last executing test programs: 4.792215983s ago: executing program 1 (id=2526): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) 4.790047192s ago: executing program 0 (id=2527): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) 4.347054833s ago: executing program 1 (id=2529): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,checkpoint_merge,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache,alloc_mode=default,noextent_cache,compress_cache,mode=lfs,\x00\x00\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x20) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 4.197868313s ago: executing program 3 (id=2530): r0 = syz_io_uring_setup(0x141c, &(0x7f00000001c0)={0x0, 0xd361, 0x40000, 0x1, 0x372}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_stop_dev_sqe={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 3.685152676s ago: executing program 3 (id=2536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0xffffdc47) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffb, 0x0, 0xffd}}}}}}}, 0x0) 3.387615134s ago: executing program 3 (id=2539): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) syz_usb_connect(0x0, 0xb6, 0x0, 0x0) 2.731462232s ago: executing program 0 (id=2543): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='security.apparmor\x00', 0x0, 0x0) 2.243199804s ago: executing program 0 (id=2545): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 2.130426784s ago: executing program 1 (id=2546): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) getpeername(r0, 0x0, &(0x7f00000002c0)) write(r0, &(0x7f0000000000)="3f000000010040", 0x7) 2.062969081s ago: executing program 0 (id=2547): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x8, @string={0x8, 0x3, "3c46d5005e37"}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.809596219s ago: executing program 2 (id=2551): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x18) 1.691386802s ago: executing program 5 (id=2553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000004c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 1.592390433s ago: executing program 2 (id=2554): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4000010) 1.433823205s ago: executing program 2 (id=2555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.431850576s ago: executing program 5 (id=2556): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x9, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 1.295235443s ago: executing program 5 (id=2557): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x24000000) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) 1.241337187s ago: executing program 2 (id=2558): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.235459164s ago: executing program 4 (id=2559): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@errors_continue}, {@norecovery}, {}, {@order_relaxed}, {}, {}, {@nobarrier}, {@errors_continue}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$eJzs3U9sHNUZAPCZtdd2YideAwUDJaTQikDBDkmqprcgUI+IS++gkNAIQ2lDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFVlUqBfXQRkpcxX5vvfvs6a7H69l/v5/0+fnNm53vG69lzYxn32TA2Kqtfz1xYjHPsnc+efuRl57Mf3192Z3NNQ6vf81Dr5FlWb2lnyfb+ywsuHr5xdPbtXl2bP1r7GePXmq+djbLstXscPZp1sg+XF754oN3Hz7y0WszN7954emX92j3m9L9AACAUXTxjyt/vffvf7h/4crFQ6ey6ebyeHzeCP3ZcNx/NBwox+PlWtbez1ui1VSy3kSIWrLeRLLeZJJnsiBfPdlOvWC9qQ75JlqWbbefAAAAMIzieW0jy2tLbf1abWlp47z/us/mp/KlZ8+tnD3fp0IBAACA0v79yvpNt0IIIYQQm5ENQA1CCCGE6Gmszff5AgQAAAAwdlrnC5vZboXV3s7U1dxaY2v+7da/9FBt+9dDD3T6/ev177/8w5X//Vf9xQEAoLxRPZqM+xWPo+M8Buk8ghPJ63Z6/F9LtjO5wzqL5hUclvkGi+pMf66Dqqj+nb6P/VJUfzof5qAqqj+dp3NQFdU/XXEdZRXVv+211wFUVP++iusoq6j+/RXXUVZR/bMV11FWUf1zFddRVlH9Byquo6yi+g9WXEdZRfUPy221RfU3Kq6jrKL6Fyquo6yi+m/o7uX/6GUtZRTVf2PFdZRVVP9NFdfRL3eENv4cDiXjrefP6TndsJzjAQAAwLj7r/n/RE+iPgA1CCGEGNn4z1r/axBCCFF5rA5ADaMUr/T7AgQAAADQd/FzAfFT72tBHJ/oML5xoaF4vN7h9VMdxqc75gcAAAB+8/rZW9/KNz/nv9v58OK8UXH+pZ3OY5TOR7jT/Lud92y3+Ydl3jIAAADGS/7tT6/d98h7zy9cuXjoVMvZ77VwvhvnAZ0M1wY+Dv14X8Bc0s/jOfSp9jy1gvXS6wMHirb32C53FAAAAMZYPH9vZHltqeW8u5HVaktLk83z8cWsnp89t3LmaOjH57P8fr4+fX35g11lG5ankgEAAMBo2Tzf3+78f/M5vovZVL707LmVs+c3+nPN5fVa63WB+c3leet1gUay/FjB8uOhH5/f+d35fevLl05/b+XJXu88AAAAjInzL1x4+omVlTM/8I1vxvOb/YNRxqB90++/TAAAQK99/vnb9R8en/vtxuf/N+e/i5//Pxz6jTC335/CCvE+gfg5gC2f13+8Pc980XrPta/XSNabCDGd1D3Tsp2sZb7B+LqFonyN9u1MFeSbTfLNJfnSeQomk/VjvoPJ8vQTEHG9+WR5Og/jZJIjT/LflQEAAECx5eefeW75/AsXHjj3zBNPnXnqzLPHj5381smTRx/85oPL6/f1L7fe3Q8AAAAMo82bfvtdCQAAAAAAAAAAAAAAAAAAAIyvKh4n1u99BAAAgHH3r1eyLFsVQhTExiMw+1+HEEIIsbOID0vudx2i2pgYgBpEiNrmSVffaxFiI9bW0ifNAwAAAOytq5dfPN3abrGa9zRfc2uNjeZayBvbuQf+snA94mqXHmq/XrK/p9Uw7qr+/Zd/uPK//2pv88d/DXb/96/WvoFT5fLes/zzxdb8t012mT/d/8fK5T+S5L8n6y7/2ntJ/sfL5b83yb+/y/xb9v+5cvnvC/kXQ//I3d3mb3//p0Mb92Nfl/m/nuz/k1m3+ZP9b3SZMHF/yA8A46jW7wL2SDxKiMfRs6Ef9zccbmbp3Q87Pf6vJduZ3HXl7duNx0G3hH48XppL8kY7rX822d6BzaH6TupMDctdJUX19+p93GtF9Xf15g2AovqnKq6jrKL6pyuuo6yi+mcqrqOsovq7PQ/tt6L6h+W6clH9sxXXUVZR/XMV11FWUf0HKq6jrKL6D1ZcR1lF9c9XXEdZRfWXvKxWuaL6Fyquo6yi+m+ouI6yiuq/seI6yiqq/6aK6+iX20NbdD4czz/nw1jsN5L+9DY/y1G9tgAAAADD5p/m/xNCCCGEEEIIIfYivv+N/tfQjLW1fl+BoJ/29tPMAAwqf//Hm/d/vHn/x5v3n/8n3sOfJ/1oosP4ZIfxeofxqWQ8/X2d7jB+Y7LdtSCO39Rh/Esdxg92GL+lw/hih/FbO4zf1mH89g7jAAAAjIebQ+v8EAAAAEbXS7/4+I1f3fP45YUrFw+dyqa2zDt/NPSnw//WXw/9dN77qB7+5/+j0P9ZaH8X2r8l67v/BAAAAPZefE6M//8DAADA6IrPKXX+DwAAAKNrIbTO/wEAAGB03RBa5/8AAAAwwvKZ7ReHNl4XuCu03c7rBwAMvi+H9o7QHgrtnaH9SmjjccDdof1qRfUBAL3z0+/8+ORb+eZ8/8eT8atheWy3WN24UpDX2mfy3xfa/aH9Wpf1pM8D6DZ/dLDLPHuVf36X+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0VFb/3rixGKeZe988vYjP5l648/Xl93ZXOPw+tc89BpZltWbr4ujm/1fhhWvXn7xdGt7LbR5dizLs7y5PHv0UjPTbJZlq9nh7NOskX24vPLFB+8+fOSj12ZufvPC0y/v4Y+gbf8AAABgFP0vAAD//5d6H5E=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0\x00') 1.05410675s ago: executing program 5 (id=2560): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 933.650173ms ago: executing program 4 (id=2561): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020050180000280012800b0001006d61637365630000180002800c0004000200000100c28000080005000700000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 880.349762ms ago: executing program 1 (id=2562): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xfffff000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 759.123566ms ago: executing program 5 (id=2563): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x2) ftruncate(r0, 0x8800000) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 744.668061ms ago: executing program 4 (id=2564): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\t3', 0x2) 616.914366ms ago: executing program 2 (id=2565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 591.033101ms ago: executing program 1 (id=2566): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) read$usbfs(r0, 0x0, 0x0) 550.811208ms ago: executing program 4 (id=2567): eventfd(0x9) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x20000ea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffb, 0x9, 0x0, 0x0) 495.767231ms ago: executing program 3 (id=2568): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x3fb) 352.178923ms ago: executing program 2 (id=2569): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xffffffa4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}}, 0x4040) 338.406099ms ago: executing program 4 (id=2570): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x207f) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) syz_fuse_handle_req(r0, &(0x7f0000000540)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 316.625758ms ago: executing program 1 (id=2571): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x81, 0x4, 0x0, {0x5, 0x4, 0x0, 0x38, 0x8000, 0x68, 0x3, 0x2, 0x0, 0x3, @multicast1, @multicast1}}}}}}, 0x0) 314.695388ms ago: executing program 0 (id=2572): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030003000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000030201060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 255.06575ms ago: executing program 3 (id=2573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket(0x2, 0x3, 0x9) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20000800) 253.920127ms ago: executing program 5 (id=2574): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 84.459813ms ago: executing program 4 (id=2575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ed", 0x1, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f00000012c0)=""/4081, 0xff1, 0x142, 0x0, 0x0) 3.74187ms ago: executing program 0 (id=2576): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 0s ago: executing program 3 (id=2577): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="0c0200001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="a26a0c0000000000040014000500100002000000050011001700000014001400697036746e6c3000000000000000000074011a8088000a80050008000b000000050008007600000014000700fe8000000000000000000000000000bb14000700ff02000000000000000000000000000105000800020000"], 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): e lzo compression, level 1 [ 198.219049][ T8947] BTRFS info (device loop2): max_inline set to 4096 [ 198.706013][ T9023] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 198.721662][ T5619] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.133627][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 199.811225][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 199.983070][ T9071] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 199.983199][ T9071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1209'. [ 199.985078][ T9071] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 199.985128][ T9071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1209'. [ 200.024227][ T9068] loop0: detected capacity change from 0 to 4096 [ 200.162445][ T9079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.196495][ T9080] loop1: detected capacity change from 0 to 1024 [ 200.263936][ T9068] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 200.301292][ T9080] hfsplus: bad catalog entry type [ 200.659996][ T6983] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.777562][ T9092] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 200.779677][ T9092] bond1 (unregistering): Released all slaves [ 200.821425][ T6983] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 200.824240][ T6983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.824265][ T6983] usb 5-1: config 0 has no interface number 0 [ 200.826976][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.827003][ T6983] usb 5-1: Product: syz [ 200.827020][ T6983] usb 5-1: Manufacturer: syz [ 200.827037][ T6983] usb 5-1: SerialNumber: syz [ 200.889606][ T6983] usb 5-1: config 0 descriptor?? [ 201.119379][ T6983] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 201.139702][ T6983] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.154820][ T6983] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 201.154871][ T6983] usb 5-1: media controller created [ 201.196688][ T6983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.391886][ T9117] ªªªªªª: renamed from vlan0 [ 201.494129][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 201.614598][ T9124] loop0: detected capacity change from 0 to 1024 [ 201.615962][ T9124] EXT4-fs: Ignoring removed bh option [ 201.680609][ T9124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.744264][ T9124] EXT4-fs error (device loop0): __ext4_remount:6872: comm syz.0.1230: Abort forced by user [ 201.759333][ T9124] EXT4-fs (loop0): Remounting filesystem read-only [ 201.759808][ T9124] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 201.951287][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.323225][ T6983] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 202.446597][ T6983] usb 5-1: USB disconnect, device number 10 [ 202.773526][ T9146] loop0: detected capacity change from 0 to 32768 [ 202.789702][ T9165] loop2: detected capacity change from 0 to 256 [ 202.824216][ T9146] read_mapping_page failed! [ 202.824237][ T9146] ERROR: (device loop0): txCommit: [ 202.824237][ T9146] [ 202.854935][ T31] audit: type=1800 audit(1789786107.047:36): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1249" name="file1" dev="loop2" ino=1048641 res=0 errno=0 [ 202.887881][ T9165] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 202.887908][ T9165] FAT-fs (loop2): Filesystem has been set read-only [ 203.002041][ T5619] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 203.175158][ T9176] loop4: detected capacity change from 0 to 16 [ 203.220774][ T9176] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 203.221140][ T9176] erofs (device loop4): mounted with root inode @ nid 36. [ 203.227266][ T9179] loop1: detected capacity change from 0 to 128 [ 203.242782][ T9179] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.262650][ T9176] erofs (device loop4): readahead error at folio 7 @ nid 36 [ 203.262693][ T9176] erofs (device loop4): unknown algorithm 5 @ pos 28160 for nid 36, please upgrade kernel [ 203.262716][ T9176] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 203.262752][ T9176] erofs (device loop4): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel [ 203.262775][ T9176] erofs (device loop4): readahead error at folio 5 @ nid 36 [ 203.262807][ T9176] erofs (device loop4): unknown algorithm 5 @ pos 19968 for nid 36, please upgrade kernel [ 203.262829][ T9176] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 203.262871][ T9176] erofs (device loop4): not enough plain data on disk @ la 15360 of nid 36 [ 203.262890][ T9176] erofs (device loop4): readahead error at folio 3 @ nid 36 [ 203.262917][ T9176] erofs (device loop4): unknown algorithm 5 @ pos 11776 for nid 36, please upgrade kernel [ 203.262940][ T9176] erofs (device loop4): readahead error at folio 2 @ nid 36 [ 203.262972][ T9176] erofs (device loop4): readahead error at folio 1 @ nid 36 [ 203.262994][ T9176] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 203.263030][ T9176] erofs (device loop4): read error -117 @ 0 of nid 36 [ 203.263050][ T9176] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 203.265487][ T9176] erofs (device loop4): read error -117 @ 0 of nid 36 [ 203.265512][ T9176] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 203.551507][ T31] audit: type=1326 audit(1789786107.737:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.551756][ T31] audit: type=1326 audit(1789786107.747:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.554438][ T31] audit: type=1326 audit(1789786107.747:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.555135][ T31] audit: type=1326 audit(1789786107.747:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.555187][ T31] audit: type=1326 audit(1789786107.747:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.555236][ T31] audit: type=1326 audit(1789786107.747:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.555450][ T31] audit: type=1326 audit(1789786107.747:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.556157][ T31] audit: type=1326 audit(1789786107.747:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.556437][ T31] audit: type=1326 audit(1789786107.747:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.0.1258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 203.970804][ T9191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1260'. [ 204.210383][ T9205] loop0: detected capacity change from 0 to 8 [ 204.273490][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 204.372659][ T9211] loop4: detected capacity change from 0 to 512 [ 205.655646][ T9224] loop4: detected capacity change from 0 to 32768 [ 205.785394][ T9244] jffs2: notice: (9244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.146639][ T9261] sctp: [Deprecated]: syz.3.1291 (pid 9261) Use of int in max_burst socket option deprecated. [ 206.146639][ T9261] Use struct sctp_assoc_value instead [ 207.143698][ T9291] xt_hashlimit: size too large, truncated to 1048576 [ 207.482880][ T9299] loop0: detected capacity change from 0 to 64 [ 207.698740][ T5617] hfs: node 4:3 still has 1 user(s)! [ 207.871973][ T9305] loop4: detected capacity change from 0 to 512 [ 207.914741][ T9305] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1311: inode has both inline data and extents flags [ 207.914775][ T9305] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.915127][ T9305] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1311: couldn't read orphan inode 15 (err -117) [ 207.915160][ T9305] loop4: lost filesystem error report for type 5 error -117 [ 207.966985][ T9305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.135446][ T9310] loop2: detected capacity change from 0 to 1024 [ 208.136403][ T9310] EXT4-fs: Ignoring removed nobh option [ 208.167292][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.197014][ T9310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.197110][ T9310] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.303119][ T9297] loop5: detected capacity change from 0 to 32768 [ 208.427055][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.430294][ T9316] loop0: detected capacity change from 0 to 2048 [ 208.476949][ T9316] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 208.497435][ T9316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.640494][ T9326] loop1: detected capacity change from 0 to 128 [ 209.160068][ T9356] loop2: detected capacity change from 0 to 512 [ 209.187211][ T9356] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1333: bg 0: block 5: invalid block bitmap [ 209.187244][ T9356] loop2: lost filesystem error report for type 5 error -117 [ 209.189876][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 209.189897][ C1] EXT4-fs (loop2): initial error at time 1789786113: ext4_validate_block_bitmap:436 [ 209.189924][ C1] EXT4-fs (loop2): last error at time 1789786113: ext4_validate_block_bitmap:436 [ 209.218825][ T9356] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 209.218850][ T9356] loop2: lost filesystem error report for type 5 error -117 [ 209.220461][ T9356] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1333: invalid indirect mapped block 3 (level 2) [ 209.220496][ T9356] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 209.228388][ T9356] EXT4-fs (loop2): 1 orphan inode deleted [ 209.228409][ T9356] EXT4-fs (loop2): 1 truncate cleaned up [ 209.256707][ T9357] loop4: detected capacity change from 0 to 512 [ 209.264909][ T9357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.270726][ T9357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 209.270855][ T9357] System zones: 1-12 [ 209.272120][ T9356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.309568][ T9357] EXT4-fs (loop4): 1 truncate cleaned up [ 209.315384][ T9357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.517397][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.596115][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.823329][ T9369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.827464][ T9369] team0: Port device bond1 added [ 209.840561][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.020536][ T9388] loop3: detected capacity change from 0 to 256 [ 210.021543][ T9388] exfat: Deprecated parameter 'namecase' [ 210.021691][ T9388] exfat: Deprecated parameter 'utf8' [ 210.030107][ T7005] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.090687][ T9388] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 210.165659][ T9393] PM: Enabling pm_trace changes system date and time during resume. [ 210.165659][ T9393] PM: Correct system time has to be restored manually after resume. [ 210.209906][ T7005] usb 3-1: Using ep0 maxpacket: 32 [ 210.212091][ T7005] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 210.213120][ T7005] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.213146][ T7005] usb 3-1: config 0 has no interface number 0 [ 210.213188][ T7005] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.213218][ T7005] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.213258][ T7005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.293667][ T7005] usb 3-1: config 0 descriptor?? [ 210.932226][ T7005] uclogic 0003:28BD:0094.0008: pen parameters not found [ 210.932255][ T7005] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 210.992011][ T5937] usb 3-1: USB disconnect, device number 7 [ 211.185320][ T9413] Process accounting resumed [ 211.322072][ T9427] loop4: detected capacity change from 0 to 512 [ 211.347903][ T9427] EXT4-fs (loop4): Test dummy encryption mode enabled [ 211.371855][ T9427] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1361: inode has both inline data and extents flags [ 211.371887][ T9427] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.375375][ T9427] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1361: couldn't read orphan inode 15 (err -117) [ 211.375409][ T9427] loop4: lost filesystem error report for type 5 error -117 [ 211.425402][ T9427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.526404][ T9435] loop1: detected capacity change from 0 to 128 [ 211.765927][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.968975][ T9444] loop4: detected capacity change from 0 to 1024 [ 211.998830][ T9447] loop0: detected capacity change from 0 to 256 [ 212.036374][ T9444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.064339][ T9447] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 212.168918][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 212.168936][ T31] audit: type=1800 audit(1789786116.357:56): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1370" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 212.386538][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.803192][ T9473] loop2: detected capacity change from 0 to 512 [ 212.940320][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.940320][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.941997][ T6993] loop0: writeback error on inode 1048666, offset 28672, sector 34359738480 [ 212.944508][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.944508][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.946422][ T6993] loop0: writeback error on inode 1048666, offset 32768, sector 34359738480 [ 212.948611][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.948611][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.948681][ T6993] loop0: writeback error on inode 1048666, offset 36864, sector 34359738480 [ 212.967133][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967133][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967245][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967245][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967335][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967335][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967424][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967424][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967639][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967639][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967733][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967733][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967826][ T9447] syz.0.1372: attempt to access beyond end of device [ 212.967826][ T9447] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 212.967981][ T6993] loop0: writeback error on inode 1048666, offset 40960, sector 34359738480 [ 212.968219][ T6993] loop0: writeback error on inode 1048666, offset 45056, sector 34359738480 [ 212.968316][ T6993] loop0: writeback error on inode 1048666, offset 49152, sector 34359738480 [ 212.968410][ T6993] loop0: writeback error on inode 1048666, offset 53248, sector 34359738480 [ 212.968502][ T6993] loop0: writeback error on inode 1048666, offset 57344, sector 34359738480 [ 212.968595][ T6993] loop0: writeback error on inode 1048666, offset 61440, sector 34359738480 [ 212.968826][ T6993] loop0: writeback error on inode 1048666, offset 65536, sector 34359738480 [ 213.015610][ T9479] block2mtd: error: cannot open device #! [ 213.015610][ T9479] A;rB~ox+þ? `'3¦|¿Ò¦ÖÙŸÔȨ*£]òô!öŽÈ%.'¤ÁÜo [ 213.167898][ T9482] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 213.651130][ T6993] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 213.800626][ T6993] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 213.803769][ T6993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.803806][ T6993] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 213.803846][ T6993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.803876][ T6993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.803901][ T6993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 213.803953][ T6993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.911696][ T6993] usb 3-1: config 0 descriptor?? [ 214.345819][ T6993] hid_parser_main: 959 callbacks suppressed [ 214.345846][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.345874][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.345899][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.345924][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.345955][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.345980][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.346005][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.346029][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.346055][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.346079][ T6993] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 214.440905][ T9522] loop0: detected capacity change from 0 to 256 [ 214.474250][ T6993] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 214.474538][ T6993] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 214.555155][ C1] hid-thrustmaster 0003:044F:B65D.0009: Unknown packet type 0x0, unable to proceed further with wheel init [ 214.606567][ T9527] loop5: detected capacity change from 0 to 256 [ 214.756397][ T6993] usb 3-1: USB disconnect, device number 8 [ 214.840666][ T9528] fido_id[9528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 215.130524][ T9542] loop1: detected capacity change from 0 to 4096 [ 215.242327][ T9550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.340726][ T31] audit: type=1400 audit(1789786120.537:57): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=9574 comm="syz.1.1430" name="/" offset=59 [ 216.440506][ T9576] loop4: detected capacity change from 0 to 4096 [ 216.474409][ T9583] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.777238][ T9593] loop4: detected capacity change from 0 to 64 [ 216.861644][ T9595] loop5: detected capacity change from 0 to 512 [ 216.875465][ T9595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.898186][ T9595] EXT4-fs (loop5): 1 truncate cleaned up [ 216.911697][ T9595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.001770][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.730966][ T9625] IPVS: persistence engine module ip_vs_pe_À not found [ 217.766969][ T9603] loop1: detected capacity change from 0 to 32768 [ 217.792862][ T9603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1441 (9603) [ 217.796541][ T5627] block nbd1: Receive control failed (result -32) [ 217.807286][ T9603] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.807317][ T9603] BTRFS info (device loop1): using crc32c checksum algorithm [ 217.865278][ T31] audit: type=1326 audit(1789786122.047:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 217.865352][ T31] audit: type=1326 audit(1789786122.057:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 217.899476][ T31] audit: type=1326 audit(1789786122.067:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 217.899532][ T31] audit: type=1326 audit(1789786122.067:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 217.951035][ T9603] BTRFS info (device loop1): enabling ssd optimizations [ 217.951061][ T9603] BTRFS info (device loop1): turning on flush-on-commit [ 217.951080][ T9603] BTRFS info (device loop1): enabling free space tree [ 217.951098][ T9603] BTRFS info (device loop1): enabling auto defrag [ 217.951119][ T9603] BTRFS info (device loop1): use lzo compression, level 1 [ 217.951142][ T9603] BTRFS info (device loop1): max_inline set to 4096 [ 217.962575][ T31] audit: type=1326 audit(1789786122.127:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 217.962638][ T31] audit: type=1326 audit(1789786122.127:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe7a19dec2 code=0x7ffc0000 [ 217.962687][ T31] audit: type=1326 audit(1789786122.127:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbe7a19df57 code=0x7ffc0000 [ 217.962736][ T31] audit: type=1326 audit(1789786122.127:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbe7a15ae51 code=0x7ffc0000 [ 217.962785][ T31] audit: type=1326 audit(1789786122.127:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbe7a19ef49 code=0x7ffc0000 [ 217.962835][ T31] audit: type=1326 audit(1789786122.127:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.1455" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbe7a15aebb code=0x7ffc0000 [ 218.005699][ T5627] Bluetooth: hci6: command 0x1003 tx timeout [ 218.010477][ T5622] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 218.024150][ T9603] BTRFS critical (device loop1 state E): emergency shutdown [ 218.237322][ T12] BTRFS error (device loop1 state E): failed to run delalloc range, root=5 ino=260 folio=0 submit_bitmap=0 start=0 len=4096: -EROFS [ 218.237561][ T5611] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.614188][ T9665] loop1: detected capacity change from 0 to 8 [ 218.667294][ T9665] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.667325][ T9665] SQUASHFS error: Failed to read block 0x91: -5 [ 218.667340][ T9665] SQUASHFS error: Unable to read metadata cache entry [8f] [ 218.667355][ T9665] SQUASHFS error: Unable to read inode 0x11f [ 219.177025][ T9685] loop2: detected capacity change from 0 to 128 [ 219.228728][ T9685] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.230761][ T9685] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.316602][ T9692] batman_adv: batadv0: Adding interface: macsec1 [ 219.316621][ T9692] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.316656][ T9692] batman_adv: batadv0: Interface activated: macsec1 [ 219.327525][ T5619] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.419288][ T9697] loop5: detected capacity change from 0 to 512 [ 219.471287][ T9697] EXT4-fs (loop5): orphan cleanup on readonly fs [ 219.473482][ T9697] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 219.488900][ T9697] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 219.493678][ T9697] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.1477: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 219.493725][ T9697] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 219.494248][ T9697] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1477: couldn't read orphan inode 13 (err -117) [ 219.494297][ T9697] loop5: lost filesystem error report for type 5 error -117 [ 219.525993][ T9697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.540318][ T6993] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.595527][ T9697] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 219.617966][ T9697] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 219.682083][ T6993] usb 4-1: Using ep0 maxpacket: 8 [ 219.695616][ T6993] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 219.700899][ T6993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.804541][ T6993] pvrusb2: Hardware description: Terratec Grabster AV400 [ 219.804559][ T6993] pvrusb2: ********** [ 219.804568][ T6993] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 219.804582][ T6993] pvrusb2: Important functionality might not be entirely working. [ 219.804593][ T6993] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 219.804607][ T6993] pvrusb2: ********** [ 219.951377][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.053176][ T2352] pvrusb2: Invalid write control endpoint [ 220.282390][ T2352] pvrusb2: Invalid write control endpoint [ 220.282408][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 220.282420][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 220.282431][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 220.282443][ T2352] pvrusb2: Device being rendered inoperable [ 220.286372][ T7006] usb 4-1: USB disconnect, device number 7 [ 220.289628][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 220.289677][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 220.369279][ T2352] pvrusb2: Attached sub-driver cx25840 [ 220.369295][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 220.369307][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 220.561918][ T9724] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1486'. [ 220.666477][ T9705] loop4: detected capacity change from 0 to 40427 [ 220.683323][ T9705] F2FS-fs (loop4): invalid crc value [ 220.825901][ T9732] loop0: detected capacity change from 0 to 764 [ 220.850144][ T9732] rock: directory entry would overflow storage [ 220.850153][ T9732] rock: sig=0x4654, size=5, remaining=4 [ 220.932344][ T9705] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 220.967190][ T9705] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 220.967215][ T9705] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 220.967266][ T9705] F2FS-fs (loop4): Start checkpoint disabled! [ 221.033735][ T9705] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 221.036326][ T9705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 221.681129][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 222.336751][ T9750] loop1: detected capacity change from 0 to 32768 [ 222.389800][ T9777] loop2: detected capacity change from 0 to 512 [ 222.393914][ T9750] JBD2: Ignoring recovery information on journal [ 222.456974][ T9777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 222.457137][ T9777] System zones: 1-12 [ 222.474999][ T9777] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1512: missing EA_INODE flag [ 222.475028][ T9777] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 222.476776][ T9750] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 222.481698][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 222.481718][ C1] EXT4-fs (loop2): initial error at time 1789786126: ext4_xattr_inode_iget:437: inode 12 [ 222.481753][ C1] EXT4-fs (loop2): last error at time 1789786126: ext4_xattr_inode_iget:437: inode 12 [ 222.517914][ T9789] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1514'. [ 222.568735][ T9777] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1512: error while reading EA inode 12 err=-117 [ 222.568780][ T9777] loop2: lost filesystem error report for type 5 error -117 [ 222.569456][ T9777] EXT4-fs (loop2): 1 orphan inode deleted [ 222.623343][ T9777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.724198][ T9777] fscrypt (loop2, inode 15): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 222.833487][ T5611] ocfs2: Unmounting device (7,1) on (node local) [ 222.906105][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.047117][ T9802] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1520'. [ 223.047144][ T9802] netlink: 'syz.2.1520': attribute type 1 has an invalid length. [ 223.264853][ C1] sd 0:0:1:0: [sda] tag#7207 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 223.264929][ C1] sd 0:0:1:0: [sda] tag#7207 CDB: Write(6) 0a 00 4e 21 00 00 [ 223.510046][ T6983] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.591769][ T9819] loop1: detected capacity change from 0 to 4096 [ 223.623110][ T9819] NILFS (loop1): invalid segment: Checksum error in segment payload [ 223.623138][ T9819] NILFS (loop1): trying rollback from an earlier position [ 223.665735][ T9819] NILFS (loop1): recovery complete [ 223.682440][ T9825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.695776][ T6983] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 223.697320][ T6983] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.697354][ T6983] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.697385][ T6983] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.697421][ T6983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.759242][ T6983] usb 6-1: config 0 descriptor?? [ 224.079241][ T9836] loop3: detected capacity change from 0 to 512 [ 224.128002][ T9836] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 224.128028][ T9836] loop3: lost filesystem error report for type 5 error -12 [ 224.130141][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 224.130163][ C1] EXT4-fs (loop3): initial error at time 1789786128: ext4_process_orphan:346 [ 224.130191][ C1] EXT4-fs (loop3): last error at time 1789786128: ext4_process_orphan:346 [ 224.213555][ T9836] EXT4-fs (loop3): 2 truncates cleaned up [ 224.226221][ T9845] netlink: 'syz.4.1540': attribute type 9 has an invalid length. [ 224.272001][ T9836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.274139][ T6983] playstation 0003:054C:09CC.000A: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 224.393989][ T6983] playstation 0003:054C:09CC.000A: Invalid byte count transferred, expected 16 got 0 [ 224.394022][ T6983] playstation 0003:054C:09CC.000A: Failed to retrieve DualShock4 pairing info: -22 [ 224.394077][ T6983] playstation 0003:054C:09CC.000A: Failed to get MAC address from DualShock4 [ 224.394096][ T6983] playstation 0003:054C:09CC.000A: Failed to create dualshock4. [ 224.395993][ T9833] loop2: detected capacity change from 0 to 4096 [ 224.454697][ T9846] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1536: bg 0: block 5: invalid block bitmap [ 224.455272][ T6983] playstation 0003:054C:09CC.000A: probe with driver playstation failed with error -22 [ 224.489170][ T9846] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 224.489201][ T9846] EXT4-fs (loop3): This should not happen!! Data will be lost [ 224.489201][ T9846] [ 224.489220][ T9846] EXT4-fs (loop3): Total free blocks count 0 [ 224.489236][ T9846] EXT4-fs (loop3): Free/Dirty block details [ 224.489268][ T9846] EXT4-fs (loop3): free_blocks=0 [ 224.489297][ T9846] EXT4-fs (loop3): dirty_blocks=66 [ 224.489313][ T9846] EXT4-fs (loop3): Block reservation details [ 224.489328][ T9846] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 224.599478][ T6983] usb 6-1: USB disconnect, device number 9 [ 224.716677][ T989] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 224.775075][ T9847] fido_id[9847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 224.870194][ T5760] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 225.021041][ T5760] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.022935][ T5760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.022964][ T5760] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.026707][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.026734][ T5760] usb 5-1: SerialNumber: syz [ 225.053151][ T5760] hub 5-1:1.0: bad descriptor, ignoring hub [ 225.053178][ T5760] hub 5-1:1.0: probe with driver hub failed with error -5 [ 225.060847][ T5760] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 225.430147][ T7006] usb 5-1: USB disconnect, device number 11 [ 225.550799][ T5937] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 225.704210][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.704265][ T5937] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 225.705539][ T5937] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 225.705565][ T5937] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 225.705588][ T5937] usb 2-1: config 8 has no interface number 0 [ 225.705630][ T5937] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 225.705661][ T5937] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 225.705692][ T5937] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 225.728853][ T9889] program syz.2.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.803080][ T6983] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 225.824712][ T5937] usb 2-1: string descriptor 0 read error: -22 [ 225.824858][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.853130][ T5937] metro_usb 2-1:8.109: Metrologic USB to Serial converter detected [ 225.884117][ T5937] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 225.980123][ T6983] usb 6-1: Using ep0 maxpacket: 32 [ 225.980965][ T6983] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 225.982275][ T6983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.036685][ T6983] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 226.089262][ T9885] loop0: detected capacity change from 0 to 32768 [ 226.106567][ T9885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1559 (9885) [ 226.133652][ T9885] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 226.133683][ T9885] BTRFS info (device loop0): using blake2b checksum algorithm [ 226.136747][ T9871] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 226.143834][ T7006] usb 2-1: USB disconnect, device number 6 [ 226.172047][ T7006] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 226.172622][ T7006] metro_usb 2-1:8.109: device disconnected [ 226.334727][ T9885] BTRFS info (device loop0): enabling ssd optimizations [ 226.334756][ T9885] BTRFS info (device loop0): turning on async discard [ 226.334775][ T9885] BTRFS info (device loop0): enabling free space tree [ 226.334797][ T9885] BTRFS info (device loop0): use zstd compression, level 3 [ 226.537167][ T5617] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 226.651370][ T9898] loop3: detected capacity change from 0 to 32768 [ 226.752871][ T9898] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 226.869123][ T6983] gspca_nw80x: reg_r err -71 [ 226.869206][ T6983] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 226.872207][ T6983] usb 6-1: USB disconnect, device number 10 [ 227.165100][ T5620] ocfs2: Unmounting device (7,3) on (node local) [ 227.497056][ T9943] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1580'. [ 228.155459][ T9967] loop5: detected capacity change from 0 to 2048 [ 228.174251][ T9967] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 228.202271][ T9973] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.206760][ T9974] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.296957][ T9972] loop3: detected capacity change from 0 to 4096 [ 228.317032][ T9972] ntfs3(loop3): ino=3, mi_enum_attr syzkaller syzkaller login: [ 228.668015][ T9987] ima: policy update failed [ 228.668383][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 228.668400][ T31] audit: type=1802 audit(1789786132.857:87): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1598" res=0 errno=0 [ 228.987225][ T9998] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 229.424315][T10015] loop1: detected capacity change from 0 to 256 [ 229.425424][T10015] exfat: Deprecated parameter 'namecase' [ 229.425458][T10015] exfat: Deprecated parameter 'utf8' [ 229.504670][T10015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 229.986557][T10026] loop1: detected capacity change from 0 to 2048 [ 229.996328][T10030] openvswitch: netlink: IP tunnel TTL not specified. [ 229.996360][T10030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.029060][ T5760] Process accounting resumed [ 230.100123][T10026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.228548][T10028] Process accounting resumed [ 230.362740][ T31] audit: type=1400 audit(1789786134.557:88): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=10038 comm="syz.4.1623" [ 230.363076][T10009] loop3: detected capacity change from 0 to 32768 [ 230.364470][T10039] sctp: [Deprecated]: syz.2.1622 (pid 10039) Use of int in max_burst socket option deprecated. [ 230.364470][T10039] Use struct sctp_assoc_value instead [ 230.372422][T10009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1608 (10009) [ 230.442717][T10009] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.442749][T10009] BTRFS info (device loop3): using crc32c checksum algorithm [ 230.567759][T10009] BTRFS info (device loop3): enabling ssd optimizations [ 230.567786][T10009] BTRFS info (device loop3): turning on flush-on-commit [ 230.567806][T10009] BTRFS info (device loop3): enabling free space tree [ 230.567825][T10009] BTRFS info (device loop3): enabling auto defrag [ 230.567845][T10009] BTRFS info (device loop3): use lzo compression, level 1 [ 230.567869][T10009] BTRFS info (device loop3): max_inline set to 4096 [ 230.694908][T10009] BTRFS critical (device loop3 state E): emergency shutdown [ 230.755066][ T49] BTRFS error (device loop3 state E): failed to run delalloc range, root=5 ino=260 folio=0 submit_bitmap=0 start=0 len=4096: -EROFS [ 230.758060][ T5620] BTRFS info (device loop3 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.994220][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1628'. [ 231.132353][T10069] netlink: 'syz.3.1627': attribute type 2 has an invalid length. [ 231.406923][T10069] ´: entered promiscuous mode [ 231.743986][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1638'. [ 231.795315][T10096] loop4: detected capacity change from 0 to 128 [ 231.868456][T10096] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 231.868514][T10096] hpfs: filesystem error: improperly stopped [ 231.868532][T10096] hpfs: You really don't want any checks? You are crazy... [ 231.902069][T10096] hpfs: hpfs_map_sector(): read error [ 231.902084][T10096] hpfs: code page support is disabled [ 231.902202][T10096] hpfs: hpfs_map_4sectors(): unaligned read [ 231.902272][T10096] hpfs: hpfs_map_4sectors(): unaligned read [ 231.902285][T10096] hpfs: filesystem error: unable to find root dir [ 232.203989][T10106] loop4: detected capacity change from 0 to 512 [ 232.258272][T10106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.258365][T10106] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.397222][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.497619][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 232.571924][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 232.571950][T10121] nbd: socks must be embedded in a SOCK_ITEM attr [ 233.981153][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 234.036189][T10170] loop4: detected capacity change from 0 to 512 [ 234.450264][ T5937] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.601847][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 234.602687][ T5937] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 234.603958][ T5937] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 234.603984][ T5937] usb 4-1: config 2 has no interface number 0 [ 234.604027][ T5937] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 234.604057][ T5937] usb 4-1: config 2 interface 88 has no altsetting 0 [ 234.606342][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 234.606368][ T5937] usb 4-1: Product: syz [ 234.606386][ T5937] usb 4-1: Manufacturer: syz [ 234.606403][ T5937] usb 4-1: SerialNumber: syz [ 234.717519][T10178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.931750][T10178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.551692][ T5937] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 235.551940][ T5937] asix 4-1:2.88: probe with driver asix failed with error -71 [ 235.592620][ T5937] usb 4-1: USB disconnect, device number 8 [ 236.125600][T10232] loop1: detected capacity change from 0 to 32768 [ 236.179791][T10232] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.287582][T10232] XFS (loop1): Ending clean mount [ 236.557615][T10267] loop5: detected capacity change from 0 to 256 [ 236.603604][ T5611] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.293177][T10292] netlink: 'syz.4.1729': attribute type 14 has an invalid length. [ 237.340586][ T31] audit: type=1326 audit(1789786141.517:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.1.1718" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6824d9e159 code=0x0 [ 237.386552][T10297] loop6: detected capacity change from 0 to 524287901 [ 237.744181][T10273] loop3: detected capacity change from 0 to 32768 [ 238.428450][T10328] loop1: detected capacity change from 0 to 256 [ 238.429539][T10326] loop3: detected capacity change from 0 to 164 [ 238.485420][T10328] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 238.644446][T10333] exfat: Deprecated parameter 'namecase' [ 238.644517][T10333] exfat: Deprecated parameter 'utf8' [ 238.755385][T10341] loop4: detected capacity change from 0 to 256 [ 239.413777][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 240.070376][T10392] loop5: detected capacity change from 0 to 512 [ 240.071387][T10392] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.097760][T10392] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.097782][T10392] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 240.123815][T10392] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1773: attempt to clear invalid blocks 2 len 1 [ 240.123850][T10392] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 240.124852][T10392] EXT4-fs (loop5): Remounting filesystem read-only [ 240.126968][T10392] EXT4-fs (loop5): 1 truncate cleaned up [ 240.155163][T10392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.183597][T10392] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 240.299170][T10404] overlay: filesystem on ./file0 is read-only [ 240.347036][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.461859][T10405] program syz.0.1778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.628728][T10412] input: syz0 as /devices/virtual/input/input14 [ 240.820003][ T7006] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.971988][ T7006] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 240.974801][ T7006] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.974851][ T7006] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.974878][ T7006] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.974905][ T7006] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.974950][ T7006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.477317][ T7006] gud 4-1:1.0: No supported pixel formats found [ 241.477353][ T7006] gud 4-1:1.0: probe with driver gud failed with error -22 [ 241.851044][ T7006] usb 4-1: USB disconnect, device number 9 [ 242.164162][T10459] kAFS: Invalid Command on /proc/fs/afs/cells file [ 242.168658][T10463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.522739][T10477] loop4: detected capacity change from 0 to 512 [ 242.541459][T10477] EXT4-fs: Ignoring removed orlov option [ 242.546638][T10477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.576198][T10477] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.1808: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 242.576251][T10477] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 242.579360][T10477] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1808: couldn't read orphan inode 16 (err -117) [ 242.579392][T10477] loop4: lost filesystem error report for type 5 error -117 [ 242.583395][T10477] EXT4-fs (loop4): 1 orphan inode deleted [ 242.590014][T10477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.646119][T10477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 242.723747][T10487] loop3: detected capacity change from 0 to 8 [ 242.868973][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.973442][T10498] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.1817'. [ 242.973510][T10498] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.1817'. [ 243.217203][T10506] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 243.217271][T10506] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 243.510151][ T7006] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.659962][ T7006] usb 1-1: Using ep0 maxpacket: 32 [ 243.660840][ T7006] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.662045][ T7006] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.663174][ T7006] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 243.663217][ T7006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.700019][ T7006] usb 1-1: config 0 descriptor?? [ 243.968967][ T7006] usb 1-1: USB disconnect, device number 10 [ 244.705844][T10525] loop5: detected capacity change from 0 to 40427 [ 244.720169][T10525] F2FS-fs (loop5): build fault injection rate: 14 [ 244.720191][T10525] F2FS-fs (loop5): build fault injection type: 0x30e4 [ 244.728252][T10525] F2FS-fs (loop5): invalid crc value [ 244.768260][T10525] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 245.089068][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 245.089098][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 245.129604][T10525] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 245.183666][T10525] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 245.348537][T10525] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0 [ 245.396010][ T31] audit: type=1800 audit(1789786149.587:90): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1829" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 245.430865][T10525] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0 [ 245.469054][T10525] bio_check_eod: 1080 callbacks suppressed [ 245.469071][T10525] syz.5.1829: attempt to access beyond end of device [ 245.469071][T10525] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 245.636980][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1857'. [ 245.692553][ T5612] syz-executor: attempt to access beyond end of device [ 245.692553][ T5612] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 245.708322][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 245.708356][ T5612] Tainted: [L]=SOFTLOCKUP [ 245.708366][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 245.708381][ T5612] Call Trace: [ 245.708391][ T5612] [ 245.708402][ T5612] dump_stack_lvl+0xe8/0x150 [ 245.708443][ T5612] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 245.708486][ T5612] f2fs_write_end_bio+0x1211/0x16e0 [ 245.708520][ T5612] ? blkg_put+0x22/0x240 [ 245.708575][ T5612] __submit_merged_bio+0x258/0x6a0 [ 245.708608][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.708638][ T5612] ? rcu_is_watching+0x16/0xb0 [ 245.708675][ T5612] __submit_merged_write_cond+0x3c9/0x4e0 [ 245.708722][ T5612] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 245.708775][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.708825][ T5612] f2fs_write_data_pages+0x2a27/0x36f0 [ 245.708863][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.708895][ T5612] ? __lock_acquire+0x747/0x2de0 [ 245.708963][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.709054][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709083][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709112][ T5612] ? __bfs+0x153/0x290 [ 245.709137][ T5612] ? __pfx_hlock_conflict+0x10/0x10 [ 245.709174][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709217][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709246][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709275][ T5612] ? __lock_acquire+0x1511/0x2de0 [ 245.709332][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.709374][ T5612] do_writepages+0x338/0x560 [ 245.709403][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709435][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709468][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709497][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 245.709544][ T5612] filemap_fdatawrite+0x1e9/0x2f0 [ 245.709576][ T5612] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 245.709654][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709688][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.709723][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 245.709764][ T5612] f2fs_sync_dirty_inodes+0x30e/0x830 [ 245.709809][ T5612] f2fs_write_checkpoint+0xa3d/0x2710 [ 245.709834][ T5612] ? __lock_acquire+0x747/0x2de0 [ 245.709898][ T5612] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 245.709923][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.710018][ T5612] kill_f2fs_super+0x2dd/0x700 [ 245.710054][ T5612] ? __pfx_kill_f2fs_super+0x10/0x10 [ 245.710095][ T5612] ? call_rcu+0x64d/0x8b0 [ 245.710124][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.710153][ T5612] ? lockdep_hardirqs_on+0x7b/0x110 [ 245.710184][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.710229][ T5612] deactivate_locked_super+0xbc/0x110 [ 245.710268][ T5612] cleanup_mnt+0x3d3/0x460 [ 245.710299][ T5612] task_work_run+0x1d9/0x270 [ 245.710332][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 245.710372][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 245.710398][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.710427][ T5612] ? rcu_is_watching+0x16/0xb0 [ 245.710463][ T5612] do_syscall_64+0x328/0x520 [ 245.710493][ T5612] ? trace_irq_disable+0x3b/0x140 [ 245.710523][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.710556][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.710581][ T5612] RIP: 0033:0x7f32ccf9f397 [ 245.710604][ T5612] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 245.710625][ T5612] RSP: 002b:00007ffe4238b378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 245.710651][ T5612] RAX: 0000000000000000 RBX: 00007f32cd0344bb RCX: 00007f32ccf9f397 [ 245.710668][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4238b430 [ 245.710684][ T5612] RBP: 00007ffe4238b430 R08: 00007ffe4238c430 R09: 00000000ffffffff [ 245.710701][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4238c4c0 [ 245.710718][ T5612] R13: 00007f32cd0344bb R14: 000000000003bf07 R15: 00007ffe4238c500 [ 245.710759][ T5612] [ 245.724723][ T5612] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 246.059163][T10593] tipc: Started in network mode [ 246.059196][T10593] tipc: Node identity ac14140f, cluster identity 4711 [ 246.072781][T10593] tipc: New replicast peer: 255.255.255.255 [ 246.074005][T10593] tipc: Enabled bearer , priority 10 [ 246.151717][ T6993] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 246.320816][ T6993] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 246.331269][ T6993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.331340][ T6993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.331367][ T6993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.331413][ T6993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.344673][ T6993] usb 1-1: config 0 descriptor?? [ 246.559592][T10603] batman_adv: batadv0: Adding interface: macvtap1 [ 246.559613][T10603] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.559645][T10603] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 246.809053][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.831913][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.846842][ T6993] ortek 0003:1223:3F07.000B: Fixing up logical maximum in report descriptor (Skycable) [ 246.849696][ T6993] hid_parser_main: 30 callbacks suppressed [ 246.849717][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849746][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849769][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x1 [ 246.849793][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849850][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849874][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849898][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849921][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849946][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.849973][ T6993] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 246.850038][ T6993] ortek 0003:1223:3F07.000B: unexpected long global item [ 246.853143][ T6993] ortek 0003:1223:3F07.000B: probe with driver ortek failed with error -22 [ 247.072939][T10616] loop3: detected capacity change from 0 to 16 [ 247.076446][ T6993] usb 1-1: USB disconnect, device number 11 [ 247.116049][T10616] erofs (device loop3): mounted with root inode @ nid 36. [ 247.176243][T10619] netlink: 8628 bytes leftover after parsing attributes in process `syz.5.1859'. [ 247.228587][ T5937] tipc: Node number set to 2886997007 ^}@‘Æ] *$%(*^:.[} devtmpfs[ 247.726867][T10641] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 247.937565][T10647] serio: Serial port ttyS3 [ 248.109043][T10656] loop4: detected capacity change from 0 to 1024 [ 248.584231][T10667] loop4: detected capacity change from 0 to 256 [ 248.609079][T10667] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 248.674035][T10667] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 249.030812][T10674] bcache: register_bcache() error : failed to open device [ 249.587350][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 249.855036][T10697] loop3: detected capacity change from 0 to 128 [ 249.881194][T10697] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.897838][T10697] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.916899][T10697] fscrypt (loop3, inode 12): Unsupported encryption flags (0x7a) [ 249.976226][T10672] loop4: detected capacity change from 0 to 32768 [ 249.995807][T10703] netlink: 'syz.5.1909': attribute type 10 has an invalid length. [ 250.034557][T10672] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 250.119203][T10672] XFS (loop4): Ending clean mount [ 250.352136][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.375585][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 250.472796][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.511520][T10723] loop1: detected capacity change from 0 to 1024 [ 250.517929][T10703] team0: Port device netdevsim1 added [ 250.859285][T10731] program syz.5.1916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.055188][T10735] loop1: detected capacity change from 0 to 2048 [ 251.125222][T10741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.466691][T10752] loop3: detected capacity change from 0 to 512 [ 251.481273][T10752] EXT4-fs: Ignoring removed i_version option [ 251.484441][T10752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.549737][T10752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.567687][T10752] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.700068][T10759] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1929'. [ 251.701025][T10763] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.885071][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.069953][ T7005] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 252.179425][T10784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 252.219934][ T7006] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 252.239068][ T7005] usb 2-1: Using ep0 maxpacket: 16 [ 252.246829][ T7005] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 252.248150][ T7005] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.248179][ T7005] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.248210][ T7005] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.248245][ T7005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.322318][ T7005] usb 2-1: config 0 descriptor?? [ 252.370690][ T7006] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 252.373384][ T7006] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 252.373444][ T7006] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.373476][ T7006] usb 1-1: config 0 interface 0 has no altsetting 0 [ 252.373512][ T7006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.436237][ T31] audit: type=1400 audit(1789786156.627:91): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=10791 comm="syz.3.1944" name="foo" offset=76 [ 252.469760][ T7006] usb 1-1: config 0 descriptor?? [ 252.479121][T10776] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 252.754072][ T7005] hid_parser_main: 7 callbacks suppressed [ 252.754098][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754125][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754150][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754201][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754227][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x2 [ 252.754252][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754277][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754301][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754356][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.754382][ T7005] pantherlord 0003:0810:0001.000C: unknown main item tag 0x0 [ 252.863413][ T7005] pantherlord 0003:0810:0001.000C: hidraw0: USB HID v0.0a Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 252.907082][ T7006] apple 0003:05AC:027A.000D: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 252.931143][ T7006] input: HID 05ac:027a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:027A.000D/input/input15 [ 252.966756][ T7005] usb 2-1: USB disconnect, device number 7 [ 253.138831][ T7006] apple 0003:05AC:027A.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 253.251728][T10815] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 253.251728][T10815] The task syz.3.1952 (10815) triggered the difference, watch for misbehavior. [ 253.258977][T10807] fido_id[10807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 253.426664][T10820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1956'. [ 253.954176][T10836] loop1: detected capacity change from 0 to 512 [ 253.996869][T10836] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1962: bad orphan inode 15 [ 253.996900][T10836] loop1: lost filesystem error report for type 5 error -117 [ 253.999856][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 253.999877][ C0] EXT4-fs (loop1): initial error at time 1789786158: ext4_orphan_get:1429 [ 253.999904][ C0] EXT4-fs (loop1): last error at time 1789786158: ext4_orphan_get:1429 [ 254.001808][T10836] ext4_test_bit(bit=14, block=5) = 0 [ 254.079586][T10836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.142086][T10836] EXT4-fs error (device loop1): __ext4_new_inode:1083: comm syz.1.1962: reserved inode found cleared - inode=1 [ 254.151359][T10836] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 254.273542][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.284993][T10849] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.390776][T10852] loop3: detected capacity change from 0 to 2048 [ 254.439363][ T31] audit: type=1800 audit(1789786158.627:92): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1971" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 254.922618][T10874] loop4: detected capacity change from 0 to 64 [ 254.964685][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.964745][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.092246][T10874] hfs: request for non-existent node 131072 in B*Tree [ 255.092266][T10874] hfs: request for non-existent node 131072 in B*Tree [ 255.232035][ T5937] usb 1-1: USB disconnect, device number 12 [ 255.240510][T10880] loop3: detected capacity change from 0 to 256 [ 255.327851][T10880] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 255.583122][ T5937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 255.742086][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 255.742826][ T5937] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 255.748083][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 255.780000][ T7006] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 255.780812][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.780838][ T5937] usb 1-1: Product: syz [ 255.780856][ T5937] usb 1-1: Manufacturer: syz [ 255.780873][ T5937] usb 1-1: SerialNumber: syz [ 255.819417][ T5937] usb 1-1: config 0 descriptor?? [ 255.835156][ T5937] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 255.845584][ T5937] usb 1-1: Detected FT232R [ 255.954087][ T7006] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 255.971742][ T7006] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.971778][ T7006] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.971810][ T7006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.971845][ T7006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.033992][ T7006] usb 5-1: config 0 descriptor?? [ 256.049175][ T5937] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 256.432651][ T5937] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 256.472279][T10901] loop3: detected capacity change from 0 to 4096 [ 256.495193][T10901] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 256.564681][ T7006] hid-multitouch 0003:0EEF:72C4.000E: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 256.617918][ T5937] usb 1-1: USB disconnect, device number 13 [ 256.664795][T10882] loop1: detected capacity change from 0 to 32768 [ 256.665693][T10901] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 256.772272][T10884] loop4: detected capacity change from 0 to 1024 [ 256.845968][T10884] ext2: Unknown parameter 'dont_appraise' [ 256.862942][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 256.863507][ T5937] ftdi_sio 1-1:0.0: device disconnected [ 256.965186][ T6993] usb 5-1: USB disconnect, device number 12 [ 257.247055][T10910] loop5: detected capacity change from 0 to 128 [ 257.272492][T10910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 257.272550][T10910] hpfs: filesystem error: improperly stopped [ 257.272567][T10910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 257.272585][T10910] hpfs: You really don't want any checks? You are crazy... [ 257.272599][T10910] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 257.272613][T10910] hpfs: code page support is disabled [ 257.278740][T10910] hpfs: hpfs_map_4sectors(): unaligned read [ 257.278814][T10910] hpfs: hpfs_map_4sectors(): unaligned read [ 257.278825][T10910] hpfs: filesystem error: unable to find root dir [ 257.737303][T10920] loop0: detected capacity change from 0 to 1024 [ 257.749036][T10920] EXT4-fs: Ignoring removed bh option [ 257.756905][T10920] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 257.757024][T10921] fuse: Bad value for 'fd' [ 257.817992][T10920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.867118][ T31] audit: type=1800 audit(1789786162.057:93): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2001" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 258.820767][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.139381][T10944] loop1: detected capacity change from 0 to 4096 [ 259.406868][T10944] ntfs3(loop1): failed to convert "0080" to koi8-ru [ 259.431107][T10944] ntfs3(loop1): failed to convert name for inode 1e. [ 259.432256][T10944] ntfs3(loop1): ino=1f, mi_enum_attr [ 259.432678][T10944] ntfs3(loop1): failed to convert "256c" to koi8-ru [ 259.706780][T10967] kAFS: Invalid Command on /proc/fs/afs/cells file [ 260.048887][T10976] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.404769][T10982] coredump: 769(syz.5.2026): format_corename failed, aborting core [ 260.433825][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2031'. [ 260.666205][T10999] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 261.060981][T11014] loop0: detected capacity change from 0 to 1024 [ 261.071416][T11014] EXT4-fs: Ignoring removed bh option [ 261.086581][T11014] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 261.124823][T11014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.248923][T11021] loop3: detected capacity change from 0 to 1024 [ 261.263238][T11021] EXT4-fs: Ignoring removed bh option [ 261.320224][T11021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.398878][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.400700][T11026] loop1: detected capacity change from 0 to 512 [ 261.466898][T11026] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2045: corrupted in-inode xattr: invalid ea_ino [ 261.466934][T11026] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.467378][T11026] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2045: couldn't read orphan inode 15 (err -117) [ 261.467410][T11026] loop1: lost filesystem error report for type 5 error -117 [ 261.514128][T11026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.634635][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.791823][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.055116][T11043] loop3: detected capacity change from 0 to 1024 [ 262.062486][T11043] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.062546][T11043] EXT4-fs: Ignoring removed orlov option [ 262.099143][T11043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.306105][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.381869][T11053] ip_tables: iptables: counters copy to user failed while replacing table [ 262.610560][T11057] overlayfs: upper fs does not support file handles, falling back to index=off. [ 262.610578][T11057] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 262.858007][T11067] loop3: detected capacity change from 0 to 256 [ 262.904860][T11067] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 263.017445][T11070] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.017536][T11070] syzkaller1: linktype set to 780 [ 263.420318][T11082] loop4: detected capacity change from 0 to 16 [ 263.426378][T11082] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 263.801084][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.801137][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.801177][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.801215][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.882555][T11092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.882656][T11092] IPv6: NLM_F_CREATE should be set when creating new route [ 263.882682][T11092] IPv6: NLM_F_CREATE should be set when creating new route [ 264.137812][T11100] loop3: detected capacity change from 0 to 64 [ 264.573800][T11111] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.847804][T11122] block2mtd: device name too long [ 265.358897][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 265.887291][T11152] loop3: detected capacity change from 0 to 256 [ 265.915897][T11150] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 266.243589][T11160] loop3: detected capacity change from 0 to 256 [ 266.289132][ T5622] Bluetooth: hci0: Zero size dump init pkt [ 266.304476][T11161] loop4: detected capacity change from 0 to 2048 [ 266.370487][T11161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 266.370510][T11161] UDF-fs: Scanning with blocksize 512 failed [ 266.414627][T11134] loop0: detected capacity change from 0 to 32768 [ 266.423506][T11134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2093 (11134) [ 266.480954][T11161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.522716][T11134] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.522749][T11134] BTRFS info (device loop0): using crc32c checksum algorithm [ 266.784948][T11134] BTRFS info (device loop0): enabling ssd optimizations [ 266.784978][T11134] BTRFS info (device loop0): turning on flush-on-commit [ 266.784998][T11134] BTRFS info (device loop0): enabling free space tree [ 266.785018][T11134] BTRFS info (device loop0): enabling auto defrag [ 266.785039][T11134] BTRFS info (device loop0): use lzo compression, level 1 [ 266.785061][T11134] BTRFS info (device loop0): max_inline set to 4096 [ 266.794854][T11181] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2109'. [ 266.958278][ T31] audit: type=1800 audit(1789786171.147:94): pid=11134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2093" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 267.278621][T11196] sd 0:0:1:0: PR command failed: 1026 [ 267.278674][T11196] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 267.278720][T11196] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 267.471111][ T5617] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.709086][T11204] loop1: detected capacity change from 0 to 128 [ 267.780973][T11204] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.148175][T11211] loop3: detected capacity change from 0 to 2048 [ 268.230493][T11211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.304278][T11211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 268.971836][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.041827][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.603299][T11205] loop4: detected capacity change from 0 to 32768 [ 270.338279][T11250] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2140'. [ 270.433741][T11253] loop3: detected capacity change from 0 to 512 [ 270.507630][T11253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.507728][T11253] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.675113][T11260] loop1: detected capacity change from 0 to 128 [ 270.786826][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.300091][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.451392][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 271.452861][ T5937] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 271.458356][ T5937] usb 5-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.458391][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.458428][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.474766][ T5937] usb 5-1: config 0 descriptor?? [ 271.662751][T11269] loop3: detected capacity change from 0 to 32768 [ 271.697936][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 271.699051][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 271.759190][T11269] JBD2: Ignoring recovery information on journal [ 271.821029][T11281] TCP: TCP_TX_DELAY enabled [ 271.894366][T11269] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 271.941800][ T5937] input: HID 046a:0027 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046A:0027.000F/input/input18 [ 272.011000][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 272.045989][ T5937] cherry 0003:046A:0027.000F: input,hidraw0: USB HID v80.04 Joystick [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 272.091228][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 272.121278][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 272.121396][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 272.121429][T11269] (syz.3.2147,11269,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 272.121455][T11269] (syz.3.2147,11269,0):ocfs2_quota_read:201 ERROR: status = -5 [ 272.121482][T11269] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 272.121661][T11269] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 272.121684][T11269] (syz.3.2147,11269,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 272.122343][T11269] (syz.3.2147,11269,0):ocfs2_mknod:319 ERROR: status = -5 [ 272.122386][T11269] (syz.3.2147,11269,0):ocfs2_mknod:513 ERROR: status = -5 [ 272.122410][T11269] (syz.3.2147,11269,0):ocfs2_mkdir:669 ERROR: status = -5 [ 272.228162][ T5937] usb 5-1: USB disconnect, device number 13 [ 272.266165][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 272.266288][T11269] (syz.3.2147,11269,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 272.266325][T11269] (syz.3.2147,11269,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 272.266350][T11269] (syz.3.2147,11269,0):ocfs2_quota_read:201 ERROR: status = -5 [ 272.325035][T11269] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 272.325178][T11269] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 272.325200][T11269] (syz.3.2147,11269,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 272.325291][T11269] (syz.3.2147,11269,0):ocfs2_symlink:1903 ERROR: status = -5 [ 272.325332][T11269] (syz.3.2147,11269,0):ocfs2_symlink:2089 ERROR: status = -5 [ 272.553544][T11293] dyndbg: expected <4096 bytes into control [ 272.624606][T11289] fido_id[11289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 272.672343][ T5620] ocfs2: Unmounting device (7,3) on (node local) [ 273.270456][ T7005] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 273.399771][T11315] trusted_key: encrypted_key: keyword 'updGte' not recognized [ 273.419868][ T7005] usb 5-1: Using ep0 maxpacket: 16 [ 273.421445][ T7005] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 273.425397][ T7005] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 254, using maximum allowed: 30 [ 273.425440][ T7005] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 273.425471][ T7005] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.425506][ T7005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.500897][ T7005] usb 5-1: config 0 descriptor?? [ 273.821963][T11331] loop1: detected capacity change from 0 to 512 [ 273.838995][T11331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 273.864686][T11331] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.2175: bad orphan inode 131083 [ 273.864717][T11331] loop1: lost filesystem error report for type 5 error -117 [ 273.886565][T11331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.940878][ T7005] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 274.101351][T11337] jffs2: notice: (11337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 274.151785][ T6983] usb 5-1: USB disconnect, device number 14 [ 274.191404][ T5937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 274.348130][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 274.357658][ T5937] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 274.371547][ T5937] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 274.371582][ T5937] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 274.371606][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 274.371631][ T5937] usb 2-1: config 1 has no interface number 0 [ 274.371674][ T5937] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.371705][ T5937] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 274.371751][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.466734][ T5937] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 275.172839][ T7005] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 275.321984][ T7005] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.342721][ T7005] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.342771][ T7005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 275.342803][ T7005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 275.342834][ T7005] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 275.345723][ T7005] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.345749][ T7005] usb 1-1: Manufacturer: syz [ 275.509349][ T7005] usb 1-1: config 0 descriptor?? [ 275.583236][ T5937] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 275.688817][T11360] rnbd_client L127: Can't parse path iýt­-$ζàÇÌwõ‘bAa¿< [ 275.688817][T11360] yÍ…×\¨ƒ@: -22 [ 275.829197][ T7006] usb 2-1: USB disconnect, device number 8 [ 275.848863][ T7006] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 275.860978][ T7005] rc_core: IR keymap rc-hauppauge not found [ 275.860994][ T7005] Registered IR keymap rc-empty [ 275.894270][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 275.912998][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 275.973506][ T7005] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 276.019951][ T7005] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 276.121247][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.143797][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.164905][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.180472][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.202700][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.225289][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.240182][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.262252][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.280088][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.306541][ T7005] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 276.340958][ T7005] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 276.340985][ T7005] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 276.446178][ T5937] usb 1-1: USB disconnect, device number 14 [ 276.482400][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.719637][T11377] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 276.724319][T11377] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 276.970229][T11384] i2c i2c-0: new_device: Missing parameters [ 277.309612][T11395] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.624604][T11407] loop3: detected capacity change from 0 to 764 [ 277.708839][T11405] loop0: detected capacity change from 0 to 4096 [ 277.806959][T11414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.907791][T11405] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 277.994498][T11405] Remounting filesystem read-only [ 277.994515][T11405] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 278.354108][T11430] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 278.412242][T11433] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 278.838050][T11445] rnbd_client L127: Can't parse path i: -93 [ 278.971878][T11447] loop4: detected capacity change from 0 to 256 [ 278.993058][T11447] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 279.019318][T11447] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 279.019344][T11447] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 279.019360][T11447] UDF-fs: Scanning with blocksize 512 failed [ 279.101668][T11447] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 279.121195][T11447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.418096][T11427] sctp: [Deprecated]: syz.2.2214 (pid 11427) Use of int in max_burst socket option. [ 279.418096][T11427] Use struct sctp_assoc_value instead [ 279.476781][T11454] bond0: no command found in arp_ip_targets file - use + or - [ 279.976628][T11473] loop3: detected capacity change from 0 to 256 [ 279.988633][T11473] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.020337][T11473] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.056227][T11477] loop1: detected capacity change from 0 to 131072 [ 281.060368][T11477] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 281.060396][T11477] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 281.061387][T11477] F2FS-fs (loop1): invalid crc value [ 281.074284][T11481] loop0: detected capacity change from 0 to 256 [ 281.174327][ T5622] Bluetooth: hci0: Zero size dump init pkt [ 281.177434][T11477] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 281.201774][T11477] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 281.201798][T11477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 281.206493][T11481] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 281.330767][T11493] loop3: detected capacity change from 0 to 256 [ 281.410530][T11493] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 281.410558][T11493] FAT-fs (loop3): Filesystem has been set read-only [ 282.299944][ T6983] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.308143][T11521] loop1: detected capacity change from 0 to 16 [ 282.344683][T11521] erofs (device loop1): mounted with root inode @ nid 36. [ 282.369782][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 282.420328][ T5622] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 282.449940][ T6983] usb 1-1: Using ep0 maxpacket: 8 [ 282.452033][ T6983] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 282.455823][ T6983] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 282.455850][ T6983] usb 1-1: config 0 has no interface number 0 [ 282.462847][ T6983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.462872][ T6983] usb 1-1: Product: syz [ 282.462889][ T6983] usb 1-1: Manufacturer: syz [ 282.462906][ T6983] usb 1-1: SerialNumber: syz [ 282.479474][ T6983] usb 1-1: config 0 descriptor?? [ 282.537787][T11521] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 282.537915][T11521] erofs (device loop1): read error -117 @ 1 of nid 89 [ 282.538149][ T31] audit: type=1800 audit(1789786186.727:95): pid=11521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2246" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 282.729928][ T6983] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 282.753759][ T6983] usb 1-1: USB disconnect, device number 15 [ 282.818203][ T5767] input: syz0 as /devices/virtual/misc/uhid/0005:0003:0386.0011/input/input20 [ 282.890624][ T5767] hid-generic 0005:0003:0386.0011: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 283.193613][T11543] 9p: Bad value for 'rfdno' [ 283.209526][T11538] fido_id[11538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.631860][T11553] loop0: detected capacity change from 0 to 1024 [ 283.673678][T11553] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 283.701086][T11553] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 283.724674][T11553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.855318][T11560] loop4: detected capacity change from 0 to 1024 [ 283.955327][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.061236][ T6983] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 284.211217][ T6983] usb 4-1: Using ep0 maxpacket: 16 [ 284.213322][ T6983] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 284.214599][ T6983] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 284.221503][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.221530][ T6983] usb 4-1: Product: syz [ 284.221547][ T6983] usb 4-1: Manufacturer: syz [ 284.221564][ T6983] usb 4-1: SerialNumber: syz [ 284.252412][ T6983] usb 4-1: config 0 descriptor?? [ 284.275268][ T6983] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 284.291308][ T6983] usb 4-1: Detected FT232R [ 284.487635][ T6983] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 284.489508][ T6983] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 284.491498][ T6983] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 284.503372][ T6983] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 284.518436][ T6983] usb 4-1: USB disconnect, device number 10 [ 284.549097][ T6983] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 284.579974][ T6983] ftdi_sio 4-1:0.0: device disconnected [ 285.020563][T11583] netlink: 'syz.1.2284': attribute type 2 has an invalid length. [ 285.020596][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 285.121547][T11567] loop0: detected capacity change from 0 to 32768 [ 285.225431][T11567] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 285.446171][T11567] (syz.0.2276,11567,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 285.717996][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 285.754559][T11609] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2296'. [ 286.071329][T11622] loop3: detected capacity change from 0 to 512 [ 286.081723][T11622] EXT4-fs: Ignoring removed oldalloc option [ 286.131951][T11622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.132047][T11622] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.161998][T11622] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.2302: corrupted xattr block 32: invalid ea_ino [ 286.297322][T11629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2308'. [ 286.383003][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.476473][T11637] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2304'. [ 286.731508][T11649] openvswitch: netlink: Unknown key attributes 1 [ 286.747912][ T31] audit: type=1400 audit(1789786190.937:96): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=11643 comm="syz.0.2297" [ 287.070699][T11648] syz.2.2314 (11648) used greatest stack depth: 16544 bytes left [ 287.674815][ T31] audit: type=1400 audit(1789786191.867:97): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=11681 comm="syz.2.2330" name="//o" offset=45 [ 287.953432][T11693] xt_hashlimit: size too large, truncated to 1048576 [ 287.983832][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 289.056688][T11728] netlink: 'syz.0.2349': attribute type 11 has an invalid length. [ 289.691225][T11748] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2359'. [ 289.711062][T11719] loop1: detected capacity change from 0 to 32768 [ 289.798805][T11719] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 290.113511][T11762] loop4: detected capacity change from 0 to 1024 [ 290.297390][T11766] loop3: detected capacity change from 0 to 24 [ 290.328230][T11766] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 290.376728][T11766] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 290.920188][ T62] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.931142][ T989] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.931187][ T989] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.931227][ T989] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.983716][ T5611] ocfs2: Unmounting device (7,1) on (node local) [ 291.073348][ T31] audit: type=1400 audit(1789786195.267:98): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=11777 comm="syz.4.2371" name="p" offset=79 [ 291.360549][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 291.360580][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'. [ 291.582596][T11798] zram: failed to load dictionary d (err=-2) [ 291.937145][T11811] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 292.140636][T11815] vlan2: entered promiscuous mode [ 292.145241][T11815] syz_tun: entered promiscuous mode [ 293.156747][T11820] loop4: detected capacity change from 0 to 32768 [ 293.229440][T11820] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 293.292236][T11820] (syz.4.2392,11820,0):ocfs2_check_dir_entry:315 ERROR: directory entry (#65: offset=312) too close to end or out-of-bounds [ 293.475997][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 293.907859][T11866] loop3: detected capacity change from 0 to 64 [ 294.033558][T11866] syz.3.2413: attempt to access beyond end of device [ 294.033558][T11866] loop3: rw=8388608, sector=3584, nr_sectors = 2 limit=64 [ 294.033593][T11866] buffer_io_error: 25 callbacks suppressed [ 294.033607][T11866] Buffer I/O error on dev loop3, logical block 1792, async page read [ 294.035667][T11866] syz.3.2413: attempt to access beyond end of device [ 294.035667][T11866] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 294.035698][T11866] Buffer I/O error on dev loop3, logical block 56576, async page read [ 294.433916][ T31] audit: type=1326 audit(1789786198.617:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.433977][ T31] audit: type=1326 audit(1789786198.627:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.505661][ T31] audit: type=1326 audit(1789786198.697:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.505719][ T31] audit: type=1326 audit(1789786198.697:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.505769][ T31] audit: type=1326 audit(1789786198.697:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.506310][ T31] audit: type=1326 audit(1789786198.697:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.508357][ T31] audit: type=1326 audit(1789786198.697:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.508413][ T31] audit: type=1326 audit(1789786198.697:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.602290][ T31] audit: type=1326 audit(1789786198.697:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.602345][ T31] audit: type=1326 audit(1789786198.787:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2420" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc99e159 code=0x7ffc0000 [ 294.682716][T11890] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 295.318636][T11908] loop0: detected capacity change from 0 to 512 [ 295.349219][T11908] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 296.002862][T11896] loop4: detected capacity change from 0 to 32768 [ 296.028227][T11896] (syz.4.2427,11896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.046317][T11896] (syz.4.2427,11896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.105483][T11920] loop3: detected capacity change from 0 to 4096 [ 296.248844][T11896] JBD2: Ignoring recovery information on journal [ 296.306894][T11922] loop0: detected capacity change from 0 to 32768 [ 296.307957][T11922] xfs: Deprecated parameter 'ikeep' [ 296.307976][T11922] XFS: ikeep mount option is deprecated. [ 296.369876][T11922] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.434803][T11920] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 296.447594][T11896] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 296.448495][T11922] XFS (loop0): Ending clean mount [ 296.456473][T11896] (syz.4.2427,11896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 296.467865][T11922] XFS (loop0): Quotacheck needed: Please wait. [ 296.551376][T11896] (syz.4.2427,11896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 296.578866][T11896] (syz.4.2427,11896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 296.578981][T11896] (syz.4.2427,11896,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 296.579014][T11896] (syz.4.2427,11896,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 296.579040][T11896] (syz.4.2427,11896,1):ocfs2_quota_read:201 ERROR: status = -5 [ 296.579177][T11896] (syz.4.2427,11896,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 296.579268][T11896] (syz.4.2427,11896,1):ocfs2_mknod:319 ERROR: status = -5 [ 296.579309][T11896] (syz.4.2427,11896,1):ocfs2_mknod:513 ERROR: status = -5 [ 296.582022][T11920] ntfs3(loop3): failed to convert "0000" to iso8859-1 [ 296.584151][T11896] (syz.4.2427,11896,1):ocfs2_mkdir:669 ERROR: status = -5 [ 296.633928][T11922] XFS (loop0): Quotacheck: Done. [ 296.724351][T11896] (syz.4.2427,11896,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 296.724492][T11896] (syz.4.2427,11896,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 296.724526][T11896] (syz.4.2427,11896,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 296.724552][T11896] (syz.4.2427,11896,0):ocfs2_quota_read:201 ERROR: status = -5 [ 296.724680][T11896] (syz.4.2427,11896,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 296.724764][T11896] (syz.4.2427,11896,0):ocfs2_symlink:1903 ERROR: status = -5 [ 296.724802][T11896] (syz.4.2427,11896,0):ocfs2_symlink:2089 ERROR: status = -5 [ 296.739386][ T5617] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.138914][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 297.235151][T11945] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.2446'. [ 297.416443][T11950] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2449'. [ 297.471927][T11950] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2449'. [ 297.776945][T11963] bond0: invalid ARP target specified [ 297.864915][T11961] loop3: detected capacity change from 0 to 4096 [ 297.997714][T11961] ntfs3(loop3): ino=9, mi_enum_attr [ 297.997777][T11961] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 297.998592][T11961] ntfs3(loop3): ino=9, mi_enum_attr [ 297.998689][T11961] ntfs3(loop3): ino=b, mi_enum_attr [ 297.998768][T11961] ntfs3(loop3): Failed to load $Extend (-22). [ 297.998787][T11961] ntfs3(loop3): Failed to initialize $Extend. [ 298.236123][T11961] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 298.553973][ T6983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 298.712732][ T6983] usb 2-1: Using ep0 maxpacket: 32 [ 298.716636][ T6983] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 298.729271][ T6983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.748837][ T6983] usb 2-1: config 0 descriptor?? [ 298.985084][ T6983] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 299.001551][ T6983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.010345][ T6983] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 299.010394][ T6983] usb 2-1: media controller created [ 299.089404][ T6983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.224883][ T6983] az6027: usb out operation failed. (-71) [ 299.227040][ T6983] az6027: usb out operation failed. (-71) [ 299.227057][ T6983] stb0899_attach: Driver disabled by Kconfig [ 299.227068][ T6983] az6027: no front-end attached [ 299.227068][ T6983] [ 299.230623][ T6983] az6027: usb out operation failed. (-71) [ 299.230640][ T6983] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 299.240773][ T6983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 299.263350][ T6983] dvb-usb: schedule remote query interval to 400 msecs. [ 299.263370][ T6983] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 299.273536][ T6983] usb 2-1: USB disconnect, device number 9 [ 299.554913][ T6983] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 300.573544][T12039] UBIFS error (pid: 12039): cannot open "c:::", error -22 [ 300.728536][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 301.144179][T12058] loop0: detected capacity change from 0 to 512 [ 301.166266][T12058] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2496: bg 0: block 5: invalid block bitmap [ 301.166299][T12058] loop0: lost filesystem error report for type 5 error -117 [ 301.170016][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 301.170038][ C1] EXT4-fs (loop0): initial error at time 1789786205: ext4_validate_block_bitmap:436 [ 301.170065][ C1] EXT4-fs (loop0): last error at time 1789786205: ext4_validate_block_bitmap:436 [ 301.238768][T12058] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 301.238801][T12058] loop0: lost filesystem error report for type 5 error -117 [ 301.239307][T12058] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2496: invalid indirect mapped block 3 (level 2) [ 301.239344][T12058] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 301.271605][T12058] EXT4-fs (loop0): 1 orphan inode deleted [ 301.271632][T12058] EXT4-fs (loop0): 1 truncate cleaned up [ 301.311379][T12058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.427894][T12068] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 301.490753][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.797476][T12082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2506'. [ 301.807992][T12082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2506'. [ 302.709865][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 302.733308][ T6983] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 302.764308][T12107] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 302.857934][T12080] loop0: detected capacity change from 0 to 40427 [ 302.879155][T12080] F2FS-fs (loop0): invalid crc value [ 302.886535][ T6983] usb 4-1: Using ep0 maxpacket: 32 [ 302.893415][ T6983] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 302.894615][ T6983] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 302.894641][ T6983] usb 4-1: config 0 has no interface number 0 [ 302.897821][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.897847][ T6983] usb 4-1: Product: syz [ 302.897865][ T6983] usb 4-1: Manufacturer: syz [ 302.897882][ T6983] usb 4-1: SerialNumber: syz [ 302.960878][ T6983] usb 4-1: config 0 descriptor?? [ 302.980235][ T6983] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 303.201725][ T6983] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 303.232784][ T6983] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 303.367448][T12080] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 303.447243][T12080] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 303.590676][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 303.593022][ T6983] usb 4-1: USB disconnect, device number 11 [ 303.642239][ T6983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 303.679668][ T6983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 303.680532][ T6983] quatech2 4-1:0.51: device disconnected [ 303.798593][ T5617] syz-executor: attempt to access beyond end of device [ 303.798593][ T5617] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.834679][T12125] loop1: detected capacity change from 0 to 512 [ 303.844285][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 303.844320][ T5617] Tainted: [L]=SOFTLOCKUP [ 303.844330][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 303.844345][ T5617] Call Trace: [ 303.844356][ T5617] [ 303.844366][ T5617] dump_stack_lvl+0xe8/0x150 [ 303.844408][ T5617] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 303.844451][ T5617] f2fs_write_end_bio+0x1211/0x16e0 [ 303.844482][ T5617] ? blkg_put+0x22/0x240 [ 303.844535][ T5617] __submit_merged_bio+0x258/0x6a0 [ 303.844569][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.844598][ T5617] ? rcu_is_watching+0x16/0xb0 [ 303.844643][ T5617] __submit_merged_write_cond+0x3c9/0x4e0 [ 303.844690][ T5617] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 303.844743][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.844783][ T5617] f2fs_write_data_pages+0x2a27/0x36f0 [ 303.844867][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 303.844904][ T5617] ? is_bpf_text_address+0x26/0x2b0 [ 303.844951][ T5617] ? arch_stack_walk+0xfb/0x150 [ 303.845015][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845044][ T5617] ? add_lock_to_list+0xc7/0x100 [ 303.845079][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845107][ T5617] ? __lock_acquire+0x1511/0x2de0 [ 303.845166][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845195][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 303.845237][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845271][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845300][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 303.845336][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 303.845378][ T5617] do_writepages+0x338/0x560 [ 303.845406][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845438][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845471][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845500][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 303.845541][ T5617] filemap_fdatawrite+0x1e9/0x2f0 [ 303.845574][ T5617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 303.845650][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845682][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.845717][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 303.845759][ T5617] f2fs_sync_dirty_inodes+0x30e/0x830 [ 303.845808][ T5617] f2fs_write_checkpoint+0xa3d/0x2710 [ 303.845835][ T5617] ? __lock_acquire+0x747/0x2de0 [ 303.845899][ T5617] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 303.845925][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.846020][ T5617] kill_f2fs_super+0x2dd/0x700 [ 303.846057][ T5617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 303.846098][ T5617] ? call_rcu+0x64d/0x8b0 [ 303.846128][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.846157][ T5617] ? lockdep_hardirqs_on+0x7b/0x110 [ 303.846189][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.846235][ T5617] deactivate_locked_super+0xbc/0x110 [ 303.846274][ T5617] cleanup_mnt+0x3d3/0x460 [ 303.846305][ T5617] task_work_run+0x1d9/0x270 [ 303.846338][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 303.846379][ T5617] exit_to_user_mode_loop+0x204/0x770 [ 303.846405][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.846434][ T5617] ? rcu_is_watching+0x16/0xb0 [ 303.846470][ T5617] do_syscall_64+0x328/0x520 [ 303.846501][ T5617] ? trace_irq_disable+0x3b/0x140 [ 303.846527][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.846560][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.846585][ T5617] RIP: 0033:0x7fbe7a19f397 [ 303.846608][ T5617] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 303.846634][ T5617] RSP: 002b:00007fff3e42cce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 303.846660][ T5617] RAX: 0000000000000000 RBX: 00007fbe7a2344bb RCX: 00007fbe7a19f397 [ 303.846678][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3e42cda0 [ 303.846694][ T5617] RBP: 00007fff3e42cda0 R08: 00007fff3e42dda0 R09: 00000000ffffffff [ 303.846712][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3e42de30 [ 303.846729][ T5617] R13: 00007fbe7a2344bb R14: 000000000004a21c R15: 00007fff3e42de70 [ 303.846769][ T5617] [ 303.872493][ T5617] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 303.887684][T12125] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 303.887703][T12125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 303.887941][T12125] EXT4-fs (loop1): orphan cleanup on readonly fs [ 303.891466][T12125] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.2526: iget: bad i_size value: 12154761577498 [ 303.891498][T12125] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 303.892996][T12125] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2526: couldn't read orphan inode 13 (err -117) [ 303.893028][T12125] loop1: lost filesystem error report for type 5 error -117 [ 303.932956][T12125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 304.030185][T12125] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2526: dx entry: limit 65535 != root limit 120 [ 304.030219][T12125] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2526: Corrupt directory, running e2fsck is recommended [ 304.296172][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.751823][T12137] loop1: detected capacity change from 0 to 40427 [ 305.771683][T12137] F2FS-fs (loop1): Image doesn't support compression [ 305.771705][T12137] F2FS-fs (loop1): build fault injection rate: 690 [ 305.777289][T12137] F2FS-fs (loop1): invalid crc value [ 306.035933][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 306.035954][ T31] audit: type=1326 audit(1789786210.227:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.036006][ T31] audit: type=1326 audit(1789786210.227:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060385][ T31] audit: type=1326 audit(1789786210.237:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060441][ T31] audit: type=1326 audit(1789786210.237:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060491][ T31] audit: type=1326 audit(1789786210.237:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060540][ T31] audit: type=1326 audit(1789786210.237:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060590][ T31] audit: type=1326 audit(1789786210.247:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060644][ T31] audit: type=1326 audit(1789786210.247:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.060694][ T31] audit: type=1326 audit(1789786210.247:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.074118][ T31] audit: type=1326 audit(1789786210.267:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.0.2543" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbe7a19e159 code=0x7ffc0000 [ 306.306087][T12137] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 306.358409][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 306.391464][T12137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 306.751011][ T6993] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 306.911917][ T6993] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 306.913138][ T6993] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 306.913165][ T6993] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 306.913188][ T6993] usb 1-1: config 0 has no interface number 0 [ 306.915919][ T6993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.915945][ T6993] usb 1-1: Product: syz [ 306.915962][ T6993] usb 1-1: Manufacturer: syz [ 306.915979][ T6993] usb 1-1: SerialNumber: syz [ 306.995173][ T6993] usb 1-1: config 0 descriptor?? [ 307.418172][ T6993] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 307.418211][ T6993] uvcvideo 1-1:0.64: No valid video chain found. [ 307.487902][T12201] loop4: detected capacity change from 0 to 4096 [ 307.544107][T12206] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.544654][T12201] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 307.579765][T12201] NILFS (loop4): mounting fs with errors [ 307.648727][ T6993] usb 1-1: USB disconnect, device number 16 [ 308.553887][T12236] ------------[ cut here ]------------ [ 308.553904][T12236] err == -EMSGSIZE [ 308.553913][T12236] WARNING: net/core/rtnetlink.c:4599 at rtmsg_ifinfo_build_skb+0x21c/0x260, CPU#1: syz.5.2574/12236 [ 308.579367][T12236] Modules linked in: [ 308.584891][T12236] CPU: 1 UID: 0 PID: 12236 Comm: syz.5.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.598281][T12236] Tainted: [L]=SOFTLOCKUP [ 308.603659][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 308.615767][T12236] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 308.623196][T12236] Code: f6 ba 01 00 00 00 89 e9 e8 21 03 3b 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 18 57 f7 cc e8 a5 a9 0e f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 308.646202][T12242] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2577'. [ 308.657521][T12236] RSP: 0018:ffffc9000601e7c8 EFLAGS: 00010287 [ 308.665028][T12236] RAX: ffffffff89b928db RBX: 1ffff1100a687c21 RCX: 0000000000080000 [ 308.674631][T12236] RDX: ffffc900060c9000 RSI: 0000000000005f4d RDI: 0000000000005f4e [ 308.684217][T12236] RBP: 00000000ffffffa6 R08: ffff888053660000 R09: fffff52000c03ca0 [ 308.693800][T12236] R10: 0000000000000020 R11: 0000000000000002 R12: 0000000000000000 [ 308.703407][T12236] R13: 0000000000000000 R14: ffff888022f83640 R15: ffff88805343e000 [ 308.713024][T12236] FS: 00007f32cde096c0(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 308.723814][T12236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.731748][T12236] CR2: 00007f6824deb840 CR3: 0000000055fdc000 CR4: 0000000000350ef0 [ 308.741390][T12236] Call Trace: [ 308.745319][T12236] [ 308.748828][T12236] rtnetlink_event+0x1b7/0x270 [ 308.754594][T12236] notifier_call_chain+0x1a5/0x3d0 [ 308.760794][T12236] netif_disable_lro+0xdd/0x4b0 [ 308.766610][T12236] ? __pfx_netif_disable_lro+0x10/0x10 [ 308.773203][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.780007][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.786760][T12236] ? __local_bh_enable_ip+0xd6/0x140 [ 308.793131][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.799969][T12236] ? neigh_parms_alloc+0x404/0x500 [ 308.806111][T12236] inetdev_init+0x180/0x4d0 [ 308.811591][T12236] inetdev_event+0x307/0x15e0 [ 308.817206][T12236] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 308.824873][T12236] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 308.833165][T12236] ? __pfx_inetdev_event+0x10/0x10 [ 308.839318][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.846120][T12236] notifier_call_chain+0x1a5/0x3d0 [ 308.852328][T12236] register_netdevice+0x18a4/0x1eb0 [ 308.858591][T12236] ? __pfx_register_netdevice+0x10/0x10 [ 308.865323][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.872141][T12236] macsec_newlink+0x706/0x1200 [ 308.877877][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 308.884064][T12236] ? rcu_is_watching+0x16/0xb0 [ 308.889782][T12236] ? __pfx_macsec_newlink+0x10/0x10 [ 308.896053][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 308.902199][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.908959][T12236] ? __kvmalloc_node_noprof+0x52f/0x820 [ 308.915639][T12236] ? __kvmalloc_node_noprof+0x345/0x820 [ 308.922317][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 308.928438][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 308.934609][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.941406][T12236] ? validate_linkmsg+0x765/0x950 [ 308.947436][T12236] ? rtnl_create_link+0xa04/0xd70 [ 308.953544][T12236] ? __pfx_macsec_newlink+0x10/0x10 [ 308.959841][T12236] rtnl_newlink_create+0x305/0x7b0 [ 308.965984][T12236] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 308.972818][T12236] ? __pfx___mutex_lock+0x10/0x10 [ 308.978845][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.985663][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.992464][T12236] ? ns_capable+0x89/0xe0 [ 308.997675][T12236] rtnl_newlink+0x166d/0x1c30 [ 309.003352][T12236] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.009383][T12236] ? do_syscall_64+0x166/0x520 [ 309.015147][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.022511][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.029269][T12236] ? kasan_quarantine_put+0xbb/0x1f0 [ 309.035646][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.042424][T12236] ? lockdep_hardirqs_on+0x7b/0x110 [ 309.048660][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.055464][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.062254][T12236] ? kmem_cache_free+0x182/0x650 [ 309.068182][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.074973][T12236] ? __lock_acquire+0x747/0x2de0 [ 309.080934][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.087691][T12236] ? __local_bh_enable_ip+0xd6/0x140 [ 309.094065][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.100863][T12236] ? lockdep_hardirqs_on+0x7b/0x110 [ 309.107091][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.113889][T12236] ? __local_bh_enable_ip+0xd6/0x140 [ 309.120357][T12236] ? __dev_queue_xmit+0x29b/0x3820 [ 309.126510][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.133321][T12236] ? lock_acquire+0x115/0x350 [ 309.138935][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.145765][T12236] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.151820][T12236] rtnetlink_rcv_msg+0x802/0xc00 [ 309.157746][T12236] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 309.163904][T12236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.170489][T12236] ? ref_tracker_free+0x689/0x830 [ 309.176514][T12236] ? __pfx_ref_tracker_free+0x10/0x10 [ 309.183006][T12236] netlink_rcv_skb+0x226/0x4a0 [ 309.188727][T12236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.195300][T12236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.201694][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.207931][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.214226][T12236] netlink_unicast+0x7bd/0x940 [ 309.220004][T12236] netlink_sendmsg+0x813/0xb40 [ 309.225719][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.232096][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.238855][T12236] ? apparmor_socket_sendmsg+0x98/0x360 [ 309.245549][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.252348][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.258680][T12236] sock_sendmsg_nosec+0x13a/0x180 [ 309.264742][T12236] ____sys_sendmsg+0x54e/0x850 [ 309.270516][T12236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.276863][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.284217][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.291022][T12236] ? import_iovec+0x73/0xa0 [ 309.296434][T12236] ___sys_sendmsg+0x2a5/0x360 [ 309.302099][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.308852][T12236] ? __lock_acquire+0x747/0x2de0 [ 309.314816][T12236] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.321103][T12236] ? futex_wait+0x2a2/0x390 [ 309.326552][T12236] ? __fget_files+0x2a/0x420 [ 309.332085][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.338838][T12236] ? __fget_files+0x3a2/0x420 [ 309.344501][T12236] __x64_sys_sendmsg+0x1b1/0x290 [ 309.350453][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.357207][T12236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.363990][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.370795][T12236] do_syscall_64+0x166/0x520 [ 309.376296][T12236] ? trace_irq_disable+0x3b/0x140 [ 309.382358][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.389638][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.396732][T12236] RIP: 0033:0x7f32ccf9e159 [ 309.402065][T12236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.425632][T12236] RSP: 002b:00007f32cde09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.435758][T12236] RAX: ffffffffffffffda RBX: 00007f32cd225fa0 RCX: 00007f32ccf9e159 [ 309.445868][T12236] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 309.455466][T12236] RBP: 00007f32cd03506b R08: 0000000000000000 R09: 0000000000000000 [ 309.465049][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.474645][T12236] R13: 00007f32cd226038 R14: 00007f32cd225fa0 R15: 00007ffe4238c108 [ 309.484288][T12236] [ 309.487896][T12236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 309.496613][T12236] CPU: 1 UID: 0 PID: 12236 Comm: syz.5.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.509717][T12236] Tainted: [L]=SOFTLOCKUP [ 309.514880][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 309.526926][T12236] Call Trace: [ 309.530841][T12236] [ 309.534338][T12236] vpanic+0x56d/0xa60 [ 309.539116][T12236] ? __pfx__printk+0x10/0x10 [ 309.544614][T12236] ? __pfx_vpanic+0x10/0x10 [ 309.550014][T12236] ? is_bpf_text_address+0x292/0x2b0 [ 309.556348][T12236] ? is_bpf_text_address+0x26/0x2b0 [ 309.562594][T12236] panic+0xc5/0xd0 [ 309.567060][T12236] ? __pfx_panic+0x10/0x10 [ 309.572379][T12236] __warn+0x315/0x4c0 [ 309.577159][T12236] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 309.583808][T12236] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 309.590445][T12236] __report_bug+0x276/0x570 [ 309.595841][T12236] ? do_syscall_64+0x166/0x520 [ 309.601547][T12236] ? 0xffffffff81000000 [ 309.606513][T12236] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 309.613154][T12236] ? __pfx___report_bug+0x10/0x10 [ 309.619193][T12236] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 309.625829][T12236] report_bug+0x16b/0x220 [ 309.631018][T12236] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 309.637650][T12236] ? rtmsg_ifinfo_build_skb+0x21e/0x260 [ 309.644289][T12236] handle_bug+0x9c/0x200 [ 309.649369][T12236] exc_invalid_op+0x1a/0x50 [ 309.654760][T12236] asm_exc_invalid_op+0x1a/0x20 [ 309.660560][T12236] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 309.667931][T12236] Code: f6 ba 01 00 00 00 89 e9 e8 21 03 3b 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 18 57 f7 cc e8 a5 a9 0e f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 309.691440][T12236] RSP: 0018:ffffc9000601e7c8 EFLAGS: 00010287 [ 309.698707][T12236] RAX: ffffffff89b928db RBX: 1ffff1100a687c21 RCX: 0000000000080000 [ 309.708254][T12236] RDX: ffffc900060c9000 RSI: 0000000000005f4d RDI: 0000000000005f4e [ 309.717802][T12236] RBP: 00000000ffffffa6 R08: ffff888053660000 R09: fffff52000c03ca0 [ 309.727349][T12236] R10: 0000000000000020 R11: 0000000000000002 R12: 0000000000000000 [ 309.736894][T12236] R13: 0000000000000000 R14: ffff888022f83640 R15: ffff88805343e000 [ 309.746442][T12236] ? rtmsg_ifinfo_build_skb+0x21b/0x260 [ 309.753084][T12236] ? rtmsg_ifinfo_build_skb+0x21b/0x260 [ 309.759729][T12236] rtnetlink_event+0x1b7/0x270 [ 309.765443][T12236] notifier_call_chain+0x1a5/0x3d0 [ 309.771584][T12236] netif_disable_lro+0xdd/0x4b0 [ 309.777395][T12236] ? __pfx_netif_disable_lro+0x10/0x10 [ 309.783940][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.790690][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.797435][T12236] ? __local_bh_enable_ip+0xd6/0x140 [ 309.803761][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.810503][T12236] ? neigh_parms_alloc+0x404/0x500 [ 309.816637][T12236] inetdev_init+0x180/0x4d0 [ 309.822040][T12236] inetdev_event+0x307/0x15e0 [ 309.827640][T12236] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 309.835231][T12236] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 309.843447][T12236] ? __pfx_inetdev_event+0x10/0x10 [ 309.849568][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.856319][T12236] notifier_call_chain+0x1a5/0x3d0 [ 309.862457][T12236] register_netdevice+0x18a4/0x1eb0 [ 309.868710][T12236] ? __pfx_register_netdevice+0x10/0x10 [ 309.875373][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.882129][T12236] macsec_newlink+0x706/0x1200 [ 309.887857][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 309.893976][T12236] ? rcu_is_watching+0x16/0xb0 [ 309.899685][T12236] ? __pfx_macsec_newlink+0x10/0x10 [ 309.905915][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 309.912029][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.918774][T12236] ? __kvmalloc_node_noprof+0x52f/0x820 [ 309.925421][T12236] ? __kvmalloc_node_noprof+0x345/0x820 [ 309.932064][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 309.938180][T12236] ? alloc_netdev_mqs+0xd44/0x12a0 [ 309.944307][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.951059][T12236] ? validate_linkmsg+0x765/0x950 [ 309.957081][T12236] ? rtnl_create_link+0xa04/0xd70 [ 309.963091][T12236] ? __pfx_macsec_newlink+0x10/0x10 [ 309.969325][T12236] rtnl_newlink_create+0x305/0x7b0 [ 309.975465][T12236] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 309.982225][T12236] ? __pfx___mutex_lock+0x10/0x10 [ 309.988235][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.994987][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.001729][T12236] ? ns_capable+0x89/0xe0 [ 310.006928][T12236] rtnl_newlink+0x166d/0x1c30 [ 310.012548][T12236] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.018560][T12236] ? do_syscall_64+0x166/0x520 [ 310.024261][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.031560][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.038305][T12236] ? kasan_quarantine_put+0xbb/0x1f0 [ 310.044625][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.051376][T12236] ? lockdep_hardirqs_on+0x7b/0x110 [ 310.057603][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.064355][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.071101][T12236] ? kmem_cache_free+0x182/0x650 [ 310.077032][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.083776][T12236] ? __lock_acquire+0x747/0x2de0 [ 310.089687][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.096439][T12236] ? __local_bh_enable_ip+0xd6/0x140 [ 310.102775][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.109513][T12236] ? lockdep_hardirqs_on+0x7b/0x110 [ 310.115744][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.122494][T12236] ? __local_bh_enable_ip+0xd6/0x140 [ 310.128827][T12236] ? __dev_queue_xmit+0x29b/0x3820 [ 310.134963][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.141704][T12236] ? lock_acquire+0x115/0x350 [ 310.147309][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.154086][T12236] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.160103][T12236] rtnetlink_rcv_msg+0x802/0xc00 [ 310.166027][T12236] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 310.172157][T12236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.178698][T12236] ? ref_tracker_free+0x689/0x830 [ 310.184720][T12236] ? __pfx_ref_tracker_free+0x10/0x10 [ 310.191163][T12236] netlink_rcv_skb+0x226/0x4a0 [ 310.196869][T12236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.203406][T12236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.209772][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.216007][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.222240][T12236] netlink_unicast+0x7bd/0x940 [ 310.227960][T12236] netlink_sendmsg+0x813/0xb40 [ 310.233673][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.240008][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.246754][T12236] ? apparmor_socket_sendmsg+0x98/0x360 [ 310.253394][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.260146][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.266469][T12236] sock_sendmsg_nosec+0x13a/0x180 [ 310.272479][T12236] ____sys_sendmsg+0x54e/0x850 [ 310.278190][T12236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.284528][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.291279][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.298018][T12236] ? import_iovec+0x73/0xa0 [ 310.303412][T12236] ___sys_sendmsg+0x2a5/0x360 [ 310.309014][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.315754][T12236] ? __lock_acquire+0x747/0x2de0 [ 310.321677][T12236] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.327911][T12236] ? futex_wait+0x2a2/0x390 [ 310.333337][T12236] ? __fget_files+0x2a/0x420 [ 310.338830][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.345598][T12236] ? __fget_files+0x3a2/0x420 [ 310.351222][T12236] __x64_sys_sendmsg+0x1b1/0x290 [ 310.357145][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.363894][T12236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.370446][T12236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.377204][T12236] do_syscall_64+0x166/0x520 [ 310.382703][T12236] ? trace_irq_disable+0x3b/0x140 [ 310.388718][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.395991][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.403050][T12236] RIP: 0033:0x7f32ccf9e159 [ 310.408327][T12236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.431834][T12236] RSP: 002b:00007f32cde09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.441933][T12236] RAX: ffffffffffffffda RBX: 00007f32cd225fa0 RCX: 00007f32ccf9e159 [ 310.451476][T12236] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 310.461023][T12236] RBP: 00007f32cd03506b R08: 0000000000000000 R09: 0000000000000000 [ 310.470569][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.480114][T12236] R13: 00007f32cd226038 R14: 00007f32cd225fa0 R15: 00007ffe4238c108 [ 310.489689][T12236] [ 310.493513][T12236] Kernel Offset: disabled [ 310.498672][T12236] Rebooting in 86400 seconds..