last executing test programs: 3m39.897014545s ago: executing program 2 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 3m39.707875744s ago: executing program 2 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x3, 0xeeee8000, 0x2000, &(0x7f0000232000/0x2000)=nil}) 3m39.437505637s ago: executing program 2 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000040067e713004900"], 0x4c}}, 0x0) 3m39.14633717s ago: executing program 2 (id=143): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 3m38.418940394s ago: executing program 2 (id=149): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {0x0, r2}}, 0x18) 3m37.682406499s ago: executing program 2 (id=156): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlockall(0x4) 3m37.213159691s ago: executing program 32 (id=156): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlockall(0x4) 3m13.63006935s ago: executing program 5 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000051"], 0x0) 3m12.750347081s ago: executing program 5 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x11) write(r0, &(0x7f00000000c0)='s', 0x1) 3m12.533731141s ago: executing program 5 (id=357): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 3m12.12339908s ago: executing program 5 (id=361): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0xf12}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x1545, &(0x7f0000004500)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 3m11.566314727s ago: executing program 5 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002200)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x7}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x0, 0x9, 0x5, 0x8, 0x0, 0x2, 0x6, 0x7, 0xd7, 0x1c, 0x3, 0x1c, 0x0, 0xa, 0x2}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x4042080) 3m11.122366637s ago: executing program 5 (id=369): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000004c0)='i[\xd9\x02w\xfd\x11\x8a\xc8\xdef\xf37\xb9]\xff\x1a\xa3\x17o\xb5\x91\xe5\xcf\x14\xeb\x94\xff\xf9\xa8\xa8\v\xa0\x80\x9c\xd48h\x87=\x19\x14H\x12\xc4\x05\xc8\x98\x1d \xe15\xcb\xb4\x03t\xa5~M3\x9f\xaa\xef\x9d\x8f\x18a\xb2 \xfa\xe70\x96\xbe\xf0\xca\x8c\xe3ef_\x0f:g\xe7\xbb\x16\xdf\xc4\x7f\xc5\xe2\xdb%\xf5\xae\xe4\xd4\x98V\xa4\xa4\x90\xf2\xcd\x8e\xd0\x05D\xfc,\xc1\xfd\x1e\xd2\x98\xdc+\x91\xd2\x9bP\xe5\xe3\xfe\xdd\xa3X\xddv\xc1\xcc\xef\xc3\xf8\x99!u\x85I\xd5\xa2}\xbf\x1a\xcf\x84\xfa\x82\xe2dC\xfa\xa8\xf1U\x96\x9a\x9bE=\x86WN]\x8d\xd9\x93\x95\xeb\x1a\xa3z\xaeXSW\xa2z\xf7\xff\xf1Q\'g\x1d>\n`\xfd\x01L\xe0\xea\x13\xc9p\xba}8\xff\x81\x03\xf3GC\xc3\xf6\x02.\xf4YcDtv\xa6\xc0\xd6KCJ\xbd\xd3\xf8\x15T8\xa9\x9aO\xaa\xd9\xc6\xe1\xd0\xe8\x81U\xf1\x13\xd6\xaf\"\xa7\xb3\x9b\xbb\xe3O\xf1%\xe1\xd0\xd2\xb7\xf1\x13\t\x17\xe3\xc1\xd7\xdc\x05&\xec\xb9\xce\xb5\x8c4\xe6\xbc\x1b2\x02\xc1RL\xe1?\xae\xee\n^\xa9f\x00\x01uq\'\xc6v\xb0&\x85\t$\x94\xec\xebY\xc7\xf2\xdc\x00'/320) 3m10.587661382s ago: executing program 33 (id=369): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000004c0)='i[\xd9\x02w\xfd\x11\x8a\xc8\xdef\xf37\xb9]\xff\x1a\xa3\x17o\xb5\x91\xe5\xcf\x14\xeb\x94\xff\xf9\xa8\xa8\v\xa0\x80\x9c\xd48h\x87=\x19\x14H\x12\xc4\x05\xc8\x98\x1d \xe15\xcb\xb4\x03t\xa5~M3\x9f\xaa\xef\x9d\x8f\x18a\xb2 \xfa\xe70\x96\xbe\xf0\xca\x8c\xe3ef_\x0f:g\xe7\xbb\x16\xdf\xc4\x7f\xc5\xe2\xdb%\xf5\xae\xe4\xd4\x98V\xa4\xa4\x90\xf2\xcd\x8e\xd0\x05D\xfc,\xc1\xfd\x1e\xd2\x98\xdc+\x91\xd2\x9bP\xe5\xe3\xfe\xdd\xa3X\xddv\xc1\xcc\xef\xc3\xf8\x99!u\x85I\xd5\xa2}\xbf\x1a\xcf\x84\xfa\x82\xe2dC\xfa\xa8\xf1U\x96\x9a\x9bE=\x86WN]\x8d\xd9\x93\x95\xeb\x1a\xa3z\xaeXSW\xa2z\xf7\xff\xf1Q\'g\x1d>\n`\xfd\x01L\xe0\xea\x13\xc9p\xba}8\xff\x81\x03\xf3GC\xc3\xf6\x02.\xf4YcDtv\xa6\xc0\xd6KCJ\xbd\xd3\xf8\x15T8\xa9\x9aO\xaa\xd9\xc6\xe1\xd0\xe8\x81U\xf1\x13\xd6\xaf\"\xa7\xb3\x9b\xbb\xe3O\xf1%\xe1\xd0\xd2\xb7\xf1\x13\t\x17\xe3\xc1\xd7\xdc\x05&\xec\xb9\xce\xb5\x8c4\xe6\xbc\x1b2\x02\xc1RL\xe1?\xae\xee\n^\xa9f\x00\x01uq\'\xc6v\xb0&\x85\t$\x94\xec\xebY\xc7\xf2\xdc\x00'/320) 2m38.158251137s ago: executing program 3 (id=617): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0xfffffff8}}) 2m37.66024863s ago: executing program 3 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002980)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0x2, 0x400, 0x5, 0x81, 0x3, 0x5]}}]}]}]}, 0x44}}, 0x0) 2m37.370295003s ago: executing program 3 (id=625): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) shutdown(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m37.211936501s ago: executing program 3 (id=626): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 2m36.719998064s ago: executing program 3 (id=627): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 2m34.854388772s ago: executing program 3 (id=642): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x8aa, 0x66d5, 0x80000002, 0x0, 0x80, "00000000000000000000abfdc3c100", 0x8, 0x8}) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000200)="976ac3f89a8a32b59a42124e66305108dc70c6169d67b1b1d80a64d8c21f623e0b56614b29c2f23dd04e7bd61fa3559243ba0174a3e5da70a0ba61698c1231acc0a1c784aa50a2a415141d674a3449ca911d978f4effe6a7014c806f18960f7575a93ee5a8bf6155619b13acab2922f815c7f7b4379634cc66c5b7cb5520fae18d5138c8d1db771bbcad30475e27bdd030685e5302d6204198dcfdb090020d0d", 0xa0}], 0x1) 2m34.301307998s ago: executing program 34 (id=642): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x8aa, 0x66d5, 0x80000002, 0x0, 0x80, "00000000000000000000abfdc3c100", 0x8, 0x8}) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000200)="976ac3f89a8a32b59a42124e66305108dc70c6169d67b1b1d80a64d8c21f623e0b56614b29c2f23dd04e7bd61fa3559243ba0174a3e5da70a0ba61698c1231acc0a1c784aa50a2a415141d674a3449ca911d978f4effe6a7014c806f18960f7575a93ee5a8bf6155619b13acab2922f815c7f7b4379634cc66c5b7cb5520fae18d5138c8d1db771bbcad30475e27bdd030685e5302d6204198dcfdb090020d0d", 0xa0}], 0x1) 5.080551221s ago: executing program 4 (id=1665): mkdir(&(0x7f0000000100)='./sys\x00', 0x6) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='01:3:pb', 0x7) 4.797951814s ago: executing program 6 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x0) 4.724005588s ago: executing program 4 (id=1669): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x200, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0xfffffdef}], 0x4000095, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 4.377155134s ago: executing program 6 (id=1672): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="4a7b83", 0x3}], 0x1}, 0x2000c8c0) 3.963982514s ago: executing program 6 (id=1675): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000100)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6a9310b27e0cfa1bd1b9681010191b1621ede21d1a35bee936310009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f", 0x0, 0xfffff7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.354392332s ago: executing program 6 (id=1677): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") r0 = open(&(0x7f0000006080)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.949057711s ago: executing program 1 (id=1678): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1004002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000377,dmask=00000000000000000000357,discard,iocharset=cp437,errors=continue,discard,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101400, 0x108) ioctl$FITRIM(r0, 0xc0185879, 0x0) 2.828028627s ago: executing program 4 (id=1679): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0088a81327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.579901759s ago: executing program 4 (id=1682): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="8003000000000000", 0x8, 0x0, &(0x7f0000000280)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.431575716s ago: executing program 7 (id=1683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0fc5:1227:nm', 0xc) 2.364130399s ago: executing program 1 (id=1684): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x220408a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x377, &(0x7f0000000b40)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) 2.208984207s ago: executing program 4 (id=1685): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 2.161459178s ago: executing program 7 (id=1686): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 1.898910331s ago: executing program 7 (id=1687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@grpjquota}]}, 0x1, 0x441, &(0x7f0000000440)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.898594071s ago: executing program 4 (id=1688): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @string={0x4, 0x3, "fe6b"}}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_open_dev$video4linux(0x0, 0x28, 0x80) 1.774396807s ago: executing program 0 (id=1689): setns(0xc9, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x100}) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.447005642s ago: executing program 0 (id=1690): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hUg$\xf9\xdd\a\xad\\H\xe94\b,H\xbf\x00'/48, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r0, 0xffffffffffffffff, 0x1) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="a6", 0x1}], 0x1) 1.230625452s ago: executing program 1 (id=1691): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 1.088849449s ago: executing program 0 (id=1692): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) 946.714745ms ago: executing program 6 (id=1693): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "1c75df", "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"}}, 0x110) 933.825347ms ago: executing program 7 (id=1694): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 779.901774ms ago: executing program 0 (id=1695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007"], 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 776.645724ms ago: executing program 1 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='7', 0x1) 500.150217ms ago: executing program 7 (id=1697): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002300)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003340)={0x2020}, 0x2020) 433.63869ms ago: executing program 1 (id=1698): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)="31b809", 0x3) 418.597591ms ago: executing program 0 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xd8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 222.35373ms ago: executing program 7 (id=1700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2502, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000002, 0x0, 0x40}]}) 153.408603ms ago: executing program 1 (id=1701): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 149.772133ms ago: executing program 0 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=1703): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfff, 0x4, 0x4, 0x8007, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x8000400}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4b) kernel console output (not intermixed with test programs): length: 249 > 9 [ 169.134453][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.145480][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.154507][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.656906][ T22] wiimote 0005:057E:0330.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 169.679816][ T22] wiimote 0005:057E:0330.0008: New device registered [ 169.748913][ T6350] wiimote 0005:057E:0330.0008: Device removed [ 169.807105][ T47] device hsr_slave_0 left promiscuous mode [ 169.824361][ T47] device hsr_slave_1 left promiscuous mode [ 169.850967][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.866600][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.907002][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.920305][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.945294][ T6357] fido_id[6357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.966661][ T47] device bridge_slave_1 left promiscuous mode [ 169.984516][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.018034][ T47] device bridge_slave_0 left promiscuous mode [ 170.026785][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.089035][ T47] device veth1_macvtap left promiscuous mode [ 170.095324][ T47] device veth0_macvtap left promiscuous mode [ 170.102114][ T47] device veth1_vlan left promiscuous mode [ 170.108205][ T47] device veth0_vlan left promiscuous mode [ 170.307071][ T47] team0 (unregistering): Port device batadv1 removed [ 170.770644][ T22] wiimote 0005:057E:0330.0008: detected device: Nintendo Wii Remote Plus (Gen 2) [ 170.819433][ T22] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input13 [ 170.835237][ T22] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input14 [ 170.849971][ T22] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input12 [ 170.962317][ T47] team0 (unregistering): Port device team_slave_1 removed [ 171.013164][ T47] team0 (unregistering): Port device team_slave_0 removed [ 171.060003][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.110239][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.260001][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 171.489483][ T47] bond0 (unregistering): Released all slaves [ 171.715692][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 171.828652][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.836687][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.845018][ T6334] device bridge_slave_0 entered promiscuous mode [ 171.856698][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.873853][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.889793][ T6334] device bridge_slave_1 entered promiscuous mode [ 171.919209][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.931358][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.966224][ T6334] team0: Port device team_slave_0 added [ 171.974449][ T6334] team0: Port device team_slave_1 added [ 172.037481][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.044497][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.071155][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.090486][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.097673][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.132509][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.171528][ T6334] device hsr_slave_0 entered promiscuous mode [ 172.180380][ T6334] device hsr_slave_1 entered promiscuous mode [ 172.188346][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.196351][ T6334] Cannot create hsr debugfs directory [ 172.520900][ T6334] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 172.539610][ T6334] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.560276][ T6334] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.583313][ T6334] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.743782][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.784865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.793960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.807197][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.819871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.829720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.839831][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.847049][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.866893][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.875618][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.884989][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.894908][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.902114][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.914834][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.940137][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.952953][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.964456][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.975702][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.987965][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.997295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.007509][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.022411][ T6334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.034786][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.047496][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.056746][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.065587][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.117769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.125326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.155049][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.182760][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.197883][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.223837][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.233874][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.247489][ T6334] device veth0_vlan entered promiscuous mode [ 173.261049][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.269810][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.283481][ T6334] device veth1_vlan entered promiscuous mode [ 173.325851][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 173.352966][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.361656][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.375425][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.387094][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.399107][ T6334] device veth0_macvtap entered promiscuous mode [ 173.421203][ T6334] device veth1_macvtap entered promiscuous mode [ 173.465607][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.488153][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.498674][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.509614][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.520630][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.531457][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.541521][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.552550][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.564967][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.583583][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.596748][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.605086][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.614821][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.627398][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.639882][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.650607][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.662464][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.672852][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.683847][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.695315][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.706233][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.718808][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.732493][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.742533][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.757603][ T6334] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.768354][ T6334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.780932][ T6334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.790220][ T6334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.903083][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.925425][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.933593][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.969456][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.982155][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.004749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.249151][ T6405] loop7: detected capacity change from 0 to 512 [ 174.350021][ T6405] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 174.428875][ T6405] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #17: comm syz.7.646: iget: immutable or append flags not allowed on symlinks [ 174.464834][ T6405] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.646: couldn't read orphan inode 17 (err -117) [ 174.478441][ T6405] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 174.661674][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 174.949709][ T6430] loop1: detected capacity change from 0 to 256 [ 175.004200][ T26] audit: type=1800 audit(1790056280.266:27): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.680" name="bus" dev="loop1" ino=1048647 res=0 errno=0 [ 175.224850][ T6435] mmap: syz.4.667 (6435) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.406304][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 175.474287][ T6444] loop6: detected capacity change from 0 to 1024 [ 175.495561][ T6444] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 176.479253][ T4360] logitech-hidpp-device 0003:046D:C082.0009: Device not connected [ 176.484649][ T6472] loop4: detected capacity change from 0 to 256 [ 176.542550][ T6472] FAT-fs (loop4): unable to read block(17179869180) for building NFS inode [ 177.244960][ T6501] loop6: detected capacity change from 0 to 128 [ 177.356276][ T6501] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 177.411845][ T6501] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.486049][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 177.508090][ T6512] loop7: detected capacity change from 0 to 1024 [ 177.592639][ T6501] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes [ 177.933102][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 179.548428][ T4318] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.778140][ T4318] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 179.802863][ T4318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.843285][ T4318] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.873158][ T4318] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 179.882843][ T6553] loop7: detected capacity change from 0 to 32768 [ 179.909729][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.943277][ T6553] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 179.945468][ T6561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.989235][ T4318] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 180.050115][ T4318] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 180.248927][ T4318] usb 5-1: USB disconnect, device number 7 [ 180.285565][ T4318] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 180.332072][ T4318] cyberjack 5-1:1.0: device disconnected [ 180.386270][ T4415] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 180.785722][ T6581] loop6: detected capacity change from 0 to 8192 [ 180.870144][ T6581] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.400085][ T6596] loop4: detected capacity change from 0 to 4096 [ 181.527716][ T6602] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.645946][ T4275] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.836062][ T4275] usb 2-1: Using ep0 maxpacket: 32 [ 181.843884][ T4275] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 181.871625][ T4275] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.915901][ T4275] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.928964][ T6611] MTRR 1 not used [ 181.955480][ T4275] usb 2-1: config 1 has no interface number 0 [ 181.968349][ T4275] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.024776][ T4275] usb 2-1: config 1 interface 5 has no altsetting 0 [ 182.070371][ T4275] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 182.104117][ T4275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.143164][ T4275] usb 2-1: Product: syz [ 182.148137][ T4275] usb 2-1: Manufacturer: syz [ 182.161573][ T4275] usb 2-1: SerialNumber: syz [ 182.175448][ T6615] loop6: detected capacity change from 0 to 2048 [ 182.294394][ T6615] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 182.311469][ T6615] EXT4-fs (loop6): shut down requested (2) [ 182.390763][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 182.403922][ T4275] usb 2-1: selecting invalid altsetting 0 [ 182.452322][ T4275] usb 2-1: USB disconnect, device number 6 [ 182.738639][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.865838][ T4360] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 184.077673][ T4360] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.097291][ T4360] usb 5-1: config 0 has no interface number 0 [ 184.122203][ T4360] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 184.169341][ T4360] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 184.208392][ T4360] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.235876][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.263174][ T4360] usb 5-1: config 0 descriptor?? [ 184.279286][ T6651] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.302532][ T4360] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 184.543544][ T4318] usb 5-1: USB disconnect, device number 8 [ 184.549582][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 185.263051][ T6695] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 185.820020][ T6711] loop4: detected capacity change from 0 to 1024 [ 185.925183][ T6689] loop1: detected capacity change from 0 to 32768 [ 185.987294][ T6720] loop6: detected capacity change from 0 to 512 [ 186.028868][ T6720] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 186.105054][ T6689] XFS (loop1): Mounting V5 Filesystem [ 186.121300][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-diskseq/217.tmp-b7:4' failed: Read-only file system [ 186.166069][ T6720] EXT4-fs (loop6): 1 truncate cleaned up [ 186.215841][ T6720] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 186.239365][ T6689] XFS (loop1): Ending clean mount [ 186.257696][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 186.258109][ T4410] udevd[4410]: symlink '../../loop6' '/dev/disk/by-diskseq/219.tmp-b7:6' failed: Read-only file system [ 186.331108][ T26] audit: type=1800 audit(1790056291.596:28): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.761" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 186.369062][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-uuid/0c11cbbc-aa93-3898-a963-75536445a630.tmp-b7:4' failed: Read-only file system [ 186.401825][ T4410] udevd[4410]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 186.410608][ T6720] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 186.515573][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-diskseq/217.tmp-b7:4' failed: Read-only file system [ 186.531684][ T6720] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.591921][ T4274] XFS (loop1): Unmounting Filesystem [ 186.640704][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-diskseq/217.tmp-b7:4' failed: Read-only file system [ 186.750590][ T5948] udevd[5948]: symlink '../../loop1' '/dev/disk/by-diskseq/218.tmp-b7:1' failed: Read-only file system [ 186.817246][ T5948] udevd[5948]: symlink '../../loop1' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:1' failed: Read-only file system [ 186.898753][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 187.782937][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/218.tmp-b7:1' failed: Read-only file system [ 187.796307][ T4318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.813878][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/218.tmp-b7:1' failed: Read-only file system [ 188.015942][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 188.029295][ T4318] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.039954][ T6764] loop4: detected capacity change from 0 to 256 [ 188.071245][ T4318] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 188.112062][ T6749] loop6: detected capacity change from 0 to 32768 [ 188.122933][ T4318] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 188.154063][ T4318] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.196644][ T6768] random: crng reseeded on system resumption [ 188.199075][ T4318] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.225921][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.240135][ T4318] usb 2-1: SerialNumber: syz [ 188.251757][ T6758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.259003][ T6749] JBD2: Ignoring recovery information on journal [ 188.261455][ T6758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.274084][ T4318] hub 2-1:1.0: bad descriptor, ignoring hub [ 188.280351][ T4318] hub: probe of 2-1:1.0 failed with error -5 [ 188.371452][ T4415] udevd[4415]: symlink '../../loop4' '/dev/disk/by-diskseq/223.tmp-b7:4' failed: Read-only file system [ 188.427841][ T4415] udevd[4415]: symlink '../../loop4' '/dev/disk/by-diskseq/223.tmp-b7:4' failed: Read-only file system [ 188.487135][ T6758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.496332][ T4415] udevd[4415]: symlink '../../loop4' '/dev/disk/by-diskseq/223.tmp-b7:4' failed: Read-only file system [ 188.519853][ T6758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.613353][ T6749] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 188.693071][ T6749] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 188.759058][ T4356] udevd[4356]: symlink '../../loop6' '/dev/disk/by-diskseq/224.tmp-b7:6' failed: Read-only file system [ 188.806171][ T6749] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 188.837022][ T6749] OCFS2: File system is now read-only. [ 188.837884][ T4356] udevd[4356]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system [ 188.862785][ T6749] (syz.6.767,6749,1):ocfs2_search_one_group:1706 ERROR: status = -30 [ 188.917926][ T6749] (syz.6.767,6749,1):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 189.005966][ T6749] (syz.6.767,6749,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 189.016067][ T4318] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 189.066752][ T6749] (syz.6.767,6749,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 189.075016][ T6749] (syz.6.767,6749,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 189.135897][ T6749] (syz.6.767,6749,0):ocfs2_mknod_locked:646 ERROR: status = -30 [ 189.143649][ T6749] (syz.6.767,6749,0):ocfs2_mknod:390 ERROR: status = -30 [ 189.171847][ T6749] (syz.6.767,6749,0):ocfs2_mknod:509 ERROR: status = -30 [ 189.211873][ T6749] (syz.6.767,6749,0):ocfs2_mkdir:666 ERROR: status = -30 [ 189.309462][ T4318] usb 2-1: USB disconnect, device number 7 [ 189.317142][ T4318] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 189.417631][ T5435] ocfs2: Unmounting device (7,6) on (node local) [ 189.479129][ T4415] udevd[4415]: symlink '../../loop6' '/dev/disk/by-diskseq/224.tmp-b7:6' failed: Read-only file system [ 189.547734][ T4415] udevd[4415]: symlink '../../loop6' '/dev/disk/by-diskseq/224.tmp-b7:6' failed: Read-only file system [ 189.822261][ T6793] loop7: detected capacity change from 0 to 4096 [ 189.833369][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/222.tmp-b7:1' failed: Read-only file system [ 189.878115][ T6793] EXT4-fs: inline encryption not supported [ 189.951301][ T6793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.995233][ T6793] EXT4-fs (loop7): Test dummy encryption mode enabled [ 190.036952][ T6793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c0a8, mo2=0003] [ 190.081902][ T6793] System zones: 0-5 [ 190.127912][ T6793] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 190.301437][ T6799] loop1: detected capacity change from 0 to 8192 [ 190.316362][ T6793] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 190.405364][ T6799] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.455854][ T6799] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 190.516065][ T6799] REISERFS (device loop1): using ordered data mode [ 190.522667][ T6799] reiserfs: using flush barriers [ 190.572286][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 190.601068][ T6799] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.777097][ T6799] REISERFS (device loop1): checking transaction log (loop1) [ 191.167272][ T6799] REISERFS (device loop1): Using tea hash to sort names [ 191.214869][ T6799] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 191.298390][ T6844] loop6: detected capacity change from 0 to 1024 [ 191.576293][ T6799] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=3171692, len=3 - odd [ 192.528359][ T6875] loop1: detected capacity change from 0 to 8192 [ 192.851910][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/233.tmp-b7:1' failed: Read-only file system [ 192.866486][ T4356] udevd[4356]: symlink '../../loop7' '/dev/disk/by-diskseq/229.tmp-b7:7' failed: Read-only file system [ 192.880935][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 192.928259][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:1' failed: Read-only file system [ 193.072900][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/233.tmp-b7:1' failed: Read-only file system [ 193.085976][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 193.101010][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-diskseq/225.tmp-b7:4' failed: Read-only file system [ 193.150068][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/233.tmp-b7:1' failed: Read-only file system [ 193.278065][ T4415] udevd[4415]: symlink '../../loop4' '/dev/disk/by-diskseq/225.tmp-b7:4' failed: Read-only file system [ 193.298864][ T4318] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.338698][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.369786][ T4318] usb 1-1: config 0 descriptor?? [ 193.391018][ T4318] cp210x 1-1:0.0: cp210x converter detected [ 193.447409][ T4356] udevd[4356]: symlink '../../loop1' '/dev/disk/by-diskseq/234.tmp-b7:1' failed: Read-only file system [ 193.568329][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-diskseq/225.tmp-b7:4' failed: Read-only file system [ 193.785535][ T4318] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 193.824146][ T4318] usb 1-1: cp210x converter now attached to ttyUSB0 [ 193.988955][ T6917] mtrr: base(0xe3b6000) is not aligned on a size(0x0000) boundary [ 194.008672][ T4318] usb 1-1: USB disconnect, device number 3 [ 194.027339][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.081068][ T4318] cp210x 1-1:0.0: device disconnected [ 194.210485][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216912][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.890587][ T26] audit: type=1326 audit(1790056300.156:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.4.826" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f602499e159 code=0x0 [ 195.221205][ T6961] loop6: detected capacity change from 0 to 512 [ 195.264445][ T6961] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 195.351342][ T6961] EXT4-fs (loop6): 1 truncate cleaned up [ 195.358484][ T6961] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 195.396278][ T6961] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.829: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 195.470868][ T6961] EXT4-fs (loop6): Remounting filesystem read-only [ 195.537825][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 196.719618][ T6983] loop4: detected capacity change from 0 to 32768 [ 196.767035][ T4286] Bluetooth: hci5: command 0xfc11 tx timeout [ 196.775889][ T4276] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 196.777051][ T6983] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 197.207649][ T4415] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 197.293192][ T7010] loop1: detected capacity change from 0 to 1024 [ 197.378468][ T7010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.868513][ T4356] udevd[4356]: symlink '../../loop1' '/dev/disk/by-diskseq/238.tmp-b7:1' failed: Read-only file system [ 197.898249][ T4415] udevd[4415]: symlink '../../loop4' '/dev/disk/by-diskseq/239.tmp-b7:4' failed: Read-only file system [ 197.966857][ T4356] udevd[4356]: symlink '../../loop1' '/dev/disk/by-diskseq/238.tmp-b7:1' failed: Read-only file system [ 198.118833][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/240.tmp-b7:1' failed: Read-only file system [ 198.204395][ T4415] udevd[4415]: symlink '../../loop4' '/dev/disk/by-diskseq/239.tmp-b7:4' failed: Read-only file system [ 198.268471][ T7031] loop1: detected capacity change from 0 to 512 [ 198.384928][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/241.tmp-b7:1' failed: Read-only file system [ 198.457264][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 198.487542][ T4356] udevd[4356]: symlink '../../loop4' '/dev/disk/by-diskseq/239.tmp-b7:4' failed: Read-only file system [ 198.533470][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:1' failed: Read-only file system [ 198.662971][ T7012] loop7: detected capacity change from 0 to 32768 [ 198.683825][ T4415] udevd[4415]: symlink '../../loop1' '/dev/disk/by-diskseq/241.tmp-b7:1' failed: Read-only file system [ 198.811288][ T7012] XFS (loop7): Mounting V5 Filesystem [ 198.935058][ T7012] XFS (loop7): Ending clean mount [ 199.120102][ T6334] XFS (loop7): Unmounting Filesystem [ 199.713389][ T7076] kAFS: bad VL server IP address [ 200.444147][ T7102] loop1: detected capacity change from 0 to 128 [ 200.494188][ T7099] netlink: 79 bytes leftover after parsing attributes in process `syz.0.869'. [ 200.673414][ T7102] syz.1.871: attempt to access beyond end of device [ 200.673414][ T7102] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 200.736884][ T7102] syz.1.871: attempt to access beyond end of device [ 200.736884][ T7102] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 200.786027][ T7108] tap0: tun_chr_ioctl cmd 1074025677 [ 200.818573][ T7108] tap0: linktype set to 805 [ 200.939528][ T7115] loop6: detected capacity change from 0 to 2048 [ 201.041785][ T7115] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 201.145839][ T7115] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 201.174865][ T7115] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 201.223210][ T7115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.170753][ T7142] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.562414][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.889'. [ 202.759999][ T7161] loop1: detected capacity change from 0 to 512 [ 202.873572][ T7167] loop7: detected capacity change from 0 to 64 [ 202.904821][ T7161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.966202][ T7161] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.066789][ T7161] EXT4-fs (loop1): shut down requested (1) [ 203.138595][ T7173] process 'syz.7.896' launched './file0' with NULL argv: empty string added [ 203.225475][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 203.384114][ T26] audit: type=1400 audit(1790056308.646:30): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7176 comm="syz.6.897" name="p" offset=48 [ 203.461700][ T7181] loop7: detected capacity change from 0 to 512 [ 203.618451][ T4415] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.648005][ T7185] loop6: detected capacity change from 0 to 512 [ 204.147960][ T7193] loop6: detected capacity change from 0 to 2048 [ 204.195471][ T7193] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.286272][ T7199] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.358777][ T7193] NILFS error (device loop6): nilfs_readdir: zero-length directory entry [ 204.403433][ T7193] Remounting filesystem read-only [ 204.912875][ T7208] loop6: detected capacity change from 0 to 16 [ 204.970113][ T7208] erofs: (device loop6): mounted with root inode @ nid 36. [ 205.052202][ T7208] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 205.106299][ T7208] syz.6.905: attempt to access beyond end of device [ 205.106299][ T7208] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 205.168993][ T7208] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 205.205294][ T7208] syz.6.905: attempt to access beyond end of device [ 205.205294][ T7208] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 205.285932][ T4359] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 205.295700][ T7208] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 205.336090][ T26] audit: type=1800 audit(1790056310.606:31): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.905" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 205.486312][ T4359] usb 2-1: Using ep0 maxpacket: 32 [ 205.520991][ T4359] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 205.555986][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.580651][ T4359] usb 2-1: Product: syz [ 205.584992][ T4359] usb 2-1: Manufacturer: syz [ 205.610539][ T4359] usb 2-1: SerialNumber: syz [ 205.626879][ T4359] usb 2-1: config 0 descriptor?? [ 205.956885][ T7238] FAULT_INJECTION: forcing a failure. [ 205.956885][ T7238] name fail_futex, interval 1, probability 0, space 0, times 1 [ 206.033539][ T7238] CPU: 1 PID: 7238 Comm: syz.6.912 Not tainted syzkaller #0 [ 206.040927][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.051049][ T7238] Call Trace: [ 206.054373][ T7238] [ 206.057351][ T7238] dump_stack_lvl+0x188/0x24e [ 206.062092][ T7238] ? show_regs_print_info+0x12/0x12 [ 206.067339][ T7238] ? load_image+0x410/0x410 [ 206.071910][ T7238] ? sched_slice+0x430/0x430 [ 206.076570][ T7238] should_fail_ex+0x390/0x4c0 [ 206.081313][ T7238] get_futex_key+0x1b1/0x1000 [ 206.086050][ T7238] ? futex_setup_timer+0xc0/0xc0 [ 206.091036][ T7238] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 206.097086][ T7238] ? __lock_acquire+0x7c40/0x7c40 [ 206.102177][ T7238] ? lock_chain_count+0x20/0x20 [ 206.107087][ T7238] futex_wait_setup+0xb8/0x270 [ 206.111906][ T7238] ? futex_wait_multiple+0x920/0x920 [ 206.117248][ T7238] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 206.123210][ T7238] ? _raw_spin_unlock+0x40/0x40 [ 206.128128][ T7238] futex_wait+0x1b8/0x5c0 [ 206.132527][ T7238] ? futex_wait_setup+0x270/0x270 [ 206.137637][ T7238] do_futex+0x310/0x320 [ 206.141854][ T7238] ? __ia32_sys_get_robust_list+0x100/0x100 [ 206.147825][ T7238] __se_sys_futex+0x381/0x410 [ 206.152565][ T7238] ? __x64_sys_futex+0xf0/0xf0 [ 206.157392][ T7238] ? __x64_sys_futex+0x1d/0xf0 [ 206.162213][ T7238] do_syscall_64+0x4c/0xa0 [ 206.166708][ T7238] ? clear_bhb_loop+0x60/0xb0 [ 206.171442][ T7238] ? clear_bhb_loop+0x60/0xb0 [ 206.176177][ T7238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.182148][ T7238] RIP: 0033:0x7fddb239e159 [ 206.186786][ T7238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.207059][ T7238] RSP: 002b:00007fddb321a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.215543][ T7238] RAX: ffffffffffffffda RBX: 00007fddb2625fa8 RCX: 00007fddb239e159 [ 206.223583][ T7238] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fddb2625fa8 [ 206.231621][ T7238] RBP: 00007fddb2625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 206.239650][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.247678][ T7238] R13: 00007fddb2626038 R14: 00007ffcf59428e0 R15: 00007ffcf59429c8 [ 206.255719][ T7238] [ 206.269957][ T4359] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 206.346455][ T4359] peak_usb: probe of 2-1:0.0 failed with error -71 [ 206.424285][ T4359] usb 2-1: USB disconnect, device number 8 [ 206.526223][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 206.526940][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 206.532425][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 207.213691][ T7271] netem: incorrect ge model size [ 207.253011][ T7271] netem: change failed [ 207.916158][ T4275] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.106089][ T4275] usb 1-1: Using ep0 maxpacket: 16 [ 208.113048][ T4275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.154912][ T4275] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 208.187234][ T4275] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 208.218779][ T4275] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.273258][ T4275] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.292999][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.343629][ T4275] usb 1-1: SerialNumber: syz [ 208.374978][ T7292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.399208][ T4359] hid-generic 0005:07C0:0002.000A: unknown main item tag 0x0 [ 208.436162][ T7292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.448151][ T4275] hub 1-1:1.0: bad descriptor, ignoring hub [ 208.475836][ T4275] hub: probe of 1-1:1.0 failed with error -5 [ 208.493559][ T4359] hid-generic 0005:07C0:0002.000A: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 208.662055][ T7292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.736604][ T7292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.063962][ T7331] loop1: detected capacity change from 0 to 512 [ 209.123704][ T7331] EXT4-fs: Invalid want_extra_isize 206 [ 209.186106][ T4275] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 209.225332][ T7337] loop4: detected capacity change from 0 to 16 [ 209.276829][ T7337] erofs: (device loop4): mounted with root inode @ nid 36. [ 209.297954][ T7337] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 209.338103][ T7337] syz.4.943: attempt to access beyond end of device [ 209.338103][ T7337] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 209.435527][ T7337] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 209.474124][ T7337] syz.4.943: attempt to access beyond end of device [ 209.474124][ T7337] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 209.496726][ T7337] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 209.526993][ T22] usb 1-1: USB disconnect, device number 4 [ 209.534490][ T22] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 209.572265][ T26] audit: type=1800 audit(1790056314.836:32): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.943" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 209.850258][ T7345] loop4: detected capacity change from 0 to 2048 [ 209.922001][ T7349] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.177057][ T7352] kAFS: Invalid Command on /proc/fs/afs/cells file [ 210.612205][ T7341] loop6: detected capacity change from 0 to 32768 [ 210.698968][ T7341] JBD2: Ignoring recovery information on journal [ 210.791688][ T7341] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 210.989593][ T5435] ocfs2: Unmounting device (7,6) on (node local) [ 211.478135][ T7385] loop4: detected capacity change from 0 to 64 [ 211.622508][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'. [ 213.051513][ T7418] loop7: detected capacity change from 0 to 4096 [ 213.085291][ T7418] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 213.191980][ T7418] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 213.272268][ T7418] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 213.332971][ T7418] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 213.363130][ T7397] loop4: detected capacity change from 0 to 40427 [ 213.391470][ T7397] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 213.398739][ T7418] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 213.417689][ T7397] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 213.448756][ T7418] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 213.536804][ T7418] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 213.567840][ T7397] F2FS-fs (loop4): invalid crc value [ 213.598372][ T7418] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 213.627096][ T7397] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.724853][ T7418] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 213.805379][ T7418] ntfs: volume version 3.1. [ 213.868695][ T7397] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 213.911031][ T7397] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.188515][ T4287] syz-executor: attempt to access beyond end of device [ 214.188515][ T4287] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 214.616641][ T7454] input: syz1 as /devices/virtual/input/input15 [ 214.897929][ T7464] loop4: detected capacity change from 0 to 512 [ 214.992885][ T7464] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 215.002072][ T7460] loop6: detected capacity change from 0 to 8192 [ 215.036717][ T7464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c01c, mo2=0002] [ 215.070118][ T7467] loop1: detected capacity change from 0 to 512 [ 215.077661][ T7460] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.111388][ T7464] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.121044][ T7472] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.121226][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.984'. [ 215.145948][ T7460] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 215.166008][ T7460] REISERFS (device loop6): using ordered data mode [ 215.173090][ T7464] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.974: iget: bad i_size value: 12154761577498 [ 215.185226][ T7474] nbd: socks must be embedded in a SOCK_ITEM attr [ 215.247398][ T7467] EXT4-fs: inline encryption not supported [ 215.250523][ T7460] reiserfs: using flush barriers [ 215.258972][ T7464] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.974: couldn't read orphan inode 13 (err -117) [ 215.281597][ T7460] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.315603][ T7464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 215.329401][ T7460] REISERFS (device loop6): checking transaction log (loop6) [ 215.347007][ T7467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.471110][ T7464] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.974: dx entry: limit 65535 != root limit 120 [ 215.505647][ T7467] EXT4-fs (loop1): 1 truncate cleaned up [ 215.522644][ T7467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.577489][ T7464] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.974: Corrupt directory, running e2fsck is recommended [ 215.651158][ T7464] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.974: path /197/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 215.748989][ T7487] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 3: comm syz.4.974: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 215.756459][ T7460] REISERFS (device loop6): Using tea hash to sort names [ 215.858584][ T7460] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 216.018137][ T7467] EXT4-fs: can't change dax mount option while remounting [ 216.036952][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 216.186886][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 216.525515][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 216.525531][ T26] audit: type=1400 audit(1790056321.786:33): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=7506 comm="syz.7.994" name="p" offset=92 [ 217.547724][ T4318] hid-generic 0005:07C0:0002.000B: unknown main item tag 0x0 [ 217.587777][ T4318] hid-generic 0005:07C0:0002.000B: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 217.657505][ T7504] loop6: detected capacity change from 0 to 32768 [ 217.698388][ T7534] loop1: detected capacity change from 0 to 8192 [ 217.772073][ T7534] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 217.801103][ T7504] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root [ 217.801103][ T7504] [ 217.813322][ T7504] ERROR: (device loop6): remounting filesystem as read-only [ 217.835372][ T7534] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 217.844857][ T7534] REISERFS (device loop1): using ordered data mode [ 217.851608][ T7534] reiserfs: using flush barriers [ 217.860523][ T7534] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.877727][ T7534] REISERFS (device loop1): checking transaction log (loop1) [ 217.896203][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1008'. [ 218.160008][ T7534] REISERFS (device loop1): Using tea hash to sort names [ 218.206520][ T7534] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 218.486228][ T7555] block device autoloading is deprecated and will be removed. [ 218.745921][ T4275] smpboot: CPU 1 is now offline [ 218.811766][ T7565] loop6: detected capacity change from 0 to 512 [ 218.896262][ T7565] EXT4-fs: Ignoring removed bh option [ 219.054687][ T7565] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 219.099511][ T7543] loop7: detected capacity change from 0 to 32768 [ 219.115996][ T7565] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.354906][ T7565] EXT4-fs error (device loop6): ext4_get_first_dir_block:3585: inode #12: comm syz.6.1015: Directory hole found for htree leaf block 0 [ 219.821682][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 220.010068][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1021'. [ 220.092992][ T7587] loop4: detected capacity change from 0 to 16 [ 220.217028][ T7587] erofs: (device loop4): mounted with root inode @ nid 36. [ 220.396367][ T7587] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 220.561581][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1019'. [ 220.694308][ T7599] device hsr_slave_0 left promiscuous mode [ 220.781979][ T7599] device hsr_slave_1 left promiscuous mode [ 220.969184][ T7608] loop4: detected capacity change from 0 to 128 [ 221.273932][ T7611] syz.4.1025: attempt to access beyond end of device [ 221.273932][ T7611] loop4: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 221.409839][ T7611] syz.4.1025: attempt to access beyond end of device [ 221.409839][ T7611] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 221.853793][ T7605] loop1: detected capacity change from 0 to 32768 [ 221.904292][ T7622] loop0: detected capacity change from 0 to 128 [ 221.968154][ T7605] JBD2: Ignoring recovery information on journal [ 222.085344][ T7622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 222.165357][ T7622] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.223263][ T7605] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 222.325559][ T7622] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 222.548646][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 222.843473][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 223.910296][ T7630] loop4: detected capacity change from 0 to 32768 [ 224.027016][ T7630] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1029 (7630) [ 224.345900][ T7630] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 224.464614][ T7630] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 224.560844][ T7643] loop7: detected capacity change from 0 to 40427 [ 224.585950][ T7630] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 224.595381][ T7630] BTRFS info (device loop4): use zstd compression, level 3 [ 224.659703][ T7643] F2FS-fs (loop7): invalid crc value [ 224.710123][ T7643] F2FS-fs (loop7): Found nat_bits in checkpoint [ 224.806804][ T7630] BTRFS info (device loop4): using free space tree [ 225.056316][ T7643] F2FS-fs (loop7): Start checkpoint disabled! [ 225.086088][ T7630] BTRFS info (device loop4): enabling ssd optimizations [ 225.215915][ T7643] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 225.544468][ T4287] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 225.652854][ T7661] loop6: detected capacity change from 0 to 32768 [ 225.793916][ T7661] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.1039 (7661) [ 225.905054][ T4335] kworker/u4:8: attempt to access beyond end of device [ 225.905054][ T4335] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 225.931409][ T7699] batman_adv: batadv0: Adding interface: ipvlan2 [ 226.016518][ T7699] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.293226][ T7699] batman_adv: batadv0: Interface activated: ipvlan2 [ 226.650142][ T4415] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by udevd (4415) [ 226.962856][ T7724] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in; [ 226.962856][ T7724] program syz.6.1051 not setting count and/or reply_len properly [ 228.071871][ T7741] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 228.264445][ T7751] loop6: detected capacity change from 0 to 1024 [ 228.356438][ T7751] hfsplus: invalid length 32517 has been corrected to 255 [ 228.375868][ T7718] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 228.434804][ T7754] program syz.0.1060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.526643][ T26] audit: type=1800 audit(1790056333.786:34): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1058" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 228.566829][ T7756] hfsplus: cannot replace xattr [ 228.591121][ T7718] usb 5-1: not running at top speed; connect to a high speed hub [ 228.633372][ T7718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.720342][ T7718] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 228.790564][ T7718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.854269][ T7718] usb 5-1: Found UVC 1.00 device (046d:0825) [ 229.127036][ T7769] loop6: detected capacity change from 0 to 128 [ 229.238175][ T7769] syz.6.1063: attempt to access beyond end of device [ 229.238175][ T7769] loop6: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 229.313155][ T7769] syz.6.1063: attempt to access beyond end of device [ 229.313155][ T7769] loop6: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 229.491717][ T7718] uvcvideo 5-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 229.531451][ T7718] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 229.580687][ T7718] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 229.648390][ T7718] usb 5-1: USB disconnect, device number 9 [ 230.126620][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.227461][ T7780] netlink: 'syz.0.1067': attribute type 8 has an invalid length. [ 230.521684][ T7771] loop1: detected capacity change from 0 to 40427 [ 230.534340][ T7786] option changes via remount are deprecated (pid=7785 comm=syz.7.1069) [ 230.622405][ T7771] F2FS-fs (loop1): invalid crc value [ 230.643161][ T7786] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 230.742078][ T7771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.999977][ T7771] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 231.193001][ T7771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 231.475612][ T7771] syz.1.1065: attempt to access beyond end of device [ 231.475612][ T7771] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 232.563783][ T7815] loop0: detected capacity change from 0 to 32768 [ 232.674268][ T7815] JBD2: Ignoring recovery information on journal [ 232.899124][ T7815] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 233.209177][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 233.441067][ T7848] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1086'. [ 233.769215][ T7853] tmpfs: Bad value for 'uid' [ 234.207938][ T7718] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 234.253951][ T7865] loop7: detected capacity change from 0 to 256 [ 234.365589][ T7865] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 234.417241][ T7718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.473979][ T7718] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.529556][ T7718] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.608045][ T7718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.678434][ T7718] usb 5-1: SerialNumber: syz [ 234.941663][ T7718] usb 5-1: 0:2 : does not exist [ 235.066692][ T7718] usb 5-1: USB disconnect, device number 10 [ 235.218207][ T7875] loop0: detected capacity change from 0 to 4096 [ 235.337099][ T7875] ntfs: volume version 3.1. [ 235.357441][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.197104][ T7902] netlink: 'syz.6.1101': attribute type 1 has an invalid length. [ 236.226880][ T7900] loop4: detected capacity change from 0 to 2048 [ 236.406872][ T7900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 237.390235][ T7917] loop0: detected capacity change from 0 to 131072 [ 237.417359][ T7917] F2FS-fs (loop0): Invalid log blocks per segment (3081) [ 237.424485][ T7917] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.436043][ T7917] F2FS-fs (loop0): invalid crc value [ 237.478647][ T7917] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.528152][ T7917] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 237.535515][ T7917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 237.578012][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 238.190650][ T7933] loop0: detected capacity change from 0 to 2048 [ 238.269792][ T7933] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.633869][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 239.028101][ T7953] loop1: detected capacity change from 0 to 128 [ 239.102741][ T7953] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.196686][ T7953] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.297082][ T7953] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 239.349226][ T7953] FAT-fs (loop1): Filesystem has been set read-only [ 239.726186][ T7914] block2mtd: error: cannot open device /dev/ [ 240.701061][ T7955] loop7: detected capacity change from 0 to 40427 [ 240.802272][ T7955] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 240.917913][ T7955] F2FS-fs (loop7): invalid crc value [ 240.991729][ T7955] F2FS-fs (loop7): Found nat_bits in checkpoint [ 241.281600][ T7955] F2FS-fs (loop7): recover fsync data on readonly fs [ 241.313722][ T7994] loop0: detected capacity change from 0 to 4096 [ 241.388416][ T7955] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 241.453708][ T7955] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 241.544400][ T7955] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 241.700712][ T7972] loop6: detected capacity change from 0 to 32768 [ 241.787107][ T26] audit: type=1800 audit(1790056347.056:35): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1128" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 241.897590][ T7972] JBD2: Ignoring recovery information on journal [ 242.180978][ T7972] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 242.615175][ T8013] loop7: detected capacity change from 0 to 128 [ 242.792050][ T5435] ocfs2: Unmounting device (7,6) on (node local) [ 242.831604][ T8013] syz.7.1133: attempt to access beyond end of device [ 242.831604][ T8013] loop7: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 242.866938][ T8018] Bluetooth: ISO socket layer initialized [ 242.903488][ T8019] loop4: detected capacity change from 0 to 1024 [ 243.064298][ T8012] syz.7.1133: attempt to access beyond end of device [ 243.064298][ T8012] loop7: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 243.131570][ T8019] hfsplus: invalid length 32517 has been corrected to 255 [ 243.300100][ T26] audit: type=1800 audit(1790056348.566:36): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1134" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 243.407008][ T8019] hfsplus: cannot replace xattr [ 244.129967][ T8044] loop4: detected capacity change from 0 to 1024 [ 245.184224][ T8061] loop1: detected capacity change from 0 to 1024 [ 245.417653][ T8061] hfsplus: invalid length 1280 has been corrected to 255 [ 246.325301][ T8088] loop6: detected capacity change from 0 to 2048 [ 246.444804][ T8088] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 246.687175][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 246.785116][ T8070] loop0: detected capacity change from 0 to 40427 [ 246.905578][ T8070] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 246.981035][ T8070] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 247.096232][ T8070] F2FS-fs (loop0): invalid crc value [ 247.146153][ T8070] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 247.539647][ T8070] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 247.609947][ T8070] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.736753][ T8117] loop6: detected capacity change from 0 to 256 [ 247.905955][ T8117] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 248.068334][ T4272] syz-executor: attempt to access beyond end of device [ 248.068334][ T4272] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.428409][ T8127] loop1: detected capacity change from 0 to 164 [ 249.016744][ T8142] rnbd_client L125: Can't parse path hp:127.0.0.1\ß?:…b”EzñîÜ[‡þ¶ÖßùÍÛµ¬°>,: -22 [ 249.316145][ T26] audit: type=1400 audit(1790056354.586:37): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8147 comm="syz.7.1182" name="unknown" offset=28 [ 249.553224][ T8154] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 249.801299][ T8157] loop7: detected capacity change from 0 to 4096 [ 249.973003][ T8163] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.152001][ T8165] loop6: detected capacity change from 0 to 2048 [ 250.253040][ T8165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.369506][ T8169] loop1: detected capacity change from 0 to 2048 [ 250.524872][ T8169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 250.636034][ T8169] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.044651][ T8185] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1187: bg 0: block 345: padding at end of block bitmap is not set [ 251.248425][ T8185] EXT4-fs (loop1): Remounting filesystem read-only [ 251.584905][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 251.669806][ T8145] loop4: detected capacity change from 0 to 40427 [ 251.801600][ T8145] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 251.824961][ T8201] loop6: detected capacity change from 0 to 1024 [ 251.867941][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 251.885018][ T8145] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 251.967351][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 252.006485][ T8201] hfsplus: invalid length 1280 has been corrected to 255 [ 252.047927][ T8145] F2FS-fs (loop4): invalid crc value [ 252.106076][ T8145] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 252.251699][ T8214] loop7: detected capacity change from 0 to 7 [ 252.342300][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.351792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.430532][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.458641][ T8220] loop1: detected capacity change from 0 to 128 [ 252.489100][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.498349][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.572428][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.581745][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.641252][ T8226] loop6: detected capacity change from 0 to 512 [ 252.649286][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.658520][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.687397][ T8226] EXT4-fs: Ignoring removed oldalloc option [ 252.707015][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.716267][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.757524][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.766832][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.810290][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.819657][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.836001][ T8214] ldm_validate_partition_table(): Disk read failed. [ 252.863798][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.873032][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.916968][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.926231][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.970403][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.006223][ T8220] syz.1.1203: attempt to access beyond end of device [ 253.006223][ T8220] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 253.028585][ T8214] Dev loop7: unable to read RDB block 0 [ 253.061600][ T8226] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1205: bg 0: block 7: invalid block bitmap [ 253.144584][ T8214] loop7: unable to read partition table [ 253.176767][ T8219] syz.1.1203: attempt to access beyond end of device [ 253.176767][ T8219] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 253.206257][ T8214] loop7: partition table beyond EOD, truncated [ 253.217146][ T8226] EXT4-fs (loop6): Remounting filesystem read-only [ 253.246892][ T8214] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 253.265871][ T8226] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 253.351219][ T8226] EXT4-fs (loop6): Remounting filesystem read-only [ 253.439762][ T8226] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2921: inode #11: comm syz.6.1205: corrupted xattr block 95 [ 253.543330][ T8226] EXT4-fs (loop6): Remounting filesystem read-only [ 253.633119][ T8226] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 253.677652][ T8236] loop0: detected capacity change from 0 to 512 [ 253.692520][ T8226] EXT4-fs (loop6): 1 orphan inode deleted [ 253.708621][ T8226] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 253.725599][ T8236] EXT4-fs: Ignoring removed orlov option [ 253.834709][ T8236] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 1: comm syz.0.1206: invalid block [ 253.876250][ T8226] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.6.1205: path /162/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=3, size=60 fake=0 [ 253.945756][ T8236] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1206: couldn't read orphan inode 11 (err -117) [ 253.989250][ T8236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.000188][ T8226] EXT4-fs (loop6): Remounting filesystem read-only [ 254.086252][ T8236] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.1206: Directory hole found for htree leaf block 0 [ 254.165527][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 254.291109][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 254.572477][ T8246] loop0: detected capacity change from 0 to 2048 [ 254.676943][ T8246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.747148][ T8250] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 254.851923][ T8238] loop1: detected capacity change from 0 to 32768 [ 254.903368][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 254.960532][ T8238] JBD2: Ignoring recovery information on journal [ 255.178397][ T8238] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 255.234757][ T8261] loop7: detected capacity change from 0 to 1024 [ 255.564941][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 255.651532][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.657976][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.806219][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 256.195684][ T8269] loop7: detected capacity change from 0 to 128 [ 256.431514][ T8276] loop0: detected capacity change from 0 to 1024 [ 256.439665][ T8271] input: syz0 as /devices/virtual/input/input16 [ 256.518922][ T8276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.525596][ T8276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.680086][ T8276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.703137][ T8256] loop6: detected capacity change from 0 to 32768 [ 256.759198][ T8276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.856851][ T8256] XFS (loop6): Mounting V5 Filesystem [ 256.876632][ T8276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 257.035986][ T8256] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 257.189087][ T8256] XFS (loop6): Starting recovery (logdev: internal) [ 257.218986][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 257.359720][ T8256] XFS (loop6): Ending recovery (logdev: internal) [ 257.514390][ T8298] loop0: detected capacity change from 0 to 1024 [ 257.850350][ T5435] XFS (loop6): Unmounting Filesystem [ 257.952785][ T8298] hfsplus: request for non-existent node 62977 in B*Tree [ 258.016073][ T8298] hfsplus: request for non-existent node 62977 in B*Tree [ 258.176924][ T9] hfsplus: b-tree write err: -5, ino 3 [ 258.495627][ T8311] loop0: detected capacity change from 0 to 512 [ 258.553478][ T8311] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.622136][ T8301] loop1: detected capacity change from 0 to 32768 [ 258.640320][ T8311] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1234: invalid indirect mapped block 4294967295 (level 0) [ 258.710355][ T8301] XFS (loop1): Mounting V5 Filesystem [ 258.770416][ T8311] EXT4-fs (loop0): Remounting filesystem read-only [ 258.804363][ T8301] XFS (loop1): Ending clean mount [ 258.818805][ T8311] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1234: invalid indirect mapped block 4294967295 (level 1) [ 258.925108][ T8311] EXT4-fs (loop0): Remounting filesystem read-only [ 258.939609][ T8322] loop7: detected capacity change from 0 to 512 [ 258.966784][ T8311] EXT4-fs (loop0): 1 orphan inode deleted [ 258.972686][ T8311] EXT4-fs (loop0): 1 truncate cleaned up [ 259.051485][ T8322] EXT4-fs (loop7): 1 truncate cleaned up [ 259.085060][ T8311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 259.095999][ T4274] XFS (loop1): Unmounting Filesystem [ 259.136497][ T8322] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 259.329412][ T26] audit: type=1800 audit(1790056364.596:38): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1235" name="file1" dev="loop7" ino=13 res=0 errno=0 [ 259.500568][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 259.577779][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 259.825099][ T8332] loop7: detected capacity change from 0 to 512 [ 260.237622][ T8337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.343285][ T8341] loop1: detected capacity change from 0 to 128 [ 260.601097][ T8347] loop6: detected capacity change from 0 to 164 [ 261.158607][ T8363] loop1: detected capacity change from 0 to 1024 [ 261.238371][ T8363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.449766][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 261.786295][ T8380] block2mtd: illegal erase size [ 262.047380][ T26] audit: type=1400 audit(1790056367.316:39): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=8383 comm="syz.1.1257" name="//o" offset=55 [ 263.179758][ T8411] loop6: detected capacity change from 0 to 1024 [ 263.291739][ T8415] loop4: detected capacity change from 0 to 2048 [ 263.444845][ T8414] loop1: detected capacity change from 0 to 4096 [ 263.530453][ T8414] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 263.559883][ T8415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.654544][ T47] hfsplus: b-tree write err: -5, ino 3 [ 263.741451][ T8415] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.837974][ T8424] loop0: detected capacity change from 0 to 4096 [ 263.890331][ T8427] loop6: detected capacity change from 0 to 512 [ 264.015319][ T8429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.052561][ T8427] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1277: inode has both inline data and extents flags [ 264.252764][ T8427] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1277: couldn't read orphan inode 15 (err -117) [ 264.276040][ T8431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1273: bg 0: block 345: padding at end of block bitmap is not set [ 264.382762][ T8427] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 264.620961][ T8431] EXT4-fs (loop4): Remounting filesystem read-only [ 264.903246][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 265.072237][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 265.262327][ T8449] loop6: detected capacity change from 0 to 7 [ 265.334168][ C0] blk_print_req_error: 16 callbacks suppressed [ 265.334181][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.350223][ C0] buffer_io_error: 15 callbacks suppressed [ 265.350235][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.444132][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.453864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.547653][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.556957][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.602910][ T8457] program syz.7.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.626393][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.636134][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.701803][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.711593][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.809742][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.818972][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.914476][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.923753][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.937317][ T4356] ldm_validate_partition_table(): Disk read failed. [ 265.991024][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.001028][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 266.083511][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.092937][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 266.143549][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.153722][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 266.214695][ T4356] Dev loop6: unable to read RDB block 0 [ 266.237764][ T4356] loop6: unable to read partition table [ 266.264292][ T4356] loop6: partition table beyond EOD, truncated [ 266.314480][ T3639] ldm_validate_partition_table(): Disk read failed. [ 266.347511][ T3639] Dev loop6: unable to read RDB block 0 [ 266.380362][ T3639] loop6: unable to read partition table [ 266.417303][ T3639] loop6: partition table beyond EOD, truncated [ 266.877700][ T8487] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1305'. [ 267.052139][ T8485] loop1: detected capacity change from 0 to 4096 [ 267.106812][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 267.394197][ T4274] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 267.442761][ T4274] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 267.714612][ T8500] loop0: detected capacity change from 0 to 128 [ 267.765554][ T8500] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.965421][ T4328] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.591520][ T8516] loop4: detected capacity change from 0 to 1024 [ 268.735426][ T8516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.166444][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 269.173979][ T8527] program syz.0.1321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.484133][ T8537] loop7: detected capacity change from 0 to 256 [ 269.524541][ T8539] tipc: Started in network mode [ 269.553627][ T8539] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 269.579850][ T8537] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 269.617067][ T8539] tipc: Enabled bearer , priority 0 [ 270.387439][ T8551] x86: Booting SMP configuration: [ 270.426246][ T8551] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 270.467698][ T8557] loop7: detected capacity change from 0 to 16 [ 270.486318][ T8555] loop0: detected capacity change from 0 to 2048 [ 270.597906][ T8557] erofs: (device loop7): mounted with root inode @ nid 36. [ 270.646049][ T7720] tipc: Node number set to 43690 [ 270.668371][ T8555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 270.771273][ T8555] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.180898][ T8566] loop1: detected capacity change from 0 to 256 [ 271.200655][ T8567] loop7: detected capacity change from 0 to 128 [ 271.228712][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 271.249392][ T8567] FAT-fs (loop7): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 271.331393][ T8571] loop4: detected capacity change from 0 to 128 [ 271.492019][ T8571] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 271.584162][ T8571] hpfs: filesystem error: improperly stopped [ 271.612695][ T8573] loop0: detected capacity change from 0 to 1024 [ 271.625078][ T8571] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 271.697162][ T8571] hpfs: You really don't want any checks? You are crazy... [ 271.704483][ T8571] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 271.785840][ T8571] hpfs: code page support is disabled [ 271.832119][ T8571] hpfs: hpfs_map_4sectors(): unaligned read [ 271.876349][ T8571] hpfs: hpfs_map_4sectors(): unaligned read [ 271.882346][ T8571] hpfs: filesystem error: unable to find root dir [ 272.057395][ T8571] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 272.776679][ T8597] loop6: detected capacity change from 0 to 2048 [ 272.869330][ T8597] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 272.906956][ T8597] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.224321][ T8606] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1350: bg 0: block 345: padding at end of block bitmap is not set [ 273.296124][ T8606] EXT4-fs (loop6): Remounting filesystem read-only [ 273.378754][ T8611] ima: rule for LSM 'unconfined_t' is undefined [ 273.424185][ T26] audit: type=1807 audit(1790056378.646:40): action=measure func=FILE_CHECK obj_type=unconfined_t res=0 [ 273.446604][ T26] audit: type=1802 audit(1790056378.706:41): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1354" res=0 errno=0 [ 273.448716][ T8610] ima: policy update failed [ 273.567362][ T26] audit: type=1802 audit(1790056378.836:42): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1354" res=0 errno=0 [ 273.607239][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 273.896393][ T8621] loop1: detected capacity change from 0 to 256 [ 273.973279][ T8621] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 274.187593][ T2973] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 274.195535][ T8626] loop7: detected capacity change from 0 to 1024 [ 274.766939][ T8639] loop6: detected capacity change from 0 to 4096 [ 274.891824][ T8639] ntfs: volume version 3.1. [ 275.044449][ T8649] loop4: detected capacity change from 0 to 512 [ 275.891874][ T8637] loop0: detected capacity change from 0 to 32768 [ 276.031192][ T8637] XFS (loop0): Mounting V5 Filesystem [ 276.233731][ T8637] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 276.323295][ T8637] XFS (loop0): Starting recovery (logdev: internal) [ 276.398354][ T8637] XFS (loop0): Ending recovery (logdev: internal) [ 276.590141][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 276.731593][ T4272] XFS (loop0): Unmounting Filesystem [ 276.744245][ T8689] netlink: 'syz.7.1385': attribute type 1 has an invalid length. [ 276.975827][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.178126][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.218679][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 277.266133][ T7] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 277.278428][ T8701] loop6: detected capacity change from 0 to 164 [ 277.316203][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.324300][ T7] usb 5-1: Product: syz [ 277.379502][ T7] usb 5-1: Manufacturer: syz [ 277.384201][ T7] usb 5-1: SerialNumber: syz [ 277.437570][ T7] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 277.513910][ T7] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 277.513910][ T7] Please send a copy of this message to and [ 277.726844][ T8710] loop0: detected capacity change from 0 to 512 [ 277.767134][ T8710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.900929][ T8710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 277.930786][ T7] ums-sddr09: probe of 5-1:1.0 failed with error -5 [ 277.980692][ T8710] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.004508][ T7] usb 5-1: USB disconnect, device number 11 [ 278.013195][ T8716] loop7: detected capacity change from 0 to 2048 [ 278.123652][ T8720] program syz.1.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.157084][ T8716] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 278.192040][ T8716] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.221480][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 278.417973][ T8724] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1395: bg 0: block 345: padding at end of block bitmap is not set [ 278.499559][ T8724] EXT4-fs (loop7): Remounting filesystem read-only [ 278.801447][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 278.931288][ T8738] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1405'. [ 280.400518][ T8765] loop0: detected capacity change from 0 to 4096 [ 280.859909][ T4272] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 280.896048][ T4272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 281.283065][ T8758] loop7: detected capacity change from 0 to 40427 [ 281.326118][ T8758] F2FS-fs (loop7): Corrupted extension count (327717 + 1 > 64) [ 281.346032][ T8758] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 281.354542][ T8758] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 281.459829][ T8758] F2FS-fs (loop7): invalid crc value [ 281.466256][ T8781] Mass Storage Function, version: 2009/09/11 [ 281.505450][ T8781] LUN: removable file: (no medium) [ 281.512896][ T8758] F2FS-fs (loop7): Found nat_bits in checkpoint [ 281.716377][ T8758] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 281.747887][ T8758] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 282.018076][ T8758] F2FS-fs (loop7): access invalid blkaddr:2816 [ 282.064825][ T8758] CPU: 0 PID: 8758 Comm: syz.7.1410 Not tainted syzkaller #0 [ 282.072290][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.082405][ T8758] Call Trace: [ 282.085744][ T8758] [ 282.088703][ T8758] dump_stack_lvl+0x188/0x24e [ 282.093599][ T8758] ? show_regs_print_info+0x12/0x12 [ 282.098846][ T8758] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 282.104696][ T8758] ? kernel_text_address+0x9c/0xd0 [ 282.109866][ T8758] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 282.115781][ T8758] f2fs_map_blocks+0xba8/0x36a0 [ 282.120737][ T8758] ? f2fs_get_block+0x140/0x140 [ 282.125662][ T8758] ? xa_load+0x60/0x2e0 [ 282.129879][ T8758] ? xa_load+0x2b3/0x2e0 [ 282.134181][ T8758] ? xa_load+0x60/0x2e0 [ 282.138420][ T8758] ? page_index+0xe6/0x490 [ 282.142881][ T8758] f2fs_mpage_readpages+0xa40/0x2830 [ 282.148226][ T8758] ? dquot_release_reservation_block+0xa0/0xa0 [ 282.154421][ T8758] ? __mod_lruvec_page_state+0xa1/0x410 [ 282.160284][ T8758] ? f2fs_readahead+0x180/0x380 [ 282.165178][ T8758] ? blk_start_plug+0x94/0x110 [ 282.169987][ T8758] read_pages+0x187/0x860 [ 282.174366][ T8758] ? __lock_acquire+0x7c40/0x7c40 [ 282.179437][ T8758] ? page_cache_ra_unbounded+0x750/0x750 [ 282.185109][ T8758] ? folio_add_lru+0x319/0xcf0 [ 282.189913][ T8758] ? folio_add_lru+0x508/0xcf0 [ 282.195024][ T8758] ? filemap_add_folio+0x186/0x3d0 [ 282.200190][ T8758] page_cache_ra_unbounded+0x667/0x750 [ 282.205703][ T8758] f2fs_readdir+0x48b/0xa00 [ 282.210265][ T8758] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 282.215508][ T8758] ? mutex_lock_nested+0x10/0x10 [ 282.220486][ T8758] ? end_current_label_crit_section+0x14b/0x170 [ 282.226801][ T8758] ? iterate_dir+0x10d/0x550 [ 282.231466][ T8758] ? down_read_killable+0x1cc/0x340 [ 282.236778][ T8758] ? fsnotify_perm+0x248/0x550 [ 282.241611][ T8758] iterate_dir+0x213/0x550 [ 282.246079][ T8758] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 282.251327][ T8758] __se_sys_getdents64+0xf2/0x270 [ 282.256417][ T8758] ? __x64_sys_getdents64+0x80/0x80 [ 282.261671][ T8758] ? filldir+0x6f0/0x6f0 [ 282.266061][ T8758] ? lockdep_hardirqs_on+0x94/0x140 [ 282.271339][ T8758] do_syscall_64+0x4c/0xa0 [ 282.275880][ T8758] ? clear_bhb_loop+0x60/0xb0 [ 282.280593][ T8758] ? clear_bhb_loop+0x60/0xb0 [ 282.285311][ T8758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.291266][ T8758] RIP: 0033:0x7f9c76d9e159 [ 282.295897][ T8758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.316451][ T8758] RSP: 002b:00007f9c77bb1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 282.325114][ T8758] RAX: ffffffffffffffda RBX: 00007f9c77025fa0 RCX: 00007f9c76d9e159 [ 282.333135][ T8758] RDX: 00000000000000dd RSI: 0000200000000080 RDI: 0000000000000004 [ 282.341140][ T8758] RBP: 00007f9c76e3506b R08: 0000000000000000 R09: 0000000000000000 [ 282.349142][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.357140][ T8758] R13: 00007f9c77026038 R14: 00007f9c77025fa0 R15: 00007ffc2d912ac8 [ 282.365156][ T8758] [ 282.368467][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.563205][ T8811] loop0: detected capacity change from 0 to 128 [ 283.585152][ T8758] F2FS-fs (loop7): access invalid blkaddr:2816 [ 283.610547][ T8811] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 283.624390][ T8758] CPU: 0 PID: 8758 Comm: syz.7.1410 Not tainted syzkaller #0 [ 283.631962][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.642068][ T8758] Call Trace: [ 283.645398][ T8758] [ 283.648406][ T8758] dump_stack_lvl+0x188/0x24e [ 283.653152][ T8758] ? show_regs_print_info+0x12/0x12 [ 283.658499][ T8758] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 283.664632][ T8758] ? f2fs_sanity_check_ckpt+0x2a10/0x2a10 [ 283.670679][ T8758] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 283.676196][ T8758] f2fs_map_blocks+0xba8/0x36a0 [ 283.681419][ T8758] ? f2fs_get_block+0x140/0x140 [ 283.686787][ T8758] ? xa_load+0x60/0x2e0 [ 283.690993][ T8758] ? xa_load+0x2b3/0x2e0 [ 283.695361][ T8758] ? xa_load+0x60/0x2e0 [ 283.699645][ T8758] ? page_index+0xe6/0x490 [ 283.704421][ T8758] f2fs_mpage_readpages+0xa40/0x2830 [ 283.710365][ T8758] ? dquot_release_reservation_block+0xa0/0xa0 [ 283.716955][ T8758] ? __mod_lruvec_page_state+0xa1/0x410 [ 283.722828][ T8758] ? f2fs_readahead+0x180/0x380 [ 283.727806][ T8758] ? blk_start_plug+0x94/0x110 [ 283.732628][ T8758] read_pages+0x187/0x860 [ 283.737020][ T8758] ? __lock_acquire+0x7c40/0x7c40 [ 283.742398][ T8758] ? page_cache_ra_unbounded+0x750/0x750 [ 283.748088][ T8758] ? folio_add_lru+0x319/0xcf0 [ 283.752901][ T8758] ? folio_add_lru+0x508/0xcf0 [ 283.757711][ T8758] ? filemap_add_folio+0x186/0x3d0 [ 283.762861][ T8758] page_cache_ra_unbounded+0x667/0x750 [ 283.768377][ T8758] f2fs_readdir+0x48b/0xa00 [ 283.772923][ T8758] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 283.778281][ T8758] ? mutex_lock_nested+0x10/0x10 [ 283.783309][ T8758] ? end_current_label_crit_section+0x14b/0x170 [ 283.789634][ T8758] ? iterate_dir+0x10d/0x550 [ 283.794281][ T8758] ? down_read_killable+0x1cc/0x340 [ 283.799532][ T8758] ? fsnotify_perm+0x248/0x550 [ 283.804352][ T8758] iterate_dir+0x213/0x550 [ 283.808821][ T8758] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 283.814150][ T8758] __se_sys_getdents64+0xf2/0x270 [ 283.819326][ T8758] ? __x64_sys_getdents64+0x80/0x80 [ 283.824586][ T8758] ? filldir+0x6f0/0x6f0 [ 283.828896][ T8758] ? lockdep_hardirqs_on+0x94/0x140 [ 283.834429][ T8758] do_syscall_64+0x4c/0xa0 [ 283.838898][ T8758] ? clear_bhb_loop+0x60/0xb0 [ 283.844013][ T8758] ? clear_bhb_loop+0x60/0xb0 [ 283.849187][ T8758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.855253][ T8758] RIP: 0033:0x7f9c76d9e159 [ 283.859743][ T8758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.881979][ T8758] RSP: 002b:00007f9c77bb1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 283.890442][ T8758] RAX: ffffffffffffffda RBX: 00007f9c77025fa0 RCX: 00007f9c76d9e159 [ 283.899135][ T8758] RDX: 00000000000000dd RSI: 0000200000000080 RDI: 0000000000000004 [ 283.907345][ T8758] RBP: 00007f9c76e3506b R08: 0000000000000000 R09: 0000000000000000 [ 283.915393][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.923572][ T8758] R13: 00007f9c77026038 R14: 00007f9c77025fa0 R15: 00007ffc2d912ac8 [ 283.932138][ T8758] [ 284.002022][ T8811] hpfs: filesystem error: improperly stopped [ 284.035855][ T8811] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 284.043772][ T8811] hpfs: You really don't want any checks? You are crazy... [ 284.105934][ T8811] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 284.114159][ T8811] hpfs: code page support is disabled [ 284.166300][ T8811] hpfs: hpfs_map_4sectors(): unaligned read [ 284.173116][ T8811] hpfs: hpfs_map_4sectors(): unaligned read [ 284.206012][ T8811] hpfs: filesystem error: unable to find root dir [ 284.240425][ T8813] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.276994][ T8813] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.279425][ T8811] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 284.295975][ T8813] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.325404][ T8811] [ 284.376173][ T8813] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.415494][ T8813] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.447493][ T8813] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.475899][ T8806] loop4: detected capacity change from 0 to 32768 [ 284.483644][ T8813] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.506078][ T8813] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.662644][ T8806] XFS (loop4): Mounting V5 Filesystem [ 284.764889][ T8806] XFS (loop4): Ending clean mount [ 285.043829][ T26] audit: type=1326 audit(1790056390.306:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb79e159 code=0x7ffc0000 [ 285.047347][ T4287] XFS (loop4): Unmounting Filesystem [ 285.077591][ T8826] loop6: detected capacity change from 0 to 512 [ 285.115773][ T26] audit: type=1326 audit(1790056390.356:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb79e159 code=0x7ffc0000 [ 285.164246][ T26] audit: type=1326 audit(1790056390.356:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb79e159 code=0x7ffc0000 [ 285.235777][ T26] audit: type=1326 audit(1790056390.356:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd5cb79e159 code=0x7ffc0000 [ 285.339192][ T26] audit: type=1326 audit(1790056390.496:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb79e159 code=0x7ffc0000 [ 285.384847][ T26] audit: type=1326 audit(1790056390.496:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5cb79dec2 code=0x7ffc0000 [ 285.410221][ T26] audit: type=1326 audit(1790056390.496:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd5cb79df57 code=0x7ffc0000 [ 285.435090][ T26] audit: type=1326 audit(1790056390.496:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd5cb75ae51 code=0x7ffc0000 [ 285.439885][ T8826] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1435: inode has both inline data and extents flags [ 285.484845][ T26] audit: type=1326 audit(1790056390.496:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd5cb79ef49 code=0x7ffc0000 [ 285.510630][ T26] audit: type=1326 audit(1790056390.496:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd5cb75aebb code=0x7ffc0000 [ 285.554794][ T8758] syz.7.1410: attempt to access beyond end of device [ 285.554794][ T8758] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 285.727976][ T6334] syz-executor: attempt to access beyond end of device [ 285.727976][ T6334] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.797133][ T8826] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1435: couldn't read orphan inode 15 (err -117) [ 285.905970][ T8826] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 286.103625][ T8843] bridge0: port 2(bridge_slave_1) entered listening state [ 286.171191][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.393481][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 287.102631][ T8859] loop4: detected capacity change from 0 to 32768 [ 287.154258][ T8859] JBD2: Ignoring recovery information on journal [ 287.212083][ T8859] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 287.229525][ T8859] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 0 but claims that 2046 are free [ 287.249622][ T8859] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 287.261066][ T8859] OCFS2: File system is now read-only. [ 287.270663][ T8859] (syz.4.1449,8859,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 287.281169][ T8859] (syz.4.1449,8859,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 287.289369][ T8859] (syz.4.1449,8859,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 287.298737][ T8859] (syz.4.1449,8859,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 287.307600][ T8859] (syz.4.1449,8859,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 287.317355][ T8859] (syz.4.1449,8859,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 287.326213][ T8859] (syz.4.1449,8859,0):ocfs2_mknod_locked:646 ERROR: status = -30 [ 287.334001][ T8859] (syz.4.1449,8859,0):ocfs2_mknod:390 ERROR: status = -30 [ 287.341960][ T8859] (syz.4.1449,8859,0):ocfs2_mknod:509 ERROR: status = -30 [ 287.350033][ T8859] (syz.4.1449,8859,0):ocfs2_create:683 ERROR: status = -30 [ 287.500801][ T8861] loop1: detected capacity change from 0 to 4096 [ 287.507969][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 287.611281][ T8861] ntfs: volume version 3.1. [ 287.781865][ T8874] loop0: detected capacity change from 0 to 512 [ 287.789021][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1455'. [ 288.486627][ T8887] loop1: detected capacity change from 0 to 256 [ 289.163638][ T8892] loop7: detected capacity change from 0 to 4096 [ 289.394049][ T8881] loop4: detected capacity change from 0 to 32768 [ 289.404536][ T8892] ntfs3: loop7: ino=9, attr_set_size [ 289.517771][ T8881] XFS (loop4): Mounting V5 Filesystem [ 289.621638][ T8905] loop1: detected capacity change from 0 to 256 [ 289.647307][ T8881] XFS (loop4): Ending clean mount [ 289.821181][ T8884] loop0: detected capacity change from 0 to 32768 [ 289.830502][ T8905] FAT-fs (loop1): Directory bread(block 64) failed [ 289.855873][ T8905] FAT-fs (loop1): Directory bread(block 65) failed [ 289.873078][ T8905] FAT-fs (loop1): Directory bread(block 66) failed [ 289.907213][ T8905] FAT-fs (loop1): Directory bread(block 67) failed [ 289.949397][ T8905] FAT-fs (loop1): Directory bread(block 68) failed [ 289.970283][ T8884] XFS (loop0): Mounting V5 Filesystem [ 289.992483][ T8905] FAT-fs (loop1): Directory bread(block 69) failed [ 290.010714][ T4287] XFS (loop4): Unmounting Filesystem [ 290.094040][ T8905] FAT-fs (loop1): Directory bread(block 70) failed [ 290.116581][ T8884] XFS (loop0): Ending clean mount [ 290.135834][ T8905] FAT-fs (loop1): Directory bread(block 71) failed [ 290.161763][ T8884] XFS (loop0): User initiated shutdown received. [ 290.186006][ T8905] FAT-fs (loop1): Directory bread(block 72) failed [ 290.192634][ T8905] FAT-fs (loop1): Directory bread(block 73) failed [ 290.228047][ T8884] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 290.312985][ T8884] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 290.516447][ T4272] XFS (loop0): Unmounting Filesystem [ 291.078740][ T8926] netlink: 'syz.7.1474': attribute type 1 has an invalid length. [ 291.141652][ T8928] vivid-007: disconnect [ 291.159595][ T8928] vivid-007: reconnect [ 291.403275][ T8932] loop7: detected capacity change from 0 to 512 [ 291.471713][ T8932] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 291.646094][ T8932] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 291.807537][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 292.058373][ T8954] cramfs: checking physical address 0x00000001443bc000 for linear cramfs image [ 292.125613][ T8954] cramfs: wrong magic [ 292.186784][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1484'. [ 292.206577][ T8954] cramfs: wrong magic [ 292.281007][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 292.281024][ T26] audit: type=1400 audit(1790056397.546:73): apparmor="STATUS" operation="profile_load" profile="unconfined" name=66226F pid=8958 comm="syz.4.1486" [ 292.532368][ T8964] loop1: detected capacity change from 0 to 512 [ 292.656867][ T8964] EXT4-fs (loop1): 1 truncate cleaned up [ 292.662659][ T8964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 293.066727][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 293.079786][ T8974] loop6: detected capacity change from 0 to 4096 [ 293.131238][ T8951] loop7: detected capacity change from 0 to 32768 [ 293.138625][ T8974] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 293.231940][ T8951] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 293.303855][ T8951] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 293.345542][ T8951] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 293.356592][ T8974] ntfs3: loop6: failed to convert "c46c" to iso8859-13 [ 293.406634][ T8951] BTRFS info (device loop7): use zstd compression, level 3 [ 293.455963][ T8951] BTRFS info (device loop7): using free space tree [ 293.745871][ T8951] BTRFS info (device loop7): enabling ssd optimizations [ 293.851394][ T26] audit: type=1800 audit(1790056399.116:74): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1481" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 294.011168][ T8966] loop0: detected capacity change from 0 to 32768 [ 294.099248][ T8966] XFS (loop0): Mounting V5 Filesystem [ 294.230314][ T8966] XFS (loop0): Ending clean mount [ 294.310592][ T8976] loop4: detected capacity change from 0 to 32768 [ 294.325849][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 294.472445][ T4272] XFS (loop0): Unmounting Filesystem [ 294.521605][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.539855][ T7] usb 2-1: config 0 has no interface number 0 [ 294.610161][ T7] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.651537][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.662075][ T6334] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 294.686078][ T7] usb 2-1: Product: syz [ 294.707352][ T7] usb 2-1: Manufacturer: syz [ 294.712180][ T7] usb 2-1: SerialNumber: syz [ 294.800522][ T7] usb 2-1: config 0 descriptor?? [ 295.031668][ T7] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.052709][ T7] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.074273][ T7] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.094364][ T7] usb 2-1: media controller created [ 295.124085][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.289318][ T7] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 296.487541][ T7] usb 2-1: USB disconnect, device number 9 [ 296.692706][ T9042] program syz.0.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.796722][ T9046] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 296.958124][ T47] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 296.984841][ T9046] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 297.035427][ T9054] loop0: detected capacity change from 0 to 512 [ 297.142111][ T9054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 298.061037][ T9057] loop6: detected capacity change from 0 to 131072 [ 298.074359][ T9057] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 298.082106][ T9057] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 298.095679][ T9057] F2FS-fs (loop6): invalid crc value [ 298.132490][ T9057] F2FS-fs (loop6): Found nat_bits in checkpoint [ 298.200314][ T9057] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 298.207897][ T9057] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 298.257838][ T9054] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 298.312050][ T9054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.366409][ T9054] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 298.415887][ T9054] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 298.533939][ T9068] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 298.547013][ T9068] ext4 filesystem being remounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.866675][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 299.269462][ T9088] loop7: detected capacity change from 0 to 512 [ 299.308892][ T9088] EXT4-fs: inline encryption not supported [ 299.347685][ T9088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 299.417483][ T9088] EXT4-fs (loop7): 1 truncate cleaned up [ 299.438835][ T9088] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 299.559242][ T9088] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 203 vs 220 free clusters [ 299.820060][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 300.391534][ T9101] loop0: detected capacity change from 0 to 4096 [ 300.459529][ T9101] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 300.691743][ T9101] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 301.112875][ T9121] loop7: detected capacity change from 0 to 512 [ 301.572177][ T9133] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 301.626210][ T9133] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 301.820041][ T9139] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1548'. [ 301.844890][ T9110] loop1: detected capacity change from 0 to 32768 [ 301.994394][ T9110] XFS (loop1): Mounting V5 Filesystem [ 302.106922][ T9110] XFS (loop1): Ending clean mount [ 302.340816][ T9159] loop4: detected capacity change from 0 to 512 [ 302.378777][ T9159] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.397030][ T4274] XFS (loop1): Unmounting Filesystem [ 303.106043][ T9176] loop0: detected capacity change from 0 to 4096 [ 303.200420][ T9179] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.349195][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1556'. [ 303.375892][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1556'. [ 303.398968][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1556'. [ 303.429242][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1556'. [ 303.636317][ T9183] program syz.1.1567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.907061][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1565'. [ 303.960598][ T9187] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1565'. [ 303.987653][ T9189] Set syz1 is full, maxelem 0 reached [ 304.764262][ T9213] loop0: detected capacity change from 0 to 512 [ 304.813597][ T9213] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.857804][ T9213] EXT4-fs (loop0): orphan cleanup on readonly fs [ 304.942404][ T9213] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1579: Allocating blocks 41-42 which overlap fs metadata [ 305.080318][ T9213] Quota error (device loop0): write_blk: dquota write failed [ 305.130732][ T9213] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 305.184906][ T9213] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1579: Failed to acquire dquot type 0 [ 305.242856][ T9213] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 305.304174][ T9213] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1579: corrupted inode contents [ 305.355941][ T9213] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.1579: mark_inode_dirty error [ 305.403214][ T9213] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1579: corrupted inode contents [ 305.460450][ T9213] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.1579: mark_inode_dirty error [ 305.516559][ T9213] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1579: corrupted inode contents [ 305.575109][ T9213] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 305.617366][ T9213] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1579: corrupted inode contents [ 305.663229][ T9207] loop4: detected capacity change from 0 to 40427 [ 305.685973][ T9213] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.1579: mark_inode_dirty error [ 305.712743][ T9213] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 305.724432][ T9207] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 305.734219][ T9207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 305.756437][ T9213] EXT4-fs (loop0): 1 truncate cleaned up [ 305.777082][ T9213] EXT4-fs (loop0): pa ffff888073fe3620: logic 1, phys. 41, len 23 [ 305.786938][ T9213] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 305.816143][ T9207] F2FS-fs (loop4): invalid crc value [ 305.857815][ T9207] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 305.886259][ T9213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.076007][ T9213] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.1579: Abort forced by user [ 306.125510][ T9230] loop7: detected capacity change from 0 to 1024 [ 306.146149][ T9213] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 306.224066][ T9207] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 306.256105][ T9207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 306.387005][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 306.469617][ T9207] syz.4.1577: attempt to access beyond end of device [ 306.469617][ T9207] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 306.631760][ T9207] syz.4.1577: attempt to access beyond end of device [ 306.631760][ T9207] loop4: rw=2049, sector=53256, nr_sectors = 48 limit=40427 [ 306.700221][ T7] smpboot: CPU 1 is now offline [ 306.950872][ T4287] syz-executor: attempt to access beyond end of device [ 306.950872][ T4287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 307.595426][ T9248] loop0: detected capacity change from 0 to 128 [ 307.691544][ T9250] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 307.708942][ T9248] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 307.784404][ T9248] hpfs: filesystem error: improperly stopped [ 307.794415][ T9239] loop7: detected capacity change from 0 to 32768 [ 307.833826][ T9248] hpfs: You really don't want any checks? You are crazy... [ 307.887290][ T9239] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 307.930892][ T9248] hpfs: hpfs_map_sector(): read error [ 307.971672][ T9239] JBD2: Ignoring recovery information on journal [ 307.999965][ T9248] hpfs: code page support is disabled [ 308.066949][ T9248] hpfs: filesystem error: map_dirent: not a directory [ 308.129373][ T9248] [ 308.156171][ T9248] hpfs: hpfs_map_4sectors(): unaligned read [ 308.201685][ T9248] hpfs: filesystem error: unable to find root dir [ 308.244175][ T9239] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 308.724321][ T9239] syz.7.1588 (9239) used greatest stack depth: 19136 bytes left [ 308.986549][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1601'. [ 309.347704][ T9272] loop1: detected capacity change from 0 to 16 [ 309.399406][ T9272] erofs: (device loop1): mounted with root inode @ nid 36. [ 309.449105][ T26] audit: type=1800 audit(1790056414.716:75): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1603" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 309.677621][ T6334] ocfs2: Unmounting device (7,7) on (node local) [ 310.137026][ T9285] loop6: detected capacity change from 0 to 128 [ 310.488941][ T9285] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 310.554930][ T9285] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.202036][ T5435] EXT4-fs (loop6): unmounting filesystem. [ 311.261466][ T9279] syz.1.1605 (9279): drop_caches: 2 [ 311.454477][ T9308] loop7: detected capacity change from 0 to 16 [ 311.566234][ T9308] erofs: (device loop7): mounted with root inode @ nid 36. [ 311.658847][ T9311] loop4: detected capacity change from 0 to 1024 [ 311.686837][ T9308] syz.7.1616: attempt to access beyond end of device [ 311.686837][ T9308] loop7: rw=0, sector=34225530872, nr_sectors = 8 limit=16 [ 311.863762][ T9308] syz.7.1616: attempt to access beyond end of device [ 311.863762][ T9308] loop7: rw=0, sector=34225530872, nr_sectors = 8 limit=16 [ 312.116091][ T4328] hfsplus: b-tree write err: -5, ino 25 [ 312.121966][ T4328] hfsplus: b-tree write err: -5, ino 4 [ 312.205992][ T4328] hfsplus: b-tree write err: -5, ino 2 [ 312.409434][ T9325] netlink: 'syz.7.1624': attribute type 9 has an invalid length. [ 312.481821][ T9328] program syz.1.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.502122][ T9325] netlink: 668 bytes leftover after parsing attributes in process `syz.7.1624'. [ 312.533076][ T9329] loop4: detected capacity change from 0 to 2048 [ 312.640578][ T9329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 312.871651][ T9329] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 312.966360][ T9329] EXT4-fs: journaled quota format not specified [ 313.196413][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 313.233064][ T9313] loop0: detected capacity change from 0 to 32768 [ 313.362439][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.403540][ T9313] XFS (loop0): Mounting V5 Filesystem [ 313.526670][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.557553][ T9313] XFS (loop0): Ending clean mount [ 313.585637][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.677343][ T9346] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 313.821280][ T4272] XFS (loop0): Unmounting Filesystem [ 314.418656][ T9376] loop7: detected capacity change from 0 to 256 [ 314.669559][ T26] audit: type=1326 audit(1790056419.936:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 314.872160][ T26] audit: type=1326 audit(1790056419.986:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 315.212307][ T26] audit: type=1326 audit(1790056419.986:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 315.466148][ T26] audit: type=1326 audit(1790056419.986:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 315.696027][ T26] audit: type=1326 audit(1790056419.986:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 315.894279][ T9406] loop7: detected capacity change from 0 to 512 [ 315.986137][ T26] audit: type=1326 audit(1790056419.996:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 316.052480][ T9406] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 316.213847][ T9406] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.1653: inode #88: comm syz.7.1653: iget: illegal inode # [ 316.245971][ T26] audit: type=1326 audit(1790056419.996:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 316.385218][ T9406] EXT4-fs (loop7): Remounting filesystem read-only [ 316.425821][ T9406] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1653: error while reading EA inode 88 err=-117 [ 316.465944][ T26] audit: type=1326 audit(1790056419.996:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 316.535888][ T9406] EXT4-fs (loop7): Remounting filesystem read-only [ 316.550270][ T9420] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 316.617687][ T9406] EXT4-fs (loop7): 1 orphan inode deleted [ 316.623587][ T9406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 316.673661][ T26] audit: type=1326 audit(1790056419.996:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 316.807585][ T9406] EXT4-fs (loop7): shut down requested (2) [ 316.905046][ T26] audit: type=1326 audit(1790056419.996:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fddb239e159 code=0x7ffc0000 [ 317.050116][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 317.092925][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100754][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.647403][ T9436] loop7: detected capacity change from 0 to 64 [ 318.680265][ T9456] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1674'. [ 318.756263][ T9459] program syz.6.1675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.568891][ T9465] loop1: detected capacity change from 0 to 256 [ 319.627566][ T9465] exfat: Deprecated parameter 'utf8' [ 319.668957][ T9465] exfat: Deprecated parameter 'utf8' [ 319.759201][ T9465] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 319.807669][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1680'. [ 320.034070][ T9473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.202480][ T9477] loop1: detected capacity change from 0 to 256 [ 320.320404][ T9477] FAT-fs (loop1): Directory bread(block 64) failed [ 320.354522][ T9477] FAT-fs (loop1): Directory bread(block 65) failed [ 320.391889][ T9477] FAT-fs (loop1): Directory bread(block 66) failed [ 320.426290][ T9477] FAT-fs (loop1): Directory bread(block 67) failed [ 320.476331][ T9477] FAT-fs (loop1): Directory bread(block 68) failed [ 320.482941][ T9477] FAT-fs (loop1): Directory bread(block 69) failed [ 320.606720][ T9477] FAT-fs (loop1): Directory bread(block 70) failed [ 320.613350][ T9477] FAT-fs (loop1): Directory bread(block 71) failed [ 320.692182][ T9464] loop6: detected capacity change from 0 to 32768 [ 320.701537][ T9484] loop7: detected capacity change from 0 to 512 [ 320.708222][ T9477] FAT-fs (loop1): Directory bread(block 72) failed [ 320.714817][ T9477] FAT-fs (loop1): Directory bread(block 73) failed [ 320.752834][ T9484] EXT4-fs: inline encryption not supported [ 320.793907][ T9464] JBD2: Ignoring recovery information on journal [ 320.823234][ T9484] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 320.884344][ T9464] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 320.945272][ T9464] JBD2: bad block at offset 32 [ 320.956303][ T9484] EXT4-fs (loop7): 1 truncate cleaned up [ 320.962068][ T9484] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 320.988428][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 321.065527][ T9464] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 321.140992][ T9484] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 321.215892][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 321.234165][ T7] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 321.334877][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.412957][ T7] usb 5-1: Product: syz [ 321.427330][ T7] usb 5-1: Manufacturer: syz [ 321.456777][ T7] usb 5-1: SerialNumber: syz [ 321.487462][ T7] usb 5-1: config 0 descriptor?? [ 321.542379][ T6334] EXT4-fs (loop7): unmounting filesystem. [ 321.550833][ T5435] ocfs2: Unmounting device (7,6) on (node local) [ 321.729917][ T7] usb 5-1: ignoring: not an USB2CAN converter [ 321.817138][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1695'. [ 321.972474][ T4275] usb 5-1: USB disconnect, device number 12 [ 322.239082][ T9516] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 322.482850][ T9517] ------------[ cut here ]------------ [ 322.482862][ T9517] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3091 (size 64) [ 322.482964][ T9517] WARNING: CPU: 0 PID: 9517 at kernel/trace/trace.c:3091 __ftrace_trace_stack+0x3ce/0x530 [ 322.482999][ T9517] Modules linked in: [ 322.483013][ T9517] CPU: 0 PID: 9517 Comm: syz.7.1700 Not tainted syzkaller #0 [ 322.483029][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.483038][ T9517] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 322.483060][ T9517] Code: fe ff ff e8 b4 4b fc ff c6 05 42 63 86 0c 01 b9 40 00 00 00 48 c7 c7 80 7b 90 8a 4c 89 ee 48 c7 c2 20 93 90 8a e8 72 d2 c7 ff <0f> 0b e9 25 fe ff ff e8 86 4b fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 322.483073][ T9517] RSP: 0018:ffffc900047cf8b8 EFLAGS: 00010246 [ 322.483088][ T9517] RAX: e325802320077a00 RBX: ffff888064b2e028 RCX: ffff888027c25a00 [ 322.483108][ T9517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 322.483118][ T9517] RBP: ffff888064b2e018 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 322.483130][ T9517] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff8880b8e2b5a0 [ 322.483141][ T9517] R13: 0000000000000080 R14: ffff888064b2e010 R15: 000000000000252d [ 322.483152][ T9517] FS: 00005555616ed500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 322.483167][ T9517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.483178][ T9517] CR2: 00007fddb31556c8 CR3: 0000000052773000 CR4: 00000000003526f0 [ 322.483192][ T9517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.483201][ T9517] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 322.483211][ T9517] Call Trace: [ 322.483216][ T9517] [ 322.483226][ T9517] stacktrace_trigger+0xf0/0x140 [ 322.483249][ T9517] ? stacktrace_trigger_print+0xe0/0xe0 [ 322.483274][ T9517] ? trace_event_buffer_commit+0x236/0x780 [ 322.483297][ T9517] event_triggers_post_call+0xfd/0x180 [ 322.483340][ T9517] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 322.483363][ T9517] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 322.483385][ T9517] ? __timer_delete_sync+0x239/0x2e0 [ 322.483403][ T9517] ? timer_delete_sync+0x20/0x20 [ 322.483420][ T9517] stimer_cleanup+0x3a7/0x430 [ 322.483443][ T9517] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 322.483464][ T9517] kvm_arch_vcpu_destroy+0xba/0x270 [ 322.483487][ T9517] kvm_destroy_vcpus+0xdd/0x250 [ 322.483510][ T9517] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 322.483531][ T9517] ? xa_find_after+0xab/0x430 [ 322.483549][ T9517] ? kvm_ioapic_destroy+0xa8/0xc0 [ 322.483567][ T9517] kvm_arch_destroy_vm+0x31a/0x410 [ 322.483587][ T9517] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 322.483608][ T9517] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 322.483628][ T9517] ? synchronize_srcu+0x18f/0x1b0 [ 322.483652][ T9517] ? mmu_notifier_unregister+0x302/0x390 [ 322.483668][ T9517] ? mmu_notifier_unregister+0xad/0x390 [ 322.483686][ T9517] kvm_put_kvm+0xdbb/0x1a10 [ 322.483710][ T9517] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 322.483726][ T9517] kvm_vm_release+0x42/0x50 [ 322.483741][ T9517] __fput+0x20a/0x8b0 [ 322.483763][ T9517] task_work_run+0x1d0/0x260 [ 322.483785][ T9517] ? task_work_cancel+0x220/0x220 [ 322.483805][ T9517] ? __close_range+0x20c/0x770 [ 322.483831][ T9517] ? exit_to_user_mode_loop+0x3b/0x110 [ 322.483858][ T9517] exit_to_user_mode_loop+0xe6/0x110 [ 322.483882][ T9517] exit_to_user_mode_prepare+0xee/0x180 [ 322.483906][ T9517] syscall_exit_to_user_mode+0x16/0x40 [ 322.483927][ T9517] do_syscall_64+0x58/0xa0 [ 322.483942][ T9517] ? clear_bhb_loop+0x60/0xb0 [ 322.483958][ T9517] ? clear_bhb_loop+0x60/0xb0 [ 322.483975][ T9517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.484000][ T9517] RIP: 0033:0x7f9c76d9e159 [ 322.484014][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.484027][ T9517] RSP: 002b:00007ffc2d912c28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 322.484043][ T9517] RAX: 0000000000000000 RBX: 00007ffc2d912d10 RCX: 00007f9c76d9e159 [ 322.484053][ T9517] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 322.484063][ T9517] RBP: 000000000004eb08 R08: 0000000000000001 R09: 0000000000000000 [ 322.484072][ T9517] R10: 0000001b2e620000 R11: 0000000000000246 R12: 00007ffc2d912d50 [ 322.484083][ T9517] R13: 00007f9c77025fac R14: 000000000004eb7d R15: 00007f9c77025fa0 [ 322.484109][ T9517] [ 322.484120][ T9517] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.484128][ T9517] CPU: 0 PID: 9517 Comm: syz.7.1700 Not tainted syzkaller #0 [ 322.484141][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.484149][ T9517] Call Trace: [ 322.484154][ T9517] [ 322.484159][ T9517] dump_stack_lvl+0x188/0x24e [ 322.484175][ T9517] ? memcpy+0x3c/0x60 [ 322.484190][ T9517] ? show_regs_print_info+0x12/0x12 [ 322.484206][ T9517] ? load_image+0x410/0x410 [ 322.484235][ T9517] panic+0x2d3/0x710 [ 322.484257][ T9517] ? bpf_jit_dump+0xd0/0xd0 [ 322.484287][ T9517] __warn+0x2f8/0x4f0 [ 322.484304][ T9517] ? __ftrace_trace_stack+0x3ce/0x530 [ 322.484325][ T9517] ? __ftrace_trace_stack+0x3ce/0x530 [ 322.484345][ T9517] report_bug+0x2ba/0x4f0 [ 322.484361][ T9517] ? __ftrace_trace_stack+0x3ce/0x530 [ 322.484384][ T9517] handle_bug+0x3a/0x70 [ 322.484399][ T9517] exc_invalid_op+0x16/0x40 [ 322.484415][ T9517] asm_exc_invalid_op+0x16/0x20 [ 322.484429][ T9517] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 322.484449][ T9517] Code: fe ff ff e8 b4 4b fc ff c6 05 42 63 86 0c 01 b9 40 00 00 00 48 c7 c7 80 7b 90 8a 4c 89 ee 48 c7 c2 20 93 90 8a e8 72 d2 c7 ff <0f> 0b e9 25 fe ff ff e8 86 4b fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 322.484461][ T9517] RSP: 0018:ffffc900047cf8b8 EFLAGS: 00010246 [ 322.484473][ T9517] RAX: e325802320077a00 RBX: ffff888064b2e028 RCX: ffff888027c25a00 [ 322.484484][ T9517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 322.484492][ T9517] RBP: ffff888064b2e018 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 322.484503][ T9517] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff8880b8e2b5a0 [ 322.484514][ T9517] R13: 0000000000000080 R14: ffff888064b2e010 R15: 000000000000252d [ 322.484534][ T9517] ? __ftrace_trace_stack+0x3ce/0x530 [ 322.484556][ T9517] stacktrace_trigger+0xf0/0x140 [ 322.484576][ T9517] ? stacktrace_trigger_print+0xe0/0xe0 [ 322.484600][ T9517] ? trace_event_buffer_commit+0x236/0x780 [ 322.484623][ T9517] event_triggers_post_call+0xfd/0x180 [ 322.484643][ T9517] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 322.484664][ T9517] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 322.484685][ T9517] ? __timer_delete_sync+0x239/0x2e0 [ 322.484702][ T9517] ? timer_delete_sync+0x20/0x20 [ 322.484719][ T9517] stimer_cleanup+0x3a7/0x430 [ 322.484741][ T9517] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 322.484761][ T9517] kvm_arch_vcpu_destroy+0xba/0x270 [ 322.484783][ T9517] kvm_destroy_vcpus+0xdd/0x250 [ 322.484805][ T9517] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 322.484825][ T9517] ? xa_find_after+0xab/0x430 [ 322.484841][ T9517] ? kvm_ioapic_destroy+0xa8/0xc0 [ 322.484859][ T9517] kvm_arch_destroy_vm+0x31a/0x410 [ 322.484878][ T9517] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 322.484898][ T9517] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 322.484917][ T9517] ? synchronize_srcu+0x18f/0x1b0 [ 322.484940][ T9517] ? mmu_notifier_unregister+0x302/0x390 [ 322.484954][ T9517] ? mmu_notifier_unregister+0xad/0x390 [ 322.484971][ T9517] kvm_put_kvm+0xdbb/0x1a10 [ 322.484994][ T9517] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 322.485010][ T9517] kvm_vm_release+0x42/0x50 [ 322.485024][ T9517] __fput+0x20a/0x8b0 [ 322.485044][ T9517] task_work_run+0x1d0/0x260 [ 322.485066][ T9517] ? task_work_cancel+0x220/0x220 [ 322.485085][ T9517] ? __close_range+0x20c/0x770 [ 322.485115][ T9517] ? exit_to_user_mode_loop+0x3b/0x110 [ 322.485140][ T9517] exit_to_user_mode_loop+0xe6/0x110 [ 322.485164][ T9517] exit_to_user_mode_prepare+0xee/0x180 [ 322.485187][ T9517] syscall_exit_to_user_mode+0x16/0x40 [ 322.485207][ T9517] do_syscall_64+0x58/0xa0 [ 322.485222][ T9517] ? clear_bhb_loop+0x60/0xb0 [ 322.485236][ T9517] ? clear_bhb_loop+0x60/0xb0 [ 322.485252][ T9517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.485276][ T9517] RIP: 0033:0x7f9c76d9e159 [ 322.485287][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.485299][ T9517] RSP: 002b:00007ffc2d912c28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 322.485314][ T9517] RAX: 0000000000000000 RBX: 00007ffc2d912d10 RCX: 00007f9c76d9e159 [ 322.485324][ T9517] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 322.485332][ T9517] RBP: 000000000004eb08 R08: 0000000000000001 R09: 0000000000000000 [ 322.485341][ T9517] R10: 0000001b2e620000 R11: 0000000000000246 R12: 00007ffc2d912d50 [ 322.485351][ T9517] R13: 00007f9c77025fac R14: 000000000004eb7d R15: 00007f9c77025fa0 [ 322.485371][ T9517] [ 322.485431][ T9517] Kernel Offset: disabled [ 323.358699][ T9517] Rebooting in 86400 seconds..