last executing test programs: 6.868034524s ago: executing program 1 (id=831): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xdd, 0x46, 0x81, 0x20, 0x424, 0x9905, 0x17da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x90, 0x2, "", [{{0x9, 0x4, 0x15, 0xe, 0x2, 0xda, 0x53, 0x5f, 0x3, [], [{{0x9, 0x5, 0xc, 0x10, 0x10, 0xe}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x1, 0x9}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.167924034s ago: executing program 1 (id=842): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10c) ftruncate(r0, 0x0) write$cgroup_int(r0, &(0x7f0000000a40)=0x4, 0x12) fallocate(r0, 0x11, 0x80000002, 0x502) 4.644026888s ago: executing program 0 (id=845): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x58, 0x1]) 3.858976592s ago: executing program 2 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3.671929117s ago: executing program 2 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14, {0x2, 0x4e22, @multicast1}, 'syzkaller0\x00'}) 3.628531516s ago: executing program 1 (id=849): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e0005a7"], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) 3.196029108s ago: executing program 2 (id=851): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) 2.981920229s ago: executing program 2 (id=852): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 2.819872387s ago: executing program 2 (id=853): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x4400, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123b, &(0x7f0000000600)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) splice(r0, &(0x7f0000000040)=0x800000000000, r1, 0x0, 0x805, 0x0) 2.725312429s ago: executing program 1 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x48050) 2.685866768s ago: executing program 0 (id=856): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2}, &(0x7f0000000040)=0x8) 2.46800619s ago: executing program 1 (id=857): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000340)="ab") 2.404979434s ago: executing program 2 (id=858): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) dup(0xffffffffffffffff) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.068084894s ago: executing program 3 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.006143808s ago: executing program 3 (id=861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="01", 0x1}], 0x1}, 0x4048043) getpeername$packet(r1, 0x0, 0x0) 1.868128451s ago: executing program 3 (id=862): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000013c0)=[{}]) 1.635958196s ago: executing program 0 (id=863): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x9, 0x1e, 0xa465, 0x34, "f346f493742cc6b1d560fde0054629ec5af82aae2a2f9a127e66bc5a4be57d7a"}) 908.300957ms ago: executing program 3 (id=864): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getdents(r0, &(0x7f0000001f80)=""/4096, 0x1000) 792.265424ms ago: executing program 3 (id=865): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000001200)=""/4096, 0x1000}, {0x0}], 0x2, 0x8, 0x0, 0xf) 568.066347ms ago: executing program 1 (id=866): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="013fffffffffffe000006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413"], 0x70}}, 0x880) syz_usb_connect(0x5, 0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="26011001d4f86140d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0) 544.453562ms ago: executing program 3 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 317.766695ms ago: executing program 0 (id=868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5, 0x28, 0xff, 0x5, 0xff, '\x00', 0x1, 0xef}) 96.056348ms ago: executing program 0 (id=869): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000000080004"], 0x54}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 0s ago: executing program 0 (id=870): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1261, 0x0) kernel console output (not intermixed with test programs): ocessed as PCM [ 123.976345][ T5847] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 123.996774][ T787] cdc_wdm 2-1:1.0: skipping garbage [ 124.002074][ T787] cdc_wdm 2-1:1.0: skipping garbage [ 124.035796][ T787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 124.041786][ T787] cdc_wdm 2-1:1.0: Unknown control protocol [ 124.051591][ T5847] usb 1-1: USB disconnect, device number 6 [ 124.075232][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.139524][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.284826][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.299118][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.309748][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 124.327390][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.348593][ T27] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 124.362294][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.374146][ T27] usb 4-1: Product: syz [ 124.379687][ T27] usb 4-1: Manufacturer: syz [ 124.384585][ T27] usb 4-1: SerialNumber: syz [ 124.399880][ T27] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 124.415029][ T27] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 124.436821][ T27] usbserial_generic 4-1:1.0: generic converter detected [ 124.447881][ T27] usb 4-1: generic converter now attached to ttyUSB0 [ 124.560770][ T6405] loop2: detected capacity change from 0 to 32768 [ 124.574076][ T6405] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.176 (6405) [ 124.633763][ T6405] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.657261][ T6405] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 124.681016][ T6405] BTRFS info (device loop2): setting nodatacow, compression disabled [ 124.694280][ T5847] usb 4-1: USB disconnect, device number 3 [ 124.704209][ T6405] BTRFS info (device loop2): setting datasum, datacow enabled [ 124.715046][ T6405] BTRFS info (device loop2): force clearing of disk cache [ 124.724162][ T5847] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 124.732341][ T6405] BTRFS info (device loop2): enabling ssd optimizations [ 124.748161][ T6405] BTRFS info (device loop2): using spread ssd allocation scheme [ 124.757923][ T5847] usbserial_generic 4-1:1.0: device disconnected [ 124.771873][ T6405] BTRFS info (device loop2): turning on sync discard [ 124.779012][ T6405] BTRFS info (device loop2): turning on flush-on-commit [ 124.788997][ T6405] BTRFS info (device loop2): not using ssd optimizations [ 124.800299][ T6405] BTRFS info (device loop2): not using spread ssd allocation scheme [ 124.832808][ T6405] BTRFS info (device loop2): using free space tree [ 124.994648][ T6405] BTRFS info (device loop2): rebuilding free space tree [ 125.002736][ T27] usb 2-1: USB disconnect, device number 5 [ 125.224371][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.302486][ T6434] loop1: detected capacity change from 0 to 32768 [ 126.416889][ T6434] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 126.653602][ T6434] (syz.1.181,6434,1):ocfs2_double_lock:1197 ERROR: status = -2 [ 126.667166][ T6434] (syz.1.181,6434,1):ocfs2_rename:1306 ERROR: status = -2 [ 126.680032][ T6434] (syz.1.181,6434,1):ocfs2_rename:1697 ERROR: status = -2 [ 126.703376][ T6434] syz.1.181 (6434) used greatest stack depth: 18776 bytes left [ 126.827903][ T5803] ocfs2: Unmounting device (7,1) on (node local) [ 126.884327][ T6454] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 127.056888][ T6458] FAULT_INJECTION: forcing a failure. [ 127.056888][ T6458] name failslab, interval 1, probability 0, space 0, times 1 [ 127.095227][ T6458] CPU: 0 PID: 6458 Comm: syz.2.188 Not tainted syzkaller #0 [ 127.102599][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.112720][ T6458] Call Trace: [ 127.116054][ T6458] [ 127.119027][ T6458] dump_stack_lvl+0x18c/0x250 [ 127.123780][ T6458] ? show_regs_print_info+0x20/0x20 [ 127.129077][ T6458] ? load_image+0x420/0x420 [ 127.133627][ T6458] ? __might_sleep+0xe0/0xe0 [ 127.138269][ T6458] ? __lock_acquire+0x7d80/0x7d80 [ 127.143341][ T6458] ? percpu_ref_put+0x12/0x100 [ 127.148150][ T6458] should_fail_ex+0x394/0x4c0 [ 127.152891][ T6458] should_failslab+0x9/0x20 [ 127.157460][ T6458] slab_pre_alloc_hook+0x59/0x300 [ 127.162565][ T6458] kmem_cache_alloc+0x5a/0x2c0 [ 127.167392][ T6458] ? vm_area_dup+0x61/0x270 [ 127.171947][ T6458] vm_area_dup+0x61/0x270 [ 127.176336][ T6458] __split_vma+0x1a8/0xc20 [ 127.180819][ T6458] ? mmap_write_unlock+0x160/0x160 [ 127.185988][ T6458] ? split_vma+0x8f/0x110 [ 127.190367][ T6458] madvise_update_vma+0x44e/0xda0 [ 127.195458][ T6458] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 127.201246][ T6458] ? read_lock_is_recursive+0x20/0x20 [ 127.206683][ T6458] madvise_set_anon_name+0x30b/0x440 [ 127.212039][ T6458] ? anon_vma_name+0x140/0x140 [ 127.216861][ T6458] ? prctl_set_vma+0x199/0x400 [ 127.221682][ T6458] prctl_set_vma+0x1dc/0x400 [ 127.226326][ T6458] __se_sys_prctl+0x3fe/0x1510 [ 127.231157][ T6458] ? __x64_sys_prctl+0xc0/0xc0 [ 127.235983][ T6458] ? lockdep_hardirqs_on+0x98/0x150 [ 127.241222][ T6458] ? __x64_sys_prctl+0x20/0xc0 [ 127.246051][ T6458] do_syscall_64+0x55/0xb0 [ 127.250526][ T6458] ? clear_bhb_loop+0x40/0x90 [ 127.255257][ T6458] ? clear_bhb_loop+0x40/0x90 [ 127.260016][ T6458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.265982][ T6458] RIP: 0033:0x7f79d3d9e159 [ 127.270449][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.290158][ T6458] RSP: 002b:00007f79d4bcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 127.298624][ T6458] RAX: ffffffffffffffda RBX: 00007f79d4025fa0 RCX: 00007f79d3d9e159 [ 127.306670][ T6458] RDX: 0000200000ffd000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 127.314704][ T6458] RBP: 00007f79d3e3506b R08: 0000200000000000 R09: 0000000000000000 [ 127.322740][ T6458] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 127.330756][ T6458] R13: 00007f79d4026038 R14: 00007f79d4025fa0 R15: 00007ffeebe5fc98 [ 127.338798][ T6458] [ 127.553440][ T6471] loop3: detected capacity change from 0 to 16 [ 127.588912][ T6471] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.284467][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 128.710928][ T6509] loop1: detected capacity change from 0 to 64 [ 128.857651][ T6509] hfs: walked past end of dir [ 128.880428][ T6509] hfs: walked past end of dir [ 129.125892][ T6516] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 129.766015][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.780375][ T6538] loop2: detected capacity change from 0 to 1024 [ 129.848946][ T6538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.875364][ T6538] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.965217][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 129.974431][ T5872] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 129.991386][ T6538] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.223: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.005601][ T5872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.005633][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.005658][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.005682][ T5872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.005728][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.005753][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.066953][ T6541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 130.171083][ T6542] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.223: Freeing blocks not in datazone - block = 0, count = 1 [ 130.195535][ T6518] loop0: detected capacity change from 0 to 40427 [ 130.247206][ T6518] F2FS-fs (loop0): invalid crc value [ 130.264305][ T5872] usb 4-1: usb_control_msg returned -32 [ 130.283276][ T5872] usbtmc 4-1:16.0: can't read capabilities [ 130.294106][ T6518] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.334665][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.416472][ T6518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.566038][ T5805] syz-executor: attempt to access beyond end of device [ 130.566038][ T5805] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.598331][ T5805] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 130.683817][ T6554] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 130.693693][ T23] usb 4-1: USB disconnect, device number 4 [ 130.891078][ T6553] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 131.265945][ T5814] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 131.449439][ T6575] loop0: detected capacity change from 0 to 256 [ 131.539941][ T6575] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 131.977130][ T6592] input: syz0 as /devices/virtual/input/input9 [ 132.088021][ T6595] warning: `syz.2.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.870228][ T6610] loop3: detected capacity change from 0 to 1024 [ 133.078337][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.085614][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122496][ T6615] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 134.488117][ T6656] syz.2.264 (6656) used greatest stack depth: 17944 bytes left [ 134.563101][ T6658] syz.2.264 (6658) used greatest stack depth: 17896 bytes left [ 134.696386][ T6670] Illegal XDP return value 4294967274 on prog (id 25) dev syz_tun, expect packet loss! [ 134.822129][ T6672] loop0: detected capacity change from 0 to 4096 [ 134.845319][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 134.933187][ T6672] ntfs3: loop0: ino=b, Correct links count -> 1. [ 134.958008][ T6672] ntfs3: loop0: ino=18, mi_enum_attr [ 134.985528][ T6672] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 135.048912][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.068368][ T27] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 135.102931][ T27] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 135.118842][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.123322][ T5814] block nbd3: Receive control failed (result -107) [ 135.131382][ T27] usb 2-1: Product: syz [ 135.141960][ T6675] block nbd3: shutting down sockets [ 135.147536][ T27] usb 2-1: Manufacturer: syz [ 135.147586][ T27] usb 2-1: SerialNumber: syz [ 135.315560][ T5814] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 135.327490][ T5814] Bluetooth: hci0: Injecting HCI hardware error event [ 135.336346][ T5810] Bluetooth: hci0: hardware error 0x00 [ 135.414041][ T6681] loop3: detected capacity change from 0 to 512 [ 135.487268][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.545433][ T6681] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.644551][ T6688] ipvlan2: entered promiscuous mode [ 135.653974][ T6688] team0: Device ipvlan2 failed to register rx_handler [ 135.833691][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.954706][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.989387][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.018808][ T6695] veth0: entered promiscuous mode [ 136.028251][ T6692] veth0: left promiscuous mode [ 136.239916][ C1] usb 2-1: received EP1 urb->status = -71 [ 136.254531][ T6703] IPVS: fo: FWM 3 0x00000003 - no destination available [ 136.265264][ T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 136.267222][ T5847] IPVS: starting estimator thread 0... [ 136.297462][ T27] input: as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 136.399000][ T6704] IPVS: using max 17 ests per chain, 40800 per kthread [ 136.460037][ T27] usb 2-1: USB disconnect, device number 6 [ 136.490255][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.506737][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.555188][ T23] usb 4-1: Product: syz [ 136.570018][ T23] usb 4-1: Manufacturer: syz [ 136.574702][ T23] usb 4-1: SerialNumber: syz [ 136.600758][ T23] usb 4-1: config 0 descriptor?? [ 136.614422][ T6713] udevd[6713]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.725226][ T5872] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 136.838614][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 136.938789][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.950412][ T5817] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 136.959075][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.970880][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.987598][ T5872] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.996996][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.010492][ T5872] usb 3-1: config 0 descriptor?? [ 137.167147][ T5817] usb 1-1: not running at top speed; connect to a high speed hub [ 137.176615][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 137.190330][ T5817] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 137.200311][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.208691][ T5817] usb 1-1: Product: syz [ 137.212972][ T5817] usb 1-1: Manufacturer: syz [ 137.218045][ T5817] usb 1-1: SerialNumber: syz [ 137.236052][ T5817] oti6858 1-1:1.0: oti6858 converter detected [ 137.247144][ T5817] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 137.295344][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.395261][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 137.453384][ T5872] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 137.461971][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 137.488446][ T5872] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 137.501376][ T23] usb 4-1: USB disconnect, device number 5 [ 137.518526][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.534463][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 137.553497][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 137.570724][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.586112][ T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 137.595285][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.616680][ T6720] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 137.624140][ T6720] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 137.634549][ T27] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 137.657211][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 137.665017][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 137.700922][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 137.726885][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 137.734726][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 137.770979][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 137.873327][ T787] usb 2-1: USB disconnect, device number 7 [ 137.898667][ T787] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 137.922619][ T787] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 137.936558][ T787] keyspan 2-1:1.0: device disconnected [ 138.536811][ T6728] loop1: detected capacity change from 0 to 16 [ 138.562484][ T6728] erofs: (device loop1): mounted with root inode @ nid 36. [ 138.600010][ T6728] overlayfs: failed to get redirect (-117) [ 138.678122][ T6726] loop3: detected capacity change from 0 to 32768 [ 138.735347][ T6726] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 138.840240][ T6726] XFS (loop3): Ending clean mount [ 139.031081][ T5811] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.240006][ T6744] mmap: syz.1.297 (6744) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.431106][ T6749] loop2: detected capacity change from 0 to 512 [ 139.464917][ T6749] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.520992][ T6749] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.298: corrupted in-inode xattr: invalid ea_ino [ 139.537591][ T23] usb 1-1: USB disconnect, device number 7 [ 139.570550][ T27] usb 3-1: USB disconnect, device number 6 [ 139.594786][ T6751] loop1: detected capacity change from 0 to 4096 [ 139.620400][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 139.672302][ T23] oti6858 1-1:1.0: device disconnected [ 139.681603][ T6749] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.298: couldn't read orphan inode 15 (err -117) [ 139.759055][ T6749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.883195][ T6749] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.298: corrupted inode contents [ 139.913552][ T6749] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #13: comm syz.2.298: mark_inode_dirty error [ 139.933995][ T6749] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.298: invalid indirect mapped block 234881024 (level 0) [ 139.954116][ T28] audit: type=1800 audit(1790270185.801:7): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.299" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 139.982552][ T6749] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.298: corrupted inode contents [ 139.999722][ T6749] EXT4-fs error (device loop2): ext4_truncate:4314: inode #13: comm syz.2.298: mark_inode_dirty error [ 140.025672][ T6749] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 140.044796][ T6758] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.298: corrupted inode contents [ 140.073512][ T6758] EXT4-fs error (device loop2): ext4_rename:4061: inode #13: comm syz.2.298: mark_inode_dirty error [ 140.158425][ T5815] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz-executor: corrupted inode contents [ 140.179936][ T5815] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #13: comm syz-executor: mark_inode_dirty error [ 140.193326][ T5815] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 140.224446][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.305485][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.507221][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.525420][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 140.545207][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 140.585167][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 140.625374][ T23] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 140.634552][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.664581][ T6757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.678502][ T6757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.715377][ T6757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.737208][ T23] pl2303 1-1:1.0: pl2303 converter detected [ 140.761909][ T23] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 140.790960][ T6770] loop2: detected capacity change from 0 to 256 [ 140.860123][ T6770] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 140.970086][ T6761] loop1: detected capacity change from 0 to 32768 [ 141.056398][ T6761] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.145614][ T6757] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 141.165356][ T6757] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 141.175432][ T6757] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 141.191130][ T6765] loop3: detected capacity change from 0 to 32768 [ 141.198127][ T6757] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 141.221748][ T6757] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 141.251641][ T6761] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 141.352293][ T6765] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 141.379533][ T6761] XFS (loop1): Starting recovery (logdev: internal) [ 141.530194][ T6761] XFS (loop1): Ending recovery (logdev: internal) [ 141.567756][ T6757] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 141.619044][ T6757] pl2303 ttyUSB0: error sending break = -32 [ 141.655724][ T6765] (syz.3.303,6765,1):ocfs2_double_lock:1197 ERROR: status = -2 [ 141.663409][ T6765] (syz.3.303,6765,1):ocfs2_rename:1306 ERROR: status = -2 [ 141.735285][ T6765] (syz.3.303,6765,1):ocfs2_rename:1697 ERROR: status = -2 [ 141.786952][ T28] audit: type=1800 audit(1790270187.621:8): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.310" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 141.908731][ T5793] usb 1-1: USB disconnect, device number 8 [ 141.926538][ T5811] ocfs2: Unmounting device (7,3) on (node local) [ 141.929753][ T5793] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 141.961236][ T5803] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.990748][ T5793] pl2303 1-1:1.0: device disconnected [ 142.739332][ T6798] loop1: detected capacity change from 0 to 1024 [ 142.755406][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.801989][ T6797] loop0: detected capacity change from 0 to 4096 [ 142.824072][ T6798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.958428][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.991705][ T6805] o2cb: This node has not been configured. [ 142.999759][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 143.007083][ T6805] o2cb: Cluster check failed. Fix errors before retrying. [ 143.026334][ T6805] (syz.2.317,6805,0):user_dlm_register:674 ERROR: status = -22 [ 143.034061][ T6805] (syz.2.317,6805,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 143.050474][ T27] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 143.053515][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.078306][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.158504][ T27] opticon 4-1:1.0: opticon converter detected [ 143.184584][ T28] audit: type=1800 audit(1790270189.021:9): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.313" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 143.229021][ T27] usb 4-1: opticon converter now attached to ttyUSB0 [ 143.299739][ T6807] loop1: detected capacity change from 0 to 1024 [ 143.476286][ T6811] EXT4-fs: Ignoring removed bh option [ 143.494500][ T27] usb 4-1: USB disconnect, device number 6 [ 143.541741][ T27] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 143.572563][ T27] opticon 4-1:1.0: device disconnected [ 143.612174][ T6811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002] [ 143.650264][ T6811] System zones: 1-12 [ 143.688764][ T6811] EXT4-fs (loop2): 1 truncate cleaned up [ 143.724010][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.939927][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.046707][ T6821] FAULT_INJECTION: forcing a failure. [ 144.046707][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 144.098795][ T6821] CPU: 1 PID: 6821 Comm: syz.1.329 Not tainted syzkaller #0 [ 144.106355][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.116469][ T6821] Call Trace: [ 144.119797][ T6821] [ 144.122773][ T6821] dump_stack_lvl+0x18c/0x250 [ 144.127511][ T6821] ? show_regs_print_info+0x20/0x20 [ 144.132775][ T6821] ? load_image+0x420/0x420 [ 144.137360][ T6821] ? __might_sleep+0xe0/0xe0 [ 144.142021][ T6821] ? __lock_acquire+0x7d80/0x7d80 [ 144.147079][ T6821] should_fail_ex+0x394/0x4c0 [ 144.151809][ T6821] should_failslab+0x9/0x20 [ 144.156356][ T6821] slab_pre_alloc_hook+0x59/0x300 [ 144.161488][ T6821] ? fsnotify_alloc_group+0x74/0x3b0 [ 144.166820][ T6821] __kmem_cache_alloc_node+0x53/0x250 [ 144.172251][ T6821] ? fsnotify_alloc_group+0x74/0x3b0 [ 144.177584][ T6821] kmalloc_trace+0x2a/0xe0 [ 144.182057][ T6821] fsnotify_alloc_group+0x74/0x3b0 [ 144.187238][ T6821] do_inotify_init+0x51/0x450 [ 144.191994][ T6821] __x64_sys_inotify_init1+0x37/0x40 [ 144.197466][ T6821] do_syscall_64+0x55/0xb0 [ 144.201901][ T6821] ? clear_bhb_loop+0x40/0x90 [ 144.206608][ T6821] ? clear_bhb_loop+0x40/0x90 [ 144.211339][ T6821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.217290][ T6821] RIP: 0033:0x7fb2e7f9e159 [ 144.221768][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.241494][ T6821] RSP: 002b:00007fb2e8e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 144.249927][ T6821] RAX: ffffffffffffffda RBX: 00007fb2e8225fa0 RCX: 00007fb2e7f9e159 [ 144.257943][ T6821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.265965][ T6821] RBP: 00007fb2e803506b R08: 0000000000000000 R09: 0000000000000000 [ 144.273975][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.281969][ T6821] R13: 00007fb2e8226038 R14: 00007fb2e8225fa0 R15: 00007ffc87a0bcc8 [ 144.289988][ T6821] [ 144.388102][ T6825] FAULT_INJECTION: forcing a failure. [ 144.388102][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 144.415664][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.440624][ T6825] CPU: 0 PID: 6825 Comm: syz.3.322 Not tainted syzkaller #0 [ 144.448013][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.458114][ T6825] Call Trace: [ 144.461429][ T6825] [ 144.464393][ T6825] dump_stack_lvl+0x18c/0x250 [ 144.469178][ T6825] ? show_regs_print_info+0x20/0x20 [ 144.474439][ T6825] ? load_image+0x420/0x420 [ 144.478996][ T6825] ? __might_sleep+0xe0/0xe0 [ 144.483661][ T6825] ? __lock_acquire+0x7d80/0x7d80 [ 144.488745][ T6825] should_fail_ex+0x394/0x4c0 [ 144.493491][ T6825] should_failslab+0x9/0x20 [ 144.498056][ T6825] slab_pre_alloc_hook+0x59/0x300 [ 144.503151][ T6825] ? resv_map_alloc+0x51/0x2c0 [ 144.507967][ T6825] __kmem_cache_alloc_node+0x53/0x250 [ 144.513433][ T6825] ? resv_map_alloc+0x51/0x2c0 [ 144.518254][ T6825] kmalloc_trace+0x2a/0xe0 [ 144.522760][ T6825] resv_map_alloc+0x51/0x2c0 [ 144.527414][ T6825] hugetlbfs_get_inode+0x64/0x500 [ 144.532497][ T6825] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 144.538569][ T6825] hugetlb_file_setup+0x215/0x610 [ 144.543665][ T6825] ksys_mmap_pgoff+0x1e6/0x720 [ 144.548474][ T6825] do_syscall_64+0x55/0xb0 [ 144.552940][ T6825] ? clear_bhb_loop+0x40/0x90 [ 144.557647][ T6825] ? clear_bhb_loop+0x40/0x90 [ 144.562377][ T6825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.568309][ T6825] RIP: 0033:0x7f4b3bd9e159 [ 144.572747][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.592379][ T6825] RSP: 002b:00007f4b3cb80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 144.600828][ T6825] RAX: ffffffffffffffda RBX: 00007f4b3c025fa0 RCX: 00007f4b3bd9e159 [ 144.608917][ T6825] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 144.616910][ T6825] RBP: 00007f4b3be3506b R08: ffffffffffffffff R09: 0000000000000000 [ 144.624902][ T6825] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000000 [ 144.632887][ T6825] R13: 00007f4b3c026038 R14: 00007f4b3c025fa0 R15: 00007ffcce1c4bf8 [ 144.640899][ T6825] [ 144.805021][ T6831] macvtap1: entered promiscuous mode [ 144.816130][ T6831] vlan0: entered promiscuous mode [ 144.824366][ T6831] team0: Device macvtap1 failed to register rx_handler [ 144.845460][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 144.860632][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 144.868057][ T6833] set_capacity_and_notify: 1 callbacks suppressed [ 144.868095][ T6833] loop1: detected capacity change from 0 to 512 [ 144.887146][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 144.904335][ T6831] vlan0: left promiscuous mode [ 144.914253][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 144.914259][ T6833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 144.914311][ T5847] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 144.955778][ T6833] System zones: 1-12 [ 145.022337][ T6833] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.327: missing EA_INODE flag [ 145.048491][ T6833] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.327: error while reading EA inode 12 err=-117 [ 145.063228][ T6833] EXT4-fs (loop1): 1 orphan inode deleted [ 145.070910][ T6833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.076696][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.125468][ T6833] EXT4-fs (loop1): shut down requested (2) [ 145.167888][ T6823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.175618][ T6823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.205856][ T6823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.224764][ T5847] pl2303 3-1:1.0: pl2303 converter detected [ 145.248692][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.251491][ T5847] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 145.471669][ T6841] loop1: detected capacity change from 0 to 512 [ 145.573549][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.635532][ T6823] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 145.645372][ T6841] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.654576][ T6823] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 145.664377][ T6823] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 145.671954][ T6823] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 145.682984][ T6823] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 145.819438][ T28] audit: type=1800 audit(1790270191.661:10): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.330" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 145.969989][ T6823] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 145.989865][ T6823] pl2303 ttyUSB0: error sending break = -32 [ 146.058495][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.209353][ T23] usb 3-1: USB disconnect, device number 7 [ 146.243641][ T23] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 146.268634][ T23] pl2303 3-1:1.0: device disconnected [ 146.559042][ T6859] pimreg: entered allmulticast mode [ 146.570024][ T6859] pimreg: left allmulticast mode [ 147.223612][ T6863] loop3: detected capacity change from 0 to 32768 [ 147.236465][ T6863] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.339 (6863) [ 147.311365][ T6863] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.355207][ T6863] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 147.380483][ T6863] BTRFS info (device loop3): using free space tree [ 147.504044][ T6863] BTRFS info (device loop3): enabling ssd optimizations [ 147.531573][ T6863] BTRFS info (device loop3): auto enabling async discard [ 147.584993][ T6869] loop0: detected capacity change from 0 to 32768 [ 147.679756][ T6869] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 147.740894][ T6869] JBD2: Ignoring recovery information on journal [ 147.846023][ T6897] vhci_hcd vhci_hcd.0: failed to lookup sock [ 147.931069][ T6869] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 148.060274][ T5811] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.125442][ T6901] capability: warning: `syz.1.346' uses deprecated v2 capabilities in a way that may be insecure [ 148.231343][ T6903] process 'syz.2.348' launched './file0' with NULL argv: empty string added [ 148.267081][ T6903] Invalid argument reading file caps for ./file0 [ 148.526384][ T5793] kernel write not supported for file /vcsa (pid: 5793 comm: kworker/0:3) [ 148.551261][ T5805] ocfs2: Unmounting device (7,0) on (node local) [ 148.893156][ T6913] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 149.606917][ T6927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.952726][ T28] audit: type=1326 audit(1790270195.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3bd9e159 code=0x0 [ 150.132344][ T6920] loop1: detected capacity change from 0 to 40427 [ 150.150903][ T6920] F2FS-fs (loop1): invalid crc value [ 150.164369][ T6920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.255405][ T6920] F2FS-fs (loop1): Start checkpoint disabled! [ 150.271936][ T6920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 150.524510][ T34] kworker/u4:2: attempt to access beyond end of device [ 150.524510][ T34] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 150.545168][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 150.553343][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 150.959259][ T6955] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 150.978966][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 151.012680][ T6953] loop3: detected capacity change from 0 to 4096 [ 151.059828][ T6713] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.127377][ T6959] sctp: [Deprecated]: syz.2.370 (pid 6959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.127377][ T6959] Use struct sctp_sack_info instead [ 151.322078][ T6961] loop3: detected capacity change from 0 to 256 [ 151.381280][ T6961] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 151.744569][ T6975] input: syz0 as /devices/virtual/input/input12 [ 151.754140][ T6974] Bluetooth: MGMT ver 1.22 [ 151.822352][ T6979] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 151.967469][ T6983] FAULT_INJECTION: forcing a failure. [ 151.967469][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 151.982104][ T6983] CPU: 1 PID: 6983 Comm: syz.1.381 Not tainted syzkaller #0 [ 151.989461][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.999564][ T6983] Call Trace: [ 152.002896][ T6983] [ 152.005868][ T6983] dump_stack_lvl+0x18c/0x250 [ 152.010612][ T6983] ? show_regs_print_info+0x20/0x20 [ 152.015909][ T6983] ? load_image+0x420/0x420 [ 152.020472][ T6983] ? __might_sleep+0xe0/0xe0 [ 152.025115][ T6983] ? __lock_acquire+0x7d80/0x7d80 [ 152.030191][ T6983] ? __asan_memset+0x22/0x40 [ 152.034843][ T6983] should_fail_ex+0x394/0x4c0 [ 152.039600][ T6983] should_failslab+0x9/0x20 [ 152.044158][ T6983] slab_pre_alloc_hook+0x59/0x300 [ 152.049258][ T6983] ? io_alloc_hash_table+0x2d/0xb0 [ 152.054424][ T6983] ? io_alloc_hash_table+0x2d/0xb0 [ 152.059584][ T6983] __kmem_cache_alloc_node+0x53/0x250 [ 152.065003][ T6983] ? io_alloc_hash_table+0x2d/0xb0 [ 152.070146][ T6983] __kmalloc+0xa7/0x240 [ 152.074363][ T6983] io_alloc_hash_table+0x2d/0xb0 [ 152.079335][ T6983] io_ring_ctx_alloc+0x160/0xc10 [ 152.084301][ T6983] io_uring_create+0x2df/0x1330 [ 152.089186][ T6983] ? __might_fault+0xc6/0x120 [ 152.093886][ T6983] ? __might_fault+0xaa/0x120 [ 152.098593][ T6983] __se_sys_io_uring_setup+0x29f/0x2b0 [ 152.104083][ T6983] ? __x64_sys_io_uring_setup+0x60/0x60 [ 152.109700][ T6983] ? lockdep_hardirqs_on+0x98/0x150 [ 152.114930][ T6983] do_syscall_64+0x55/0xb0 [ 152.119376][ T6983] ? clear_bhb_loop+0x40/0x90 [ 152.124079][ T6983] ? clear_bhb_loop+0x40/0x90 [ 152.128788][ T6983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.134743][ T6983] RIP: 0033:0x7fb2e7f9e159 [ 152.139185][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.158821][ T6983] RSP: 002b:00007fb2e8e47fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 152.167260][ T6983] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fb2e7f9e159 [ 152.175273][ T6983] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000000d [ 152.183262][ T6983] RBP: 00007fb2e803506b R08: 0000000000000000 R09: 0000000000000000 [ 152.191257][ T6983] R10: 0000200000000300 R11: 0000000000000206 R12: 0000200000000280 [ 152.199271][ T6983] R13: 0000200000000300 R14: 0000200000000100 R15: 00007ffc87a0bcc8 [ 152.207276][ T6983] [ 152.385657][ T6991] capability: warning: `syz.3.386' uses 32-bit capabilities (legacy support in use) [ 152.720221][ T7005] loop0: detected capacity change from 0 to 164 [ 152.764975][ T7005] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 152.799081][ T23] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 152.999153][ T7008] fido_id[7008]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 153.235522][ T7010] loop2: detected capacity change from 0 to 4096 [ 153.367837][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 153.385372][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 153.783703][ T7028] netlink: 'syz.0.401': attribute type 32 has an invalid length. [ 153.815652][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 153.864600][ T7028] bond1: Setting coupled_control to off (0) [ 153.967002][ T7029] loop3: detected capacity change from 0 to 4096 [ 154.339556][ T7014] loop1: detected capacity change from 0 to 40427 [ 154.385892][ T7040] loop0: detected capacity change from 0 to 512 [ 154.404811][ T7014] F2FS-fs (loop1): invalid crc value [ 154.428971][ T7040] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.406: iget: bad i_size value: 38620345925642 [ 154.478877][ T7014] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.494349][ T7040] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.406: couldn't read orphan inode 15 (err -117) [ 154.514106][ T7040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.751852][ T7014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.817688][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.872062][ T5803] syz-executor: attempt to access beyond end of device [ 154.872062][ T5803] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.938268][ T5803] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 155.322180][ T7067] netlink: 68 bytes leftover after parsing attributes in process `syz.2.416'. [ 155.390961][ T7069] all (unregistering): Released all slaves [ 155.445311][ T7074] FAULT_INJECTION: forcing a failure. [ 155.445311][ T7074] name failslab, interval 1, probability 0, space 0, times 0 [ 155.458954][ T7074] CPU: 0 PID: 7074 Comm: syz.2.419 Not tainted syzkaller #0 [ 155.466297][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.476388][ T7074] Call Trace: [ 155.479704][ T7074] [ 155.482670][ T7074] dump_stack_lvl+0x18c/0x250 [ 155.487387][ T7074] ? show_regs_print_info+0x20/0x20 [ 155.492619][ T7074] ? load_image+0x420/0x420 [ 155.497172][ T7074] ? __might_sleep+0xe0/0xe0 [ 155.501802][ T7074] ? __lock_acquire+0x7d80/0x7d80 [ 155.506863][ T7074] should_fail_ex+0x394/0x4c0 [ 155.511600][ T7074] should_failslab+0x9/0x20 [ 155.516208][ T7074] slab_pre_alloc_hook+0x59/0x300 [ 155.521287][ T7074] ? security_prepare_creds+0x4b/0x130 [ 155.526796][ T7074] ? security_prepare_creds+0x4b/0x130 [ 155.532289][ T7074] __kmem_cache_alloc_node+0x53/0x250 [ 155.537703][ T7074] ? security_prepare_creds+0x4b/0x130 [ 155.543191][ T7074] __kmalloc+0xa7/0x240 [ 155.547397][ T7074] security_prepare_creds+0x4b/0x130 [ 155.552710][ T7074] prepare_creds+0x427/0x5d0 [ 155.557357][ T7074] lookup_user_key+0x316/0x1140 [ 155.562236][ T7074] ? lookup_user_key_possessed+0x40/0x40 [ 155.567897][ T7074] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 155.573900][ T7074] ? __might_fault+0xaa/0x120 [ 155.578606][ T7074] ? _copy_from_user+0xa5/0xe0 [ 155.583398][ T7074] __se_sys_add_key+0x315/0x410 [ 155.588279][ T7074] ? __x64_sys_add_key+0xc0/0xc0 [ 155.593257][ T7074] ? lockdep_hardirqs_on+0x98/0x150 [ 155.598516][ T7074] ? __x64_sys_add_key+0x20/0xc0 [ 155.603489][ T7074] do_syscall_64+0x55/0xb0 [ 155.607933][ T7074] ? clear_bhb_loop+0x40/0x90 [ 155.612652][ T7074] ? clear_bhb_loop+0x40/0x90 [ 155.617362][ T7074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.623316][ T7074] RIP: 0033:0x7f79d3d9e159 [ 155.627777][ T7074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.647424][ T7074] RSP: 002b:00007f79d4bcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 155.655870][ T7074] RAX: ffffffffffffffda RBX: 00007f79d4025fa0 RCX: 00007f79d3d9e159 [ 155.663869][ T7074] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 155.671879][ T7074] RBP: 00007f79d3e3506b R08: fffffffffffffffe R09: 0000000000000000 [ 155.679888][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.687886][ T7074] R13: 00007f79d4026038 R14: 00007f79d4025fa0 R15: 00007ffeebe5fc98 [ 155.695893][ T7074] [ 155.786027][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.997102][ T787] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.015129][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.027929][ T787] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.037273][ T787] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.053443][ T787] usb 4-1: Product: syz [ 156.061896][ T787] usb 4-1: Manufacturer: syz [ 156.071131][ T787] usb 4-1: SerialNumber: syz [ 156.079756][ T787] usb 4-1: config 0 descriptor?? [ 156.113371][ T787] usb 4-1: selecting invalid altsetting 0 [ 156.125349][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.315249][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 156.331770][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 156.344603][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.356907][ T787] usb 4-1: USB disconnect, device number 7 [ 156.369664][ T23] usb 3-1: Product: syz [ 156.382445][ T23] usb 3-1: Manufacturer: syz [ 156.400834][ T23] usb 3-1: SerialNumber: syz [ 156.416493][ T23] usb 3-1: config 0 descriptor?? [ 156.444420][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 157.114074][ T7102] loop1: detected capacity change from 0 to 2048 [ 157.155426][ T787] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 157.175895][ T7102] NILFS (loop1): invalid segment: Magic number mismatch [ 157.183724][ T7102] NILFS (loop1): trying rollback from an earlier position [ 157.226348][ T7102] NILFS (loop1): recovery complete [ 157.243550][ T7104] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.320508][ T7102] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 157.375757][ T787] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.388020][ T787] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.399874][ T787] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.413019][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.420713][ T787] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 157.430277][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.444922][ T787] usb 1-1: config 0 descriptor?? [ 157.462606][ T23] usb 3-1: USB disconnect, device number 8 [ 157.868835][ T787] input: HID 1532:011d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1532:011D.0004/input/input13 [ 157.976329][ T787] hid-rmi 0003:1532:011D.0004: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 158.093847][ T27] usb 1-1: USB disconnect, device number 9 [ 158.179690][ T7112] fido_id[7112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 158.410632][ T7119] Invalid argument reading file caps for ./file0 [ 159.219652][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 159.911971][ T7155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.051752][ T7157] loop2: detected capacity change from 0 to 512 [ 160.082023][ T7157] EXT4-fs: Ignoring removed bh option [ 160.129586][ T7157] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.453: corrupted in-inode xattr: e_value size too large [ 160.159768][ T7157] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.453: couldn't read orphan inode 15 (err -117) [ 160.187392][ T7163] hsr0: entered promiscuous mode [ 160.206973][ T7157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.229986][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 160.269559][ T7165] loop3: detected capacity change from 0 to 256 [ 160.286636][ T7165] exfat: Deprecated parameter 'utf8' [ 160.300743][ T7163] hsr_slave_0: left promiscuous mode [ 160.313859][ T7165] exfat: Deprecated parameter 'utf8' [ 160.340210][ T7165] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 160.360873][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.380413][ T7163] hsr_slave_1: left promiscuous mode [ 160.542507][ T7163] hsr0 (unregistering): left promiscuous mode [ 160.904755][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 160.925679][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 161.293104][ T7167] loop0: detected capacity change from 0 to 32768 [ 161.359265][ T7167] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 161.536679][ T7167] XFS (loop0): Ending clean mount [ 161.630209][ T7197] loop2: detected capacity change from 0 to 4096 [ 161.761295][ T5805] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 162.132267][ T6713] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.297025][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'. [ 162.311465][ T7225] netlink: 'syz.2.477': attribute type 7 has an invalid length. [ 162.319753][ T7225] netlink: 'syz.2.477': attribute type 8 has an invalid length. [ 162.332130][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 162.374026][ T7225] 0ªî{X¹¦: entered promiscuous mode [ 162.383531][ T7225] 0ªî{X¹¦: left promiscuous mode [ 162.546307][ T7233] syz_tun: entered allmulticast mode [ 162.571985][ T7233] pimreg: entered allmulticast mode [ 162.775212][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.985889][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 162.995617][ T5847] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 163.003993][ T5847] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 163.041616][ T5847] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.066438][ T5847] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 163.093258][ T7247] input: syz0 as /devices/virtual/input/input14 [ 163.109804][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.132540][ T5847] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 163.151870][ T5847] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 163.171529][ T5847] usb 4-1: Product: syz [ 163.181672][ T5847] usb 4-1: Manufacturer: syz [ 163.192952][ T5847] usb 4-1: SerialNumber: syz [ 163.206664][ T5847] usb 4-1: config 0 descriptor?? [ 163.216204][ T5847] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 163.240246][ T5847] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 163.313456][ T7251] batadv_slave_0: entered promiscuous mode [ 163.330517][ T7249] batadv_slave_0: left promiscuous mode [ 163.442649][ T27] usb 4-1: USB disconnect, device number 8 [ 163.442711][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 163.459352][ T27] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 163.697626][ T7261] loop1: detected capacity change from 0 to 512 [ 163.725724][ T7261] EXT4-fs: Ignoring removed oldalloc option [ 163.737710][ T7261] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.778131][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.859952][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.131609][ T7276] loop2: detected capacity change from 0 to 512 [ 164.192621][ T7276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.390257][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.514927][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 164.558729][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880249bf800: rx timeout, send abort [ 164.570360][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880249bf800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 164.949693][ T27] kernel write not supported for file /gssd/clntXX/gssd (pid: 27 comm: kworker/1:1) [ 165.168829][ T7305] loop1: detected capacity change from 0 to 128 [ 165.207746][ T7305] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.294042][ T7305] FAT-fs (loop1): error, parent dir link count too low (2) [ 165.314005][ T7305] FAT-fs (loop1): Filesystem has been set read-only [ 165.418484][ T5803] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.935788][ T7335] loop8: detected capacity change from 0 to 8 [ 165.983733][ T7335] Dev loop8: unable to read RDB block 8 [ 166.009900][ T7335] loop8: unable to read partition table [ 166.026422][ T7335] loop8: partition table beyond EOD, truncated [ 166.045277][ T7335] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 166.765199][ T5793] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.926018][ T7338] loop2: detected capacity change from 0 to 32768 [ 166.995695][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 167.031930][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.045313][ T7338] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.055005][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.065872][ T5793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.080920][ T5793] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.090307][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.102056][ T5793] usb 4-1: config 0 descriptor?? [ 167.114214][ T7340] loop1: detected capacity change from 0 to 32768 [ 167.188390][ T7342] loop0: detected capacity change from 0 to 40427 [ 167.203315][ T7342] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 167.212286][ T7342] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.226603][ T7338] XFS (loop2): Ending clean mount [ 167.270459][ T7342] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.339737][ T28] audit: type=1800 audit(35295939.181:12): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 167.552224][ T7342] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.583450][ T7342] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.650590][ T5793] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input15 [ 167.706789][ T5793] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 167.821717][ T5793] usb 4-1: USB disconnect, device number 9 [ 167.885852][ T5815] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.039683][ T7374] fido_id[7374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 168.376967][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.575403][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 168.597725][ T787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.660812][ T787] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 168.690365][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.719528][ T787] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 168.757543][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.778512][ T787] usb 2-1: Product: syz [ 168.793006][ T787] usb 2-1: Manufacturer: syz [ 168.809172][ T787] usb 2-1: SerialNumber: syz [ 168.827522][ T787] usb 2-1: config 0 descriptor?? [ 169.246588][ T787] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 169.583315][ T7389] loop2: detected capacity change from 0 to 32768 [ 169.592118][ T7387] loop3: detected capacity change from 0 to 40427 [ 169.621429][ T7389] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.531 (7389) [ 169.638041][ T7387] F2FS-fs (loop3): invalid crc value [ 169.654200][ T7387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.687217][ T7389] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 169.742015][ T7389] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 169.791054][ T7389] BTRFS info (device loop2): using free space tree [ 169.872624][ T7387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.889281][ T787] usb 2-1: USB disconnect, device number 8 [ 169.963676][ T7387] syz.3.530: attempt to access beyond end of device [ 169.963676][ T7387] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.047953][ T7389] BTRFS info (device loop2): enabling ssd optimizations [ 170.075287][ T7389] BTRFS info (device loop2): auto enabling async discard [ 170.137058][ T5811] syz-executor: attempt to access beyond end of device [ 170.137058][ T5811] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 170.203725][ T5811] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 170.232610][ T5811] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 170.446019][ T5815] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 170.636675][ T6713] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (6713) [ 170.689833][ T7441] loop1: detected capacity change from 0 to 256 [ 170.726748][ T7441] exfat: Bad value for 'uid' [ 171.354937][ T7458] loop0: detected capacity change from 0 to 256 [ 171.449613][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.497544][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.520367][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.565787][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.595670][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.634317][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.680431][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.723137][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.748414][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.785252][ T7458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 171.845140][ T28] audit: type=1800 audit(35295943.681:13): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.544" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 171.885345][ T7462] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 171.933624][ T28] audit: type=1800 audit(35295943.681:14): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.544" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 172.654032][ T7460] IPVS: You probably need to specify IP address on multicast interface. [ 172.695445][ T7460] IPVS: Error connecting to the multicast addr [ 173.641924][ T7511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.828069][ T787] IPVS: starting estimator thread 0... [ 173.925583][ T7517] IPVS: using max 16 ests per chain, 38400 per kthread [ 173.952953][ T7499] loop3: detected capacity change from 0 to 32768 [ 173.989531][ T7499] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.049960][ T7519] loop0: detected capacity change from 0 to 4096 [ 174.100088][ T7499] XFS (loop3): Ending clean mount [ 174.167140][ T7532] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.394714][ T5811] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.120716][ T7548] loop0: detected capacity change from 0 to 1024 [ 175.141968][ T7534] loop1: detected capacity change from 0 to 40427 [ 175.166398][ T7534] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 175.186299][ T7548] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 175.205197][ T7534] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.249925][ T7534] F2FS-fs (loop1): invalid crc value [ 175.308257][ T7534] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.351478][ T7553] loop3: detected capacity change from 0 to 512 [ 175.365691][ T7548] hfsplus: filesystem is marked journaled, leaving read-only. [ 175.478131][ T7553] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 175.493757][ T7553] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.571: inode #15: comm syz.3.571: iget: illegal inode # [ 175.580192][ T7534] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 175.587617][ T7553] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.571: couldn't read orphan inode 15 (err -117) [ 175.635962][ T7534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.658265][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.755764][ T7553] EXT4-fs error (device loop3): ext4_check_dx_root:2268: inode #2: comm syz.3.571: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 175.821544][ T7564] veth1_to_bond: entered allmulticast mode [ 175.834756][ T7564] veth1_to_bond: entered promiscuous mode [ 175.847699][ T5803] syz-executor: attempt to access beyond end of device [ 175.847699][ T5803] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 175.877415][ T7564] veth1_to_bond: left promiscuous mode [ 175.900423][ T5803] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 175.909242][ T7564] veth1_to_bond: left allmulticast mode [ 175.925681][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.949790][ T5803] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 176.043751][ T7568] loop3: detected capacity change from 0 to 512 [ 176.088897][ T7568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 176.112545][ T7568] System zones: 1-12 [ 176.131643][ T7568] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.578: missing EA_INODE flag [ 176.157537][ T7568] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.578: error while reading EA inode 12 err=-117 [ 176.191028][ T7568] EXT4-fs (loop3): 1 orphan inode deleted [ 176.199400][ T7568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.308185][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.830662][ T7590] FAULT_INJECTION: forcing a failure. [ 176.830662][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 176.865172][ T7590] CPU: 0 PID: 7590 Comm: syz.2.588 Not tainted syzkaller #0 [ 176.872632][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.882717][ T7590] Call Trace: [ 176.886022][ T7590] [ 176.888989][ T7590] dump_stack_lvl+0x18c/0x250 [ 176.893782][ T7590] ? show_regs_print_info+0x20/0x20 [ 176.899019][ T7590] ? load_image+0x420/0x420 [ 176.903561][ T7590] ? __might_sleep+0xe0/0xe0 [ 176.908225][ T7590] ? __lock_acquire+0x7d80/0x7d80 [ 176.913281][ T7590] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 176.919318][ T7590] should_fail_ex+0x394/0x4c0 [ 176.924031][ T7590] should_failslab+0x9/0x20 [ 176.928573][ T7590] slab_pre_alloc_hook+0x59/0x300 [ 176.933636][ T7590] kmem_cache_alloc_lru+0x4d/0x2b0 [ 176.938785][ T7590] ? __d_alloc+0x31/0x710 [ 176.943145][ T7590] __d_alloc+0x31/0x710 [ 176.947329][ T7590] d_alloc_pseudo+0x1d/0x70 [ 176.951873][ T7590] alloc_file_pseudo+0xe4/0x210 [ 176.956749][ T7590] ? fput+0x1a0/0x1a0 [ 176.960756][ T7590] ? do_raw_spin_unlock+0x121/0x230 [ 176.965999][ T7590] anon_inode_getfile+0xc5/0x1a0 [ 176.970978][ T7590] do_eventfd+0x16d/0x2d0 [ 176.975353][ T7590] __x64_sys_eventfd2+0x5a/0x70 [ 176.980232][ T7590] do_syscall_64+0x55/0xb0 [ 176.984678][ T7590] ? clear_bhb_loop+0x40/0x90 [ 176.989407][ T7590] ? clear_bhb_loop+0x40/0x90 [ 176.994130][ T7590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.000089][ T7590] RIP: 0033:0x7f79d3d9e159 [ 177.004547][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.024183][ T7590] RSP: 002b:00007f79d4bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 177.032631][ T7590] RAX: ffffffffffffffda RBX: 00007f79d4025fa0 RCX: 00007f79d3d9e159 [ 177.040643][ T7590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.048642][ T7590] RBP: 00007f79d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 177.056643][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.064641][ T7590] R13: 00007f79d4026038 R14: 00007f79d4025fa0 R15: 00007ffeebe5fc98 [ 177.072648][ T7590] [ 177.628484][ T7613] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 177.681282][ T7613] CPU: 0 PID: 7613 Comm: syz.1.593 Not tainted syzkaller #0 [ 177.688679][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.698787][ T7613] Call Trace: [ 177.702115][ T7613] [ 177.705090][ T7613] dump_stack_lvl+0x18c/0x250 [ 177.709846][ T7613] ? show_regs_print_info+0x20/0x20 [ 177.715119][ T7613] ? load_image+0x420/0x420 [ 177.719710][ T7613] sysfs_create_dir_ns+0x26e/0x2a0 [ 177.724868][ T7613] ? __lock_acquire+0x7d80/0x7d80 [ 177.729944][ T7613] ? sysfs_warn_dup+0xa0/0xa0 [ 177.734691][ T7613] ? rcu_is_watching+0x15/0xb0 [ 177.739522][ T7613] ? do_raw_spin_unlock+0x121/0x230 [ 177.744812][ T7613] kobject_add_internal+0x617/0xc90 [ 177.750080][ T7613] kobject_add+0x164/0x240 [ 177.754565][ T7613] ? kobject_init+0x1d0/0x1d0 [ 177.759303][ T7613] ? get_device_parent+0x366/0x390 [ 177.764474][ T7613] device_add+0x3fa/0xc40 [ 177.768876][ T7613] tty_register_device_attr+0x428/0x990 [ 177.774486][ T7613] ? tty_register_device+0x30/0x30 [ 177.779671][ T7613] ? tty_port_init+0x132/0x1a0 [ 177.784488][ T7613] ? gsm_dlci_alloc+0x32a/0x630 [ 177.789398][ T7613] ? __might_fault+0xaa/0x120 [ 177.794131][ T7613] gsm_activate_mux+0x110/0x2a0 [ 177.799052][ T7613] gsmld_ioctl+0x12ca/0x1900 [ 177.803708][ T7613] ? gsmld_write+0x120/0x120 [ 177.808363][ T7613] ? __init_ldsem+0x150/0x150 [ 177.813096][ T7613] ? __fget_files+0x28/0x460 [ 177.817793][ T7613] ? gsmld_write+0x120/0x120 [ 177.822435][ T7613] tty_ioctl+0x9b5/0xdc0 [ 177.826748][ T7613] ? tty_get_icount+0xb0/0xb0 [ 177.831516][ T7613] __se_sys_ioctl+0xfd/0x170 [ 177.836198][ T7613] do_syscall_64+0x55/0xb0 [ 177.840668][ T7613] ? clear_bhb_loop+0x40/0x90 [ 177.845418][ T7613] ? clear_bhb_loop+0x40/0x90 [ 177.850165][ T7613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.856108][ T7613] RIP: 0033:0x7fb2e7f9e159 [ 177.860585][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.880266][ T7613] RSP: 002b:00007fb2e8e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.888743][ T7613] RAX: ffffffffffffffda RBX: 00007fb2e8226090 RCX: 00007fb2e7f9e159 [ 177.896775][ T7613] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 177.904796][ T7613] RBP: 00007fb2e803506b R08: 0000000000000000 R09: 0000000000000000 [ 177.912816][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.920846][ T7613] R13: 00007fb2e8226128 R14: 00007fb2e8226090 R15: 00007ffc87a0bcc8 [ 177.928882][ T7613] [ 177.935425][ T7613] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.058731][ T7617] sch_tbf: burst 0 is lower than device veth0 mtu (1514) ! [ 178.446078][ T7626] overlayfs: upper fs does not support file handles, falling back to index=off. [ 178.881848][ T7638] loop2: detected capacity change from 0 to 256 [ 178.985516][ T7642] loop3: detected capacity change from 0 to 64 [ 179.470237][ T7652] can0: slcan on ttyp22. [ 179.656685][ T7651] can0 (unregistered): slcan off ttyp22. [ 180.022762][ T7676] loop0: detected capacity change from 0 to 2048 [ 180.060120][ T7676] loop0: p2 p3 < > p4 < p5 > [ 180.076195][ T7676] loop0: partition table partially beyond EOD, truncated [ 180.101815][ T7676] loop0: p2 start 53543428 is beyond EOD, truncated [ 180.128491][ T7676] loop0: p3 start 4284289 is beyond EOD, truncated [ 180.165351][ T7676] loop0: p5 start 53543428 is beyond EOD, truncated [ 180.729128][ T7693] loop1: detected capacity change from 0 to 256 [ 180.831470][ T7693] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 180.907922][ T7697] sd 0:0:1:0: PR command failed: 1026 [ 180.915336][ T7697] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 180.944011][ T7697] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 181.147147][ T7706] loop1: detected capacity change from 0 to 256 [ 181.903514][ T7729] syzkaller1: entered promiscuous mode [ 181.910174][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 181.925239][ T7729] syzkaller1: entered allmulticast mode [ 182.118216][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 182.153826][ T5872] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 182.179495][ T5872] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 182.190194][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 182.209183][ T5872] usb 3-1: Product: syz [ 182.221893][ T5872] usb 3-1: Manufacturer: syz [ 182.260718][ T5872] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 182.302812][ T5872] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 182.312386][ T7720] loop3: detected capacity change from 0 to 32768 [ 182.346401][ T7720] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.633 (7720) [ 182.376863][ T7720] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 182.401129][ T7720] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 182.411342][ T7720] BTRFS info (device loop3): using free space tree [ 182.499292][ T7720] BTRFS info (device loop3): enabling ssd optimizations [ 182.563972][ T28] audit: type=1800 audit(35295954.401:15): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.633" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 182.741038][ T7756] loop0: detected capacity change from 0 to 2048 [ 182.846248][ T7756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.868257][ T5811] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 183.131656][ T7756] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 183.183039][ T7756] CacheFiles: File cache on CacheFiles registered [ 183.193235][ T7763] loop1: detected capacity change from 0 to 1024 [ 183.212178][ T7755] CacheFiles: File cache on CacheFiles unregistering [ 183.235801][ T7755] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 183.242512][ T7765] input: syz1 as /devices/virtual/input/input16 [ 183.296653][ T7763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.484870][ T23] usb 3-1: USB disconnect, device number 9 [ 183.523991][ T7768] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.642: Freeing blocks not in datazone - block = 0, count = 16 [ 183.541667][ T23] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 183.555765][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.590227][ T23] iuu_phoenix 3-1:1.0: device disconnected [ 183.730387][ T1098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:7: bg 0: block 112: padding at end of block bitmap is not set [ 183.777000][ T1098] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 183.798605][ T1098] EXT4-fs (loop1): This should not happen!! Data will be lost [ 183.798605][ T1098] [ 183.811438][ T1098] EXT4-fs (loop1): Total free blocks count 0 [ 183.817758][ T1098] EXT4-fs (loop1): Free/Dirty block details [ 183.823849][ T1098] EXT4-fs (loop1): free_blocks=16 [ 183.829607][ T1098] EXT4-fs (loop1): dirty_blocks=16 [ 183.834771][ T1098] EXT4-fs (loop1): Block reservation details [ 183.841065][ T1098] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 183.853082][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.295356][ T7784] loop2: detected capacity change from 0 to 2048 [ 184.403625][ T7789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.607896][ T7789] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 184.635196][ T7789] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 184.686160][ T7789] Remounting filesystem read-only [ 184.697222][ T7793] NILFS (loop2): mounting fs with errors [ 184.771896][ T7789] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 184.798511][ T7789] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 184.840802][ T7789] Remounting filesystem read-only [ 184.858418][ T7774] loop3: detected capacity change from 0 to 32768 [ 184.947916][ T5815] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 184.981756][ T5815] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 184.982328][ T28] audit: type=1800 audit(35295956.811:16): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.646" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 185.028847][ T5815] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 185.067235][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.113956][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.144187][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.176791][ T5815] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 185.183568][ T5815] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 185.211919][ T5815] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 185.238183][ T5815] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 185.258863][ T5815] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 185.276346][ T5815] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 185.283395][ T5815] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 185.304000][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.315217][ T5817] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 185.327327][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.338176][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.352893][ T5815] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 185.360945][ T5815] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 185.375458][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.384406][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.400563][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.409861][ T5815] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 185.417290][ T5815] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 185.424637][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.434076][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.443043][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.452862][ T5815] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 185.459713][ T5815] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 185.473640][ T5815] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 185.488363][ T5815] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 185.497217][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.507222][ T5815] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 185.514388][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.523777][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.539039][ T5817] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 185.550757][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.567606][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.580162][ T5817] usb 2-1: config 0 descriptor?? [ 185.587346][ T5815] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 185.594710][ T5815] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 185.718655][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.749799][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.762008][ T23] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 185.785332][ T23] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 185.803617][ T23] usb 1-1: Manufacturer: syz [ 185.823771][ T23] usb 1-1: config 0 descriptor?? [ 185.915901][ T7813] loop4: detected capacity change from 0 to 2 [ 186.021426][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x2 [ 186.045280][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x1 [ 186.075002][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x0 [ 186.090184][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x0 [ 186.110108][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x0 [ 186.121287][ T5817] microsoft 0003:045E:009D.0006: ignoring exceeding usage max [ 186.132661][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x5 [ 186.140465][ T5817] microsoft 0003:045E:009D.0006: unknown main item tag 0x6 [ 186.165151][ T5817] microsoft 0003:045E:009D.0006: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 186.195379][ T5817] microsoft 0003:045E:009D.0006: no inputs found [ 186.201842][ T5817] microsoft 0003:045E:009D.0006: could not initialize ff, continuing anyway [ 186.219853][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.246696][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.298976][ T787] usb 2-1: USB disconnect, device number 9 [ 186.343054][ T7816] fido_id[7816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 186.460334][ T7811] loop2: detected capacity change from 0 to 32768 [ 186.485586][ T7811] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.658 (7811) [ 186.527489][ T7811] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.555275][ T7811] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 186.574420][ T7811] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 186.589236][ T7811] BTRFS info (device loop2): use zstd compression, level 3 [ 186.601175][ T7811] BTRFS info (device loop2): using free space tree [ 186.670412][ T7811] BTRFS info (device loop2): enabling ssd optimizations [ 186.684841][ T7811] BTRFS info (device loop2): auto enabling async discard [ 186.708897][ T23] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input17 [ 186.819317][ T23] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input18 [ 186.878927][ T23] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input19 [ 186.929516][ T5815] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.948004][ T23] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input20 [ 187.037762][ T23] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 187.061726][ T23] usb 1-1: USB disconnect, device number 10 [ 187.568402][ T7847] fido_id[7847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 188.090658][ T7859] loop3: detected capacity change from 0 to 1024 [ 188.126889][ T7859] EXT4-fs: Ignoring removed oldalloc option [ 188.176516][ T7859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.300715][ T7859] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.673: lblock 3 mapped to illegal pblock 3 (length 3) [ 188.381099][ T7859] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 188.405170][ T7859] EXT4-fs (loop3): This should not happen!! Data will be lost [ 188.405170][ T7859] [ 188.585705][ T34] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 188.618469][ T34] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 188.645104][ T34] EXT4-fs (loop3): This should not happen!! Data will be lost [ 188.645104][ T34] [ 188.669206][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.789005][ T7855] loop2: detected capacity change from 0 to 40427 [ 188.819582][ T7855] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 188.845201][ T7855] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 188.879467][ T7855] F2FS-fs (loop2): invalid crc value [ 188.920641][ T7855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.957430][ T7877] loop3: detected capacity change from 0 to 1024 [ 188.964945][ T7877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.096731][ T7855] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 189.098450][ T7877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.142696][ T7883] gadgetfs: bound to dummy_udc driver [ 189.201084][ T7855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.310856][ T7855] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 189.364203][ T7855] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x44b/0x530 [ 189.417035][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.429800][ T7855] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 190.132373][ T7907] loop3: detected capacity change from 0 to 512 [ 190.169979][ T7907] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349) [ 190.206266][ T7907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.293876][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.465382][ T5872] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.675401][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 190.693859][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.711281][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.724978][ T5872] usb 1-1: Product: syz [ 190.742681][ T5872] usb 1-1: Manufacturer: syz [ 190.750549][ T5872] usb 1-1: SerialNumber: syz [ 190.848017][ T7930] loop2: detected capacity change from 0 to 4096 [ 190.871109][ T7930] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 190.924231][ T7930] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 190.927563][ T7932] loop3: detected capacity change from 0 to 512 [ 190.984084][ T7932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.174173][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.600398][ T7947] loop1: detected capacity change from 0 to 16 [ 191.625887][ T7947] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.635626][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 191.688941][ T7947] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 191.740379][ T7947] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 191.740933][ T7950] syz.1.706: attempt to access beyond end of device [ 191.740933][ T7950] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 191.797383][ T7950] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[3749] [ 191.813974][ T5872] cdc_ncm 1-1:1.0: bind() failure [ 191.834425][ T7952] loop3: detected capacity change from 0 to 256 [ 191.861669][ T5872] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 191.890529][ T5872] cdc_ncm 1-1:1.1: bind() failure [ 191.926051][ T5872] usb 1-1: USB disconnect, device number 11 [ 191.952605][ T6713] udevd[6713]: setting mode of /dev/bus/usb/001/011 to 020664 failed: No such file or directory [ 192.019329][ T6713] udevd[6713]: setting owner of /dev/bus/usb/001/011 to uid=0, gid=0 failed: No such file or directory [ 192.193521][ T7956] netlink: 56 bytes leftover after parsing attributes in process `syz.1.710'. [ 192.400914][ T7943] loop2: detected capacity change from 0 to 32768 [ 192.493538][ T7969] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 192.498536][ T7943] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.667104][ T7977] netlink: 'syz.1.716': attribute type 22 has an invalid length. [ 192.674925][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'. [ 192.691642][ T7943] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 192.737448][ T7943] XFS (loop2): Starting recovery (logdev: internal) [ 192.768946][ T7980] netlink: 'syz.1.716': attribute type 22 has an invalid length. [ 192.784958][ T7943] XFS (loop2): Ending recovery (logdev: internal) [ 192.805197][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'. [ 192.834100][ T28] audit: type=1800 audit(35295964.671:17): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.704" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 192.908082][ T7981] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 192.956217][ T7981] XFS (loop2): Unmount and run xfs_repair [ 192.974117][ T7943] XFS (loop2): Internal error i != 1 at line 527 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5e7/0x820 [ 192.996524][ T7943] CPU: 0 PID: 7943 Comm: syz.2.704 Not tainted syzkaller #0 [ 193.003893][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.014009][ T7943] Call Trace: [ 193.017346][ T7943] [ 193.020353][ T7943] dump_stack_lvl+0x18c/0x250 [ 193.025100][ T7943] ? __xfs_printk+0x90/0x90 [ 193.029661][ T7943] ? show_regs_print_info+0x20/0x20 [ 193.034960][ T7943] xfs_corruption_error+0x122/0x170 [ 193.040225][ T7943] ? xfs_alloc_fixup_trees+0x5e7/0x820 [ 193.045750][ T7943] xfs_alloc_fixup_trees+0x64e/0x820 [ 193.051121][ T7943] ? xfs_alloc_fixup_trees+0x5e7/0x820 [ 193.056668][ T7943] ? xfs_alloc_fix_len+0x280/0x280 [ 193.061841][ T7943] ? xfs_alloc_ag_vextent_lastblock+0x432/0x700 [ 193.068156][ T7943] xfs_alloc_cur_finish+0xd5/0x470 [ 193.073329][ T7943] ? xfs_allocbt_init_cursor+0x70/0x110 [ 193.078950][ T7943] xfs_alloc_ag_vextent_near+0xd69/0x1220 [ 193.084747][ T7943] ? __xfs_free_extent_later+0x650/0x650 [ 193.090461][ T7943] ? xfs_alloc_vextent_near_bno+0x540/0x540 [ 193.096412][ T7943] ? xfs_perag_grab+0x25/0x400 [ 193.101230][ T7943] ? xfs_perag_grab+0x25/0x400 [ 193.106049][ T7943] ? xfs_alloc_vextent_prepare_ag+0x19d/0x5d0 [ 193.112185][ T7943] xfs_alloc_vextent_iterate_ags+0x607/0x8e0 [ 193.118243][ T7943] xfs_alloc_vextent_start_ag+0x370/0x810 [ 193.124032][ T7943] xfs_bmapi_allocate+0x1446/0x2b60 [ 193.129315][ T7943] ? xfs_bmapi_write+0x1170/0x1170 [ 193.134500][ T7943] ? xfs_iext_find_level+0x445/0x490 [ 193.139839][ T7943] ? xfs_iext_lookup_extent+0x41f/0x7f0 [ 193.145443][ T7943] ? xfs_iext_prev+0x34a/0x360 [ 193.150264][ T7943] ? xfs_iext_get_extent+0x1b9/0x370 [ 193.155609][ T7943] xfs_bmapi_write+0x796/0x1170 [ 193.160537][ T7943] ? xfs_bmapi_minleft+0x200/0x200 [ 193.165732][ T7943] ? xfs_trans_alloc_inode+0x195/0x340 [ 193.171265][ T7943] xfs_iomap_write_direct+0x3ba/0x680 [ 193.176708][ T7943] ? xfs_eof_alignment+0x2c0/0x2c0 [ 193.181884][ T7943] ? down_read_nested+0x1ae/0x2e0 [ 193.186965][ T7943] ? xfs_direct_write_iomap_begin+0xbd8/0x1060 [ 193.193181][ T7943] ? xfs_direct_write_iomap_begin+0xbd8/0x1060 [ 193.199393][ T7943] ? xfs_iunlock+0x1c0/0x300 [ 193.204052][ T7943] xfs_direct_write_iomap_begin+0xbff/0x1060 [ 193.210095][ T7943] ? xfs_file_dio_write_aligned+0x148/0x1d0 [ 193.216056][ T7943] ? xfs_file_write_iter+0x4fe/0x610 [ 193.221402][ T7943] ? do_iter_write+0x747/0xc50 [ 193.226279][ T7943] ? xfs_iomap_write_unwritten+0xa50/0xa50 [ 193.232135][ T7943] ? filemap_write_and_wait_range+0x1a5/0x230 [ 193.238253][ T7943] ? xas_next_entry+0x3e0/0x3e0 [ 193.243171][ T7943] ? xfs_iomap_write_unwritten+0xa50/0xa50 [ 193.249037][ T7943] iomap_iter+0x65b/0xe70 [ 193.253429][ T7943] __iomap_dio_rw+0xc60/0x1d00 [ 193.258269][ T7943] ? inode_needs_update_time+0x40a/0x4c0 [ 193.263955][ T7943] ? iomap_dio_bio_end_io+0x630/0x630 [ 193.269408][ T7943] ? xfs_file_write_checks+0x90b/0xad0 [ 193.274920][ T7943] ? __lock_acquire+0x7d80/0x7d80 [ 193.280020][ T7943] ? xfs_file_buffered_write+0x940/0x940 [ 193.285714][ T7943] iomap_dio_rw+0x45/0xa0 [ 193.290109][ T7943] xfs_file_dio_write_aligned+0x148/0x1d0 [ 193.295905][ T7943] ? direct_splice_actor+0xe8/0x130 [ 193.301150][ T7943] ? splice_direct_to_actor+0x30b/0x8e0 [ 193.306747][ T7943] ? do_splice_direct+0x1d5/0x2f0 [ 193.311831][ T7943] ? xfs_file_dio_write_unaligned+0x670/0x670 [ 193.317955][ T7943] ? end_current_label_crit_section+0x149/0x170 [ 193.324281][ T7943] xfs_file_write_iter+0x4fe/0x610 [ 193.329442][ T7943] do_iter_write+0x747/0xc50 [ 193.334085][ T7943] ? vfs_iter_write+0xa0/0xa0 [ 193.338814][ T7943] ? __asan_memset+0x22/0x40 [ 193.343475][ T7943] ? iov_iter_bvec+0xd4/0x1b0 [ 193.348215][ T7943] ? vfs_iter_write+0x6e/0xa0 [ 193.352963][ T7943] iter_file_splice_write+0x6b6/0xcf0 [ 193.358412][ T7943] ? splice_from_pipe+0x180/0x180 [ 193.363501][ T7943] ? splice_shrink_spd+0xc0/0xc0 [ 193.368506][ T7943] ? common_file_perm+0x198/0x1f0 [ 193.373629][ T7943] ? splice_from_pipe+0x180/0x180 [ 193.378717][ T7943] direct_splice_actor+0xe8/0x130 [ 193.383807][ T7943] splice_direct_to_actor+0x30b/0x8e0 [ 193.389242][ T7943] ? direct_file_splice_eof+0xb0/0xb0 [ 193.394677][ T7943] ? warn_unsupported+0xc0/0xc0 [ 193.399620][ T7943] ? fsnotify_perm+0x5d/0x5e0 [ 193.404369][ T7943] ? security_file_permission+0x79/0xa0 [ 193.409992][ T7943] do_splice_direct+0x1d5/0x2f0 [ 193.414910][ T7943] ? splice_direct_to_actor+0x8e0/0x8e0 [ 193.420534][ T7943] ? rcu_read_lock_any_held+0xb4/0x140 [ 193.426090][ T7943] ? do_splice_direct+0x2f0/0x2f0 [ 193.431186][ T7943] do_sendfile+0x52b/0xe80 [ 193.435663][ T7943] ? __ia32_sys_get_robust_list+0x110/0x110 [ 193.441625][ T7943] ? do_pwritev+0x3a0/0x3a0 [ 193.446221][ T7943] __se_sys_sendfile64+0x145/0x1a0 [ 193.451397][ T7943] ? lock_chain_count+0x20/0x20 [ 193.456308][ T7943] ? __x64_sys_sendfile64+0xb0/0xb0 [ 193.461565][ T7943] ? lockdep_hardirqs_on+0x98/0x150 [ 193.466820][ T7943] do_syscall_64+0x55/0xb0 [ 193.471291][ T7943] ? clear_bhb_loop+0x40/0x90 [ 193.476024][ T7943] ? clear_bhb_loop+0x40/0x90 [ 193.480788][ T7943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.486737][ T7943] RIP: 0033:0x7f79d3d9e159 [ 193.491211][ T7943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.510905][ T7943] RSP: 002b:00007f79d4bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 193.519384][ T7943] RAX: ffffffffffffffda RBX: 00007f79d4025fa0 RCX: 00007f79d3d9e159 [ 193.527406][ T7943] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 193.535452][ T7943] RBP: 00007f79d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 193.543474][ T7943] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 193.551504][ T7943] R13: 00007f79d4026038 R14: 00007f79d4025fa0 R15: 00007ffeebe5fc98 [ 193.559560][ T7943] [ 193.586958][ T7943] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 193.714289][ T5815] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.982206][ T7991] Invalid argument reading file caps for ./file0 [ 194.520733][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.530644][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.552087][ T8008] loop3: detected capacity change from 0 to 128 [ 194.615714][ T6713] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.850073][ T8019] loop0: detected capacity change from 0 to 256 [ 194.915340][ T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 195.070410][ T8021] loop0: detected capacity change from 0 to 128 [ 195.099745][ T8021] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 195.123840][ T8021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.136797][ T23] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= e.90 [ 195.156224][ T23] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 195.167245][ T23] usb 4-1: Product: syz [ 195.171560][ T23] usb 4-1: Manufacturer: syz [ 195.177612][ T23] usb 4-1: SerialNumber: syz [ 195.202029][ T23] ums-onetouch 4-1:3.0: USB Mass Storage device detected [ 195.407350][ T23] usb 4-1: USB disconnect, device number 10 [ 195.513537][ T8034] loop0: detected capacity change from 0 to 128 [ 195.536237][ T8034] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.559581][ T8034] syz.0.740 (pid 8034) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 195.628788][ T5805] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.891649][ T8044] lo speed is unknown, defaulting to 1000 [ 195.899045][ T8044] lo speed is unknown, defaulting to 1000 [ 195.920120][ T8044] lo speed is unknown, defaulting to 1000 [ 195.988830][ T8044] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 196.118785][ T8049] syzkaller1: entered promiscuous mode [ 196.124880][ T8049] syzkaller1: entered allmulticast mode [ 196.248929][ T8044] lo speed is unknown, defaulting to 1000 [ 196.278258][ T8044] lo speed is unknown, defaulting to 1000 [ 196.305803][ T8044] lo speed is unknown, defaulting to 1000 [ 196.326738][ T8044] lo speed is unknown, defaulting to 1000 [ 196.433508][ T28] audit: type=1326 audit(35295968.271:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 196.469632][ T28] audit: type=1326 audit(35295968.271:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 196.558734][ T28] audit: type=1326 audit(35295968.311:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 196.625203][ T28] audit: type=1326 audit(35295968.311:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 196.724233][ T28] audit: type=1326 audit(35295968.311:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 196.865964][ T787] smpboot: CPU 1 is now offline [ 196.892822][ T28] audit: type=1326 audit(35295968.311:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 197.035770][ T28] audit: type=1326 audit(35295968.331:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 197.123752][ T8067] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 197.241538][ T28] audit: type=1326 audit(35295968.331:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 197.287306][ T28] audit: type=1326 audit(35295968.331:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aff9e159 code=0x7ffc0000 [ 197.383776][ T8076] dlm: non-version read from control device 4096 [ 197.590512][ T8078] loop2: detected capacity change from 0 to 2048 [ 197.621035][ T8080] jffs2: notice: (8080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.680967][ T8078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.997216][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 198.022591][ T8066] loop0: detected capacity change from 0 to 32768 [ 198.035683][ T8090] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 198.063205][ T8066] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.754 (8066) [ 198.150832][ T8066] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 198.185284][ T8066] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 198.235349][ T8066] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 198.275398][ T8066] BTRFS info (device loop0): use zstd compression, level 3 [ 198.291995][ T8066] BTRFS info (device loop0): force clearing of disk cache [ 198.319740][ T8066] BTRFS info (device loop0): enabling disk space caching [ 198.352674][ T8066] BTRFS info (device loop0): disk space caching is enabled [ 198.472436][ T8103] loop3: detected capacity change from 0 to 2048 [ 198.494989][ T8066] BTRFS info (device loop0): enabling ssd optimizations [ 198.513509][ T8066] BTRFS info (device loop0): auto enabling async discard [ 198.539203][ T8118] loop2: detected capacity change from 0 to 1024 [ 198.547021][ T8103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.556805][ T8066] BTRFS info (device loop0): rebuilding free space tree [ 198.594980][ T8066] BTRFS info (device loop0): disabling free space tree [ 198.631233][ T8118] hfsplus: invalid length 32517 has been corrected to 255 [ 198.639353][ T8066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.670135][ T8066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.684476][ T8118] hfsplus: invalid length 32517 has been corrected to 255 [ 198.727137][ T8118] hfsplus: invalid length 32517 has been corrected to 255 [ 198.776204][ T8118] hfsplus: invalid length 32517 has been corrected to 255 [ 198.870001][ T8118] hfsplus: invalid length 32517 has been corrected to 255 [ 198.886671][ T8118] hfsplus: b-tree write err: -5, ino 2 [ 198.970361][ T34] hfsplus: b-tree write err: -5, ino 25 [ 198.989242][ T34] hfsplus: b-tree write err: -5, ino 4 [ 199.005511][ T34] hfsplus: b-tree write err: -5, ino 2 [ 199.019856][ T5805] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.466533][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.533327][ T8143] loop0: detected capacity change from 0 to 131072 [ 200.541060][ T8143] XFS: ikeep mount option is deprecated. [ 200.571470][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.607177][ T787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.622150][ T8143] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 200.674824][ T787] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 200.694373][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.704509][ T787] usb 4-1: Product: syz [ 200.714631][ T787] usb 4-1: Manufacturer: syz [ 200.723643][ T787] usb 4-1: SerialNumber: syz [ 200.749286][ T787] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 200.798065][ T787] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 200.798065][ T787] Please send a copy of this message to and [ 200.862643][ T8143] XFS (loop0): Starting recovery (logdev: internal) [ 200.909523][ T8143] XFS (loop0): Ending recovery (logdev: internal) [ 201.049234][ T5805] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 201.459771][ T8161] syzkaller1: entered promiscuous mode [ 201.473204][ T8161] syzkaller1: entered allmulticast mode [ 201.774646][ T787] scsi host1: usb-storage 4-1:1.0 [ 201.817144][ T787] usb 4-1: USB disconnect, device number 11 [ 201.856614][ T8166] syzkaller1: entered promiscuous mode [ 201.880583][ T8166] syzkaller1: entered allmulticast mode [ 202.283574][ T8176] loop0: detected capacity change from 0 to 128 [ 202.348081][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.397675][ T8176] FAT-fs (loop0): Filesystem has been set read-only [ 202.437072][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.487723][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.538370][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.585262][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.622510][ T8181] loop1: detected capacity change from 0 to 4096 [ 202.629070][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.666376][ T8181] EXT4-fs: inline encryption not supported [ 202.673002][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.714400][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.735112][ T8181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.752713][ T8181] EXT4-fs (loop1): Test dummy encryption mode enabled [ 202.762906][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.796174][ T8176] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 202.809246][ T8181] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 202.835577][ T8181] System zones: 0-5 [ 202.855567][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 202.855583][ T28] audit: type=1800 audit(35295974.691:41): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.779" name="file2" dev="loop0" ino=1048619 res=0 errno=0 [ 202.893618][ T8181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.155400][ T28] audit: type=1800 audit(35295974.991:42): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.789" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 203.318790][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.624675][ T8209] loop1: detected capacity change from 0 to 1024 [ 203.656338][ T8209] EXT4-fs: Ignoring removed bh option [ 204.547450][ T8211] loop3: detected capacity change from 0 to 131072 [ 204.555817][ T8211] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 204.562565][ T8211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 204.571853][ T8211] F2FS-fs (loop3): invalid crc value [ 204.621355][ T8211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.678597][ T8209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.696931][ T8211] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 204.704062][ T8211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 204.738290][ T8211] F2FS-fs (loop3): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 204.857834][ T8219] binder: 8218:8219 ioctl c0306201 0 returned -14 [ 204.886032][ T8219] binder: 8218:8219 ioctl c0046209 0 returned -22 [ 204.946232][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.408698][ T8202] loop0: detected capacity change from 0 to 32768 [ 205.490611][ T8202] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 205.611373][ T8202] XFS (loop0): Ending clean mount [ 205.666528][ T28] audit: type=1800 audit(35295977.511:43): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.797" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 205.999286][ T5805] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.527496][ T8254] FAULT_INJECTION: forcing a failure. [ 206.527496][ T8254] name failslab, interval 1, probability 0, space 0, times 0 [ 206.591402][ T8254] CPU: 0 PID: 8254 Comm: syz.2.817 Not tainted syzkaller #0 [ 206.598784][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.608893][ T8254] Call Trace: [ 206.612229][ T8254] [ 206.615213][ T8254] dump_stack_lvl+0x18c/0x250 [ 206.619959][ T8254] ? show_regs_print_info+0x20/0x20 [ 206.625233][ T8254] ? load_image+0x420/0x420 [ 206.629797][ T8254] ? __might_sleep+0xe0/0xe0 [ 206.634426][ T8254] ? __lock_acquire+0x7d80/0x7d80 [ 206.639525][ T8254] should_fail_ex+0x394/0x4c0 [ 206.644224][ T8254] should_failslab+0x9/0x20 [ 206.648769][ T8254] slab_pre_alloc_hook+0x59/0x300 [ 206.653873][ T8254] ? lockdep_softirqs_off+0x440/0x440 [ 206.659306][ T8254] kmem_cache_alloc+0x5a/0x2c0 [ 206.664127][ T8254] ? security_inode_alloc+0x34/0x110 [ 206.669461][ T8254] security_inode_alloc+0x34/0x110 [ 206.674626][ T8254] inode_init_always+0x914/0xc90 [ 206.679608][ T8254] new_inode_pseudo+0x95/0x1d0 [ 206.684406][ T8254] __sock_create+0x12d/0x940 [ 206.689031][ T8254] ? __might_fault+0xaa/0x120 [ 206.693755][ T8254] ? __might_fault+0xc6/0x120 [ 206.698486][ T8254] __sys_socketpair+0x1c1/0x550 [ 206.703386][ T8254] __x64_sys_socketpair+0x9b/0xb0 [ 206.708444][ T8254] do_syscall_64+0x55/0xb0 [ 206.712898][ T8254] ? clear_bhb_loop+0x40/0x90 [ 206.717607][ T8254] ? clear_bhb_loop+0x40/0x90 [ 206.722319][ T8254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.728346][ T8254] RIP: 0033:0x7f79d3d9e159 [ 206.732824][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.752476][ T8254] RSP: 002b:00007f79d4bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 206.760937][ T8254] RAX: ffffffffffffffda RBX: 00007f79d4025fa0 RCX: 00007f79d3d9e159 [ 206.769029][ T8254] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 206.777027][ T8254] RBP: 00007f79d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 206.785025][ T8254] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 206.793029][ T8254] R13: 00007f79d4026038 R14: 00007f79d4025fa0 R15: 00007ffeebe5fc98 [ 206.801047][ T8254] [ 206.804205][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.155025][ T8254] socket: no more sockets [ 207.718254][ T8279] page:ffffea00013f8200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe08 [ 207.765424][ T8279] head:ffffea00013f8200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 207.795252][ T8279] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 207.823768][ T8279] page_type: 0xffffffff() [ 207.848921][ T8279] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000 [ 207.885287][ T8279] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 207.923258][ T8279] page dumped because: unmovable page [ 207.950774][ T8279] page_owner tracks the page as allocated [ 207.980214][ T8279] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5805, tgid 5805 (syz-executor), ts 199567007117, free_ts 199453664560 [ 208.002449][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.077284][ T8279] post_alloc_hook+0x1c1/0x200 [ 208.097541][ T8279] get_page_from_freelist+0x2181/0x22a0 [ 208.115770][ T8279] __alloc_pages+0x1f0/0x460 [ 208.130739][ T8279] alloc_slab_page+0x5d/0x180 [ 208.140843][ T8279] new_slab+0x87/0x2d0 [ 208.155203][ T8279] ___slab_alloc+0xc5c/0x12f0 [ 208.170196][ T8279] __kmem_cache_alloc_node+0x11f/0x250 [ 208.185159][ T8279] __kmalloc+0xa7/0x240 [ 208.199777][ T8279] tomoyo_realpath_from_path+0xe6/0x5c0 [ 208.219977][ T8279] tomoyo_path_perm+0x282/0x560 [ 208.235211][ T8279] tomoyo_path_unlink+0xab/0xf0 [ 208.250513][ T8279] security_path_unlink+0xdc/0x130 [ 208.262911][ T8267] loop0: detected capacity change from 0 to 40427 [ 208.275236][ T8279] do_unlinkat+0x2b3/0x590 [ 208.285179][ T8279] __x64_sys_unlink+0x49/0x50 [ 208.291778][ T8279] do_syscall_64+0x55/0xb0 [ 208.301911][ T8279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.308000][ T8267] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 208.319863][ T8272] loop2: detected capacity change from 0 to 32768 [ 208.326541][ T8279] page last free stack trace: [ 208.332450][ T8267] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 208.340982][ T8279] free_unref_page_prepare+0x7d7/0x8f0 [ 208.349867][ T8267] F2FS-fs (loop0): invalid crc value [ 208.358759][ T8279] free_unref_page+0x32/0x2e0 [ 208.375264][ T8279] __unfreeze_partials+0x1cf/0x210 [ 208.383003][ T8267] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.400983][ T8279] put_cpu_partial+0x17c/0x250 [ 208.418409][ T8272] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 208.427389][ T8279] __slab_free+0x319/0x400 [ 208.446119][ T8279] qlist_free_all+0x75/0xd0 [ 208.461062][ T8279] kasan_quarantine_reduce+0x143/0x160 [ 208.473496][ T8279] __kasan_slab_alloc+0x22/0x80 [ 208.489488][ T8279] slab_post_alloc_hook+0x6a/0x4d0 [ 208.536506][ T8279] kmem_cache_alloc+0x17e/0x2c0 [ 208.577345][ T8279] getname_flags+0xbb/0x500 [ 208.582135][ T8267] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 208.597876][ T8272] XFS (loop2): Ending clean mount [ 208.603157][ T8279] do_sys_openat2+0xda/0x1d0 [ 208.613231][ T8267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.620930][ T8279] __x64_sys_openat+0x139/0x160 [ 208.635841][ T8279] do_syscall_64+0x55/0xb0 [ 208.651058][ T8279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.789881][ T5815] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 208.858171][ T5805] syz-executor: attempt to access beyond end of device [ 208.858171][ T5805] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.927948][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 208.934993][ T5805] F2FS-fs (loop0): Remounting filesystem read-only [ 209.265331][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 209.401172][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 209.410356][ T5810] Bluetooth: hci3: Injecting HCI hardware error event [ 209.421054][ T5814] Bluetooth: hci3: hardware error 0x00 [ 209.467290][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 209.479273][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.499880][ T5847] usb 2-1: config 1 has an invalid interface number: 21 but max is 0 [ 209.520611][ T5847] usb 2-1: config 1 has no interface number 0 [ 209.553948][ T5847] usb 2-1: config 1 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 209.605183][ T5847] usb 2-1: config 1 interface 21 has no altsetting 0 [ 209.620845][ T5847] usb 2-1: New USB device found, idVendor=0424, idProduct=9905, bcdDevice=17.da [ 209.638013][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.659625][ T5847] usb 2-1: Product: syz [ 209.667775][ T5847] usb 2-1: Manufacturer: syz [ 209.677885][ T5847] usb 2-1: SerialNumber: syz [ 209.916809][ T5847] smsc95xx v2.0.0 [ 209.920611][ T5847] smsc95xx 2-1:1.21 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 209.936425][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 210.005418][ T5847] smsc95xx: probe of 2-1:1.21 failed with error -22 [ 210.020030][ T28] audit: type=1807 audit(35295981.851:44): UNKNOWN=me res=0 [ 210.028723][ T8311] ima: policy update failed [ 210.040176][ T28] audit: type=1802 audit(35295981.871:45): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.836" res=0 errno=0 [ 210.064182][ T5847] usb 2-1: USB disconnect, device number 10 [ 210.085254][ T28] audit: type=1802 audit(35295981.871:46): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.836" res=0 errno=0 [ 210.135588][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 210.144234][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.177036][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.221652][ T787] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.255520][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.296209][ T787] usb 3-1: config 0 descriptor?? [ 210.319190][ T787] hub 3-1:0.0: USB hub found [ 210.535298][ T787] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 210.654594][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.841'. [ 210.961637][ T787] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 210.996022][ T787] hid-generic: probe of 0003:046D:C31C.0008 failed with error -22 [ 211.285340][ T787] usb 3-1: USB disconnect, device number 10 [ 211.435259][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 211.475256][ T5814] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 211.539684][ T8324] loop1: detected capacity change from 0 to 32768 [ 211.599458][ T8324] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 211.627832][ T8326] loop3: detected capacity change from 0 to 32768 [ 211.649366][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.666748][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.685377][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 211.705347][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.722792][ T8326] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 211.753986][ T9] usb 1-1: config 0 descriptor?? [ 211.854771][ T8324] XFS (loop1): Ending clean mount [ 211.952990][ T8326] XFS (loop3): Ending clean mount [ 212.103595][ T5803] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.150809][ T5811] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.211092][ T9] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 212.223168][ T9] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 212.234197][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0009/input/input21 [ 212.370933][ T9] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 212.455996][ T9] usb 1-1: USB disconnect, device number 12 [ 212.574357][ T8354] fido_id[8354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 212.836650][ T8362] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 213.170984][ T8365] loop2: detected capacity change from 0 to 8192 [ 213.206695][ T8365] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.514759][ T8378] loop3: detected capacity change from 0 to 8192 [ 213.535143][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.542901][ T8378] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.635691][ T787] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 213.738641][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.753196][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.778973][ T9] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 213.796594][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.814954][ T9] usb 2-1: Product: syz [ 213.822649][ T9] usb 2-1: Manufacturer: syz [ 213.830366][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.851907][ T9] usb 2-1: SerialNumber: syz [ 213.856791][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.884929][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 213.894367][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.911673][ T787] usb 3-1: SerialNumber: syz [ 213.933435][ T787] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 213.949143][ T787] usb-storage 3-1:1.0: USB Mass Storage device detected [ 213.989178][ T28] audit: type=1326 audit(35295985.831:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.3.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b3bd9e159 code=0x0 [ 214.014232][ T787] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 214.045308][ T787] scsi host1: usb-storage 3-1:1.0 [ 214.097892][ T9] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 214.385258][ T787] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 214.541631][ T9] usb 2-1: USB disconnect, device number 11 [ 214.553669][ T9] usblp0: removed [ 214.577585][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.588331][ T787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.599184][ T787] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 214.609356][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.622292][ T787] usb 1-1: config 0 descriptor?? [ 214.633250][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 214.640901][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 214.659762][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.669694][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.680289][ T787] usb 1-1: media controller created [ 214.688948][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.713706][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 214.721228][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 214.730920][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 214.753372][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 214.773450][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 214.851723][ T9] usb 1-1: USB disconnect, device number 13 [ 214.895754][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 214.963444][ T8397] loop3: detected capacity change from 0 to 512 [ 214.992424][ T8397] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.865: iget: bad i_size value: 38620345925642 [ 215.023622][ T8397] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.865: couldn't read orphan inode 15 (err -117) [ 215.042796][ T8397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.150477][ T1087] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 215.177700][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 215.201661][ T1087] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 215.215264][ T1087] EXT4-fs (loop3): This should not happen!! Data will be lost [ 215.215264][ T1087] [ 215.225620][ T1087] EXT4-fs (loop3): Total free blocks count 0 [ 215.231715][ T1087] EXT4-fs (loop3): Free/Dirty block details [ 215.246222][ T1087] EXT4-fs (loop3): free_blocks=0 [ 215.251292][ T1087] EXT4-fs (loop3): dirty_blocks=1 [ 215.257308][ T1087] EXT4-fs (loop3): Block reservation details [ 215.263430][ T1087] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 215.274002][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.299819][ T787] usb 3-1: USB disconnect, device number 11 [ 215.455613][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 215.635908][ T5793] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 215.648565][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 215.666123][ T9] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.699790][ T9] usb 2-1: config 2 interface 0 has no altsetting 0 [ 215.711885][ T8410] [ 215.714272][ T8410] ====================================================== [ 215.721314][ T8410] WARNING: possible circular locking dependency detected [ 215.728531][ T8410] syzkaller #0 Not tainted [ 215.732946][ T8410] ------------------------------------------------------ [ 215.739976][ T8410] syz.0.870/8410 is trying to acquire lock: [ 215.745865][ T8410] ffff88814e36c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390 [ 215.755296][ T8410] [ 215.755296][ T8410] but task is already holding lock: [ 215.762655][ T8410] ffff88802023eac8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580 [ 215.772860][ T8410] [ 215.772860][ T8410] which lock already depends on the new lock. [ 215.772860][ T8410] [ 215.783284][ T8410] [ 215.783284][ T8410] the existing dependency chain (in reverse order) is: [ 215.792296][ T8410] [ 215.792296][ T8410] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 215.800479][ T8410] __mutex_lock+0x135/0xc80 [ 215.805524][ T8410] bd_finish_claiming+0x229/0x3f0 [ 215.811074][ T8410] blkdev_get_by_dev+0x469/0x610 [ 215.816564][ T8410] bdev_open_by_dev+0x77/0x100 [ 215.821892][ T8410] setup_bdev_super+0x59/0x660 [ 215.827215][ T8410] mount_bdev+0x1ce/0x2c0 [ 215.832092][ T8410] legacy_get_tree+0xea/0x180 [ 215.837321][ T8410] vfs_get_tree+0x8c/0x280 [ 215.842276][ T8410] do_new_mount+0x24a/0xa40 [ 215.847323][ T8410] init_mount+0xde/0x130 [ 215.852114][ T8410] do_mount_root+0x97/0x230 [ 215.857160][ T8410] mount_root_generic+0x1a6/0x3e0 [ 215.862734][ T8410] prepare_namespace+0xc2/0x100 [ 215.868133][ T8410] kernel_init_freeable+0x41a/0x560 [ 215.873921][ T8410] kernel_init+0x1d/0x1c0 [ 215.878801][ T8410] ret_from_fork+0x48/0x80 [ 215.883781][ T8410] ret_from_fork_asm+0x11/0x20 [ 215.889105][ T8410] [ 215.889105][ T8410] -> #3 (bdev_lock){+.+.}-{3:3}: [ 215.896442][ T8410] __mutex_lock+0x135/0xc80 [ 215.901486][ T8410] bd_prepare_to_claim+0x1d9/0x4a0 [ 215.907139][ T8410] truncate_bdev_range+0x4e/0x260 [ 215.912728][ T8410] blkdev_fallocate+0x50d/0x6a0 [ 215.918134][ T8410] vfs_fallocate+0x585/0x6f0 [ 215.923288][ T8410] __x64_sys_fallocate+0xc1/0x110 [ 215.928858][ T8410] do_syscall_64+0x55/0xb0 [ 215.933832][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.940271][ T8410] [ 215.940271][ T8410] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 215.948634][ T8410] down_write+0x97/0x200 [ 215.953439][ T8410] set_blocksize+0x247/0x4b0 [ 215.958567][ T8410] sb_min_blocksize+0xbe/0x190 [ 215.963876][ T8410] ext4_fill_super+0x6e7/0x6870 [ 215.969279][ T8410] get_tree_bdev+0x3e5/0x520 [ 215.974410][ T8410] vfs_get_tree+0x8c/0x280 [ 215.979365][ T8410] do_new_mount+0x24a/0xa40 [ 215.984425][ T8410] init_mount+0xde/0x130 [ 215.989208][ T8410] do_mount_root+0x97/0x230 [ 215.994251][ T8410] mount_root_generic+0x1a6/0x3e0 [ 215.999814][ T8410] prepare_namespace+0xc2/0x100 [ 216.005209][ T8410] kernel_init_freeable+0x41a/0x560 [ 216.010948][ T8410] kernel_init+0x1d/0x1c0 [ 216.015854][ T8410] ret_from_fork+0x48/0x80 [ 216.020818][ T8410] ret_from_fork_asm+0x11/0x20 [ 216.026123][ T8410] [ 216.026123][ T8410] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 216.034801][ T8410] down_write+0x97/0x200 [ 216.039584][ T8410] set_blocksize+0x1ff/0x4b0 [ 216.044727][ T8410] sb_min_blocksize+0xbe/0x190 [ 216.050031][ T8410] ext4_fill_super+0x6e7/0x6870 [ 216.055442][ T8410] get_tree_bdev+0x3e5/0x520 [ 216.060577][ T8410] vfs_get_tree+0x8c/0x280 [ 216.065542][ T8410] do_new_mount+0x24a/0xa40 [ 216.070589][ T8410] init_mount+0xde/0x130 [ 216.075373][ T8410] do_mount_root+0x97/0x230 [ 216.080421][ T8410] mount_root_generic+0x1a6/0x3e0 [ 216.085984][ T8410] prepare_namespace+0xc2/0x100 [ 216.091378][ T8410] kernel_init_freeable+0x41a/0x560 [ 216.097121][ T8410] kernel_init+0x1d/0x1c0 [ 216.101995][ T8410] ret_from_fork+0x48/0x80 [ 216.106963][ T8410] ret_from_fork_asm+0x11/0x20 [ 216.112277][ T8410] [ 216.112277][ T8410] -> #0 (&type->s_umount_key#32){++++}-{3:3}: [ 216.120578][ T8410] __lock_acquire+0x37ef/0x7d80 [ 216.125970][ T8410] lock_acquire+0x19e/0x420 [ 216.131006][ T8410] down_read+0x46/0x2e0 [ 216.135701][ T8410] super_lock+0x189/0x390 [ 216.140566][ T8410] fs_bdev_sync+0xa4/0x170 [ 216.145519][ T8410] blkdev_common_ioctl+0x8a9/0x2580 [ 216.151288][ T8410] blkdev_ioctl+0x512/0x730 [ 216.156332][ T8410] __se_sys_ioctl+0xfd/0x170 [ 216.161468][ T8410] do_syscall_64+0x55/0xb0 [ 216.166439][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.172896][ T8410] [ 216.172896][ T8410] other info that might help us debug this: [ 216.172896][ T8410] [ 216.183132][ T8410] Chain exists of: [ 216.183132][ T8410] &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock [ 216.183132][ T8410] [ 216.196824][ T8410] Possible unsafe locking scenario: [ 216.196824][ T8410] [ 216.204307][ T8410] CPU0 CPU1 [ 216.209687][ T8410] ---- ---- [ 216.215067][ T8410] lock(&bdev->bd_holder_lock); [ 216.220034][ T8410] lock(bdev_lock); [ 216.226471][ T8410] lock(&bdev->bd_holder_lock); [ 216.233960][ T8410] rlock(&type->s_umount_key#32); [ 216.239095][ T8410] [ 216.239095][ T8410] *** DEADLOCK *** [ 216.239095][ T8410] [ 216.247257][ T8410] 1 lock held by syz.0.870/8410: [ 216.252220][ T8410] #0: ffff88802023eac8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580 [ 216.262898][ T8410] [ 216.262898][ T8410] stack backtrace: [ 216.268798][ T8410] CPU: 0 PID: 8410 Comm: syz.0.870 Not tainted syzkaller #0 [ 216.276114][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.286222][ T8410] Call Trace: [ 216.289535][ T8410] [ 216.292490][ T8410] dump_stack_lvl+0x18c/0x250 [ 216.297290][ T8410] ? load_image+0x420/0x420 [ 216.301841][ T8410] ? show_regs_print_info+0x20/0x20 [ 216.307068][ T8410] ? print_circular_bug+0x12b/0x1a0 [ 216.312311][ T8410] check_noncircular+0x2fc/0x400 [ 216.317301][ T8410] ? print_deadlock_bug+0x5d0/0x5d0 [ 216.322532][ T8410] ? lockdep_lock+0xf5/0x230 [ 216.327139][ T8410] ? _find_first_zero_bit+0xd6/0x100 [ 216.332451][ T8410] __lock_acquire+0x37ef/0x7d80 [ 216.337370][ T8410] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.343466][ T8410] ? arch_stack_walk+0x160/0x190 [ 216.348428][ T8410] ? verify_lock_unused+0x140/0x140 [ 216.355938][ T8410] ? verify_lock_unused+0x140/0x140 [ 216.361173][ T8410] ? stack_trace_save+0xaa/0x100 [ 216.366146][ T8410] ? stack_trace_snprint+0xf0/0xf0 [ 216.371308][ T8410] ? __stack_depot_save+0x1f/0x660 [ 216.376467][ T8410] ? do_syscall_64+0x55/0xb0 [ 216.381105][ T8410] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.387216][ T8410] lock_acquire+0x19e/0x420 [ 216.391754][ T8410] ? super_lock+0x189/0x390 [ 216.396307][ T8410] ? __might_sleep+0xe0/0xe0 [ 216.400930][ T8410] ? read_lock_is_recursive+0x20/0x20 [ 216.406328][ T8410] ? __mutex_trylock_common+0x160/0x270 [ 216.411904][ T8410] ? trace_raw_output_contention_end+0xd0/0xd0 [ 216.418084][ T8410] down_read+0x46/0x2e0 [ 216.422347][ T8410] ? super_lock+0x189/0x390 [ 216.426875][ T8410] super_lock+0x189/0x390 [ 216.431227][ T8410] ? end_current_label_crit_section+0x170/0x170 [ 216.437495][ T8410] ? user_get_super+0x180/0x180 [ 216.442369][ T8410] ? mutex_lock_nested+0x20/0x20 [ 216.447332][ T8410] fs_bdev_sync+0xa4/0x170 [ 216.451785][ T8410] ? fs_bdev_mark_dead+0x1f0/0x1f0 [ 216.456923][ T8410] blkdev_common_ioctl+0x8a9/0x2580 [ 216.462152][ T8410] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 216.467812][ T8410] ? blkdev_bszset+0x1f0/0x1f0 [ 216.472611][ T8410] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.478120][ T8410] blkdev_ioctl+0x512/0x730 [ 216.482654][ T8410] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 216.488144][ T8410] ? bpf_lsm_file_ioctl+0x9/0x10 [ 216.493104][ T8410] ? security_file_ioctl+0x80/0xa0 [ 216.498246][ T8410] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 216.503754][ T8410] __se_sys_ioctl+0xfd/0x170 [ 216.508368][ T8410] do_syscall_64+0x55/0xb0 [ 216.512815][ T8410] ? clear_bhb_loop+0x40/0x90 [ 216.517526][ T8410] ? clear_bhb_loop+0x40/0x90 [ 216.522267][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.528186][ T8410] RIP: 0033:0x7f52aff9e159 [ 216.532643][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.552359][ T8410] RSP: 002b:00007f52ae1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.560804][ T8410] RAX: ffffffffffffffda RBX: 00007f52b0225fa0 RCX: 00007f52aff9e159 [ 216.568819][ T8410] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004 [ 216.576808][ T8410] RBP: 00007f52b003506b R08: 0000000000000000 R09: 0000000000000000 [ 216.584798][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.592789][ T8410] R13: 00007f52b0226038 R14: 00007f52b0225fa0 R15: 00007fff5543b338 [ 216.600811][ T8410] [ 216.642489][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 216.651878][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.660220][ T9] usb 2-1: Product: syz [ 216.664516][ T9] usb 2-1: Manufacturer: syz [ 216.669454][ T9] usb 2-1: SerialNumber: syz [ 216.738625][ T5793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.749024][ T5793] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.759401][ T5793] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 216.769645][ T5793] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.792597][ T5793] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 216.802207][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.810942][ T5793] usb 4-1: Product: syz [ 216.815308][ T5793] usb 4-1: Manufacturer: syz [ 216.819974][ T5793] usb 4-1: SerialNumber: syz [ 216.832124][ T5793] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 216.843991][ T5793] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 216.856585][ T5793] usbserial_generic 4-1:1.0: generic converter detected [ 216.867318][ T5793] usb 4-1: generic converter now attached to ttyUSB0 [ 216.885166][ T9] usb 2-1: USB disconnect, device number 12 [ 217.038560][ T5793] usb 4-1: USB disconnect, device number 12 [ 217.047942][ T5793] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 217.057211][ T5793] usbserial_generic 4-1:1.0: device disconnected