last executing test programs: 15m36.890903014s ago: executing program 4 (id=5990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x60}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 15m36.778653342s ago: executing program 4 (id=5991): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 15m36.54434945s ago: executing program 4 (id=5996): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000040)) 15m36.267468388s ago: executing program 4 (id=6003): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 15m35.863412791s ago: executing program 4 (id=6009): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 15m35.096800358s ago: executing program 4 (id=6015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) 15m34.808717203s ago: executing program 32 (id=6015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) 14m2.508663666s ago: executing program 1 (id=7325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newae={0x48, 0x1e, 0x301, 0x70bd2a, 0x24dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0x2, 0x2b}, @in=@private=0xa000100, 0x3, 0x3500}, [@etimer_thresh={0x8, 0xc, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 14m2.231059644s ago: executing program 1 (id=7331): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) 14m1.752169265s ago: executing program 1 (id=7338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11, 0x1, 0x78, 0xfc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14m1.401430696s ago: executing program 1 (id=7343): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy7FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEAPEiXR7966oz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7yWxqv3HfVL7f5bt8eGR7avdjhVNfuq8uVP/fSZs+e+9MLQ+W5eas98QP377bPx2ujVi42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291ojoBjZuv35q8fn2hceb5s5s+vj34/sATxwYvDD178plu2bHhkZHRjSL13vK1e25Ix04zPA5FEScjxXPf+2lqRUQRez8X9Qc79lsdrjpxourE2PBI1ZHpdmtmsfzwSvdEFBGNnkrN7jnafiyi1v9A+7CzZsRS2fyywSfK7o3OteZb16anGlda84vtxfbszJXUaW3Zn0YUcT5FLEfE6sDdu+uPImqR4jtH19K1iOjrnocvVhODd25HsY993IWynY3+iOXiERizA2wging1UvzsneMxka8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfM94tFUiyL+shz/C2tpsroedK8rl77W+MrM9dmest3ryke8P9x1pXhI94fDW/LBOODXpnoU0aqu+Gvp3n+zAwAAAAAAAAAAAAAAAMD9djiK+EykeOU//qSaVxzVvPSjF4b+cPBX+3rKPf0h+0kR8XxELBW7m5N7KE8MvJKupPSQ5xI/zupRxJ/m+X/fetiNAQAAAAAAAAAAAAAAAAAAeKwV8ZNI8eK7x9Ny9K4p3p650bjaujbdWRW2u/Zvd8309fX19UbqZDPneM6lnMs5V3Ku5owi18/ZzDmecynncs6VnKs5oy/Xz9nMOZ5zKedyzpWcqzmjluvnbOYcz7mUcznnSs7VnHFA1u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIX0SKb39jLUWKiGbEeHRyZeBhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2kIr4fKRp/1LyzrRYRqfq343j5y7loHirzk9EcKvOlaF7M2aqy1vzWQ2g/e9OfivhxpBiov31nwPP493fe3fkaxFvf3Hj32Von+7ofDr4/8MSxoxeGRn7j6Z1ep+0acOJSe+bW7cbY8MjIaM/mWj76J3u2DebjFven60TEwhtvvt6anp6av/cX5VdgD9UfoRep9rj01IvqRdQORDMeTt95DJT3//cixe+++5/dG37n/l+PX+m8u3OHj5//2cb9/8WtO9rl/b+2tV6+/5f39O3u/0/2bHsx/26kvxZRX7w5138sor7wxpsn2zdbN6ZuTM2cO3Xqy0NDXz57qv9QRP16e3qq59V9OV0AAAAAAAAAAAAAAAAAD04q4vcjRevHa6kREber+VqDF4aePflMX/RV8602zdt+bfTqxcbLszfn5qcWFqYmG2Mz7YnZyandHq5eTfcaGx7Zl858qMP73P7D9Zdn596Yb9/448VtPz9Sv3htYXG+NbH9x3E4iohm75YTVYPHhkeqRk+3WzNV1SvbTqb/6PpTEf8VKSbONdLn87Y8/3/rDP9N8/+Xtu5on+b/f6JnW3nMlIr4eaT4nb96Oj5ftfNI3HXOcrm/ixQnzn8ul4tDZbluGzrPFejMDCzL/l+k+KdfbC7bnQ/55EbZ07s+sY+IcvyPRorv/8V34zfzts3Pf9h+/I9s3dE+jf9TPduObHpewZ67Th7/k5HipSffjt/K2z7o+R/dZ28cz4XvPJ9jn8b/Uz3bBvNxf/v+dB0AAAAAAAAAAOCR1p+K+PtI8cORWnohb9vN3/+b3Lqjffr7X5/u2TZ5f9Yr+tAXez6pAAAAAHBA9KcifhIpbiy+fWcO9eb53z3zP39vY/7ncNryafXnfL9WPTfgfv75X6/BfNzxvXcbAAAAAAAAAAAAAAAAAAAADpSUinghr6c+Xs3nn9xxPfWVSPHK/zyXy6VjZbnuOvCD1a/1y7MzJy9OT89OtBZb16anGqNzrYmpsu5TkWLtbz+X6xbV+urd9eY7a7xvrMU+HylG/qFbtrMWe3dt8qc2yp4uy34iUvz3P24u213H+lMbZc+UZf8mUnz9X7Yve2yj7Nmy7HcjxY++3uiWPVKW7T4f9dMbZZ+fmC32YVQAAAAAAAAAAAAAAAAAAAB43PSnIv48UvzvzeU7c/nz+v/9PW8rb32zZ73/LW5X6/wPVuv/7/T6Xtb/r54rsLTTUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRoq5y2tpZaB831G/1J65dXtseGT7aodTVbOvKl/+1E+fOXvuSy8Mne/mB9e/3z4Tr41evdh4efbm3PzUwsLUZGNspj0xOzm16z3stf5WJ6oT0Lj5+q3J69cXGmeeP7vp49uD7w88cWzwwtCzJ5/plh0bHhkZ7SlT67/no98l7bD9UBTx15Hiue/9NP1wIKKIvZ+LD/nu7LfDVSdOVJ0YGx6pOjLdbs0slh9e6Z6IIqLRU6nZPUcPYCz2pBmxVDa/bPCJsnujc6351rXpqcaV1vxie7E9O3MldVpb9qcRRZxPEcsRsTpw9+76o4jXI8V3jq6lfx2I6Ouehy9eHv3qqTM7t6PYxz7uQtnORn/EcvEIjNkBNhBF/HOk+Nk7x+PfBiJq0fmJL0S8WuYPIt6Kznin8otxLuK9bb5HPJpqUcT/l+N/YS29M1BeD7rXlUtfa3xl5vpsT9nudeWRvz88SAf82lSPIn5UXfHX0r/77xoAAAAAAAAAAAAAAADgACni1yPFi+8eT9X84DtzitszNxpXW9emO9P6unP/unOm19fX1xupk82c4zmXci7nXMm5mjOKXD9ns8z6+vp4fr+UcznnSs7VnNGX6+ds5hzPuZRzOedKztWcUcv1czZzjudcyrmccyXnas44IHP3AAAAAAAAAAAAAAAAAACAj5ei+ifFt7+xltYHOutLj0cnV6wH+rH3ywAAAP//Iun4rQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 14m0.837919052s ago: executing program 1 (id=7354): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x8, 0xfffffffffffffffe, 0xf00) 14m0.120846032s ago: executing program 1 (id=7363): r0 = getpid() syz_clone3(&(0x7f00000009c0)={0x24000000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r0], 0x1}, 0x58) 13m59.440756371s ago: executing program 33 (id=7363): r0 = getpid() syz_clone3(&(0x7f00000009c0)={0x24000000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r0], 0x1}, 0x58) 5m24.06856548s ago: executing program 7 (id=14522): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x80b}}}, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) 5m22.740707826s ago: executing program 7 (id=14530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 5m22.357140338s ago: executing program 7 (id=14533): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 5m21.881257666s ago: executing program 7 (id=14537): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8006, &(0x7f0000000940)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@block_validity}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400009}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x489, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000780), 0xc008, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m19.373723582s ago: executing program 7 (id=14554): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) 5m6.496271921s ago: executing program 7 (id=14611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQTM7G0eb2fU22djx+vORJvPmzY/v91l5szM7T7MBnFrPR8QbEfFhmqYvRcR8UV8ppuh0p2y79+++u5pNSaTx1j+SSIq6bLM0TdPeMc8Xu81GxDe+FvHt5L6As8V8b//6SrPZ2C4W6+3NG/Wdvf3LG5sr6431xtbS0uKry68tv7J8ZSztvBARr3/lLz/83s+/+vqvP//On6/+7dJ3srTmivW9djyE6WEru02vnpnt22H7IYM9ibL2VD8oFs6Ots+tx5kQAAADZdf4H4uIz0TESzEfU8MvZwEAAIATKP3SXHyQdJ/flZgZUA8AAACcIJV8DGxSqRVjAeaiUqnVumN4PxHnKs3WTvtz11q7W2vdsbILUa1c22g2rhRjhReimmTLi3n5YPnlvuWliHg6In4wfzZfrq22mmvH/eUHAAAAnBLn++7//z3fvf8fLjma5AAAAIDxWTjuBAAAAIDHzv0/AAAATLTqsJUzR5cHAAAA8Ph8/c03synt/f712tt7u9dbb19ea+xcr23urtZWW9s3auut1nr+zr7Nw47XbLVufCG2dm/W242ddv3C3v7VzdbuVvvqRsweSYMAAACABzz96dt/TCKi88Wz+RQe+8OpMX2v1HunZ0nv/9NT3fl7R5QUcCSmRtjmvTPl9a4T4GSb7q8Y0NeByTN0/D9wKhz2ix4DB+/8rjurjDkfAABg/C5+qvz5/+HX8x2X/HDC6cRwevU9/0/njysR4Mjlz/9HHcjjYgEmSnWkEYDAJHvU5/+HS9OPlBAAADB2c/mUVGrF13tzUanUahEX8p8FrCbXNpqNKxHxVET8Yb56JltezPdMDr1nAAAAAAAAAAAAAAAAAAAAAAAAAAC60jSJFAAAAJhoEZW/Jr/pvsv/4vyLc/3fD8wk/81/EngmIt75yVs/urnSbm8vZvX/vFff/nFR//JxfIMBAAAA9Ovdp+fz/xx3NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMmvfvvrvam0bY/Oy44v79yxGxUBZ/Ombz+WxUI+Lcv5KYvm+/JCKmxhC/cysiPlkWP8nSykPODYg/jj9C51bSSXOl8WOh+CuUxT8/hvhwmt3Ozj9vlPX/Sjyfz8v733QxParB57+4d/6bGtD/L4wY45k7v6wPjH8r4pnp8vNfL34yIP4LI0Wvxre+ub8/aG3604iLvc+f/Ix3f4SDUr29eaO+s7d/eWNzZb2x3thaWlp8dfm15VeWr9SvbTQbxb+lMb7/7K8+HNb+c6Wff0mRzeD2v1hyvKmS/P935+bdj/cWOg/Gv/RCSfzf/qzY4sH4lSLOZ4tytv5ir9zplu/33C9+/9yw9q8dtL+azc/cizy8/ZcGHbTfAx3l2dH+6wAAj8XO3v71lWazsT2xhewu/QlI42EKM/FEpDG5he9mhTvjOmCapmnWp0pW3Y6IUY6TxJhbWinP56Aw8Axw3GcmAABg3A4u+o87EwAAAAAAAAAAAAAAAAAAADi9juIta/0xD16BnIzjFdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPx/wAAAP//k7DbIA==") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="b932", 0x2, 0x20008804, &(0x7f0000000440)={0xa, 0x4e21, 0xd, @remote, 0x8}, 0x1c) 5m5.11938818s ago: executing program 34 (id=14611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="b932", 0x2, 0x20008804, &(0x7f0000000440)={0xa, 0x4e21, 0xd, @remote, 0x8}, 0x1c) 6.234960985s ago: executing program 5 (id=17888): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 5.764940643s ago: executing program 5 (id=17893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0009000000000000b70500850000005e0000009539130f2386"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x62c}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) 5.454034266s ago: executing program 5 (id=17896): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406619, 0x0) 5.113588759s ago: executing program 6 (id=17901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.969868314s ago: executing program 5 (id=17902): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) pselect6(0x40, &(0x7f0000000080)={0xc, 0x4, 0x401, 0x5, 0x6, 0x80081, 0x3, 0x400}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 4.779297773s ago: executing program 6 (id=17906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000060100000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 4.531973043s ago: executing program 5 (id=17909): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getdents(r0, &(0x7f0000001080)=""/38, 0x26) getdents(r0, 0xffffffffffffffff, 0x5a) 4.43853461s ago: executing program 6 (id=17911): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.949777298s ago: executing program 5 (id=17917): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x1, {0x0}, 0x2}) 3.421644849s ago: executing program 2 (id=17924): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x162, &(0x7f00000005c0)="$eJzs2rFKw0AYB/BPGi3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BHyOimi4MvEUlzhCQWzSDkhP9vyR++NPlyV77pOv7U67KgQ7Q/uzv92PKnXrNnHw1Zlw0o0SeiZhzCKHrQ6Zu3tB5GpK+4oVo7n8m1tTcWJzfM5Y5VdUsAAAAAAAAAAAAAAAAAAAAAAFBSuyFDYyK8a+Zyp5upBi3tfMC54wcVtVe5dlOe4SIm+GO8Pnb+hrNNGVxx7Md1M//7exl2J4K/F9fXuPRmRjBfdFxvMHbGzoVl2T3zwDQPLWP5LKP4xPaT7InC6NnUKZLSeua82WuZ82Zy/7VtV9xeFd8WzBdy/xUIa2q0UTLUiEiBNlQKfU2xf9S/CTVSoo1MSEfExsqpov06d1TRWE+uo7rdeonnnz6c8pEsLr+1Tn+0ZvJNlC9V9eEA8LOvAAAA//8Jlzfq") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/232, 0xe8) 3.16313522s ago: executing program 0 (id=17926): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x409, &(0x7f0000000280)={[{@nogrpid}, {@init_itable}, {@nodioread_nolock}, {@orlov}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000240)={0x0, 0x0, "79cfc9afc5d1fe5e094f89a9781374c6"}) 3.08487347s ago: executing program 2 (id=17927): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 2.749583256s ago: executing program 0 (id=17929): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@bh}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./bus\x00') 2.455353249s ago: executing program 2 (id=17930): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c00e2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 2.185035496s ago: executing program 0 (id=17933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x16}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 2.028772039s ago: executing program 2 (id=17934): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000001ac0)={0x0, 0x0, 0x28, 0x6}) 1.935036196s ago: executing program 8 (id=17935): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.760877067s ago: executing program 0 (id=17936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a0000000000008753005f0000000000000000000000002e00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a"], 0x6c}}, 0x0) 1.590904211s ago: executing program 3 (id=17937): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', '\x00\b\x00', "61f70732", ["4ff6e4894ebbad8d1b77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0xe451, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff}) 1.549710634s ago: executing program 8 (id=17938): unshare(0x2000400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) 1.502035494s ago: executing program 2 (id=17939): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0xd) connect$pppoe(r0, 0x0, 0x0) 1.454914981s ago: executing program 0 (id=17940): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddff", 0x19}, {&(0x7f0000001400)="7f4ba13c5a29118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c9", 0x25f}], 0x2}, 0x0) 1.253562237s ago: executing program 3 (id=17941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "e6"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.221142026s ago: executing program 2 (id=17942): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.21293115s ago: executing program 8 (id=17943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0800000001000100140012800c0001006d616376746170009efe028008000500", @ANYRES32=r1, @ANYBLOB="0800040044"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 1.13770751s ago: executing program 0 (id=17944): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.012213696s ago: executing program 3 (id=17945): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}]) 996.514411ms ago: executing program 6 (id=17946): io_setup(0x2, &(0x7f0000000100)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000380)=')', 0x1, 0x203, 0x0, 0x2, r1}]) 916.81764ms ago: executing program 8 (id=17947): r0 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) read(r0, &(0x7f0000000000)=""/46, 0x2e) 684.796477ms ago: executing program 8 (id=17948): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000480)={0x2, 0x0, {&(0x7f00000003c0)=""/94, 0xfffffffffffffecd, 0x0, 0x3, 0x2}}, 0x48) 619.814646ms ago: executing program 6 (id=17949): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x2}}}}]}, 0x40}}, 0xc0) 600.337064ms ago: executing program 3 (id=17950): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 438.172525ms ago: executing program 8 (id=17951): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001a80)={0x1fffffff004, 0xfffffffffffffffc, 0x4, 0x7, 0x1, 0x0, [{0x0, 0x5, 0x0, '\x00', 0x1404}]}) 329.522076ms ago: executing program 3 (id=17952): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x2, 0x5, 0x3, 0x3ff, 0x8}) clock_adjtime(0x0, &(0x7f0000000300)={0x6, 0x7, 0x6, 0x195, 0x1, 0x9, 0x4, 0xe7, 0x72a, 0x80000001, 0x400, 0x7, 0x1a, 0xaed8, 0x8, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x6, 0x0, 0x8, 0x9, 0xfffffffffffff800}) 324.21292ms ago: executing program 6 (id=17953): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") setgroups(0x1, &(0x7f0000000100)=[0xee00]) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 0s ago: executing program 3 (id=17954): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000800)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x977, 0x0, 0x4}}], 0x18, 0x24000001}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) kernel console output (not intermixed with test programs): slave_1: entered allmulticast mode [ 1450.998649][T10828] hfs: small file entry [ 1451.484321][ T6138] ocfs2: Unmounting device (7,5) on (node local) [ 1452.112008][T10826] loop0: detected capacity change from 0 to 40427 [ 1452.122030][T10826] F2FS-fs (loop0): invalid crc value [ 1452.345596][T10865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1452.466349][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16652'. [ 1452.542427][T10826] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1452.824268][T10826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1452.857770][T10879] loop6: detected capacity change from 0 to 2048 [ 1452.859337][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1452.942497][T10879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1452.979696][T10879] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #12: block 2: comm syz.6.16658: lblock 0 mapped to illegal pblock 2 (length 1) [ 1452.997767][T10879] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #12: block 2: comm syz.6.16658: lblock 0 mapped to illegal pblock 2 (length 1) [ 1453.019746][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1453.022363][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1453.028609][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1453.028663][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.037468][ T10] usb 6-1: config 0 descriptor?? [ 1453.039678][T10873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1453.259097][ T6124] syz-executor: attempt to access beyond end of device [ 1453.259097][ T6124] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1453.268487][T19295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.281687][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.281726][ T6124] Tainted: [L]=SOFTLOCKUP [ 1453.281736][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1453.281752][ T6124] Call Trace: [ 1453.281763][ T6124] [ 1453.281774][ T6124] dump_stack_lvl+0xe8/0x150 [ 1453.281817][ T6124] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1453.281860][ T6124] f2fs_write_end_bio+0x1211/0x16e0 [ 1453.281891][ T6124] ? blkg_put+0x22/0x240 [ 1453.281945][ T6124] __submit_merged_bio+0x258/0x6a0 [ 1453.281986][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282017][ T6124] ? rcu_is_watching+0x16/0xb0 [ 1453.282055][ T6124] __submit_merged_write_cond+0x3c9/0x4e0 [ 1453.282103][ T6124] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1453.282155][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282194][ T6124] f2fs_write_data_pages+0x2a27/0x36f0 [ 1453.282262][ T6124] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1453.282286][ T6124] ? is_bpf_text_address+0x26/0x2b0 [ 1453.282332][ T6124] ? arch_stack_walk+0xfb/0x150 [ 1453.282394][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282424][ T6124] ? add_lock_to_list+0xc7/0x100 [ 1453.282458][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282487][ T6124] ? __lock_acquire+0x1511/0x2de0 [ 1453.282544][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282574][ T6124] ? do_raw_spin_lock+0x12b/0x2f0 [ 1453.282615][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282650][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282679][ T6124] ? do_raw_spin_unlock+0xf5/0x200 [ 1453.282716][ T6124] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1453.282744][ T6124] do_writepages+0x338/0x560 [ 1453.282773][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282805][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282839][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.282868][ T6124] ? do_raw_spin_unlock+0xf5/0x200 [ 1453.282909][ T6124] filemap_fdatawrite+0x1e9/0x2f0 [ 1453.282942][ T6124] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1453.283023][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.283055][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.283090][ T6124] ? do_raw_spin_unlock+0xf5/0x200 [ 1453.283131][ T6124] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1453.283176][ T6124] f2fs_write_checkpoint+0xa3d/0x2710 [ 1453.283203][ T6124] ? __lock_acquire+0x747/0x2de0 [ 1453.283265][ T6124] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1453.283291][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.283377][ T6124] kill_f2fs_super+0x2dd/0x700 [ 1453.283414][ T6124] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1453.283454][ T6124] ? call_rcu+0x64d/0x8b0 [ 1453.283484][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.283512][ T6124] ? lockdep_hardirqs_on+0x7b/0x110 [ 1453.283550][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.283594][ T6124] deactivate_locked_super+0xbe/0x110 [ 1453.283633][ T6124] cleanup_mnt+0x3d3/0x460 [ 1453.283663][ T6124] task_work_run+0x1d9/0x270 [ 1453.283695][ T6124] ? __pfx_task_work_run+0x10/0x10 [ 1453.283735][ T6124] exit_to_user_mode_loop+0x204/0x770 [ 1453.283762][ T6124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.283790][ T6124] ? rcu_is_watching+0x16/0xb0 [ 1453.283826][ T6124] do_syscall_64+0x328/0x520 [ 1453.283859][ T6124] ? trace_irq_disable+0x3b/0x140 [ 1453.283886][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.283918][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.283944][ T6124] RIP: 0033:0x7fc36659f397 [ 1453.283973][ T6124] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1453.283994][ T6124] RSP: 002b:00007fff7a81cc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1453.284021][ T6124] RAX: 0000000000000000 RBX: 00007fc3666344bb RCX: 00007fc36659f397 [ 1453.284040][ T6124] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7a81cd50 [ 1453.284056][ T6124] RBP: 00007fff7a81cd50 R08: 00007fff7a81dd50 R09: 00000000ffffffff [ 1453.284074][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7a81dde0 [ 1453.284091][ T6124] R13: 00007fc3666344bb R14: 000000000014f827 R15: 00007fff7a81de20 [ 1453.284131][ T6124] [ 1453.334930][ T6124] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1453.498471][ T10] hid (null): bogus close delimiter [ 1453.570629][ T10] hid_parser_main: 43 callbacks suppressed [ 1453.570656][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570687][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570713][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570739][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570766][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570791][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570816][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570842][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570867][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.570893][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 1453.593556][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: bogus close delimiter [ 1453.593585][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: item 0 0 2 10 parsing failed [ 1453.605406][ T10] aquacomputer_d5next 0003:0C70:F00D.0020: probe with driver aquacomputer_d5next failed with error -22 [ 1453.780422][ T10] usb 6-1: USB disconnect, device number 23 [ 1454.014120][T10901] loop2: detected capacity change from 0 to 8 [ 1454.112218][T10899] loop6: detected capacity change from 0 to 736 [ 1454.698374][T10908] loop5: detected capacity change from 0 to 512 [ 1454.703561][T10908] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1454.748775][T10908] EXT4-fs (loop5): 1 truncate cleaned up [ 1454.766299][T10908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.869075][T10914] loop0: detected capacity change from 0 to 764 [ 1454.998970][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.052506][T10892] loop8: detected capacity change from 0 to 40427 [ 1455.053564][T10892] F2FS-fs: heap/no_heap options were deprecated [ 1455.059980][T10892] F2FS-fs (loop8): build fault injection rate: 19 [ 1455.060006][T10892] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 1455.079300][T10892] F2FS-fs (loop8): invalid crc value [ 1455.161239][T10892] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 1455.549943][T10892] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 1455.574181][T10892] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1455.665884][T10892] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1455.745736][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1455.882917][ T30] audit: type=1326 audit(1377.018:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.6.16674" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d4b9e159 code=0x7fc00000 [ 1455.927923][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1455.928668][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1455.929683][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1455.929710][ T10] usb 3-1: config 0 has no interface number 0 [ 1455.932405][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.932433][ T10] usb 3-1: Product: syz [ 1455.932452][ T10] usb 3-1: Manufacturer: syz [ 1455.932469][ T10] usb 3-1: SerialNumber: syz [ 1455.997823][ T10] usb 3-1: config 0 descriptor?? [ 1456.009089][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1456.009119][ T10] usb 3-1: selecting invalid altsetting 1 [ 1456.009139][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1456.040792][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1456.041134][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1456.041202][ T10] usb 3-1: media controller created [ 1456.108656][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1457.296146][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1457.299173][T10936] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 1457.303197][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1457.303629][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1457.428489][ T10] usb 3-1: USB disconnect, device number 13 [ 1457.919559][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16702'. [ 1457.932384][T10967] loop6: detected capacity change from 0 to 32768 [ 1458.108983][ T6235] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1458.283809][ T6235] usb 9-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1458.286840][ T6235] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1458.286869][ T6235] usb 9-1: config 0 has no interface number 0 [ 1458.286913][ T6235] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.286942][ T6235] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.286968][ T6235] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1458.288318][ T6235] usb 9-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1458.288346][ T6235] usb 9-1: Product: syz [ 1458.295757][ T6235] usb 9-1: config 0 descriptor?? [ 1458.792580][ T6235] chicony 0003:04F2:1421.0021: collection stack underflow [ 1458.792614][ T6235] chicony 0003:04F2:1421.0021: item 0 1 0 12 parsing failed [ 1458.793349][ T6235] chicony 0003:04F2:1421.0021: Chicony hid parse failed: -22 [ 1458.793428][ T6235] chicony 0003:04F2:1421.0021: probe with driver chicony failed with error -22 [ 1459.022465][T11003] loop0: detected capacity change from 0 to 4096 [ 1459.035336][ T6235] usb 9-1: USB disconnect, device number 13 [ 1459.228970][T11003] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1459.262702][T11003] ntfs3(loop0): failed to convert "0080" to cp437 [ 1459.308455][T11021] netlink: 'syz.2.16721': attribute type 1 has an invalid length. [ 1459.308499][T11021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1459.439093][T11003] ntfs3(loop0): failed to convert name for inode 1e. [ 1459.442296][T11003] ntfs3(loop0): ino=1f, mi_enum_attr [ 1459.442345][T11003] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1459.489426][T11025] loop6: detected capacity change from 0 to 1024 [ 1459.845026][T11034] CacheFiles: Failed to register: -2 [ 1460.135717][T11051] tipc: Started in network mode [ 1460.135755][T11051] tipc: Node identity ac1414aa, cluster identity 4711 [ 1460.165662][T11051] tipc: Enabled bearer , priority 10 [ 1460.266358][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16739'. [ 1460.266402][T11053] netlink: 84 bytes leftover after parsing attributes in process `syz.6.16739'. [ 1460.432933][T17181] Bluetooth: hci1: link tx timeout [ 1460.433278][T17181] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1460.447737][T17181] Bluetooth: hci1: link tx timeout [ 1460.447763][T17181] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1460.934489][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1461.113289][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1461.115449][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1461.118210][ T10] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1461.118248][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1461.118285][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.172559][ T10] usb 7-1: config 0 descriptor?? [ 1461.220755][ T2488] tipc: Node number set to 2886997162 [ 1461.230136][ T6350] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1461.250114][T11093] random: crng reseeded on system resumption [ 1461.390526][ T6350] usb 6-1: Using ep0 maxpacket: 32 [ 1461.394649][ T6350] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1461.396241][ T6350] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1461.396272][ T6350] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1461.396297][ T6350] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1461.396352][ T6350] usb 6-1: config 1 has no interface number 0 [ 1461.396397][ T6350] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1461.396429][ T6350] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1461.396504][ T6350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.495617][ T6350] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1461.649673][T11103] netlink: 'syz.0.16759': attribute type 1 has an invalid length. [ 1461.649699][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16759'. [ 1461.695467][ T6350] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1461.726685][ T10] hid_parser_main: 431 callbacks suppressed [ 1461.726715][ T10] lenovo 0003:17EF:60FE.0022: unknown main item tag 0x6 [ 1461.726830][ T10] lenovo 0003:17EF:60FE.0022: ignoring exceeding usage max [ 1461.763680][ T10] lenovo 0003:17EF:60FE.0022: hidraw0: USB HID v0.05 Device [HID 17ef:60fe] on usb-dummy_hcd.6-1/input0 [ 1461.902418][ T3212] usb 7-1: USB disconnect, device number 63 [ 1461.941703][ T6235] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1462.076225][ T6350] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1462.096035][ T6235] usb 4-1: Using ep0 maxpacket: 16 [ 1462.102161][ T6235] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 1462.104680][ T6235] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 1462.104707][ T6235] usb 4-1: config 32 has an invalid descriptor of length 134, skipping remainder of the config [ 1462.104731][ T6235] usb 4-1: config 32 has no interface number 0 [ 1462.104780][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.147979][ T6235] uvcvideo 4-1:32.64: probe with driver uvcvideo failed with error -22 [ 1462.168707][ T6235] usb 6-1: USB disconnect, device number 24 [ 1462.190694][ T6235] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1462.246913][ T6350] usb 3-1: Using ep0 maxpacket: 32 [ 1462.247665][ T6350] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1462.249755][ T6350] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1462.249783][ T6350] usb 3-1: config 0 has no interface number 0 [ 1462.252542][ T6350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.252570][ T6350] usb 3-1: Product: syz [ 1462.252587][ T6350] usb 3-1: Manufacturer: syz [ 1462.252605][ T6350] usb 3-1: SerialNumber: syz [ 1462.288956][ T6350] usb 3-1: config 0 descriptor?? [ 1462.304194][T11114] loop8: detected capacity change from 0 to 256 [ 1462.335914][ T6350] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1462.335949][ T6350] usb 3-1: selecting invalid altsetting 1 [ 1462.335968][ T6350] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1462.376771][ T3212] usb 4-1: USB disconnect, device number 6 [ 1462.384960][ T6350] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1462.385292][ T6350] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1462.385340][ T6350] usb 3-1: media controller created [ 1462.450687][ T6350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1462.542257][ T6350] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1462.542316][ T6350] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1462.542739][ T6350] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1462.598676][T17181] Bluetooth: hci1: command 0x0406 tx timeout [ 1462.659938][T11118] loop8: detected capacity change from 0 to 1024 [ 1462.661068][T11118] EXT4-fs: Ignoring removed mblk_io_submit option [ 1462.688222][ T6350] usb 3-1: USB disconnect, device number 14 [ 1462.817408][T11118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.889339][T11111] loop0: detected capacity change from 0 to 32768 [ 1462.903589][T11111] (syz.0.16764,11111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1462.917615][T11111] (syz.0.16764,11111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1462.922223][T11111] (syz.0.16764,11111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 1463.010197][T11111] JBD2: Ignoring recovery information on journal [ 1463.082851][T11111] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1463.140618][T11125] loop5: detected capacity change from 0 to 256 [ 1463.205568][T11125] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1463.241832][ T5966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.736791][ T6124] ocfs2: Unmounting device (7,0) on (node local) [ 1464.034315][T11146] loop0: detected capacity change from 0 to 512 [ 1464.041425][T11146] EXT4-fs: Ignoring removed nobh option [ 1464.109605][T11147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1464.134569][T11147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1464.135086][T11146] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #3: comm syz.0.16774: corrupted inode contents [ 1464.135115][T11146] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1464.136366][T11146] EXT4-fs (loop0): Remounting filesystem read-only [ 1464.137756][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1464.137777][ C1] EXT4-fs (loop0): initial error at time 1384: ext4_do_update_inode:5801: inode 3 [ 1464.137813][ C1] EXT4-fs (loop0): last error at time 1384: ext4_do_update_inode:5801: inode 3 [ 1464.138817][T11146] Quota error (device loop0): write_blk: dquota write failed [ 1464.138996][T11146] Quota error (device loop0): qtree_write_dquot: Error -30 occurred while creating quota [ 1464.143868][T11146] EXT4-fs (loop0): 1 truncate cleaned up [ 1464.156424][T11146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1464.355687][T11121] loop6: detected capacity change from 0 to 32768 [ 1464.356176][T11157] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1464.424388][T11121] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1464.451518][ T6124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.569599][T11121] XFS (loop6): Ending clean mount [ 1464.704642][ T6235] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1464.723683][T19295] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1464.729898][T11172] loop0: detected capacity change from 0 to 164 [ 1464.883444][ T6235] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1464.897040][ T6235] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1464.897088][ T6235] usb 3-1: config 1 has no interface number 0 [ 1464.897131][ T6235] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1464.897161][ T6235] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1464.897190][ T6235] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.917427][ T6235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.917460][ T6235] usb 3-1: Product: syz [ 1464.917478][ T6235] usb 3-1: Manufacturer: syz [ 1464.917496][ T6235] usb 3-1: SerialNumber: syz [ 1465.039798][T11166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1465.040406][ T3212] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1465.231073][ T3212] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1465.231132][ T3212] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1465.234347][ T3212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.234412][ T3212] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1465.234461][ T3212] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1465.237335][ T3212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.237363][ T3212] usb 4-1: Product: syz [ 1465.237411][ T3212] usb 4-1: Manufacturer: syz [ 1465.237430][ T3212] usb 4-1: SerialNumber: syz [ 1465.289431][ T3212] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1465.297353][T11166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1465.349919][T11179] loop5: detected capacity change from 0 to 512 [ 1465.406588][T11179] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1465.408000][T11179] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 1465.408051][T11179] loop5: lost filesystem error report for type 5 error -12 [ 1465.410077][ C1] EXT4-fs (loop5): initial error at time 1385: ext4_process_orphan:346 [ 1465.410110][ C1] EXT4-fs (loop5): last error at time 1385: ext4_process_orphan:346 [ 1465.491785][T11179] EXT4-fs (loop5): 1 truncate cleaned up [ 1465.500770][T11179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1465.671512][ T3212] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1465.675032][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.861685][ T6235] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1465.874781][ T3212] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1465.886887][ T6235] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1465.887024][ T6235] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1465.893765][ T6235] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1465.893796][ T6235] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1465.924185][ T6235] usb 3-1: USB disconnect, device number 15 [ 1465.963209][ T6235] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 1465.968997][T11192] futex_wake_op: syz.5.16795 tries to shift op by 144; fix this program [ 1465.969250][T11192] futex_wake_op: syz.5.16795 tries to shift op by 144; fix this program [ 1466.017479][ T3212] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -22 [ 1466.238737][ T3212] usb 4-1: USB disconnect, device number 7 [ 1466.276026][ T5967] Bluetooth: hci1: command 0x0406 tx timeout [ 1466.276082][ T5967] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.287902][ T6235] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1466.294568][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1466.423524][T11198] loop5: detected capacity change from 0 to 32768 [ 1466.478511][T11198] JBD2: Ignoring recovery information on journal [ 1466.542275][T11198] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1466.710230][T11212] loop2: detected capacity change from 0 to 512 [ 1466.725344][T11212] EXT4-fs: Ignoring removed orlov option [ 1466.804929][T11212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1466.823282][ T30] audit: type=1326 audit(1387.252:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d4b9e159 code=0x7ffc0000 [ 1466.823347][ T30] audit: type=1326 audit(1387.252:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d4b9e159 code=0x7ffc0000 [ 1466.849434][ T30] audit: type=1326 audit(1387.280:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d4b9e159 code=0x7ffc0000 [ 1466.849496][ T30] audit: type=1326 audit(1387.280:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d4b9e159 code=0x7ffc0000 [ 1466.874875][ T30] audit: type=1326 audit(1387.298:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f86d4b9e159 code=0x7ffc0000 [ 1467.002041][ T30] audit: type=1326 audit(1387.420:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86d4b5e98e code=0x7ffc0000 [ 1467.028860][ T30] audit: type=1326 audit(1387.429:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86d4b5e98e code=0x7ffc0000 [ 1467.028925][ T30] audit: type=1326 audit(1387.429:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.6.16806" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86d4b5e98e code=0x7ffc0000 [ 1467.194392][ T6126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.287737][T11224] loop8: detected capacity change from 0 to 1024 [ 1467.587250][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16811'. [ 1467.965795][ T6138] ocfs2: Unmounting device (7,5) on (node local) [ 1468.116361][T11245] loop8: detected capacity change from 0 to 4096 [ 1468.162896][T11247] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1468.318691][ T6235] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1468.496707][ T6235] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1468.498547][ T6235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1468.498592][ T6235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1468.498639][ T6235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.545182][ T6235] usb 3-1: config 0 descriptor?? [ 1468.545971][T11243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1468.827523][T11261] xt_hashlimit: size too large, truncated to 1048576 [ 1469.029692][ T6235] uclogic 0003:28BD:0078.0023: interface is invalid, ignoring [ 1469.186078][T11273] loop5: detected capacity change from 0 to 128 [ 1469.231758][T11274] loop0: detected capacity change from 0 to 512 [ 1469.252064][ T6235] usb 3-1: USB disconnect, device number 16 [ 1469.286674][T11274] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.16831: Attempting to read directory block (0) that is past i_size (16) [ 1469.286735][T11274] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1469.290636][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1469.290659][ C0] EXT4-fs (loop0): initial error at time 1389: dx_probe:791: inode 2 [ 1469.290692][ C0] EXT4-fs (loop0): last error at time 1389: dx_probe:791: inode 2 [ 1469.328786][T11274] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1469.339196][T11274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1469.552473][ T6124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.653146][T11270] set_capacity_and_notify: 1 callbacks suppressed [ 1469.653170][T11270] loop8: detected capacity change from 0 to 32768 [ 1469.755570][T11270] JBD2: Ignoring recovery information on journal [ 1469.901040][T11270] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1470.387043][T11298] loop0: detected capacity change from 0 to 512 [ 1470.638466][T11298] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1470.638493][T11298] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1470.682376][T11298] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1470.682483][T11298] System zones: 0-2, 18-18, 34-35 [ 1470.698339][T11298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1470.731744][ T5966] ocfs2: Unmounting device (7,8) on (node local) [ 1471.015708][ T6124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.388611][T11326] loop5: detected capacity change from 0 to 2048 [ 1471.406291][T11328] loop8: detected capacity change from 0 to 16 [ 1471.410365][T11328] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1471.435128][T11326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1471.535806][ T6604] udevd[6604]: incorrect cramfs checksum on /dev/loop8 [ 1471.598517][T11326] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1471.625045][ T6604] udevd[6604]: incorrect cramfs checksum on /dev/loop8 [ 1471.885495][T11342] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 1471.885495][T11342] program syz.8.16862 not setting count and/or reply_len properly [ 1472.327377][T11356] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 1472.359763][T11356] jffs2: notice: (11356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1472.583576][T11341] loop0: detected capacity change from 0 to 32768 [ 1472.619329][T11341] JBD2: Ignoring recovery information on journal [ 1472.805373][T11341] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1473.059303][T11369] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 1473.059303][T11369] program syz.8.16873 not setting count and/or reply_len properly [ 1473.208199][T11371] xt_hashlimit: overflow, try lower: 0/0 [ 1473.384283][T11377] loop6: detected capacity change from 0 to 512 [ 1473.402424][T11377] EXT4-fs: Ignoring removed nobh option [ 1473.403217][T11377] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1473.421089][T11377] EXT4-fs (loop6): 1 truncate cleaned up [ 1473.439158][T11377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1473.642790][T11380] loop5: detected capacity change from 0 to 512 [ 1473.649725][T11380] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1474.007751][T19295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.027741][ T6124] ocfs2: Unmounting device (7,0) on (node local) [ 1474.291875][T11395] loop5: detected capacity change from 0 to 1024 [ 1474.341959][T11401] loop8: detected capacity change from 0 to 512 [ 1474.364362][T11401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.386340][T11401] EXT4-fs warning (device loop8): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 1474.511151][ T5966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.915187][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1475.052073][T11418] bridge0: port 1(macsec1) entered blocking state [ 1475.052257][T11418] bridge0: port 1(macsec1) entered disabled state [ 1475.052406][T11418] macsec1: entered allmulticast mode [ 1475.052424][T11418] bridge0: entered allmulticast mode [ 1475.096668][ T10] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1475.097711][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.097746][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.097773][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.097804][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.097842][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.116688][T11420] comedi comedi3: 8255: I/O base address not correctly aligned [ 1475.174114][ T10] usb 4-1: config 0 descriptor?? [ 1475.201625][T11418] macsec1: left allmulticast mode [ 1475.201655][T11418] bridge0: left allmulticast mode [ 1475.641714][ T10] samsung 0003:0419:0600.0024: nested delimiters [ 1475.641742][ T10] samsung 0003:0419:0600.0024: item 0 4 2 10 parsing failed [ 1475.642500][ T10] samsung 0003:0419:0600.0024: parse failed [ 1475.642615][ T10] samsung 0003:0419:0600.0024: probe with driver samsung failed with error -22 [ 1475.871431][ T6235] usb 4-1: USB disconnect, device number 8 [ 1476.053611][T11413] loop5: detected capacity change from 0 to 32768 [ 1476.102790][T11413] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1476.166254][T11413] XFS (loop5): Ending clean mount [ 1476.203055][T11413] XFS (loop5): Quotacheck needed: Please wait. [ 1476.221433][T11442] option changes via remount are deprecated (pid=11439 comm=syz.2.16906) [ 1476.272727][T11452] netlink: 64 bytes leftover after parsing attributes in process `syz.8.16908'. [ 1476.408863][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16909'. [ 1476.505475][T11458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1476.820925][T11413] XFS (loop5): Quotacheck: Done. [ 1476.951287][ T6138] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1477.147932][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1477.257739][ T6350] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1477.367177][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1477.367950][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1477.368981][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.369014][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.369055][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.372129][ T10] usb 4-1: config 0 descriptor?? [ 1477.456173][ T6350] usb 9-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1477.457610][ T6350] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.457645][ T6350] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1477.457704][ T6350] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1477.457741][ T6350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.536188][ T6350] usb 9-1: config 0 descriptor?? [ 1477.638237][T11469] loop6: detected capacity change from 0 to 32768 [ 1477.658123][T11469] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16915 (11469) [ 1477.678106][T11469] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1477.678143][T11469] BTRFS info (device loop6): using sha256 checksum algorithm [ 1477.794182][T11469] BTRFS info (device loop6): enabling ssd optimizations [ 1477.794215][T11469] BTRFS info (device loop6): turning on async discard [ 1477.794237][T11469] BTRFS info (device loop6): enabling free space tree [ 1477.958072][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958112][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958167][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958193][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958219][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958244][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958269][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958324][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958350][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1477.958375][ T10] apple 0003:05AC:024B.0025: unknown main item tag 0x0 [ 1478.042740][ T10] apple 0003:05AC:024B.0025: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 1478.102113][ T6350] itetech 0003:06CB:73F5.0026: hidraw1: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.8-1/input0 [ 1478.189697][ T6255] usb 4-1: USB disconnect, device number 9 [ 1478.299791][ T6235] usb 9-1: USB disconnect, device number 14 [ 1478.341530][T11499] fido_id[11499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1478.388171][T11495] loop2: detected capacity change from 0 to 4096 [ 1478.509238][T11497] fido_id[11497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1478.593837][T19295] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1478.594881][T11501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1479.175289][T11511] netlink: 133536 bytes leftover after parsing attributes in process `syz.3.16928'. [ 1479.894800][T11524] vlan2: entered promiscuous mode [ 1479.894827][T11524] team0: entered promiscuous mode [ 1479.894843][T11524] team_slave_0: entered promiscuous mode [ 1479.895086][T11524] team_slave_1: entered promiscuous mode [ 1480.016289][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1480.199482][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 1480.200705][ T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 1480.200740][ T10] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.200771][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1480.200808][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.204277][ T10] usb 6-1: config 0 descriptor?? [ 1480.743813][ T10] apple 0003:05AC:029F.0027: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.5-1/input0 [ 1480.901791][T11553] loop2: detected capacity change from 0 to 2048 [ 1480.963397][ T10] usb 6-1: USB disconnect, device number 25 [ 1481.007324][T11560] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1481.172080][T11557] fido_id[11557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1481.750096][T11575] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[19295] was attempted by " "[11575] [ 1482.173144][T11588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1482.173164][T11588] IPv6: NLM_F_CREATE should be set when creating new route [ 1482.173214][T11588] IPv6: NLM_F_CREATE should be set when creating new route [ 1482.173242][T11588] IPv6: NLM_F_CREATE should be set when creating new route [ 1482.181382][T11588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1482.236059][T11584] loop2: detected capacity change from 0 to 4096 [ 1482.289556][T11591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1482.294486][T11590] loop5: detected capacity change from 0 to 64 [ 1482.684749][T11597] @: renamed from veth0 [ 1482.801918][T11599] loop5: detected capacity change from 0 to 512 [ 1483.121912][T11581] loop0: detected capacity change from 0 to 32768 [ 1483.209625][T11611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16973'. [ 1483.589725][T11625] netlink: 'syz.0.16979': attribute type 4 has an invalid length. [ 1483.589751][T11625] netlink: 17 bytes leftover after parsing attributes in process `syz.0.16979'. [ 1483.764451][T11632] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16981'. [ 1483.764479][T11632] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16981'. [ 1483.764495][T11632] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 1484.117948][T11639] loop8: detected capacity change from 0 to 4096 [ 1484.200478][T11648] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1485.050452][T11631] loop2: detected capacity change from 0 to 32768 [ 1485.111999][T11631] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1485.194439][T11631] XFS (loop2): Ending clean mount [ 1485.212623][T11670] netlink: Failed to add €Â helper -22 [ 1485.212690][T11670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.308160][T11682] can0: slcan on ttyS3. [ 1485.427717][ T6126] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1485.800237][T11683] can0 (unregistered): slcan off ttyS3. [ 1486.322948][ T6350] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1486.323159][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1486.424280][T11697] loop8: detected capacity change from 0 to 32768 [ 1486.484271][T11697] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1486.504175][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1486.505106][ T6350] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1486.505833][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1486.506839][ T6350] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1486.506874][ T6350] usb 4-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.506905][ T6350] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1486.506942][ T6350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.508517][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 1486.508568][ T10] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1486.508600][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1486.508635][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.514746][ T10] usb 6-1: config 0 descriptor?? [ 1486.613437][ T6350] usb 4-1: config 0 descriptor?? [ 1486.623328][T11702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1486.657880][T11697] XFS (loop8): Ending clean mount [ 1486.741875][ T5966] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1486.770969][ T3212] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1486.930216][ T3212] usb 3-1: Using ep0 maxpacket: 8 [ 1486.931092][ T3212] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1486.932189][ T3212] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1486.936583][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.936611][ T3212] usb 3-1: Product: syz [ 1486.936630][ T3212] usb 3-1: Manufacturer: syz [ 1486.936648][ T3212] usb 3-1: SerialNumber: syz [ 1486.960783][ T10] hid_parser_main: 72 callbacks suppressed [ 1486.960810][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.960932][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.960959][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.960983][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961016][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961044][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961099][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961132][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961160][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961185][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 1486.961270][ T10] hid-u2fzero 0003:10C4:8ACF.0028: unbalanced collection at end of report description [ 1486.962720][ T10] hid-u2fzero 0003:10C4:8ACF.0028: probe with driver hid-u2fzero failed with error -22 [ 1487.075059][ T3212] usb 3-1: config 0 descriptor?? [ 1487.109111][ T3212] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1487.109166][ T3212] usb 3-1: setting power ON [ 1487.109187][ T3212] dvb-usb: bulk message failed: -22 (2/0) [ 1487.141385][ T3212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1487.142066][ T3212] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1487.142120][ T3212] usb 3-1: media controller created [ 1487.150866][ T6350] ortek 0003:1223:3F07.0029: global environment stack underflow [ 1487.150889][ T6350] ortek 0003:1223:3F07.0029: item 0 2 1 11 parsing failed [ 1487.162974][ T6350] ortek 0003:1223:3F07.0029: probe with driver ortek failed with error -22 [ 1487.204969][ T3212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.276346][ T6350] usb 6-1: USB disconnect, device number 26 [ 1487.277265][ T3212] usb 3-1: selecting invalid altsetting 6 [ 1487.277287][ T3212] usb 3-1: digital interface selection failed (-22) [ 1487.277304][ T3212] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1487.279020][ T3212] usb 3-1: setting power OFF [ 1487.279085][ T3212] dvb-usb: bulk message failed: -22 (2/0) [ 1487.279103][ T3212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1487.279118][ T3212] (NULL device *): no alternate interface [ 1487.367491][T11713] dvb-usb: bulk message failed: -22 (4/0) [ 1487.367518][T11713] cxusb: i2c read failed [ 1487.420784][ T3212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1487.430589][T11723] usb 4-1: USB disconnect, device number 10 [ 1487.451624][ T3212] usb 3-1: USB disconnect, device number 17 [ 1487.950568][T11747] loop5: detected capacity change from 0 to 128 [ 1487.984304][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1487.984327][ T30] audit: type=1800 audit(1407.054:1194): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.17026" name="file1" dev="loop5" ino=1048884 res=0 errno=0 [ 1488.312617][T11723] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1488.439665][ T30] audit: type=1326 audit(1407.484:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.439822][ T30] audit: type=1326 audit(1407.484:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.443760][ T30] audit: type=1326 audit(1407.484:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.444046][ T30] audit: type=1326 audit(1407.484:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.444374][ T30] audit: type=1326 audit(1407.484:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36655e98e code=0x7ffc0000 [ 1488.446256][ T30] audit: type=1326 audit(1407.484:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.451537][T11766] loop2: detected capacity change from 0 to 64 [ 1488.474685][ T30] audit: type=1326 audit(1407.494:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.474752][ T30] audit: type=1326 audit(1407.494:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.474804][ T30] audit: type=1326 audit(1407.494:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.0.17034" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1488.504428][T11723] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1488.507920][T11723] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1488.507948][T11723] usb 7-1: config 1 has no interface number 0 [ 1488.531148][T11723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.531181][T11723] usb 7-1: Product: syz [ 1488.531199][T11723] usb 7-1: Manufacturer: syz [ 1488.531217][T11723] usb 7-1: SerialNumber: syz [ 1488.586824][T11723] usb 7-1: 3:1 : does not exist [ 1488.592691][T11723] usb 7-1: 3:2 : does not exist [ 1489.009506][T11723] usb 7-1: USB disconnect, device number 64 [ 1489.225137][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17041'. [ 1489.225166][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17041'. [ 1489.259539][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.272297][T11815] loop2: detected capacity change from 0 to 512 [ 1490.291472][T11815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1490.318524][T11815] EXT4-fs (loop2): 1 truncate cleaned up [ 1490.331615][T11815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1490.556332][T11799] loop5: detected capacity change from 0 to 32768 [ 1490.624790][T11815] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.17057: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 1490.655064][T11794] loop6: detected capacity change from 0 to 32768 [ 1490.656224][T11794] xfs: Deprecated parameter 'noattr2' [ 1490.656242][T11794] XFS: noattr2 mount option is deprecated. [ 1490.692485][T11794] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1490.745106][T11815] EXT4-fs (loop2): Remounting filesystem read-only [ 1490.747479][T11815] overlayfs: failed to create directory ./file0/work (errno: 30); mounting read-only [ 1490.747836][T11815] overlayfs: failed to set uuid (/bus, err=-30); falling back to uuid=null. [ 1490.763875][T11794] XFS (loop6): Ending clean mount [ 1490.959803][T19295] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1491.051150][ T6126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.055945][T11840] loop8: detected capacity change from 0 to 16 [ 1491.081509][T11840] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1491.145346][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17064'. [ 1491.145524][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17064'. [ 1491.146050][T11840] loop8: detected capacity change from 0 to 8 [ 1491.184082][T11840] Major/Minor mismatch, trying to mount newer 256.0 filesystem [ 1491.184109][T11840] Please update your kernel [ 1491.734507][ T3212] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1491.905743][ T3212] usb 7-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 1491.913649][ T3212] usb 7-1: config 4 has an invalid interface number: 12 but max is 0 [ 1491.913680][ T3212] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.913703][ T3212] usb 7-1: config 4 has no interface number 0 [ 1491.913747][ T3212] usb 7-1: config 4 interface 12 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1491.913778][ T3212] usb 7-1: config 4 interface 12 has no altsetting 0 [ 1491.916926][ T3212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.916954][ T3212] usb 7-1: Product: syz [ 1491.916971][ T3212] usb 7-1: Manufacturer: syz [ 1491.916989][ T3212] usb 7-1: SerialNumber: syz [ 1492.183771][ T3212] cdc_acm 7-1:4.12: More than one union descriptor, skipping ... [ 1492.203691][ T3212] usb 7-1: USB disconnect, device number 65 [ 1492.368821][T11871] random: crng reseeded on system resumption [ 1492.435401][T11874] netlink: 271 bytes leftover after parsing attributes in process `syz.3.17078'. [ 1492.750811][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17085'. [ 1493.020526][T11895] loop8: detected capacity change from 0 to 2048 [ 1493.032330][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17091'. [ 1493.094460][T11902] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1493.127470][T11900] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1493.129145][T11899] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17090'. [ 1493.129172][T11899] tipc: Enabling of bearer rejected, media not registered [ 1493.356394][T11895] NILFS error (device loop8): nilfs_dotdot: directory #12 missing '..' [ 1493.378825][T11895] Remounting filesystem read-only [ 1493.446924][ T5966] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 1493.884064][T11934] loop8: detected capacity change from 0 to 1024 [ 1493.908064][T11934] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1494.308226][T11945] loop8: detected capacity change from 0 to 256 [ 1494.324264][T11945] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1494.324286][T11945] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1494.407389][T11945] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1494.409358][T11945] exFAT-fs (loop8): failed to load alloc-bitmap [ 1494.409374][T11945] exFAT-fs (loop8): failed to recognize exfat type [ 1495.405220][T11985] loop2: detected capacity change from 0 to 64 [ 1496.020786][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17140'. [ 1496.822178][T12042] loop2: detected capacity change from 0 to 64 [ 1497.110088][ T25] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1497.279213][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 1497.291412][ T25] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1497.292637][ T25] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1497.292671][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1497.292701][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1497.292725][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1497.292753][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1497.297497][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.297528][ T25] usb 7-1: Product: syz [ 1497.297546][ T25] usb 7-1: Manufacturer: syz [ 1497.297563][ T25] usb 7-1: SerialNumber: syz [ 1497.301931][ T25] usb 7-1: config 0 descriptor?? [ 1497.855762][T12050] loop5: detected capacity change from 0 to 40427 [ 1497.857165][T12050] F2FS-fs: heap/no_heap options were deprecated [ 1497.880934][T12050] F2FS-fs (loop5): build fault injection rate: 19 [ 1497.880961][T12050] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 1497.899588][T12050] F2FS-fs (loop5): invalid crc value [ 1497.945911][T12050] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 1497.962964][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1497.963025][ T25] input input87: Device does not respond to id packet P [ 1497.965148][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1497.965197][ T25] input input87: Device does not respond to id packet B [ 1497.967285][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1497.967333][ T25] input input87: Device does not respond to id packet N [ 1497.971333][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1497.973419][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1497.990708][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1497.991283][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1498.062648][ T25] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input87 [ 1498.125503][T12050] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 1498.132713][T12050] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1498.184193][ T25] usb 7-1: USB disconnect, device number 66 [ 1498.406987][T12050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1498.652238][T12050] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 1498.729988][T12085] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140 [ 1498.879385][T12093] loop0: detected capacity change from 0 to 128 [ 1498.927704][T12093] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1498.927744][T12093] hpfs: filesystem error: improperly stopped [ 1498.927762][T12093] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1498.927780][T12093] hpfs: You really don't want any checks? You are crazy... [ 1498.927795][T12093] hpfs: Code page index out of array [ 1498.927804][T12093] hpfs: code page support is disabled [ 1498.929808][T12093] hpfs: hpfs_map_4sectors(): unaligned read [ 1498.929887][T12093] hpfs: hpfs_map_4sectors(): unaligned read [ 1498.929900][T12093] hpfs: filesystem error: unable to find root dir [ 1498.961746][T12094] vlan3: entered promiscuous mode [ 1499.043953][T12093] hpfs: hpfs_map_4sectors(): unaligned read [ 1499.106301][ T6138] syz-executor: attempt to access beyond end of device [ 1499.106301][ T6138] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1499.128017][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.128069][ T6138] Tainted: [L]=SOFTLOCKUP [ 1499.128080][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1499.128095][ T6138] Call Trace: [ 1499.128106][ T6138] [ 1499.128118][ T6138] dump_stack_lvl+0xe8/0x150 [ 1499.128161][ T6138] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1499.128206][ T6138] f2fs_write_end_bio+0x1211/0x16e0 [ 1499.128238][ T6138] ? blkg_put+0x22/0x240 [ 1499.128292][ T6138] __submit_merged_bio+0x258/0x6a0 [ 1499.128326][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.128357][ T6138] ? rcu_is_watching+0x16/0xb0 [ 1499.128396][ T6138] f2fs_submit_merged_write+0x27d/0x380 [ 1499.128440][ T6138] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1499.128485][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.128524][ T6138] f2fs_sync_node_pages+0x1055/0x1210 [ 1499.128559][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.128613][ T6138] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1499.128689][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.128729][ T6138] f2fs_write_checkpoint+0xf91/0x2710 [ 1499.128756][ T6138] ? __lock_acquire+0x747/0x2de0 [ 1499.128822][ T6138] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1499.128848][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.128943][ T6138] kill_f2fs_super+0x2dd/0x700 [ 1499.128982][ T6138] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1499.129024][ T6138] ? call_rcu+0x64d/0x8b0 [ 1499.129054][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.129084][ T6138] ? lockdep_hardirqs_on+0x7b/0x110 [ 1499.129118][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.129164][ T6138] deactivate_locked_super+0xbe/0x110 [ 1499.129204][ T6138] cleanup_mnt+0x3d3/0x460 [ 1499.129237][ T6138] task_work_run+0x1d9/0x270 [ 1499.129270][ T6138] ? __pfx_task_work_run+0x10/0x10 [ 1499.129311][ T6138] exit_to_user_mode_loop+0x204/0x770 [ 1499.129338][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.129368][ T6138] ? rcu_is_watching+0x16/0xb0 [ 1499.129404][ T6138] do_syscall_64+0x328/0x520 [ 1499.129437][ T6138] ? trace_irq_disable+0x3b/0x140 [ 1499.129464][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.129498][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.129523][ T6138] RIP: 0033:0x7f250399f397 [ 1499.129548][ T6138] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1499.129569][ T6138] RSP: 002b:00007ffd0e6d8a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1499.129596][ T6138] RAX: 0000000000000000 RBX: 00007f2503a344bb RCX: 00007f250399f397 [ 1499.129615][ T6138] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0e6d8ac0 [ 1499.129631][ T6138] RBP: 00007ffd0e6d8ac0 R08: 00007ffd0e6d9ac0 R09: 00000000ffffffff [ 1499.129650][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0e6d9b50 [ 1499.129667][ T6138] R13: 00007f2503a344bb R14: 0000000000159fb6 R15: 00007ffd0e6d9b90 [ 1499.129707][ T6138] [ 1499.178559][ T6138] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1499.178722][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.178756][ T6138] Tainted: [L]=SOFTLOCKUP [ 1499.178766][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1499.178782][ T6138] Call Trace: [ 1499.178794][ T6138] [ 1499.178805][ T6138] dump_stack_lvl+0xe8/0x150 [ 1499.178848][ T6138] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1499.178892][ T6138] f2fs_write_end_bio+0x1211/0x16e0 [ 1499.178946][ T6138] __submit_merged_bio+0x258/0x6a0 [ 1499.178982][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179013][ T6138] ? rcu_is_watching+0x16/0xb0 [ 1499.179052][ T6138] f2fs_submit_merged_write+0x27d/0x380 [ 1499.179095][ T6138] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1499.179140][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179180][ T6138] f2fs_sync_node_pages+0x1055/0x1210 [ 1499.179216][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179269][ T6138] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1499.179345][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179385][ T6138] f2fs_write_checkpoint+0xf91/0x2710 [ 1499.179412][ T6138] ? __lock_acquire+0x747/0x2de0 [ 1499.179482][ T6138] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1499.179509][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179602][ T6138] kill_f2fs_super+0x2dd/0x700 [ 1499.179640][ T6138] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1499.179681][ T6138] ? call_rcu+0x64d/0x8b0 [ 1499.179712][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179741][ T6138] ? lockdep_hardirqs_on+0x7b/0x110 [ 1499.179776][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.179822][ T6138] deactivate_locked_super+0xbe/0x110 [ 1499.179862][ T6138] cleanup_mnt+0x3d3/0x460 [ 1499.179894][ T6138] task_work_run+0x1d9/0x270 [ 1499.179928][ T6138] ? __pfx_task_work_run+0x10/0x10 [ 1499.179969][ T6138] exit_to_user_mode_loop+0x204/0x770 [ 1499.179996][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.180026][ T6138] ? rcu_is_watching+0x16/0xb0 [ 1499.180066][ T6138] do_syscall_64+0x328/0x520 [ 1499.180100][ T6138] ? trace_irq_disable+0x3b/0x140 [ 1499.180126][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.180160][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.180187][ T6138] RIP: 0033:0x7f250399f397 [ 1499.180211][ T6138] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1499.180232][ T6138] RSP: 002b:00007ffd0e6d8a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1499.180260][ T6138] RAX: 0000000000000000 RBX: 00007f2503a344bb RCX: 00007f250399f397 [ 1499.180277][ T6138] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0e6d8ac0 [ 1499.180294][ T6138] RBP: 00007ffd0e6d8ac0 R08: 00007ffd0e6d9ac0 R09: 00000000ffffffff [ 1499.180313][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0e6d9b50 [ 1499.180330][ T6138] R13: 00007f2503a344bb R14: 0000000000159fb6 R15: 00007ffd0e6d9b90 [ 1499.180370][ T6138] [ 1499.202524][ T6138] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1499.902316][T12079] loop8: detected capacity change from 0 to 32768 [ 1500.041141][T12079] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1500.222865][T12119] loop0: detected capacity change from 0 to 256 [ 1500.312405][T12119] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1500.326910][T12079] XFS (loop8): Ending clean mount [ 1500.394073][T12079] XFS (loop8): Quotacheck needed: Please wait. [ 1500.799999][T12079] XFS (loop8): Quotacheck: Done. [ 1500.899583][T12137] tipc: Enabling of bearer rejected, failed to enable media [ 1500.953979][ T5966] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1500.971427][T12141] team0: entered allmulticast mode [ 1500.971454][T12141] team_slave_0: entered allmulticast mode [ 1500.971475][T12141] team_slave_1: entered allmulticast mode [ 1500.972250][T12141] team0: Cannot enslave team device to itself [ 1501.487571][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1501.487595][ T30] audit: type=1326 audit(1419.682:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.2.17205" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2015f9e159 code=0x0 [ 1501.955979][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17198'. [ 1502.110666][T12175] can0: slcan on ptm0. [ 1502.208625][T12174] can0 (unregistered): slcan off ptm0. [ 1502.407594][T17181] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1503.419666][T12230] loop8: detected capacity change from 0 to 1024 [ 1503.757354][T12245] usb usb7: check_ctrlrecip: process 12245 (syz.6.17244) requesting ep 01 but needs 81 [ 1504.005009][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17247'. [ 1504.056789][T12256] loop2: detected capacity change from 0 to 512 [ 1504.060741][T12251] macsec1: entered promiscuous mode [ 1504.061114][T12256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1504.135195][T12256] EXT4-fs (loop2): 1 truncate cleaned up [ 1504.138893][T12256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1504.365913][T12264] loop5: detected capacity change from 0 to 512 [ 1504.384742][T12264] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1504.425697][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1504.434397][T12264] EXT4-fs (loop5): 1 truncate cleaned up [ 1504.447859][T12264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1504.475523][T12256] EXT4-fs: can't change dax mount option while remounting [ 1504.555574][ T6126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.608625][T12271] netlink: 'syz.0.17255': attribute type 2 has an invalid length. [ 1504.709128][T12271] : entered promiscuous mode [ 1504.761343][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.994117][T12280] loop8: detected capacity change from 0 to 1024 [ 1505.095037][T12280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.288811][T12280] EXT4-fs (loop8): stripe (536871160) is not aligned with cluster size (16), stripe is disabled [ 1505.407256][T12280] EXT4-fs (loop8): can't enable nombcache during remount [ 1505.577342][T12302] loop0: detected capacity change from 0 to 512 [ 1505.579197][T12302] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1505.609816][T12302] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.17271: inode has both inline data and extents flags [ 1505.609877][T12302] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1505.610141][T12302] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.17271: couldn't read orphan inode 15 (err -117) [ 1505.610174][T12302] loop0: lost filesystem error report for type 5 error -117 [ 1505.619163][T12302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1505.666005][ T5966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.849407][T12302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.892738][T12314] loop8: detected capacity change from 0 to 256 [ 1505.897729][T12314] exfat: Deprecated parameter 'namecase' [ 1505.897790][T12314] exfat: Deprecated parameter 'utf8' [ 1505.962880][T12314] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1506.381610][ T30] audit: type=1326 audit(1424.265:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.381778][ T30] audit: type=1326 audit(1424.265:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.441907][ T30] audit: type=1326 audit(1424.322:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.442076][ T30] audit: type=1326 audit(1424.322:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.442308][ T30] audit: type=1326 audit(1424.322:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.442461][ T30] audit: type=1326 audit(1424.322:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.442683][ T30] audit: type=1326 audit(1424.322:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.443059][ T30] audit: type=1326 audit(1424.322:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.443373][ T30] audit: type=1326 audit(1424.322:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.5.17281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1506.748826][T12336] loop5: detected capacity change from 0 to 512 [ 1506.773633][T12331] loop6: detected capacity change from 0 to 4096 [ 1506.827381][T12336] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.17286: corrupted in-inode xattr: invalid ea_ino [ 1506.827423][T12336] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1506.830483][T12336] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.17286: couldn't read orphan inode 15 (err -117) [ 1506.830517][T12336] loop5: lost filesystem error report for type 5 error -117 [ 1506.852401][T12336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.108193][T12331] ntfs3(loop6): ino=1f, mi_enum_attr [ 1507.430631][T12354] netlink: 'syz.2.17290': attribute type 30 has an invalid length. [ 1507.430660][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17290'. [ 1507.472087][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.681329][ T6350] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1507.770796][T12366] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1507.770836][T12366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1507.863796][ T6350] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1507.868306][ T6350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.868334][ T6350] usb 4-1: Product: syz [ 1507.868350][ T6350] usb 4-1: Manufacturer: syz [ 1507.868368][ T6350] usb 4-1: SerialNumber: syz [ 1507.910389][ T6350] usb 4-1: config 0 descriptor?? [ 1507.915097][ T6350] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1507.956711][ T6350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1507.968914][ T6350] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1507.968981][ T6350] usb 4-1: media controller created [ 1507.998322][ T6350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1508.100199][ T6350] DVB: Unable to find symbol mt352_attach() [ 1508.171321][T12351] dvb-usb: bulk message failed: -22 (7/0) [ 1508.338621][ T6350] DVB: Unable to find symbol nxt6000_attach() [ 1508.338641][ T6350] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1508.375198][ T6350] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input88 [ 1508.398316][ T6350] dvb-usb: schedule remote query interval to 1000 msecs. [ 1508.398341][ T6350] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1508.398361][ T6350] dvb-usb: bulk message failed: -22 (7/0) [ 1508.398378][ T6350] dvb-usb: bulk message failed: -22 (7/0) [ 1508.404284][ T6350] usb 4-1: USB disconnect, device number 11 [ 1508.500266][ T6350] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1508.550343][T12386] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 1508.550343][T12386] program syz.0.17303 not setting count and/or reply_len properly [ 1508.581496][T12390] loop5: detected capacity change from 0 to 2048 [ 1508.645390][T12390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.871672][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.089520][T12405] loop6: detected capacity change from 0 to 256 [ 1509.312453][T12409] bridge0: port 3(macsec1) entered blocking state [ 1509.312574][T12409] bridge0: port 3(macsec1) entered disabled state [ 1509.312736][T12409] macsec1: entered allmulticast mode [ 1509.312754][T12409] bridge0: entered allmulticast mode [ 1509.336240][T12414] loop8: detected capacity change from 0 to 512 [ 1509.367115][T12409] macsec1: left allmulticast mode [ 1509.367143][T12409] bridge0: left allmulticast mode [ 1509.412039][T12414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.219203][T12406] loop2: detected capacity change from 0 to 32768 [ 1510.265687][T12406] JBD2: Ignoring recovery information on journal [ 1510.353676][T12406] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1510.419147][ T5966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.676751][ T6126] ocfs2: Unmounting device (7,2) on (node local) [ 1510.802484][T12449] loop8: detected capacity change from 0 to 8 [ 1511.067658][T12449] SQUASHFS error: Unable to read directory block [2c0:35] [ 1511.248899][T12455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.835011][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17343'. [ 1512.000092][ T3212] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1512.102926][T12482] loop0: detected capacity change from 0 to 136 [ 1512.116466][T12482] Attempt to read inode for relocated directory [ 1512.162243][ T3212] usb 9-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1512.164956][ T3212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.164992][ T3212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.165018][ T3212] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1512.165065][ T3212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.168590][ T3212] usb 9-1: config 0 descriptor?? [ 1512.233207][T12484] loop6: detected capacity change from 0 to 24 [ 1512.244347][T12484] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1512.258003][T12484] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1512.368627][T12478] loop5: detected capacity change from 0 to 32768 [ 1512.370435][T12478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.17347 (12478) [ 1512.483368][T12478] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1512.483409][T12478] BTRFS info (device loop5): using crc32c checksum algorithm [ 1512.561505][T12497] loop6: detected capacity change from 0 to 16 [ 1512.580481][T12497] erofs (device loop6): mounted with root inode @ nid 36. [ 1512.621415][ T3212] hid_parser_main: 6 callbacks suppressed [ 1512.621444][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621482][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621507][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621533][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621558][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621583][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621609][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621634][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621659][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.621683][ T3212] elecom 0003:056E:010C.002A: unknown main item tag 0x0 [ 1512.648396][ T3212] elecom 0003:056E:010C.002A: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.8-1/input0 [ 1512.909920][T12478] BTRFS info (device loop5): enabling ssd optimizations [ 1512.909955][T12478] BTRFS info (device loop5): turning on flush-on-commit [ 1512.909975][T12478] BTRFS info (device loop5): enabling free space tree [ 1512.909995][T12478] BTRFS info (device loop5): enabling auto defrag [ 1512.911798][T12478] BTRFS info (device loop5): use lzo compression, level 1 [ 1512.911828][T12478] BTRFS info (device loop5): max_inline set to 0 [ 1512.913732][ T3212] usb 9-1: USB disconnect, device number 15 [ 1513.238061][ T6138] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1513.797544][T12530] tmpfs: Invalid gid '0x00000000ffffffff' [ 1514.209734][T12540] loop5: detected capacity change from 0 to 1024 [ 1514.279237][T12540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1514.563223][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.243398][T12551] loop8: detected capacity change from 0 to 40427 [ 1515.250943][T12551] F2FS-fs: heap/no_heap options were deprecated [ 1515.269121][T12551] F2FS-fs (loop8): build fault injection rate: 19 [ 1515.269149][T12551] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 1515.272877][T12551] F2FS-fs (loop8): invalid crc value [ 1515.437566][T12551] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 1515.716790][T12551] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 1515.759446][T12551] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1515.801957][T12576] loop5: detected capacity change from 0 to 64 [ 1515.881402][T12551] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1517.221287][T12608] loop2: detected capacity change from 0 to 1024 [ 1517.235858][T12608] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1517.263198][T12608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1517.588974][ T6126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.763969][T12632] loop6: detected capacity change from 0 to 512 [ 1517.819646][T12632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1517.852207][T12632] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.17409: Unimplemented hash flags: 0x0001 [ 1517.852247][T12632] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17409: Corrupt directory, running e2fsck is recommended [ 1517.852973][T12632] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 3: comm syz.6.17409: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 1518.242041][T19295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.702755][T12627] loop8: detected capacity change from 0 to 32768 [ 1518.706295][T12627] xfs: Deprecated parameter 'ikeep' [ 1518.706317][T12627] XFS: ikeep mount option is deprecated. [ 1518.734378][T12627] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1518.738087][T12627] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1518.897065][T12627] XFS (loop8): Ending clean mount [ 1518.901222][T12627] XFS (loop8): Quotacheck needed: Please wait. [ 1518.996483][T12673] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1519.095138][ T13] XFS (loop8): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 1519.095191][ T13] XFS (loop8): Unmount and run xfs_repair [ 1519.095207][ T13] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 1519.095228][ T13] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 1519.095248][ T13] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 1519.095267][ T13] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 1519.095286][ T13] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 1519.095304][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1519.095323][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1519.095342][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1519.095360][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1519.095381][ T13] XFS (loop8): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 1519.095625][ T13] loop8: lost filesystem error report for type 5 error -117 [ 1519.186390][T12627] XFS (loop8): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1519.186659][T12627] loop8: lost filesystem error report for type 5 error -117 [ 1519.432304][T12646] loop6: detected capacity change from 0 to 32768 [ 1519.515616][T12646] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1519.678778][ T5966] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1519.706709][T12646] XFS (loop6): Ending clean mount [ 1519.769874][ T5966] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair. [ 1519.828937][T12703] loop5: detected capacity change from 0 to 1024 [ 1519.859701][T12703] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1519.908487][T12703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1520.071092][T12703] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.17431: bg 0: block 153: padding at end of block bitmap is not set [ 1520.129050][T12709] bridge_slave_1: invalid flags given to default FDB implementation [ 1520.209079][T19295] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1520.427986][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.802097][T12720] loop5: detected capacity change from 0 to 512 [ 1520.883661][T12720] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.17439: Directory hole found for htree index block 0 [ 1520.883703][T12720] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1520.884049][T12720] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1520.886104][T12720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.911376][T12720] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1521.041615][T12720] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1521.234676][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.502357][T12736] loop5: detected capacity change from 0 to 1764 [ 1521.505721][T12736] iso9660: Unexpected value for 'showassoc' [ 1521.581495][T12736] smb3: Unknown parameter 'overriderockperm' [ 1522.433035][T12774] loop5: detected capacity change from 0 to 512 [ 1522.510033][T12774] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 1522.510171][T12774] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1522.510210][T12774] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.17464: Failed to acquire dquot type 1 [ 1522.510236][T12774] loop5: lost filesystem error report for type 5 error -117 [ 1522.525765][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1522.525797][ C0] EXT4-fs (loop5): last error at time 1439: ext4_acquire_dquot:7069 [ 1522.608296][T12774] EXT4-fs (loop5): 1 truncate cleaned up [ 1522.631053][T12774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1522.762623][ T2796] Bluetooth: hci6: Frame reassembly failed (-84) [ 1522.955770][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.316448][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17476'. [ 1523.318963][ T30] audit: type=1326 audit(1440.102:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.319131][ T30] audit: type=1326 audit(1440.102:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.336247][ T30] audit: type=1326 audit(1440.120:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.343098][ T30] audit: type=1326 audit(1440.120:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.343700][ T30] audit: type=1326 audit(1440.130:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.343756][ T30] audit: type=1326 audit(1440.130:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.343805][ T30] audit: type=1326 audit(1440.130:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.349083][ T30] audit: type=1326 audit(1440.130:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.0.17477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1523.953336][ T3212] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1524.048329][T11723] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1524.171867][ T3212] usb 6-1: Using ep0 maxpacket: 8 [ 1524.197868][ T3212] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1524.202733][ T3212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.230610][ T3212] usb 6-1: config 0 descriptor?? [ 1524.239400][ T3212] usb 6-1: probing VID:PID(0424:012C) [ 1524.240534][T11723] usb 9-1: Using ep0 maxpacket: 8 [ 1524.253388][T11723] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1524.269380][T11723] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1524.271901][T11723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.271929][T11723] usb 9-1: Product: syz [ 1524.271948][T11723] usb 9-1: Manufacturer: syz [ 1524.271966][T11723] usb 9-1: SerialNumber: syz [ 1524.281152][T12838] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1524.316206][ T3212] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1524.316238][ T3212] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1524.316259][ T3212] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1524.316279][ T3212] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1524.316318][ T3212] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1524.360418][T11723] usb 9-1: config 0 descriptor?? [ 1524.364184][T11723] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1524.364246][T11723] usb 9-1: setting power ON [ 1524.364266][T11723] dvb-usb: bulk message failed: -22 (2/0) [ 1524.388199][T11723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1524.404646][T11723] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1524.404710][T11723] usb 9-1: media controller created [ 1524.432653][T11723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1524.472691][T11723] usb 9-1: selecting invalid altsetting 6 [ 1524.472724][T11723] usb 9-1: digital interface selection failed (-22) [ 1524.472743][T11723] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1524.473547][T11723] usb 9-1: setting power OFF [ 1524.473570][T11723] dvb-usb: bulk message failed: -22 (2/0) [ 1524.473589][T11723] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1524.473609][T11723] (NULL device *): no alternate interface [ 1524.582006][T11723] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1524.611679][T11723] usb 9-1: USB disconnect, device number 16 [ 1524.719530][ T3212] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1524.794744][T17181] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1524.851136][T12847] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17494'. [ 1525.031396][ T3212] vub300 6-1:0.0: probe with driver vub300 failed with error -71 [ 1525.072190][ T3212] usb 6-1: USB disconnect, device number 27 [ 1525.343734][ T6350] logitech-hidpp-device 0005:046D:B012.002B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1525.754016][T12862] fido_id[12862]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1526.162332][T12849] loop0: detected capacity change from 0 to 32768 [ 1526.172996][T12849] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17495 (12849) [ 1526.199889][T12849] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1526.199927][T12849] BTRFS info (device loop0): using sha256 checksum algorithm [ 1526.253220][T12858] loop2: detected capacity change from 0 to 32768 [ 1526.286129][ T6350] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1526.324174][T12849] BTRFS info (device loop0): rebuilding free space tree [ 1526.412217][T12849] BTRFS info (device loop0): turning on sync discard [ 1526.412249][T12849] BTRFS info (device loop0): enabling free space tree [ 1526.412269][T12849] BTRFS info (device loop0): force clearing of disk cache [ 1526.468189][ T6350] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1526.485287][ T6350] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.485459][ T6350] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1526.485510][ T6350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.781729][ T6350] rtsx_usb 6-1:1.0: probe with driver rtsx_usb failed with error -71 [ 1526.833291][ T6350] usb 6-1: USB disconnect, device number 28 [ 1527.293563][ T6124] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1527.543696][T12913] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17518'. [ 1528.223548][T12929] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1528.351745][T12931] netlink: 256 bytes leftover after parsing attributes in process `syz.5.17525'. [ 1528.351777][T12931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17525'. [ 1528.699129][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17527'. [ 1528.847771][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1528.847796][ T30] audit: type=1326 audit(1445.274:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1528.847855][ T30] audit: type=1326 audit(1445.274:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1528.847906][ T30] audit: type=1326 audit(1445.274:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1528.847958][ T30] audit: type=1326 audit(1445.274:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1528.848147][ T30] audit: type=1326 audit(1445.274:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1528.848199][ T30] audit: type=1326 audit(1445.274:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1529.037229][ T30] audit: type=1326 audit(1445.452:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1529.037371][ T30] audit: type=1326 audit(1445.452:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1529.038016][ T30] audit: type=1326 audit(1445.452:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc36655e98e code=0x7ffc0000 [ 1529.161727][T12926] loop8: detected capacity change from 0 to 32768 [ 1529.174883][ T30] audit: type=1326 audit(1445.583:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.0.17529" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36659e159 code=0x7ffc0000 [ 1529.175910][T12926] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.17523 (12926) [ 1529.221915][T12926] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1529.221983][T12926] BTRFS info (device loop8): using crc32c checksum algorithm [ 1529.388168][T12926] BTRFS info (device loop8): enabling ssd optimizations [ 1529.388204][T12926] BTRFS info (device loop8): turning on async discard [ 1529.388225][T12926] BTRFS info (device loop8): enabling free space tree [ 1529.644817][ T5966] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1529.982093][ T3212] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1530.144690][ T3212] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1530.152148][ T3212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1530.152180][ T3212] usb 6-1: Product: syz [ 1530.152213][ T3212] usb 6-1: Manufacturer: syz [ 1530.238709][T12989] loop6: detected capacity change from 0 to 256 [ 1530.241750][T12989] exfat: Deprecated parameter 'namecase' [ 1530.241898][T12989] exfat: Deprecated parameter 'namecase' [ 1530.248350][T12989] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 1531.067768][ T3212] scsi host1: uas [ 1531.151707][ C0] usb 6-1: stat urb: no pending cmd for uas-tag 78 [ 1531.368723][ C0] usb 6-1: cmd cmplt err -71 [ 1531.370280][ T3212] usb 6-1: USB disconnect, device number 29 [ 1531.386224][ T3212] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1531.386286][ T3212] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 1531.749341][T13022] loop8: detected capacity change from 0 to 32768 [ 1531.763967][T13022] (syz.8.17556,13022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1531.766014][T13022] (syz.8.17556,13022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1531.829058][T13022] JBD2: Ignoring recovery information on journal [ 1531.903599][T13022] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1531.932025][T13022] (syz.8.17556,13022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4d558a87, computed 0x1734b5e7. Applying ECC. [ 1531.932075][T13022] (syz.8.17556,13022,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4d558a87, computed 0x7466ecf [ 1531.932108][T13022] (syz.8.17556,13022,0):ocfs2_read_virt_blocks:1037 ERROR: status = -5 [ 1531.932134][T13022] (syz.8.17556,13022,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 1531.932159][T13022] (syz.8.17556,13022,0):ocfs2_load_local_quota_bitmaps:269 ERROR: status = -5 [ 1531.932202][T13022] (syz.8.17556,13022,0):ocfs2_local_read_info:761 ERROR: status = -5 [ 1531.936805][T13022] (syz.8.17556,13022,0):ocfs2_enable_quotas:943 ERROR: status = -5 [ 1531.936835][T13022] (syz.8.17556,13022,0):ocfs2_fill_super:1144 ERROR: status = -5 [ 1532.195348][T13022] ocfs2: Unmounting device (7,8) on (node local) [ 1532.320691][T13040] tmpfs: Cannot disable swap on remount [ 1532.658115][T13053] loop5: detected capacity change from 0 to 1024 [ 1532.671557][T13053] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1533.318535][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1533.488708][ T10] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1533.489873][ T10] usb 9-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.492951][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.492979][ T10] usb 9-1: Product: syz [ 1533.492996][ T10] usb 9-1: Manufacturer: syz [ 1533.493014][ T10] usb 9-1: SerialNumber: syz [ 1533.565042][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1533.565103][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1533.601627][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1533.603020][ T10] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1533.603076][ T10] usb 9-1: media controller created [ 1533.646316][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1533.729385][ T10] DVB: Unable to find symbol mt352_attach() [ 1533.729405][ T10] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1533.730197][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1533.754213][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1533.789928][ T10] usb 9-1: USB disconnect, device number 17 [ 1533.858410][T13079] CUSE: info not properly terminated [ 1533.888118][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1534.127591][T13082] loop2: detected capacity change from 0 to 128 [ 1534.225989][T13082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1534.447241][ T6126] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1535.310610][T13110] IPVS: Error connecting to the multicast addr [ 1535.474198][T13122] loop8: detected capacity change from 0 to 8192 [ 1535.805319][T13131] loop0: detected capacity change from 0 to 2048 [ 1535.864740][T13136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1536.062688][T13141] loop8: detected capacity change from 0 to 256 [ 1536.629649][T13158] loop2: detected capacity change from 0 to 512 [ 1537.295964][T13179] hugetlbfs: Bad value for 'nr_inodes' [ 1537.516968][T13190] loop8: detected capacity change from 0 to 16 [ 1537.646907][T13190] erofs (device loop8): mounted with root inode @ nid 36. [ 1537.689691][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1537.689714][ T30] audit: type=1800 audit(1453.553:1271): pid=13190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.17636" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1538.236530][T13203] loop6: detected capacity change from 0 to 4096 [ 1538.978331][T13223] loop0: detected capacity change from 0 to 2048 [ 1539.019673][T13223] NILFS (loop0): invalid segment: Magic number mismatch [ 1539.019706][T13223] NILFS (loop0): trying rollback from an earlier position [ 1539.075111][T13223] NILFS (loop0): recovery complete [ 1539.085812][T13224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1539.660396][T13206] loop2: detected capacity change from 0 to 32768 [ 1539.712611][T13206] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1539.807690][T13206] XFS (loop2): Ending clean mount [ 1539.831623][T13250] netlink: 220 bytes leftover after parsing attributes in process `syz.8.17657'. [ 1539.831653][T13250] NCSI netlink: No device for ifindex 0 [ 1539.967962][T13255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1540.068305][ T6126] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1540.339747][T13259] loop8: detected capacity change from 0 to 512 [ 1540.403335][T13259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1540.853837][ T5966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.569421][T13291] loop8: detected capacity change from 0 to 164 [ 1541.599410][T13291] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1541.624018][T13291] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1541.953661][T13298] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1542.684495][T13289] loop2: detected capacity change from 0 to 32768 [ 1544.323088][T13358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1545.138484][ T30] audit: type=1326 audit(1460.512:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.17715" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1545.138648][ T30] audit: type=1326 audit(1460.512:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.17715" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1545.192522][ T30] audit: type=1326 audit(1460.559:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.17715" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1545.192654][ T30] audit: type=1326 audit(1460.559:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.17715" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1545.192815][ T30] audit: type=1326 audit(1460.559:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.17715" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250399e159 code=0x7ffc0000 [ 1545.360597][T13376] loop2: detected capacity change from 0 to 256 [ 1545.380059][T13376] exfat: Deprecated parameter 'utf8' [ 1545.380120][T13376] exfat: Deprecated parameter 'namecase' [ 1545.380230][T13376] exfat: Deprecated parameter 'namecase' [ 1545.380259][T13376] exfat: Deprecated parameter 'utf8' [ 1545.443123][T13376] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc89da420, utbl_chksum : 0xe619d30d) [ 1545.443608][T13376] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1545.783714][T13384] netlink: 36 bytes leftover after parsing attributes in process `syz.8.17720'. [ 1545.922581][T13389] loop5: detected capacity change from 0 to 512 [ 1545.939319][T13390] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1545.961370][T13389] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 1545.961403][T13389] loop5: lost filesystem error report for type 5 error -12 [ 1545.964819][ C0] EXT4-fs (loop5): initial error at time 1461: ext4_process_orphan:346 [ 1545.964853][ C0] EXT4-fs (loop5): last error at time 1461: ext4_process_orphan:346 [ 1546.005179][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17724'. [ 1546.040022][T13389] EXT4-fs (loop5): 2 truncates cleaned up [ 1546.067409][T13389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.087288][T13394] macvtap1: entered allmulticast mode [ 1546.087318][T13394] dummy0: entered allmulticast mode [ 1546.087568][T13394] dummy0: entered promiscuous mode [ 1546.133323][T13394] dummy0: left allmulticast mode [ 1546.330002][T13389] EXT4-fs: Cannot specify journal on remount [ 1546.448273][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.582509][ T6235] dummy0: left promiscuous mode [ 1546.984791][T13417] netlink: 277 bytes leftover after parsing attributes in process `syz.6.17735'. [ 1546.995673][T13413] loop8: detected capacity change from 0 to 1024 [ 1547.603223][T13436] ip_tables: iptables: counters copy to user failed while replacing table [ 1547.884313][T13444] loop2: detected capacity change from 0 to 256 [ 1547.885536][T13444] exfat: Deprecated parameter 'utf8' [ 1547.934889][T13444] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1547.944339][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17748'. [ 1548.361174][T13459] CUSE: unknown device info "" [ 1548.361195][T13459] CUSE: zero length info key specified [ 1548.563615][T13464] ip_tables: iptables: counters copy to user failed while replacing table [ 1548.582214][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1548.743511][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1548.744294][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1548.746233][ T10] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.746269][ T10] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1548.746301][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1548.746338][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.750330][ T10] usb 6-1: config 0 descriptor?? [ 1549.231612][ T10] elecom 0003:056E:00FD.002C: item 0 4 0 11 parsing failed [ 1549.232516][ T10] elecom 0003:056E:00FD.002C: probe with driver elecom failed with error -22 [ 1549.416348][ T10] usb 6-1: USB disconnect, device number 30 [ 1550.021713][T13501] tipc: Started in network mode [ 1550.021733][T13501] tipc: Node identity _, cluster identity 4711 [ 1550.021786][T13501] tipc: Enabling of bearer rejected, failed to enable media [ 1550.218273][T13505] loop5: detected capacity change from 0 to 256 [ 1550.407576][T13509] wg0: entered promiscuous mode [ 1550.407722][T13509] team0: Device wg0 is of different type [ 1550.534366][T13509] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1551.226942][T13533] loop6: detected capacity change from 0 to 1024 [ 1551.236338][T13533] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1551.559036][T13543] loop0: detected capacity change from 0 to 64 [ 1551.797938][T13519] loop5: detected capacity change from 0 to 32768 [ 1551.819233][T13519] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.17779 (13519) [ 1551.843343][T13519] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1551.843379][T13519] BTRFS info (device loop5): using crc32c checksum algorithm [ 1552.142352][T13519] BTRFS info (device loop5): setting nodatasum [ 1552.142405][T13519] BTRFS info (device loop5): setting nodatacow [ 1552.142424][T13519] BTRFS info (device loop5): enabling ssd optimizations [ 1552.142471][T13519] BTRFS info (device loop5): turning on flush-on-commit [ 1552.142492][T13519] BTRFS info (device loop5): turning on async discard [ 1552.142511][T13519] BTRFS info (device loop5): enabling free space tree [ 1553.825826][ T6138] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1554.063764][T13575] loop2: detected capacity change from 0 to 256 [ 1555.119252][T13588] loop2: detected capacity change from 0 to 4096 [ 1556.092230][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17816'. [ 1556.283222][T11723] kernel write not supported for file /uhid (pid: 11723 comm: kworker/0:0) [ 1556.595294][T13622] loop0: detected capacity change from 0 to 4096 [ 1556.671175][T13628] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1556.753885][T13599] loop8: detected capacity change from 0 to 32768 [ 1556.801437][T13599] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1557.015966][T13599] XFS (loop8): Ending clean mount [ 1557.268174][ T5966] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1557.356991][T13648] loop0: detected capacity change from 0 to 256 [ 1557.465844][T13648] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1557.805629][T13656] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17833'. [ 1557.807968][T13656] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17833'. [ 1557.998726][T13659] netlink: 'syz.0.17834': attribute type 32 has an invalid length. [ 1557.998778][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17834'. [ 1558.002451][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1558.163237][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1558.164387][ T25] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1558.166112][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.166149][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1558.234768][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.234804][ T25] usb 4-1: Product: syz [ 1558.234822][ T25] usb 4-1: Manufacturer: syz [ 1558.234840][ T25] usb 4-1: SerialNumber: syz [ 1558.246734][ T25] usb 4-1: config 0 descriptor?? [ 1558.519688][T13659] bond3: Setting coupled_control to off (0) [ 1558.607798][T13673] loop5: detected capacity change from 0 to 64 [ 1558.691309][T13673] syz.5.17838: attempt to access beyond end of device [ 1558.691309][T13673] loop5: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 1558.734530][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1558.950344][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1558.973939][T13676] syz.5.17838: attempt to access beyond end of device [ 1558.973939][T13676] loop5: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 1559.126130][ T25] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input90 [ 1559.367601][T13687] loop8: detected capacity change from 0 to 1024 [ 1559.435164][T13687] EXT4-fs: Ignoring removed orlov option [ 1559.459202][ T25] imon:send_packet: packet tx failed (-71) [ 1559.477264][ T25] imon 4-1:0.0: panel buttons/knobs setup failed [ 1559.482557][T13687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1559.808307][ T25] rc_core: IR keymap rc-imon-pad not found [ 1559.808330][ T25] Registered IR keymap rc-empty [ 1559.808415][ T25] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1559.808437][ T25] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1559.823231][ T25] imon:send_packet: packet tx failed (-71) [ 1559.843271][ T25] imon 4-1:0.0: remote input dev register failed [ 1559.843439][ T25] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1560.088857][ T5966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.512584][T13708] loop2: detected capacity change from 0 to 4096 [ 1560.585937][T13718] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1560.662567][ T25] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1560.662594][ T25] imon:imon_probe: failed to initialize context! [ 1560.662609][ T25] imon 4-1:0.0: unable to register, err -19 [ 1560.748616][ T25] usb 4-1: USB disconnect, device number 12 [ 1560.880843][T13721] loop8: detected capacity change from 0 to 1764 [ 1560.938764][T13721] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1561.545739][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17866'. [ 1561.586388][T13702] loop5: detected capacity change from 0 to 32768 [ 1562.073010][T13741] netlink: 36 bytes leftover after parsing attributes in process `syz.8.17870'. [ 1562.357862][T13719] loop0: detected capacity change from 0 to 32768 [ 1562.630229][T13753] loop5: detected capacity change from 0 to 2048 [ 1562.724311][T13753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1562.972961][T13759] usb usb8: usbfs: process 13759 (syz.8.17879) did not claim interface 0 before use [ 1563.098260][T13761] loop2: detected capacity change from 0 to 256 [ 1563.099331][T13761] exfat: Deprecated parameter 'utf8' [ 1563.099385][T13761] exfat: Deprecated parameter 'namecase' [ 1563.099492][T13761] exfat: Deprecated parameter 'namecase' [ 1563.099519][T13761] exfat: Deprecated parameter 'utf8' [ 1563.234175][T13761] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1563.234573][T13761] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1563.803482][T13775] loop6: detected capacity change from 0 to 2048 [ 1563.817944][T13775] EXT4-fs: Ignoring removed i_version option [ 1563.876925][T13775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.101287][T19295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.443255][T13795] netlink: 72 bytes leftover after parsing attributes in process `syz.6.17894'. [ 1564.492452][T13796] loop5: detected capacity change from 0 to 512 [ 1564.534272][T13796] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.17896: bad orphan inode 15 [ 1564.534308][T13796] loop5: lost filesystem error report for type 5 error -117 [ 1564.538144][T13796] ext4_test_bit(bit=14, block=5) = 0 [ 1564.561457][T13796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.567874][T13798] loop0: detected capacity change from 0 to 256 [ 1564.569243][T13798] exfat: Deprecated parameter 'utf8' [ 1564.580234][T13798] exfat: Deprecated parameter 'namecase' [ 1564.580310][T13798] exfat: Deprecated parameter 'namecase' [ 1564.659952][T13798] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1564.916485][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.841613][ T6350] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1566.019337][ T6350] usb 9-1: Using ep0 maxpacket: 16 [ 1566.030951][ T6350] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1566.049384][ T6350] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1566.049440][ T6350] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1566.049487][ T6350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.091385][ T6350] usb 9-1: config 0 descriptor?? [ 1566.487339][T13856] loop2: detected capacity change from 0 to 24 [ 1566.543798][ T6350] magicmouse 0003:05AC:0269.002D: reserved main item tag 0xe [ 1566.543836][ T6350] magicmouse 0003:05AC:0269.002D: item fetching failed at offset 36/40 [ 1566.544673][ T6350] magicmouse 0003:05AC:0269.002D: magicmouse hid parse failed [ 1566.544800][ T6350] magicmouse 0003:05AC:0269.002D: probe with driver magicmouse failed with error -22 [ 1566.756574][ T6350] usb 9-1: USB disconnect, device number 18 [ 1566.871555][T13860] loop0: detected capacity change from 0 to 512 [ 1566.872649][T13860] EXT4-fs: Ignoring removed orlov option [ 1566.911406][T13860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1566.911957][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17927'. [ 1566.955748][T13862] macvlan2: entered promiscuous mode [ 1567.019088][ T6124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.194649][T13867] loop0: detected capacity change from 0 to 512 [ 1567.215239][T13867] EXT4-fs: Ignoring removed bh option [ 1567.225358][T13867] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1567.246067][T13867] EXT4-fs (loop0): 1 truncate cleaned up [ 1567.260787][T13867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1567.318499][T13867] EXT4-fs error (device loop0): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.0.17929: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1567.364439][T13867] EXT4-fs error (device loop0) in ext4_delete_entry:2746: Corrupt filesystem [ 1567.366114][T13867] EXT4-fs warning (device loop0): ext4_rename_delete:3741: inode #2: comm syz.0.17929: Deleting old file: nlink 4, error=-117 [ 1567.518912][T13871] ip_tables: iptables: counters copy to user failed while replacing table [ 1567.617278][ T6124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.000863][T13879] loop2: detected capacity change from 0 to 4096 [ 1568.048511][T13882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1568.708937][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17943'. [ 1569.749836][T13900] loop2: detected capacity change from 0 to 32768 [ 1681.862746][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1681.869728][ C1] rcu: 0-...!: (1 GPs behind) idle=245c/1/0x4000000000000000 softirq=242024/242024 fqs=10 [ 1681.879892][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13914/1:b..l [ 1681.887894][ C1] rcu: (detected by 1, t=10502 jiffies, g=283813, q=256 ncpus=2) [ 1681.895705][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1681.901266][ C0] NMI backtrace for cpu 0 [ 1681.901289][ C0] CPU: 0 UID: 0 PID: 19295 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1681.901321][ C0] Tainted: [L]=SOFTLOCKUP [ 1681.901330][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1681.901345][ C0] RIP: 0010:lock_is_held_type+0xe4/0x150 [ 1681.901383][ C0] Code: 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 a5 f1 69 8e e8 61 1b 00 00 b8 ff ff ff ff <65> 0f c1 05 ac 2c af 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 [ 1681.901403][ C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00000006 [ 1681.901424][ C0] RAX: 00000000ffffffff RBX: 0000000000000001 RCX: 8000000001000003 [ 1681.901441][ C0] RDX: 8000000001000001 RSI: ffffffff8e69f1a5 RDI: ffffffff8c6dad80 [ 1681.901459][ C0] RBP: 00000000ffffffff R08: 0000000001000001 R09: ffff888054f40308 [ 1681.901476][ C0] R10: dffffc0000000000 R11: ffffed100a9e8063 R12: 0000000000000046 [ 1681.901493][ C0] R13: ffff888028e6be80 R14: ffff8880b8628298 R15: 0000000000000007 [ 1681.901514][ C0] FS: 000055557e828500(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 1681.901535][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.901551][ C0] CR2: 00007faa6235da08 CR3: 0000000069e7e000 CR4: 0000000000350ef0 [ 1681.901571][ C0] Call Trace: [ 1681.901582][ C0] [ 1681.901597][ C0] __hrtimer_run_queues+0x20b/0xa10 [ 1681.901643][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 1681.901693][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1681.901725][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1681.901756][ C0] [ 1681.901764][ C0] [ 1681.901774][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1681.901800][ C0] RIP: 0010:copy_pmd_range+0x1eb7/0x5c10 [ 1681.901838][ C0] Code: e8 7e d5 18 00 49 8b 44 24 08 89 c3 83 e3 01 48 ff cb 48 09 c3 4c 21 e3 48 83 c3 30 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 <0f> 85 82 25 00 00 0f b6 5b 03 c1 e3 18 bf 00 00 00 f4 89 de e8 e0 [ 1681.901857][ C0] RSP: 0018:ffffc9000d4572e0 EFLAGS: 00000246 [ 1681.901877][ C0] RAX: 0000000000000000 RBX: ffffea0001997b30 RCX: ffff888028e6be80 [ 1681.901894][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1681.901909][ C0] RBP: ffffc9000d457570 R08: ffffea0001997b33 R09: 1ffffd4000332f66 [ 1681.901927][ C0] R10: dffffc0000000000 R11: fffff94000332f67 R12: ffffea0001997b00 [ 1681.901945][ C0] R13: ffffea0001997b00 R14: ffffea0001997b00 R15: dffffc0000000000 [ 1681.901977][ C0] ? anon_vma_clone+0x3f3/0x9f0 [ 1681.902017][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902055][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1681.902093][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902120][ C0] ? lock_acquire+0x115/0x350 [ 1681.902151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902181][ C0] copy_page_range+0xc82/0x1290 [ 1681.902226][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1681.902255][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902283][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902310][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1681.902352][ C0] dup_mmap+0xf17/0x1dc0 [ 1681.902398][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1681.902433][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902460][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1681.902500][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902528][ C0] ? lock_acquire+0x115/0x350 [ 1681.902552][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902616][ C0] copy_mm+0x11a/0x480 [ 1681.902649][ C0] copy_process+0x1e79/0x4400 [ 1681.902679][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.902712][ C0] ? __lock_acquire+0x747/0x2de0 [ 1681.902743][ C0] ? copy_process+0xd16/0x4400 [ 1681.902784][ C0] ? __pfx_copy_process+0x10/0x10 [ 1681.902823][ C0] kernel_clone+0x2d7/0x940 [ 1681.902859][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1681.902903][ C0] __x64_sys_clone+0x1b6/0x230 [ 1681.902939][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1681.902983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1681.903011][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 1681.903041][ C0] do_syscall_64+0x166/0x520 [ 1681.903073][ C0] ? trace_irq_disable+0x3b/0x140 [ 1681.903097][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.903124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.903148][ C0] RIP: 0033:0x7f86d4bc6bd2 [ 1681.903171][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1681.903190][ C0] RSP: 002b:00007fffe07740e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1681.903221][ C0] RAX: ffffffffffffffda RBX: 00007fffe07740e0 RCX: 00007f86d4bc6bd2 [ 1681.903239][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1681.903254][ C0] RBP: 00007fffe077426c R08: 0000000000000000 R09: 0000000000000001 [ 1681.903269][ C0] R10: 000055557e8287d0 R11: 0000000000000246 R12: 0000000000000001 [ 1681.903285][ C0] R13: 00000000000927c0 R14: 000000000016a19f R15: 00007fffe07742c0 [ 1681.903312][ C0] [ 1682.401430][ C1] task:syz.8.17951 state:R running task stack:25352 pid:13914 tgid:13913 ppid:5966 task_flags:0x400040 flags:0x00080000 [ 1682.415064][ C1] Call Trace: [ 1682.418606][ C1] [ 1682.421544][ C1] __schedule+0x17db/0x58f0 [ 1682.426080][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.431736][ C1] ? __lock_acquire+0x747/0x2de0 [ 1682.436683][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.442596][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.448254][ C1] ? __lock_acquire+0x747/0x2de0 [ 1682.453198][ C1] ? __pfx___schedule+0x10/0x10 [ 1682.458237][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.463967][ C1] ? __lock_acquire+0x747/0x2de0 [ 1682.469106][ C1] preempt_schedule_irq+0x4b/0x90 [ 1682.474250][ C1] irqentry_exit+0x14f/0x910 [ 1682.479339][ C1] ? trace_irq_disable+0x3b/0x140 [ 1682.484673][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1682.490840][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1682.496285][ C1] Code: ff ff ff e8 40 5c 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 62 47 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 2a 08 6d ff cc 48 8d 3d 97 64 da [ 1682.516179][ C1] RSP: 0018:ffffc90005cff0c0 EFLAGS: 00000296 [ 1682.522268][ C1] RAX: 3927b52fdf33ad00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1682.530335][ C1] RDX: 0000000051ad6281 RSI: ffffffff8e69f1a5 RDI: ffffffff8c6dad80 [ 1682.538520][ C1] RBP: ffff88801b715dc0 R08: ffffffff8177f1df R09: 0000000000000000 [ 1682.546494][ C1] R10: dffffc0000000000 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 1682.554475][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1682.562485][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1682.568663][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1682.573893][ C1] ? __set_page_owner+0x8d/0x4c0 [ 1682.578850][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1682.583968][ C1] unwind_next_frame+0xac/0x2550 [ 1682.588922][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1682.594049][ C1] ? save_stack+0x122/0x230 [ 1682.598553][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1682.603681][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1682.609836][ C1] arch_stack_walk+0x11b/0x150 [ 1682.614787][ C1] ? __set_page_owner+0x8d/0x4c0 [ 1682.619747][ C1] stack_trace_save+0xa9/0x100 [ 1682.624512][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1682.629888][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.635626][ C1] save_stack+0x122/0x230 [ 1682.639961][ C1] ? __pfx_save_stack+0x10/0x10 [ 1682.644811][ C1] ? __lock_acquire+0x747/0x2de0 [ 1682.649765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.655507][ C1] __set_page_owner+0x8d/0x4c0 [ 1682.660287][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1682.665741][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1682.671867][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.677712][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1682.682942][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.688682][ C1] post_alloc_hook+0x1f9/0x250 [ 1682.693491][ C1] get_page_from_freelist+0x2209/0x2280 [ 1682.699214][ C1] ? lock_acquire+0x115/0x350 [ 1682.704002][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.709686][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.715522][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1682.721359][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1682.728417][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1682.734438][ C1] alloc_pages_mpol+0x21e/0x390 [ 1682.739407][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 1682.744943][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1682.750678][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 1682.755731][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.761375][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1682.767650][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1682.773121][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.778763][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1682.785020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.790750][ C1] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 1682.796854][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 1682.802085][ C1] shmem_write_begin+0x16c/0x330 [ 1682.807114][ C1] generic_perform_write+0x2d5/0x8f0 [ 1682.812517][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1682.818343][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.824073][ C1] ? preempt_count_add+0x6a/0x140 [ 1682.829139][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.834833][ C1] ? mnt_put_write_access_file+0xbc/0x100 [ 1682.840824][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.846492][ C1] ? file_update_time_flags+0x3ab/0x440 [ 1682.852395][ C1] shmem_file_write_iter+0xf8/0x120 [ 1682.858049][ C1] vfs_write+0x612/0xba0 [ 1682.862321][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1682.867424][ C1] ? __fget_files+0x2a/0x420 [ 1682.872135][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.877784][ C1] ksys_write+0x150/0x270 [ 1682.882320][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1682.887188][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.892844][ C1] do_syscall_64+0x166/0x520 [ 1682.897474][ C1] ? trace_irq_disable+0x3b/0x140 [ 1682.902604][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.908698][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.914623][ C1] RIP: 0033:0x7f2dc215e98e [ 1682.919042][ C1] RSP: 002b:00007f2dc3136da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1682.927790][ C1] RAX: ffffffffffffffda RBX: 00007f2dc31376c0 RCX: 00007f2dc215e98e [ 1682.936074][ C1] RDX: 0000000000200000 RSI: 00007f2db7e00000 RDI: 0000000000000003 [ 1682.944156][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1682.952176][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1682.960158][ C1] R13: 00007f2dc3136ee0 R14: 00007f2dc3136ea0 R15: 00007f2db7e00000 [ 1682.968158][ C1] [ 1682.971175][ C1] rcu: rcu_preempt kthread starved for 10481 jiffies! g283813 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1682.982289][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1682.992279][ C1] rcu: RCU grace-period kthread stack dump: [ 1682.998165][ C1] task:rcu_preempt state:R running task stack:27696 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1683.011909][ C1] Call Trace: [ 1683.015191][ C1] [ 1683.018130][ C1] __schedule+0x17db/0x58f0 [ 1683.022738][ C1] ? __lock_acquire+0x747/0x2de0 [ 1683.027737][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1683.032958][ C1] ? __pfx___schedule+0x10/0x10 [ 1683.037920][ C1] ? lock_acquire+0x115/0x350 [ 1683.042698][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.048379][ C1] ? schedule+0x90/0x2b0 [ 1683.052656][ C1] schedule+0x164/0x2b0 [ 1683.056866][ C1] schedule_timeout+0x152/0x2c0 [ 1683.061817][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1683.067230][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1683.072990][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.079254][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1683.085100][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.090830][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1683.096420][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1683.101374][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1683.107895][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1683.113182][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1683.118397][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1683.124321][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1683.128939][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1683.134322][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1683.139274][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.145088][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1683.150224][ C1] kthread+0x38b/0x480 [ 1683.154307][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1683.159509][ C1] ? __pfx_kthread+0x10/0x10 [ 1683.164133][ C1] ret_from_fork+0x514/0xb70 [ 1683.168728][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1683.173884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.179638][ C1] ? __switch_to+0xc89/0x1420 [ 1683.184372][ C1] ? __pfx_kthread+0x10/0x10 [ 1683.189064][ C1] ret_from_fork_asm+0x1a/0x30 [ 1683.193891][ C1] [ 1683.196924][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1683.203251][ C1] CPU: 1 UID: 0 PID: 6074 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1683.213774][ C1] Tainted: [L]=SOFTLOCKUP [ 1683.218280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1683.228369][ C1] RIP: 0010:smp_call_function_many_cond+0x628/0x1500 [ 1683.235248][ C1] Code: 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 31 56 0c 00 41 83 e7 01 75 07 e8 26 51 0c 00 eb 3f f3 90 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 02 51 0c 00 [ 1683.254957][ C1] RSP: 0018:ffffc9000416f8a0 EFLAGS: 00000293 [ 1683.261046][ C1] RAX: dffffc0000000000 RBX: ffff8880b8643708 RCX: ffff888032ecddc0 [ 1683.269164][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1683.277177][ C1] RBP: ffffc9000416f9f0 R08: ffff888032ecf35f R09: 1ffff110065d9e6b [ 1683.285163][ C1] R10: dffffc0000000000 R11: ffffffff8179dc60 R12: 1ffff110170c86e1 [ 1683.293148][ C1] R13: 0000000000000000 R14: ffff8880b8643700 R15: 0000000000000001 [ 1683.301131][ C1] FS: 00007f8d73783880(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 1683.310405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1683.316989][ C1] CR2: 00007f8d7374b000 CR3: 0000000029166000 CR4: 0000000000350ef0 [ 1683.324972][ C1] Call Trace: [ 1683.328271][ C1] [ 1683.331205][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1683.336421][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 1683.341809][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1683.348155][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.353795][ C1] ? rcu_is_watching+0x16/0xb0 [ 1683.358596][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.364267][ C1] ? trace_tlb_flush+0x3c/0x160 [ 1683.369130][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.374860][ C1] flush_tlb_mm_range+0x8ff/0x1090 [ 1683.380092][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1683.385651][ C1] ? vma_set_page_prot+0xc3/0x100 [ 1683.390751][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.396408][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 1683.401659][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.407929][ C1] ? mas_next_slot+0xc91/0xd70 [ 1683.412765][ C1] tlb_flush_mmu+0x1af/0xa30 [ 1683.417376][ C1] tlb_finish_mmu+0xf4/0x220 [ 1683.421977][ C1] do_mprotect_pkey+0xa20/0xd10 [ 1683.426923][ C1] ? bdev_statx+0x1e0/0x590 [ 1683.431611][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1683.436988][ C1] ? vm_mmap_pgoff+0x31c/0x4e0 [ 1683.441775][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1683.447501][ C1] ? rcu_is_watching+0x16/0xb0 [ 1683.452391][ C1] __x64_sys_mprotect+0x80/0x90 [ 1683.457249][ C1] do_syscall_64+0x166/0x520 [ 1683.461856][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.468020][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.474021][ C1] RIP: 0033:0x7f8d7311dfe7 [ 1683.478439][ C1] Code: ef e8 3d fa ff ff 84 c0 75 b9 31 db 48 83 c4 08 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 2d 0d 00 f7 d8 64 89 01 48 [ 1683.498602][ C1] RSP: 002b:00007fff493ece48 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1683.507213][ C1] RAX: ffffffffffffffda RBX: 0000000000000200 RCX: 00007f8d7311dfe7 [ 1683.515207][ C1] RDX: 0000000000000001 RSI: 0000000000000200 RDI: 00007f8d7374b000 [ 1683.523181][ C1] RBP: 0000565471e18f30 R08: 0000000000000000 R09: 0000000000000200 [ 1683.531241][ C1] R10: 0000565471e18f90 R11: 0000000000000246 R12: 0000000000000000 [ 1683.539475][ C1] R13: 0000000000ff0000 R14: 0000565471e032a8 R15: 00007f8d7384839c [ 1683.547671][ C1]