 654.993278][T16585] CPU: 0 UID: 0 PID: 16585 Comm: syz.1.3656 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 654.993303][T16585] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 654.993310][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 654.993320][T16585] Call Trace: [ 654.993327][T16585] [ 654.993334][T16585] dump_stack_lvl+0xe8/0x150 [ 654.993366][T16585] should_fail_ex+0x3eb/0x540 [ 654.993390][T16585] should_failslab+0xa8/0x100 [ 654.993417][T16585] ? do_getname+0x2e/0x250 [ 654.993435][T16585] kmem_cache_alloc_noprof+0x9c/0x600 [ 654.993457][T16585] ? do_getname+0x2e/0x250 [ 654.993480][T16585] do_getname+0x2e/0x250 [ 654.993497][T16585] ? getname_flags+0x11/0x20 [ 654.993517][T16585] __se_sys_statx+0xd7/0x2a0 [ 654.993542][T16585] ? __pfx___se_sys_statx+0x10/0x10 [ 654.993567][T16585] ? __se_sys_futex+0x3a8/0x450 [ 654.993592][T16585] ? rcu_is_watching+0x16/0xb0 [ 654.993622][T16585] ? __x64_sys_statx+0x20/0xc0 [ 654.993644][T16585] do_syscall_64+0x166/0x520 [ 654.993663][T16585] ? trace_irq_disable+0x3b/0x140 [ 654.993686][T16585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.993703][T16585] ? clear_bhb_loop+0x70/0xc0 [ 654.993723][T16585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.993739][T16585] RIP: 0033:0x7f96e819f559 [ 654.993755][T16585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.993770][T16585] RSP: 002b:00007f96e8ffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 654.993787][T16585] RAX: ffffffffffffffda RBX: 00007f96e8425fa0 RCX: 00007f96e819f559 [ 654.993799][T16585] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 654.993809][T16585] RBP: 00007f96e8236b20 R08: 0000000000000000 R09: 0000000000000000 [ 654.993820][T16585] R10: 00000000000007ff R11: 0000000000000246 R12: 0000000000000000 [ 654.993829][T16585] R13: 00007f96e8426038 R14: 00007f96e8425fa0 R15: 00007ffed9a860f8 [ 654.993856][T16585] [ 655.950516][ T1862] hsr_slave_0: left promiscuous mode [ 655.959052][ T1862] hsr_slave_1: left promiscuous mode [ 655.959778][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.959796][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.999926][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.999944][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.046417][ T1862] veth1_macvtap: left promiscuous mode [ 656.046446][ T1862] veth0_macvtap: left promiscuous mode [ 656.471931][ T5643] Bluetooth: hci2: command tx timeout [ 656.801915][T16581] loop6: detected capacity change from 0 to 32768 [ 657.326194][T16581] read_mapping_page failed! [ 657.326227][T16581] ERROR: (device loop6): txCommit: [ 657.326227][T16581] [ 657.326255][T16581] ERROR: (device loop6): remounting filesystem as read-only [ 657.439544][ T1862] team0 (unregistering): Port device team_slave_1 removed [ 657.474921][ T125] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0) [ 657.475280][ T125] ------------[ cut here ]------------ [ 657.475289][ T125] kernel BUG at fs/jfs/jfs_txnmgr.c:933! [ 657.475313][ T125] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 657.499764][ T125] CPU: 0 UID: 0 PID: 125 Comm: jfsCommit Tainted: G L Y syzkaller #0 PREEMPT(full) [ 657.510569][ T125] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 657.516393][ T125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 657.526474][ T125] RIP: 0010:txUnlock+0xd95/0xde0 [ 657.531442][ T125] Code: a6 fd 90 0f 0b e8 3b 08 48 fe 48 c7 c7 e0 c9 6e 8c 48 c7 c6 d9 c5 6e 8c ba a5 03 00 00 48 c7 c1 e0 d6 6e 8c e8 3c b0 a6 fd 90 <0f> 0b e8 14 08 48 fe 48 c7 c7 e0 c9 6e 8c 48 c7 c6 d9 c5 6e 8c ba [ 657.551063][ T125] RSP: 0018:ffffc9000209fc48 EFLAGS: 00010246 [ 657.557149][ T125] RAX: 0000000000000037 RBX: ffff888060827b50 RCX: 7cdb70dd28453500 [ 657.565137][ T125] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 657.573145][ T125] RBP: 1ffff1100c104f6a R08: ffffc9000209f9c7 R09: 1ffff92000413f38 [ 657.581125][ T125] R10: dffffc0000000000 R11: fffff52000413f39 R12: ffffc90002932318 [ 657.589111][ T125] R13: dffffc0000000000 R14: 0000000000000063 R15: 0000000000000000 [ 657.597088][ T125] FS: 0000000000000000(0000) GS:ffff88812340e000(0000) knlGS:0000000000000000 [ 657.606021][ T125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.612607][ T125] CR2: 00007fd328580000 CR3: 00000000414ae000 CR4: 00000000003526f0 [ 657.620612][ T125] Call Trace: [ 657.623897][ T125] [ 657.626837][ T125] jfs_lazycommit+0x59f/0xac0 [ 657.631547][ T125] ? __pfx_jfs_lazycommit+0x10/0x10 [ 657.636755][ T125] ? __pfx_default_wake_function+0x10/0x10 [ 657.642595][ T125] ? __kthread_parkme+0x71/0x1f0 [ 657.647536][ T125] ? __kthread_parkme+0x199/0x1f0 [ 657.652563][ T125] kthread+0x38b/0x480 [ 657.656638][ T125] ? __pfx_jfs_lazycommit+0x10/0x10 [ 657.661843][ T125] ? __pfx_kthread+0x10/0x10 [ 657.666449][ T125] ret_from_fork+0x514/0xb70 [ 657.671060][ T125] ? __pfx_ret_from_fork+0x10/0x10 [ 657.676192][ T125] ? __switch_to+0xc78/0x1410 [ 657.680907][ T125] ? __pfx_kthread+0x10/0x10 [ 657.685523][ T125] ret_from_fork_asm+0x1a/0x30 [ 657.690317][ T125] [ 657.693361][ T125] Modules linked in: [ 657.698246][ T125] ---[ end trace 0000000000000000 ]--- [ 657.754174][ T1862] team0 (unregistering): Port device team_slave_0 removed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 658.742763][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10 [ 658.903949][ T1862] IPVS: stop unused estimator thread 0... [ 658.968170][ T1862] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.998068][T16607] batman_adv: batadv0: Interface deactivated: syz_tun [ 659.043893][ T125] RIP: 0010:txUnlock+0xd95/0xde0 [ 659.043926][ T125] Code: a6 fd 90 0f 0b e8 3b 08 48 fe 48 c7 c7 e0 c9 6e 8c 48 c7 c6 d9 c5 6e 8c ba a5 03 00 00 48 c7 c1 e0 d6 6e 8c e8 3c b0 a6 fd 90 <0f> 0b e8 14 08 48 fe 48 c7 c7 e0 c9 6e 8c 48 c7 c6 d9 c5 6e 8c ba [ 659.043940][ T125] RSP: 0018:ffffc9000209fc48 EFLAGS: 00010246 [ 659.043955][ T125] RAX: 0000000000000037 RBX: ffff888060827b50 RCX: 7cdb70dd28453500 [ 659.043967][ T125] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 659.043977][ T125] RBP: 1ffff1100c104f6a R08: ffffc9000209f9c7 R09: 1ffff92000413f38 [ 659.043989][ T125] R10: dffffc0000000000 R11: fffff52000413f39 R12: ffffc90002932318 [ 659.044001][ T125] R13: dffffc0000000000 R14: 0000000000000063 R15: 0000000000000000 [ 659.044011][ T125] FS: 0000000000000000(0000) GS:ffff88812340e000(0000) knlGS:0000000000000000 [ 659.044024][ T125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.044034][ T125] CR2: 00007ff1a6f7f43c CR3: 0000000026bcc000 CR4: 00000000003526f0 [ 659.044083][ T125] Kernel panic - not syncing: Fatal exception [ 659.144088][ T125] Kernel Offset: disabled [ 659.148431][ T125] Rebooting in 86400 seconds..