last executing test programs: 4.889625846s ago: executing program 2 (id=806): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400000004000000000100000000", @ANYBLOB="0000000000a9499d64009f856e66d7"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x275}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0d", 0xc1}], 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 4.808081304s ago: executing program 2 (id=807): syz_mount_image$xfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200800, &(0x7f0000000200)={[{@inode32}, {}, {@filestreams}, {@uqnoenforce}, {@noquota}]}, 0x4, 0x9647, &(0x7f0000007100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000020fc0)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000021000)='E', 0x1, 0x4fed3) r1 = open(&(0x7f0000021040)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 4.311621414s ago: executing program 3 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x47, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x69, &(0x7f0000000300)=[@cr4={0x1, 0x40be6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.161946819s ago: executing program 0 (id=814): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x40d, &(0x7f00000000c0)={[{@block_validity}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@errors_remount}, {@barrier}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000180)="$eJzs28tvG8UfAPDvrpP219cvBpVHH0CgICIeSZOW0gMXEEgggYQEh3IMiVuFug1qgkSrCAKqyhFV4o44IuAf4AQXBJyQuILEEVWqUC4tnIzW9qa2a6dJ6sQl/nykTWZ2x5n5enc2szN2AH1rOPuRROyOiN8iYqiWbS4wXPt1fWlh6u+lhakkKpU3/kqq5a4tLUzlRfPX7cozAxHpxSQOtKl37vyF05PlculcPT82f+bdsbnzF56eOTN5qnSqdHbi+PGjR8afPTbxTFfizOK6tv+D2YP7Xn7r8mtTJy6//dPXSR5/SxxdMrzSwccqlS5X11t7GtLJQA8bwpoUat00Bqv9fygKkS4fG4qXPu5p44ANValUKvd2PrxYAbawJHrdAqA38n/02fNvvm3S0OOOcPX5iHjlm2r81+tb7cjA8pPQYMvzbTcNR8SJxX8+z7bYmHkIAIAm32Xjn6fajf/SaJwX+n99DaUYEXdFxN0RcSwi9kbEPRHVsvdFxP1rrL91keTm8U96ZV2BrVI2/nuuvrbVPP5bngcvFuq5PdX4B5OTM+XS4fp7MhKD27P8+Ap1fP/ir592OtY4/su2rP58LFhvx5WB7c2vmZ6cn7ydmBtd/Shi/0C7+JPIl3GSiNgXEfvXWcfME18e7HTs1vGvoAvrTJUvIh6vnf/FaIk/l6y8Pjn2vyiXDo/lV8XNfv7l0uud6r+t+LsgO/87217/y/EXk8b12rm113Hp9086PtOs9/rflrzZtO/9yfn5c+MR25JXa41u3D/RUm7iRvks/pFDbeIvptV7XP5OHIiI7CJ+ICIejIiH6m1/OCIeiYhDK8T/4wuPvrP++DdWFv/0ms7/jcS2aN3TPlE4/cO3TZUW1xJ/dv6PVlMj9T2ruf+tpl3ru5oBAADgvyeNiN2RpKPL6TQdHa19hn9v7EzLs3PzT56cfe/sdO07AsUYTPOZrqGG+dDx+mN9LZ/ERFO+XDpSnzf+rLCjmh+dmi1P9zp46HO7OvT/zJ+F2mdfgC3M97Wgf+n/0L/0f+hf+j/0rzb9f0dz9qJbBGxR7Tr3hz1oB7D5Wvp/oVftADafwT30L/0f+pf+D31pbkfc+kvyElsi8cdX3fyDkd4pcUlsRKLXdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+DcAAP//jOPoTA==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.821797174s ago: executing program 2 (id=816): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x20, 0x16, 0x3, "3f1c15"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x20, 0x5, 0x9, "61957b9d3518cb1306"}, 0x0, 0x0}) 3.7534159s ago: executing program 0 (id=817): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x0, [[0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xfffffeff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x9a8fcca0}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x6, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000340)={0x0, &(0x7f00000008c0)="d9b07cd868327ed45a1eca22b1f0fad6b4487a5cd2bb93a47688daf276452127e3b8eac1c92ec346b65e300691aaf42f2434072cff6bb39f146c094a57be200160d9dc52e976fb2b41aa7af07668a2ebf2acb735a26bceeacd093c3f3d3d633b0ea6452784e49a8aa4475553e56c9c93352b128bdaecf4ae8d3c19cc6e39ea38a0d6b21c1345521de8fb52e34325f7221c05636050fd44b4af676fffdc08e4912f471a1dbdc460d7f3be4b2106c6fac97392746f014f5bd6a49ffdb3565cea07775412e29eee73904e5b6a18b3979a1f08", 0xd1}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000380)={0x1, 0x800, 0xe323, 0x5, 0x5, 0x9, 0x80000002, 0xffc, 0x2, 0x7, 0x7, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 3.751820111s ago: executing program 3 (id=818): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 3.569026479s ago: executing program 0 (id=820): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.241788022s ago: executing program 3 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x8000000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x3e, 0x17, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0xa, 0x0, 0x22, 0x5, 0x7b, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0xb, 0x0, 0x19, 0x1, 0xd, 0x5, 0x81}, {0x1ffc, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x2, 0xe}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x18, 0x19, 0xab, 0x2, 0x3, 0x83, 0x4, 0x83}, {0x0, 0x200000, 0x8, 0x4, 0xad, 0x8, 0xfe, 0xf3, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0x0, 0x7, 0x8, 0x5, 0x9, 0x5, 0xc, 0xd, 0xff, 0x6d}, {0xffe, 0x1, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x32}, {0xeeee8000, 0x4}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0x4000003, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x65, 0xf]}) 3.091546987s ago: executing program 1 (id=824): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='3', 0x4e) syz_mount_image$f2fs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f0000000900)="$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") 2.715818935s ago: executing program 3 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000480)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000780)=[{0x6, 0x1, 0x6, 0x7ff00003}]}) 2.714598016s ago: executing program 1 (id=827): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/201, 0x20}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000003c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001880)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.325444305s ago: executing program 0 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2, 0xfffffffffffffffc}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x37}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}]}) 2.176088979s ago: executing program 1 (id=829): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0xa00008, &(0x7f0000000080), 0x1, 0x7c8, &(0x7f0000000d40)="$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") ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, '\x00'/41}) 2.113977566s ago: executing program 0 (id=830): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000004c0)={0x0, 0x17, 0x6, "6e748030ac96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.013831746s ago: executing program 3 (id=831): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000700), 0xa, 0x62080) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000000)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.750201983s ago: executing program 4 (id=832): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="00214500072800000000400600000a0000010a000002005000500000de010000000250f802e800000000", 0x2a}], 0x1, 0x8, 0x1001) 1.721062126s ago: executing program 1 (id=833): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x76400) fsync(r0) 1.568875871s ago: executing program 4 (id=834): move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close(r1) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000001c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 1.502375528s ago: executing program 1 (id=835): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2c0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 1.397408678s ago: executing program 4 (id=836): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0', 0x1) 1.257809503s ago: executing program 4 (id=837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x80, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x6, 0x0, 0x100, 0x4, 0x4200000, r1}) 1.237249075s ago: executing program 4 (id=838): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x400) r2 = dup(r0) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) read$eventfd(r0, 0x0, 0x0) inotify_rm_watch(r2, r1) 558.862223ms ago: executing program 1 (id=839): syz_mount_image$ocfs2(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x8c0, &(0x7f0000000700)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000001ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000006340)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000006380)='2', 0x1, 0xe80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006500)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000006540), 0xfea7) 558.752163ms ago: executing program 2 (id=840): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 429.548107ms ago: executing program 2 (id=841): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0xbf, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 330.430996ms ago: executing program 4 (id=842): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x20001b80}, {&(0x7f0000001340)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0x100000}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 249.957405ms ago: executing program 2 (id=843): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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") mknod$loop(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) setns(0xc9, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f00000005c0), 0x0, 0x0) sync() unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 123.052367ms ago: executing program 3 (id=844): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c1}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)={0x30000008}) 0s ago: executing program 0 (id=845): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x2000084c, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES8], 0x81, 0x14ff, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./file1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f00000000c0)={@id={0x2, 0x0, @a}}) kernel console output (not intermixed with test programs): 5471] kmem_cache_alloc+0x56/0x2f0 [ 126.232020][ T5471] ? getname_flags+0xb7/0x500 [ 126.236726][ T5471] getname_flags+0xb7/0x500 [ 126.241256][ T5471] __x64_sys_newlstat+0x114/0x1f0 [ 126.246317][ T5471] ? __ia32_sys_newstat+0x1f0/0x1f0 [ 126.251563][ T5471] ? lockdep_hardirqs_on+0x94/0x140 [ 126.251935][ T5467] loop3: detected capacity change from 0 to 32768 [ 126.256764][ T5471] do_syscall_64+0x4c/0xa0 [ 126.256790][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 126.256810][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 126.256830][ T5471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.256849][ T5471] RIP: 0033:0x7fc31ada8f19 [ 126.256877][ T5471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.256891][ T5471] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 126.256910][ T5471] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 126.256923][ T5471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.256934][ T5471] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 126.256945][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.256956][ T5471] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 126.256991][ T5471] [ 126.409205][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.531836][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 126.707919][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 126.727263][ T5480] loop1: detected capacity change from 0 to 4096 [ 127.383360][ T5502] loop2: detected capacity change from 0 to 512 [ 127.424257][ T5502] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 127.498131][ T5502] EXT4-fs (loop2): invalid journal inode [ 127.705018][ T5510] xt_NFQUEUE: number of total queues is 0 [ 128.690430][ T5517] loop4: detected capacity change from 0 to 512 [ 128.712576][ T5517] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 128.739114][ T5517] EXT4-fs (loop4): invalid journal inode [ 128.826252][ T4745] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.032380][ T4745] usb 3-1: Using ep0 maxpacket: 16 [ 129.107196][ T4745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.231911][ T4745] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 129.373414][ T4745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.530736][ T4745] usb 3-1: config 0 descriptor?? [ 129.604636][ T5507] loop3: detected capacity change from 0 to 32768 [ 129.632552][ T5507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.318 (5507) [ 129.697312][ T5507] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.722038][ T5530] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 129.736008][ T5530] syz.4.324: attempt to access beyond end of device [ 129.736008][ T5530] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 129.749015][ T5530] exFAT-fs (nbd4): unable to read boot sector [ 129.755320][ T5530] exFAT-fs (nbd4): failed to read boot sector [ 129.761517][ T5530] exFAT-fs (nbd4): failed to recognize exfat type [ 129.984562][ T5507] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 130.124467][ T5507] BTRFS info (device loop3): force clearing of disk cache [ 130.260757][ T5507] BTRFS info (device loop3): metadata ratio 0 [ 130.310481][ T4745] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:258A:6A88.0005/input/input13 [ 130.361427][ T5507] BTRFS info (device loop3): enabling ssd optimizations [ 130.448579][ T5507] BTRFS info (device loop3): using spread ssd allocation scheme [ 130.572505][ T5507] BTRFS info (device loop3): using free space tree [ 130.624295][ T4745] itetech 0003:258A:6A88.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 130.672032][ T4745] usb 3-1: USB disconnect, device number 5 [ 130.761408][ T5546] fido_id[5546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 130.945396][ T5521] loop0: detected capacity change from 0 to 32768 [ 130.984597][ T5507] BTRFS error (device loop3): open_ctree failed: -12 [ 130.991455][ T4486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4486) [ 131.252340][ T5104] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.268447][ T5562] FAULT_INJECTION: forcing a failure. [ 131.268447][ T5562] name failslab, interval 1, probability 0, space 0, times 0 [ 131.311292][ T5562] CPU: 1 PID: 5562 Comm: syz.1.331 Not tainted syzkaller #0 [ 131.318629][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.328709][ T5562] Call Trace: [ 131.332007][ T5562] [ 131.334964][ T5562] dump_stack_lvl+0x188/0x24e [ 131.339677][ T5562] ? show_regs_print_info+0x12/0x12 [ 131.344905][ T5562] ? load_image+0x410/0x410 [ 131.349437][ T5562] ? __might_sleep+0xd0/0xd0 [ 131.354080][ T5562] ? __lock_acquire+0x7ea0/0x7ea0 [ 131.359134][ T5562] should_fail_ex+0x390/0x4c0 [ 131.363837][ T5562] should_failslab+0x5/0x20 [ 131.368357][ T5562] slab_pre_alloc_hook+0x59/0x300 [ 131.373436][ T5562] ? slab_post_alloc_hook+0x67/0x490 [ 131.378752][ T5562] kmem_cache_alloc_bulk+0x42/0x4e0 [ 131.384008][ T5562] ? kmem_cache_alloc+0x1b2/0x2f0 [ 131.389060][ T5562] ? mas_alloc_nodes+0x2ec/0x880 [ 131.394040][ T5562] mas_alloc_nodes+0x449/0x880 [ 131.398841][ T5562] mas_preallocate+0x162/0x3b0 [ 131.403640][ T5562] __vma_adjust+0x2ff/0x1d00 [ 131.408266][ T5562] ? validate_mm+0x2e0/0x2e0 [ 131.412880][ T5562] ? up_write+0x1b6/0x410 [ 131.417233][ T5562] ? anon_vma_clone+0x475/0x4c0 [ 131.422112][ T5562] __split_vma+0x3a2/0x4f0 [ 131.426558][ T5562] do_mas_align_munmap+0x7b8/0x12d0 [ 131.431796][ T5562] ? do_mas_munmap+0x2b0/0x2b0 [ 131.436591][ T5562] ? mtree_range_walk+0x664/0x780 [ 131.441652][ T5562] ? mas_walk+0x15f/0x180 [ 131.446009][ T5562] ? mas_find+0x1ba/0x220 [ 131.450371][ T5562] do_mas_munmap+0x240/0x2b0 [ 131.455000][ T5562] do_munmap+0xeb/0x140 [ 131.459179][ T5562] ? do_mas_align_munmap+0x12d0/0x12d0 [ 131.464680][ T5562] ? mremap_userfaultfd_prep+0x10f/0x1f0 [ 131.470332][ T5562] move_vma+0x9bb/0xe60 [ 131.474500][ T5562] ? vma_expandable+0xf0/0xf0 [ 131.479193][ T5562] ? cap_mmap_addr+0x153/0x2c0 [ 131.484050][ T5562] ? bpf_lsm_mmap_addr+0x5/0x10 [ 131.488902][ T5562] ? security_mmap_addr+0x6e/0x90 [ 131.493922][ T5562] ? get_unmapped_area+0x2f0/0x360 [ 131.499037][ T5562] mremap_to+0x513/0x5c0 [ 131.503288][ T5562] __se_sys_mremap+0x691/0x1120 [ 131.508141][ T5562] ? __ia32_sys_get_robust_list+0x100/0x100 [ 131.514039][ T5562] ? __x64_sys_mremap+0xc0/0xc0 [ 131.518891][ T5562] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.524875][ T5562] ? lock_chain_count+0x20/0x20 [ 131.529761][ T5562] ? lockdep_hardirqs_on+0x94/0x140 [ 131.534954][ T5562] ? __x64_sys_mremap+0x1c/0xc0 [ 131.539801][ T5562] do_syscall_64+0x4c/0xa0 [ 131.544330][ T5562] ? clear_bhb_loop+0x60/0xb0 [ 131.549014][ T5562] ? clear_bhb_loop+0x60/0xb0 [ 131.553711][ T5562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.559623][ T5562] RIP: 0033:0x7fc31ada8f19 [ 131.564071][ T5562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.583697][ T5562] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 131.592114][ T5562] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 131.600092][ T5562] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 131.608060][ T5562] RBP: 00007fc31ae37f6d R08: 0000200000ff6000 R09: 0000000000000000 [ 131.616054][ T5562] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 131.624021][ T5562] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 131.631997][ T5562] [ 131.755357][ T5104] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.776625][ T5104] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.816860][ T5104] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.835041][ T5104] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 131.854841][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.864659][ T5574] loop3: detected capacity change from 0 to 512 [ 131.874137][ T5104] usb 5-1: config 0 descriptor?? [ 131.886000][ T5574] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 131.942359][ T5574] EXT4-fs (loop3): invalid journal inode [ 132.714310][ T5104] hid-thrustmaster 0003:044F:B65D.0006: unbalanced collection at end of report description [ 132.741769][ T5104] hid-thrustmaster 0003:044F:B65D.0006: parse failed with error -22 [ 132.776263][ T5104] hid-thrustmaster: probe of 0003:044F:B65D.0006 failed with error -22 [ 132.787477][ T5581] loop1: detected capacity change from 0 to 512 [ 132.794304][ T5583] loop2: detected capacity change from 0 to 128 [ 132.812532][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818839][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937708][ T5104] usb 5-1: USB disconnect, device number 7 [ 133.019603][ T5585] Mass Storage Function, version: 2009/09/11 [ 133.037579][ T5585] LUN: removable file: (no medium) [ 133.079804][ T5583] syz.2.336: attempt to access beyond end of device [ 133.079804][ T5583] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 133.093371][ T26] audit: type=1800 audit(1794341060.704:5): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.337" name="file" dev="configfs" ino=38918 res=0 errno=0 [ 133.113873][ T5583] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 133.262274][ T4747] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 133.444384][ T4747] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 133.457659][ T4747] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 133.468860][ T4747] usb 1-1: config 4 has no interface number 0 [ 133.480701][ T4747] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.499637][ T4747] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 133.509110][ T4747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.518470][ T4747] usb 1-1: Product: syz [ 133.533920][ T4747] usb 1-1: Manufacturer: syz [ 133.538570][ T4747] usb 1-1: SerialNumber: syz [ 133.567092][ T5596] loop2: detected capacity change from 0 to 22 [ 133.584254][ T5595] loop3: detected capacity change from 0 to 1024 [ 133.603417][ T5595] EXT4-fs: Ignoring removed bh option [ 133.609659][ T5596] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 133.638780][ T5596] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 133.659889][ T5595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.899343][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 133.970011][ T4747] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 133.981369][ T5592] loop4: detected capacity change from 0 to 32768 [ 134.001414][ T4747] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 134.029421][ T4747] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 134.050358][ T4747] usb 1-1: media controller created [ 134.069749][ T4747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.096385][ T5605] loop5: detected capacity change from 0 to 4095 [ 134.156403][ T5602] capability: warning: `syz.3.343' uses deprecated v2 capabilities in a way that may be insecure [ 134.268763][ T5608] loop2: detected capacity change from 0 to 512 [ 134.290597][ T4747] DVB: Unable to find symbol dib7000p_attach() [ 134.310225][ T4747] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 134.360198][ T5608] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.345: missing EA_INODE flag [ 134.420184][ T5612] loop3: detected capacity change from 0 to 512 [ 134.447701][ T5608] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.345: error while reading EA inode 12 err=-117 [ 134.533761][ T5612] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.541915][ T5608] EXT4-fs (loop2): 1 orphan inode deleted [ 134.553829][ T5612] EXT4-fs (loop3): invalid journal inode [ 134.561117][ T5608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.613412][ T4747] rc_core: IR keymap rc-dib0700-rc5 not found [ 135.339845][ T4747] Registered IR keymap rc-empty [ 135.367965][ T4747] dvb-usb: could not initialize remote control. [ 135.382144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 135.394923][ T4747] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 135.423170][ T4747] usb 1-1: USB disconnect, device number 6 [ 135.452151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 135.499678][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 135.554008][ T4747] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 135.571202][ T5626] loop3: detected capacity change from 0 to 512 [ 135.592164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 135.699315][ T5626] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 135.729084][ T5626] EXT4-fs (loop3): invalid journal inode [ 135.870194][ T5636] xt_NFQUEUE: number of total queues is 0 [ 136.666884][ T5642] loop0: detected capacity change from 0 to 1024 [ 136.721827][ T5642] EXT4-fs: Ignoring removed bh option [ 136.806788][ T5642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.826895][ T26] audit: type=1326 audit(1794341064.444:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 136.882357][ T26] audit: type=1326 audit(1794341064.454:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 136.911541][ T26] audit: type=1326 audit(1794341064.454:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 136.942322][ T4747] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.962303][ T26] audit: type=1326 audit(1794341064.454:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 137.011875][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 137.062296][ T26] audit: type=1326 audit(1794341064.454:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 137.122367][ T4747] usb 3-1: Using ep0 maxpacket: 8 [ 137.129220][ T4747] usb 3-1: config 0 has no interfaces? [ 137.141364][ T26] audit: type=1326 audit(1794341064.454:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 137.178397][ T4747] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.187789][ T4747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.196008][ T4747] usb 3-1: Product: syz [ 137.200348][ T4747] usb 3-1: Manufacturer: syz [ 137.206038][ T26] audit: type=1326 audit(1794341064.584:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 137.230921][ T4747] usb 3-1: SerialNumber: syz [ 137.247659][ T4747] usb 3-1: config 0 descriptor?? [ 137.258569][ T26] audit: type=1326 audit(1794341064.584:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ba8f19 code=0x7ffc0000 [ 137.299724][ T5658] loop4: detected capacity change from 0 to 512 [ 137.327429][ T5658] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.362494][ T5658] EXT4-fs (loop4): invalid journal inode [ 137.427718][ T5662] loop1: detected capacity change from 0 to 256 [ 137.555990][ T41] usb 3-1: USB disconnect, device number 6 [ 137.871086][ T5662] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 138.179684][ T5650] loop3: detected capacity change from 0 to 40427 [ 138.237070][ T5650] F2FS-fs (loop3): invalid crc value [ 138.288005][ T5650] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.401069][ T5677] FAULT_INJECTION: forcing a failure. [ 138.401069][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 138.463259][ T5650] F2FS-fs (loop3): Start checkpoint disabled! [ 138.488759][ T5677] CPU: 1 PID: 5677 Comm: syz.2.367 Not tainted syzkaller #0 [ 138.496114][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 138.507324][ T5677] Call Trace: [ 138.510626][ T5677] [ 138.513610][ T5677] dump_stack_lvl+0x188/0x24e [ 138.518424][ T5677] ? show_regs_print_info+0x12/0x12 [ 138.523666][ T5677] ? load_image+0x410/0x410 [ 138.528200][ T5677] ? __might_sleep+0xd0/0xd0 [ 138.532811][ T5677] ? __lock_acquire+0x7ea0/0x7ea0 [ 138.537868][ T5677] should_fail_ex+0x390/0x4c0 [ 138.542585][ T5677] should_failslab+0x5/0x20 [ 138.547110][ T5677] slab_pre_alloc_hook+0x59/0x300 [ 138.552155][ T5677] ? __split_vma+0x4f0/0x4f0 [ 138.556775][ T5677] kmem_cache_alloc+0x56/0x2f0 [ 138.561564][ T5677] ? vm_area_dup+0x23/0x1a0 [ 138.566089][ T5677] vm_area_dup+0x23/0x1a0 [ 138.570422][ T5677] __split_vma+0xb9/0x4f0 [ 138.574751][ T5677] ? split_vma+0x70/0xf0 [ 138.578995][ T5677] mlock_fixup+0x508/0x580 [ 138.583692][ T5677] apply_vma_lock_flags+0x257/0x3b0 [ 138.588909][ T5677] ? do_mlock+0x640/0x640 [ 138.593247][ T5677] ? rwsem_write_trylock+0x135/0x1c0 [ 138.598541][ T5677] ? do_mlock+0x194/0x640 [ 138.602878][ T5677] do_mlock+0x4d6/0x640 [ 138.607039][ T5677] ? lru_gen_add_folio+0xe20/0xe20 [ 138.612237][ T5677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.618346][ T5677] ? lock_chain_count+0x20/0x20 [ 138.623212][ T5677] ? syscall_enter_from_user_mode+0x21/0x80 [ 138.629149][ T5677] __x64_sys_mlock+0x5c/0x70 [ 138.633742][ T5677] do_syscall_64+0x4c/0xa0 [ 138.638161][ T5677] ? clear_bhb_loop+0x60/0xb0 [ 138.642844][ T5677] ? clear_bhb_loop+0x60/0xb0 [ 138.647525][ T5677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.653421][ T5677] RIP: 0033:0x7fc4e21a8f19 [ 138.657831][ T5677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.677446][ T5677] RSP: 002b:00007fc4e2fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 138.685867][ T5677] RAX: ffffffffffffffda RBX: 00007fc4e2425fa0 RCX: 00007fc4e21a8f19 [ 138.693836][ T5677] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 138.701802][ T5677] RBP: 00007fc4e2237f6d R08: 0000000000000000 R09: 0000000000000000 [ 138.709767][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.717748][ T5677] R13: 00007fc4e2426038 R14: 00007fc4e2425fa0 R15: 00007ffe6e8c82e8 [ 138.725735][ T5677] [ 138.761482][ T5650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 138.831211][ T26] audit: type=1800 audit(1794341066.454:14): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 139.077492][ T5666] kworker/u4:10: attempt to access beyond end of device [ 139.077492][ T5666] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 139.337503][ T5691] loop1: detected capacity change from 0 to 128 [ 139.615693][ T5691] syz.1.373: attempt to access beyond end of device [ 139.615693][ T5691] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 139.641823][ T5691] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 139.778345][ T5697] loop2: detected capacity change from 0 to 128 [ 139.815090][ T5697] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 139.862571][ T5697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.964465][ T5705] loop1: detected capacity change from 0 to 512 [ 139.991169][ T5705] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 140.068172][ T5705] EXT4-fs (loop1): invalid journal inode [ 140.827724][ T5718] loop2: detected capacity change from 0 to 164 [ 140.836816][ T5717] FAULT_INJECTION: forcing a failure. [ 140.836816][ T5717] name failslab, interval 1, probability 0, space 0, times 0 [ 140.892205][ T5717] CPU: 1 PID: 5717 Comm: syz.3.384 Not tainted syzkaller #0 [ 140.899549][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.909625][ T5717] Call Trace: [ 140.912928][ T5717] [ 140.915870][ T5717] dump_stack_lvl+0x188/0x24e [ 140.920583][ T5717] ? show_regs_print_info+0x12/0x12 [ 140.925814][ T5717] ? load_image+0x410/0x410 [ 140.930340][ T5717] ? __might_sleep+0xd0/0xd0 [ 140.934953][ T5717] ? __lock_acquire+0x7ea0/0x7ea0 [ 140.940001][ T5717] should_fail_ex+0x390/0x4c0 [ 140.944699][ T5717] should_failslab+0x5/0x20 [ 140.949212][ T5717] slab_pre_alloc_hook+0x59/0x300 [ 140.954248][ T5717] ? __might_sleep+0xd0/0xd0 [ 140.958841][ T5717] ? load_msg+0xc0/0x380 [ 140.963087][ T5717] __kmem_cache_alloc_node+0x4f/0x270 [ 140.968461][ T5717] ? load_msg+0xc0/0x380 [ 140.972703][ T5717] __kmalloc+0xa3/0x240 [ 140.976853][ T5717] load_msg+0xc0/0x380 [ 140.980930][ T5717] do_msgsnd+0x1a4/0x13c0 [ 140.985272][ T5717] ? __might_fault+0xa6/0x120 [ 140.989943][ T5717] ? __lock_acquire+0x7ea0/0x7ea0 [ 140.994960][ T5717] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.000936][ T5717] ? ksys_msgsnd+0xa0/0xa0 [ 141.005355][ T5717] ? __might_fault+0xc2/0x120 [ 141.010020][ T5717] ? __might_fault+0xa6/0x120 [ 141.014691][ T5717] ? __x64_sys_msgsnd+0xe5/0x110 [ 141.019625][ T5717] do_syscall_64+0x4c/0xa0 [ 141.024044][ T5717] ? clear_bhb_loop+0x60/0xb0 [ 141.028717][ T5717] ? clear_bhb_loop+0x60/0xb0 [ 141.033390][ T5717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.039281][ T5717] RIP: 0033:0x7fac527a8f19 [ 141.043691][ T5717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.063292][ T5717] RSP: 002b:00007fac5360f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 141.071705][ T5717] RAX: ffffffffffffffda RBX: 00007fac52a25fa0 RCX: 00007fac527a8f19 [ 141.079668][ T5717] RDX: 0000000000002000 RSI: 0000200000000a80 RDI: 0000000000000000 [ 141.087630][ T5717] RBP: 00007fac52837f6d R08: 0000000000000000 R09: 0000000000000000 [ 141.095594][ T5717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.103553][ T5717] R13: 00007fac52a26038 R14: 00007fac52a25fa0 R15: 00007ffcdcc4b8d8 [ 141.111530][ T5717] [ 141.427465][ T5729] loop2: detected capacity change from 0 to 512 [ 141.463519][ T5731] bond1: option mode: unable to set because the bond device has slaves [ 141.528541][ T5735] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 141.823992][ T5745] loop2: detected capacity change from 0 to 256 [ 141.873415][ T5745] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 141.936369][ T26] audit: type=1800 audit(1794341069.564:15): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.393" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 142.071700][ T5754] loop0: detected capacity change from 0 to 512 [ 142.100756][ T5754] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 142.149452][ T5754] EXT4-fs (loop0): invalid journal inode [ 143.528535][ T5779] loop4: detected capacity change from 0 to 512 [ 143.645566][ T5779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.707996][ T5779] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.887826][ T5794] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 143.916956][ T5794] syz.2.410: attempt to access beyond end of device [ 143.916956][ T5794] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 143.943781][ T5794] exFAT-fs (nbd2): unable to read boot sector [ 143.950973][ T5794] exFAT-fs (nbd2): failed to read boot sector [ 143.961191][ T5794] exFAT-fs (nbd2): failed to recognize exfat type [ 143.974156][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 144.336437][ T5777] loop3: detected capacity change from 0 to 32768 [ 144.399212][ T5777] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 144.421217][ T5777] JBD2: Ignoring recovery information on journal [ 144.618647][ T5777] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.698618][ T5818] block device autoloading is deprecated and will be removed. [ 144.925025][ T5826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.419'. [ 144.976741][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.012501][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.019900][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.036376][ T5829] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.103147][ T5829] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 145.260548][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.298629][ T5839] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 145.309059][ T5839] syz.4.424: attempt to access beyond end of device [ 145.309059][ T5839] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 145.322325][ T5839] exFAT-fs (nbd4): unable to read boot sector [ 145.328504][ T5839] exFAT-fs (nbd4): failed to read boot sector [ 145.343457][ T5839] exFAT-fs (nbd4): failed to recognize exfat type [ 145.560067][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.588449][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.613143][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.643619][ T5829] dummy0 speed is unknown, defaulting to 1000 [ 145.799393][ T4288] ocfs2: Unmounting device (7,3) on (node local) [ 145.999300][ T5857] netlink: 'syz.4.432': attribute type 5 has an invalid length. [ 146.076153][ T5863] loop3: detected capacity change from 0 to 64 [ 146.120933][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 146.132478][ T5098] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.147659][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 146.324664][ T5870] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 146.336469][ T5098] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.347068][ T5870] syz.3.436: attempt to access beyond end of device [ 146.347068][ T5870] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 146.361061][ T5098] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.369058][ T5870] exFAT-fs (nbd3): unable to read boot sector [ 146.376211][ T5870] exFAT-fs (nbd3): failed to read boot sector [ 146.377044][ T5098] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.406407][ T5870] exFAT-fs (nbd3): failed to recognize exfat type [ 146.437238][ T5098] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.440632][ T5872] loop4: detected capacity change from 0 to 2048 [ 146.481710][ T5098] usb 1-1: Product: syz [ 146.514964][ T5098] usb 1-1: Manufacturer: syz [ 146.531393][ T5872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.554561][ T5098] usb 1-1: SerialNumber: syz [ 146.582068][ T5098] usb 1-1: config 0 descriptor?? [ 146.609603][ T5098] usb 1-1: selecting invalid altsetting 0 [ 146.754384][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 146.823673][ T41] usb 1-1: USB disconnect, device number 7 [ 147.157618][ T5896] loop3: detected capacity change from 0 to 512 [ 147.589582][ T5896] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 147.620711][ T5896] EXT4-fs (loop3): invalid journal inode [ 147.659771][ T5902] jffs2: notice: (5902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.719665][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.447'. [ 147.798350][ T5909] xt_NFQUEUE: number of total queues is 0 [ 148.339476][ T5917] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 148.386206][ T5917] syz.0.450: attempt to access beyond end of device [ 148.386206][ T5917] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 148.422274][ T5917] exFAT-fs (nbd0): unable to read boot sector [ 148.429996][ T5917] exFAT-fs (nbd0): failed to read boot sector [ 148.440163][ T5917] exFAT-fs (nbd0): failed to recognize exfat type [ 148.661711][ T5932] loop3: detected capacity change from 0 to 1024 [ 149.027240][ T5924] loop1: detected capacity change from 0 to 32768 [ 149.437147][ T5924] XFS (loop1): Mounting V5 Filesystem [ 149.588991][ T5924] XFS (loop1): Ending clean mount [ 149.735494][ T5924] XFS (loop1): Quotacheck needed: Please wait. [ 149.866101][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.463'. [ 149.879902][ T5924] XFS (loop1): Quotacheck: Done. [ 150.065385][ T4275] XFS (loop1): Unmounting Filesystem [ 150.101844][ T5967] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 150.157584][ T5967] syz.3.467: attempt to access beyond end of device [ 150.157584][ T5967] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 150.210468][ T5967] exFAT-fs (nbd3): unable to read boot sector [ 150.219676][ T5967] exFAT-fs (nbd3): failed to read boot sector [ 150.258070][ T5967] exFAT-fs (nbd3): failed to recognize exfat type [ 150.629176][ T5992] FAULT_INJECTION: forcing a failure. [ 150.629176][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 150.667979][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.470'. [ 150.677300][ T5992] CPU: 0 PID: 5992 Comm: syz.0.477 Not tainted syzkaller #0 [ 150.684615][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 150.694690][ T5992] Call Trace: [ 150.697984][ T5992] [ 150.700937][ T5992] dump_stack_lvl+0x188/0x24e [ 150.705737][ T5992] ? show_regs_print_info+0x12/0x12 [ 150.710965][ T5992] ? load_image+0x410/0x410 [ 150.715503][ T5992] ? __might_sleep+0xd0/0xd0 [ 150.720110][ T5992] ? __lock_acquire+0x7ea0/0x7ea0 [ 150.725170][ T5992] ? futex_unqueue+0xc7/0xf0 [ 150.729775][ T5992] should_fail_ex+0x390/0x4c0 [ 150.734473][ T5992] should_failslab+0x5/0x20 [ 150.738986][ T5992] slab_pre_alloc_hook+0x59/0x300 [ 150.744013][ T5992] ? futex_wait_setup+0x270/0x270 [ 150.749036][ T5992] kmem_cache_alloc+0x56/0x2f0 [ 150.753808][ T5992] ? lease_alloc+0x26/0x320 [ 150.758311][ T5992] lease_alloc+0x26/0x320 [ 150.762665][ T5992] fcntl_setlease+0x112/0x310 [ 150.767340][ T5992] ? vfs_setlease+0x100/0x100 [ 150.772023][ T5992] do_fcntl+0x117/0x12f0 [ 150.776261][ T5992] ? __ia32_sys_get_robust_list+0x100/0x100 [ 150.782158][ T5992] ? kill_fasync+0x4b0/0x4b0 [ 150.786754][ T5992] ? __fget_files+0x28/0x460 [ 150.791343][ T5992] ? __fget_files+0x3fc/0x460 [ 150.796025][ T5992] ? tomoyo_file_fcntl+0x74/0x210 [ 150.801045][ T5992] ? bpf_lsm_file_fcntl+0x5/0x10 [ 150.805977][ T5992] ? security_file_fcntl+0x7c/0xa0 [ 150.811100][ T5992] __se_sys_fcntl+0xc9/0x190 [ 150.815697][ T5992] do_syscall_64+0x4c/0xa0 [ 150.820109][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 150.824792][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 150.829465][ T5992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.835365][ T5992] RIP: 0033:0x7f49fc9a8f19 [ 150.839772][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.859389][ T5992] RSP: 002b:00007f49fd8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 150.868343][ T5992] RAX: ffffffffffffffda RBX: 00007f49fcc25fa0 RCX: 00007f49fc9a8f19 [ 150.876710][ T5992] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 150.884769][ T5992] RBP: 00007f49fca37f6d R08: 0000000000000000 R09: 0000000000000000 [ 150.892761][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.900756][ T5992] R13: 00007f49fcc26038 R14: 00007f49fcc25fa0 R15: 00007fff746c46b8 [ 150.908738][ T5992] [ 150.934512][ T5991] device geneve0 entered promiscuous mode [ 151.163794][ T6005] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 151.208184][ T6009] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 151.233689][ T6009] syz.2.484: attempt to access beyond end of device [ 151.233689][ T6009] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.273383][ T6009] exFAT-fs (nbd2): unable to read boot sector [ 151.299880][ T6009] exFAT-fs (nbd2): failed to read boot sector [ 151.340329][ T6009] exFAT-fs (nbd2): failed to recognize exfat type [ 151.374853][ T6015] FAULT_INJECTION: forcing a failure. [ 151.374853][ T6015] name failslab, interval 1, probability 0, space 0, times 0 [ 151.407530][ T6015] CPU: 1 PID: 6015 Comm: syz.3.487 Not tainted syzkaller #0 [ 151.414857][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 151.424911][ T6015] Call Trace: [ 151.428181][ T6015] [ 151.431127][ T6015] dump_stack_lvl+0x188/0x24e [ 151.435807][ T6015] ? show_regs_print_info+0x12/0x12 [ 151.440996][ T6015] ? load_image+0x410/0x410 [ 151.445491][ T6015] ? __lock_acquire+0x7ea0/0x7ea0 [ 151.450503][ T6015] ? _raw_spin_lock_irq+0xb7/0xf0 [ 151.455515][ T6015] ? _raw_spin_lock_irqsave+0x100/0x100 [ 151.461065][ T6015] should_fail_ex+0x390/0x4c0 [ 151.465753][ T6015] should_failslab+0x5/0x20 [ 151.470250][ T6015] slab_pre_alloc_hook+0x59/0x300 [ 151.475275][ T6015] kmem_cache_alloc+0x56/0x2f0 [ 151.480044][ T6015] ? copy_utsname+0x117/0x430 [ 151.484719][ T6015] copy_utsname+0x117/0x430 [ 151.489222][ T6015] create_new_namespaces+0x17b/0x700 [ 151.494505][ T6015] ? bpf_lsm_capable+0x5/0x10 [ 151.499184][ T6015] unshare_nsproxy_namespaces+0x116/0x160 [ 151.504901][ T6015] ksys_unshare+0x4f6/0x8e0 [ 151.509404][ T6015] ? sighand_ctor+0x40/0x40 [ 151.513930][ T6015] ? lock_chain_count+0x20/0x20 [ 151.518782][ T6015] ? syscall_enter_from_user_mode+0x21/0x80 [ 151.524682][ T6015] __x64_sys_unshare+0x34/0x40 [ 151.529439][ T6015] do_syscall_64+0x4c/0xa0 [ 151.533852][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 151.538534][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 151.543215][ T6015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.549103][ T6015] RIP: 0033:0x7fac527a8f19 [ 151.553515][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.573114][ T6015] RSP: 002b:00007fac5360f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.581543][ T6015] RAX: ffffffffffffffda RBX: 00007fac52a25fa0 RCX: 00007fac527a8f19 [ 151.589529][ T6015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 151.597496][ T6015] RBP: 00007fac52837f6d R08: 0000000000000000 R09: 0000000000000000 [ 151.605474][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.613545][ T6015] R13: 00007fac52a26038 R14: 00007fac52a25fa0 R15: 00007ffcdcc4b8d8 [ 151.621530][ T6015] [ 151.863363][ T6028] FAULT_INJECTION: forcing a failure. [ 151.863363][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 151.910780][ T6028] CPU: 0 PID: 6028 Comm: syz.2.490 Not tainted syzkaller #0 [ 151.918117][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 151.928190][ T6028] Call Trace: [ 151.931489][ T6028] [ 151.934442][ T6028] dump_stack_lvl+0x188/0x24e [ 151.939158][ T6028] ? show_regs_print_info+0x12/0x12 [ 151.944401][ T6028] ? load_image+0x410/0x410 [ 151.948938][ T6028] ? __lock_acquire+0x7ea0/0x7ea0 [ 151.954002][ T6028] should_fail_ex+0x390/0x4c0 [ 151.958725][ T6028] should_failslab+0x5/0x20 [ 151.963249][ T6028] slab_pre_alloc_hook+0x59/0x300 [ 151.968308][ T6028] kmem_cache_alloc+0x56/0x2f0 [ 151.971055][ T6033] loop3: detected capacity change from 0 to 128 [ 151.973084][ T6028] ? create_new_namespaces+0x34/0x700 [ 151.973115][ T6028] create_new_namespaces+0x34/0x700 [ 151.973136][ T6028] ? __fget_files+0x3fc/0x460 [ 151.994645][ T6028] __se_sys_setns+0x2c8/0x1600 [ 151.999447][ T6028] ? __x64_sys_setns+0x60/0x60 [ 152.004252][ T6028] ? lockdep_hardirqs_on+0x94/0x140 [ 152.009913][ T6028] do_syscall_64+0x4c/0xa0 [ 152.014347][ T6028] ? clear_bhb_loop+0x60/0xb0 [ 152.019046][ T6028] ? clear_bhb_loop+0x60/0xb0 [ 152.023751][ T6028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.029663][ T6028] RIP: 0033:0x7fc4e21a8f19 [ 152.034081][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.053686][ T6028] RSP: 002b:00007fc4e2fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 152.062100][ T6028] RAX: ffffffffffffffda RBX: 00007fc4e2425fa0 RCX: 00007fc4e21a8f19 [ 152.070072][ T6028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 152.078035][ T6028] RBP: 00007fc4e2237f6d R08: 0000000000000000 R09: 0000000000000000 [ 152.085998][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.093961][ T6028] R13: 00007fc4e2426038 R14: 00007fc4e2425fa0 R15: 00007ffe6e8c82e8 [ 152.101941][ T6028] [ 152.156383][ T6033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.183569][ T6033] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.288128][ T6042] FAULT_INJECTION: forcing a failure. [ 152.288128][ T6042] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 152.305423][ T6042] CPU: 1 PID: 6042 Comm: syz.2.495 Not tainted syzkaller #0 [ 152.312776][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 152.322857][ T6042] Call Trace: [ 152.326150][ T6042] [ 152.329093][ T6042] dump_stack_lvl+0x188/0x24e [ 152.333806][ T6042] ? show_regs_print_info+0x12/0x12 [ 152.339042][ T6042] ? load_image+0x410/0x410 [ 152.343573][ T6042] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.348633][ T6042] should_fail_ex+0x390/0x4c0 [ 152.353344][ T6042] prepare_alloc_pages+0x1e1/0x5b0 [ 152.358498][ T6042] __alloc_pages+0x130/0x4f0 [ 152.363126][ T6042] ? zone_statistics+0x170/0x170 [ 152.368103][ T6042] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 152.374030][ T6042] ? alloc_pages+0x4dd/0x740 [ 152.378645][ T6042] ? __fget_files+0x28/0x460 [ 152.383263][ T6042] __get_free_pages+0x8/0x30 [ 152.387878][ T6042] __pollwait+0x116/0x3e0 [ 152.392234][ T6042] ? poll_initwait+0x150/0x150 [ 152.397025][ T6042] pipe_poll+0x169/0x4a0 [ 152.401371][ T6042] ? do_sys_poll+0x7fd/0x12e0 [ 152.406079][ T6042] ? pipe_write+0x1b50/0x1b50 [ 152.410777][ T6042] do_sys_poll+0x8d3/0x12e0 [ 152.415320][ T6042] ? poll_select_finish+0x640/0x640 [ 152.420550][ T6042] ? poll_initwait+0x150/0x150 [ 152.425354][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.431630][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.437989][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.444261][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.450527][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.456799][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.463072][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.469339][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.475610][ T6042] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 152.481885][ T6042] ? futex_wake+0x426/0x4f0 [ 152.486440][ T6042] ? set_user_sigmask+0xca/0x1c0 [ 152.491396][ T6042] ? sigprocmask+0x190/0x190 [ 152.496017][ T6042] __se_sys_ppoll+0x206/0x2a0 [ 152.500713][ T6042] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.506728][ T6042] ? __x64_sys_ppoll+0xc0/0xc0 [ 152.511515][ T6042] ? lockdep_hardirqs_on+0x94/0x140 [ 152.516740][ T6042] ? __x64_sys_ppoll+0x1c/0xc0 [ 152.521529][ T6042] do_syscall_64+0x4c/0xa0 [ 152.525967][ T6042] ? clear_bhb_loop+0x60/0xb0 [ 152.530847][ T6042] ? clear_bhb_loop+0x60/0xb0 [ 152.535549][ T6042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.541462][ T6042] RIP: 0033:0x7fc4e21a8f19 [ 152.545903][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.565537][ T6042] RSP: 002b:00007fc4e2fbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 152.573983][ T6042] RAX: ffffffffffffffda RBX: 00007fc4e2425fa0 RCX: 00007fc4e21a8f19 [ 152.581989][ T6042] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000880 [ 152.589993][ T6042] RBP: 00007fc4e2237f6d R08: 0000000000000000 R09: 0000000000000000 [ 152.597986][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.605983][ T6042] R13: 00007fc4e2426038 R14: 00007fc4e2425fa0 R15: 00007ffe6e8c82e8 [ 152.614006][ T6042] [ 152.642558][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 152.774074][ T6057] FAULT_INJECTION: forcing a failure. [ 152.774074][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 152.807198][ T6057] CPU: 0 PID: 6057 Comm: syz.4.499 Not tainted syzkaller #0 [ 152.814545][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 152.824616][ T6057] Call Trace: [ 152.827907][ T6057] [ 152.830860][ T6057] dump_stack_lvl+0x188/0x24e [ 152.835570][ T6057] ? show_regs_print_info+0x12/0x12 [ 152.840800][ T6057] ? load_image+0x410/0x410 [ 152.845326][ T6057] ? __might_sleep+0xd0/0xd0 [ 152.849936][ T6057] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.854995][ T6057] should_fail_ex+0x390/0x4c0 [ 152.859706][ T6057] should_failslab+0x5/0x20 [ 152.864219][ T6057] slab_pre_alloc_hook+0x59/0x300 [ 152.869250][ T6057] kmem_cache_alloc+0x56/0x2f0 [ 152.874012][ T6057] ? mas_alloc_nodes+0x2ec/0x880 [ 152.878949][ T6057] mas_alloc_nodes+0x2ec/0x880 [ 152.883734][ T6057] mas_preallocate+0x162/0x3b0 [ 152.888503][ T6057] do_mas_align_munmap+0x239/0x12d0 [ 152.893710][ T6057] ? mtree_load+0x100/0xa70 [ 152.898210][ T6057] ? do_mas_munmap+0x2b0/0x2b0 [ 152.902979][ T6057] ? mtree_range_walk+0x664/0x780 [ 152.908018][ T6057] ? mas_walk+0x15f/0x180 [ 152.912349][ T6057] ? mas_find+0x1ba/0x220 [ 152.916704][ T6057] do_mas_munmap+0x240/0x2b0 [ 152.921309][ T6057] __se_sys_mremap+0x787/0x1120 [ 152.926169][ T6057] ? __ia32_sys_get_robust_list+0x100/0x100 [ 152.932059][ T6057] ? __x64_sys_mremap+0xc0/0xc0 [ 152.936904][ T6057] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.942901][ T6057] ? lockdep_hardirqs_on+0x94/0x140 [ 152.948101][ T6057] ? __x64_sys_mremap+0x1c/0xc0 [ 152.952962][ T6057] do_syscall_64+0x4c/0xa0 [ 152.957398][ T6057] ? clear_bhb_loop+0x60/0xb0 [ 152.962075][ T6057] ? clear_bhb_loop+0x60/0xb0 [ 152.966752][ T6057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.972640][ T6057] RIP: 0033:0x7fecd7ba8f19 [ 152.977048][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.996652][ T6057] RSP: 002b:00007fecd8a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 153.005066][ T6057] RAX: ffffffffffffffda RBX: 00007fecd7e25fa0 RCX: 00007fecd7ba8f19 [ 153.013060][ T6057] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 000020000000e000 [ 153.021059][ T6057] RBP: 00007fecd7c37f6d R08: 000020000000f000 R09: 0000000000000000 [ 153.029056][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.037031][ T6057] R13: 00007fecd7e26038 R14: 00007fecd7e25fa0 R15: 00007ffd16697748 [ 153.045015][ T6057] [ 153.093463][ T6062] device vxcan3 entered promiscuous mode [ 153.143883][ T6065] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 153.178344][ T6070] cougar: G6 mapped to space [ 153.192717][ T6065] syz.0.501: attempt to access beyond end of device [ 153.192717][ T6065] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 153.222240][ T6065] exFAT-fs (nbd0): unable to read boot sector [ 153.228417][ T6065] exFAT-fs (nbd0): failed to read boot sector [ 153.257509][ T6065] exFAT-fs (nbd0): failed to recognize exfat type [ 153.576667][ T6083] FAULT_INJECTION: forcing a failure. [ 153.576667][ T6083] name failslab, interval 1, probability 0, space 0, times 0 [ 153.601058][ T6083] CPU: 1 PID: 6083 Comm: syz.0.507 Not tainted syzkaller #0 [ 153.608399][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 153.618589][ T6083] Call Trace: [ 153.621903][ T6083] [ 153.624881][ T6083] dump_stack_lvl+0x188/0x24e [ 153.629608][ T6083] ? show_regs_print_info+0x12/0x12 [ 153.634847][ T6083] ? load_image+0x410/0x410 [ 153.639410][ T6083] ? __might_sleep+0xd0/0xd0 [ 153.644056][ T6083] ? __lock_acquire+0x7ea0/0x7ea0 [ 153.649141][ T6083] should_fail_ex+0x390/0x4c0 [ 153.653877][ T6083] should_failslab+0x5/0x20 [ 153.658409][ T6083] slab_pre_alloc_hook+0x59/0x300 [ 153.663554][ T6083] ? x509_cert_parse+0x57/0x7a0 [ 153.668696][ T6083] __kmem_cache_alloc_node+0x4f/0x270 [ 153.674088][ T6083] ? x509_cert_parse+0x57/0x7a0 [ 153.678935][ T6083] kmalloc_trace+0x26/0xe0 [ 153.683357][ T6083] x509_cert_parse+0x57/0x7a0 [ 153.688058][ T6083] x509_key_preparse+0x60/0x660 [ 153.692926][ T6083] ? down_read+0x1a8/0x2d0 [ 153.697371][ T6083] asymmetric_key_preparse+0xa5/0x140 [ 153.702789][ T6083] key_create_or_update+0x405/0xa50 [ 153.708014][ T6083] ? key_type_put+0x20/0x20 [ 153.712538][ T6083] ? __might_fault+0xc2/0x120 [ 153.717238][ T6083] ? __might_fault+0xa6/0x120 [ 153.721923][ T6083] __se_sys_add_key+0x34b/0x410 [ 153.726791][ T6083] ? __x64_sys_add_key+0xc0/0xc0 [ 153.731753][ T6083] ? lockdep_hardirqs_on+0x94/0x140 [ 153.736959][ T6083] ? __x64_sys_add_key+0x1c/0xc0 [ 153.741904][ T6083] do_syscall_64+0x4c/0xa0 [ 153.746342][ T6083] ? clear_bhb_loop+0x60/0xb0 [ 153.751020][ T6083] ? clear_bhb_loop+0x60/0xb0 [ 153.755708][ T6083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.761625][ T6083] RIP: 0033:0x7f49fc9a8f19 [ 153.766050][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.786113][ T6083] RSP: 002b:00007f49fd8bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 153.794555][ T6083] RAX: ffffffffffffffda RBX: 00007f49fcc25fa0 RCX: 00007f49fc9a8f19 [ 153.802984][ T6083] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 153.811420][ T6083] RBP: 00007f49fca37f6d R08: ffffffffffffffff R09: 0000000000000000 [ 153.819392][ T6083] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 153.827378][ T6083] R13: 00007f49fcc26038 R14: 00007f49fcc25fa0 R15: 00007fff746c46b8 [ 153.835465][ T6083] [ 154.229191][ T6115] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 154.250474][ T6103] PID 6103 killed due to inadequate hugepage pool [ 154.279456][ T6115] syz.4.518: attempt to access beyond end of device [ 154.279456][ T6115] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 154.317652][ T6115] exFAT-fs (nbd4): unable to read boot sector [ 154.324718][ T6115] exFAT-fs (nbd4): failed to read boot sector [ 154.331371][ T6115] exFAT-fs (nbd4): failed to recognize exfat type [ 154.390178][ T6119] [ 154.778180][ T6139] loop1: detected capacity change from 0 to 1024 [ 155.068851][ T6148] FAULT_INJECTION: forcing a failure. [ 155.068851][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 155.086292][ T6148] CPU: 1 PID: 6148 Comm: syz.1.531 Not tainted syzkaller #0 [ 155.093636][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 155.103712][ T6148] Call Trace: [ 155.107003][ T6148] [ 155.109949][ T6148] dump_stack_lvl+0x188/0x24e [ 155.114655][ T6148] ? show_regs_print_info+0x12/0x12 [ 155.119880][ T6148] ? load_image+0x410/0x410 [ 155.124406][ T6148] ? __might_sleep+0xd0/0xd0 [ 155.129015][ T6148] ? __lock_acquire+0x7ea0/0x7ea0 [ 155.134070][ T6148] should_fail_ex+0x390/0x4c0 [ 155.138772][ T6148] should_failslab+0x5/0x20 [ 155.143290][ T6148] slab_pre_alloc_hook+0x59/0x300 [ 155.148351][ T6148] kmem_cache_alloc+0x56/0x2f0 [ 155.153137][ T6148] ? __alloc_file+0x25/0x230 [ 155.157743][ T6148] __alloc_file+0x25/0x230 [ 155.162195][ T6148] alloc_empty_file+0x90/0x180 [ 155.166968][ T6148] alloc_file+0x5b/0x5f0 [ 155.171221][ T6148] alloc_file_pseudo+0x180/0x200 [ 155.176165][ T6148] ? alloc_empty_file_noaccount+0x80/0x80 [ 155.181887][ T6148] ? alloc_fd+0x590/0x640 [ 155.186217][ T6148] sock_alloc_file+0xb3/0x240 [ 155.190892][ T6148] __sys_socket+0x12d/0x190 [ 155.195391][ T6148] __x64_sys_socket+0x76/0x80 [ 155.200069][ T6148] do_syscall_64+0x4c/0xa0 [ 155.204488][ T6148] ? clear_bhb_loop+0x60/0xb0 [ 155.209161][ T6148] ? clear_bhb_loop+0x60/0xb0 [ 155.213834][ T6148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.219723][ T6148] RIP: 0033:0x7fc31ada8f19 [ 155.224129][ T6148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.243731][ T6148] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 155.252144][ T6148] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 155.260110][ T6148] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 155.268090][ T6148] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 155.276054][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.284018][ T6148] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 155.291997][ T6148] [ 155.451078][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 155.491760][ T6146] loop2: detected capacity change from 0 to 32768 [ 155.531754][ T6146] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 155.569104][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 155.585312][ T6150] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 155.607433][ T6146] JBD2: Ignoring recovery information on journal [ 155.652553][ T6150] syz.3.532: attempt to access beyond end of device [ 155.652553][ T6150] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 155.703707][ T6150] exFAT-fs (nbd3): unable to read boot sector [ 155.710140][ T6150] exFAT-fs (nbd3): failed to read boot sector [ 155.717137][ T6150] exFAT-fs (nbd3): failed to recognize exfat type [ 155.756886][ T6146] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.081714][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 156.292667][ T6190] FAULT_INJECTION: forcing a failure. [ 156.292667][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 156.306337][ T6190] CPU: 1 PID: 6190 Comm: syz.3.545 Not tainted syzkaller #0 [ 156.313656][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 156.323730][ T6190] Call Trace: [ 156.327016][ T6190] [ 156.329959][ T6190] dump_stack_lvl+0x188/0x24e [ 156.334669][ T6190] ? show_regs_print_info+0x12/0x12 [ 156.339895][ T6190] ? load_image+0x410/0x410 [ 156.344424][ T6190] ? __might_sleep+0xd0/0xd0 [ 156.349025][ T6190] ? __lock_acquire+0x7ea0/0x7ea0 [ 156.354053][ T6190] should_fail_ex+0x390/0x4c0 [ 156.358731][ T6190] should_failslab+0x5/0x20 [ 156.363226][ T6190] slab_pre_alloc_hook+0x59/0x300 [ 156.368251][ T6190] ? nfs_alloc_fhandle+0x46/0x90 [ 156.373193][ T6190] __kmem_cache_alloc_node+0x4f/0x270 [ 156.378582][ T6190] ? nfs_alloc_fhandle+0x46/0x90 [ 156.383523][ T6190] kmalloc_trace+0x26/0xe0 [ 156.387933][ T6190] nfs_alloc_fhandle+0x46/0x90 [ 156.392704][ T6190] nfs_init_fs_context+0x65/0xeb0 [ 156.397730][ T6190] alloc_fs_context+0x628/0x7d0 [ 156.402603][ T6190] __se_sys_fsopen+0xa0/0x2c0 [ 156.407282][ T6190] do_syscall_64+0x4c/0xa0 [ 156.411704][ T6190] ? clear_bhb_loop+0x60/0xb0 [ 156.416380][ T6190] ? clear_bhb_loop+0x60/0xb0 [ 156.421052][ T6190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.426959][ T6190] RIP: 0033:0x7fac527a8f19 [ 156.431377][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.450985][ T6190] RSP: 002b:00007fac5360f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 156.459402][ T6190] RAX: ffffffffffffffda RBX: 00007fac52a25fa0 RCX: 00007fac527a8f19 [ 156.467370][ T6190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 156.475364][ T6190] RBP: 00007fac52837f6d R08: 0000000000000000 R09: 0000000000000000 [ 156.483336][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.491302][ T6190] R13: 00007fac52a26038 R14: 00007fac52a25fa0 R15: 00007ffcdcc4b8d8 [ 156.499286][ T6190] [ 156.942990][ T6208] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 156.953273][ T4745] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.985127][ T6208] syz.3.550: attempt to access beyond end of device [ 156.985127][ T6208] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 156.998846][ T6210] loop1: detected capacity change from 0 to 512 [ 157.017296][ T6208] exFAT-fs (nbd3): unable to read boot sector [ 157.028712][ T6208] exFAT-fs (nbd3): failed to read boot sector [ 157.042059][ T6199] loop0: detected capacity change from 0 to 32768 [ 157.048708][ T6208] exFAT-fs (nbd3): failed to recognize exfat type [ 157.098758][ T6210] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 157.107604][ T6210] EXT4-fs (loop1): invalid journal inode [ 157.138416][ T6199] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.150972][ T4745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.162303][ T4745] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 157.171679][ T4745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.245257][ T6217] xt_NFQUEUE: number of total queues is 0 [ 157.895897][ T4745] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 157.904092][ T4745] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 157.913339][ T4745] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 157.935754][ T4745] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 157.961234][ T4745] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 157.994942][ T4745] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 158.013838][ T4745] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 158.031886][ T4745] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 158.059878][ T4745] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 158.060472][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 158.142321][ T5104] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.336642][ T5104] usb 5-1: Using ep0 maxpacket: 8 [ 158.343826][ T5104] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.370660][ T5104] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.414432][ T5104] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 158.449587][ T5104] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 158.463184][ T5104] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 158.472307][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.517932][ T5104] hub 5-1:1.0: bad descriptor, ignoring hub [ 158.529271][ T5104] hub: probe of 5-1:1.0 failed with error -5 [ 158.536021][ T5104] cdc_wdm 5-1:1.0: skipping garbage [ 158.541376][ T5104] cdc_wdm 5-1:1.0: skipping garbage [ 158.557029][ T5104] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 158.570610][ T5104] cdc_wdm 5-1:1.0: Unknown control protocol [ 158.670344][ T6230] loop3: detected capacity change from 0 to 32768 [ 158.706247][ T6230] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.559 (6230) [ 158.726688][ T6230] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.737615][ T6230] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.758760][ T6230] BTRFS info (device loop3): setting nodatacow, compression disabled [ 158.770408][ T6230] BTRFS info (device loop3): setting datasum, datacow enabled [ 158.780924][ T6230] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 158.791846][ T6230] BTRFS info (device loop3): use lzo compression, level 0 [ 158.803369][ T6230] BTRFS info (device loop3): enabling ssd optimizations [ 158.810607][ T6230] BTRFS info (device loop3): using spread ssd allocation scheme [ 158.824077][ T6230] BTRFS info (device loop3): turning on sync discard [ 158.831045][ T6230] BTRFS info (device loop3): not using ssd optimizations [ 158.841420][ T6230] BTRFS info (device loop3): not using spread ssd allocation scheme [ 158.857514][ T6230] BTRFS info (device loop3): using free space tree [ 159.120033][ T5104] usb 5-1: USB disconnect, device number 8 [ 159.193041][ T4396] usb 3-1: USB disconnect, device number 7 [ 159.219422][ T4396] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 159.267615][ T4396] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 159.298859][ T4396] keyspan 3-1:1.0: device disconnected [ 159.488457][ T6277] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 159.492791][ T4288] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.499913][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.564'. [ 159.519772][ T6277] syz.0.565: attempt to access beyond end of device [ 159.519772][ T6277] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 159.535830][ T6277] exFAT-fs (nbd0): unable to read boot sector [ 159.544847][ T6277] exFAT-fs (nbd0): failed to read boot sector [ 159.558400][ T6277] exFAT-fs (nbd0): failed to recognize exfat type [ 160.171545][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 160.190819][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 160.212316][ T6300] FAULT_INJECTION: forcing a failure. [ 160.212316][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.258567][ T6300] CPU: 0 PID: 6300 Comm: syz.1.575 Not tainted syzkaller #0 [ 160.265906][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 160.275972][ T6300] Call Trace: [ 160.279253][ T6300] [ 160.282181][ T6300] dump_stack_lvl+0x188/0x24e [ 160.286864][ T6300] ? show_regs_print_info+0x12/0x12 [ 160.292067][ T6300] ? load_image+0x410/0x410 [ 160.296576][ T6300] ? __lock_acquire+0x7ea0/0x7ea0 [ 160.301597][ T6300] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.307582][ T6300] ? __lock_acquire+0x7ea0/0x7ea0 [ 160.312607][ T6300] should_fail_ex+0x390/0x4c0 [ 160.317284][ T6300] _copy_to_user+0x2c/0x130 [ 160.321786][ T6300] do_fcntl+0xe72/0x12f0 [ 160.326030][ T6300] ? __ia32_sys_get_robust_list+0x100/0x100 [ 160.331914][ T6300] ? do_fcntl+0x1d4/0x12f0 [ 160.336330][ T6300] ? kill_fasync+0x4b0/0x4b0 [ 160.340919][ T6300] ? __fget_files+0x28/0x460 [ 160.345509][ T6300] ? __fget_files+0x3fc/0x460 [ 160.350184][ T6300] ? tomoyo_file_fcntl+0x74/0x210 [ 160.355205][ T6300] ? bpf_lsm_file_fcntl+0x5/0x10 [ 160.360138][ T6300] ? security_file_fcntl+0x7c/0xa0 [ 160.365245][ T6300] __se_sys_fcntl+0xc9/0x190 [ 160.369835][ T6300] do_syscall_64+0x4c/0xa0 [ 160.374251][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 160.378923][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 160.383596][ T6300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.389484][ T6300] RIP: 0033:0x7fc31ada8f19 [ 160.393897][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.413495][ T6300] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 160.421906][ T6300] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 160.429868][ T6300] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000003 [ 160.437834][ T6300] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 160.445797][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.453762][ T6300] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 160.461739][ T6300] [ 160.614254][ T6307] loop2: detected capacity change from 0 to 2048 [ 160.704952][ T6307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.790874][ T26] audit: type=1800 audit(1794341088.414:16): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.576" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 160.811572][ T26] audit: type=1800 audit(1794341088.414:17): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.576" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 160.882505][ T6316] tipc: New replicast peer: 127.0.0.1 [ 160.916898][ T6316] tipc: Enabled bearer , priority 10 [ 160.987149][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 161.089758][ T6321] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 161.141938][ T6321] syz.1.579: attempt to access beyond end of device [ 161.141938][ T6321] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 161.183373][ T6321] exFAT-fs (nbd1): unable to read boot sector [ 161.199439][ T6299] loop4: detected capacity change from 0 to 40427 [ 161.204478][ T6321] exFAT-fs (nbd1): failed to read boot sector [ 161.242456][ T6299] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 161.260779][ T6321] exFAT-fs (nbd1): failed to recognize exfat type [ 161.264679][ T6299] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.296163][ T6329] loop0: detected capacity change from 0 to 2048 [ 161.305185][ T6299] F2FS-fs (loop4): invalid crc value [ 161.341801][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 161.367193][ T6299] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.398811][ T6335] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.458382][ T6329] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 161.534733][ T6329] Remounting filesystem read-only [ 161.582407][ T6299] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 161.610012][ T6299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.120248][ T6362] FAULT_INJECTION: forcing a failure. [ 162.120248][ T6362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.160354][ T6362] CPU: 1 PID: 6362 Comm: syz.1.592 Not tainted syzkaller #0 [ 162.167677][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 162.177757][ T6362] Call Trace: [ 162.181049][ T6362] [ 162.183990][ T6362] dump_stack_lvl+0x188/0x24e [ 162.188699][ T6362] ? show_regs_print_info+0x12/0x12 [ 162.193974][ T6362] ? load_image+0x410/0x410 [ 162.198492][ T6362] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.203554][ T6362] should_fail_ex+0x390/0x4c0 [ 162.208262][ T6362] prepare_alloc_pages+0x1e1/0x5b0 [ 162.213415][ T6362] __alloc_pages+0x130/0x4f0 [ 162.218034][ T6362] ? mas_next_node+0x6af/0xb70 [ 162.222827][ T6362] ? zone_statistics+0x170/0x170 [ 162.227815][ T6362] __folio_alloc+0xe/0x30 [ 162.232174][ T6362] vma_alloc_folio+0x499/0x900 [ 162.236974][ T6362] new_page+0x530/0xc80 [ 162.241142][ T6362] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.246195][ T6362] ? get_nodes+0x3b0/0x3b0 [ 162.250639][ T6362] ? free_unref_page+0x19d/0x3f0 [ 162.255605][ T6362] migrate_pages+0x277e/0x58c0 [ 162.260452][ T6362] ? get_nodes+0x3b0/0x3b0 [ 162.264897][ T6362] ? folio_detach_private+0x3d0/0x3d0 [ 162.270309][ T6362] ? remove_migration_ptes+0x140/0x140 [ 162.275808][ T6362] ? mas_next_node+0x3f7/0xb70 [ 162.280613][ T6362] ? mas_next_entry+0xe03/0xe90 [ 162.285501][ T6362] __se_sys_mbind+0x64f/0x810 [ 162.290208][ T6362] ? __ia32_sys_get_robust_list+0x100/0x100 [ 162.296136][ T6362] ? __x64_sys_mbind+0xf0/0xf0 [ 162.300934][ T6362] ? lock_chain_count+0x20/0x20 [ 162.305817][ T6362] ? __x64_sys_mbind+0x1d/0xf0 [ 162.310621][ T6362] do_syscall_64+0x4c/0xa0 [ 162.315061][ T6362] ? clear_bhb_loop+0x60/0xb0 [ 162.319764][ T6362] ? clear_bhb_loop+0x60/0xb0 [ 162.324492][ T6362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.330407][ T6362] RIP: 0033:0x7fc31ada8f19 [ 162.334848][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.354475][ T6362] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 162.362934][ T6362] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 162.370942][ T6362] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 162.378944][ T6362] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000002 [ 162.386947][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.394974][ T6362] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 162.402992][ T6362] [ 162.758692][ T6359] loop2: detected capacity change from 0 to 32768 [ 162.810898][ T6359] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 162.907275][ T6373] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 162.942371][ T6373] syz.0.597: attempt to access beyond end of device [ 162.942371][ T6373] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 162.965130][ T6373] exFAT-fs (nbd0): unable to read boot sector [ 162.974897][ T6373] exFAT-fs (nbd0): failed to read boot sector [ 162.985405][ T6373] exFAT-fs (nbd0): failed to recognize exfat type [ 163.191203][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 163.392240][ T5104] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 163.447055][ T6369] loop1: detected capacity change from 0 to 32768 [ 163.546484][ T6369] XFS (loop1): Mounting V5 Filesystem [ 163.582507][ T4396] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 163.590067][ T5104] usb 5-1: Using ep0 maxpacket: 8 [ 163.603927][ T5104] usb 5-1: config 0 has no interfaces? [ 163.626521][ T5104] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.645986][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.654159][ T5104] usb 5-1: Product: syz [ 163.658461][ T5104] usb 5-1: Manufacturer: syz [ 163.663138][ T5104] usb 5-1: SerialNumber: syz [ 163.669944][ T5104] usb 5-1: config 0 descriptor?? [ 163.694748][ T6369] XFS (loop1): Ending clean mount [ 163.705716][ T6369] XFS (loop1): Quotacheck needed: Please wait. [ 163.802739][ T6369] XFS (loop1): Quotacheck: Done. [ 163.804591][ T4396] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.852210][ T4396] usb 4-1: config 0 has no interface number 0 [ 163.858365][ T4396] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.930623][ T4396] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.962303][ T4396] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.984288][ T4396] usb 4-1: config 0 interface 1 has no altsetting 0 [ 164.002782][ T4396] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 164.030120][ T6415] loop0: detected capacity change from 0 to 164 [ 164.041746][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.057912][ T4396] usb 4-1: config 0 descriptor?? [ 164.085086][ T5104] usb 5-1: USB disconnect, device number 9 [ 164.098150][ T4275] XFS (loop1): Unmounting Filesystem [ 164.702268][ T4363] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.792304][ T4396] uclogic 0003:145F:0212.0007: failed retrieving string descriptor #100: -71 [ 164.801867][ T4396] uclogic 0003:145F:0212.0007: failed retrieving pen parameters: -71 [ 164.810571][ T4396] uclogic 0003:145F:0212.0007: pen probing failed: -71 [ 164.817551][ T4396] uclogic 0003:145F:0212.0007: failed probing parameters: -71 [ 164.825715][ T4396] uclogic: probe of 0003:145F:0212.0007 failed with error -71 [ 164.836583][ T6434] FAULT_INJECTION: forcing a failure. [ 164.836583][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 164.841322][ T4396] usb 4-1: USB disconnect, device number 9 [ 164.922577][ T6434] CPU: 1 PID: 6434 Comm: syz.2.609 Not tainted syzkaller #0 [ 164.929921][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 164.939990][ T6434] Call Trace: [ 164.943277][ T6434] [ 164.946243][ T6434] dump_stack_lvl+0x188/0x24e [ 164.950956][ T6434] ? show_regs_print_info+0x12/0x12 [ 164.956187][ T6434] ? load_image+0x410/0x410 [ 164.960703][ T6434] ? __might_sleep+0xd0/0xd0 [ 164.965308][ T6434] ? __lock_acquire+0x7ea0/0x7ea0 [ 164.970353][ T6434] should_fail_ex+0x390/0x4c0 [ 164.975055][ T6434] should_failslab+0x5/0x20 [ 164.979567][ T6434] slab_pre_alloc_hook+0x59/0x300 [ 164.984608][ T6434] ? __ia32_sys_get_robust_list+0x100/0x100 [ 164.990511][ T6434] ? kvmalloc_node+0x6c/0x180 [ 164.995199][ T6434] __kmem_cache_alloc_node+0x4f/0x270 [ 165.000608][ T6434] ? kvmalloc_node+0x6c/0x180 [ 165.005305][ T6434] __kmalloc_node+0xa2/0x240 [ 165.009917][ T6434] kvmalloc_node+0x6c/0x180 [ 165.014433][ T6434] listxattr+0x4c/0x2e0 [ 165.018603][ T6434] __x64_sys_flistxattr+0x128/0x1a0 [ 165.023821][ T6434] do_syscall_64+0x4c/0xa0 [ 165.028261][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 165.032960][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 165.037652][ T6434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.043560][ T6434] RIP: 0033:0x7fc4e21a8f19 [ 165.047981][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.067694][ T6434] RSP: 002b:00007fc4e2fbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 165.076125][ T6434] RAX: ffffffffffffffda RBX: 00007fc4e2425fa0 RCX: 00007fc4e21a8f19 [ 165.084109][ T6434] RDX: 0000000000000095 RSI: 0000200000000440 RDI: 0000000000000003 [ 165.092123][ T6434] RBP: 00007fc4e2237f6d R08: 0000000000000000 R09: 0000000000000000 [ 165.100104][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.108085][ T6434] R13: 00007fc4e2426038 R14: 00007fc4e2425fa0 R15: 00007ffe6e8c82e8 [ 165.116082][ T6434] [ 165.393971][ T4363] usb 1-1: config 5 has an invalid interface number: 235 but max is 0 [ 165.417485][ T4363] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 165.437452][ T4363] usb 1-1: config 5 has no interface number 0 [ 165.458214][ T4363] usb 1-1: config 5 interface 235 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 165.486705][ T4363] usb 1-1: config 5 interface 235 has no altsetting 0 [ 165.534037][ T4363] usb 1-1: New USB device found, idVendor=1bc7, idProduct=10b2, bcdDevice=86.9e [ 165.560940][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.580426][ T4363] usb 1-1: Product: syz [ 165.587235][ T4363] usb 1-1: Manufacturer: syz [ 165.601331][ T4363] usb 1-1: SerialNumber: syz [ 165.648246][ T6446] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 165.666038][ T6446] syz.1.613: attempt to access beyond end of device [ 165.666038][ T6446] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 165.698088][ T6446] exFAT-fs (nbd1): unable to read boot sector [ 165.734477][ T6446] exFAT-fs (nbd1): failed to read boot sector [ 165.750942][ T6446] exFAT-fs (nbd1): failed to recognize exfat type [ 165.821101][ T6454] loop3: detected capacity change from 0 to 1024 [ 165.841807][ T4363] option 1-1:5.235: GSM modem (1-port) converter detected [ 165.849658][ T6454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.898645][ T4363] usb 1-1: USB disconnect, device number 8 [ 165.915052][ T4363] option 1-1:5.235: device disconnected [ 165.999055][ T4293] Bluetooth: hci4: link tx timeout [ 166.004989][ T4293] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.016362][ T4293] Bluetooth: hci4: link tx timeout [ 166.021518][ T4293] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.040172][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.139482][ T6464] loop1: detected capacity change from 0 to 512 [ 166.179568][ T6464] ext4: Unknown parameter 'defcontext' [ 166.346500][ T6473] Bluetooth: MGMT ver 1.22 [ 166.366488][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 167.211562][ T6490] ip_tables: iptables: counters copy to user failed while replacing table [ 167.288110][ T6475] loop1: detected capacity change from 0 to 32768 [ 167.313483][ T6494] loop2: detected capacity change from 0 to 1024 [ 167.333117][ T6475] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 167.336816][ T6494] EXT4-fs: Ignoring removed oldalloc option [ 167.379288][ T6497] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 167.397075][ T6475] JBD2: Ignoring recovery information on journal [ 167.412672][ T6494] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.442623][ T6497] syz.4.627: attempt to access beyond end of device [ 167.442623][ T6497] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 167.456227][ T6497] exFAT-fs (nbd4): unable to read boot sector [ 167.466996][ T6497] exFAT-fs (nbd4): failed to read boot sector [ 167.481476][ T6497] exFAT-fs (nbd4): failed to recognize exfat type [ 167.503552][ T6494] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 167.540725][ T6475] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.811237][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 167.841138][ T6505] loop3: detected capacity change from 0 to 512 [ 167.881122][ T6505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.925094][ T6505] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.995506][ T6505] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 94 vs 41 free clusters [ 168.019292][ T6505] Quota error (device loop3): write_blk: dquota write failed [ 168.028471][ T6505] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 168.038731][ T6505] Quota error (device loop3): write_blk: dquota write failed [ 168.046769][ T6505] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 168.057735][ T6505] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.630: Failed to acquire dquot type 1 [ 168.070672][ T6505] EXT4-fs (loop3): 1 truncate cleaned up [ 168.072474][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 168.077384][ T6505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.146849][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 168.312365][ T6490] ceph: No mds server is up or the cluster is laggy [ 168.440850][ T6520] loop5: detected capacity change from 0 to 7 [ 168.455641][ T4276] Dev loop5: unable to read RDB block 7 [ 168.461529][ T4276] loop5: unable to read partition table [ 168.502718][ T4276] loop5: partition table beyond EOD, truncated [ 168.530017][ T6520] Dev loop5: unable to read RDB block 7 [ 168.540079][ T6520] loop5: unable to read partition table [ 168.548341][ T6520] loop5: partition table beyond EOD, truncated [ 168.566080][ T6520] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 168.764936][ T6533] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 168.781551][ T6533] syz.4.639: attempt to access beyond end of device [ 168.781551][ T6533] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 168.785528][ T6532] loop2: detected capacity change from 0 to 512 [ 168.826078][ T6533] exFAT-fs (nbd4): unable to read boot sector [ 168.832673][ T6533] exFAT-fs (nbd4): failed to read boot sector [ 168.840166][ T6533] exFAT-fs (nbd4): failed to recognize exfat type [ 168.917220][ T6532] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960) [ 168.952715][ T6532] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960) [ 169.144621][ T6541] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960) [ 169.652250][ T6553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.713046][ T6547] loop0: detected capacity change from 0 to 32768 [ 169.739329][ T6547] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.644 (6547) [ 169.781072][ T6547] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 169.794338][ T6547] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 169.808158][ T6547] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 169.819961][ T6547] BTRFS info (device loop0): use zstd compression, level 3 [ 169.828490][ T6547] BTRFS info (device loop0): using free space tree [ 169.869973][ T6547] BTRFS info (device loop0): enabling ssd optimizations [ 170.270432][ T6582] loop2: detected capacity change from 0 to 512 [ 170.277701][ T6582] EXT4-fs: Ignoring removed nobh option [ 170.294647][ T6582] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 170.308828][ T6582] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 170.317910][ T6582] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.653: inode has both inline data and extents flags [ 170.331908][ T6582] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.653: couldn't read orphan inode 13 (err -117) [ 170.345639][ T6582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.366667][ T6582] EXT4-fs (loop2): shut down requested (2) [ 170.515137][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 170.564207][ T4277] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 170.717543][ T6588] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 170.790161][ T6588] syz.2.654: attempt to access beyond end of device [ 170.790161][ T6588] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 170.828293][ T6588] exFAT-fs (nbd2): unable to read boot sector [ 170.843637][ T6588] exFAT-fs (nbd2): failed to read boot sector [ 170.870030][ T6588] exFAT-fs (nbd2): failed to recognize exfat type [ 170.921464][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 171.007690][ T6596] loop3: detected capacity change from 0 to 512 [ 171.023560][ T6595] FAULT_INJECTION: forcing a failure. [ 171.023560][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 171.061014][ T6595] CPU: 0 PID: 6595 Comm: syz.1.657 Not tainted syzkaller #0 [ 171.068344][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 171.078408][ T6595] Call Trace: [ 171.081717][ T6595] [ 171.084638][ T6595] dump_stack_lvl+0x188/0x24e [ 171.089310][ T6595] ? show_regs_print_info+0x12/0x12 [ 171.094517][ T6595] ? load_image+0x410/0x410 [ 171.099016][ T6595] ? __might_sleep+0xd0/0xd0 [ 171.103596][ T6595] ? __lock_acquire+0x7ea0/0x7ea0 [ 171.108613][ T6595] should_fail_ex+0x390/0x4c0 [ 171.113297][ T6595] should_failslab+0x5/0x20 [ 171.117817][ T6595] slab_pre_alloc_hook+0x59/0x300 [ 171.122850][ T6595] kmem_cache_alloc_lru+0x49/0x2e0 [ 171.127968][ T6595] ? __d_alloc+0x2e/0x6e0 [ 171.132307][ T6595] __d_alloc+0x2e/0x6e0 [ 171.136460][ T6595] ? d_alloc_pseudo+0xe/0x70 [ 171.141045][ T6595] d_alloc_pseudo+0x19/0x70 [ 171.145542][ T6595] alloc_file_pseudo+0xe0/0x200 [ 171.150423][ T6595] ? alloc_empty_file_noaccount+0x80/0x80 [ 171.156142][ T6595] ? alloc_anon_inode+0x22e/0x300 [ 171.161188][ T6595] ? memcpy+0x3c/0x60 [ 171.165170][ T6595] ? bpf_lsm_inode_init_security_anon+0x5/0x10 [ 171.171327][ T6595] ? security_inode_init_security_anon+0x7e/0xa0 [ 171.177676][ T6595] __anon_inode_getfile+0x22f/0x350 [ 171.182941][ T6595] ? anon_inode_getfile+0x1a0/0x1a0 [ 171.188167][ T6595] ? __might_fault+0xa6/0x120 [ 171.192854][ T6595] ? __might_fault+0xc2/0x120 [ 171.197537][ T6595] ? __might_fault+0xa6/0x120 [ 171.202219][ T6595] io_uring_create+0x8ae/0xd6c [ 171.207011][ T6595] __x64_sys_io_uring_setup+0x21b/0x230 [ 171.212563][ T6595] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 171.218208][ T6595] ? lockdep_hardirqs_on+0x94/0x140 [ 171.223429][ T6595] do_syscall_64+0x4c/0xa0 [ 171.227851][ T6595] ? clear_bhb_loop+0x60/0xb0 [ 171.232528][ T6595] ? clear_bhb_loop+0x60/0xb0 [ 171.237209][ T6595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.243105][ T6595] RIP: 0033:0x7fc31ada8f19 [ 171.247526][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.267162][ T6595] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 171.275576][ T6595] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 171.283546][ T6595] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000001b7b [ 171.291508][ T6595] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 171.299499][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.307473][ T6595] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 171.315451][ T6595] [ 171.336683][ T6596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.429402][ T6596] EXT4-fs (loop3): 1 truncate cleaned up [ 171.446685][ T6605] jffs2: notice: (6605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.451958][ T6596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.544163][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 171.740251][ T6613] loop4: detected capacity change from 0 to 128 [ 171.799661][ T6613] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 171.977678][ T6613] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 172.007499][ T6613] FAT-fs (loop4): Filesystem has been set read-only [ 172.131437][ T4282] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 172.424004][ T6635] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 172.465049][ T6635] syz.1.669: attempt to access beyond end of device [ 172.465049][ T6635] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 172.965742][ T6638] loop4: detected capacity change from 0 to 131072 [ 172.981830][ T6635] exFAT-fs (nbd1): unable to read boot sector [ 173.022873][ T6638] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 173.031779][ T6638] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 173.041435][ T6635] exFAT-fs (nbd1): failed to read boot sector [ 173.074745][ T6635] exFAT-fs (nbd1): failed to recognize exfat type [ 173.099216][ T6645] loop3: detected capacity change from 0 to 1024 [ 173.143904][ T6638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.194437][ T6638] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 173.201562][ T6638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 173.202878][ T6645] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.347263][ T6649] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 173.357973][ T6645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.692626][ T6645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.915894][ T4372] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.122362][ T4372] usb 1-1: Using ep0 maxpacket: 8 [ 174.129359][ T4372] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.169199][ T4372] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.206979][ T4372] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 174.252644][ T4372] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 174.292362][ T4372] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 174.339209][ T6653] loop4: detected capacity change from 0 to 32768 [ 174.348405][ T4372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.389921][ T6653] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 174.428131][ T6653] JBD2: Ignoring recovery information on journal [ 174.447447][ T4372] hub 1-1:1.0: bad descriptor, ignoring hub [ 174.505480][ T6659] loop1: detected capacity change from 0 to 32768 [ 174.522144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 174.543360][ T6653] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 174.550454][ T4372] hub: probe of 1-1:1.0 failed with error -5 [ 174.569006][ T4372] cdc_wdm 1-1:1.0: skipping garbage [ 174.596177][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 174.628783][ T4372] cdc_wdm 1-1:1.0: skipping garbage [ 174.681746][ T4372] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 174.718249][ T6659] XFS (loop1): Mounting V5 Filesystem [ 174.721944][ T4372] cdc_wdm 1-1:1.0: Unknown control protocol [ 174.820994][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 174.904797][ T6659] XFS (loop1): Ending clean mount [ 174.968528][ T6659] XFS (loop1): User initiated shutdown received. [ 174.975773][ T4363] usb 1-1: USB disconnect, device number 9 [ 175.022663][ T6659] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 175.072261][ T6659] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 175.165521][ T4275] XFS (loop1): Unmounting Filesystem [ 175.731907][ T6699] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 175.765491][ T6699] syz.2.685: attempt to access beyond end of device [ 175.765491][ T6699] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 175.772156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 175.798576][ T6699] exFAT-fs (nbd2): unable to read boot sector [ 175.812825][ T6699] exFAT-fs (nbd2): failed to read boot sector [ 175.819618][ T6699] exFAT-fs (nbd2): failed to recognize exfat type [ 176.159316][ T6715] loop1: detected capacity change from 0 to 512 [ 176.201331][ T6715] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 176.338637][ T6715] EXT4-fs (loop1): 1 truncate cleaned up [ 176.387286][ T6715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.454149][ T6715] EXT4-fs (loop1): shut down requested (2) [ 176.586585][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 176.687990][ T6732] FAULT_INJECTION: forcing a failure. [ 176.687990][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 176.688046][ T6732] CPU: 0 PID: 6732 Comm: syz.0.696 Not tainted syzkaller #0 [ 176.688065][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 176.688076][ T6732] Call Trace: [ 176.688083][ T6732] [ 176.688091][ T6732] dump_stack_lvl+0x188/0x24e [ 176.688124][ T6732] ? show_regs_print_info+0x12/0x12 [ 176.688150][ T6732] ? load_image+0x410/0x410 [ 176.688175][ T6732] ? __might_sleep+0xd0/0xd0 [ 176.688194][ T6732] ? __lock_acquire+0x7ea0/0x7ea0 [ 176.688221][ T6732] should_fail_ex+0x390/0x4c0 [ 176.688256][ T6732] should_failslab+0x5/0x20 [ 176.688274][ T6732] slab_pre_alloc_hook+0x59/0x300 [ 176.688303][ T6732] kmem_cache_alloc+0x56/0x2f0 [ 176.688321][ T6732] ? __kernfs_new_node+0xe1/0x7f0 [ 176.688349][ T6732] __kernfs_new_node+0xe1/0x7f0 [ 176.688372][ T6732] ? __lock_acquire+0x7ea0/0x7ea0 [ 176.688396][ T6732] ? kernfs_new_node+0x250/0x250 [ 176.688438][ T6732] kernfs_new_node+0x148/0x250 [ 176.688463][ T6732] __kernfs_create_file+0x47/0x2e0 [ 176.688489][ T6732] sysfs_add_file_mode_ns+0x233/0x2f0 [ 176.688521][ T6732] sysfs_merge_group+0x180/0x320 [ 176.688548][ T6732] ? sysfs_remove_groups+0xa0/0xa0 [ 176.688570][ T6732] ? device_add_attrs+0x721/0x830 [ 176.688595][ T6732] ? get_device_parent+0x3e0/0x3e0 [ 176.688621][ T6732] dpm_sysfs_add+0xce/0x270 [ 176.688645][ T6732] device_add+0x745/0x1050 [ 176.688671][ T6732] device_create+0x266/0x300 [ 176.688696][ T6732] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 176.688718][ T6732] ? _raw_spin_unlock+0x40/0x40 [ 176.688740][ T6732] ? root_device_unregister+0xf0/0xf0 [ 176.688759][ T6732] ? update_attr+0x550/0x730 [ 176.688786][ T6732] ? memcpy+0x3c/0x60 [ 176.688807][ T6732] ? is_console_locked+0x5/0x10 [ 176.688829][ T6732] ? csi_J+0x8d6/0xdb0 [ 176.688849][ T6732] vcs_make_sysfs+0x2e/0x80 [ 176.688869][ T6732] vc_allocate+0x6bd/0x7f0 [ 176.688892][ T6732] ? read_lock_is_recursive+0x10/0x10 [ 176.688923][ T6732] ? vc_cons_allocated+0x70/0x70 [ 176.688958][ T6732] con_install+0x9c/0x720 [ 176.688975][ T6732] ? mutex_lock_nested+0x10/0x10 [ 176.688996][ T6732] ? show_tty_active+0x30/0x30 [ 176.689024][ T6732] tty_init_dev+0xcf/0x4c0 [ 176.689045][ T6732] tty_open+0x7d8/0xd80 [ 176.689069][ T6732] ? __lock_acquire+0x7ea0/0x7ea0 [ 176.689096][ T6732] ? tty_compat_ioctl+0x5a0/0x5a0 [ 176.689118][ T6732] ? do_raw_spin_unlock+0x11d/0x230 [ 176.689141][ T6732] chrdev_open+0x585/0x5f0 [ 176.689166][ T6732] ? cd_forget+0x160/0x160 [ 176.689193][ T6732] ? fsnotify_perm+0x39b/0x550 [ 176.689220][ T6732] ? cd_forget+0x160/0x160 [ 176.689241][ T6732] do_dentry_open+0x7dd/0x10b0 [ 176.689284][ T6732] path_openat+0x2674/0x2f10 [ 176.689322][ T6732] ? kasan_set_track+0x60/0x70 [ 176.689348][ T6732] ? verify_lock_unused+0x140/0x140 [ 176.689370][ T6732] ? do_sys_openat2+0xdd/0x4f0 [ 176.689399][ T6732] ? do_filp_open+0x420/0x420 [ 176.689440][ T6732] do_filp_open+0x1ee/0x420 [ 176.689464][ T6732] ? vfs_tmpfile+0x490/0x490 [ 176.689509][ T6732] ? _raw_spin_unlock+0x24/0x40 [ 176.689529][ T6732] ? alloc_fd+0x590/0x640 [ 176.689561][ T6732] do_sys_openat2+0x14b/0x4f0 [ 176.689588][ T6732] ? do_sys_open+0xe0/0xe0 [ 176.689612][ T6732] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.689639][ T6732] ? lock_chain_count+0x20/0x20 [ 176.689668][ T6732] __x64_sys_openat+0x135/0x160 [ 176.689697][ T6732] do_syscall_64+0x4c/0xa0 [ 176.689720][ T6732] ? clear_bhb_loop+0x60/0xb0 [ 176.689742][ T6732] ? clear_bhb_loop+0x60/0xb0 [ 176.689767][ T6732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.689789][ T6732] RIP: 0033:0x7f49fc96974e [ 176.689805][ T6732] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.689819][ T6732] RSP: 002b:00007f49fd8bcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.689841][ T6732] RAX: ffffffffffffffda RBX: 00007f49fd8bd6c0 RCX: 00007f49fc96974e [ 176.689855][ T6732] RDX: 0000000000000002 RSI: 00007f49fd8bcc00 RDI: ffffffffffffff9c [ 176.689869][ T6732] RBP: 00007f49fca37f6d R08: 0000000000000000 R09: 0000000000000000 [ 176.689881][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.689893][ T6732] R13: 00007f49fcc26038 R14: 00007f49fcc25fa0 R15: 00007fff746c46b8 [ 176.689923][ T6732] [ 176.720355][ T6734] device ipvlan2 entered promiscuous mode [ 176.733308][ T6734] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 177.530792][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 177.734585][ T6759] bond0: option arp_interval: invalid value () [ 177.734805][ T6759] bond0: option arp_interval: allowed values 0 - 2147483647 [ 178.056878][ T6762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.074516][ T6765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 178.177333][ T6732] tty tty20: ldisc open failed (-12), clearing slot 19 [ 178.251699][ T6762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.369007][ T6762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.507854][ T6762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.720557][ T6762] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.767056][ T6762] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.815168][ T6762] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.838545][ T6762] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.082336][ T4396] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.189938][ T6803] loop0: detected capacity change from 0 to 512 [ 179.269379][ T6803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.283894][ T4396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.301316][ T4396] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 179.312239][ T4396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 179.320336][ T4396] usb 3-1: Product: syz [ 179.330117][ T4396] usb 3-1: Manufacturer: syz [ 179.337499][ T6803] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.346182][ T4396] usb 3-1: selecting invalid altsetting 1 [ 179.356438][ T4396] dvb_ttusb_budget: ttusb_init_controller: error [ 179.363625][ T4396] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 179.436754][ T4396] DVB: Unable to find symbol cx22700_attach() [ 179.440684][ T6803] EXT4-fs (loop0): shut down requested (1) [ 179.546256][ T6785] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 179.564110][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 179.570200][ T4396] DVB: Unable to find symbol tda10046_attach() [ 179.592640][ T4396] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 179.651543][ T4396] usb 3-1: USB disconnect, device number 8 [ 179.934619][ T6808] loop4: detected capacity change from 0 to 32768 [ 180.069236][ T6808] XFS (loop4): Mounting V5 Filesystem [ 180.214087][ T6808] XFS (loop4): Ending clean mount [ 180.263000][ T6829] netlink: 656 bytes leftover after parsing attributes in process `syz.0.727'. [ 180.660615][ T4282] XFS (loop4): Unmounting Filesystem [ 180.760578][ T6847] loop2: detected capacity change from 0 to 512 [ 180.809114][ T6847] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 180.829342][ T6847] EXT4-fs (loop2): invalid journal inode [ 181.015708][ T6856] xt_NFQUEUE: number of total queues is 0 [ 181.122135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 182.646732][ T6899] loop1: detected capacity change from 0 to 512 [ 182.687307][ T6899] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 182.730272][ T6899] EXT4-fs (loop1): invalid journal inode [ 182.896340][ T6905] xt_NFQUEUE: number of total queues is 0 [ 182.903451][ T4409] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.162295][ T4409] usb 1-1: Using ep0 maxpacket: 8 [ 183.176366][ T4409] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 183.345165][ T4409] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.472422][ T4409] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.483013][ T4409] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.493695][ T4409] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.538395][ T4409] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.569048][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.804088][ T4409] usb 1-1: GET_CAPABILITIES returned 0 [ 183.809735][ T4409] usbtmc 1-1:16.0: can't read capabilities [ 183.886416][ T6924] FAULT_INJECTION: forcing a failure. [ 183.886416][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 183.925657][ T6924] CPU: 1 PID: 6924 Comm: syz.1.752 Not tainted syzkaller #0 [ 183.933001][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.943078][ T6924] Call Trace: [ 183.946371][ T6924] [ 183.949310][ T6924] dump_stack_lvl+0x188/0x24e [ 183.954023][ T6924] ? show_regs_print_info+0x12/0x12 [ 183.959253][ T6924] ? load_image+0x410/0x410 [ 183.963791][ T6924] ? __might_sleep+0xd0/0xd0 [ 183.968404][ T6924] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.973457][ T6924] ? verify_lock_unused+0x140/0x140 [ 183.978675][ T6924] should_fail_ex+0x390/0x4c0 [ 183.983374][ T6924] should_failslab+0x5/0x20 [ 183.987893][ T6924] slab_pre_alloc_hook+0x59/0x300 [ 183.992953][ T6924] ? smb3_parse_devname+0xe2/0x700 [ 183.998072][ T6924] __kmem_cache_alloc_node+0x4f/0x270 [ 184.003442][ T6924] ? __mutex_trylock_common+0x15c/0x260 [ 184.008991][ T6924] ? smb3_parse_devname+0xe2/0x700 [ 184.014101][ T6924] __kmalloc_node_track_caller+0xa0/0x240 [ 184.019815][ T6924] ? fs_param_is_string+0xa1/0x1b0 [ 184.024947][ T6924] kstrndup+0x73/0x100 [ 184.029021][ T6924] smb3_parse_devname+0xe2/0x700 [ 184.033953][ T6924] ? smb3_fs_context_parse_param+0x711/0x6e20 [ 184.040014][ T6924] ? rcu_is_watching+0x11/0xa0 [ 184.044785][ T6924] smb3_fs_context_parse_param+0x752/0x6e20 [ 184.050680][ T6924] ? smb3_fs_context_free+0x60/0x60 [ 184.055875][ T6924] ? __might_fault+0xa6/0x120 [ 184.060547][ T6924] ? security_fs_context_parse_param+0xb1/0xe0 [ 184.066708][ T6924] vfs_parse_fs_param+0x19c/0x420 [ 184.071738][ T6924] __se_sys_fsconfig+0x69e/0x7e0 [ 184.076681][ T6924] ? __x64_sys_fsconfig+0xc0/0xc0 [ 184.081711][ T6924] ? lockdep_hardirqs_on+0x94/0x140 [ 184.086907][ T6924] ? __x64_sys_fsconfig+0x1c/0xc0 [ 184.091938][ T6924] do_syscall_64+0x4c/0xa0 [ 184.096360][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 184.101033][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 184.105711][ T6924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.111605][ T6924] RIP: 0033:0x7fc31ada8f19 [ 184.116013][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.135614][ T6924] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 184.144019][ T6924] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 184.152001][ T6924] RDX: 0000200000000600 RSI: 0000000000000001 RDI: 0000000000000003 [ 184.159966][ T6924] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 184.167933][ T6924] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000000 [ 184.175896][ T6924] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 184.183876][ T6924] [ 184.186953][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.240181][ T4363] usb 1-1: USB disconnect, device number 10 [ 184.366491][ T6932] FAULT_INJECTION: forcing a failure. [ 184.366491][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 184.385270][ T6932] CPU: 0 PID: 6932 Comm: syz.3.755 Not tainted syzkaller #0 [ 184.392598][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.402675][ T6932] Call Trace: [ 184.405973][ T6932] [ 184.408935][ T6932] dump_stack_lvl+0x188/0x24e [ 184.413650][ T6932] ? show_regs_print_info+0x12/0x12 [ 184.417913][ T6924] CIFS: VFS: Unable to allocate memory for devname [ 184.418860][ T6932] ? load_image+0x410/0x410 [ 184.429862][ T6932] ? __might_sleep+0xd0/0xd0 [ 184.434461][ T6932] ? __lock_acquire+0x7ea0/0x7ea0 [ 184.439537][ T6932] should_fail_ex+0x390/0x4c0 [ 184.444249][ T6932] should_failslab+0x5/0x20 [ 184.448780][ T6932] slab_pre_alloc_hook+0x59/0x300 [ 184.453829][ T6932] kmem_cache_alloc_lru+0x49/0x2e0 [ 184.458933][ T6932] ? __d_alloc+0x2e/0x6e0 [ 184.463270][ T6932] __d_alloc+0x2e/0x6e0 [ 184.467440][ T6932] ? d_alloc_pseudo+0xe/0x70 [ 184.472054][ T6932] d_alloc_pseudo+0x19/0x70 [ 184.476589][ T6932] alloc_file_pseudo+0xe0/0x200 [ 184.481433][ T6932] ? alloc_empty_file_noaccount+0x80/0x80 [ 184.487158][ T6932] ? alloc_fd+0x590/0x640 [ 184.491502][ T6932] sock_alloc_file+0xb3/0x240 [ 184.496204][ T6932] __sys_socket+0x12d/0x190 [ 184.500749][ T6932] __x64_sys_socket+0x76/0x80 [ 184.505474][ T6932] do_syscall_64+0x4c/0xa0 [ 184.509918][ T6932] ? clear_bhb_loop+0x60/0xb0 [ 184.514616][ T6932] ? clear_bhb_loop+0x60/0xb0 [ 184.519320][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.525238][ T6932] RIP: 0033:0x7fac527a8f19 [ 184.529670][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.549299][ T6932] RSP: 002b:00007fac5360f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 184.557738][ T6932] RAX: ffffffffffffffda RBX: 00007fac52a25fa0 RCX: 00007fac527a8f19 [ 184.565735][ T6932] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 184.573750][ T6932] RBP: 00007fac52837f6d R08: 0000000000000000 R09: 0000000000000000 [ 184.581750][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.589752][ T6932] R13: 00007fac52a26038 R14: 00007fac52a25fa0 R15: 00007ffcdcc4b8d8 [ 184.597769][ T6932] [ 184.763303][ T4369] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.952414][ T4369] usb 5-1: Using ep0 maxpacket: 8 [ 184.959532][ T4369] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 184.991574][ T4369] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.015018][ T4369] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.052278][ T4363] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.062578][ T4369] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.080177][ T4369] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.094784][ T4369] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.112813][ T4369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.184129][ T6961] loop1: detected capacity change from 0 to 512 [ 185.210398][ T6961] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 185.220917][ T6961] EXT4-fs (loop1): invalid journal inode [ 185.254084][ T4363] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.279187][ T4363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.344640][ T6965] xt_NFQUEUE: number of total queues is 0 [ 185.978908][ T4369] usb 5-1: GET_CAPABILITIES returned 0 [ 185.984515][ T4369] usbtmc 5-1:16.0: can't read capabilities [ 186.003132][ T4363] usb 4-1: config 0 descriptor?? [ 186.014450][ T4369] usb 5-1: USB disconnect, device number 10 [ 186.025354][ T4363] cp210x 4-1:0.0: cp210x converter detected [ 186.382037][ T6981] loop2: detected capacity change from 0 to 1024 [ 186.420680][ T4363] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 186.598236][ T26] audit: type=1800 audit(1794341114.224:18): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.766" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 186.648582][ T4363] usb 4-1: cp210x converter now attached to ttyUSB0 [ 186.866496][ T41] usb 4-1: USB disconnect, device number 10 [ 186.930258][ T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.959552][ T41] cp210x 4-1:0.0: device disconnected [ 187.845091][ T7032] input: syz0 as /devices/virtual/input/input16 [ 187.899170][ T7037] loop2: detected capacity change from 0 to 512 [ 187.975153][ T7037] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 188.039322][ T7037] EXT4-fs (loop2): invalid journal inode [ 188.214026][ T7048] xt_NFQUEUE: number of total queues is 0 [ 189.240641][ T7045] loop4: detected capacity change from 0 to 32768 [ 189.270417][ T7045] JBD2: Ignoring recovery information on journal [ 189.298692][ T7045] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.460013][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 189.502585][ T7069] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.513591][ T7070] FAULT_INJECTION: forcing a failure. [ 189.513591][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 189.567763][ T7070] CPU: 0 PID: 7070 Comm: syz.0.793 Not tainted syzkaller #0 [ 189.575105][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.585184][ T7070] Call Trace: [ 189.588484][ T7070] [ 189.591433][ T7070] dump_stack_lvl+0x188/0x24e [ 189.596147][ T7070] ? show_regs_print_info+0x12/0x12 [ 189.601369][ T7070] ? load_image+0x410/0x410 [ 189.605907][ T7070] ? __might_sleep+0xd0/0xd0 [ 189.610524][ T7070] ? __lock_acquire+0x7ea0/0x7ea0 [ 189.615582][ T7070] should_fail_ex+0x390/0x4c0 [ 189.620287][ T7070] should_failslab+0x5/0x20 [ 189.624806][ T7070] slab_pre_alloc_hook+0x59/0x300 [ 189.629836][ T7070] ? memcg_list_lru_alloc+0x331/0xb00 [ 189.635269][ T7070] __kmem_cache_alloc_node+0x4f/0x270 [ 189.640730][ T7070] ? memcg_list_lru_alloc+0x331/0xb00 [ 189.646218][ T7070] __kmalloc+0xa3/0x240 [ 189.650368][ T7070] memcg_list_lru_alloc+0x331/0xb00 [ 189.655569][ T7070] ? slab_pre_alloc_hook+0xb1/0x300 [ 189.660775][ T7070] ? memcg_reparent_list_lrus+0x850/0x850 [ 189.666513][ T7070] ? get_obj_cgroup_from_current+0xd0/0x280 [ 189.672415][ T7070] slab_pre_alloc_hook+0x2ad/0x300 [ 189.677528][ T7070] ? slab_pre_alloc_hook+0xb1/0x300 [ 189.682745][ T7070] kmem_cache_alloc_lru+0x49/0x2e0 [ 189.687946][ T7070] ? new_inode_pseudo+0x7e/0x1c0 [ 189.692970][ T7070] new_inode_pseudo+0x7e/0x1c0 [ 189.697741][ T7070] new_inode+0x25/0x1d0 [ 189.701899][ T7070] simple_fill_super+0xca/0x5e0 [ 189.706746][ T7070] ? net_generic+0x1e/0x240 [ 189.711285][ T7070] nfsd_fill_super+0x80/0x110 [ 189.715960][ T7070] ? nfsd_fs_get_tree+0xc0/0xc0 [ 189.720811][ T7070] get_tree_keyed+0xd8/0x190 [ 189.725404][ T7070] vfs_get_tree+0x88/0x270 [ 189.729823][ T7070] do_new_mount+0x247/0xa50 [ 189.734416][ T7070] __se_sys_mount+0x2e3/0x3d0 [ 189.739183][ T7070] ? __x64_sys_mount+0xc0/0xc0 [ 189.743947][ T7070] ? lockdep_hardirqs_on+0x94/0x140 [ 189.749143][ T7070] ? __x64_sys_mount+0x1c/0xc0 [ 189.753908][ T7070] do_syscall_64+0x4c/0xa0 [ 189.758329][ T7070] ? clear_bhb_loop+0x60/0xb0 [ 189.763049][ T7070] ? clear_bhb_loop+0x60/0xb0 [ 189.767828][ T7070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.773777][ T7070] RIP: 0033:0x7f49fc9a8f19 [ 189.778443][ T7070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.798102][ T7070] RSP: 002b:00007f49fd8bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.806522][ T7070] RAX: ffffffffffffffda RBX: 00007f49fcc25fa0 RCX: 00007f49fc9a8f19 [ 189.814491][ T7070] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 189.822465][ T7070] RBP: 00007f49fca37f6d R08: 0000000000000000 R09: 0000000000000000 [ 189.830436][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.838489][ T7070] R13: 00007f49fcc26038 R14: 00007f49fcc25fa0 R15: 00007fff746c46b8 [ 189.846749][ T7070] [ 189.957334][ T7077] loop1: detected capacity change from 0 to 512 [ 190.041088][ T7077] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.797: missing EA_INODE flag [ 190.190234][ T7077] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.797: error while reading EA inode 12 err=-117 [ 190.258965][ T7077] EXT4-fs (loop1): 1 orphan inode deleted [ 190.275104][ T7077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.495848][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 190.559811][ T7091] device ip6gre1 entered promiscuous mode [ 190.600865][ T7095] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.643005][ T5511] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.839554][ T7102] loop3: detected capacity change from 0 to 8192 [ 190.910670][ T7102] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.942188][ T7102] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 190.974229][ T7102] REISERFS (device loop3): using ordered data mode [ 190.992217][ T7102] reiserfs: using flush barriers [ 191.007495][ T7102] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.043103][ T7102] REISERFS (device loop3): checking transaction log (loop3) [ 191.065031][ T7105] FAULT_INJECTION: forcing a failure. [ 191.065031][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 191.102760][ T7105] CPU: 0 PID: 7105 Comm: syz.0.796 Not tainted syzkaller #0 [ 191.110094][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.120170][ T7105] Call Trace: [ 191.123464][ T7105] [ 191.126410][ T7105] dump_stack_lvl+0x188/0x24e [ 191.131119][ T7105] ? show_regs_print_info+0x12/0x12 [ 191.136351][ T7105] ? load_image+0x410/0x410 [ 191.140884][ T7105] ? __lock_acquire+0x7ea0/0x7ea0 [ 191.145953][ T7105] should_fail_ex+0x390/0x4c0 [ 191.150662][ T7105] should_failslab+0x5/0x20 [ 191.155184][ T7105] slab_pre_alloc_hook+0x59/0x300 [ 191.160236][ T7105] kmem_cache_alloc+0x56/0x2f0 [ 191.165024][ T7105] ? sk_prot_alloc+0x57/0x210 [ 191.169764][ T7105] sk_prot_alloc+0x57/0x210 [ 191.174290][ T7105] ? sk_alloc+0x20/0x330 [ 191.178557][ T7105] sk_alloc+0x36/0x330 [ 191.182645][ T7105] rds_create+0x7f/0x4a0 [ 191.186908][ T7105] __sock_create+0x49a/0x940 [ 191.191528][ T7105] __sys_socket+0xc4/0x190 [ 191.195967][ T7105] __x64_sys_socket+0x76/0x80 [ 191.200665][ T7105] do_syscall_64+0x4c/0xa0 [ 191.205103][ T7105] ? clear_bhb_loop+0x60/0xb0 [ 191.208363][ T7100] loop2: detected capacity change from 0 to 32768 [ 191.209783][ T7105] ? clear_bhb_loop+0x60/0xb0 [ 191.209813][ T7105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.226769][ T7105] RIP: 0033:0x7f49fc9a8f19 [ 191.231180][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.250803][ T7105] RSP: 002b:00007f49fd8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 191.259216][ T7105] RAX: ffffffffffffffda RBX: 00007f49fcc25fa0 RCX: 00007f49fc9a8f19 [ 191.267183][ T7105] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000040000000015 [ 191.275166][ T7105] RBP: 00007f49fca37f6d R08: 0000000000000000 R09: 0000000000000000 [ 191.283131][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.291093][ T7105] R13: 00007f49fcc26038 R14: 00007f49fcc25fa0 R15: 00007fff746c46b8 [ 191.299071][ T7105] [ 191.351673][ T7100] JBD2: Ignoring recovery information on journal [ 191.436440][ T7100] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 191.452344][ T5098] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.484230][ T7102] REISERFS (device loop3): Using tea hash to sort names [ 191.499209][ T7102] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 191.653175][ T5098] usb 5-1: Using ep0 maxpacket: 16 [ 191.662841][ T5098] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 191.677976][ T5098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.717376][ T5098] usb 5-1: Product: syz [ 191.731849][ T5098] usb 5-1: Manufacturer: syz [ 191.739814][ T5098] usb 5-1: SerialNumber: syz [ 191.747070][ T5098] usb 5-1: config 0 descriptor?? [ 191.770519][ T5098] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 191.788930][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 191.793348][ T5098] usb 5-1: Detected FT-X [ 191.968352][ T5098] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 192.149486][ T7124] input: syz0 as /devices/virtual/input/input17 [ 192.426895][ T5098] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.632262][ T4292] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 192.632679][ T4293] Bluetooth: hci5: command 0x1003 tx timeout [ 192.645637][ T5098] usb 5-1: USB disconnect, device number 11 [ 192.749706][ T5098] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 192.799546][ T5098] ftdi_sio 5-1:0.0: device disconnected [ 192.903295][ T7134] loop2: detected capacity change from 0 to 32768 [ 192.961307][ T7148] loop1: detected capacity change from 0 to 512 [ 192.990038][ T7134] XFS (loop2): Mounting V5 Filesystem [ 193.079766][ T7148] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 193.118501][ T7148] EXT4-fs error (device loop1): ext4_iget_extra_inode:4766: inode #15: comm syz.1.813: corrupted in-inode xattr [ 193.146343][ T7134] XFS (loop2): Ending clean mount [ 193.183877][ T7159] loop0: detected capacity change from 0 to 1024 [ 193.227174][ T7159] hfsplus: invalid length 32517 has been corrected to 255 [ 193.252313][ T7148] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.813: couldn't read orphan inode 15 (err -117) [ 193.296381][ T7148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.311723][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 193.368546][ T4283] XFS (loop2): Unmounting Filesystem [ 193.475630][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 193.615845][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.634734][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.675592][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.736766][ T7166] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 194.160702][ T7188] FAULT_INJECTION: forcing a failure. [ 194.160702][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 194.176234][ T7188] CPU: 1 PID: 7188 Comm: syz.1.824 Not tainted syzkaller #0 [ 194.183571][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.193647][ T7188] Call Trace: [ 194.197000][ T7188] [ 194.200450][ T7188] dump_stack_lvl+0x188/0x24e [ 194.205356][ T7188] ? show_regs_print_info+0x12/0x12 [ 194.210591][ T7188] ? load_image+0x410/0x410 [ 194.215206][ T7188] ? __might_sleep+0xd0/0xd0 [ 194.219798][ T7188] ? __lock_acquire+0x7ea0/0x7ea0 [ 194.224833][ T7188] should_fail_ex+0x390/0x4c0 [ 194.229516][ T7188] should_failslab+0x5/0x20 [ 194.234026][ T7188] slab_pre_alloc_hook+0x59/0x300 [ 194.239075][ T7188] ? __se_sys_memfd_create+0xee/0x340 [ 194.244449][ T7188] __kmem_cache_alloc_node+0x4f/0x270 [ 194.249818][ T7188] ? __se_sys_memfd_create+0xee/0x340 [ 194.255214][ T7188] __kmalloc+0xa3/0x240 [ 194.259381][ T7188] __se_sys_memfd_create+0xee/0x340 [ 194.264582][ T7188] do_syscall_64+0x4c/0xa0 [ 194.268998][ T7188] ? clear_bhb_loop+0x60/0xb0 [ 194.273682][ T7188] ? clear_bhb_loop+0x60/0xb0 [ 194.278359][ T7188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.284254][ T7188] RIP: 0033:0x7fc31ada8f19 [ 194.288669][ T7188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.308292][ T7188] RSP: 002b:00007fc31bbb1e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 194.317229][ T7188] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007fc31ada8f19 [ 194.325205][ T7188] RDX: 00007fc31bbb1ee0 RSI: 0000000000000000 RDI: 00007fc31ae38160 [ 194.333178][ T7188] RBP: 0000200000000900 R08: 00000000ffffffff R09: 0000000000000000 [ 194.341145][ T7188] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000680 [ 194.349108][ T7188] R13: 00007fc31bbb1ee0 R14: 00007fc31bbb1ea0 R15: 00002000000006c0 [ 194.357089][ T7188] [ 194.373477][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379797][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452189][ T4409] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.541761][ T7194] FAULT_INJECTION: forcing a failure. [ 194.541761][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 194.562209][ T7194] CPU: 1 PID: 7194 Comm: syz.3.826 Not tainted syzkaller #0 [ 194.569556][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.579635][ T7194] Call Trace: [ 194.582936][ T7194] [ 194.585883][ T7194] dump_stack_lvl+0x188/0x24e [ 194.590594][ T7194] ? show_regs_print_info+0x12/0x12 [ 194.595817][ T7194] ? load_image+0x410/0x410 [ 194.600345][ T7194] ? __might_sleep+0xd0/0xd0 [ 194.604960][ T7194] ? __lock_acquire+0x7ea0/0x7ea0 [ 194.610022][ T7194] should_fail_ex+0x390/0x4c0 [ 194.614735][ T7194] should_failslab+0x5/0x20 [ 194.619263][ T7194] slab_pre_alloc_hook+0x59/0x300 [ 194.624318][ T7194] ? bpf_prog_create_from_user+0x218/0x420 [ 194.630156][ T7194] __kmem_cache_alloc_node+0x4f/0x270 [ 194.635553][ T7194] ? bpf_prog_create_from_user+0x218/0x420 [ 194.641388][ T7194] kmalloc_trace+0x26/0xe0 [ 194.645827][ T7194] bpf_prog_create_from_user+0x218/0x420 [ 194.651486][ T7194] ? seccomp_notify_detach+0x220/0x220 [ 194.656980][ T7194] do_seccomp+0x806/0xe00 [ 194.661358][ T7194] ? prctl_set_seccomp+0x60/0x60 [ 194.666843][ T7194] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.672853][ T7194] ? lockdep_hardirqs_on+0x94/0x140 [ 194.678054][ T7194] do_syscall_64+0x4c/0xa0 [ 194.682471][ T7194] ? clear_bhb_loop+0x60/0xb0 [ 194.687150][ T7194] ? clear_bhb_loop+0x60/0xb0 [ 194.691825][ T7194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.697721][ T7194] RIP: 0033:0x7fac527a8f19 [ 194.702155][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.721879][ T7194] RSP: 002b:00007fac5360f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 194.730293][ T7194] RAX: ffffffffffffffda RBX: 00007fac52a25fa0 RCX: 00007fac527a8f19 [ 194.738260][ T7194] RDX: 00002000000004c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 194.746226][ T7194] RBP: 00007fac52837f6d R08: 0000000000000000 R09: 0000000000000000 [ 194.754191][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.762155][ T7194] R13: 00007fac52a26038 R14: 00007fac52a25fa0 R15: 00007ffcdcc4b8d8 [ 194.770135][ T7194] [ 194.821006][ T4409] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 194.840834][ T4409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.859146][ T4409] usb 3-1: Product: syz [ 194.872253][ T4409] usb 3-1: Manufacturer: syz [ 194.878997][ T4409] usb 3-1: SerialNumber: syz [ 194.902640][ T4409] usb 3-1: config 0 descriptor?? [ 194.926251][ T7198] binder: 7196:7198 ioctl c0306201 2000000003c0 returned -14 [ 195.154932][ T7200] device-mapper: thin: Data device (ram3) discard unsupported: Disabling discard passdown. [ 195.201949][ T7205] loop1: detected capacity change from 0 to 2048 [ 195.323491][ T4409] usb 3-1: Firmware: major: 63, minor: 28, hardware type: UNKNOWN (21) [ 195.353346][ T4369] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.366326][ T7205] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.464319][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 195.522164][ T41] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 195.530588][ T4409] usb 3-1: no permanent extended address found, random address set [ 195.548451][ T4409] usb 3-1: atusb_probe: initialization failed, error = -524 [ 195.552301][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 195.556342][ T4409] atusb: probe of 3-1:0.0 failed with error -524 [ 195.580312][ T4369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.599017][ T4369] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.618460][ T4369] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.640566][ T4369] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 195.651068][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.671263][ T4369] usb 1-1: Product: syz [ 195.678567][ T4369] usb 1-1: Manufacturer: syz [ 195.683904][ T4369] usb 1-1: SerialNumber: syz [ 195.738644][ T41] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.762726][ T41] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.770859][ T4744] usb 3-1: USB disconnect, device number 9 [ 195.790804][ T41] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.816647][ T41] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.829422][ T41] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 195.839128][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.864489][ T41] usb 4-1: config 0 descriptor?? [ 196.283345][ T41] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0008/input/input18 [ 196.315166][ T4369] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 196.333429][ T4369] usb 1-1: clock source 0 is not valid, cannot use [ 196.340472][ T4369] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 196.392503][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 196.392520][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 196.392547][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 196.398514][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 196.407416][ T41] lenovo 0003:17EF:6047.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 196.512803][ T4409] usb 4-1: USB disconnect, device number 11 [ 196.586710][ T7228] fido_id[7228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 196.615320][ T41] usb 1-1: USB disconnect, device number 11 [ 196.685911][ T7230] use of bytesused == 0 is deprecated and will be removed in the future, [ 196.695310][ T7230] use the actual size instead. [ 196.934993][ T7239] loop2: detected capacity change from 0 to 1024 [ 196.961778][ T7232] loop1: detected capacity change from 0 to 32768 [ 197.014580][ T7232] JBD2: Ignoring recovery information on journal [ 197.138815][ T7232] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 197.238130][ T7247] loop0: detected capacity change from 0 to 256 [ 197.311005][ T7247] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d) [ 197.378191][ T7232] [ 197.380563][ T7232] ====================================================== [ 197.387592][ T7232] WARNING: possible circular locking dependency detected [ 197.394631][ T7232] syzkaller #0 Not tainted [ 197.399054][ T7232] ------------------------------------------------------ [ 197.406076][ T7232] syz.1.839/7232 is trying to acquire lock: [ 197.411993][ T7232] ffff888149ca6990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270 [ 197.421594][ T7232] [ 197.421594][ T7232] but task is already holding lock: [ 197.428972][ T7232] ffff88805591b8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 197.439267][ T7232] [ 197.439267][ T7232] which lock already depends on the new lock. [ 197.439267][ T7232] [ 197.449684][ T7232] [ 197.449684][ T7232] the existing dependency chain (in reverse order) is: [ 197.458788][ T7232] [ 197.458788][ T7232] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 197.467534][ T7232] down_read+0x42/0x2d0 [ 197.472323][ T7232] ocfs2_start_trans+0x3a4/0x6f0 [ 197.477936][ T7232] ocfs2_modify_bh+0xe0/0x4c0 [ 197.483158][ T7232] ocfs2_local_read_info+0x1499/0x1820 [ 197.489160][ T7232] dquot_load_quota_sb+0x72f/0xa80 [ 197.494850][ T7232] dquot_load_quota_inode+0x2d3/0x5c0 [ 197.500766][ T7232] ocfs2_enable_quotas+0x1c0/0x4a0 [ 197.506417][ T7232] ocfs2_fill_super+0x40fe/0x5010 [ 197.511988][ T7232] mount_bdev+0x28a/0x3c0 [ 197.516860][ T7232] legacy_get_tree+0xe6/0x180 [ 197.522082][ T7232] vfs_get_tree+0x88/0x270 [ 197.527048][ T7232] do_new_mount+0x247/0xa50 [ 197.532096][ T7232] __se_sys_mount+0x2e3/0x3d0 [ 197.537322][ T7232] do_syscall_64+0x4c/0xa0 [ 197.542282][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.548722][ T7232] [ 197.548722][ T7232] -> #4 (sb_internal#3){.+.+}-{0:0}: [ 197.556228][ T7232] ocfs2_start_trans+0x2a5/0x6f0 [ 197.561713][ T7232] ocfs2_acquire_dquot+0x69a/0xb80 [ 197.567376][ T7232] dqget+0x713/0xbb0 [ 197.571813][ T7232] __dquot_initialize+0x3a9/0xd00 [ 197.577447][ T7232] ocfs2_get_init_inode+0x144/0x1b0 [ 197.583284][ T7232] ocfs2_mknod+0xbdc/0x2500 [ 197.588443][ T7232] ocfs2_create+0x1b6/0x4b0 [ 197.593495][ T7232] path_openat+0x11b9/0x2f10 [ 197.598639][ T7232] do_filp_open+0x1ee/0x420 [ 197.603690][ T7232] do_sys_openat2+0x14b/0x4f0 [ 197.608914][ T7232] __x64_sys_openat+0x135/0x160 [ 197.614312][ T7232] do_syscall_64+0x4c/0xa0 [ 197.619386][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.625792][ T7232] [ 197.625792][ T7232] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 197.634647][ T7232] down_write+0x36/0x60 [ 197.639335][ T7232] ocfs2_create_local_dquot+0x19a/0x1900 [ 197.645482][ T7232] ocfs2_acquire_dquot+0x7e6/0xb80 [ 197.651110][ T7232] dqget+0x713/0xbb0 [ 197.655520][ T7232] __dquot_initialize+0x3a9/0xd00 [ 197.661079][ T7232] ocfs2_get_init_inode+0x144/0x1b0 [ 197.666788][ T7232] ocfs2_mknod+0xbdc/0x2500 [ 197.671805][ T7232] ocfs2_create+0x1b6/0x4b0 [ 197.676817][ T7232] path_openat+0x11b9/0x2f10 [ 197.681912][ T7232] do_filp_open+0x1ee/0x420 [ 197.686936][ T7232] do_sys_openat2+0x14b/0x4f0 [ 197.692137][ T7232] __x64_sys_openat+0x135/0x160 [ 197.697518][ T7232] do_syscall_64+0x4c/0xa0 [ 197.702445][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.708845][ T7232] [ 197.708845][ T7232] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 197.716470][ T7232] __mutex_lock+0x12d/0xb40 [ 197.721488][ T7232] dquot_commit+0x5a/0x410 [ 197.726427][ T7232] ext4_write_dquot+0x1f0/0x360 [ 197.731796][ T7232] mark_all_dquot_dirty+0xf9/0x400 [ 197.737447][ T7232] __dquot_alloc_space+0x5f6/0xe50 [ 197.743138][ T7232] ext4_mb_new_blocks+0xf55/0x44d0 [ 197.748888][ T7232] ext4_ext_map_blocks+0x184a/0x6680 [ 197.754758][ T7232] ext4_map_blocks+0x9d7/0x1a90 [ 197.760157][ T7232] ext4_getblk+0x1c5/0x720 [ 197.765117][ T7232] ext4_bread+0x26/0x170 [ 197.769902][ T7232] ext4_append+0x2bb/0x560 [ 197.774887][ T7232] ext4_init_new_dir+0x2b8/0x550 [ 197.780362][ T7232] ext4_mkdir+0x4c3/0xc90 [ 197.785226][ T7232] vfs_mkdir+0x386/0x570 [ 197.790006][ T7232] do_mkdirat+0x1d8/0x440 [ 197.794865][ T7232] __x64_sys_mkdirat+0x85/0x90 [ 197.800164][ T7232] do_syscall_64+0x4c/0xa0 [ 197.805119][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.811549][ T7232] [ 197.811549][ T7232] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 197.819215][ T7232] down_read+0x42/0x2d0 [ 197.823914][ T7232] ext4_map_blocks+0x338/0x1a90 [ 197.829312][ T7232] ext4_append+0x22d/0x560 [ 197.834263][ T7232] ext4_init_new_dir+0x2b8/0x550 [ 197.839743][ T7232] ext4_mkdir+0x4c3/0xc90 [ 197.844596][ T7232] vfs_mkdir+0x386/0x570 [ 197.849361][ T7232] do_mkdirat+0x1d8/0x440 [ 197.854210][ T7232] __x64_sys_mkdir+0x6a/0x80 [ 197.859327][ T7232] do_syscall_64+0x4c/0xa0 [ 197.864258][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.870669][ T7232] [ 197.870669][ T7232] -> #0 (jbd2_handle){++++}-{0:0}: [ 197.877953][ T7232] __lock_acquire+0x3a03/0x7ea0 [ 197.883320][ T7232] lock_acquire+0x1bc/0x4a0 [ 197.888337][ T7232] wait_transaction_locked+0x1bf/0x270 [ 197.894325][ T7232] start_this_handle+0x7e7/0x2240 [ 197.899858][ T7232] jbd2__journal_start+0x2b7/0x5a0 [ 197.905480][ T7232] jbd2_journal_start+0x26/0x30 [ 197.910841][ T7232] ocfs2_start_trans+0x3b0/0x6f0 [ 197.916314][ T7232] ocfs2_write_begin_nolock+0x2995/0x4590 [ 197.922546][ T7232] ocfs2_write_begin+0x1b7/0x310 [ 197.927994][ T7232] generic_perform_write+0x2fa/0x5c0 [ 197.933792][ T7232] __generic_file_write_iter+0x148/0x2a0 [ 197.939935][ T7232] ocfs2_file_write_iter+0x1731/0x1fc0 [ 197.945899][ T7232] vfs_write+0x482/0x9a0 [ 197.950648][ T7232] ksys_write+0x14d/0x260 [ 197.955483][ T7232] do_syscall_64+0x4c/0xa0 [ 197.960415][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.966825][ T7232] [ 197.966825][ T7232] other info that might help us debug this: [ 197.966825][ T7232] [ 197.977040][ T7232] Chain exists of: [ 197.977040][ T7232] jbd2_handle --> sb_internal#3 --> &journal->j_trans_barrier [ 197.977040][ T7232] [ 197.990412][ T7232] Possible unsafe locking scenario: [ 197.990412][ T7232] [ 197.997848][ T7232] CPU0 CPU1 [ 198.003198][ T7232] ---- ---- [ 198.008547][ T7232] rlock(&journal->j_trans_barrier); [ 198.013909][ T7232] lock(sb_internal#3); [ 198.020662][ T7232] lock(&journal->j_trans_barrier); [ 198.028456][ T7232] lock(jbd2_handle); [ 198.032511][ T7232] [ 198.032511][ T7232] *** DEADLOCK *** [ 198.032511][ T7232] [ 198.040636][ T7232] 7 locks held by syz.1.839/7232: [ 198.045642][ T7232] #0: ffff8880296945e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 198.054865][ T7232] #1: ffff888149ca2460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 198.063821][ T7232] #2: ffff8880514c42c8 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x45a/0x1fc0 [ 198.075121][ T7232] #3: ffff8880514c3f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x194/0x310 [ 198.086066][ T7232] #4: ffff8880514c6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11e/0x2770 [ 198.099975][ T7232] #5: ffff888149ca2650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x2995/0x4590 [ 198.110427][ T7232] #6: ffff88805591b8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 198.121117][ T7232] [ 198.121117][ T7232] stack backtrace: [ 198.126991][ T7232] CPU: 0 PID: 7232 Comm: syz.1.839 Not tainted syzkaller #0 [ 198.134262][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 198.144308][ T7232] Call Trace: [ 198.147576][ T7232] [ 198.150499][ T7232] dump_stack_lvl+0x188/0x24e [ 198.155174][ T7232] ? load_image+0x410/0x410 [ 198.159670][ T7232] ? show_regs_print_info+0x12/0x12 [ 198.164867][ T7232] ? print_circular_bug+0x12b/0x1a0 [ 198.170063][ T7232] check_noncircular+0x2f8/0x400 [ 198.174996][ T7232] ? print_deadlock_bug+0x5d0/0x5d0 [ 198.180184][ T7232] ? lockdep_lock+0xf1/0x1f0 [ 198.184768][ T7232] ? _find_first_zero_bit+0xd2/0x100 [ 198.190063][ T7232] __lock_acquire+0x3a03/0x7ea0 [ 198.194910][ T7232] ? igrab+0x87/0x90 [ 198.198806][ T7232] ? verify_lock_unused+0x140/0x140 [ 198.203996][ T7232] ? mark_lock+0x94/0x320 [ 198.208318][ T7232] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.214292][ T7232] lock_acquire+0x1bc/0x4a0 [ 198.218786][ T7232] ? wait_transaction_locked+0x1a6/0x270 [ 198.224411][ T7232] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.229428][ T7232] ? read_lock_is_recursive+0x10/0x10 [ 198.234820][ T7232] ? prepare_to_wait_exclusive+0x7d/0x210 [ 198.240533][ T7232] ? wait_transaction_locked+0x1a6/0x270 [ 198.246162][ T7232] wait_transaction_locked+0x1bf/0x270 [ 198.251614][ T7232] ? wait_transaction_locked+0x1a6/0x270 [ 198.257238][ T7232] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 198.263912][ T7232] ? stack_trace_save+0xa6/0xf0 [ 198.268762][ T7232] ? wake_bit_function+0x200/0x200 [ 198.273869][ T7232] ? __lock_acquire+0x142d/0x7ea0 [ 198.278889][ T7232] start_this_handle+0x7e7/0x2240 [ 198.283901][ T7232] ? slab_post_alloc_hook+0x4b/0x490 [ 198.289177][ T7232] ? kmem_cache_alloc+0x18b/0x2f0 [ 198.294189][ T7232] ? jbd2__journal_start+0x13c/0x5a0 [ 198.299470][ T7232] ? jbd2__journal_start+0x5a0/0x5a0 [ 198.304747][ T7232] ? __kasan_slab_alloc+0x6b/0x80 [ 198.309768][ T7232] ? slab_post_alloc_hook+0x67/0x490 [ 198.315043][ T7232] ? slab_pre_alloc_hook+0x59/0x300 [ 198.320242][ T7232] ? rcu_is_watching+0x11/0xa0 [ 198.325006][ T7232] ? kmem_cache_alloc+0x1b2/0x2f0 [ 198.330018][ T7232] ? jbd2__journal_start+0x13c/0x5a0 [ 198.335293][ T7232] jbd2__journal_start+0x2b7/0x5a0 [ 198.340399][ T7232] jbd2_journal_start+0x26/0x30 [ 198.345241][ T7232] ocfs2_start_trans+0x3b0/0x6f0 [ 198.350181][ T7232] ? ocfs2_recovery_exit+0x50/0x50 [ 198.355281][ T7232] ? ocfs2_write_begin_nolock+0xfa5/0x4590 [ 198.361078][ T7232] ocfs2_write_begin_nolock+0x2995/0x4590 [ 198.366804][ T7232] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 198.372601][ T7232] ? __lock_acquire+0x142d/0x7ea0 [ 198.377662][ T7232] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 198.383634][ T7232] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 198.389606][ T7232] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.394630][ T7232] ? rwsem_write_trylock+0x135/0x1c0 [ 198.399908][ T7232] ? clear_nonspinnable+0x60/0x60 [ 198.404923][ T7232] ? exc_page_fault+0x88/0x100 [ 198.409676][ T7232] ? exc_page_fault+0x88/0x100 [ 198.414427][ T7232] ocfs2_write_begin+0x1b7/0x310 [ 198.419353][ T7232] ? ocfs2_readahead+0x190/0x190 [ 198.424279][ T7232] ? fault_in_readable+0x139/0x1f0 [ 198.429382][ T7232] ? fault_in_readable+0x13e/0x1f0 [ 198.434482][ T7232] ? fault_in_readable+0x15d/0x1f0 [ 198.439585][ T7232] ? fault_in_iov_iter_readable+0xbf/0x2f0 [ 198.445389][ T7232] generic_perform_write+0x2fa/0x5c0 [ 198.450677][ T7232] ? generic_file_direct_write+0x330/0x330 [ 198.456475][ T7232] ? __file_remove_privs+0x5f0/0x5f0 [ 198.461749][ T7232] ? __up_read+0x2b4/0x6b0 [ 198.466159][ T7232] ? do_raw_spin_unlock+0x11d/0x230 [ 198.471349][ T7232] __generic_file_write_iter+0x148/0x2a0 [ 198.476978][ T7232] ocfs2_file_write_iter+0x1731/0x1fc0 [ 198.482426][ T7232] ? verify_lock_unused+0x140/0x140 [ 198.487621][ T7232] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 198.492983][ T7232] ? aa_file_perm+0x3ea/0xf00 [ 198.497678][ T7232] ? rcu_read_lock_any_held+0xb0/0x130 [ 198.503128][ T7232] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 198.508402][ T7232] ? end_current_label_crit_section+0x14b/0x170 [ 198.514633][ T7232] ? common_file_perm+0x171/0x1c0 [ 198.519650][ T7232] vfs_write+0x482/0x9a0 [ 198.523974][ T7232] ? file_end_write+0x250/0x250 [ 198.528813][ T7232] ? __fget_files+0x3fc/0x460 [ 198.533487][ T7232] ? __fdget_pos+0x2ae/0x360 [ 198.538858][ T7232] ? ksys_write+0x70/0x260 [ 198.543267][ T7232] ksys_write+0x14d/0x260 [ 198.547588][ T7232] ? __ia32_sys_read+0x80/0x80 [ 198.552342][ T7232] ? lockdep_hardirqs_on+0x94/0x140 [ 198.557531][ T7232] do_syscall_64+0x4c/0xa0 [ 198.561958][ T7232] ? clear_bhb_loop+0x60/0xb0 [ 198.566631][ T7232] ? clear_bhb_loop+0x60/0xb0 [ 198.571303][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.577216][ T7232] RIP: 0033:0x7fc31ada8f19 [ 198.581635][ T7232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.601239][ T7232] RSP: 002b:00007fc31bbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.609654][ T7232] RAX: ffffffffffffffda RBX: 00007fc31b025fa0 RCX: 00007fc31ada8f19 [ 198.617615][ T7232] RDX: 000000000000fea7 RSI: 0000200000006540 RDI: 0000000000000005 [ 198.625583][ T7232] RBP: 00007fc31ae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 198.633544][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.641519][ T7232] R13: 00007fc31b026038 R14: 00007fc31b025fa0 R15: 00007ffd26d27888 [ 198.649509][ T7232] [ 198.748249][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 198.748747][ T7257] loop2: detected capacity change from 0 to 4096 [ 198.760130][ T7259] device ip6gre1 entered promiscuous mode [ 198.775446][ T4744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.787205][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 198.794223][ T4744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.811547][ T7259] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.844546][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.866087][ T4744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.906578][ T7257] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 198.926421][ T7257] EXT4-fs (loop2): This should not happen!! Data will be lost [ 198.926421][ T7257] [ 198.936710][ T7257] EXT4-fs (loop2): Total free blocks count 0 [ 198.944285][ T7257] EXT4-fs (loop2): Free/Dirty block details [ 198.950209][ T7257] EXT4-fs (loop2): free_blocks=0 [ 198.955872][ T7257] EXT4-fs (loop2): dirty_blocks=0 [ 198.960973][ T7257] EXT4-fs (loop2): Block reservation details [ 198.968632][ T7257] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 198.993634][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 199.382380][ T4363] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.593109][ T4363] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.872251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!