last executing test programs: 14.650639063s ago: executing program 2 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 13.184485045s ago: executing program 2 (id=2241): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket$inet6(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 12.256792601s ago: executing program 1 (id=2242): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000001200)=0x2) 10.741029534s ago: executing program 0 (id=2243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000580)}, 0x20) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00303a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000002000000000000000000000000000000000000000000ffffe0000001c4cbe5f76871b68e13042aca023ce92156db895e4c4ed3563a037408b9dad3d329508dd1f31bfb50832ec3d6f42ce7afed7a64557c7c71ccf392b443d3f0488025876f6dad5418d108000000006f5f5cdcd93030145a3ed01f"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.620269048s ago: executing program 2 (id=2244): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 10.482254702s ago: executing program 1 (id=2245): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000d00007f0000000a020000000e0000000000000204000000020000000000000c0100000010000000000000110500000007000000060000000000000b010000000700000007000093000000001000000003000000800000000600000004000000ff0f00000a000000040000000d0000000900000006000000090000000600000095000000000000000b00"], 0x0, 0xf3, 0x0, 0x0, 0x5f94}, 0x28) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) 9.434125112s ago: executing program 0 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000000000000061194c0000040000950000000000000047b7fbc828a3574ded64ddae01a2808503666c91d321e2175fcc1ffb2cde599f3d5b08cbb144dfb2d1359acd8ce8c4bf8ef06a4fa6754d63bffe40d843c5fd4a8618457f4bf97fe6ba30876d695e05e3"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 9.13079861s ago: executing program 1 (id=2247): r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa93, &(0x7f0000002740)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, 0x0, 0x0, 0x200000, 0xfffffffe) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r0, 0x7449}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r8, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file3\x00', 0x0) 8.810300249s ago: executing program 2 (id=2248): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x240080) capset(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000173000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.860613936s ago: executing program 2 (id=2250): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd71a, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xffbffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x44000, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0xc], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0xa00, 0xfdff, 0x6, 0xbc, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x10000, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x9, 0x22, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x1, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x5, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xff, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x8, 0xd, 0x101, 0xf, 0x13, 0x136, 0x6]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r7, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0xf73, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 7.188624425s ago: executing program 0 (id=2251): r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa93, &(0x7f0000002740)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, 0x0, 0x0, 0x200000, 0xfffffffe) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r0, 0x7449}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r8, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file3\x00', 0x0) 7.142233126s ago: executing program 3 (id=2252): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket$inet6(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 6.395962418s ago: executing program 3 (id=2253): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r0, 0x61d, 0x2) getdents64(r0, 0x0, 0x0) 5.563926242s ago: executing program 1 (id=2254): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000580)}, 0x20) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00303a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000002000000000000000000000000000000000000000000ffffe0000001c4cbe5f76871b68e13042aca023ce92156db895e4c4ed3563a037408b9dad3d329508dd1f31bfb50832ec3d6f42ce7afed7a64557c7c71ccf392b443d3f0488025876f6dad5418d108000000006f5f5cdcd93030145a3ed01f"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.542575062s ago: executing program 2 (id=2255): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.166297773s ago: executing program 3 (id=2256): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.79862526s ago: executing program 0 (id=2257): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x16556000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ef3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) 2.763737341s ago: executing program 1 (id=2258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, 0x0, 0x101) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}}, 0x40080c4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.538425917s ago: executing program 3 (id=2259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000000000000061194c0000040000950000000000000047b7fbc828a3574ded64ddae01a2808503666c91d321e2175fcc1ffb2cde599f3d5b08cbb144dfb2d1359acd8ce8c4bf8ef06a4fa6754d63bffe40d843c5fd4a8618457f4bf97fe6ba30876d695e05e3"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.45835163s ago: executing program 0 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.344678791s ago: executing program 3 (id=2261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x240cc0c5, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') setgroups(0x51, 0x0) setreuid(0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 1.329605572s ago: executing program 0 (id=2262): r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa93, &(0x7f0000002740)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000900), 0x0, 0x200000, 0xfffffffe) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r0, 0x7449}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r8, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file3\x00', 0x0) 68.724218ms ago: executing program 3 (id=2263): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0) 0s ago: executing program 1 (id=2264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) kernel console output (not intermixed with test programs): ss beyond end of device [ 980.216776][T12403] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 980.313479][T12403] syz.3.1650: attempt to access beyond end of device [ 980.313479][T12403] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 980.393001][T12403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 980.453067][ T28] audit: type=1800 audit(1777626674.279:129): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1650" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 981.022006][ T5770] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 981.066806][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 981.104692][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 981.138441][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 981.178246][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 981.211640][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 981.221380][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 981.233265][ T5770] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 981.241617][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 981.471677][T12414] loop2: detected capacity change from 0 to 512 [ 981.659694][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.046649][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.114862][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 982.121750][ T5770] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 982.129240][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.141470][ T5770] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 982.150232][ T5770] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 982.200492][ T5770] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 982.216849][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.241068][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 982.265841][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 982.273153][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 982.310426][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 982.325535][ T5770] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 982.335923][T12421] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 982.348861][ T5770] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 982.362765][T12421] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 982.363440][ T5770] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 982.395807][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.412190][T12421] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 982.419712][ T5770] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 982.436237][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.460811][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.475276][ T5770] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 982.491248][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.517238][ T5770] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 982.539689][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 982.583517][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 982.615269][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 982.642969][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 982.864746][T12425] loop1: detected capacity change from 0 to 2048 [ 982.918540][T12425] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 982.992842][T12432] loop3: detected capacity change from 0 to 16 [ 983.061334][T12429] loop2: detected capacity change from 0 to 2048 [ 983.073074][T12432] erofs: (device loop3): mounted with root inode @ nid 36. [ 983.093874][T12432] syz.3.1658: attempt to access beyond end of device [ 983.093874][T12432] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 983.181932][T12433] trusted_key: encrypted_key: insufficient parameters specified [ 983.244509][T12432] syz.3.1658: attempt to access beyond end of device [ 983.244509][T12432] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 983.259445][T12432] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 983.285794][ T28] audit: type=1800 audit(1777626677.099:130): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1658" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 983.441774][T12429] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 983.463411][T12435] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.486700][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop1 [ 983.844644][T12436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.864027][T12425] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 983.874361][T12425] Remounting filesystem read-only [ 983.883505][T12425] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 984.290092][T12443] loop1: detected capacity change from 0 to 2048 [ 984.307277][T12443] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 984.325531][T12444] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 984.357834][T12445] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 984.374866][T12444] Remounting filesystem read-only [ 984.481017][T12444] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 985.090456][T12448] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 985.148056][T12448] Remounting filesystem read-only [ 985.319926][T12455] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 985.390510][T12458] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 985.441407][T12455] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 985.833298][T12461] loop3: detected capacity change from 0 to 512 [ 986.482343][T12467] loop0: detected capacity change from 0 to 16 [ 986.500928][T12467] erofs: (device loop0): mounted with root inode @ nid 36. [ 986.512378][T12467] syz.0.1666: attempt to access beyond end of device [ 986.512378][T12467] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 986.539577][T12467] syz.0.1666: attempt to access beyond end of device [ 986.539577][T12467] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 986.553755][T12467] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 986.566655][T12467] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 986.577849][T12467] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 986.696205][ T28] audit: type=1800 audit(1777626680.399:131): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1666" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 987.331697][T12475] loop3: detected capacity change from 0 to 16 [ 987.352738][T12475] erofs: (device loop3): mounted with root inode @ nid 36. [ 987.375536][T12475] syz.3.1669: attempt to access beyond end of device [ 987.375536][T12475] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 987.431299][T12475] syz.3.1669: attempt to access beyond end of device [ 987.431299][T12475] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 987.445358][T12475] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 987.456786][ T28] audit: type=1800 audit(1777626681.289:132): pid=12475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1669" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 988.591268][ T5770] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 988.600806][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 988.614026][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 988.636040][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.659616][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.691272][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.711593][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 988.726058][ T5770] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 988.742658][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.762700][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.786048][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.808115][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 988.815656][ T5770] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 988.823897][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.870260][ T5770] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 988.886786][ T5770] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 988.911253][ T5770] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 988.929360][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 988.954717][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 988.973450][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 988.981007][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 988.991522][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 988.998659][ T5770] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 989.008079][T12488] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 989.015273][ T5770] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 989.022715][ T5770] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 989.036913][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 989.051350][T12488] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 989.058588][ T5770] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 989.068773][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 989.080410][T12488] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 989.089179][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 989.110623][ T5770] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 989.125996][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 989.156591][ T5770] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 989.170340][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 989.179968][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 989.187830][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 989.195281][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 989.592342][T12494] loop3: detected capacity change from 0 to 2048 [ 989.619510][T12494] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 989.848926][T12499] loop0: detected capacity change from 0 to 512 [ 990.425638][T12503] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.445957][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop3 [ 990.867392][T12510] loop1: detected capacity change from 0 to 16 [ 990.899778][T12510] erofs: (device loop1): mounted with root inode @ nid 36. [ 990.920846][T12510] syz.1.1679: attempt to access beyond end of device [ 990.920846][T12510] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 990.960882][T12510] syz.1.1679: attempt to access beyond end of device [ 990.960882][T12510] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 990.975768][T12510] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 991.013603][ T28] audit: type=1800 audit(1777626684.819:133): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1679" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 991.813529][T12512] loop1: detected capacity change from 0 to 2048 [ 991.821233][T12513] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 991.865411][T12512] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 991.880024][T12513] Remounting filesystem read-only [ 991.893854][T12516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 991.943726][T12513] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 992.518895][T12506] loop0: detected capacity change from 0 to 32768 [ 992.582138][T12506] JBD2: Ignoring recovery information on journal [ 992.661281][T12506] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 992.747485][T12506] OCFS2: ERROR (device loop0): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 992.766884][T12506] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 992.780571][T12506] OCFS2: File system is now read-only. [ 992.802415][T12506] (syz.0.1678,12506,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 992.821954][T12506] (syz.0.1678,12506,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 992.858715][T12506] (syz.0.1678,12506,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 992.888598][T12506] (syz.0.1678,12506,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 992.935955][T12506] (syz.0.1678,12506,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 992.947138][T12523] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 992.959211][T12506] (syz.0.1678,12506,0):ocfs2_write_begin:1907 ERROR: status = -30 [ 993.045634][T12523] Remounting filesystem read-only [ 993.190298][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 993.310306][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.321509][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.758946][T12530] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 993.774449][T12530] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 994.376975][ T5770] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 994.391179][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 994.401849][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 994.413467][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.423740][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.432855][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.442213][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 994.449058][ T5770] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 994.456473][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.465544][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.475876][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.488235][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 994.495102][ T5770] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 994.502682][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.514133][ T5770] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 994.522813][ T5770] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 994.531074][ T5770] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 994.539165][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.548520][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 994.614905][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 994.625723][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 994.646024][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 994.652850][ T5770] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 994.685277][ T5770] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 994.692703][ T5770] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 994.735245][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.744236][ T5770] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 994.784480][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.807039][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.828133][ T5770] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 994.845785][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.866064][ T5770] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 994.882359][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 994.900824][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 994.918788][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 994.934326][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 995.078699][T12548] loop3: detected capacity change from 0 to 16 [ 995.118975][T12548] erofs: (device loop3): mounted with root inode @ nid 36. [ 995.129726][T12548] syz.3.1689: attempt to access beyond end of device [ 995.129726][T12548] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 995.164286][T12548] syz.3.1689: attempt to access beyond end of device [ 995.164286][T12548] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 995.178507][T12548] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 995.193849][ T28] audit: type=1800 audit(1777626689.019:134): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1689" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 995.615337][T12552] loop1: detected capacity change from 0 to 512 [ 996.674425][T12559] loop3: detected capacity change from 0 to 2048 [ 996.708760][T12559] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 996.756381][T12560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.872168][T12543] loop2: detected capacity change from 0 to 32768 [ 997.022809][T12543] JBD2: Ignoring recovery information on journal [ 997.079566][T12562] loop0: detected capacity change from 0 to 2048 [ 997.120685][T12543] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 997.137743][T12562] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 997.211259][T12566] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 997.233875][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop0 [ 997.247182][T12567] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 997.330951][T12567] Remounting filesystem read-only [ 997.366417][T12567] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 997.595675][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 998.078113][T12575] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 998.273665][T12575] Remounting filesystem read-only [ 999.314148][T12588] loop1: detected capacity change from 0 to 16 [ 999.325875][T12588] erofs: (device loop1): mounted with root inode @ nid 36. [ 999.336457][T12588] syz.1.1699: attempt to access beyond end of device [ 999.336457][T12588] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 999.351941][T12588] syz.1.1699: attempt to access beyond end of device [ 999.351941][T12588] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 999.366304][T12588] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 999.378343][ T28] audit: type=1800 audit(1777626693.209:135): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1699" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 999.400359][T12588] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 999.411817][T12588] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 999.611333][T12592] loop1: detected capacity change from 0 to 16 [ 999.620003][T12592] erofs: (device loop1): mounted with root inode @ nid 36. [ 999.630875][T12592] syz.1.1700: attempt to access beyond end of device [ 999.630875][T12592] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 999.649440][T12592] syz.1.1700: attempt to access beyond end of device [ 999.649440][T12592] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 999.663732][T12592] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 999.674990][ T28] audit: type=1800 audit(1777626693.499:136): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1700" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 999.735614][ T5771] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 999.755036][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=2097152 [ 999.765028][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 999.779953][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.789392][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.806168][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.830016][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 999.843600][ T5771] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 999.851468][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.861953][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.876203][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.886310][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 999.893206][ T5771] NILFS (loop0): discard dirty block: blocknr=3, size=1024 [ 999.903391][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.915929][ T5771] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 999.923589][ T5771] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 999.933377][ T5771] NILFS (loop0): discard dirty page: offset=268697600, ino=6 [ 999.941542][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.952179][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 999.959820][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 999.973259][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 999.983816][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 999.996407][ T5771] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1000.010643][ T5771] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1000.019906][ T5771] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1000.031474][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1000.044650][ T5771] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 1000.056088][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1000.071448][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1000.084582][ T5771] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 1000.096269][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1000.112078][ T5771] NILFS (loop0): discard dirty page: offset=67371008, ino=3 [ 1000.121471][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1000.134570][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1000.143895][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1000.157710][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1001.286405][T12595] loop3: detected capacity change from 0 to 512 [ 1001.693938][T12606] loop2: detected capacity change from 0 to 2048 [ 1001.885416][T12616] loop3: detected capacity change from 0 to 16 [ 1001.936532][T12616] erofs: (device loop3): mounted with root inode @ nid 36. [ 1001.948376][T12616] syz.3.1708: attempt to access beyond end of device [ 1001.948376][T12616] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1001.962554][T12606] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1002.035604][T12616] syz.3.1708: attempt to access beyond end of device [ 1002.035604][T12616] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1002.050840][T12616] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1002.118759][T12618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1002.134321][ T28] audit: type=1800 audit(1777626695.889:137): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1708" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1002.178225][ T5782] udevd[5782]: incorrect nilfs2 checksum on /dev/loop2 [ 1002.461884][T12620] loop3: detected capacity change from 0 to 2048 [ 1002.504463][T12620] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1002.611038][T12624] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1002.810767][T12626] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1002.920927][T12626] Remounting filesystem read-only [ 1002.981685][T12626] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1003.478213][T12634] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1003.509378][T12634] Remounting filesystem read-only [ 1004.206454][T12640] loop0: detected capacity change from 0 to 16 [ 1004.220769][T12640] erofs: (device loop0): mounted with root inode @ nid 36. [ 1004.231304][T12640] syz.0.1713: attempt to access beyond end of device [ 1004.231304][T12640] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1004.248917][T12640] syz.0.1713: attempt to access beyond end of device [ 1004.248917][T12640] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1004.262852][T12640] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1004.274997][ T28] audit: type=1800 audit(1777626698.099:138): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1713" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1004.940849][T12651] loop1: detected capacity change from 0 to 512 [ 1005.736478][T12655] loop2: detected capacity change from 0 to 16 [ 1005.849613][T12655] erofs: (device loop2): mounted with root inode @ nid 36. [ 1005.860760][T12655] syz.2.1717: attempt to access beyond end of device [ 1005.860760][T12655] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1005.904173][T12655] syz.2.1717: attempt to access beyond end of device [ 1005.904173][T12655] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1005.918183][T12655] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1005.931924][T12655] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1005.944595][T12655] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1005.964561][ T28] audit: type=1800 audit(1777626699.759:139): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1717" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1006.150199][ T5769] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1006.198335][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 1006.222575][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1006.240735][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.254681][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.270134][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.279994][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1006.291569][ T5769] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1006.300865][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.314594][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.332488][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.344210][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1006.418537][ T5769] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 1006.426372][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.471968][ T5769] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1006.493510][ T5769] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1006.503106][ T5769] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 1006.522806][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.545262][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1006.552656][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1006.583125][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1006.600552][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1006.611892][ T5769] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1006.624412][ T5769] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1006.633394][ T5769] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1006.645288][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1006.660622][ T5769] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1007.151888][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1007.318933][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1007.544847][ T5769] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1007.578542][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1007.631077][ T5769] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 1007.688096][T12669] loop0: detected capacity change from 0 to 2048 [ 1007.695332][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1007.704297][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1007.733790][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1007.746978][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1007.759272][T12669] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1007.834708][T12674] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1008.234577][T12681] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1008.264600][T12681] Remounting filesystem read-only [ 1008.333436][T12681] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1008.855690][T12690] syz_tun: entered allmulticast mode [ 1008.890114][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 1008.985610][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1009.064775][T12690] syz_tun (unregistering): left allmulticast mode [ 1009.481825][T12694] loop2: detected capacity change from 0 to 2048 [ 1009.507408][T12694] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1009.573163][T12698] loop1: detected capacity change from 0 to 16 [ 1009.603097][T12698] erofs: (device loop1): mounted with root inode @ nid 36. [ 1009.614133][T12698] syz.1.1729: attempt to access beyond end of device [ 1009.614133][T12698] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1009.684034][T12698] syz.1.1729: attempt to access beyond end of device [ 1009.684034][T12698] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1009.698270][T12698] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1009.740572][T12700] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1009.759937][ T28] audit: type=1800 audit(1777626703.539:140): pid=12698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1729" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1010.263011][T12704] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1010.354830][T12704] Remounting filesystem read-only [ 1011.159434][T12715] loop3: detected capacity change from 0 to 16 [ 1011.275823][T12715] erofs: (device loop3): mounted with root inode @ nid 36. [ 1011.297410][T12715] syz.3.1733: attempt to access beyond end of device [ 1011.297410][T12715] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1011.337034][T12715] syz.3.1733: attempt to access beyond end of device [ 1011.337034][T12715] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1011.352154][T12715] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1011.375626][T12715] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1011.387351][T12715] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1011.408343][ T28] audit: type=1800 audit(1777626705.199:141): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1733" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1012.550275][T12728] loop0: detected capacity change from 0 to 2048 [ 1012.571894][T12728] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1012.582245][ T5768] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1012.623299][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 1012.659726][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1012.679310][T12729] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1012.694214][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.744589][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.784913][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.814648][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 1012.821537][ T5768] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 1012.829014][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.837961][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.846983][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.856294][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1012.863040][ T5768] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 1012.870492][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.886915][ T5768] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1012.894303][ T5768] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1012.925589][ T5768] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 1012.933111][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1012.965415][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1012.972932][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1012.986785][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1012.998014][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1013.004818][ T5768] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1013.013571][ T5768] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1013.021312][ T5768] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1013.029468][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1013.041038][ T5768] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 1013.049836][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1013.059100][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1013.076414][ T5768] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 1013.083902][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1013.096375][ T5768] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 1013.104904][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1013.104931][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1013.104949][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1013.144121][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1013.679128][T12740] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1013.701982][T12740] Remounting filesystem read-only [ 1013.708794][T12740] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1014.109625][ T787] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1014.319641][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1014.327207][ T787] usb 2-1: config 0 has no interfaces? [ 1014.335680][ T787] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1014.362372][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.390447][ T787] usb 2-1: Product: syz [ 1014.394707][ T787] usb 2-1: Manufacturer: syz [ 1014.405303][ T787] usb 2-1: SerialNumber: syz [ 1014.436599][ T787] usb 2-1: config 0 descriptor?? [ 1014.578491][T12751] loop2: detected capacity change from 0 to 16 [ 1014.622279][T12751] erofs: (device loop2): mounted with root inode @ nid 36. [ 1014.645529][T12751] syz.2.1744: attempt to access beyond end of device [ 1014.645529][T12751] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1014.674695][T12751] syz.2.1744: attempt to access beyond end of device [ 1014.674695][T12751] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1014.689705][T12751] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1014.712848][T12751] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1014.724647][T12751] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1014.745407][ T28] audit: type=1800 audit(1777626708.529:142): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1744" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1015.546036][ T787] usb 2-1: USB disconnect, device number 17 [ 1015.875595][T12759] loop3: detected capacity change from 0 to 2048 [ 1015.913323][T12759] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1016.209436][T12764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.504338][T12776] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1017.525970][T12776] Remounting filesystem read-only [ 1017.610434][T12778] loop2: detected capacity change from 0 to 2048 [ 1017.646389][T12778] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1017.700784][T12780] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.025629][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1018.345676][T12789] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1018.355349][T12789] Remounting filesystem read-only [ 1018.363444][T12789] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1020.074991][ T5769] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1020.128246][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 1020.135788][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1020.143501][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.154062][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.163087][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.174609][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1020.181477][ T5769] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1020.189076][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.198076][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.229140][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.244186][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1020.251448][ T5769] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 1020.264269][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.273696][ T5769] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1020.285276][ T5769] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1020.292677][ T5769] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 1020.318785][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.335298][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1020.342763][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1020.351957][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1020.362193][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1020.370367][ T5769] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1020.378913][ T5769] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1020.395211][ T5769] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1020.406801][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.425308][ T5769] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1020.448782][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.474383][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.495324][ T5769] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1020.502805][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.525317][ T5769] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 1020.543174][ T5769] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1020.563422][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1020.576428][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1020.595105][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1021.445302][ T8933] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1021.665350][ T8933] usb 4-1: Using ep0 maxpacket: 8 [ 1021.687281][ T8933] usb 4-1: config 0 has no interfaces? [ 1021.702546][ T8933] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1021.715182][ T8933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.727823][ T8933] usb 4-1: Product: syz [ 1021.739428][ T8933] usb 4-1: Manufacturer: syz [ 1021.744119][ T8933] usb 4-1: SerialNumber: syz [ 1021.754522][ T8933] usb 4-1: config 0 descriptor?? [ 1021.900456][T12826] loop0: detected capacity change from 0 to 2048 [ 1021.923704][T12826] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1021.950935][T12829] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1021.969823][T12830] loop1: detected capacity change from 0 to 16 [ 1021.978554][T12830] erofs: (device loop1): mounted with root inode @ nid 36. [ 1021.989274][T12830] syz.1.1764: attempt to access beyond end of device [ 1021.989274][T12830] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1022.005806][T12830] syz.1.1764: attempt to access beyond end of device [ 1022.005806][T12830] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1022.020485][T12830] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1022.033269][T12830] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1022.045266][T12830] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1022.047094][ T28] audit: type=1800 audit(1777626715.859:143): pid=12830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1764" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1022.228107][ T5815] usb 4-1: USB disconnect, device number 16 [ 1022.474048][T12833] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1022.484910][T12833] Remounting filesystem read-only [ 1022.493067][T12833] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1024.689185][T12852] loop2: detected capacity change from 0 to 32768 [ 1024.726879][T12852] JBD2: Ignoring recovery information on journal [ 1024.771438][T12852] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1024.894368][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 1025.154699][T12865] loop2: detected capacity change from 0 to 16 [ 1025.164537][T12865] erofs: (device loop2): mounted with root inode @ nid 36. [ 1025.175499][T12865] syz.2.1774: attempt to access beyond end of device [ 1025.175499][T12865] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1025.195961][T12865] syz.2.1774: attempt to access beyond end of device [ 1025.195961][T12865] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1025.210502][T12865] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1025.226268][T12865] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1025.237967][T12865] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1025.260002][ T28] audit: type=1800 audit(1777626719.049:144): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1774" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1025.585439][ T5815] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1025.651971][T12871] loop1: detected capacity change from 0 to 16 [ 1025.668197][T12871] erofs: (device loop1): mounted with root inode @ nid 36. [ 1025.679319][T12871] syz.1.1776: attempt to access beyond end of device [ 1025.679319][T12871] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1025.729779][T12871] syz.1.1776: attempt to access beyond end of device [ 1025.729779][T12871] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1025.744150][T12871] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1025.759571][ T28] audit: type=1800 audit(1777626719.589:145): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1776" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1025.956746][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 1025.992436][ T5815] usb 1-1: config 0 has no interfaces? [ 1026.032718][ T5815] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1026.078775][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.116282][ T5815] usb 1-1: Product: syz [ 1026.145653][ T5815] usb 1-1: Manufacturer: syz [ 1026.152289][T12874] loop2: detected capacity change from 0 to 2048 [ 1026.170978][ T5815] usb 1-1: SerialNumber: syz [ 1026.181473][T12874] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1026.197759][ T5815] usb 1-1: config 0 descriptor?? [ 1026.225380][T12875] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1026.593776][T12880] loop3: detected capacity change from 0 to 16 [ 1026.759788][T12880] erofs: (device loop3): mounted with root inode @ nid 36. [ 1026.781469][T12880] syz.3.1778: attempt to access beyond end of device [ 1026.781469][T12880] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1026.830501][T12880] syz.3.1778: attempt to access beyond end of device [ 1026.830501][T12880] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1026.846324][T12880] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1026.867892][T12880] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1026.879703][T12880] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1026.924545][ T28] audit: type=1800 audit(1777626720.689:146): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1778" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1027.525922][ T27] usb 1-1: USB disconnect, device number 9 [ 1028.706104][T12898] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1028.744669][T12898] Remounting filesystem read-only [ 1028.758544][T12898] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1028.954817][T12893] loop3: detected capacity change from 0 to 32768 [ 1029.242508][T12893] JBD2: Ignoring recovery information on journal [ 1029.868135][T12893] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1029.916112][T12907] loop0: detected capacity change from 0 to 16 [ 1029.926429][T12907] erofs: (device loop0): mounted with root inode @ nid 36. [ 1029.937276][T12907] syz.0.1785: attempt to access beyond end of device [ 1029.937276][T12907] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1029.956178][T12907] syz.0.1785: attempt to access beyond end of device [ 1029.956178][T12907] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1029.970474][T12907] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1029.983244][T12907] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1029.994828][T12907] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1030.006521][ T28] audit: type=1800 audit(1777626723.809:147): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1785" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1030.154683][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1031.706194][T12919] loop0: detected capacity change from 0 to 16 [ 1031.721153][T12919] erofs: (device loop0): mounted with root inode @ nid 36. [ 1031.742627][T12919] syz.0.1788: attempt to access beyond end of device [ 1031.742627][T12919] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1031.774322][T12919] syz.0.1788: attempt to access beyond end of device [ 1031.774322][T12919] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1031.789928][T12919] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1031.812266][T12919] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1031.823999][T12919] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1031.883885][ T28] audit: type=1800 audit(1777626725.629:148): pid=12919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1788" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1033.012131][T12924] loop0: detected capacity change from 0 to 32768 [ 1033.034100][T12924] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1033.968752][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880220a1800: rx timeout, send abort [ 1034.477673][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880220a1800: abort rx timeout. Force session deactivation [ 1034.646653][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 1034.987344][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1035.257582][T12944] loop1: detected capacity change from 0 to 32768 [ 1035.665047][T12944] JBD2: Ignoring recovery information on journal [ 1035.957643][T12944] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1036.095487][T12955] loop2: detected capacity change from 0 to 16 [ 1036.103748][T12955] erofs: (device loop2): mounted with root inode @ nid 36. [ 1036.114411][T12955] syz.2.1796: attempt to access beyond end of device [ 1036.114411][T12955] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1036.157542][T12955] syz.2.1796: attempt to access beyond end of device [ 1036.157542][T12955] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1036.171631][T12955] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1036.183773][ T28] audit: type=1800 audit(1777626730.019:149): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1796" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1036.297798][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1036.500541][T12960] loop1: detected capacity change from 0 to 2048 [ 1036.516803][T12960] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1036.550386][T12961] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1036.772928][T12963] trusted_key: encrypted_key: insufficient parameters specified [ 1036.932633][T12965] loop2: detected capacity change from 0 to 16 [ 1036.942022][T12965] erofs: (device loop2): mounted with root inode @ nid 36. [ 1036.953100][T12965] syz.2.1800: attempt to access beyond end of device [ 1036.953100][T12965] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1036.969976][T12965] syz.2.1800: attempt to access beyond end of device [ 1036.969976][T12965] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1036.984168][T12965] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1036.996284][ T28] audit: type=1800 audit(1777626730.829:150): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1800" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1038.477093][T12972] loop0: detected capacity change from 0 to 32768 [ 1038.553717][T12977] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1038.579813][T12972] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1038.611381][T12977] Remounting filesystem read-only [ 1038.864754][T12977] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1039.305360][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1039.434034][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259c5800: rx timeout, send abort [ 1039.942448][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259c5800: abort rx timeout. Force session deactivation [ 1040.194222][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 1041.663939][T12999] loop3: detected capacity change from 0 to 16 [ 1041.705430][T12999] erofs: (device loop3): mounted with root inode @ nid 36. [ 1041.728145][T12999] syz.3.1808: attempt to access beyond end of device [ 1041.728145][T12999] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1041.750684][T12999] syz.3.1808: attempt to access beyond end of device [ 1041.750684][T12999] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1041.766406][T12999] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1041.790201][T12999] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1041.802128][T12999] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1041.824839][ T28] audit: type=1800 audit(1777626735.609:151): pid=12999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1808" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1042.586394][T13001] syz_tun: entered allmulticast mode [ 1043.000745][T13010] loop2: detected capacity change from 0 to 16 [ 1043.016518][T13010] erofs: (device loop2): mounted with root inode @ nid 36. [ 1043.027553][T13010] syz.2.1813: attempt to access beyond end of device [ 1043.027553][T13010] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1043.079115][T13010] syz.2.1813: attempt to access beyond end of device [ 1043.079115][T13010] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1043.093253][T13010] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1043.094727][T13004] loop1: detected capacity change from 0 to 32768 [ 1043.115672][ T28] audit: type=1800 audit(1777626736.939:152): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1813" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1043.172330][T13004] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1044.024263][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802723c400: rx timeout, send abort [ 1044.352276][ T28] audit: type=1800 audit(1777626737.479:153): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1812" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1044.532606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802723c400: abort rx timeout. Force session deactivation [ 1045.249572][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1045.305876][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1045.704475][T13029] loop0: detected capacity change from 0 to 2048 [ 1045.997573][T13029] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1046.565405][T13034] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.615745][ T5782] udevd[5782]: incorrect nilfs2 checksum on /dev/loop0 [ 1047.312470][T13039] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1047.333158][T13039] Remounting filesystem read-only [ 1047.352814][T13039] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1047.532880][T13044] lo: entered allmulticast mode [ 1047.825403][T13032] Bluetooth: hci3: command 0x0406 tx timeout [ 1048.337143][T13054] loop1: detected capacity change from 0 to 32768 [ 1048.376124][T13054] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1049.292111][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880765e0800: rx timeout, send abort [ 1049.516226][ T28] audit: type=1800 audit(1777626742.699:154): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1824" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1049.800494][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880765e0800: abort rx timeout. Force session deactivation [ 1049.967908][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1051.328988][T13086] loop3: detected capacity change from 0 to 2048 [ 1051.361103][T13086] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1051.505676][T13089] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1051.929715][T13092] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1052.490291][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1052.520697][T13092] Remounting filesystem read-only [ 1052.537330][T13092] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1053.686622][T13101] loop3: detected capacity change from 0 to 32768 [ 1053.710966][T13101] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1054.205610][ T28] audit: type=1800 audit(1777626747.949:155): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1837" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1054.624819][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880251ab000: rx timeout, send abort [ 1054.776192][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.782833][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.133272][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880251ab000: abort rx timeout. Force session deactivation [ 1056.451491][T13120] loop2: detected capacity change from 0 to 16 [ 1056.552045][T13120] erofs: (device loop2): mounted with root inode @ nid 36. [ 1056.573270][T13120] syz.2.1840: attempt to access beyond end of device [ 1056.573270][T13120] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1056.597091][T13120] syz.2.1840: attempt to access beyond end of device [ 1056.597091][T13120] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1056.612372][T13120] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1056.640511][T13120] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1056.653076][T13120] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1056.732788][ T28] audit: type=1800 audit(1777626750.459:156): pid=13120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1840" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1056.987059][T13032] Bluetooth: hci3: command 0x0406 tx timeout [ 1057.042660][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1058.089584][T13130] loop0: detected capacity change from 0 to 2048 [ 1058.148527][T13130] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1058.392395][ T5788] udevd[5788]: incorrect nilfs2 checksum on /dev/loop0 [ 1058.415212][T13134] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1058.822015][T13142] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1059.572439][T13142] Remounting filesystem read-only [ 1059.586003][T13139] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1060.847875][T13151] warning: `syz.2.1851' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1061.129563][T13152] loop3: detected capacity change from 0 to 32768 [ 1061.408607][T13158] loop2: detected capacity change from 0 to 16 [ 1061.417134][T13158] erofs: (device loop2): mounted with root inode @ nid 36. [ 1061.427861][T13158] syz.2.1852: attempt to access beyond end of device [ 1061.427861][T13158] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1061.447897][T13158] syz.2.1852: attempt to access beyond end of device [ 1061.447897][T13158] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1061.462047][T13158] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1061.475678][T13158] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1061.481440][ T28] audit: type=1800 audit(1777626755.309:157): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1852" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1061.487821][T13158] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1062.059825][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c6b9800: rx timeout, send abort [ 1062.175617][T13152] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1062.568187][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c6b9800: abort rx timeout. Force session deactivation [ 1062.583315][ T28] audit: type=1800 audit(1777626756.389:158): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1849" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1063.256165][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1063.395302][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1064.017786][T13180] loop3: detected capacity change from 0 to 2048 [ 1064.088932][T13180] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1064.192237][T13184] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1064.922888][T13190] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1066.235565][T13190] Remounting filesystem read-only [ 1066.250094][T13188] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1066.891271][T13197] vlan0: entered promiscuous mode [ 1067.331678][T13192] vlan0: left promiscuous mode [ 1071.913779][T13230] loop3: detected capacity change from 0 to 32768 [ 1071.994408][T13230] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1072.862266][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029be9800: rx timeout, send abort [ 1073.097037][ T28] audit: type=1800 audit(1777626766.239:159): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1872" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1073.370691][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029be9800: abort rx timeout. Force session deactivation [ 1073.565475][T13032] Bluetooth: hci3: command 0x0406 tx timeout [ 1073.900924][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1074.767174][T13237] vlan0: entered promiscuous mode [ 1074.879480][T13236] vlan0: left promiscuous mode [ 1076.257552][T13271] loop3: detected capacity change from 0 to 32768 [ 1077.214138][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277c9800: rx timeout, send abort [ 1077.722696][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277c9800: abort rx timeout. Force session deactivation [ 1078.999597][T13271] JBD2: journal reset failed [ 1079.004512][T13271] (syz.3.1884,13271,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 1079.013635][T13271] (syz.3.1884,13271,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 1082.479803][T13315] vlan0: entered promiscuous mode [ 1082.991060][T13308] vlan0: left promiscuous mode [ 1084.526140][T13325] loop3: detected capacity change from 0 to 32768 [ 1084.634284][T13325] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1084.864005][ T28] audit: type=1800 audit(1777626778.689:160): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1896" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1085.575818][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fbea400: rx timeout, send abort [ 1086.084141][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fbea400: abort rx timeout. Force session deactivation [ 1086.531090][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1088.413524][T13356] loop1: detected capacity change from 0 to 2048 [ 1088.502254][T13356] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1088.595059][T13364] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1088.596355][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop1 [ 1091.151558][T13373] loop2: detected capacity change from 0 to 256 [ 1091.204189][T13373] exfat: Deprecated parameter 'utf8' [ 1091.315709][T13373] exFAT-fs (loop2): bogus number of FAT structure [ 1091.368514][T13373] exFAT-fs (loop2): failed to read boot sector [ 1091.415333][T13373] exFAT-fs (loop2): failed to recognize exfat type [ 1091.458560][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1091.885399][T13378] loop3: detected capacity change from 0 to 32768 [ 1092.296981][T13378] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1092.316282][T13380] trusted_key: encrypted_key: insufficient parameters specified [ 1092.665526][ T28] audit: type=1800 audit(1777626786.489:161): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1910" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1092.837947][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f697400: rx timeout, send abort [ 1093.346375][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f697400: abort rx timeout. Force session deactivation [ 1094.509649][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1096.422018][T13412] loop0: detected capacity change from 0 to 2048 [ 1096.467814][T13412] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1096.547483][T13417] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.637270][T13426] loop2: detected capacity change from 0 to 16 [ 1097.657817][T13426] erofs: (device loop2): mounted with root inode @ nid 36. [ 1097.668541][T13426] syz.2.1922: attempt to access beyond end of device [ 1097.668541][T13426] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1097.691423][T13426] syz.2.1922: attempt to access beyond end of device [ 1097.691423][T13426] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1097.705867][T13426] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1097.718964][T13426] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1097.730411][T13426] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1097.744516][ T28] audit: type=1800 audit(1777626791.549:162): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1922" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1098.190632][T13429] trusted_key: encrypted_key: insufficient parameters specified [ 1098.355922][T13431] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1098.388995][T13431] Remounting filesystem read-only [ 1098.546011][T13431] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1099.132876][T13439] loop1: detected capacity change from 0 to 32768 [ 1099.375021][T13439] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1099.781830][ T28] audit: type=1800 audit(1777626793.599:163): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1926" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1100.091220][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e698c00: rx timeout, send abort [ 1100.599601][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e698c00: abort rx timeout. Force session deactivation [ 1100.911478][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1102.735257][T13472] loop0: detected capacity change from 0 to 16 [ 1102.744343][T13472] erofs: (device loop0): mounted with root inode @ nid 36. [ 1102.755411][T13472] syz.0.1933: attempt to access beyond end of device [ 1102.755411][T13472] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1102.773251][T13472] syz.0.1933: attempt to access beyond end of device [ 1102.773251][T13472] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1102.787826][T13472] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1102.800999][T13472] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1102.813466][T13472] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1102.815513][ T28] audit: type=1800 audit(1777626796.629:164): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1933" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1103.165681][T13466] trusted_key: encrypted_key: insufficient parameters specified [ 1103.281966][T13479] process 'syz.3.1937' launched '/dev/fd/7' with NULL argv: empty string added [ 1107.773447][T13489] loop2: detected capacity change from 0 to 2048 [ 1107.783139][T13489] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1107.805250][T13492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1109.652213][T13505] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1109.801727][T13505] Remounting filesystem read-only [ 1109.996866][T13505] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1110.210974][T13499] loop0: detected capacity change from 0 to 32768 [ 1110.249561][T13499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1944 (13499) [ 1110.569604][T13508] loop1: detected capacity change from 0 to 32768 [ 1110.609468][T13508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1110.781200][T13499] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1110.844183][T13499] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1110.905834][T13499] BTRFS info (device loop0): using free space tree [ 1111.156655][ T28] audit: type=1800 audit(1777626804.869:165): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1946" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1111.506923][T13499] BTRFS info (device loop0): enabling ssd optimizations [ 1111.528990][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807883cc00: rx timeout, send abort [ 1111.538751][T13499] BTRFS info (device loop0): auto enabling async discard [ 1111.603937][T13533] loop3: detected capacity change from 0 to 16 [ 1111.615496][T13533] erofs: (device loop3): mounted with root inode @ nid 36. [ 1111.627416][T13533] syz.3.1947: attempt to access beyond end of device [ 1111.627416][T13533] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1111.645591][T13533] syz.3.1947: attempt to access beyond end of device [ 1111.645591][T13533] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1111.659965][T13533] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1111.673516][T13533] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1111.673894][ T28] audit: type=1800 audit(1777626805.499:166): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1947" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1111.685687][T13533] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1112.037354][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807883cc00: abort rx timeout. Force session deactivation [ 1112.204544][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1112.249893][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1112.813828][T13539] loop3: detected capacity change from 0 to 32768 [ 1112.948581][T13539] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1113.071163][ T28] audit: type=1800 audit(1777626806.899:167): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1951" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1113.777138][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d079000: rx timeout, send abort [ 1114.285465][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d079000: abort rx timeout. Force session deactivation [ 1114.414822][T13546] trusted_key: encrypted_key: insufficient parameters specified [ 1114.446195][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1114.641733][T13561] loop1: detected capacity change from 0 to 2048 [ 1114.675202][T13561] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1114.750466][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop1 [ 1114.846856][T13563] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1114.971462][T13562] loop2: detected capacity change from 0 to 32768 [ 1115.116467][T13562] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1115.912158][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc6c000: rx timeout, send abort [ 1116.020907][ T28] audit: type=1800 audit(1777626809.499:168): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1958" name=".log" dev="loop2" ino=17059 res=0 errno=0 [ 1116.198351][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.204831][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.420585][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc6c000: abort rx timeout. Force session deactivation [ 1116.723784][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 1116.895780][T13581] loop0: detected capacity change from 0 to 16 [ 1116.907931][T13581] erofs: (device loop0): mounted with root inode @ nid 36. [ 1116.918431][T13581] syz.0.1960: attempt to access beyond end of device [ 1116.918431][T13581] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1116.936174][T13581] syz.0.1960: attempt to access beyond end of device [ 1116.936174][T13581] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1116.951275][T13581] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1116.962927][ T28] audit: type=1800 audit(1777626810.789:169): pid=13581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1960" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1116.982931][T13581] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1116.994637][T13581] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1119.268883][T13600] binder: 13599:13600 ioctl c0306201 200000000680 returned -14 [ 1119.284732][T13597] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.311963][T13597] binder: 13594:13597 ioctl 4018620d 200000001000 returned -16 [ 1119.581493][T13598] binder: 13594:13598 ioctl c0306201 2000000003c0 returned -22 [ 1119.949567][T13606] loop0: detected capacity change from 0 to 32768 [ 1120.057837][T13606] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1120.415806][ T28] audit: type=1800 audit(1777626814.219:170): pid=13606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1969" name=".log" dev="loop0" ino=17059 res=0 errno=0 [ 1120.998721][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d6dc000: rx timeout, send abort [ 1121.281392][T13619] trusted_key: encrypted_key: insufficient parameters specified [ 1121.507068][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d6dc000: abort rx timeout. Force session deactivation [ 1121.538975][T13623] loop3: detected capacity change from 0 to 16 [ 1121.550515][T13623] erofs: (device loop3): mounted with root inode @ nid 36. [ 1121.561242][T13623] syz.3.1972: attempt to access beyond end of device [ 1121.561242][T13623] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1121.583512][T13623] syz.3.1972: attempt to access beyond end of device [ 1121.583512][T13623] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1121.638577][T13623] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1121.653146][T13623] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1121.664684][T13623] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1121.681150][ T28] audit: type=1800 audit(1777626815.479:171): pid=13623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1972" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1121.793736][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 1123.511547][T13631] loop0: detected capacity change from 0 to 2048 [ 1123.567041][T13635] binder: 13634:13635 ioctl c0306201 200000000680 returned -14 [ 1123.591054][T13631] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1123.666026][T13637] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1124.632801][T13640] loop3: detected capacity change from 0 to 32768 [ 1124.918558][T13640] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1125.597385][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802209a000: rx timeout, send abort [ 1126.105914][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802209a000: abort rx timeout. Force session deactivation [ 1126.197311][T13648] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1126.210325][T13648] Remounting filesystem read-only [ 1126.218367][T13648] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1126.461134][ T28] audit: type=1800 audit(1777626820.289:172): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1978" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1126.843916][T13656] loop1: detected capacity change from 0 to 32768 [ 1127.026718][T13656] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1127.060771][T13656] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1127.375402][ T28] audit: type=1800 audit(1777626821.189:173): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1981" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1127.513861][T13665] loop0: detected capacity change from 0 to 16 [ 1127.535714][T13665] erofs: (device loop0): mounted with root inode @ nid 36. [ 1127.551114][T13665] syz.0.1982: attempt to access beyond end of device [ 1127.551114][T13665] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1127.575327][T13665] syz.0.1982: attempt to access beyond end of device [ 1127.575327][T13665] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1127.591814][T13665] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1127.613484][T13665] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1127.626631][T13665] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1127.749984][ T28] audit: type=1800 audit(1777626821.439:174): pid=13665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1982" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1127.777361][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dac4400: rx timeout, send abort [ 1128.285945][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dac4400: abort rx timeout. Force session deactivation [ 1128.662213][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1130.366939][T13683] trusted_key: encrypted_key: insufficient parameters specified [ 1131.887463][T13692] loop2: detected capacity change from 0 to 2048 [ 1131.920800][T13692] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1132.039296][T13697] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1132.066496][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop2 [ 1132.460904][T13696] loop1: detected capacity change from 0 to 2048 [ 1132.472847][T13696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1132.493950][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1133.210099][T13705] loop3: detected capacity change from 0 to 16 [ 1133.226042][T13705] erofs: (device loop3): mounted with root inode @ nid 36. [ 1133.236890][T13705] syz.3.1993: attempt to access beyond end of device [ 1133.236890][T13705] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1133.263283][T13705] syz.3.1993: attempt to access beyond end of device [ 1133.263283][T13705] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1133.277689][T13705] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1133.290892][T13705] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1133.302040][T13705] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1134.165765][T13707] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1134.189762][ T28] audit: type=1800 audit(1777626827.119:175): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1993" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1134.211048][T13707] Remounting filesystem read-only [ 1134.234683][T13692] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1135.179729][T13712] loop3: detected capacity change from 0 to 32768 [ 1135.361174][T13712] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1135.648120][ T28] audit: type=1800 audit(1777626829.479:176): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1995" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1136.142850][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf19000: rx timeout, send abort [ 1136.651230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf19000: abort rx timeout. Force session deactivation [ 1137.046010][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1137.463615][T13732] loop0: detected capacity change from 0 to 40427 [ 1137.595940][T13732] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable [ 1138.918844][T13740] loop1: detected capacity change from 0 to 16 [ 1139.083655][T13740] erofs: (device loop1): mounted with root inode @ nid 36. [ 1139.094968][T13740] syz.1.2003: attempt to access beyond end of device [ 1139.094968][T13740] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1139.168312][T13740] syz.1.2003: attempt to access beyond end of device [ 1139.168312][T13740] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1139.182582][T13740] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1139.232456][ T28] audit: type=1800 audit(1777626833.019:177): pid=13740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2003" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1141.516577][T13748] loop2: detected capacity change from 0 to 2048 [ 1141.605376][T13748] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1141.711793][T13756] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1141.729045][ T5782] udevd[5782]: incorrect nilfs2 checksum on /dev/loop2 [ 1142.038384][T13758] loop3: detected capacity change from 0 to 16 [ 1142.418826][T13758] erofs: (device loop3): mounted with root inode @ nid 36. [ 1142.776553][T13758] syz.3.2001: attempt to access beyond end of device [ 1142.776553][T13758] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1143.016244][T13764] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1143.219389][T13758] syz.3.2001: attempt to access beyond end of device [ 1143.219389][T13758] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1143.332426][T13758] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1143.352357][T13767] loop0: detected capacity change from 0 to 32768 [ 1143.369220][T13764] Remounting filesystem read-only [ 1143.380174][T13768] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1143.400242][ T28] audit: type=1800 audit(1777626837.229:178): pid=13758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2001" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1143.429921][T13767] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1143.511979][ T28] audit: type=1800 audit(1777626837.339:179): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2009" name=".log" dev="loop0" ino=17059 res=0 errno=0 [ 1144.295713][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880262e2c00: rx timeout, send abort [ 1144.804073][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880262e2c00: abort rx timeout. Force session deactivation [ 1144.985925][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 1148.049891][T13802] loop1: detected capacity change from 0 to 32768 [ 1148.287339][T13802] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1148.371949][ T28] audit: type=1800 audit(1777626842.189:180): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2019" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1148.531309][T13817] loop2: detected capacity change from 0 to 16 [ 1148.596266][T13817] erofs: (device loop2): mounted with root inode @ nid 36. [ 1148.987251][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbfa800: rx timeout, send abort [ 1149.207393][T13817] syz.2.2021: attempt to access beyond end of device [ 1149.207393][T13817] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1149.422572][T13817] syz.2.2021: attempt to access beyond end of device [ 1149.422572][T13817] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1149.437377][T13817] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1149.448848][ T28] audit: type=1800 audit(1777626843.279:181): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2021" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1149.495974][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbfa800: abort rx timeout. Force session deactivation [ 1149.581977][T13823] loop3: detected capacity change from 0 to 2048 [ 1149.613850][T13823] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1149.640412][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1149.694032][T13825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1150.159112][T13827] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1150.209402][T13829] loop1: detected capacity change from 0 to 256 [ 1150.263529][T13827] Remounting filesystem read-only [ 1150.294317][T13832] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1150.329599][T13829] FAT-fs (loop1): Directory bread(block 64) failed [ 1150.367987][T13829] FAT-fs (loop1): Directory bread(block 65) failed [ 1150.374744][T13829] FAT-fs (loop1): Directory bread(block 66) failed [ 1150.423344][T13829] FAT-fs (loop1): Directory bread(block 67) failed [ 1150.474012][T13829] FAT-fs (loop1): Directory bread(block 68) failed [ 1150.488045][T13829] FAT-fs (loop1): Directory bread(block 69) failed [ 1150.494750][T13829] FAT-fs (loop1): Directory bread(block 70) failed [ 1150.509699][T13829] FAT-fs (loop1): Directory bread(block 71) failed [ 1150.521750][T13829] FAT-fs (loop1): Directory bread(block 72) failed [ 1150.533930][T13829] FAT-fs (loop1): Directory bread(block 73) failed [ 1154.102149][T13869] loop0: detected capacity change from 0 to 16 [ 1154.132716][T13869] erofs: (device loop0): mounted with root inode @ nid 36. [ 1154.222764][T13869] syz.0.2035: attempt to access beyond end of device [ 1154.222764][T13869] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1154.304232][T13869] syz.0.2035: attempt to access beyond end of device [ 1154.304232][T13869] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1154.366027][T13869] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1154.388635][ T28] audit: type=1800 audit(1777626848.219:182): pid=13869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2035" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1154.480751][T13872] loop3: detected capacity change from 0 to 2048 [ 1154.543183][T13872] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1154.639525][T13873] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1156.377126][T13882] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1156.600488][T13882] Remounting filesystem read-only [ 1156.608866][T13882] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1156.940106][T13887] loop1: detected capacity change from 0 to 2048 [ 1156.997972][T13887] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1157.095343][T13893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1158.004688][T13901] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1158.232237][T13901] Remounting filesystem read-only [ 1158.243668][T13906] binder: BINDER_SET_CONTEXT_MGR already set [ 1158.253686][T13902] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1158.268775][T13906] binder: 13905:13906 ioctl 4018620d 200000000100 returned -16 [ 1158.505473][T13907] binder: BINDER_SET_CONTEXT_MGR already set [ 1158.523050][T13907] binder: 13905:13907 ioctl 4018620d 200000001000 returned -16 [ 1159.330838][T13916] loop3: detected capacity change from 0 to 16 [ 1159.355816][T13916] erofs: (device loop3): mounted with root inode @ nid 36. [ 1160.679126][T13916] syz.3.2047: attempt to access beyond end of device [ 1160.679126][T13916] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1160.730735][T13916] syz.3.2047: attempt to access beyond end of device [ 1160.730735][T13916] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1160.744684][T13916] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1160.757900][ T28] audit: type=1800 audit(1777626854.589:183): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2047" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1164.019442][T13951] loop0: detected capacity change from 0 to 2048 [ 1164.113984][T13951] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1164.163226][T13954] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1164.530071][T13951] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1164.544200][T13951] Remounting filesystem read-only [ 1164.556581][T13951] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1165.711001][T13972] loop2: detected capacity change from 0 to 2048 [ 1165.729788][T13972] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1166.655409][T13977] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1166.671405][T13975] loop1: detected capacity change from 0 to 32768 [ 1166.815476][T13985] loop3: detected capacity change from 0 to 16 [ 1166.874509][T13985] erofs: (device loop3): mounted with root inode @ nid 36. [ 1166.932572][T13983] syz.3.2066: attempt to access beyond end of device [ 1166.932572][T13983] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1166.977737][T13975] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1166.993551][T13983] syz.3.2066: attempt to access beyond end of device [ 1166.993551][T13983] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1167.017124][T13983] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1167.032144][T13988] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1167.044642][T13988] Remounting filesystem read-only [ 1167.051645][T13988] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1167.090244][ T28] audit: type=1800 audit(1777626860.919:184): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2066" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1167.440510][ T28] audit: type=1800 audit(1777626861.269:185): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2064" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 1167.625419][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bf6a400: rx timeout, send abort [ 1167.867009][T14000] loop3: detected capacity change from 0 to 2048 [ 1167.970785][T14000] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1168.080725][T14001] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1168.133887][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bf6a400: abort rx timeout. Force session deactivation [ 1169.027820][T14000] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1169.167639][T14000] Remounting filesystem read-only [ 1169.173776][T14000] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1169.754950][T14021] loop0: detected capacity change from 0 to 16 [ 1169.779178][T14021] erofs: (device loop0): mounted with root inode @ nid 36. [ 1169.790737][T14021] syz.0.2075: attempt to access beyond end of device [ 1169.790737][T14021] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1171.571002][ T28] audit: type=1800 audit(1777626865.329:186): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2075" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1171.907553][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1174.528110][T14045] loop2: detected capacity change from 0 to 2048 [ 1174.590235][T14045] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1174.645588][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop2 [ 1174.769799][T14051] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1175.508904][T14059] loop1: detected capacity change from 0 to 16 [ 1175.653018][T14045] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1175.679393][T14045] Remounting filesystem read-only [ 1175.688797][T14045] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1175.707778][T14059] erofs: (device loop1): mounted with root inode @ nid 36. [ 1175.771378][T14055] syz.1.2078: attempt to access beyond end of device [ 1175.771378][T14055] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1175.811266][T14055] syz.1.2078: attempt to access beyond end of device [ 1175.811266][T14055] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1175.865633][T14055] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1175.877010][ T28] audit: type=1800 audit(1777626869.709:187): pid=14055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2078" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1176.204373][T14064] loop3: detected capacity change from 0 to 32768 [ 1176.281910][T14064] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1176.759091][ T28] audit: type=1800 audit(1777626870.589:188): pid=14074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2086" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 1177.169302][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e69bc00: rx timeout, send abort [ 1177.559341][T14077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1177.630972][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.637736][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.677762][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e69bc00: abort rx timeout. Force session deactivation [ 1181.363678][T14100] loop1: detected capacity change from 0 to 2048 [ 1181.397911][T14100] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1181.492934][T14103] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1181.506841][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop1 [ 1181.515671][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 1181.867067][T14111] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1181.887391][T14111] Remounting filesystem read-only [ 1181.895879][T14111] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1183.244957][T14131] loop0: detected capacity change from 0 to 16 [ 1183.315625][T14131] erofs: (device loop0): mounted with root inode @ nid 36. [ 1183.411152][T14131] syz.0.2100: attempt to access beyond end of device [ 1183.411152][T14131] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1183.870986][T14131] syz.0.2100: attempt to access beyond end of device [ 1183.870986][T14131] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1183.953032][T14131] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1184.068608][ T28] audit: type=1800 audit(1777626877.879:189): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2100" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1184.848659][T14149] loop1: detected capacity change from 0 to 2048 [ 1184.868723][T14149] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1184.923968][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop1 [ 1184.976063][T14151] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1185.352333][T14152] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1185.374229][T14152] Remounting filesystem read-only [ 1185.382508][T14152] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1185.838399][T14159] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1187.210760][T14182] loop0: detected capacity change from 0 to 16 [ 1187.319998][T14182] erofs: (device loop0): mounted with root inode @ nid 36. [ 1187.393716][T14182] syz.0.2114: attempt to access beyond end of device [ 1187.393716][T14182] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1187.549532][T14182] syz.0.2114: attempt to access beyond end of device [ 1187.549532][T14182] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1188.832053][T14182] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1188.878384][ T28] audit: type=1800 audit(1777626882.689:190): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2114" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1189.142603][T14197] loop1: detected capacity change from 0 to 16 [ 1189.246658][T14197] erofs: (device loop1): mounted with root inode @ nid 36. [ 1189.333573][T14199] loop3: detected capacity change from 0 to 2048 [ 1189.346254][T14197] syz.1.2118: attempt to access beyond end of device [ 1189.346254][T14197] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1189.380947][T14199] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1189.462637][T14200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1189.495276][T14197] syz.1.2118: attempt to access beyond end of device [ 1189.495276][T14197] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1189.535900][T14197] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1189.569302][ T28] audit: type=1800 audit(1777626883.399:191): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2118" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1189.839639][T14201] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1189.849250][T14201] Remounting filesystem read-only [ 1189.858287][T14201] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1190.160678][T14204] loop1: detected capacity change from 0 to 256 [ 1190.322714][T14204] FAT-fs (loop1): Directory bread(block 64) failed [ 1190.391292][T14204] FAT-fs (loop1): Directory bread(block 65) failed [ 1190.425705][T14204] FAT-fs (loop1): Directory bread(block 66) failed [ 1190.470278][T14204] FAT-fs (loop1): Directory bread(block 67) failed [ 1190.477519][T14204] FAT-fs (loop1): Directory bread(block 68) failed [ 1190.495466][T14204] FAT-fs (loop1): Directory bread(block 69) failed [ 1190.511851][T14204] FAT-fs (loop1): Directory bread(block 70) failed [ 1190.535165][T14204] FAT-fs (loop1): Directory bread(block 71) failed [ 1190.541894][T14204] FAT-fs (loop1): Directory bread(block 72) failed [ 1190.569702][T14204] FAT-fs (loop1): Directory bread(block 73) failed [ 1190.759215][T14206] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1191.382111][T14221] loop2: detected capacity change from 0 to 16 [ 1191.792375][T14221] erofs: (device loop2): mounted with root inode @ nid 36. [ 1192.705010][T14231] loop1: detected capacity change from 0 to 16 [ 1192.743935][T14231] erofs: (device loop1): mounted with root inode @ nid 36. [ 1192.787791][T14231] syz.1.2127: attempt to access beyond end of device [ 1192.787791][T14231] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1192.862881][T14231] syz.1.2127: attempt to access beyond end of device [ 1192.862881][T14231] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1192.899755][T14231] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1192.924777][ T28] audit: type=1800 audit(1777626886.749:192): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2127" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1193.224961][T14238] loop0: detected capacity change from 0 to 2048 [ 1193.240301][T14242] loop1: detected capacity change from 0 to 256 [ 1193.296903][T14238] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1193.398266][T14242] FAT-fs (loop1): Directory bread(block 64) failed [ 1193.451818][T14242] FAT-fs (loop1): Directory bread(block 65) failed [ 1193.459186][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop0 [ 1193.488328][T14242] FAT-fs (loop1): Directory bread(block 66) failed [ 1193.494949][T14242] FAT-fs (loop1): Directory bread(block 67) failed [ 1193.522294][T14243] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1193.575576][T14242] FAT-fs (loop1): Directory bread(block 68) failed [ 1193.582202][T14242] FAT-fs (loop1): Directory bread(block 69) failed [ 1194.004207][T14242] FAT-fs (loop1): Directory bread(block 70) failed [ 1194.155333][T14242] FAT-fs (loop1): Directory bread(block 71) failed [ 1194.162077][T14242] FAT-fs (loop1): Directory bread(block 72) failed [ 1194.218670][T14244] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1194.230565][T14242] FAT-fs (loop1): Directory bread(block 73) failed [ 1194.426914][T14244] Remounting filesystem read-only [ 1194.433227][T14244] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1194.528938][T14248] loop3: detected capacity change from 0 to 16 [ 1194.544871][T14248] erofs: (device loop3): mounted with root inode @ nid 36. [ 1194.556031][T14248] syz.3.2132: attempt to access beyond end of device [ 1194.556031][T14248] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1194.573007][T14248] syz.3.2132: attempt to access beyond end of device [ 1194.573007][T14248] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1194.586912][T14248] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1194.598286][ T28] audit: type=1800 audit(1777626888.429:193): pid=14248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2132" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1196.182501][T14269] loop2: detected capacity change from 0 to 32768 [ 1196.740845][T14269] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1197.084008][T14282] loop1: detected capacity change from 0 to 2048 [ 1197.111839][ T28] audit: type=1800 audit(1777626890.929:194): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2139" name=".log" dev="loop2" ino=17059 res=0 errno=0 [ 1197.142836][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d6dc000: rx timeout, send abort [ 1197.152888][T14284] loop3: detected capacity change from 0 to 2048 [ 1197.170720][T14282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.190242][T14284] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1197.246096][T14286] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1197.635730][T14287] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1197.645772][T14287] Remounting filesystem read-only [ 1197.651219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d6dc000: abort rx timeout. Force session deactivation [ 1197.664755][T14287] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1198.134695][T14299] loop3: detected capacity change from 0 to 2048 [ 1198.181912][T14299] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1198.223027][T14300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1198.241743][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop3 [ 1198.622287][T14301] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1198.649806][T14301] Remounting filesystem read-only [ 1198.658818][T14301] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1198.866393][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 1200.075665][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1200.452458][T14318] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.459070][T14318] binder: 14317:14318 ioctl 4018620d 200000000100 returned -16 [ 1200.540421][T14320] loop0: detected capacity change from 0 to 2048 [ 1201.347662][T14320] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1201.429744][T14318] binder: BINDER_SET_CONTEXT_MGR already set [ 1201.445191][T14318] binder: 14317:14318 ioctl 4018620d 200000001000 returned -16 [ 1201.468387][T14326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1201.517745][ T5788] udevd[5788]: incorrect nilfs2 checksum on /dev/loop0 [ 1201.752310][T14331] loop3: detected capacity change from 0 to 2048 [ 1201.768665][T14330] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1201.775756][T14331] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1201.789298][T14330] Remounting filesystem read-only [ 1201.797158][T14330] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1201.829949][T14332] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1202.240978][T14337] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1203.343688][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 1203.355305][T14340] overlayfs: missing 'lowerdir' [ 1203.431619][T14337] Remounting filesystem read-only [ 1203.447851][T14337] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1206.525908][T14374] loop3: detected capacity change from 0 to 16 [ 1206.549768][T14374] erofs: (device loop3): mounted with root inode @ nid 36. [ 1206.570125][T14374] syz.3.2165: attempt to access beyond end of device [ 1206.570125][T14374] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1206.627209][T14374] syz.3.2165: attempt to access beyond end of device [ 1206.627209][T14374] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1206.641294][T14374] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1206.669935][ T28] audit: type=1800 audit(1777626900.479:195): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2165" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1207.329654][T14370] loop1: detected capacity change from 0 to 2048 [ 1207.387887][T14370] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1207.492451][ T5782] udevd[5782]: incorrect nilfs2 checksum on /dev/loop1 [ 1207.495441][T14377] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.552751][T14379] loop3: detected capacity change from 0 to 2048 [ 1207.578404][T14379] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1207.762805][T14380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.799822][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop3 [ 1212.615396][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1212.808347][T14381] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1212.820821][T14381] Remounting filesystem read-only [ 1213.076950][ T5770] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1213.324435][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 1213.922348][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1213.995159][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1214.004111][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1214.045988][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1214.067510][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1214.077974][ T5770] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 1214.098537][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1214.111304][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1214.178334][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'. [ 1214.189541][T14407] overlayfs: missing 'lowerdir' [ 1214.394159][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1215.097584][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1215.105589][ T5770] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 1215.112868][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1215.155747][ T5770] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1215.189234][ T5770] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1215.218443][ T5770] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 1215.242174][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1215.340021][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1215.595391][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1215.602724][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1215.647722][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1215.663540][ T5770] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1215.689647][ T5770] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1215.698272][ T5770] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1215.709392][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1215.728714][ T5770] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1215.738143][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1215.749860][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1215.833608][ T5770] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1215.950051][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1216.245284][ T5770] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 1216.265345][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1216.301962][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1216.338065][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1216.372381][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1216.626686][T14427] loop2: detected capacity change from 0 to 2048 [ 1216.649396][T14427] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1216.684806][T14429] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1218.496003][T14433] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1218.545655][T14433] Remounting filesystem read-only [ 1218.557966][T14430] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1218.803954][T14439] loop3: detected capacity change from 0 to 2048 [ 1218.934990][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop3 [ 1218.953650][T14439] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1218.980886][T14445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1220.665387][T13032] Bluetooth: hci3: command 0x0406 tx timeout [ 1220.707273][T14447] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1221.003307][T14447] Remounting filesystem read-only [ 1221.016495][T14446] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1221.211838][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'. [ 1221.230265][T14457] overlayfs: missing 'lowerdir' [ 1223.503141][T14477] loop3: detected capacity change from 0 to 2048 [ 1223.527211][T14477] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1223.599857][T14478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1223.975738][T14482] loop0: detected capacity change from 0 to 2048 [ 1224.187469][T14487] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1225.601416][T14482] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1225.615440][T14487] Remounting filesystem read-only [ 1225.629816][T14485] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1225.745576][T14490] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1228.022686][T14497] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1228.040320][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 1228.065328][T14502] overlayfs: missing 'lowerdir' [ 1228.568526][T14497] Remounting filesystem read-only [ 1228.580465][T14492] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1229.689532][T14514] Bluetooth: MGMT ver 1.22 [ 1229.975767][T14526] loop0: detected capacity change from 0 to 2048 [ 1229.989734][T14526] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1230.046319][T14528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1230.356006][T10384] Bluetooth: hci3: command 0x0406 tx timeout [ 1230.490780][T14534] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1230.607418][T14534] Remounting filesystem read-only [ 1230.616192][T14534] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1232.011217][T10384] Bluetooth: hci0: command 0x0406 tx timeout [ 1232.133987][T13032] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1232.686400][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 1232.697588][T14547] overlayfs: missing 'lowerdir' [ 1233.560920][T14537] loop1: detected capacity change from 0 to 4096 [ 1234.894608][T14556] loop0: detected capacity change from 0 to 2048 [ 1235.168062][T14556] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1235.542608][T14561] loop2: detected capacity change from 0 to 2048 [ 1236.376779][ T5782] udevd[5782]: incorrect nilfs2 checksum on /dev/loop0 [ 1236.393493][T14561] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1236.459091][T14566] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1236.529307][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop2 [ 1236.711455][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop2 [ 1236.745911][T14568] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1238.760964][T14574] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1238.780381][T14577] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1239.835909][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.842293][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.859896][T14577] Remounting filesystem read-only [ 1239.908583][T14574] Remounting filesystem read-only [ 1240.641129][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 1240.657920][T14589] overlayfs: missing 'lowerdir' [ 1242.299619][T14598] Invalid ELF header len 8 [ 1243.074322][T14601] loop1: detected capacity change from 0 to 2048 [ 1243.084122][T14601] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1243.323054][T14608] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1243.415893][T14609] loop2: detected capacity change from 0 to 2048 [ 1243.489225][T14609] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1243.600299][T14610] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1244.197227][T14612] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1246.175347][T14615] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1246.275118][T14612] Remounting filesystem read-only [ 1246.301363][T14611] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1246.311784][T14615] Remounting filesystem read-only [ 1246.318765][T14615] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1248.695351][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'. [ 1248.706311][T14638] overlayfs: missing 'lowerdir' [ 1251.071258][T14642] loop2: detected capacity change from 0 to 2048 [ 1251.172324][T14642] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1251.243183][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop2 [ 1251.259850][T14647] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1252.875363][T14649] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1254.117672][T14649] Remounting filesystem read-only [ 1254.692948][T14660] loop0: detected capacity change from 0 to 2048 [ 1254.927900][T14660] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1255.425327][T14666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1256.778358][T14672] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1258.178057][T14672] Remounting filesystem read-only [ 1258.743177][T14688] overlayfs: missing 'lowerdir' [ 1260.348337][T14693] loop1: detected capacity change from 0 to 2048 [ 1260.391154][T14693] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1260.784622][T14702] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1261.707192][T14704] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1262.345921][T14704] Remounting filesystem read-only [ 1262.360947][T14703] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1262.600493][T14711] loop0: detected capacity change from 0 to 2048 [ 1262.659236][T14711] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1263.449091][T14715] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1263.995962][T14723] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1264.590239][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2254'. [ 1264.643405][T14726] overlayfs: missing 'lowerdir' [ 1265.075173][T14723] Remounting filesystem read-only [ 1265.081503][T14723] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1266.539376][T14736] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.545609][T14736] binder: 14735:14736 ioctl 4018620d 200000000100 returned -16 [ 1267.689977][T14739] binder: BINDER_SET_CONTEXT_MGR already set [ 1267.725481][T14739] binder: 14735:14739 ioctl 4018620d 200000001000 returned -16 [ 1267.826848][T14748] loop0: detected capacity change from 0 to 2048 [ 1267.847607][T14748] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1267.914826][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop0 [ 1268.020705][T14751] loop3: detected capacity change from 0 to 16 [ 1268.700056][T14751] erofs: (device loop3): mounted with root inode @ nid 36. [ 1268.722174][T14750] syz.3.2261: attempt to access beyond end of device [ 1268.722174][T14750] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1268.749391][T14750] syz.3.2261: attempt to access beyond end of device [ 1268.749391][T14750] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1268.764453][T14750] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1268.786502][T14750] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1268.798159][T14750] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1268.826923][ T28] audit: type=1800 audit(1777626962.609:196): pid=14750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2261" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1269.004766][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop0 [ 1269.032734][T14752] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1269.244188][ T12] ------------[ cut here ]------------ [ 1269.250389][ T12] WARNING: CPU: 0 PID: 12 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.261411][ T12] Modules linked in: [ 1269.265437][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1269.272881][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.283080][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 1269.289458][ T12] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.297035][ T12] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1269.317638][ T12] RSP: 0018:ffffc90000117200 EFLAGS: 00010287 [ 1269.323806][ T12] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: 0000000000100000 [ 1269.332063][ T12] RDX: ffffc90017d19000 RSI: 0000000000004304 RDI: 0000000000004305 [ 1269.340142][ T12] RBP: dffffc0000000000 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 1269.348560][ T12] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: 0000000000000001 [ 1269.356660][ T12] R13: ffff88805c82a5d9 R14: ffff888079c5ac70 R15: ffff888079c5ace8 [ 1269.364692][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1269.373918][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1269.380611][ T12] CR2: 00007f2fe79f5ff8 CR3: 0000000061666000 CR4: 00000000003506f0 [ 1269.388717][ T12] Call Trace: [ 1269.392082][ T12] [ 1269.395116][ T12] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1269.401692][ T12] ieee80211_csa_finalize+0x5a6/0xf20 [ 1269.407180][ T12] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1269.413240][ T12] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1269.420556][ T12] ieee80211_channel_switch+0xad5/0xe70 [ 1269.426328][ T12] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1269.431951][ T12] ? rcu_is_watching+0x15/0xb0 [ 1269.436851][ T12] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1269.442745][ T12] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 1269.449287][ T12] ? trace_drv_return_int+0x1c0/0x1c0 [ 1269.454678][ T12] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 1269.460539][ T12] ? mutex_lock_nested+0x20/0x20 [ 1269.465601][ T12] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 1269.471862][ T12] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1269.477709][ T12] ? mark_lock+0x94/0x320 [ 1269.482195][ T12] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1269.488299][ T12] ? lock_chain_count+0x20/0x20 [ 1269.492747][T14754] ------------[ cut here ]------------ [ 1269.493184][ T12] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1269.499638][T14754] WARNING: CPU: 1 PID: 14754 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.504961][ T12] ? kcov_remote_start+0x4cb/0x7e0 [ 1269.516077][T14754] Modules linked in: [ 1269.516099][T14754] CPU: 1 PID: 14754 Comm: syz.3.2263 Not tainted syzkaller #0 [ 1269.521932][ T12] ? lockdep_hardirqs_on+0x98/0x150 [ 1269.521975][ T12] ? kcov_remote_start+0x8f/0x7e0 [ 1269.522010][ T12] ieee80211_iface_work+0x717/0xc70 [ 1269.522039][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1269.522076][ T12] cfg80211_wiphy_work+0x225/0x260 [ 1269.522116][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 1269.522148][ T12] process_scheduled_works+0xa5d/0x15d0 [ 1269.522214][ T12] ? worker_attach_to_pool+0x380/0x380 [ 1269.522261][ T12] ? assign_work+0x3d2/0x5d0 [ 1269.522298][ T12] worker_thread+0xa55/0xfc0 [ 1269.522363][ T12] kthread+0x2fa/0x390 [ 1269.522385][ T12] ? pr_cont_work+0x560/0x560 [ 1269.522416][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1269.522439][ T12] ret_from_fork+0x48/0x80 [ 1269.522465][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1269.526787][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.534026][ T12] ret_from_fork_asm+0x11/0x20 [ 1269.539414][T14754] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.544493][ T12] [ 1269.549871][T14754] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1269.549897][T14754] RSP: 0018:ffffc9000bcb6e00 EFLAGS: 00010283 [ 1269.549923][T14754] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: 0000000000080000 [ 1269.555165][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1269.555177][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1269.555197][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.555211][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 1269.555244][ T12] Call Trace: [ 1269.555252][ T12] [ 1269.555260][ T12] dump_stack_lvl+0x18c/0x250 [ 1269.555335][ T12] ? show_regs_print_info+0x20/0x20 [ 1269.555448][ T12] ? load_image+0x420/0x420 [ 1269.555584][ T12] panic+0x2dc/0x730 [ 1269.555682][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 1269.555823][ T12] ? ret_from_fork_asm+0x11/0x20 [ 1269.555922][ T12] __warn+0x2e0/0x470 [ 1269.555994][ T12] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.556074][ T12] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.556144][ T12] report_bug+0x2be/0x4f0 [ 1269.556208][ T12] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.556286][ T12] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.556354][ T12] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1269.556454][ T12] handle_bug+0xcf/0x120 [ 1269.556511][ T12] exc_invalid_op+0x1a/0x50 [ 1269.556567][ T12] asm_exc_invalid_op+0x1a/0x20 [ 1269.556634][ T12] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1269.556711][ T12] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1269.556765][ T12] RSP: 0018:ffffc90000117200 EFLAGS: 00010287 [ 1269.556826][ T12] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: 0000000000100000 [ 1269.556876][ T12] RDX: ffffc90017d19000 RSI: 0000000000004304 RDI: 0000000000004305 [ 1269.556950][ T12] RBP: dffffc0000000000 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 1269.556987][ T12] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: 0000000000000001 [ 1269.557023][ T12] R13: ffff88805c82a5d9 R14: ffff888079c5ac70 R15: ffff888079c5ace8 [ 1269.557089][ T12] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1269.557234][ T12] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1269.557323][ T12] ieee80211_csa_finalize+0x5a6/0xf20 [ 1269.557422][ T12] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1269.557509][ T12] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1269.557608][ T12] ieee80211_channel_switch+0xad5/0xe70 [ 1269.557722][ T12] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1269.557818][ T12] ? rcu_is_watching+0x15/0xb0 [ 1269.557885][ T12] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1269.557980][ T12] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 1269.558069][ T12] ? trace_drv_return_int+0x1c0/0x1c0 [ 1269.558122][ T12] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 1269.558388][ T12] ? mutex_lock_nested+0x20/0x20 [ 1269.558502][ T12] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 1269.558645][ T12] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1269.558738][ T12] ? mark_lock+0x94/0x320 [ 1269.558823][ T12] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1269.558900][ T12] ? lock_chain_count+0x20/0x20 [ 1269.558957][ T12] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1269.559040][ T12] ? kcov_remote_start+0x4cb/0x7e0 [ 1269.559117][ T12] ? lockdep_hardirqs_on+0x98/0x150 [ 1269.559190][ T12] ? kcov_remote_start+0x8f/0x7e0 [ 1269.559286][ T12] ieee80211_iface_work+0x717/0xc70 [ 1269.559353][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1269.559440][ T12] cfg80211_wiphy_work+0x225/0x260 [ 1269.559517][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 1269.559608][ T12] process_scheduled_works+0xa5d/0x15d0 [ 1269.559779][ T12] ? worker_attach_to_pool+0x380/0x380 [ 1269.559878][ T12] ? assign_work+0x3d2/0x5d0 [ 1269.559966][ T12] worker_thread+0xa55/0xfc0 [ 1269.560132][ T12] kthread+0x2fa/0x390 [ 1269.560180][ T12] ? pr_cont_work+0x560/0x560 [ 1269.560263][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1269.560319][ T12] ret_from_fork+0x48/0x80 [ 1269.560385][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1269.560427][T14754] RDX: ffffc9000d38a000 RSI: 000000000000cfdf RDI: 000000000000cfe0 [ 1269.560443][T14754] RBP: dffffc0000000000 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 1269.560501][T14754] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: 0000000000000001 [ 1269.560559][T14754] R13: ffff88805cf665d9 R14: ffff88807a63ac70 R15: ffff88807a63ace8 [ 1269.560629][T14754] FS: 00007f2fe79f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1269.560683][T14754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1269.560718][T14754] CR2: 00007fca563456b8 CR3: 000000001cf19000 CR4: 00000000003506e0 [ 1269.560781][T14754] Call Trace: [ 1269.560794][T14754] [ 1269.560859][T14754] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1269.560949][T14754] ieee80211_csa_finalize+0x5a6/0xf20 [ 1269.561048][T14754] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1269.561130][T14754] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1269.561235][T14754] ieee80211_channel_switch+0xad5/0xe70 [ 1269.561347][T14754] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1269.561446][T14754] ? mutex_lock_nested+0x20/0x20 [ 1269.561513][T14754] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1269.561602][T14754] rdev_channel_switch+0xeb/0x240 [ 1269.561679][T14754] nl80211_channel_switch+0xae8/0x1120 [ 1269.561757][T14754] ? genl_family_rcv_msg_doit+0xce/0x310 [ 1269.561835][T14754] ? __mutex_trylock_common+0x159/0x260 [ 1269.561883][T14754] ? mutex_unlock+0x10/0x10 [ 1269.561949][T14754] ? nl80211_set_coalesce+0x1340/0x1340 [ 1269.562199][T14754] ? __nla_parse+0x40/0x50 [ 1269.562259][T14754] ? nl80211_pre_doit+0x4f1/0x930 [ 1269.562355][T14754] genl_family_rcv_msg_doit+0x211/0x310 [ 1269.562420][T14754] ? end_current_label_crit_section+0x170/0x170 [ 1269.562514][T14754] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1269.562603][T14754] ? bpf_lsm_capable+0x9/0x10 [ 1269.562679][T14754] ? security_capable+0x89/0xb0 [ 1269.562785][T14754] genl_rcv_msg+0x619/0x7a0 [ 1269.562862][T14754] ? genl_bind+0x360/0x360 [ 1269.562908][T14754] ? nl80211_exit+0x30/0x30 [ 1269.562981][T14754] ? nl80211_set_coalesce+0x1340/0x1340 [ 1269.563059][T14754] ? nl80211_pre_doit+0x930/0x930 [ 1269.563126][T14754] ? ref_tracker_free+0x690/0x840 [ 1269.563224][T14754] netlink_rcv_skb+0x241/0x4d0 [ 1269.563316][T14754] ? genl_bind+0x360/0x360 [ 1269.563394][T14754] ? netlink_ack+0x1180/0x1180 [ 1269.563529][T14754] ? __lock_acquire+0x7d40/0x7d40 [ 1269.563616][T14754] ? down_read+0x1ac/0x2e0 [ 1269.563683][T14754] genl_rcv+0x28/0x40 [ 1269.563738][T14754] netlink_unicast+0x751/0x8d0 [ 1269.563849][T14754] netlink_sendmsg+0x8d0/0xbf0 [ 1269.563968][T14754] ? netlink_getsockopt+0x590/0x590 [ 1269.564065][T14754] ? aa_sock_msg_perm+0x94/0x150 [ 1269.564142][T14754] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1269.564208][T14754] ? security_socket_sendmsg+0x80/0xa0 [ 1269.564270][T14754] ? netlink_getsockopt+0x590/0x590 [ 1269.564369][T14754] ____sys_sendmsg+0x5ba/0x960 [ 1269.564455][T14754] ? __asan_memset+0x22/0x40 [ 1269.564533][T14754] ? __sys_sendmsg_sock+0x30/0x30 [ 1269.564578][T14754] ? __import_iovec+0x5f2/0x850 [ 1269.564667][T14754] ? import_iovec+0x73/0xa0 [ 1269.564764][T14754] ___sys_sendmsg+0x2a6/0x360 [ 1269.564854][T14754] ? __sys_sendmsg+0x2a0/0x2a0 [ 1269.565274][T14754] __se_sys_sendmsg+0x1c2/0x2b0 [ 1269.565341][T14754] ? __x64_sys_sendmsg+0x80/0x80 [ 1269.565451][T14754] ? lockdep_hardirqs_on+0x98/0x150 [ 1269.565535][T14754] do_syscall_64+0x55/0xa0 [ 1269.565588][T14754] ? clear_bhb_loop+0x40/0x90 [ 1269.565655][T14754] ? clear_bhb_loop+0x40/0x90 [ 1269.565724][T14754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.565795][T14754] RIP: 0033:0x7f2fe979cdd9 [ 1269.565849][T14754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.565894][T14754] RSP: 002b:00007f2fe79f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.565948][T14754] RAX: ffffffffffffffda RBX: 00007f2fe9a15fa0 RCX: 00007f2fe979cdd9 [ 1269.565991][T14754] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1269.566025][T14754] RBP: 00007f2fe9832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1269.566065][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.566091][T14754] R13: 00007f2fe9a16038 R14: 00007f2fe9a15fa0 R15: 00007ffd2c4707e8 [ 1269.566178][T14754] [ 1269.566203][T14754] irq event stamp: 1397 [ 1269.566232][T14754] hardirqs last enabled at (1399): [] vprintk_store+0xa33/0xda0 [ 1269.566348][T14754] hardirqs last disabled at (1400): [] vprintk_store+0x190/0xda0 [ 1269.566439][T14754] softirqs last enabled at (1244): [] __irq_exit_rcu+0xd3/0x190 [ 1269.566505][T14754] softirqs last disabled at (1235): [] __irq_exit_rcu+0xd3/0x190 [ 1269.566570][T14754] ---[ end trace 0000000000000000 ]--- [ 1270.510504][ T12] ret_from_fork_asm+0x11/0x20 [ 1270.515335][ T12] [ 1270.518969][ T12] Kernel Offset: disabled [ 1270.523430][ T12] Rebooting in 86400 seconds..