last executing test programs: 5.560157893s ago: executing program 0 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x4, 0x8}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0x80ea45, 0x800000e, 0x1, 0x63, 0xffffffff, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x5ff, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x7, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x2, 0xae3, 0x6, 0x7, 0xfffffffd, 0x9, 0xffff3f16, 0xa, 0x0, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x3, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x5, 0x0, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x104, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 4.762053283s ago: executing program 2 (id=547): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3, 0x1500}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000040)=""/150, 0x34, 0x96, 0x1}, 0x28) 4.681325095s ago: executing program 2 (id=548): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001800010000000200fedbdf251d01070008000a00", @ANYRES32=r2, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3, @ANYBLOB="150001000300004024010000c0d1a3900b6711e201"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0x31) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@can_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d3698ac660061306"}, 0x4}}, @CGW_MOD_UID={0x8, 0xe, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) 1.480106944s ago: executing program 3 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='10', 0x2) 1.452470984s ago: executing program 3 (id=572): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b02010200060004000700030039", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.429623145s ago: executing program 0 (id=573): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) unshare(0x28000600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x3, 0xfffa}, 0x3a, [0x8000, 0x401, 0xb, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x7fff, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x7, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xa, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x9, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0xbe0f, 0x8a6, 0x7, 0xa, 0xffffffff, 0x5, 0x20, 0x120000, 0x2008077f, 0x2, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x2000004, 0xffff, 0x5, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x1, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r4, 0xea283) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) 1.190777351s ago: executing program 1 (id=574): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000e40)="c9", 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, r0) 928.793787ms ago: executing program 2 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 618.763575ms ago: executing program 4 (id=576): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 114.583827ms ago: executing program 4 (id=577): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 0s ago: executing program 1 (id=578): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x50) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xb}]}}}]}, 0x38}}, 0x4010) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) rmdir(0x0) r2 = socket(0x2, 0x80805, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000180)=r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder-control\x00', 0x2, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffd3d, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000680)=""/1}) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0xffffffffffffffda, 0xfffffffffffffffc, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x723108f0bed4e, 0x9, 0x7f, 0x1007, 0x7c, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x80, 0x1, 0x2}}) io_uring_setup(0xbbc, 0x0) close(r0) kernel console output (not intermixed with test programs): becomes ready [ 63.603672][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.160650][ T4282] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 64.293047][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.326527][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.358575][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.367071][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.401358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.506429][ T1325] Bluetooth: hci2: command 0x0419 tx timeout [ 64.518322][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 64.525583][ T1325] Bluetooth: hci3: command 0x0419 tx timeout [ 64.533951][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 64.543026][ T1325] Bluetooth: hci4: command 0x0419 tx timeout [ 64.574504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.946048][ T4303] loop1: detected capacity change from 0 to 128 [ 65.853880][ T4315] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4315] [ 65.940291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.020283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.030291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.040288][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.050286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.060285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.070289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.080284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.090284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.100287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.661885][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 66.693296][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 67.237583][ T4343] binder: 4330:4343 ioctl c0306201 0 returned -14 [ 67.753279][ T4343] lo speed is unknown, defaulting to 1000 [ 67.763981][ T4343] lo speed is unknown, defaulting to 1000 [ 67.771508][ T4343] lo speed is unknown, defaulting to 1000 [ 67.860203][ T4343] infiniband sz1: set active [ 67.865184][ T4343] infiniband sz1: added lo [ 67.878373][ T4343] infiniband sz1: Couldn't open port 1 [ 67.938539][ T4358] loop2: detected capacity change from 0 to 128 [ 67.956868][ T4344] device syzkaller0 entered promiscuous mode [ 67.986723][ T4343] RDS/IB: sz1: added [ 67.992587][ T4343] smc: adding ib device sz1 with port count 1 [ 67.999182][ T4343] smc: ib device sz1 port 1 has pnetid [ 68.051036][ T4190] lo speed is unknown, defaulting to 1000 [ 68.058607][ T4343] lo speed is unknown, defaulting to 1000 [ 68.994768][ T4371] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4371] [ 69.492334][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.500760][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.795352][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.823167][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.106969][ T4359] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.127362][ T4359] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.136599][ T4359] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.147114][ T4359] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.222912][ T4270] lo speed is unknown, defaulting to 1000 [ 70.241701][ T4359] syz.4.25 (4359) used greatest stack depth: 20880 bytes left [ 70.266510][ T4391] netlink: 112 bytes leftover after parsing attributes in process `syz.4.29'. [ 70.276605][ T4391] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29'. [ 70.344863][ T4343] lo speed is unknown, defaulting to 1000 [ 70.428134][ T4343] lo speed is unknown, defaulting to 1000 [ 70.527630][ T4343] lo speed is unknown, defaulting to 1000 [ 70.617663][ T4343] lo speed is unknown, defaulting to 1000 [ 71.406426][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.413993][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.552947][ T4409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.538262][ T4424] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 72.800189][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.807845][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.917499][ T4430] loop4: detected capacity change from 0 to 128 [ 73.270012][ T4434] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4434] [ 73.892928][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.948644][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.314208][ T4414] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.323701][ T4414] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.333452][ T4414] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.346426][ T4414] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.464927][ T4422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.40'. [ 74.484230][ T4425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.40'. [ 74.501225][ T4424] rdma_rxe: ignoring netdev event = 10 for lo [ 74.526024][ T4424] infiniband sz1: set down [ 74.648147][ T4447] binder: 4444:4447 ioctl c0306201 0 returned -14 [ 74.663268][ T4447] rdma_rxe: rxe_register_device failed with error -23 [ 74.671737][ T4447] rdma_rxe: failed to add lo [ 75.138847][ T4451] syz.0.46 (4451) used greatest stack depth: 20736 bytes left [ 75.940278][ C0] sched: RT throttling activated [ 76.409257][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.416588][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.720561][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.782149][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.818461][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.078838][ T4424] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.088372][ T4424] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.099464][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.099700][ T4424] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.111389][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 77.126115][ T4424] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.129866][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.148599][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.201266][ T4472] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.304821][ T4229] lo speed is unknown, defaulting to 1000 [ 77.311646][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 77.382309][ T4229] lo speed is unknown, defaulting to 1000 [ 77.382362][ T4481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.56'. [ 77.425612][ T4481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.56'. [ 77.575676][ T4492] binder: 4488:4492 ioctl c0306201 0 returned -14 [ 77.590738][ T4492] rdma_rxe: rxe_register_device failed with error -23 [ 77.598667][ T4492] rdma_rxe: failed to add lo [ 78.080079][ T4498] loop0: detected capacity change from 0 to 128 [ 78.713620][ T4500] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4500] [ 78.963324][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.442556][ T4230] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.524623][ T4230] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.544101][ T4230] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.556389][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.681635][ T4484] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.205701][ T4510] NILFS (nullb0): couldn't find nilfs on the device [ 80.221065][ T4515] fuse: Bad value for 'fd' [ 80.263879][ T4230] usb 3-1: USB disconnect, device number 2 [ 80.270712][ T4484] binder: 4483:4484 ioctl c0306201 200000000180 returned -14 [ 80.563561][ T7] usb 5-1: USB disconnect, device number 2 [ 80.588758][ T4529] loop0: detected capacity change from 0 to 128 [ 81.374377][ T4536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.71'. [ 81.385079][ T4536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.71'. [ 81.543707][ T4543] loop3: detected capacity change from 0 to 512 [ 81.712507][ T4546] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4546] [ 81.845322][ T1111] cfg80211: failed to load regulatory.db [ 81.978071][ T4543] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 82.017595][ T4543] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.108829][ T4557] loop0: detected capacity change from 0 to 128 [ 82.176996][ T4543] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.73: bg 0: block 217: padding at end of block bitmap is not set [ 82.211884][ T4557] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.233571][ T4557] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.245328][ T4543] EXT4-fs (loop3): Remounting filesystem read-only [ 83.001826][ T4565] NILFS (nullb0): couldn't find nilfs on the device [ 83.665895][ T4573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'. [ 83.742681][ T4577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'. [ 83.775427][ T4576] Failed to get privilege flags for destination (handle=0x2:0x0) [ 84.566655][ T4581] binder: 4580:4581 ioctl c0306201 0 returned -14 [ 85.338366][ T4592] loop0: detected capacity change from 0 to 128 [ 86.095340][ T4605] FAULT_INJECTION: forcing a failure. [ 86.095340][ T4605] name failslab, interval 1, probability 0, space 0, times 1 [ 86.108691][ T4605] CPU: 0 PID: 4605 Comm: syz.2.94 Not tainted syzkaller #0 [ 86.116038][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.126472][ T4605] Call Trace: [ 86.130105][ T4605] [ 86.133087][ T4605] dump_stack_lvl+0x188/0x250 [ 86.137805][ T4605] ? show_regs_print_info+0x20/0x20 [ 86.143094][ T4605] ? load_image+0x410/0x410 [ 86.147739][ T4605] ? __might_sleep+0xf0/0xf0 [ 86.152433][ T4605] ? __lock_acquire+0x7d40/0x7d40 [ 86.157482][ T4605] should_fail+0x383/0x4b0 [ 86.162083][ T4605] should_failslab+0x5/0x20 [ 86.166587][ T4605] slab_pre_alloc_hook+0x51/0xc0 [ 86.171797][ T4605] ? dup_fd+0x54/0xc70 [ 86.175898][ T4605] kmem_cache_alloc+0x3d/0x280 [ 86.180770][ T4605] dup_fd+0x54/0xc70 [ 86.184693][ T4605] ? __context_tracking_exit+0x4c/0x80 [ 86.190175][ T4605] __close_range+0x194/0x510 [ 86.194779][ T4605] ? pick_file+0x220/0x220 [ 86.199384][ T4605] __x64_sys_close_range+0x76/0x80 [ 86.204712][ T4605] do_syscall_64+0x4c/0xa0 [ 86.209244][ T4605] ? clear_bhb_loop+0x30/0x80 [ 86.213931][ T4605] ? clear_bhb_loop+0x30/0x80 [ 86.218834][ T4605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.224769][ T4605] RIP: 0033:0x7f8f1c022199 [ 86.229628][ T4605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.249443][ T4605] RSP: 002b:00007f8f1a27a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.257948][ T4605] RAX: ffffffffffffffda RBX: 00007f8f1c2a9fa0 RCX: 00007f8f1c022199 [ 86.266013][ T4605] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000003 [ 86.274000][ T4605] RBP: 00007f8f1c0b90b8 R08: 0000000000000000 R09: 0000000000000000 [ 86.281995][ T4605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.289998][ T4605] R13: 00007f8f1c2aa038 R14: 00007f8f1c2a9fa0 R15: 00007fff90b71858 [ 86.298181][ T4605] [ 87.012669][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.757147][ T4630] tipc: Started in network mode [ 87.770196][ T4630] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.779622][ T4630] tipc: New replicast peer: 172.20.20.187 [ 87.793204][ T1111] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.801586][ T4630] tipc: Enabled bearer , priority 10 [ 87.942302][ T1108] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 87.951058][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.961508][ T1108] usb 5-1: config 0 has no interface number 0 [ 88.065344][ T4647] loop3: detected capacity change from 0 to 128 [ 88.160759][ T1108] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 88.178766][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.198979][ T1108] usb 5-1: Product: syz [ 88.213712][ T1108] usb 5-1: Manufacturer: syz [ 88.229274][ T1108] usb 5-1: SerialNumber: syz [ 88.264965][ T1108] usb 5-1: config 0 descriptor?? [ 88.290432][ T1111] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.301528][ T1111] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.311629][ T1111] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.427929][ T1108] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 88.529784][ T1108] usb 5-1: No valid video chain found. [ 88.795761][ T1108] tipc: Node number set to 2886997162 [ 88.903348][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.927523][ T1108] usb 5-1: USB disconnect, device number 3 [ 89.032129][ T4613] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 89.316955][ T4665] fuse: Bad value for 'fd' [ 89.689242][ T4683] loop0: detected capacity change from 0 to 512 [ 89.728635][ T4683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.746895][ T4683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.762572][ T4683] EXT4-fs (loop0): 1 truncate cleaned up [ 89.768498][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 90.565595][ T4699] binder: 4696:4699 ioctl c0306201 0 returned -14 [ 90.580571][ T4699] rdma_rxe: rxe_register_device failed with error -23 [ 90.589878][ T4699] rdma_rxe: failed to add lo [ 90.644446][ T1111] usb 3-1: USB disconnect, device number 3 [ 90.768959][ T4633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.985656][ T4717] loop4: detected capacity change from 0 to 164 [ 91.998684][ T4714] FAULT_INJECTION: forcing a failure. [ 91.998684][ T4714] name failslab, interval 1, probability 0, space 0, times 0 [ 91.998731][ T4714] CPU: 0 PID: 4714 Comm: syz.3.129 Not tainted syzkaller #0 [ 91.998751][ T4714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.998761][ T4714] Call Trace: [ 91.998767][ T4714] [ 91.998778][ T4714] dump_stack_lvl+0x188/0x250 [ 91.998807][ T4714] ? show_regs_print_info+0x20/0x20 [ 91.998828][ T4714] ? load_image+0x410/0x410 [ 91.998850][ T4714] ? __might_sleep+0xf0/0xf0 [ 91.998871][ T4714] ? __lock_acquire+0x7d40/0x7d40 [ 91.998897][ T4714] should_fail+0x383/0x4b0 [ 91.998924][ T4714] should_failslab+0x5/0x20 [ 91.998941][ T4714] slab_pre_alloc_hook+0x51/0xc0 [ 91.998960][ T4714] ? __kernfs_new_node+0xe3/0x6b0 [ 91.998982][ T4714] kmem_cache_alloc+0x3d/0x280 [ 91.999004][ T4714] __kernfs_new_node+0xe3/0x6b0 [ 91.999027][ T4714] ? __lock_acquire+0x7d40/0x7d40 [ 91.999049][ T4714] ? kernfs_new_node+0x250/0x250 [ 91.999082][ T4714] ? kernfs_activate+0x1eb/0x210 [ 91.999106][ T4714] kernfs_new_node+0x148/0x250 [ 91.999131][ T4714] __kernfs_create_file+0x47/0x2e0 [ 91.999155][ T4714] sysfs_add_file_mode_ns+0x2d2/0x390 [ 91.999182][ T4714] sysfs_merge_group+0x182/0x320 [ 91.999204][ T4714] ? sysfs_remove_groups+0xa0/0xa0 [ 91.999225][ T4714] ? kernfs_put+0x442/0x480 [ 91.999245][ T4714] ? sysfs_create_groups+0x9c/0x120 [ 91.999266][ T4714] dpm_sysfs_add+0xce/0x270 [ 91.999287][ T4714] device_add+0x745/0x1050 [ 91.999311][ T4714] device_create+0x266/0x300 [ 91.999333][ T4714] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.999353][ T4714] ? _raw_spin_unlock+0x40/0x40 [ 91.999372][ T4714] ? root_device_unregister+0xf0/0xf0 [ 91.999389][ T4714] ? update_attr+0x550/0x730 [ 91.999411][ T4714] ? memcpy+0x3c/0x60 [ 91.999429][ T4714] ? is_console_locked+0x5/0x10 [ 91.999445][ T4714] ? csi_J+0x8d6/0xdb0 [ 91.999466][ T4714] vcs_make_sysfs+0x2e/0x80 [ 91.999484][ T4714] vc_allocate+0x5e4/0x700 [ 91.999515][ T4714] ? vc_cons_allocated+0x70/0x70 [ 91.999547][ T4714] con_install+0x9c/0x720 [ 91.999572][ T4714] ? show_tty_active+0x30/0x30 [ 91.999602][ T4714] tty_init_dev+0xbb/0x470 [ 91.999627][ T4714] tty_open+0x7e8/0xcd0 [ 91.999652][ T4714] ? __lock_acquire+0x7d40/0x7d40 [ 91.999676][ T4714] ? tty_compat_ioctl+0x570/0x570 [ 91.999700][ T4714] ? do_raw_spin_unlock+0x11d/0x230 [ 91.999723][ T4714] chrdev_open+0x585/0x5f0 [ 91.999746][ T4714] ? cd_forget+0x160/0x160 [ 91.999768][ T4714] ? fsnotify_perm+0x3a7/0x560 [ 91.999789][ T4714] ? cd_forget+0x160/0x160 [ 91.999807][ T4714] do_dentry_open+0x7f7/0xf90 [ 91.999828][ T4714] ? vfs_open+0x2b/0x80 [ 91.999857][ T4714] path_openat+0x2718/0x2fb0 [ 91.999901][ T4714] ? __kasan_slab_alloc+0xa9/0xc0 [ 91.999929][ T4714] ? do_filp_open+0x400/0x400 [ 91.999968][ T4714] do_filp_open+0x1df/0x400 [ 91.999993][ T4714] ? vfs_tmpfile+0x300/0x300 [ 92.000033][ T4714] ? _raw_spin_unlock+0x24/0x40 [ 92.000051][ T4714] ? alloc_fd+0x59e/0x650 [ 92.000076][ T4714] do_sys_openat2+0x14b/0x500 [ 92.000094][ T4714] ? __lock_acquire+0x7d40/0x7d40 [ 92.000115][ T4714] ? do_sys_open+0xe0/0xe0 [ 92.000132][ T4714] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.000157][ T4714] ? lock_chain_count+0x20/0x20 [ 92.000183][ T4714] __x64_sys_openat+0x135/0x160 [ 92.000206][ T4714] do_syscall_64+0x4c/0xa0 [ 92.000223][ T4714] ? clear_bhb_loop+0x30/0x80 [ 92.000241][ T4714] ? clear_bhb_loop+0x30/0x80 [ 92.000259][ T4714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.000276][ T4714] RIP: 0033:0x7fb95408b9ce [ 92.000291][ T4714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.000304][ T4714] RSP: 002b:00007fb952322b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.000325][ T4714] RAX: ffffffffffffffda RBX: 00007fb9523236c0 RCX: 00007fb95408b9ce [ 92.000336][ T4714] RDX: 0000000000000002 RSI: 00007fb952322c00 RDI: ffffffffffffff9c [ 92.000348][ T4714] RBP: 00007fb9541620b8 R08: 0000000000000000 R09: 0000000000000000 [ 92.000358][ T4714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.000367][ T4714] R13: 00007fb954353038 R14: 00007fb954352fa0 R15: 00007ffeb23057c8 [ 92.000397][ T4714] [ 92.071012][ T4717] ======================================================= [ 92.071012][ T4717] WARNING: The mand mount option has been deprecated and [ 92.071012][ T4717] and is ignored by this kernel. Remove the mand [ 92.071012][ T4717] option from the mount to silence this warning. [ 92.071012][ T4717] ======================================================= [ 92.910433][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.228037][ T4733] Zero length message leads to an empty skb [ 93.247757][ T26] audit: type=1800 audit(1791232967.531:2): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="power" dev="configfs" ino=34898 res=0 errno=0 [ 93.257875][ T4735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.290536][ T1111] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.290571][ T1111] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.290604][ T1111] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.290626][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.432280][ T4727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.775781][ T4743] binder: 4740:4743 ioctl c0306201 0 returned -14 [ 93.782205][ T4743] rdma_rxe: rxe_register_device failed with error -23 [ 93.783082][ T4743] rdma_rxe: failed to add lo [ 94.013046][ T4744] fuse: Bad value for 'fd' [ 95.989338][ T4311] usb 2-1: USB disconnect, device number 2 [ 96.590896][ T4311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.987535][ T4311] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.987561][ T4311] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.987581][ T4311] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.987594][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.032489][ T4768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.307946][ T4780] rdma_rxe: rxe_register_device failed with error -23 [ 97.308805][ T4780] rdma_rxe: failed to add lo [ 97.957608][ T26] audit: type=1800 audit(1791232972.241:3): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.151" name="power" dev="configfs" ino=34547 res=0 errno=0 [ 98.064381][ T4781] fuse: Bad value for 'fd' [ 98.120781][ T4781] binder: 4767:4781 ioctl c0306201 200000000180 returned -14 [ 98.547126][ T4796] loop3: detected capacity change from 0 to 128 [ 98.592381][ T4791] netlink: 'syz.4.156': attribute type 4 has an invalid length. [ 99.315811][ T4707] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.025234][ T4311] usb 2-1: USB disconnect, device number 3 [ 100.050901][ T4707] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.103516][ T4707] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.163103][ T4818] FAULT_INJECTION: forcing a failure. [ 100.163103][ T4818] name failslab, interval 1, probability 0, space 0, times 0 [ 100.189601][ T4707] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.227889][ T4818] CPU: 1 PID: 4818 Comm: syz.1.164 Not tainted syzkaller #0 [ 100.235225][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.245381][ T4818] Call Trace: [ 100.248670][ T4818] [ 100.251607][ T4818] dump_stack_lvl+0x188/0x250 [ 100.256302][ T4818] ? show_regs_print_info+0x20/0x20 [ 100.261511][ T4818] ? load_image+0x410/0x410 [ 100.266034][ T4818] should_fail+0x383/0x4b0 [ 100.270466][ T4818] should_failslab+0x5/0x20 [ 100.274977][ T4818] slab_pre_alloc_hook+0x51/0xc0 [ 100.279928][ T4818] kmem_cache_alloc_trace+0x47/0x290 [ 100.285225][ T4818] ? sctp_add_bind_addr+0x89/0x350 [ 100.290461][ T4818] sctp_add_bind_addr+0x89/0x350 [ 100.295435][ T4818] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 100.301204][ T4818] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 100.307412][ T4818] ? sctp_v6_is_any+0x60/0x70 [ 100.312115][ T4818] ? sctp_copy_one_addr+0x93/0x660 [ 100.317251][ T4818] sctp_bind_addr_copy+0xaf/0x3c0 [ 100.322293][ T4818] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 100.328740][ T4818] sctp_connect_new_asoc+0x2f5/0x6a0 [ 100.334047][ T4818] ? __sctp_connect+0xd80/0xd80 [ 100.339038][ T4818] ? __local_bh_enable_ip+0x136/0x1c0 [ 100.344444][ T4818] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 100.350005][ T4818] ? security_sctp_bind_connect+0x85/0xb0 [ 100.355749][ T4818] sctp_sendmsg+0x15e1/0x2940 [ 100.360460][ T4818] ? sctp_getsockopt+0x8a0/0x8a0 [ 100.365554][ T4818] ? aa_af_perm+0x340/0x340 [ 100.370166][ T4818] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 100.376709][ T4818] ? aa_sock_msg_perm+0x94/0x150 [ 100.381670][ T4818] ? sock_rps_record_flow+0x17/0x3b0 [ 100.386981][ T4818] ? inet_sendmsg+0xca/0x2a0 [ 100.391688][ T4818] ? inet_send_prepare+0x250/0x250 [ 100.396916][ T4818] ____sys_sendmsg+0x5be/0x8f0 [ 100.400544][ T4826] loop0: detected capacity change from 0 to 128 [ 100.401712][ T4818] ? __sys_sendmsg_sock+0x30/0x30 [ 100.413175][ T4818] ? import_iovec+0x6f/0xa0 [ 100.417713][ T4818] ___sys_sendmsg+0x236/0x2e0 [ 100.422425][ T4818] ? __sys_sendmsg+0x290/0x290 [ 100.427258][ T4818] __se_sys_sendmsg+0x1b7/0x2a0 [ 100.432134][ T4818] ? __x64_sys_sendmsg+0x80/0x80 [ 100.437176][ T4818] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.443169][ T4818] ? lockdep_hardirqs_on+0x94/0x140 [ 100.448372][ T4818] do_syscall_64+0x4c/0xa0 [ 100.452781][ T4818] ? clear_bhb_loop+0x30/0x80 [ 100.457467][ T4818] ? clear_bhb_loop+0x30/0x80 [ 100.462143][ T4818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.468031][ T4818] RIP: 0033:0x7fdfbf8ac199 [ 100.472445][ T4818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.492128][ T4818] RSP: 002b:00007fdfbdb04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.500769][ T4818] RAX: ffffffffffffffda RBX: 00007fdfbfb33fa0 RCX: 00007fdfbf8ac199 [ 100.508761][ T4818] RDX: 0000000000004000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 100.516916][ T4818] RBP: 00007fdfbf9430b8 R08: 0000000000000000 R09: 0000000000000000 [ 100.524900][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.533003][ T4818] R13: 00007fdfbfb34038 R14: 00007fdfbfb33fa0 R15: 00007ffe3d502bf8 [ 100.541094][ T4818] [ 100.550148][ T4707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.600720][ T4803] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.673303][ T4839] netlink: 104 bytes leftover after parsing attributes in process `syz.1.168'. [ 100.788598][ T4847] loop1: detected capacity change from 0 to 128 [ 100.945029][ T4851] fuse: Bad value for 'fd' [ 101.951616][ T4311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.420432][ T4311] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.441056][ T4311] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.467826][ T4311] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.478724][ T4869] loop4: detected capacity change from 0 to 1024 [ 102.495667][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.542029][ T4867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.562705][ T4869] hfsplus: creator requires a 4 character value [ 102.577888][ T4880] bridge0: port 3(syz_tun) entered blocking state [ 102.590205][ T4869] hfsplus: unable to parse mount options [ 102.608587][ T4880] bridge0: port 3(syz_tun) entered disabled state [ 102.617587][ T4880] device syz_tun entered promiscuous mode [ 102.683222][ T4832] usb 3-1: USB disconnect, device number 4 [ 102.794186][ T4867] fuse: Bad value for 'fd' [ 102.817836][ T4867] binder: 4866:4867 ioctl c0306201 200000000180 returned -14 [ 103.803362][ T4832] usb 1-1: USB disconnect, device number 2 [ 104.015773][ T4901] loop1: detected capacity change from 0 to 128 [ 104.059995][ T4898] loop3: detected capacity change from 0 to 4096 [ 104.606664][ T4898] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 104.793036][ T4898] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 105.383401][ T4922] binder: 4919:4922 ioctl c0306201 0 returned -14 [ 105.397412][ T4922] rdma_rxe: rxe_register_device failed with error -23 [ 105.405599][ T4922] rdma_rxe: failed to add lo [ 105.754826][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.762278][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.530161][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.569783][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.822424][ T4911] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.832728][ T4911] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.843389][ T4911] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.852746][ T4911] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.920471][ T4913] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 106.959071][ T4911] syz.2.191 (4911) used greatest stack depth: 20384 bytes left [ 107.252541][ T4831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.631560][ T4831] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.655461][ T4831] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.674469][ T4831] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.686996][ T4831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.730840][ T4936] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.013761][ T4958] fuse: Bad value for 'fd' [ 108.049721][ T4962] Cannot find add_set index 0 as target [ 108.203332][ T4955] loop4: detected capacity change from 0 to 1024 [ 108.223356][ T4955] hfsplus: creator requires a 4 character value [ 108.229639][ T4955] hfsplus: unable to parse mount options [ 109.095424][ T4974] loop1: detected capacity change from 0 to 128 [ 109.154454][ T4976] loop4: detected capacity change from 0 to 128 [ 109.340078][ T4979] FAULT_INJECTION: forcing a failure. [ 109.340078][ T4979] name failslab, interval 1, probability 0, space 0, times 0 [ 109.355846][ T4979] CPU: 1 PID: 4979 Comm: syz.3.210 Not tainted syzkaller #0 [ 109.363350][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.373509][ T4979] Call Trace: [ 109.376844][ T4979] [ 109.379836][ T4979] dump_stack_lvl+0x188/0x250 [ 109.384533][ T4979] ? show_regs_print_info+0x20/0x20 [ 109.389750][ T4979] ? load_image+0x410/0x410 [ 109.394429][ T4979] ? __might_sleep+0xf0/0xf0 [ 109.399040][ T4979] ? __lock_acquire+0x7d40/0x7d40 [ 109.404138][ T4979] should_fail+0x383/0x4b0 [ 109.408677][ T4979] should_failslab+0x5/0x20 [ 109.413209][ T4979] slab_pre_alloc_hook+0x51/0xc0 [ 109.418267][ T4979] kmem_cache_alloc_trace+0x47/0x290 [ 109.423649][ T4979] ? __se_sys_timerfd_create+0xe1/0x250 [ 109.429221][ T4979] __se_sys_timerfd_create+0xe1/0x250 [ 109.434680][ T4979] do_syscall_64+0x4c/0xa0 [ 109.439110][ T4979] ? clear_bhb_loop+0x30/0x80 [ 109.443799][ T4979] ? clear_bhb_loop+0x30/0x80 [ 109.448486][ T4979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.454561][ T4979] RIP: 0033:0x7fb9540cb199 [ 109.458998][ T4979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.478900][ T4979] RSP: 002b:00007fb952323028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 109.487321][ T4979] RAX: ffffffffffffffda RBX: 00007fb954352fa0 RCX: 00007fb9540cb199 [ 109.495289][ T4979] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 109.503265][ T4979] RBP: 00007fb9541620b8 R08: 0000000000000000 R09: 0000000000000000 [ 109.511236][ T4979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.519203][ T4979] R13: 00007fb954353038 R14: 00007fb954352fa0 R15: 00007ffeb23057c8 [ 109.527179][ T4979] [ 109.531257][ T4978] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4978] [ 109.657858][ T4984] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4984] [ 109.683220][ T2284] usb 3-1: USB disconnect, device number 5 [ 110.713807][ T5001] loop4: detected capacity change from 0 to 512 [ 111.342284][ T5009] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 111.406750][ T5001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.428150][ T5009] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 111.455474][ T5001] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.531167][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 111.670040][ T5016] loop0: detected capacity change from 0 to 1024 [ 111.694712][ T5016] hfsplus: creator requires a 4 character value [ 111.731390][ T5016] hfsplus: unable to parse mount options [ 111.760524][ T5025] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 111.926770][ T5035] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 112.750137][ T5040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.225'. [ 112.777201][ T5049] loop4: detected capacity change from 0 to 128 [ 114.107091][ T5069] netlink: 106 bytes leftover after parsing attributes in process `syz.3.234'. [ 114.122550][ T5065] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5065] [ 115.962726][ T5090] loop0: detected capacity change from 0 to 128 [ 116.272319][ T5100] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5100] [ 116.984811][ T5095] loop2: detected capacity change from 0 to 1024 [ 117.082424][ T5095] hfsplus: creator requires a 4 character value [ 117.088845][ T5095] hfsplus: unable to parse mount options [ 117.231288][ T4831] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.257119][ T5119] loop0: detected capacity change from 0 to 128 [ 117.281569][ T4831] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.575585][ T5125] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5125] [ 117.605233][ T5128] FAULT_INJECTION: forcing a failure. [ 117.605233][ T5128] name failslab, interval 1, probability 0, space 0, times 0 [ 117.610581][ T5121] fido_id[5121]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.640698][ T5128] CPU: 1 PID: 5128 Comm: syz.4.249 Not tainted syzkaller #0 [ 117.648028][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.658467][ T5128] Call Trace: [ 117.661775][ T5128] [ 117.664726][ T5128] dump_stack_lvl+0x188/0x250 [ 117.669443][ T5128] ? show_regs_print_info+0x20/0x20 [ 117.674754][ T5128] ? load_image+0x410/0x410 [ 117.679431][ T5128] ? __lock_acquire+0x7d40/0x7d40 [ 117.684666][ T5128] should_fail+0x383/0x4b0 [ 117.689196][ T5128] should_failslab+0x5/0x20 [ 117.693825][ T5128] slab_pre_alloc_hook+0x51/0xc0 [ 117.698882][ T5128] kmem_cache_alloc_trace+0x47/0x290 [ 117.704377][ T5128] ? rand_initialize_disk+0x4b/0xb0 [ 117.709608][ T5128] rand_initialize_disk+0x4b/0xb0 [ 117.714657][ T5128] __alloc_disk_node+0x32c/0x4f0 [ 117.719625][ T5128] __blk_alloc_disk+0x2a/0x60 [ 117.724338][ T5128] dm_create+0x57f/0xf90 [ 117.728619][ T5128] dev_create+0x12e/0x2c0 [ 117.732985][ T5128] ? list_devices+0x820/0x820 [ 117.737695][ T5128] ? __might_fault+0xb3/0x110 [ 117.742397][ T5128] ? _copy_from_user+0x111/0x170 [ 117.747366][ T5128] dm_ctl_ioctl+0x947/0xd00 [ 117.751926][ T5128] ? list_devices+0x820/0x820 [ 117.756630][ T5128] ? dm_poll+0x120/0x120 [ 117.760998][ T5128] ? bpf_lsm_file_ioctl+0x5/0x10 [ 117.766043][ T5128] ? security_file_ioctl+0x7c/0xa0 [ 117.771161][ T5128] ? dm_poll+0x120/0x120 [ 117.775396][ T5128] __se_sys_ioctl+0xfa/0x170 [ 117.779979][ T5128] do_syscall_64+0x4c/0xa0 [ 117.784389][ T5128] ? clear_bhb_loop+0x30/0x80 [ 117.789062][ T5128] ? clear_bhb_loop+0x30/0x80 [ 117.793834][ T5128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.799721][ T5128] RIP: 0033:0x7f1a95696199 [ 117.804130][ T5128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.823754][ T5128] RSP: 002b:00007f1a938ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.832164][ T5128] RAX: ffffffffffffffda RBX: 00007f1a9591dfa0 RCX: 00007f1a95696199 [ 117.840136][ T5128] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 117.848196][ T5128] RBP: 00007f1a9572d0b8 R08: 0000000000000000 R09: 0000000000000000 [ 117.856185][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.864247][ T5128] R13: 00007f1a9591e038 R14: 00007f1a9591dfa0 R15: 00007ffc3d66f318 [ 117.872228][ T5128] [ 118.056977][ T5138] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 118.702302][ T5144] loop4: detected capacity change from 0 to 128 [ 119.001661][ T5154] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5154] [ 119.026184][ T5161] rdma_rxe: ignoring netdev event = 23 for lo [ 119.052709][ T5161] rdma_rxe: lo changed mtu to 68 [ 119.113162][ T5167] loop2: detected capacity change from 0 to 128 [ 119.311627][ T5170] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5170] [ 120.877838][ T5187] NILFS (nullb0): couldn't find nilfs on the device [ 121.251533][ T5192] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 121.259319][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 121.300309][ T5192] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.309559][ T5192] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.318483][ T5192] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.327273][ T5192] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.342113][ T5192] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 121.360035][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 121.501876][ T5198] Failed to get privilege flags for destination (handle=0x2:0x0) [ 122.316865][ T5209] loop4: detected capacity change from 0 to 128 [ 122.332097][ T5202] lo speed is unknown, defaulting to 1000 [ 122.393984][ T5211] loop1: detected capacity change from 0 to 1024 [ 122.654197][ T5217] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5217] [ 122.931874][ T5221] loop2: detected capacity change from 0 to 1024 [ 123.380467][ T4832] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.382980][ T5213] loop3: detected capacity change from 0 to 32768 [ 123.404315][ T5229] loop4: detected capacity change from 0 to 4096 [ 123.467631][ T5229] EXT4-fs (loop4): Ignoring removed nobh option [ 123.480506][ T2284] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.490806][ T5230] loop2: detected capacity change from 0 to 1024 [ 123.556581][ T5230] hfsplus: creator requires a 4 character value [ 123.611827][ T5230] hfsplus: unable to parse mount options [ 123.660451][ T4832] usb 2-1: Using ep0 maxpacket: 8 [ 123.758876][ T5229] EXT4-fs (loop4): Test dummy encryption mode enabled [ 123.774406][ T5229] EXT4-fs (loop4): Ignoring removed bh option [ 123.782445][ T4832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.803923][ T4832] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.822352][ T5229] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 123.850778][ T4832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.860686][ T2284] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 123.868824][ T2284] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.907614][ T4832] usb 2-1: config 0 descriptor?? [ 124.009497][ T2284] usb 1-1: config 0 has no interface number 0 [ 124.030487][ T5239] loop3: detected capacity change from 0 to 1024 [ 124.058858][ T2284] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 124.109024][ T5229] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 124.128372][ T5239] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 124.150382][ T2284] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 124.175001][ T2284] usb 1-1: config 0 interface 48 has no altsetting 0 [ 124.201263][ T5239] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 124.215624][ T5239] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 124.233968][ T4832] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.340764][ T2284] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 124.360625][ T2284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.375703][ T2284] usb 1-1: Product: syz [ 124.379918][ T2284] usb 1-1: Manufacturer: syz [ 124.387558][ T2284] usb 1-1: SerialNumber: syz [ 124.427058][ T2284] usb 1-1: config 0 descriptor?? [ 124.575829][ T5247] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.584933][ T5247] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.593981][ T5247] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.603110][ T5247] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.810141][ T5249] loop3: detected capacity change from 0 to 1024 [ 124.913346][ T2284] usb 1-1: USB disconnect, device number 3 [ 125.302584][ T5254] loop4: detected capacity change from 0 to 128 [ 125.389886][ T5254] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.457222][ T5256] loop0: detected capacity change from 0 to 128 [ 125.476140][ T5254] hpfs: filesystem error: improperly stopped [ 125.507432][ T5254] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.645608][ T5254] hpfs: You really don't want any checks? You are crazy... [ 125.658586][ T5257] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5257] [ 125.706276][ T5254] hpfs: Code page index out of array [ 125.731088][ T5254] hpfs: code page support is disabled [ 125.749162][ T5254] hpfs: hpfs_map_4sectors(): unaligned read [ 125.757852][ T5254] hpfs: hpfs_map_4sectors(): unaligned read [ 125.789906][ T5254] hpfs: filesystem error: unable to find root dir [ 125.798567][ T5252] (syz.3.289,5252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.833776][ T5252] (syz.3.289,5252,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.885062][ T5254] hpfs: hpfs_map_4sectors(): unaligned read [ 125.917029][ T5252] JBD2: Ignoring recovery information on journal [ 126.094876][ T5252] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.143793][ T5252] (syz.3.289,5252,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 126.229905][ T5264] ima: policy update failed [ 126.237234][ T26] audit: type=1802 audit(1791233000.521:4): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.293" res=0 errno=0 [ 126.256032][ T4832] usb 2-1: USB disconnect, device number 4 [ 126.385650][ T5252] (syz.3.289,5252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 126.511359][ T5252] (syz.3.289,5252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 126.553442][ T5252] (syz.3.289,5252,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 126.587386][ T5252] (syz.3.289,5252,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 126.632870][ T5252] (syz.3.289,5252,1):ocfs2_quota_read:201 ERROR: status = -5 [ 126.648875][ T5252] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 126.659201][ T5252] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 126.669447][ T5252] (syz.3.289,5252,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 126.686077][ T5252] (syz.3.289,5252,1):ocfs2_mknod:315 ERROR: status = -5 [ 126.742209][ T5277] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5277] [ 127.009121][ T5252] (syz.3.289,5252,1):ocfs2_mknod:504 ERROR: status = -5 [ 127.016681][ T5252] (syz.3.289,5252,1):ocfs2_mkdir:661 ERROR: status = -5 [ 127.142509][ T5271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 127.248147][ T5271] ntfs3: loop2: Failed to load $Extend. [ 127.313510][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 127.742154][ T5285] binder: 5284:5285 ioctl c0306201 0 returned -14 [ 127.806181][ T5276] set_capacity_and_notify: 5 callbacks suppressed [ 127.806195][ T5276] loop1: detected capacity change from 0 to 40427 [ 127.832735][ T5279] loop0: detected capacity change from 0 to 32768 [ 127.868116][ T5279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.299 (5279) [ 127.898711][ T5276] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 127.942214][ T5276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 127.966811][ T5276] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 127.998330][ T5279] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.029010][ T5276] F2FS-fs (loop1): invalid crc value [ 128.046358][ T5279] BTRFS info (device loop0): setting nodatasum [ 128.078867][ T5279] BTRFS info (device loop0): force zlib compression, level 3 [ 128.102668][ T5276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.118115][ T5279] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.158587][ T5279] BTRFS info (device loop0): use lzo compression, level 0 [ 128.196864][ T5279] BTRFS info (device loop0): turning on flush-on-commit [ 128.204154][ T5281] loop4: detected capacity change from 0 to 32768 [ 128.249610][ T5279] BTRFS info (device loop0): enabling auto defrag [ 128.260449][ T5279] BTRFS info (device loop0): max_inline at 4096 [ 128.269229][ T5279] BTRFS info (device loop0): using free space tree [ 128.277242][ T5281] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.301 (5281) [ 128.309004][ T5279] BTRFS info (device loop0): has skinny extents [ 128.316186][ T5276] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 128.330774][ T5276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.502852][ T4517] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4517) [ 128.504835][ T5283] loop2: detected capacity change from 0 to 32768 [ 128.596649][ T4186] attempt to access beyond end of device [ 128.596649][ T4186] loop1: rw=2049, want=45104, limit=40427 [ 128.657701][ T5283] JBD2: Ignoring recovery information on journal [ 128.670003][ T5279] BTRFS info (device loop0): enabling ssd optimizations [ 128.823205][ T5283] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.966412][ T26] audit: type=1800 audit(1791233003.251:5): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.299" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 129.759039][ T5326] loop1: detected capacity change from 0 to 2048 [ 130.023644][ T5327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.052828][ T5322] loop4: detected capacity change from 0 to 32768 [ 130.082788][ T5330] loop3: detected capacity change from 0 to 128 [ 130.113346][ T5322] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.306 (5322) [ 130.130109][ T26] audit: type=1800 audit(1791233004.421:6): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.304" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 130.138009][ T5332] loop0: detected capacity change from 0 to 128 [ 130.172473][ T5326] attempt to access beyond end of device [ 130.172473][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.186210][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.186712][ T5322] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 130.214360][ T5326] attempt to access beyond end of device [ 130.214360][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.235817][ T5330] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 130.237148][ T5322] BTRFS info (device loop4): using free space tree [ 130.300594][ T5330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.330471][ T5322] BTRFS info (device loop4): has skinny extents [ 130.376806][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.457100][ T5326] attempt to access beyond end of device [ 130.457100][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.471420][ T5336] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5336] [ 130.506003][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.515282][ T5326] attempt to access beyond end of device [ 130.515282][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.619831][ T26] audit: type=1804 audit(1791233004.901:7): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.304" name="/newroot/52/file2/file1" dev="loop1" ino=15 res=1 errno=0 [ 130.664017][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.666220][ T5283] syz.2.302 (5283) used greatest stack depth: 18240 bytes left [ 130.680632][ T5326] attempt to access beyond end of device [ 130.680632][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.762080][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.771185][ T5326] attempt to access beyond end of device [ 130.771185][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.783609][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.792486][ T5326] attempt to access beyond end of device [ 130.792486][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.803677][ T5348] loop3: detected capacity change from 0 to 4096 [ 130.804899][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.823614][ T5326] attempt to access beyond end of device [ 130.823614][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.831219][ T5322] BTRFS info (device loop4): enabling ssd optimizations [ 130.835928][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.851380][ T5326] attempt to access beyond end of device [ 130.851380][ T5326] loop1: rw=0, want=281474976710724, limit=2048 [ 130.863690][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.872480][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.881202][ T4192] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 130.881379][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.906169][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.915503][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.924804][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 130.935574][ T4192] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 130.976362][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 131.006313][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 131.026023][ T4192] OCFS2: File system is now read-only. [ 131.031857][ T4192] (syz-executor,4192,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 131.042407][ T5348] ntfs3: Unknown parameter 'nocase' [ 131.060727][ T4192] (syz-executor,4192,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 131.121408][ T4192] (syz-executor,4192,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 131.129968][ T4192] (syz-executor,4192,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 131.137046][ T5326] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 131.138714][ T26] audit: type=1800 audit(1791233005.421:8): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 131.217987][ T4192] (syz-executor,4192,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 131.242400][ T5326] NILFS (loop1): error -5 truncating bmap (ino=16) [ 131.347707][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 131.825859][ T5372] NILFS (nullb0): couldn't find nilfs on the device [ 132.074435][ T5374] binder: 5373:5374 ioctl c0306201 0 returned -14 [ 132.147705][ T5379] loop0: detected capacity change from 0 to 16 [ 132.172972][ T5376] nvmet: transport type 0 not supported [ 132.184194][ T5379] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.212348][ T5379] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 132.268674][ T5362] XFS (loop3): Mounting V5 Filesystem [ 132.295428][ T5384] EXT4-fs (loop2): Ignoring removed oldalloc option [ 132.338983][ T5390] jffs2: notice: (5390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.376392][ T5384] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 132.430313][ T5362] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 132.502176][ T5362] XFS (loop3): Starting recovery (logdev: internal) [ 132.529737][ T5362] XFS (loop3): Ending recovery (logdev: internal) [ 132.645822][ T5401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.833472][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839906][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912699][ T4187] XFS (loop3): Unmounting Filesystem [ 132.991918][ T5407] set_capacity_and_notify: 3 callbacks suppressed [ 132.991932][ T5407] loop1: detected capacity change from 0 to 2048 [ 133.046930][ T5409] loop0: detected capacity change from 0 to 8 [ 133.075837][ T5405] loop2: detected capacity change from 0 to 32768 [ 133.157530][ T5405] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.322 (5405) [ 133.194467][ T5410] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.227308][ T5405] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 133.262790][ T26] audit: type=1800 audit(1791233007.551:9): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.326" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 133.328966][ T5405] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 133.340528][ T5405] BTRFS info (device loop2): use zstd compression, level 3 [ 133.347778][ T5405] BTRFS info (device loop2): using free space tree [ 133.383187][ T5403] loop4: detected capacity change from 0 to 32768 [ 133.397762][ T5405] BTRFS info (device loop2): has skinny extents [ 133.474934][ T5403] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 133.547882][ T5403] JBD2: Ignoring recovery information on journal [ 133.683053][ T5403] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.919588][ T26] audit: type=1800 audit(1791233008.201:10): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.325" name="subclass" dev="configfs" ino=36668 res=0 errno=0 [ 133.930522][ T5405] BTRFS info (device loop2): enabling ssd optimizations [ 134.000016][ T4201] ocfs2: Unmounting device (7,4) on (node local) [ 134.020866][ T26] audit: type=1800 audit(1791233008.241:11): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.325" name="protocol" dev="configfs" ino=35785 res=0 errno=0 [ 134.320555][ T26] audit: type=1800 audit(1791233008.611:12): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.322" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 134.326911][ T5438] loop3: detected capacity change from 0 to 4096 [ 134.355182][ T5416] loop0: detected capacity change from 0 to 65536 [ 134.492235][ T5438] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 134.518444][ T5416] XFS (loop0): Mounting V5 Filesystem [ 134.717706][ T5416] XFS (loop0): Ending clean mount [ 134.785891][ T5456] NILFS (nullb0): couldn't find nilfs on the device [ 135.066782][ T4194] XFS (loop0): Unmounting Filesystem [ 135.080695][ T5440] loop1: detected capacity change from 0 to 32768 [ 135.155754][ T5440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.330 (5440) [ 135.351919][ T4187] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 135.379828][ T4187] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 135.406527][ T4187] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 135.416580][ T5440] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 135.417998][ T5466] loop4: detected capacity change from 0 to 64 [ 135.430531][ T5440] BTRFS info (device loop1): setting nodatasum [ 135.437909][ T5440] BTRFS info (device loop1): force zlib compression, level 3 [ 135.469884][ T5440] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 135.500642][ T5440] BTRFS info (device loop1): use lzo compression, level 0 [ 135.532027][ T5440] BTRFS info (device loop1): turning on flush-on-commit [ 135.539191][ T5440] BTRFS info (device loop1): enabling auto defrag [ 135.586206][ T5440] BTRFS info (device loop1): max_inline at 4096 [ 135.628386][ T5440] BTRFS info (device loop1): using free space tree [ 135.683425][ T5440] BTRFS info (device loop1): has skinny extents [ 135.963036][ T5486] loop0: detected capacity change from 0 to 256 [ 136.000993][ T5486] exfat: Deprecated parameter 'utf8' [ 136.006761][ T5486] exfat: Unknown parameter 'zero_size_dir' [ 136.025438][ T5440] BTRFS info (device loop1): enabling ssd optimizations [ 136.117179][ T5468] loop2: detected capacity change from 0 to 32768 [ 136.190874][ T5492] binder: 5491:5492 ioctl c0306201 0 returned -14 [ 136.239444][ T5468] JBD2: Ignoring recovery information on journal [ 136.296736][ T5470] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.334 (5470) [ 136.354746][ T5468] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 136.577157][ T4468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4468) [ 136.785430][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 137.056036][ T5498] add_index: next_index = 0. Resetting! [ 137.305646][ T5499] F2FS-fs (loop3): invalid crc value [ 137.379945][ T5499] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.438182][ T5508] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 137.616455][ T5499] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 137.670437][ T5499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 137.844134][ T4187] handle_bad_sector: 8 callbacks suppressed [ 137.844151][ T4187] attempt to access beyond end of device [ 137.844151][ T4187] loop3: rw=2049, want=45112, limit=40427 [ 138.042022][ T5506] JBD2: Ignoring recovery information on journal [ 138.085690][ T5506] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 138.092712][ T5505] set_capacity_and_notify: 7 callbacks suppressed [ 138.092725][ T5505] loop0: detected capacity change from 0 to 40427 [ 138.100867][ T5506] JBD2: bad block at offset 32 [ 138.191241][ T5525] loop4: detected capacity change from 0 to 16 [ 138.208586][ T5505] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 138.252658][ T5505] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.266540][ T5525] erofs: (device loop4): mounted with root inode @ nid 36. [ 138.296505][ T5505] F2FS-fs (loop0): invalid crc value [ 138.302639][ T5506] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.321173][ T5525] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 46 [ 138.361736][ T5505] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.490621][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 138.528664][ T5534] loop4: detected capacity change from 0 to 256 [ 138.631750][ T5505] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 138.638929][ T5505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.702345][ T26] audit: type=1800 audit(1791233012.991:13): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.349" name="file1" dev="loop4" ino=1048665 res=0 errno=0 [ 138.900529][ T4831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.939427][ T5545] loop4: detected capacity change from 0 to 512 [ 138.979337][ T4194] attempt to access beyond end of device [ 138.979337][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 139.001665][ T5545] EXT4-fs (loop4): Ignoring removed oldalloc option [ 139.074699][ T5545] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 139.216143][ T5536] loop2: detected capacity change from 0 to 40427 [ 139.275680][ T5541] loop3: detected capacity change from 0 to 32768 [ 139.276615][ T5536] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.306259][ T5536] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.315746][ T4831] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.331109][ T4831] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.332730][ T5536] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.343845][ T4831] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.358811][ T4831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.390728][ T5540] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.565553][ T5536] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.585096][ T5541] XFS (loop3): Mounting V5 Filesystem [ 139.603948][ T5536] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.655576][ T5562] loop0: detected capacity change from 0 to 512 [ 139.711539][ T5565] fuse: Bad value for 'fd' [ 139.781846][ T5541] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 139.801913][ T26] audit: type=1800 audit(1791233014.091:14): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.350" name="file1" dev="loop2" ino=11 res=0 errno=0 [ 139.823178][ T5562] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.823462][ T5541] XFS (loop3): Starting recovery (logdev: internal) [ 139.860426][ T5562] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.867854][ T5562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.889877][ T5562] EXT4-fs (loop0): 1 truncate cleaned up [ 139.913035][ T5541] XFS (loop3): Ending recovery (logdev: internal) [ 139.946428][ T5562] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,nogrpid,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 140.223335][ T5555] loop4: detected capacity change from 0 to 32768 [ 140.238664][ T4187] XFS (loop3): Unmounting Filesystem [ 140.334408][ T5555] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 140.344400][ T5555] BTRFS info (device loop4): setting nodatasum [ 140.350941][ T5555] BTRFS info (device loop4): force zlib compression, level 3 [ 140.370240][ T5555] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.406155][ T5555] BTRFS info (device loop4): use lzo compression, level 0 [ 140.430447][ T5555] BTRFS info (device loop4): turning on flush-on-commit [ 140.445444][ T5568] loop0: detected capacity change from 0 to 2048 [ 140.455672][ T5555] BTRFS info (device loop4): enabling auto defrag [ 140.473338][ T5571] loop2: detected capacity change from 0 to 512 [ 140.475619][ T5555] BTRFS info (device loop4): max_inline at 4096 [ 140.510445][ T5555] BTRFS info (device loop4): using free space tree [ 140.517001][ T5555] BTRFS info (device loop4): has skinny extents [ 140.569550][ T5568] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.613471][ T5571] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 140.626777][ T5571] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.007759][ T5555] BTRFS info (device loop4): enabling ssd optimizations [ 141.118111][ T5598] EXT4-fs (loop3): Ignoring removed oldalloc option [ 141.333378][ T4311] usb 2-1: USB disconnect, device number 5 [ 141.600066][ T5598] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 141.818085][ T5593] EXT4-fs (loop0): Ignoring removed nobh option [ 141.847681][ T5593] EXT4-fs (loop0): Test dummy encryption mode enabled [ 141.944413][ T5593] EXT4-fs (loop0): Ignoring removed bh option [ 142.024160][ T5593] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 142.091056][ T26] audit: type=1800 audit(1791233016.381:15): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.359" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 142.444203][ T5614] JBD2: Ignoring recovery information on journal [ 142.615206][ T5614] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 142.717364][ T5614] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 142.769404][ T5624] EXT4-fs (loop2): Ignoring removed nobh option [ 142.800950][ T5624] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.808186][ T5624] EXT4-fs (loop2): Ignoring removed bh option [ 142.846266][ T5614] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 142.857579][ T5614] OCFS2: Returning error to the calling process. [ 142.875468][ T5614] (syz.1.364,5614,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 142.886188][ T5614] (syz.1.364,5614,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 142.888455][ T5624] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 142.913937][ T5614] (syz.1.364,5614,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 142.937485][ T5614] (syz.1.364,5614,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 143.000554][ T5614] (syz.1.364,5614,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 143.008506][ T5614] (syz.1.364,5614,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 143.020172][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 143.090704][ T5614] (syz.1.364,5614,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 143.116510][ T5614] (syz.1.364,5614,1):ocfs2_mknod:385 ERROR: status = -5 [ 143.148960][ T5614] (syz.1.364,5614,1):ocfs2_mknod:504 ERROR: status = -5 [ 143.180561][ T5639] set_capacity_and_notify: 6 callbacks suppressed [ 143.180575][ T5639] loop3: detected capacity change from 0 to 512 [ 143.205893][ T5614] (syz.1.364,5614,0):ocfs2_mkdir:661 ERROR: status = -5 [ 143.247613][ T5639] EXT4-fs (loop3): Ignoring removed nobh option [ 143.280491][ T5639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.316367][ T5643] loop0: detected capacity change from 0 to 1024 [ 143.334078][ T5639] EXT4-fs (loop3): 1 truncate cleaned up [ 143.339869][ T5639] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 143.352241][ T5620] loop4: detected capacity change from 0 to 32768 [ 143.379946][ T5624] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 143.393601][ T26] audit: type=1800 audit(1791233017.681:16): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.366" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 143.439530][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 143.448136][ T5620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.363 (5620) [ 143.534047][ T5620] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 143.579709][ T5620] BTRFS info (device loop4): setting nodatasum [ 143.627721][ T5620] BTRFS info (device loop4): force zlib compression, level 3 [ 143.671055][ T5620] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 143.720619][ T5620] BTRFS info (device loop4): use lzo compression, level 0 [ 143.727792][ T5620] BTRFS info (device loop4): turning on flush-on-commit [ 143.850325][ T5620] BTRFS info (device loop4): enabling auto defrag [ 143.856840][ T5620] BTRFS info (device loop4): max_inline at 4096 [ 143.910389][ T5620] BTRFS info (device loop4): using free space tree [ 143.939475][ T5656] loop1: detected capacity change from 0 to 1024 [ 143.946347][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.959534][ T5620] BTRFS info (device loop4): has skinny extents [ 144.057349][ T5656] EXT4-fs (loop1): Ignoring removed bh option [ 144.140642][ T5656] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.291654][ T5656] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,dioread_nolock,quota,bh,. Quota mode: writeback. [ 144.502252][ T5656] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.789134][ T5656] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.371: Freeing blocks not in datazone - block = 0, count = 16 [ 144.812261][ T5656] EXT4-fs (loop1): Remounting filesystem read-only [ 144.819615][ T5656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.371: bg 0: block 112: padding at end of block bitmap is not set [ 144.853805][ T5656] EXT4-fs (loop1): Remounting filesystem read-only [ 144.868769][ T5656] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 144.878475][ T5656] EXT4-fs (loop1): Remounting filesystem read-only [ 144.894159][ T5656] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.371: path /61/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 144.922718][ T5656] EXT4-fs (loop1): Remounting filesystem read-only [ 145.162176][ T5689] loop2: detected capacity change from 0 to 64 [ 145.242224][ T5690] loop3: detected capacity change from 0 to 2048 [ 145.301254][ T5690] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.493739][ T5620] BTRFS info (device loop4): enabling ssd optimizations [ 145.510860][ T4231] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.524392][ T4231] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.534951][ T4231] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.544354][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.578909][ T5689] attempt to access beyond end of device [ 145.578909][ T5689] loop2: rw=0, want=1026, limit=64 [ 145.608420][ T5648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.677675][ T5689] Buffer I/O error on dev loop2, logical block 512, async page read [ 145.700207][ T5620] overlayfs: './file2' not a directory [ 145.738766][ T5689] attempt to access beyond end of device [ 145.738766][ T5689] loop2: rw=0, want=113154, limit=64 [ 145.780379][ T5689] Buffer I/O error on dev loop2, logical block 56576, async page read [ 145.823484][ T5689] attempt to access beyond end of device [ 145.823484][ T5689] loop2: rw=0, want=1026, limit=64 [ 145.870565][ T5689] Buffer I/O error on dev loop2, logical block 512, async page read [ 145.879063][ T5689] attempt to access beyond end of device [ 145.879063][ T5689] loop2: rw=0, want=113154, limit=64 [ 145.911460][ T5701] fuse: Bad value for 'fd' [ 145.924731][ T5689] Buffer I/O error on dev loop2, logical block 56576, async page read [ 146.265690][ T5697] loop1: detected capacity change from 0 to 32768 [ 146.328557][ T5698] loop3: detected capacity change from 0 to 32768 [ 146.414406][ T5697] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.379 (5697) [ 146.482112][ T5698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.380 (5698) [ 146.534357][ T5697] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.543979][ T5698] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 146.557573][ T5697] BTRFS info (device loop1): using free space tree [ 146.560634][ T5698] BTRFS info (device loop3): setting nodatasum [ 146.579137][ T5697] BTRFS info (device loop1): has skinny extents [ 146.585178][ T5698] BTRFS info (device loop3): force zlib compression, level 3 [ 146.610407][ T4831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.623656][ T5698] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 146.644530][ T5705] loop4: detected capacity change from 0 to 32768 [ 146.655672][ T5698] BTRFS info (device loop3): use lzo compression, level 0 [ 146.708410][ T5705] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.381 (5705) [ 146.728485][ T5698] BTRFS info (device loop3): turning on flush-on-commit [ 146.741223][ T5698] BTRFS info (device loop3): enabling auto defrag [ 146.747794][ T5698] BTRFS info (device loop3): max_inline at 4096 [ 146.759531][ T5698] BTRFS info (device loop3): using free space tree [ 146.770806][ T5698] BTRFS info (device loop3): has skinny extents [ 146.872198][ T5697] BTRFS info (device loop1): enabling ssd optimizations [ 146.950179][ T5698] BTRFS info (device loop3): enabling ssd optimizations [ 146.960026][ T4468] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4468) [ 147.040852][ T4831] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 147.060419][ T4831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.071729][ T4831] usb 3-1: config 0 has no interface number 0 [ 147.107817][ T26] audit: type=1800 audit(1791233021.391:17): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.380" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 147.109469][ T5698] overlayfs: './file2' not a directory [ 147.270576][ T4831] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 147.310567][ T4831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.318603][ T4831] usb 3-1: Product: syz [ 147.353569][ T4831] usb 3-1: Manufacturer: syz [ 147.358265][ T4831] usb 3-1: SerialNumber: syz [ 147.404069][ T4831] usb 3-1: config 0 descriptor?? [ 147.464673][ T4835] usb 1-1: USB disconnect, device number 4 [ 148.018733][ T5746] loop4: detected capacity change from 0 to 32768 [ 148.190244][ T5746] XFS (loop4): Mounting V5 Filesystem [ 148.204691][ T5757] loop0: detected capacity change from 0 to 32768 [ 148.226688][ T5769] loop3: detected capacity change from 0 to 128 [ 148.321121][ T5769] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 148.340364][ T5746] XFS (loop4): Ending clean mount [ 148.360548][ T5769] hpfs: filesystem error: improperly stopped [ 148.367670][ T5769] hpfs: You really don't want any checks? You are crazy... [ 148.376962][ T5769] hpfs: hpfs_map_sector(): read error [ 148.381804][ T5757] XFS (loop0): Mounting V5 Filesystem [ 148.383027][ T5769] hpfs: code page support is disabled [ 148.394138][ T5769] hpfs: hpfs_map_4sectors(): unaligned read [ 148.408023][ T5769] hpfs: hpfs_map_4sectors(): unaligned read [ 148.422183][ T5769] hpfs: filesystem error: unable to find root dir [ 148.461538][ T4201] XFS (loop4): Unmounting Filesystem [ 148.583195][ T5757] XFS (loop0): Ending clean mount [ 148.764793][ T4194] XFS (loop0): Unmounting Filesystem [ 149.116310][ T5782] loop4: detected capacity change from 0 to 512 [ 149.881491][ T4270] usb 3-1: USB disconnect, device number 6 [ 149.885513][ T26] audit: type=1800 audit(1791233024.171:18): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.388" name="bus" dev="loop4" ino=1048668 res=0 errno=0 [ 149.954529][ T5780] loop3: detected capacity change from 0 to 32768 [ 150.025445][ T5793] loop1: detected capacity change from 0 to 256 [ 150.033946][ T5780] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.389 (5780) [ 150.074284][ T5780] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 150.094095][ T5780] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.143320][ T5793] exfat: Unknown parameter 'keep_last_dots' [ 150.154297][ T5780] BTRFS info (device loop3): use zstd compression, level 3 [ 150.187097][ T5780] BTRFS info (device loop3): using free space tree [ 150.225980][ T5780] BTRFS info (device loop3): has skinny extents [ 150.530452][ T4270] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.980495][ T4270] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.260449][ T4270] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.284934][ T5780] BTRFS info (device loop3): enabling ssd optimizations [ 151.430439][ T4270] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.439606][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.470988][ T5799] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.585595][ T5825] loop4: detected capacity change from 0 to 128 [ 151.680019][ T26] audit: type=1800 audit(1791233025.961:19): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.389" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 151.795275][ T5825] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5825] [ 151.881621][ T5827] fuse: Bad value for 'fd' [ 151.905494][ T5788] loop2: detected capacity change from 0 to 32768 [ 151.915544][ T5790] loop0: detected capacity change from 0 to 32768 [ 151.975939][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.390 (5790) [ 152.083511][ T5790] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 152.102022][ T5790] BTRFS info (device loop0): setting nodatasum [ 152.118563][ T5790] BTRFS info (device loop0): force zlib compression, level 3 [ 152.147624][ T5790] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.163560][ T5790] BTRFS info (device loop0): use lzo compression, level 0 [ 152.173931][ T5790] BTRFS info (device loop0): turning on flush-on-commit [ 152.205677][ T5790] BTRFS info (device loop0): enabling auto defrag [ 152.226226][ T5790] BTRFS info (device loop0): max_inline at 4096 [ 152.236278][ T5790] BTRFS info (device loop0): using free space tree [ 152.253315][ T5790] BTRFS info (device loop0): has skinny extents [ 152.412131][ T5833] loop4: detected capacity change from 0 to 1024 [ 152.456753][ T5833] hfsplus: creator requires a 4 character value [ 152.474161][ T5833] hfsplus: unable to parse mount options [ 152.650662][ T5790] BTRFS info (device loop0): enabling ssd optimizations [ 153.153241][ T5863] loop3: detected capacity change from 0 to 32768 [ 153.216373][ T5863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.400 (5863) [ 153.246054][ T5861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.402 (5861) [ 153.247731][ T5863] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 153.312507][ T23] usb 2-1: USB disconnect, device number 6 [ 153.371789][ T5863] BTRFS info (device loop3): using free space tree [ 153.480358][ T5863] BTRFS info (device loop3): has skinny extents [ 153.927508][ T5861] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 153.960114][ T5863] BTRFS info (device loop3): enabling ssd optimizations [ 153.967625][ T5861] BTRFS info (device loop2): setting nodatasum [ 154.009530][ T5861] BTRFS info (device loop2): force zlib compression, level 3 [ 154.020426][ T5861] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.118716][ T5861] BTRFS info (device loop2): use lzo compression, level 0 [ 154.171087][ T5861] BTRFS info (device loop2): turning on flush-on-commit [ 154.178088][ T5861] BTRFS info (device loop2): enabling auto defrag [ 154.220493][ T5861] BTRFS info (device loop2): max_inline at 4096 [ 154.240537][ T5861] BTRFS info (device loop2): using free space tree [ 154.247106][ T5861] BTRFS info (device loop2): has skinny extents [ 154.601018][ T5889] set_capacity_and_notify: 1 callbacks suppressed [ 154.601034][ T5889] loop1: detected capacity change from 0 to 32768 [ 154.669381][ T5861] BTRFS info (device loop2): enabling ssd optimizations [ 154.777827][ T5891] loop0: detected capacity change from 0 to 32768 [ 154.865927][ T5891] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.408 (5891) [ 155.053086][ T5889] XFS (loop1): Mounting V5 Filesystem [ 155.183593][ T5889] XFS (loop1): Ending clean mount [ 155.276629][ T4485] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4485) [ 155.669038][ T5558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5558) [ 156.269994][ T4186] XFS (loop1): Unmounting Filesystem [ 156.306104][ T5934] Failed to get privilege flags for destination (handle=0x2:0x0) [ 156.589457][ T5929] loop4: detected capacity change from 0 to 32768 [ 156.612331][ T5929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.410 (5929) [ 156.792772][ T5938] NILFS (nullb0): couldn't find nilfs on the device [ 156.839418][ T5929] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 156.870842][ T5929] BTRFS info (device loop4): using free space tree [ 156.900036][ T5929] BTRFS info (device loop4): has skinny extents [ 156.908413][ T5932] loop2: detected capacity change from 0 to 32768 [ 157.009066][ T5932] XFS (loop2): Mounting V5 Filesystem [ 157.142910][ T5932] XFS (loop2): Ending clean mount [ 157.201916][ T26] audit: type=1800 audit(1791233031.491:20): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.409" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 157.227599][ T5929] BTRFS info (device loop4): enabling ssd optimizations [ 157.397185][ T5765] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.770555][ T5765] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.810358][ T5765] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.822245][ T5974] loop3: detected capacity change from 0 to 128 [ 157.845861][ T5765] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.880851][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.941054][ T5961] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.957782][ T4192] XFS (loop2): Unmounting Filesystem [ 157.972319][ T5974] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5974] [ 158.235688][ T5981] fuse: Bad value for 'fd' [ 158.601833][ T5991] FAULT_INJECTION: forcing a failure. [ 158.601833][ T5991] name failslab, interval 1, probability 0, space 0, times 0 [ 158.617184][ T5991] CPU: 0 PID: 5991 Comm: syz.2.423 Not tainted syzkaller #0 [ 158.624690][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.634763][ T5991] Call Trace: [ 158.638062][ T5991] [ 158.641004][ T5991] dump_stack_lvl+0x188/0x250 [ 158.645713][ T5991] ? show_regs_print_info+0x20/0x20 [ 158.650931][ T5991] ? load_image+0x410/0x410 [ 158.655542][ T5991] ? __might_sleep+0xf0/0xf0 [ 158.660155][ T5991] ? __lock_acquire+0x7d40/0x7d40 [ 158.665212][ T5991] should_fail+0x383/0x4b0 [ 158.669849][ T5991] should_failslab+0x5/0x20 [ 158.674471][ T5991] slab_pre_alloc_hook+0x51/0xc0 [ 158.680092][ T5991] __kmalloc+0x6b/0x340 [ 158.684281][ T5991] ? ops_init+0x8a/0x5f0 [ 158.688553][ T5991] ops_init+0x8a/0x5f0 [ 158.693000][ T5991] setup_net+0x39e/0xa10 [ 158.697272][ T5991] ? copy_net_ns+0x5b0/0x5b0 [ 158.702139][ T5991] ? copy_net_ns+0x324/0x5b0 [ 158.706865][ T5991] ? down_read_killable+0x1ce/0x340 [ 158.709712][ T5984] loop0: detected capacity change from 0 to 32768 [ 158.712083][ T5991] copy_net_ns+0x33e/0x5b0 [ 158.722997][ T5991] create_new_namespaces+0x3ce/0x700 [ 158.728323][ T5991] unshare_nsproxy_namespaces+0x116/0x160 [ 158.734071][ T5991] ksys_unshare+0x4f6/0x8e0 [ 158.738639][ T5991] ? __lock_acquire+0x7d40/0x7d40 [ 158.743774][ T5991] ? sighand_ctor+0x40/0x40 [ 158.748289][ T5991] ? lock_chain_count+0x20/0x20 [ 158.753234][ T5991] ? syscall_enter_from_user_mode+0x21/0x70 [ 158.759325][ T5991] __x64_sys_unshare+0x34/0x40 [ 158.764089][ T5991] do_syscall_64+0x4c/0xa0 [ 158.768508][ T5991] ? clear_bhb_loop+0x30/0x80 [ 158.773180][ T5991] ? clear_bhb_loop+0x30/0x80 [ 158.778118][ T5991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.784203][ T5991] RIP: 0033:0x7f8f1c022199 [ 158.788726][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.808332][ T5991] RSP: 002b:00007f8f1a27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.816749][ T5991] RAX: ffffffffffffffda RBX: 00007f8f1c2a9fa0 RCX: 00007f8f1c022199 [ 158.824719][ T5991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044040000 [ 158.832697][ T5991] RBP: 00007f8f1c0b90b8 R08: 0000000000000000 R09: 0000000000000000 [ 158.840664][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.848623][ T5991] R13: 00007f8f1c2aa038 R14: 00007f8f1c2a9fa0 R15: 00007fff90b71858 [ 158.856597][ T5991] [ 158.906164][ T5984] XFS (loop0): Mounting V5 Filesystem [ 158.976335][ T5984] XFS (loop0): Ending clean mount [ 159.047488][ T4194] XFS (loop0): Unmounting Filesystem [ 159.112685][ T6005] device syzkaller0 entered promiscuous mode [ 159.277803][ T6011] loop2: detected capacity change from 0 to 16 [ 159.380659][ T6011] erofs: (device loop2): mounted with root inode @ nid 36. [ 159.409418][ T6011] attempt to access beyond end of device [ 159.409418][ T6011] loop2: rw=524288, want=1342177304, limit=16 [ 159.470564][ T6011] attempt to access beyond end of device [ 159.470564][ T6011] loop2: rw=0, want=1342177280, limit=16 [ 159.503989][ T26] audit: type=1800 audit(1791233033.791:21): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.428" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 160.058490][ T6009] loop3: detected capacity change from 0 to 32768 [ 160.195378][ T2284] usb 2-1: USB disconnect, device number 7 [ 160.499765][ T6027] loop4: detected capacity change from 0 to 32768 [ 160.843827][ T6033] loop0: detected capacity change from 0 to 32768 [ 161.207929][ T6043] NILFS (nullb0): couldn't find nilfs on the device [ 163.125316][ T6072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.133202][ T6072] IPv6: NLM_F_CREATE should be set when creating new route [ 163.668726][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.676322][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.759366][ T6088] binder: 6087:6088 unknown command 1 [ 163.774157][ T6088] binder: 6087:6088 ioctl c0306201 2000000001c0 returned -22 [ 164.372503][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.418472][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.752771][ T6094] loop4: detected capacity change from 0 to 32768 [ 164.792180][ T6094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.452 (6094) [ 164.872629][ T6094] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 164.901954][ T6094] BTRFS info (device loop4): force clearing of disk cache [ 164.928436][ T6094] BTRFS info (device loop4): enabling auto defrag [ 164.945359][ T6094] BTRFS info (device loop4): max_inline at 0 [ 164.965622][ T6094] BTRFS info (device loop4): enabling disk space caching [ 164.985913][ T6094] BTRFS info (device loop4): disk space caching is enabled [ 165.010393][ T6094] BTRFS info (device loop4): has skinny extents [ 165.051366][ T6099] loop3: detected capacity change from 0 to 32768 [ 165.135966][ T6074] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.150559][ T6074] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.170611][ T6074] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.179613][ T6074] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.210421][ T6099] XFS (loop3): Mounting V5 Filesystem [ 165.250535][ T6094] BTRFS info (device loop4): enabling ssd optimizations [ 165.276017][ T6094] BTRFS info (device loop4): clearing free space tree [ 165.284041][ T6094] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.295828][ T6094] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.347395][ T6099] XFS (loop3): Ending clean mount [ 165.458960][ T6099] XFS (loop3): Quotacheck needed: Please wait. [ 165.609678][ T6099] XFS (loop3): Quotacheck: Done. [ 165.611978][ T6085] loop1: detected capacity change from 0 to 131072 [ 165.699179][ T6085] F2FS-fs (loop1): invalid crc value [ 165.726949][ T4308] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 165.742515][ T6085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.844523][ T26] audit: type=1800 audit(1791233040.131:22): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.452" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 165.903033][ T26] audit: type=1800 audit(1791233040.191:23): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.452" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 165.943123][ T6085] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 165.990441][ T6085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 166.203790][ T6144] loop2: detected capacity change from 0 to 1024 [ 166.250044][ T6144] hfsplus: creator requires a 4 character value [ 166.257522][ T26] audit: type=1800 audit(1791233040.551:24): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.452" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 166.259188][ T6144] hfsplus: unable to parse mount options [ 166.476690][ T6135] loop0: detected capacity change from 0 to 32768 [ 166.513263][ T6135] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.456 (6135) [ 166.768698][ T6135] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 166.830397][ T6135] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.839825][ T6135] BTRFS info (device loop0): use zstd compression, level 3 [ 166.885215][ T6135] BTRFS info (device loop0): using free space tree [ 166.930417][ T6135] BTRFS info (device loop0): has skinny extents [ 167.272977][ T6172] NILFS (nullb0): couldn't find nilfs on the device [ 167.344075][ T6135] BTRFS info (device loop0): enabling ssd optimizations [ 167.857196][ T4187] XFS (loop3): Unmounting Filesystem [ 168.003137][ T6181] loop1: detected capacity change from 0 to 128 [ 168.734391][ T6189] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6189] [ 169.775284][ T6198] loop2: detected capacity change from 0 to 32768 [ 169.817490][ T6198] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.467 (6198) [ 169.850423][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 169.886098][ T6198] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 169.924309][ T6198] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 169.940082][ T6198] BTRFS info (device loop2): use zstd compression, level 3 [ 169.957788][ T6198] BTRFS info (device loop2): using free space tree [ 169.978176][ T6198] BTRFS info (device loop2): has skinny extents [ 170.175709][ T6198] BTRFS info (device loop2): enabling ssd optimizations [ 170.210763][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.243426][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.269363][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.305665][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.341292][ T6203] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.380520][ T6222] loop0: detected capacity change from 0 to 32768 [ 170.470618][ T6222] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.473 (6222) [ 170.522181][ T6222] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 170.571310][ T6222] BTRFS info (device loop0): using free space tree [ 170.578681][ T6222] BTRFS info (device loop0): has skinny extents [ 170.633554][ T6241] loop4: detected capacity change from 0 to 1024 [ 170.860435][ T6256] loop1: detected capacity change from 0 to 128 [ 171.011742][ T6222] BTRFS info (device loop0): enabling ssd optimizations [ 171.052944][ T26] audit: type=1800 audit(1791233045.341:25): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.473" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 171.582258][ T6277] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6277] [ 171.728516][ T6279] lo speed is unknown, defaulting to 1000 [ 172.070755][ T7] usb 4-1: USB disconnect, device number 2 [ 172.203860][ T6302] syzkaller0: create flow: hash 3148341049 index 2 [ 172.211709][ T4229] syzkaller0: tun_net_xmit 76 [ 172.217084][ T4229] syzkaller0: tun_net_xmit 48 [ 172.240520][ T4229] syzkaller0: tun_net_xmit 76 [ 172.265313][ T6299] syzkaller0: delete flow: hash 3148341049 index 2 [ 172.294842][ T4832] syzkaller0: tun_net_xmit 76 [ 172.478182][ T6293] loop4: detected capacity change from 0 to 32768 [ 172.523824][ T6293] JBD2: Ignoring recovery information on journal [ 172.574171][ T6293] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 172.877073][ T4201] ocfs2: Unmounting device (7,4) on (node local) [ 172.965964][ T6313] loop3: detected capacity change from 0 to 1024 [ 173.151238][ T6313] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.219035][ T6313] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.360797][ T6313] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.489: lblock 3 mapped to illegal pblock 3 (length 3) [ 173.469715][ T6313] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 173.546462][ T6313] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.546462][ T6313] [ 173.697123][ T6319] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.489: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.732632][ T6319] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.489: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.780877][ T6319] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.489: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.795438][ T6331] loop2: detected capacity change from 0 to 128 [ 173.947701][ T4306] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 173.982535][ T4306] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 174.008755][ T4306] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.008755][ T4306] [ 174.026122][ T6326] loop4: detected capacity change from 0 to 32768 [ 174.069892][ T6326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.491 (6326) [ 174.094251][ T6326] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 174.109804][ T6326] BTRFS info (device loop4): setting nodatacow, compression disabled [ 174.140431][ T6326] BTRFS info (device loop4): setting datasum, datacow enabled [ 174.148720][ T6326] BTRFS info (device loop4): force clearing of disk cache [ 174.190447][ T6326] BTRFS info (device loop4): turning on sync discard [ 174.197235][ T6326] BTRFS warning (device loop4): excessive commit interval 43283 [ 174.240451][ T6326] BTRFS info (device loop4): enabling ssd optimizations [ 174.251903][ T6326] BTRFS info (device loop4): using spread ssd allocation scheme [ 174.280137][ T6326] BTRFS info (device loop4): not using ssd optimizations [ 174.304371][ T6326] BTRFS info (device loop4): not using spread ssd allocation scheme [ 174.334988][ T6326] BTRFS info (device loop4): using free space tree [ 174.401234][ T6339] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6339] [ 174.472677][ T6326] BTRFS info (device loop4): has skinny extents [ 174.604994][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 175.167783][ T6326] BTRFS info (device loop4): clearing free space tree [ 175.188399][ T6326] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.249875][ T6326] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.385281][ T6326] BTRFS info (device loop4): creating free space tree [ 175.446621][ T6326] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.589668][ T6326] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.162804][ T6377] loop3: detected capacity change from 0 to 32768 [ 176.214609][ T6377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.504 (6377) [ 176.268022][ T6377] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 176.288075][ T6377] BTRFS info (device loop3): turning off barriers [ 176.315639][ T6377] BTRFS info (device loop3): setting nodatasum [ 176.345874][ T6377] BTRFS info (device loop3): metadata ratio 772 [ 176.350343][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.355997][ T6377] BTRFS info (device loop3): setting nodatacow, compression disabled [ 176.375668][ T6377] BTRFS info (device loop3): turning on flush-on-commit [ 176.391759][ T6377] BTRFS info (device loop3): setting datacow [ 176.397791][ T6377] BTRFS info (device loop3): enabling disk space caching [ 176.445705][ T6377] BTRFS info (device loop3): force clearing of disk cache [ 176.465705][ T6377] BTRFS info (device loop3): disk space caching is enabled [ 176.486252][ T6377] BTRFS info (device loop3): has skinny extents [ 176.599836][ T6377] BTRFS info (device loop3): enabling ssd optimizations [ 176.611695][ T6377] BTRFS info (device loop3): clearing free space tree [ 176.620443][ T6377] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.650818][ T6377] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.720714][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 176.744892][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.858046][ T6408] loop1: detected capacity change from 0 to 128 [ 177.082819][ T7] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 177.189380][ T6415] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 177.216643][ T6416] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6416] [ 177.488139][ T6423] i2c i2c-0: delete_device: Can't find device in list [ 177.570479][ T6422] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 178.267865][ T6428] loop0: detected capacity change from 0 to 32768 [ 178.303152][ T6428] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.516 (6428) [ 178.376494][ T4468] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4468) [ 178.671034][ T6428] loop0: detected capacity change from 0 to 32768 [ 178.805535][ T6428] XFS (loop0): Mounting V5 Filesystem [ 178.981440][ T6428] XFS (loop0): Ending clean mount [ 179.049355][ T6428] XFS (loop0): Quotacheck needed: Please wait. [ 179.347863][ T6443] loop1: detected capacity change from 0 to 32768 [ 179.413004][ T6460] loop4: detected capacity change from 0 to 512 [ 179.476613][ T6443] (syz.1.520,6443,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "da ‹=writeback" or missing value [ 179.495515][ T6460] FAULT_INJECTION: forcing a failure. [ 179.495515][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 179.587752][ T6460] CPU: 1 PID: 6460 Comm: syz.4.525 Not tainted syzkaller #0 [ 179.595269][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.605342][ T6460] Call Trace: [ 179.608673][ T6460] [ 179.611613][ T6460] dump_stack_lvl+0x188/0x250 [ 179.616481][ T6460] ? show_regs_print_info+0x20/0x20 [ 179.621711][ T6460] ? load_image+0x410/0x410 [ 179.626331][ T6460] ? __might_sleep+0xf0/0xf0 [ 179.630944][ T6460] ? __lock_acquire+0x7d40/0x7d40 [ 179.636082][ T6460] ? crypto_alg_lookup+0x186/0x1d0 [ 179.641390][ T6460] should_fail+0x383/0x4b0 [ 179.645835][ T6460] should_failslab+0x5/0x20 [ 179.650357][ T6460] slab_pre_alloc_hook+0x51/0xc0 [ 179.655320][ T6460] __kmalloc_node+0x6d/0x3a0 [ 179.659934][ T6460] ? crypto_create_tfm_node+0x72/0x340 [ 179.665427][ T6460] crypto_create_tfm_node+0x72/0x340 [ 179.670827][ T6460] ? crypto_alg_mod_lookup+0x47f/0x6d0 [ 179.676315][ T6460] crypto_alloc_tfm_node+0x177/0x360 [ 179.681765][ T6460] ext4_fill_super+0xa0c/0x93f0 [ 179.686728][ T6460] ? format_decode+0x8b1/0x1330 [ 179.691647][ T6460] ? vsnprintf+0x1b22/0x1c20 [ 179.696269][ T6460] ? snprintf+0xe5/0x140 [ 179.700539][ T6460] ? ext4_mount+0x40/0x40 [ 179.704895][ T6460] ? set_blocksize+0x1f1/0x360 [ 179.709688][ T6460] ? sb_set_blocksize+0xa5/0xe0 [ 179.714560][ T6460] mount_bdev+0x28a/0x3c0 [ 179.719020][ T6460] ? ext4_mount+0x40/0x40 [ 179.723379][ T6460] legacy_get_tree+0xe6/0x180 [ 179.728072][ T6460] ? ext4_errno_to_code+0x160/0x160 [ 179.733316][ T6460] vfs_get_tree+0x88/0x270 [ 179.737757][ T6460] do_new_mount+0x247/0xa40 [ 179.742286][ T6460] __se_sys_mount+0x2e3/0x3d0 [ 179.746988][ T6460] ? __x64_sys_mount+0xc0/0xc0 [ 179.751776][ T6460] ? lockdep_hardirqs_on+0x94/0x140 [ 179.756992][ T6460] ? __x64_sys_mount+0x1c/0xc0 [ 179.761779][ T6460] do_syscall_64+0x4c/0xa0 [ 179.766216][ T6460] ? clear_bhb_loop+0x30/0x80 [ 179.770909][ T6460] ? clear_bhb_loop+0x30/0x80 [ 179.775602][ T6460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.781668][ T6460] RIP: 0033:0x7f1a9569740a [ 179.786102][ T6460] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.805795][ T6460] RSP: 002b:00007f1a938ede58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.814244][ T6460] RAX: ffffffffffffffda RBX: 00007f1a938edee0 RCX: 00007f1a9569740a [ 179.822233][ T6460] RDX: 00002000000005c0 RSI: 0000200000000100 RDI: 00007f1a938edea0 [ 179.830253][ T6460] RBP: 00002000000005c0 R08: 00007f1a938edee0 R09: 0000000000000000 [ 179.838235][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 179.846315][ T6460] R13: 00007f1a938edea0 R14: 00000000000005c4 R15: 0000200000000000 [ 179.854427][ T6460] [ 179.998154][ T6443] (syz.1.520,6443,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 180.007717][ T6428] XFS (loop0): Quotacheck: Done. [ 180.133680][ T6460] EXT4-fs (loop4): Cannot load crc32c driver. [ 180.243164][ T6462] binder: 6461:6462 ioctl 4018620d 0 returned -22 [ 180.318845][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.525'. [ 180.949955][ T6475] loop1: detected capacity change from 0 to 128 [ 180.991571][ T4832] Bluetooth: hci0: command 0x0406 tx timeout [ 181.013212][ T4832] Bluetooth: hci3: command 0x0406 tx timeout [ 181.034519][ T4832] Bluetooth: hci4: command 0x0406 tx timeout [ 181.052352][ T4194] XFS (loop0): Unmounting Filesystem [ 181.202587][ T4832] Bluetooth: hci1: command 0x0406 tx timeout [ 181.208799][ T4832] Bluetooth: hci2: command 0x0406 tx timeout [ 181.358497][ T6479] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6479] [ 181.569725][ T6471] loop4: detected capacity change from 0 to 32768 [ 181.616521][ T6471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.528 (6471) [ 181.676853][ T6471] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 181.702946][ T6478] loop3: detected capacity change from 0 to 32768 [ 181.712159][ T6471] BTRFS info (device loop4): force clearing of disk cache [ 181.721485][ T6471] BTRFS info (device loop4): enabling auto defrag [ 181.728021][ T6471] BTRFS info (device loop4): max_inline at 0 [ 181.747287][ T6471] BTRFS info (device loop4): enabling disk space caching [ 181.787204][ T6478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.532 (6478) [ 181.818023][ T6471] BTRFS info (device loop4): disk space caching is enabled [ 181.833676][ T6471] BTRFS info (device loop4): has skinny extents [ 181.853511][ T6478] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 181.887061][ T6478] BTRFS info (device loop3): setting nodatacow, compression disabled [ 181.899156][ T6478] BTRFS info (device loop3): setting datasum, datacow enabled [ 181.917775][ T6478] BTRFS info (device loop3): force clearing of disk cache [ 181.925967][ T6478] BTRFS info (device loop3): enabling ssd optimizations [ 181.987242][ T6478] BTRFS info (device loop3): using spread ssd allocation scheme [ 182.015744][ T6471] BTRFS info (device loop4): enabling ssd optimizations [ 182.056290][ T6478] BTRFS info (device loop3): turning on sync discard [ 182.082316][ T6471] BTRFS info (device loop4): clearing free space tree [ 182.110461][ T6478] BTRFS info (device loop3): turning on flush-on-commit [ 182.117588][ T6471] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.147980][ T6478] BTRFS info (device loop3): not using ssd optimizations [ 182.175758][ T6471] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.200564][ T6478] BTRFS info (device loop3): not using spread ssd allocation scheme [ 182.240499][ T6478] BTRFS info (device loop3): using free space tree [ 182.247050][ T6478] BTRFS info (device loop3): has skinny extents [ 182.280014][ T6502] loop0: detected capacity change from 0 to 32768 [ 182.368298][ T6502] JBD2: Ignoring recovery information on journal [ 182.438091][ T4306] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 182.451303][ T4832] usb 3-1: USB disconnect, device number 7 [ 182.562819][ T6502] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 183.123490][ T6502] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 183.161038][ T6478] BTRFS info (device loop3): clearing free space tree [ 183.167982][ T6478] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.291108][ T6502] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 183.320921][ T6478] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.367129][ T6502] OCFS2: File system is now read-only. [ 183.431806][ T6502] (syz.0.533,6502,1):ocfs2_search_chain:1807 ERROR: status = -30 [ 183.510117][ T6478] BTRFS info (device loop3): creating free space tree [ 183.521555][ T6502] (syz.0.533,6502,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 183.582972][ T6478] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.619615][ T6502] (syz.0.533,6502,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 183.686775][ T6478] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.719879][ T6502] (syz.0.533,6502,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 183.801414][ T6502] (syz.0.533,6502,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 183.809534][ T6502] (syz.0.533,6502,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 183.860833][ T6502] (syz.0.533,6502,0):ocfs2_mknod_locked:641 ERROR: status = -30 [ 183.900453][ T6502] (syz.0.533,6502,0):ocfs2_mknod:385 ERROR: status = -30 [ 183.936756][ T6502] (syz.0.533,6502,1):ocfs2_mknod:504 ERROR: status = -30 [ 183.988815][ T6502] (syz.0.533,6502,0):ocfs2_mkdir:661 ERROR: status = -30 [ 184.187817][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 184.392377][ T6545] tipc: Started in network mode [ 184.401742][ T6545] tipc: Node identity 16bc0a65559f, cluster identity 4711 [ 184.409155][ T6545] tipc: Enabled bearer , priority 0 [ 184.434165][ T6545] device syzkaller0 entered promiscuous mode [ 184.688349][ T6544] tipc: Resetting bearer [ 184.724702][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 184.811814][ T6544] tipc: Disabling bearer [ 184.957573][ T6562] binder: 6560:6562 ioctl 4018620d 0 returned -22 [ 185.276593][ T6564] loop1: detected capacity change from 0 to 2048 [ 185.323545][ T6543] loop4: detected capacity change from 0 to 32768 [ 185.388499][ T6543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.536 (6543) [ 185.440928][ T6568] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.519916][ T6543] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 185.560737][ T6543] BTRFS info (device loop4): turning off barriers [ 185.602207][ T6543] BTRFS info (device loop4): setting nodatasum [ 185.618825][ T6543] BTRFS info (device loop4): metadata ratio 772 [ 185.626581][ T6564] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 185.644751][ T6564] Remounting filesystem read-only [ 185.662926][ T6543] BTRFS info (device loop4): setting nodatacow, compression disabled [ 185.671943][ T6543] BTRFS info (device loop4): turning on flush-on-commit [ 185.679494][ T6543] BTRFS info (device loop4): setting datacow [ 185.686009][ T6543] BTRFS info (device loop4): enabling disk space caching [ 185.693690][ T6543] BTRFS info (device loop4): force clearing of disk cache [ 185.701482][ T6543] BTRFS info (device loop4): disk space caching is enabled [ 185.708923][ T6543] BTRFS info (device loop4): has skinny extents [ 185.753169][ T6573] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 186.001142][ T6543] BTRFS info (device loop4): enabling ssd optimizations [ 186.058110][ T6543] BTRFS info (device loop4): clearing free space tree [ 186.160423][ T6543] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.170109][ T6543] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.304449][ T6603] loop3: detected capacity change from 0 to 8 [ 186.402830][ T6603] FAULT_INJECTION: forcing a failure. [ 186.402830][ T6603] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 186.466514][ T6603] CPU: 0 PID: 6603 Comm: syz.3.552 Not tainted syzkaller #0 [ 186.473850][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.483921][ T6603] Call Trace: [ 186.487303][ T6603] [ 186.490243][ T6603] dump_stack_lvl+0x188/0x250 [ 186.494944][ T6603] ? show_regs_print_info+0x20/0x20 [ 186.500169][ T6603] ? load_image+0x410/0x410 [ 186.504703][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 186.509846][ T6603] should_fail+0x383/0x4b0 [ 186.514400][ T6603] prepare_alloc_pages+0x1e3/0x5b0 [ 186.519542][ T6603] __alloc_pages+0x11b/0x480 [ 186.524157][ T6603] ? zone_statistics+0x170/0x170 [ 186.529124][ T6603] ? alloc_pages+0x452/0x560 [ 186.533749][ T6603] squashfs_bio_read+0x364/0x740 [ 186.538719][ T6603] squashfs_read_data+0x218/0x860 [ 186.543767][ T6603] squashfs_cache_get+0x7c3/0xf20 [ 186.548807][ T6603] ? copy_bio_to_actor+0x4e0/0x4e0 [ 186.553907][ T6603] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.553971][ T6603] ? lock_chain_count+0x20/0x20 [ 186.553995][ T6603] ? kasan_quarantine_put+0xd4/0x210 [ 186.554012][ T6603] ? lockdep_hardirqs_on+0x94/0x140 [ 186.554038][ T6603] squashfs_read_metadata+0x12e/0x880 [ 186.565369][ T6603] squashfs_lookup+0x843/0xe50 [ 186.576223][ T6603] ? squashfs_read_inode+0x2010/0x2010 [ 186.586667][ T6603] ? mode_strip_sgid+0x9d/0x200 [ 186.597066][ T6603] ? squashfs_read_inode+0x2010/0x2010 [ 186.602527][ T6603] path_openat+0x1046/0x2fb0 [ 186.602577][ T6603] ? do_filp_open+0x400/0x400 [ 186.611824][ T6603] do_filp_open+0x1df/0x400 [ 186.616362][ T6603] ? vfs_tmpfile+0x300/0x300 [ 186.620994][ T6603] ? _raw_spin_unlock+0x24/0x40 [ 186.625865][ T6603] ? alloc_fd+0x59e/0x650 [ 186.630250][ T6603] do_sys_openat2+0x14b/0x500 [ 186.635000][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 186.635028][ T6603] ? do_sys_open+0xe0/0xe0 [ 186.635046][ T6603] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.635066][ T6603] ? lock_chain_count+0x20/0x20 [ 186.635086][ T6603] __x64_sys_openat+0x135/0x160 [ 186.645095][ T6603] do_syscall_64+0x4c/0xa0 [ 186.655990][ T6603] ? clear_bhb_loop+0x30/0x80 [ 186.656014][ T6603] ? clear_bhb_loop+0x30/0x80 [ 186.656032][ T6603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.665935][ T6603] RIP: 0033:0x7fb9540cb199 [ 186.675723][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.675745][ T6603] RSP: 002b:00007fb952323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.675763][ T6603] RAX: ffffffffffffffda RBX: 00007fb954352fa0 RCX: 00007fb9540cb199 [ 186.675774][ T6603] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 186.675785][ T6603] RBP: 00007fb9541620b8 R08: 0000000000000000 R09: 0000000000000000 [ 186.675795][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.675805][ T6603] R13: 00007fb954353038 R14: 00007fb954352fa0 R15: 00007ffeb23057c8 [ 186.675830][ T6603] [ 186.795453][ T6603] SQUASHFS error: Failed to read block 0x144: -12 [ 186.817474][ T6603] SQUASHFS error: Unable to read metadata cache entry [142] [ 186.844965][ T6603] SQUASHFS error: Unable to read directory block [142:26] [ 187.079724][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 188.374564][ T6632] lo speed is unknown, defaulting to 1000 [ 188.453057][ T6646] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 188.465953][ T6646] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 188.477790][ T6646] comedi comedi3: 8255: I/O port conflict (0x8b,4) [ 188.485845][ T6646] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 188.494082][ T6646] comedi comedi3: 8255: I/O port conflict (0x100010,4) [ 188.501259][ T6646] comedi comedi3: 8255: I/O port conflict (0x10001,4) [ 188.508348][ T6646] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 188.515892][ T6646] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 188.526716][ T6646] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 188.534117][ T6646] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 188.555733][ T6646] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 188.565423][ T6646] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 188.619345][ T6646] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 188.627850][ T6646] comedi comedi3: 8255: I/O port conflict (0x43,4) [ 188.634692][ T6646] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 188.641240][ T6646] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 188.647888][ T6646] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 188.654407][ T6646] comedi comedi3: 8255: I/O port conflict (0x20000084,4) [ 188.661914][ T6646] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 188.668463][ T6646] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 189.150391][ T4832] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 189.408356][ T6674] 0x000000000000-0x000000010000 : "" [ 189.495804][ T6674] ftl_cs: FTL header not found. [ 189.520637][ T4832] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 189.529134][ T4832] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 189.570099][ T6674] FAULT_INJECTION: forcing a failure. [ 189.570099][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 189.593952][ T4832] usb 4-1: config 0 has no interface number 0 [ 189.649370][ T6674] CPU: 1 PID: 6674 Comm: syz.2.575 Not tainted syzkaller #0 [ 189.656712][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 189.666795][ T6674] Call Trace: [ 189.670089][ T6674] [ 189.673288][ T6674] dump_stack_lvl+0x188/0x250 [ 189.678070][ T6674] ? show_regs_print_info+0x20/0x20 [ 189.683332][ T6674] ? load_image+0x410/0x410 [ 189.687871][ T6674] ? __might_sleep+0xf0/0xf0 [ 189.692489][ T6674] ? __lock_acquire+0x7d40/0x7d40 [ 189.697542][ T6674] should_fail+0x383/0x4b0 [ 189.702011][ T6674] should_failslab+0x5/0x20 [ 189.706542][ T6674] slab_pre_alloc_hook+0x51/0xc0 [ 189.711495][ T6674] ? __kernfs_new_node+0xe3/0x6b0 [ 189.711580][ T6674] kmem_cache_alloc+0x3d/0x280 [ 189.711604][ T6674] __kernfs_new_node+0xe3/0x6b0 [ 189.721854][ T6674] ? __lock_acquire+0x7d40/0x7d40 [ 189.731782][ T6674] ? kernfs_new_node+0x250/0x250 [ 189.736744][ T6674] ? kernfs_activate+0x1eb/0x210 [ 189.741719][ T6674] kernfs_new_node+0x148/0x250 [ 189.746512][ T6674] __kernfs_create_file+0x47/0x2e0 [ 189.751656][ T6674] sysfs_add_file_mode_ns+0x2d2/0x390 [ 189.757065][ T6674] internal_create_group+0x492/0xd00 [ 189.762731][ T6674] ? kobject_init+0x1c0/0x1c0 [ 189.767442][ T6674] ? sysfs_create_group+0x20/0x20 [ 189.773492][ T6674] blk_register_queue+0xdd/0x3a0 [ 189.778531][ T6674] device_add_disk+0x60f/0xde0 [ 189.783308][ T6674] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 189.783345][ T6674] mtdblock_add_mtd+0x186/0x240 [ 189.783364][ T6674] blktrans_notify_add+0x95/0xe0 [ 189.793493][ T6674] add_mtd_device+0xd40/0x1260 [ 189.793532][ T6674] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 189.793557][ T6674] ? mtd_cls_resume+0x130/0x130 [ 189.793590][ T6674] mtd_add_partition+0x25d/0x420 [ 189.819228][ T6674] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 189.824363][ T6674] ? shrink_ecclayout+0xab0/0xab0 [ 189.829416][ T6674] ? __might_fault+0xb3/0x110 [ 189.830612][ T4832] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 189.834156][ T6674] ? _copy_from_user+0x111/0x170 [ 189.834185][ T6674] mtdchar_ioctl+0x14cb/0x1d70 [ 189.834211][ T6674] ? mtdchar_close+0x180/0x180 [ 189.848645][ T6674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.848682][ T6674] ? verify_lock_unused+0x140/0x140 [ 189.858993][ T6674] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 189.870133][ T6674] ? rcu_lock_release+0x5/0x20 [ 189.880550][ T6674] ? __mutex_trylock_common+0x15c/0x260 [ 189.886122][ T6674] ? rcu_lock_release+0x20/0x20 [ 189.891266][ T6674] ? __mutex_lock_common+0x435/0x2400 [ 189.896671][ T6674] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 189.902242][ T6674] ? mutex_lock_io_nested+0x60/0x60 [ 189.907518][ T6674] mtdchar_unlocked_ioctl+0xad/0xd0 [ 189.912908][ T6674] ? mtdchar_write+0x5a0/0x5a0 [ 189.917707][ T6674] __se_sys_ioctl+0xfa/0x170 [ 189.922322][ T6674] do_syscall_64+0x4c/0xa0 [ 189.923195][ T4832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.926777][ T6674] ? clear_bhb_loop+0x30/0x80 [ 189.926806][ T6674] ? clear_bhb_loop+0x30/0x80 [ 189.926827][ T6674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.950035][ T6674] RIP: 0033:0x7f8f1c022199 [ 189.954459][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.974163][ T6674] RSP: 002b:00007f8f1a27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.976540][ T4832] usb 4-1: Product: syz [ 189.982687][ T6674] RAX: ffffffffffffffda RBX: 00007f8f1c2a9fa0 RCX: 00007f8f1c022199 [ 189.982710][ T6674] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 189.982720][ T6674] RBP: 00007f8f1c0b90b8 R08: 0000000000000000 R09: 0000000000000000 [ 189.982730][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.982740][ T6674] R13: 00007f8f1c2aa038 R14: 00007f8f1c2a9fa0 R15: 00007fff90b71858 [ 189.982766][ T6674] [ 190.125935][ T4832] usb 4-1: Manufacturer: syz [ 190.148502][ T4832] usb 4-1: SerialNumber: syz [ 190.299621][ T6683] fuse: Bad value for 'fd' [ 190.315904][ T4832] usb 4-1: config 0 descriptor?? [ 190.402096][ T6674] ------------[ cut here ]------------ [ 190.408007][ T6674] WARNING: CPU: 0 PID: 6674 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 190.437977][ T6674] Modules linked in: [ 190.449287][ T6674] CPU: 0 PID: 6674 Comm: syz.2.575 Not tainted syzkaller #0 [ 190.477705][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.519145][ T6674] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 190.538550][ T6674] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 40 f6 90 8c e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 190.606834][ T6674] RSP: 0018:ffffc900035af470 EFLAGS: 00010246 [ 190.613629][ T6674] RAX: ffffffff83d31e76 RBX: ffff88802c2a4800 RCX: 0000000000080000 [ 190.622431][ T6674] RDX: ffffc900044f3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 190.630992][ T6674] RBP: 000000000000001f R08: ffff888023ad81db R09: 1ffff1100475b03b [ 190.639438][ T6674] R10: dffffc0000000000 R11: ffffed100475b03c R12: ffff888140903b00 [ 190.648795][ T6674] R13: ffff88802c2a4950 R14: dffffc0000000000 R15: ffff888140903b00 [ 190.657655][ T6674] FS: 00007f8f1a27a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 190.667378][ T6674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.675579][ T6674] CR2: 00007fb953fa0a00 CR3: 0000000052fa8000 CR4: 00000000003506f0 [ 190.684402][ T6674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.695452][ T6674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.704642][ T6674] Call Trace: [ 190.709667][ T6674] [ 190.713515][ T6674] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 190.720555][ T6674] mtdblock_add_mtd+0x186/0x240 [ 190.726382][ T6674] blktrans_notify_add+0x95/0xe0 [ 190.732948][ T6674] add_mtd_device+0xd40/0x1260 [ 190.755677][ T6674] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 190.773530][ T6674] ? mtd_cls_resume+0x130/0x130 [ 190.788280][ T6674] mtd_add_partition+0x25d/0x420 [ 190.803298][ T6674] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 190.818931][ T6674] ? shrink_ecclayout+0xab0/0xab0 [ 190.833944][ T6674] ? __might_fault+0xb3/0x110 [ 190.848381][ T6674] ? _copy_from_user+0x111/0x170 [ 190.863330][ T6674] mtdchar_ioctl+0x14cb/0x1d70 [ 190.877262][ T6674] ? mtdchar_close+0x180/0x180 [ 190.892051][ T6674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.910105][ T6674] ? verify_lock_unused+0x140/0x140 [ 190.925859][ T6674] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 190.943300][ T6674] ? rcu_lock_release+0x5/0x20 [ 190.958542][ T6674] ? __mutex_trylock_common+0x15c/0x260 [ 191.112563][ T6674] ? rcu_lock_release+0x20/0x20 [ 191.117602][ T6674] ? __mutex_lock_common+0x435/0x2400 [ 191.136769][ T6674] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 191.148866][ T6674] ? mutex_lock_io_nested+0x60/0x60 [ 191.156783][ T6674] mtdchar_unlocked_ioctl+0xad/0xd0 [ 191.166067][ T6674] ? mtdchar_write+0x5a0/0x5a0 [ 191.176957][ T6674] __se_sys_ioctl+0xfa/0x170 [ 191.185043][ T6674] do_syscall_64+0x4c/0xa0 [ 191.189717][ T6674] ? clear_bhb_loop+0x30/0x80 [ 191.196765][ T6674] ? clear_bhb_loop+0x30/0x80 [ 191.204984][ T6674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.213596][ T6674] RIP: 0033:0x7f8f1c022199 [ 191.218192][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.243710][ T6674] RSP: 002b:00007f8f1a27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.253553][ T6674] RAX: ffffffffffffffda RBX: 00007f8f1c2a9fa0 RCX: 00007f8f1c022199 [ 191.266368][ T6674] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 191.275664][ T6674] RBP: 00007f8f1c0b90b8 R08: 0000000000000000 R09: 0000000000000000 [ 191.288295][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.297860][ T6674] R13: 00007f8f1c2aa038 R14: 00007f8f1c2a9fa0 R15: 00007fff90b71858 [ 191.311884][ T6674] [ 191.315034][ T6674] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.322321][ T6674] CPU: 0 PID: 6674 Comm: syz.2.575 Not tainted syzkaller #0 [ 191.329727][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.339883][ T6674] Call Trace: [ 191.343174][ T6674] [ 191.346114][ T6674] dump_stack_lvl+0x188/0x250 [ 191.350806][ T6674] ? show_regs_print_info+0x20/0x20 [ 191.356017][ T6674] ? load_image+0x410/0x410 [ 191.360538][ T6674] panic+0x2f8/0x850 [ 191.364446][ T6674] ? bpf_jit_dump+0xd0/0xd0 [ 191.369057][ T6674] ? device_add_disk+0x8d6/0xde0 [ 191.374014][ T6674] __warn+0x248/0x2b0 [ 191.378012][ T6674] ? device_add_disk+0x8d6/0xde0 [ 191.382956][ T6674] report_bug+0x1b9/0x2e0 [ 191.387397][ T6674] handle_bug+0x3a/0x70 [ 191.391665][ T6674] exc_invalid_op+0x16/0x40 [ 191.396183][ T6674] asm_exc_invalid_op+0x16/0x20 [ 191.401042][ T6674] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 191.406607][ T6674] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 40 f6 90 8c e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 191.426445][ T6674] RSP: 0018:ffffc900035af470 EFLAGS: 00010246 [ 191.432655][ T6674] RAX: ffffffff83d31e76 RBX: ffff88802c2a4800 RCX: 0000000000080000 [ 191.440657][ T6674] RDX: ffffc900044f3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 191.448728][ T6674] RBP: 000000000000001f R08: ffff888023ad81db R09: 1ffff1100475b03b [ 191.456742][ T6674] R10: dffffc0000000000 R11: ffffed100475b03c R12: ffff888140903b00 [ 191.464725][ T6674] R13: ffff88802c2a4950 R14: dffffc0000000000 R15: ffff888140903b00 [ 191.472719][ T6674] ? device_add_disk+0x8d6/0xde0 [ 191.477697][ T6674] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 191.483010][ T6674] mtdblock_add_mtd+0x186/0x240 [ 191.487879][ T6674] blktrans_notify_add+0x95/0xe0 [ 191.492869][ T6674] add_mtd_device+0xd40/0x1260 [ 191.497802][ T6674] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 191.503637][ T6674] ? mtd_cls_resume+0x130/0x130 [ 191.508523][ T6674] mtd_add_partition+0x25d/0x420 [ 191.513482][ T6674] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 191.518608][ T6674] ? shrink_ecclayout+0xab0/0xab0 [ 191.523659][ T6674] ? __might_fault+0xb3/0x110 [ 191.528446][ T6674] ? _copy_from_user+0x111/0x170 [ 191.533398][ T6674] mtdchar_ioctl+0x14cb/0x1d70 [ 191.538177][ T6674] ? mtdchar_close+0x180/0x180 [ 191.542956][ T6674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.549073][ T6674] ? verify_lock_unused+0x140/0x140 [ 191.554371][ T6674] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 191.560023][ T6674] ? rcu_lock_release+0x5/0x20 [ 191.564835][ T6674] ? __mutex_trylock_common+0x15c/0x260 [ 191.570669][ T6674] ? rcu_lock_release+0x20/0x20 [ 191.575545][ T6674] ? __mutex_lock_common+0x435/0x2400 [ 191.580941][ T6674] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 191.586330][ T6674] ? mutex_lock_io_nested+0x60/0x60 [ 191.591599][ T6674] mtdchar_unlocked_ioctl+0xad/0xd0 [ 191.596802][ T6674] ? mtdchar_write+0x5a0/0x5a0 [ 191.601579][ T6674] __se_sys_ioctl+0xfa/0x170 [ 191.606176][ T6674] do_syscall_64+0x4c/0xa0 [ 191.610597][ T6674] ? clear_bhb_loop+0x30/0x80 [ 191.615278][ T6674] ? clear_bhb_loop+0x30/0x80 [ 191.620054][ T6674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.625953][ T6674] RIP: 0033:0x7f8f1c022199 [ 191.630378][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.650078][ T6674] RSP: 002b:00007f8f1a27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.658503][ T6674] RAX: ffffffffffffffda RBX: 00007f8f1c2a9fa0 RCX: 00007f8f1c022199 [ 191.666660][ T6674] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 191.674837][ T6674] RBP: 00007f8f1c0b90b8 R08: 0000000000000000 R09: 0000000000000000 [ 191.683006][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.691677][ T6674] R13: 00007f8f1c2aa038 R14: 00007f8f1c2a9fa0 R15: 00007fff90b71858 [ 191.699723][ T6674] [ 191.703007][ T6674] Kernel Offset: disabled [ 191.707706][ T6674] Rebooting in 86400 seconds..