last executing test programs: 11.417789141s ago: executing program 3 (id=896): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 9.759123414s ago: executing program 0 (id=904): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000005c0)='ns\x00') mkdirat(0xffffff9c, &(0x7f0000009e40)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000009e80)='./proc\x00', &(0x7f0000009ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000009f00)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r0, &(0x7f0000009f40)=0x1, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009fc0)={0x0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 9.588409036s ago: executing program 0 (id=907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000005c0)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) 8.725557436s ago: executing program 2 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000a00), 0x56) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000a80)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000b40)="27030200dc0f14000e0003000024c1020000ff0607c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 8.362921194s ago: executing program 3 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000040)) io_setup(0x3fd, &(0x7f0000000500)) 8.056977407s ago: executing program 0 (id=915): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='3', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c) shutdown(r1, 0x2) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b0102010724090904000000010120000924010600031b001a06240b01016e0c2403060204290177977c7e09040100000102200009040101010102200010240107ff030200000002ff010000dd09050109ff0304037f082501800cf70a000904020000010120"], 0x0) 7.728434468s ago: executing program 2 (id=916): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x4804497, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0], 0x68, 0xc54, &(0x7f0000000ec0)="$eJzs3V9oXOl9N/DfMyOtRtq8G2028SZvs9uBlMQotfG/2AouQY4VtQHHGyIrdK+ikSU7w8ojI8mNN22D2pIWehO6N6U3RTRZWshFr7q9jNJsIaEUSshFclEQNFn2ohe6CJS2bFTOmWekkSzbs+uVJXs/HzP+njnzO6PnOc/ozBnQMycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjPfu7CiZPpoFsBADxMlye/dOK0938AeE+54vM/AAAAAAAAAAAAAAAcdimqcSRSDL22kabL+221S83WrdtT4xN7bzaYIkUlqmV9caudPHX6zKfOnhvt5L23f7d9JF6YvHKhfvFnx28uzi0tzc3Wp1rNqwuzcz0/Q3v7hRvvdPvdRsodUL/x0q3Za9eW6qeOn97x8O3hNwaePDJ8/tyxs6Od2qnxiYnJrpq+/nf80+9wtxkeT0Q1GpHireE3UyMiKvHg++I+r539Nlh2YqTsxNT4RNmR+WajtVw8mCq5qhJR79porLOPHsJYPJCxiJWi+UWDR4ruTd5sLDZm5ufqX2wsLjeXmwutVGm3tuhPPSoxmiJWI2J94M6n649qPB8pXjmxkWYiotrZD58sJwbfvz2VfehjD4p21vsjViuPwJgdYgNRjcuR4pevH42rxT7Lt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQX1fjXSLGQNtJseTzoHFcufbn++da1ha7a8rjS9xi8PzxMh/zYVItqzJRH/I30zk92AAAAAAAAAAAAAAAAAHi3DUY1vh0p/uS53yvnFUc5L/3950ff9+Jvd88Zf/Y+z1PUHo+IlUpvc3L789ThVCn+7UPH6EktqvGNPP/vjw66MQAAAAAAAAAAAAAAAAAAAO9p1XgxUnzl2NG0Gt3XFG+2rtevNGbm21eF7VxTvHPN9M3Nzc16audYzumcKzlXc67lXM8Zlbx9zrGc0zlXcq7mXMu5njOqefucYzmnc67kXM25lnM9Z/Tl7XOO5ZzOuZJzNedazvWccUiu3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DipRDV+FSm+9bWNFCkixiKmo51rAwfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgUEvVOB4p1l6slfdXKxFXIuJXm5ub5e2/Nzc3IzaK5Qd10H0FAAAAAAAAAAAAAAAAAACAQytV42OR4pn/2Uj1iLg9/MbAk0eGz587dna0GtVIRUl3/QuTVy7ULy7cuLk4t7Q0N1ufuvidt/PjapearVu3p8Yn3vWO9GTwzva3mlcXZud6fYL7tH+wdnHh5suLzetfXd7z8aHahZml5cXG1b0fjsGoREx3rxkpGzw1PlE2er7ZaJWbpspdGliJGOu1MwAAAAAAAAAAAAAAAAAAABwaQ6kan4sUP//3M6kzb7yvPef//7XvVbdqX/2D7e8CmN+VHd3fH9DLcuq1oSPlxPv61PjExGTX6r7+O0uLNqVUjWcjxSde+XA5Hz7F0J5z44u6p4q6G2dy3fCvFXUrO6pqI1PjE/XLC61jF+bnF642lhsz83eZgP9Urx0CAAAAAAAAAAAAAAAAAACAbUOpGj+JFP/5d/+WOtedz/P/+9r3uub//1Y5hb5USztzSzm3/6lybn97+f3nR4eef+5u6/dj/n/RppSq8c3tryvYmv8/vau2qPuzSPHmcx8tH0tReaKoa3S6037Ga835uRNF7V9Hil9/q1MbZe31XPvMdu3JonYwUvzlxs7ar+baD27Xnipqj0aKH/zH3rUf2q49XdT+PFL849/WO7VDRe3v59oj27XHry7Mz95vtxbj/91I8Z3Lv5M6fb7r+Hd9/8PKrtxyx5jfe7n38e+0Y+/xH+5at5LH9U8jxemffLgcy3uN/9lI8d3aR3Nde9/P5MefLv/fHv9PRIqf/cvO2mu59gPbtSd77dZBK8b/25Hi+3/1060+5/HPe3Z7hLrH///37cytV8m+jf+9f/+f7lo3nNt19W3ui/eipZe//lJjfn5u8YEXas9HvBvP0+tC8TLd95+VvwMnHmK/LFg4DAv3O3J8b3D/j07st+L9/88jxf8eqabOeUx+/39f+972+d9/fWP7/f/8rtxyQO//H+hadz6ftfT3RdSWb9zsfzaitvTy1481bzSuz12fa506eeLTnz578sTJs/1PdE7utpd63nePg2L8fxQpfvz3P976HLPz/G/v8/+hXbnlgMb/me4+7Tiv6XlXvCcV4/83keLpz/506/Pmvc7/O5//j35sZ279/h3Q+H+wa91wblfzbe4LAAAAAAAAAACAR8lQqsZfRIrf/ePfTJ05RL38/d/srtxyQH//daRr3Wxv8xoiPeCfSfe8kwEADpHi/O9DkeJ7mz/cmsu98/wvfqNT233+dzeH4fr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwqEtRjT+MFEOvbaS1geJ+W+1Ss3Xr9tT4xN6bDaZIUYlqWV/caidPnT7zqbPnRjt5aeBhduMj8cLklQv1iws3bi7OLS3NzdanWs2rC7NzPT/Dg26/20i5A+s3Xro1e+3aUv3U8dM7Hr49/MbAk0eGz587dna0Uzs1PjEx2VXT1/+Of/od0l3WPxHV+GGkeGv4zfT9gYhKPPi+uM9rZ78Nlp0YKTsxNT5RdmS+2WgtFw+mSq6qRNS7Nhrr7KOHMBYPZCxipWh+0eCRonuTNxuLjZn5ufoXG4vLzeXmQitV2q0t+lOPSoymiNWIWN/jV7I/qvHNSPHKiY30TwMR1c5++OTlyS+dOH3/9lT2oY89KNpZ749YrTwCY3aIDUQ1/iFS/PL1o/GDgYi+aN/i4xFfKPK1iFeL/ExEKl4YZyJ+8VAP7eynvqjGmUixkDbS6wPF8aBzXLn05frnW9cWumo7x5VH/v3hYTrkx6ZaVONH5RF/I/3z7t/roQNqFAAAAAAAAAAAAAAAAADlTNrVSPGVY0dTOT94a05xs3W9fqUxM9+e1teZ+9eZM725ublZT+0cyzmdcyXnas61nOs5o5K3zzmWczrnSs7VnGs513NGNW+fcyzndM6VnKtlDmy1eD2vj768fc6xnNM5V3Ku5lzLuZ4zDsncPQAAAAAAAAAAAAAAAAAA4PFSiWp5FfdvfW0jlVOlxyKmo51rrvP72Pu/AAAA//8L9F/b") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x1) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000340)={0x0, 0x0, 0x0, r5}) setns(0xc9, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000e00)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000001b80)={0x2, 0x0, @remote}, 0x10) 6.868584708s ago: executing program 0 (id=918): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000001b40)="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", 0x559, r0) 6.863426587s ago: executing program 1 (id=919): r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) 6.781446828s ago: executing program 1 (id=920): openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x1ff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e1020000", @ANYRES16, @ANYBLOB="000229bd7000fedbdf25280000000c009900800000006e000000060036000000000017022a007606074336000400828e43098006000000ffffffffffff0800000008021100000004000000bc0c00000a"], 0x2fc}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 6.58038447s ago: executing program 1 (id=921): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r4}, 0x50) close(r4) r5 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r5, 0x251}], 0x1, 0xdb3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r0, &(0x7f00000001c0)='\x00', 0x4000, &(0x7f0000000200)={@_ha_fsid={[0x6, 0x101]}, {0x6, 0x25, 0x7f, 0xff}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}, 0x4, &(0x7f0000000600)=[{0x2, 0xfffffffc, &(0x7f00000002c0)=']\x00', &(0x7f0000000300)="022e80b0", 0x4, 0x2}, {0x2, 0xfe6, &(0x7f0000000340)='\x00', &(0x7f0000000380), 0x0, 0x2}, {0x3, 0x9, &(0x7f0000000440)='\x00', &(0x7f00000004c0)="48f40b219232e072190765ecac4fbd6bd8050fa5b41303ec7436a2348123c42de04f33b8e4d3687a358cc7fbf2563ccda4fd9cafcce10280b5b1a77ec8d2dfb52a0aed7968b1fcd2166074bc2c4ff7428d0465fbf41b76cf973a47daf43720b120e9c8558504537abcc45da1786591791946", 0x72, 0x22}, {0x3, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x28}]}) 6.399916314s ago: executing program 0 (id=922): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 5.603217365s ago: executing program 1 (id=923): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.463768292s ago: executing program 1 (id=924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.411820272s ago: executing program 1 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000005c0)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) 1.3212047s ago: executing program 2 (id=927): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffc04, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x27800000500, 0x0, 0x4, r2, 0x4}) 1.320190188s ago: executing program 3 (id=928): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 1.319584738s ago: executing program 0 (id=929): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.316770158s ago: executing program 2 (id=931): openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x1ff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e1020000", @ANYRES16, @ANYBLOB="000229bd7000fedbdf25280000000c009900800000006e000000060036000000000017022a007606074336000400828e43098006000000ffffffffffff0800000008021100000004000000bc0c00000a"], 0x2fc}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1.316023704s ago: executing program 4 (id=932): socket$netlink(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x0, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$setsig(0x4203, r0, 0x9e, &(0x7f0000000180)={0x33, 0x5, 0x20f4dcb1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x200008, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000380)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x6042, 0x101) syz_fuse_handle_req(r6, &(0x7f0000003180)="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", 0x2000, &(0x7f0000005180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendfile(r6, r5, 0x0, 0xe3aa6ea) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 1.315705001s ago: executing program 2 (id=933): prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000042c0)='ext4\x00', &(0x7f0000004300)='./file1\x00', 0x841e, &(0x7f0000004340)={[{@dioread_lock}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000004380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000047c0)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000004800)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004840)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x2000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000006980)='ext4\x00', &(0x7f00000069c0)='./file1\x00', 0x0, &(0x7f0000006a00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdd}}, {@nojournal_checksum}, {@acl}, {@errors_remount}]}, 0x1, 0x4d4, &(0x7f0000006a80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000006f80)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000006fc0)='./file1\x00', 0x800, 0x800, &(0x7f0000000040)) 1.314844156s ago: executing program 3 (id=934): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.300681356s ago: executing program 4 (id=935): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="060000000300110000", 0x9) 1.30006998s ago: executing program 4 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 1.290995312s ago: executing program 2 (id=937): syz_mount_image$udf(&(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001780), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 1.290705688s ago: executing program 3 (id=938): pipe2$9p(&(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='./dev/kmsg\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.290592952s ago: executing program 4 (id=939): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000004000000000000", 0x58}], 0x1) 1.131677318s ago: executing program 4 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000040)) io_setup(0x3fd, &(0x7f0000000500)) 1.095224337s ago: executing program 3 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000a00), 0x56) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000a80)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000b40)="27030200dc0f14000e0003000024c1020000ff0607c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 4 (id=942): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708000b0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1}, 0x400a040) r0 = socket(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): igured BSSID 50:50:50:50:50:50 [ 90.053478][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.195075][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.195097][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.293968][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.294651][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.294801][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295090][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295240][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295388][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295611][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295829][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.423642][ T3359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.423673][ T3359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.511445][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.511469][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.636941][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.636962][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.717382][ T5830] process 'syz.2.10' launched '/dev/fd/5' with NULL argv: empty string added [ 90.795743][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.795766][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.260225][ T5845] jffs2: notice: (5845) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.281683][ T5724] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.431942][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 91.435111][ T5724] usb 3-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 91.439184][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 91.439218][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.439247][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.439275][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.520765][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.520798][ T5724] usb 3-1: Product: syz [ 91.520814][ T5724] usb 3-1: Manufacturer: syz [ 91.520830][ T5724] usb 3-1: SerialNumber: syz [ 91.560669][ T5724] usb 3-1: config 0 descriptor?? [ 91.572920][ T5841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.594852][ T5724] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 91.639729][ T5859] netlink: 'syz.1.15': attribute type 2 has an invalid length. [ 91.758958][ T5863] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 91.795792][ T5863] team0: Port device dummy0 added [ 91.816079][ T5864] FAULT_INJECTION: forcing a failure. [ 91.816079][ T5864] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.816136][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 91.816168][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.816191][ T5864] Call Trace: [ 91.816201][ T5864] [ 91.816210][ T5864] dump_stack_lvl+0xe8/0x150 [ 91.816242][ T5864] should_fail_ex+0x3eb/0x540 [ 91.816271][ T5864] prepare_alloc_pages+0x21e/0x5f0 [ 91.816302][ T5864] __alloc_frozen_pages_noprof+0x17a/0x400 [ 91.816330][ T5864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 91.816363][ T5864] ? policy_nodemask+0x2cc/0x8e0 [ 91.816385][ T5864] ? aa_file_perm+0x18b/0x15f0 [ 91.816410][ T5864] alloc_pages_mpol+0x21e/0x390 [ 91.816439][ T5864] alloc_pages_noprof+0xb1/0x2b0 [ 91.816464][ T5864] anon_pipe_write+0x21b/0x1a90 [ 91.816496][ T5864] ? __pfx___futex_wait+0x10/0x10 [ 91.816523][ T5864] ? __pfx_aa_file_perm+0x10/0x10 [ 91.816551][ T5864] ? try_to_wake_up+0x8ce/0x14e0 [ 91.816578][ T5864] ? __pfx_anon_pipe_write+0x10/0x10 [ 91.816609][ T5864] ? apparmor_file_permission+0x1fb/0x2b0 [ 91.816636][ T5864] ? bpf_lsm_file_permission+0x9/0x20 [ 91.816657][ T5864] ? security_file_permission+0x75/0x260 [ 91.816689][ T5864] vfs_write+0x612/0xba0 [ 91.816720][ T5864] ? __pfx_vfs_write+0x10/0x10 [ 91.816745][ T5864] ? __fget_files+0x3a2/0x420 [ 91.816766][ T5864] ? __fget_files+0x2a/0x420 [ 91.816792][ T5864] ? fdget+0x1ac/0x250 [ 91.816820][ T5864] ksys_write+0x150/0x270 [ 91.816844][ T5864] ? __pfx_ksys_write+0x10/0x10 [ 91.816879][ T5864] do_syscall_64+0x166/0x520 [ 91.816901][ T5864] ? trace_irq_disable+0x3b/0x140 [ 91.816921][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.816945][ T5864] ? clear_bhb_loop+0x70/0xc0 [ 91.816970][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.816993][ T5864] RIP: 0033:0x7f52f439e1d9 [ 91.817021][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.817040][ T5864] RSP: 002b:00007f52f524a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.817069][ T5864] RAX: ffffffffffffffda RBX: 00007f52f4625fa0 RCX: 00007f52f439e1d9 [ 91.817086][ T5864] RDX: 0000000000000100 RSI: 00002000000004c0 RDI: 0000000000000004 [ 91.817106][ T5864] RBP: 00007f52f4435888 R08: 0000000000000000 R09: 0000000000000000 [ 91.817120][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.817134][ T5864] R13: 00007f52f4626038 R14: 00007f52f4625fa0 R15: 00007ffe7a3d7548 [ 91.817171][ T5864] [ 92.053435][ T5863] Zero length message leads to an empty skb [ 92.114605][ T9] cfg80211: failed to load regulatory.db [ 92.156708][ T5863] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 92.195775][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 92.195828][ T5724] usb 3-1: USB disconnect, device number 2 [ 92.279272][ T5863] team0: Port device dummy0 removed [ 92.459187][ T5871] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.481468][ T193] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.633865][ T193] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 92.634804][ T193] usb 4-1: config 0 has no interfaces? [ 92.635877][ T193] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 92.635901][ T193] usb 4-1: Manufacturer: syz [ 92.639038][ T193] usb 4-1: config 0 descriptor?? [ 92.867287][ T5725] usb 4-1: USB disconnect, device number 2 [ 93.073984][ T32] audit: type=1804 audit(1791622936.896:2): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.24" name="bus" dev="ramfs" ino=9375 res=1 errno=0 [ 93.074032][ T32] audit: type=1804 audit(1791622936.906:3): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.24" name="bus" dev="ramfs" ino=9375 res=1 errno=0 [ 94.603170][ T32] audit: type=1804 audit(1791622938.426:4): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.35" name="/newroot/11/file1" dev="tmpfs" ino=77 res=1 errno=0 [ 94.623506][ T32] audit: type=1800 audit(1791622938.436:5): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.35" name="file1" dev="tmpfs" ino=77 res=0 errno=-22 [ 95.343553][ T5932] loop4: detected capacity change from 0 to 1024 [ 96.368203][ T5932] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 96.368586][ T5932] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 96.368612][ T5932] EXT4-fs error (device loop4): ext4_acquire_dquot:7111: comm syz.4.43: Failed to acquire dquot type 0 [ 96.368765][ T5932] loop4: lost filesystem error report for type 5 error -117 [ 96.371592][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 96.371616][ C1] EXT4-fs (loop4): initial error at time 1791622940: ext4_acquire_dquot:7111 [ 96.371633][ C1] EXT4-fs (loop4): last error at time 1791622940: ext4_acquire_dquot:7111 [ 96.373337][ T5932] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 96.418808][ T5932] EXT4-fs (loop4): 1 truncate cleaned up [ 96.420546][ T5932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.819377][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.126429][ T5961] Bluetooth: MGMT ver 1.23 [ 97.308287][ T5971] batman_adv: batadv0: Adding interface: syzkaller0 [ 97.308313][ T5971] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.308347][ T5971] batman_adv: batadv0: Interface activated: syzkaller0 [ 97.362197][ T5969] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 97.384923][ T5969] batman_adv: batadv0: Removing interface: syzkaller0 [ 97.477433][ T5977] loop2: detected capacity change from 0 to 1024 [ 98.118828][ T5977] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 98.118886][ T5977] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 98.118907][ T5977] EXT4-fs error (device loop2): ext4_acquire_dquot:7111: comm syz.2.60: Failed to acquire dquot type 0 [ 98.118931][ T5977] loop2: lost filesystem error report for type 5 error -117 [ 98.121781][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 98.121844][ C1] EXT4-fs (loop2): initial error at time 1791622941: ext4_acquire_dquot:7111 [ 98.121916][ C1] EXT4-fs (loop2): last error at time 1791622941: ext4_acquire_dquot:7111 [ 98.190929][ T5977] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 98.206882][ T5977] EXT4-fs (loop2): 1 truncate cleaned up [ 98.213019][ T5977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.543032][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.724596][ T6000] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 98.773140][ T6000] team0: Port device dummy0 added [ 98.881503][ T6008] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 98.950972][ T6008] team0: Port device dummy0 removed [ 98.977864][ T6000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.108866][ T32] audit: type=1326 audit(1791622942.936:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.0.74" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f439e1d9 code=0x7fc00000 [ 99.163870][ T54] Bluetooth: hci0: command 0x0c13 tx timeout [ 99.164431][ T5614] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 99.188248][ T6020] loop0: detected capacity change from 0 to 4096 [ 99.255649][ T6020] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 99.256723][ T6020] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 99.256748][ T6020] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 99.256762][ T6020] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 99.256925][ T6020] loop0: [ 99.460826][ T6027] syzkaller0: entered promiscuous mode [ 99.460852][ T6027] syzkaller0: entered allmulticast mode [ 99.764421][ T32] audit: type=1326 audit(1791622943.596:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.0.74" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52f439e1d9 code=0x7fc00000 [ 100.440382][ T6057] loop0: detected capacity change from 0 to 4096 [ 100.483989][ T6057] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 100.494318][ T6057] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 100.494344][ T6057] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 100.494359][ T6057] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 100.494429][ T6057] loop0: [ 100.869598][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 102.037365][ T6090] loop0: detected capacity change from 0 to 4096 [ 102.070784][ T6090] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 102.071271][ T6090] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 102.071293][ T6090] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 102.071306][ T6090] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 102.071895][ T6090] loop0: [ 102.909340][ T6103] bridge0: port 3(syz_tun) entered blocking state [ 102.910493][ T6103] bridge0: port 3(syz_tun) entered disabled state [ 102.912248][ T6103] syz_tun: entered allmulticast mode [ 102.935330][ T6103] syz_tun: entered promiscuous mode [ 102.937354][ T6103] bridge0: port 3(syz_tun) entered blocking state [ 102.937844][ T6103] bridge0: port 3(syz_tun) entered forwarding state [ 102.964890][ T6103] netlink: 80 bytes leftover after parsing attributes in process `syz.4.108'. [ 102.966939][ T6103] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 102.999962][ T6105] syz.2.109 uses obsolete (PF_INET,SOCK_PACKET) [ 103.173076][ T6114] batman_adv: batadv0: Adding interface: syzkaller0 [ 103.173095][ T6114] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.173133][ T6114] batman_adv: batadv0: Interface activated: syzkaller0 [ 103.665825][ T6113] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 103.688095][ T6113] batman_adv: batadv0: Removing interface: syzkaller0 [ 105.422469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.638093][ T6149] loop0: detected capacity change from 0 to 3904 [ 105.679918][ T6147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.694664][ T6149] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 105.694692][ T6149] ldm_validate_privheads(): Disk read failed. [ 105.695335][ T6149] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 105.695357][ T6149] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 105.695372][ T6149] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 105.695388][ T6149] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 105.695402][ T6149] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 105.695451][ T6149] loop0: [ 105.695471][ T6149] loop0: partition table partially beyond EOD, truncated [ 106.079315][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 106.079347][ T4982] ldm_validate_privheads(): Disk read failed. [ 106.082064][ T4982] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 106.082115][ T4982] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 106.082146][ T4982] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 106.082185][ T4982] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 106.082204][ T4982] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 106.082864][ T4982] loop0: [ 106.082920][ T4982] loop0: partition table partially beyond EOD, truncated [ 106.966898][ T6188] loop0: detected capacity change from 0 to 4096 [ 107.007348][ T6188] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 107.008440][ T6188] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 107.008464][ T6188] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 107.008479][ T6188] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 107.008540][ T6188] loop0: [ 107.056165][ T6186] syzkaller0: entered promiscuous mode [ 107.056190][ T6186] syzkaller0: entered allmulticast mode [ 107.173118][ T5725] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.315758][ T6196] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 107.315784][ T6196] netlink: 17 bytes leftover after parsing attributes in process `syz.2.146'. [ 107.334887][ T5725] usb 5-1: Using ep0 maxpacket: 16 [ 107.354747][ T5725] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 107.371990][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.372025][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.372049][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.372092][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.433148][ T5725] usb 5-1: config 0 descriptor?? [ 107.873851][ C0] Unknown status report in ack skb [ 107.931268][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input6 [ 107.977584][ T6213] loop3: detected capacity change from 0 to 2048 [ 108.117425][ T5725] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 108.118139][ T6213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.151950][ T6218] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 108.187352][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 108.189167][ T5725] usb 5-1: USB disconnect, device number 2 [ 108.194492][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 108.194555][ T4982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 108.194583][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 108.194781][ T4982] loop0: [ 108.643891][ T6223] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 108.977222][ T6230] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 109.096827][ T6228] md/raid10:md0: not clean -- starting background reconstruction [ 109.096848][ T6228] md/raid10:md0: active with 1 out of 2 devices [ 109.118079][ T6228] md0: detected capacity change from 0 to 2048 [ 109.158649][ T6231] md_update_sb: can't update sb for read-only array md0 [ 109.515017][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.676310][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 110.193523][ T6223] team0: Port device dummy0 added [ 110.197675][ T6230] team0: Port device dummy0 removed [ 110.762019][ T6268] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 110.853582][ T6268] md: couldn't update array info. -22 [ 110.853657][ T6231] md_update_sb: can't update sb for read-only array md0 [ 110.891677][ T6268] md: could not open device unknown-block(1,1). [ 110.891754][ T6268] md: md_import_device returned -16 [ 110.891805][ T6231] md_update_sb: can't update sb for read-only array md0 [ 110.900112][ T6231] md_update_sb: can't update sb for read-only array md0 [ 110.902519][ T6268] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 110.979233][ T6267] syzkaller0: entered promiscuous mode [ 110.979260][ T6267] syzkaller0: entered allmulticast mode [ 111.446442][ T5614] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 111.446481][ T5614] Bluetooth: Wrong link type (-22) [ 111.676891][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.882538][ T6313] loop3: detected capacity change from 0 to 1024 [ 111.919941][ T6313] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 111.920010][ T6313] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 111.920031][ T6313] EXT4-fs error (device loop3): ext4_acquire_dquot:7111: comm syz.3.189: Failed to acquire dquot type 0 [ 111.920056][ T6313] loop3: lost filesystem error report for type 5 error -117 [ 111.921411][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 111.921434][ C1] EXT4-fs (loop3): initial error at time 1791622955: ext4_acquire_dquot:7111 [ 111.921460][ C1] EXT4-fs (loop3): last error at time 1791622955: ext4_acquire_dquot:7111 [ 111.996744][ T6313] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 112.040307][ T6313] EXT4-fs (loop3): 1 truncate cleaned up [ 112.077425][ T6313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.347408][ T6320] netlink: 'syz.0.191': attribute type 21 has an invalid length. [ 112.641459][ T1634] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 112.751102][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.845072][ T1634] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.845128][ T1634] usb 1-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 112.846515][ T1634] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 112.846540][ T1634] usb 1-1: config 142 has no interface number 0 [ 112.846579][ T1634] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 112.846606][ T1634] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 112.846630][ T1634] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 112.846652][ T1634] usb 1-1: config 142 interface 251 has no altsetting 0 [ 112.863449][ T1634] usb 1-1: string descriptor 0 read error: -22 [ 112.863841][ T1634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.963826][ T6322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.963948][ T6322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.991083][ T1634] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 113.017521][ T1634] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 113.745813][ T6322] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 113.745845][ T6322] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 113.749884][ C1] usb 1-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 113.886710][ T6320] netlink: 156 bytes leftover after parsing attributes in process `syz.0.191'. [ 114.348817][ T6366] warning: `syz.2.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.509557][ T6371] FAULT_INJECTION: forcing a failure. [ 114.509557][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.509638][ T6371] CPU: 1 UID: 0 PID: 6371 Comm: syz.2.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.509670][ T6371] Tainted: [L]=SOFTLOCKUP [ 114.509678][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.509695][ T6371] Call Trace: [ 114.509704][ T6371] [ 114.509721][ T6371] dump_stack_lvl+0xe8/0x150 [ 114.509763][ T6371] should_fail_ex+0x3eb/0x540 [ 114.509792][ T6371] _copy_to_user+0x31/0xb0 [ 114.509816][ T6371] put_timespec64+0xc8/0x130 [ 114.509839][ T6371] ? __pfx_put_timespec64+0x10/0x10 [ 114.509872][ T6371] __x64_sys_clock_gettime+0x22a/0x290 [ 114.509900][ T6371] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 114.509940][ T6371] do_syscall_64+0x166/0x520 [ 114.509961][ T6371] ? trace_irq_disable+0x3b/0x140 [ 114.509981][ T6371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.510004][ T6371] ? clear_bhb_loop+0x70/0xc0 [ 114.510036][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.510059][ T6371] RIP: 0033:0x7fb6cc59e1d9 [ 114.510085][ T6371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.510104][ T6371] RSP: 002b:00007fb6cd469028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 114.510133][ T6371] RAX: ffffffffffffffda RBX: 00007fb6cc825fa0 RCX: 00007fb6cc59e1d9 [ 114.510150][ T6371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 114.510163][ T6371] RBP: 00007fb6cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 114.510177][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.510191][ T6371] R13: 00007fb6cc826038 R14: 00007fb6cc825fa0 R15: 00007fff50b65b68 [ 114.510226][ T6371] [ 114.752016][ T193] usb 1-1: USB disconnect, device number 2 [ 114.774652][ T193] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 114.775709][ T193] cypress_m8 1-1:142.251: device disconnected [ 114.950229][ T6385] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 115.091759][ T6375] syzkaller0: entered promiscuous mode [ 115.091787][ T6375] syzkaller0: entered allmulticast mode [ 115.459528][ T6408] FAULT_INJECTION: forcing a failure. [ 115.459528][ T6408] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.459568][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.459600][ T6408] Tainted: [L]=SOFTLOCKUP [ 115.459608][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.459622][ T6408] Call Trace: [ 115.459630][ T6408] [ 115.459640][ T6408] dump_stack_lvl+0xe8/0x150 [ 115.459686][ T6408] should_fail_ex+0x3eb/0x540 [ 115.459716][ T6408] get_futex_key+0x1b4/0x1580 [ 115.459753][ T6408] ? __pfx_get_futex_key+0x10/0x10 [ 115.459781][ T6408] ? lock_mm_and_find_vma+0x117/0x340 [ 115.459814][ T6408] futex_wake+0x119/0x5f0 [ 115.459839][ T6408] ? irqentry_exit+0x218/0x920 [ 115.459863][ T6408] ? __pfx_futex_wake+0x10/0x10 [ 115.459882][ T6408] ? irqentry_exit+0x218/0x920 [ 115.459920][ T6408] do_futex+0x458/0x4e0 [ 115.459956][ T6408] ? __pfx_do_futex+0x10/0x10 [ 115.459979][ T6408] ? put_timespec64+0xd8/0x130 [ 115.460008][ T6408] __se_sys_futex+0x3a8/0x450 [ 115.460035][ T6408] ? __x64_sys_clock_gettime+0x238/0x290 [ 115.460059][ T6408] ? __pfx___se_sys_futex+0x10/0x10 [ 115.460081][ T6408] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 115.460111][ T6408] ? __x64_sys_futex+0x21/0xf0 [ 115.460136][ T6408] do_syscall_64+0x166/0x520 [ 115.460156][ T6408] ? trace_irq_disable+0x3b/0x140 [ 115.460176][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.460199][ T6408] ? clear_bhb_loop+0x70/0xc0 [ 115.460224][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.460246][ T6408] RIP: 0033:0x7f21b379e1d9 [ 115.460267][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.460286][ T6408] RSP: 002b:00007f21b46580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.460310][ T6408] RAX: ffffffffffffffda RBX: 00007f21b3a25fa8 RCX: 00007f21b379e1d9 [ 115.460326][ T6408] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f21b3a25fac [ 115.460341][ T6408] RBP: 00007f21b3a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 115.460357][ T6408] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 115.460371][ T6408] R13: 00007f21b3a26038 R14: 00007ffd8123c4f0 R15: 00007ffd8123c5d8 [ 115.460407][ T6408] [ 115.940672][ T6418] loop0: detected capacity change from 0 to 2048 [ 116.005414][ T6418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.091556][ T6425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 116.899696][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.434665][ T5725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.582007][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 117.583357][ T5725] usb 1-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 117.588305][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 117.588340][ T5725] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.598503][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.598588][ T5725] usb 1-1: Product: syz [ 117.598640][ T5725] usb 1-1: Manufacturer: syz [ 117.598681][ T5725] usb 1-1: SerialNumber: syz [ 117.623393][ T5725] usb 1-1: config 0 descriptor?? [ 117.867943][ T6449] FAULT_INJECTION: forcing a failure. [ 117.867943][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.867979][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.1.237 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.868010][ T6449] Tainted: [L]=SOFTLOCKUP [ 117.868018][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.868032][ T6449] Call Trace: [ 117.868040][ T6449] [ 117.868050][ T6449] dump_stack_lvl+0xe8/0x150 [ 117.868080][ T6449] should_fail_ex+0x3eb/0x540 [ 117.868109][ T6449] _copy_to_user+0x31/0xb0 [ 117.868134][ T6449] put_timespec64+0xc8/0x130 [ 117.868156][ T6449] ? __pfx_put_timespec64+0x10/0x10 [ 117.868188][ T6449] __x64_sys_clock_gettime+0x22a/0x290 [ 117.868216][ T6449] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 117.868251][ T6449] do_syscall_64+0x166/0x520 [ 117.868272][ T6449] ? trace_irq_disable+0x3b/0x140 [ 117.868292][ T6449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.868314][ T6449] ? clear_bhb_loop+0x70/0xc0 [ 117.868353][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.868375][ T6449] RIP: 0033:0x7f21b379e1d9 [ 117.868395][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.868413][ T6449] RSP: 002b:00007f21b4658028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 117.868438][ T6449] RAX: ffffffffffffffda RBX: 00007f21b3a25fa0 RCX: 00007f21b379e1d9 [ 117.868454][ T6449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 117.868467][ T6449] RBP: 00007f21b3835888 R08: 0000000000000000 R09: 0000000000000000 [ 117.868480][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.868493][ T6449] R13: 00007f21b3a26038 R14: 00007f21b3a25fa0 R15: 00007ffd8123c5d8 [ 117.868527][ T6449] [ 118.065579][ T1634] usb 1-1: USB disconnect, device number 3 [ 118.448402][ T6461] syzkaller0: entered promiscuous mode [ 118.448429][ T6461] syzkaller0: entered allmulticast mode [ 118.733755][ T6480] loop0: detected capacity change from 0 to 4096 [ 118.769042][ T6480] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 118.769713][ T6480] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 118.769733][ T6480] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 118.769818][ T6480] loop0: [ 119.536958][ T6514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.681991][ T5816] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.748597][ T6519] loop0: detected capacity change from 0 to 4096 [ 119.777607][ T6519] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 119.778037][ T6519] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 119.778057][ T6519] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 119.778126][ T6519] loop0: [ 119.831575][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 119.833903][ T5816] usb 4-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 119.844987][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 119.845026][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.892438][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.892471][ T5816] usb 4-1: Product: syz [ 119.892490][ T5816] usb 4-1: Manufacturer: syz [ 119.892507][ T5816] usb 4-1: SerialNumber: syz [ 119.938603][ T5816] usb 4-1: config 0 descriptor?? [ 120.160413][ T5816] usb 4-1: USB disconnect, device number 3 [ 120.754067][ T6538] FAULT_INJECTION: forcing a failure. [ 120.754067][ T6538] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.754105][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.3.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.754137][ T6538] Tainted: [L]=SOFTLOCKUP [ 120.754146][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.754160][ T6538] Call Trace: [ 120.754169][ T6538] [ 120.754178][ T6538] dump_stack_lvl+0xe8/0x150 [ 120.754209][ T6538] should_fail_ex+0x3eb/0x540 [ 120.754237][ T6538] get_futex_key+0x1b4/0x1580 [ 120.754265][ T6538] ? __pfx_futex_wake_mark+0x10/0x10 [ 120.754294][ T6538] ? __pfx_get_futex_key+0x10/0x10 [ 120.754320][ T6538] ? __lock_acquire+0x747/0x2de0 [ 120.754352][ T6538] futex_wake+0x119/0x5f0 [ 120.754376][ T6538] ? __pfx_futex_wait+0x10/0x10 [ 120.754399][ T6538] ? __pfx_futex_wake+0x10/0x10 [ 120.754427][ T6538] ? lock_acquire+0x115/0x350 [ 120.754456][ T6538] do_futex+0x458/0x4e0 [ 120.754485][ T6538] ? __pfx_do_futex+0x10/0x10 [ 120.754503][ T6538] ? __fget_files+0x3a2/0x420 [ 120.754525][ T6538] ? __fget_files+0x2a/0x420 [ 120.754559][ T6538] __se_sys_futex+0x3a8/0x450 [ 120.754586][ T6538] ? ksys_write+0xf8/0x270 [ 120.754607][ T6538] ? __pfx___se_sys_futex+0x10/0x10 [ 120.754630][ T6538] ? __pfx_ksys_write+0x10/0x10 [ 120.754658][ T6538] ? __x64_sys_futex+0x21/0xf0 [ 120.754683][ T6538] do_syscall_64+0x166/0x520 [ 120.754704][ T6538] ? trace_irq_disable+0x3b/0x140 [ 120.754724][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.754747][ T6538] ? clear_bhb_loop+0x70/0xc0 [ 120.754771][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.754794][ T6538] RIP: 0033:0x7f3ea0b9e1d9 [ 120.754815][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.754834][ T6538] RSP: 002b:00007f3ea1b260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.754857][ T6538] RAX: ffffffffffffffda RBX: 00007f3ea0e25fa8 RCX: 00007f3ea0b9e1d9 [ 120.754874][ T6538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ea0e25fac [ 120.754889][ T6538] RBP: 00007f3ea0e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 120.754905][ T6538] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 120.754920][ T6538] R13: 00007f3ea0e26038 R14: 00007ffcbf6a9b20 R15: 00007ffcbf6a9c08 [ 120.754956][ T6538] [ 121.179120][ T6542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.377617][ T6547] loop0: detected capacity change from 0 to 4096 [ 121.409725][ T6547] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 121.410053][ T6547] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 121.410073][ T6547] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 121.410142][ T6547] loop0: [ 122.048565][ T6568] FAULT_INJECTION: forcing a failure. [ 122.048565][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.048604][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.4.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.048635][ T6568] Tainted: [L]=SOFTLOCKUP [ 122.048644][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.048657][ T6568] Call Trace: [ 122.048665][ T6568] [ 122.048675][ T6568] dump_stack_lvl+0xe8/0x150 [ 122.048705][ T6568] should_fail_ex+0x3eb/0x540 [ 122.048733][ T6568] _copy_to_user+0x31/0xb0 [ 122.048758][ T6568] put_timespec64+0xc8/0x130 [ 122.048780][ T6568] ? __pfx_put_timespec64+0x10/0x10 [ 122.048812][ T6568] __x64_sys_clock_gettime+0x22a/0x290 [ 122.048839][ T6568] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 122.048875][ T6568] do_syscall_64+0x166/0x520 [ 122.048896][ T6568] ? trace_irq_disable+0x3b/0x140 [ 122.048915][ T6568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.048937][ T6568] ? clear_bhb_loop+0x70/0xc0 [ 122.048961][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.048984][ T6568] RIP: 0033:0x7f2cd919e1d9 [ 122.049004][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.049023][ T6568] RSP: 002b:00007f2cd73f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 122.049046][ T6568] RAX: ffffffffffffffda RBX: 00007f2cd9425fa0 RCX: 00007f2cd919e1d9 [ 122.049063][ T6568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 122.049080][ T6568] RBP: 00007f2cd9235888 R08: 0000000000000000 R09: 0000000000000000 [ 122.049093][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.049107][ T6568] R13: 00007f2cd9426038 R14: 00007f2cd9425fa0 R15: 00007fffe93fb208 [ 122.049142][ T6568] [ 122.243186][ T6572] loop0: detected capacity change from 0 to 4096 [ 122.312430][ T6572] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 122.312461][ T6572] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 122.312476][ T6572] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 122.312537][ T6572] loop0: [ 122.567179][ T12] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d5dc8c55-5275-4282-8a3e-c0bd5c09c23f. [ 123.193994][ T6578] syzkaller0: entered promiscuous mode [ 123.194538][ T6578] syzkaller0: entered allmulticast mode [ 123.268949][ T6562] nvme nvme0: creating 2 I/O queues. [ 123.368215][ T6562] nvme nvme0: new ctrl: "testsubsys" [ 123.597209][ T6598] loop1: detected capacity change from 0 to 2048 [ 123.688403][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.331876][ T6617] loop0: detected capacity change from 0 to 4096 [ 124.368513][ T6617] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 124.368541][ T6617] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 124.368555][ T6617] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 124.368610][ T6617] loop0: [ 125.615431][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.854461][ T6628] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 125.854461][ T6628] [ 125.854725][ T6628] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 125.864354][ T6628] CIFS: Attempting to mount //172.20.20.170/share [ 126.873253][ T6628] CIFS: VFS: cifs_mount failed w/return code = -112 [ 126.986637][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 127.204770][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 127.204797][ T4982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 127.204810][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 127.204871][ T4982] loop0: [ 127.803341][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 128.088164][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 128.088191][ T4982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 128.088204][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 128.088266][ T4982] loop0: [ 128.595970][ T6684] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 128.596018][ T6684] CIFS: Attempting to mount //172.20.20.170/share [ 128.670145][ T6684] CIFS: VFS: Error connecting to socket. Aborting operation. [ 128.670578][ T6684] CIFS: VFS: cifs_mount failed w/return code = -111 [ 130.352565][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 130.423773][ T6697] netlink: 'syz.4.333': attribute type 21 has an invalid length. [ 130.732256][ T5816] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 130.892606][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.892661][ T5816] usb 5-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 130.893639][ T5816] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 130.893664][ T5816] usb 5-1: config 142 has no interface number 0 [ 130.893710][ T5816] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 130.893735][ T5816] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 130.893756][ T5816] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 130.893778][ T5816] usb 5-1: config 142 interface 251 has no altsetting 0 [ 130.896964][ T5816] usb 5-1: string descriptor 0 read error: -22 [ 130.897098][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.900749][ T6700] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.900883][ T6700] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.006499][ T5816] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 131.047662][ T5816] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 131.138254][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 131.138282][ T4982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 131.138295][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 131.138373][ T4982] loop0: [ 131.946940][ T6713] loop3: detected capacity change from 0 to 512 [ 131.962554][ T6713] EXT4-fs: Ignoring removed orlov option [ 131.962623][ T6713] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.007526][ T6713] EXT4-fs error (device loop3): ext4_iget_extra_inode:6003: inode #15: comm syz.3.339: corrupted in-inode xattr: e_value size too large [ 132.007763][ T6713] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.009128][ T6713] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.339: couldn't read orphan inode 15 (err -117) [ 132.009218][ T6713] loop3: lost filesystem error report for type 5 error -117 [ 132.048389][ T6713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.228392][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.910656][ T6697] netlink: 156 bytes leftover after parsing attributes in process `syz.4.333'. [ 132.925169][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.063048][ T6731] loop0: detected capacity change from 0 to 4096 [ 133.112381][ T6731] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 133.112412][ T6731] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 133.112427][ T6731] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 133.112484][ T6731] loop0: [ 133.375400][ T6742] loop3: detected capacity change from 0 to 512 [ 133.413362][ T6742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 133.413523][ T6742] System zones: 1-12 [ 133.446808][ T6742] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.351: missing EA_INODE flag [ 133.446839][ T6742] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 133.451396][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 133.451418][ C0] EXT4-fs (loop3): initial error at time 1791622977: ext4_xattr_inode_iget:437: inode 12 [ 133.451450][ C0] EXT4-fs (loop3): last error at time 1791622977: ext4_xattr_inode_iget:437: inode 12 [ 133.506317][ T6742] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.351: error while reading EA inode 12 err=-117 [ 133.506352][ T6742] loop3: lost filesystem error report for type 5 error -117 [ 133.506820][ T6742] EXT4-fs (loop3): 1 orphan inode deleted [ 133.519469][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.621169][ T5816] usb 5-1: USB disconnect, device number 3 [ 133.662577][ T5816] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 133.725458][ T5816] cypress_m8 5-1:142.251: device disconnected [ 134.147665][ T6755] loop2: detected capacity change from 0 to 1024 [ 134.751012][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.806431][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.961963][ T5733] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.982547][ T5816] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 134.985068][ T5816] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.985097][ T5816] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 134.985118][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.985164][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 134.985193][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 134.986900][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.986926][ T5816] usb 1-1: Product: syz [ 134.986942][ T5816] usb 1-1: Manufacturer: syz [ 135.083977][ T5816] cdc_wdm 1-1:1.0: skipping garbage [ 135.083998][ T5816] cdc_wdm 1-1:1.0: skipping garbage [ 135.093386][ T5816] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 135.143325][ T5733] usb 2-1: New USB device found: idVendor=05c6, idProduct=1000, bcdDevice=0.00 [ 135.144775][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.212408][ T5733] usb-storage 2-1:1.0: USB Mass Storage device detected [ 135.276925][ T5816] usb 1-1: USB disconnect, device number 4 [ 135.393613][ T5733] scsi host1: usb-storage 2-1:1.0 [ 135.601096][ T5816] usb 2-1: USB disconnect, device number 2 [ 135.766671][ T6784] loop3: detected capacity change from 0 to 512 [ 135.882692][ T6784] fuse: Bad value for 'fd' [ 136.118729][ T6794] loop4: detected capacity change from 0 to 512 [ 136.165126][ T6794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 136.165319][ T6794] System zones: 1-12 [ 136.172962][ T6794] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.368: missing EA_INODE flag [ 136.172997][ T6794] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 136.178447][ T6794] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.368: error while reading EA inode 12 err=-117 [ 136.178484][ T6794] loop4: lost filesystem error report for type 5 error -117 [ 136.188346][ T6794] EXT4-fs (loop4): 1 orphan inode deleted [ 136.195043][ T6794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.694108][ T6816] loop0: detected capacity change from 0 to 4096 [ 136.763425][ T6816] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 136.763455][ T6816] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 136.763469][ T6816] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 136.763527][ T6816] loop0: [ 137.041762][ T6827] loop2: detected capacity change from 0 to 16 [ 137.115062][ T6827] erofs (device loop2): mounted with root inode @ nid 36. [ 137.991152][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.214306][ T6837] loop3: detected capacity change from 0 to 16 [ 138.231242][ T6837] erofs (device loop3): mounted with root inode @ nid 36. [ 138.248623][ T6837] syz.3.383: attempt to access beyond end of device [ 138.248623][ T6837] loop3: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16 [ 138.251050][ T6837] syz.3.383: attempt to access beyond end of device [ 138.251050][ T6837] loop3: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16 [ 138.287937][ T32] audit: type=1800 audit(1791622982.076:8): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.383" name="file2" dev="loop3" ino=89 res=0 errno=-5 [ 138.317991][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 138.320875][ T6837] erofs (device loop3): corrupted dir block 0 @ nid 46 [ 138.339499][ T6837] erofs (device loop3): corrupted dir block 0 @ nid 46 [ 138.348841][ T6837] erofs (device loop3): corrupted dir block 0 @ nid 46 [ 138.713437][ T6842] loop3: detected capacity change from 0 to 764 [ 139.544164][ T6856] loop4: detected capacity change from 0 to 1024 [ 139.601513][ T6856] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 139.601564][ T6856] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 139.601583][ T6856] EXT4-fs error (device loop4): ext4_acquire_dquot:7111: comm syz.4.380: Failed to acquire dquot type 0 [ 139.601606][ T6856] loop4: lost filesystem error report for type 5 error -117 [ 139.606231][ T6856] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 139.607335][ T6856] EXT4-fs (loop4): 1 truncate cleaned up [ 139.671165][ T6856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.090946][ T6878] loop1: detected capacity change from 0 to 8 [ 140.652837][ T6878] SQUASHFS error: Failed to read block 0x71e: -5 [ 140.654112][ T6878] SQUASHFS error: Unable to read metadata cache entry [71c] [ 140.654130][ T6878] SQUASHFS error: Unable to read inode 0x11f [ 140.924817][ T6886] loop2: detected capacity change from 0 to 256 [ 141.020294][ T6886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 141.101264][ T6886] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 141.475093][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.101795][ T5725] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.107736][ T6910] loop3: detected capacity change from 0 to 256 [ 142.127570][ T6910] ======================================================= [ 142.127570][ T6910] WARNING: The mand mount option has been deprecated and [ 142.127570][ T6910] and is ignored by this kernel. Remove the mand [ 142.127570][ T6910] option from the mount to silence this warning. [ 142.127570][ T6910] ======================================================= [ 142.127700][ T6910] exfat: Invalid uid '0x00000000ffffffff' [ 142.231470][ T5725] usb 1-1: device descriptor read/64, error -71 [ 142.435549][ T6926] loop3: detected capacity change from 0 to 1024 [ 142.449490][ T6926] hfsplus: failed to load catalog file [ 142.472447][ T5725] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.602462][ T5725] usb 1-1: device descriptor read/64, error -71 [ 142.621461][ T5740] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.657999][ T6930] loop3: detected capacity change from 0 to 2048 [ 142.668109][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.693610][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.712394][ T5725] usb usb1-port1: attempt power cycle [ 142.777275][ T5740] usb 2-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01 [ 142.778507][ T5740] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.778539][ T5740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.778562][ T5740] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.778603][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.827835][ T46] usb 3-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 142.836284][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.836378][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.836484][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.872392][ T46] usb 3-1: config 0 descriptor?? [ 142.873038][ T6922] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 142.931491][ T5816] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.061527][ T5725] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.082542][ T5725] usb 1-1: device descriptor read/8, error -71 [ 143.091513][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 143.108462][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.108513][ T5816] usb 5-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.40 [ 143.128483][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.128511][ T5816] usb 5-1: Product: syz [ 143.128528][ T5816] usb 5-1: Manufacturer: syz [ 143.128543][ T5816] usb 5-1: SerialNumber: syz [ 143.296345][ T5614] Bluetooth: hci5: Reading Intel version command failed (-71) [ 143.296883][ T5740] usb 2-1: USB disconnect, device number 3 [ 143.321611][ T5725] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.345991][ T5725] usb 1-1: device descriptor read/8, error -71 [ 143.454345][ T5725] usb usb1-port1: unable to enumerate USB device [ 143.486155][ T46] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 143.536805][ T46] usb 3-1: USB disconnect, device number 3 [ 143.781888][ T46] usb 5-1: USB disconnect, device number 4 [ 143.841939][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.228350][ T6948] syz_tun: entered allmulticast mode [ 144.253829][ T6956] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.409998][ T6963] loop4: detected capacity change from 0 to 512 [ 144.418933][ T6963] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 145.469415][ T6986] loop4: detected capacity change from 0 to 512 [ 145.525267][ T6988] loop3: detected capacity change from 0 to 512 [ 145.567724][ T6988] EXT4-fs (loop3): 1 truncate cleaned up [ 145.574203][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.477109][ T7008] syzkaller0: entered promiscuous mode [ 146.477137][ T7008] syzkaller0: entered allmulticast mode [ 146.539514][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.585876][ T1634] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.711487][ T1634] usb 3-1: device descriptor read/64, error -71 [ 146.952456][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 146.952484][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 146.954865][ T1634] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.081571][ T1634] usb 3-1: device descriptor read/64, error -71 [ 147.204089][ T1634] usb usb3-port1: attempt power cycle [ 147.563958][ T1634] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.587844][ T1634] usb 3-1: device descriptor read/8, error -71 [ 147.705842][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 147.812720][ T7035] loop1: detected capacity change from 0 to 16 [ 147.821711][ T1634] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.837322][ T7035] erofs (device loop1): invalid ishare xattr prefix id 0 [ 147.867245][ T1634] usb 3-1: device descriptor read/8, error -71 [ 147.975808][ T1634] usb usb3-port1: unable to enumerate USB device [ 148.383627][ T32] audit: type=1326 audit(1791622992.216:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.463" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b379e1d9 code=0x7fc00000 [ 148.910587][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 148.910615][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 148.943954][ T7055] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.468'. [ 149.049907][ T32] audit: type=1326 audit(1791622992.876:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.463" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21b379e1d9 code=0x7fc00000 [ 149.499409][ T7072] loop0: detected capacity change from 0 to 4096 [ 149.546596][ T7072] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 149.546623][ T7072] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 149.546685][ T7072] loop0: [ 149.599252][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 150.180229][ T7082] syzkaller0: entered promiscuous mode [ 150.180256][ T7082] syzkaller0: entered allmulticast mode [ 150.388435][ T7099] loop4: detected capacity change from 0 to 2048 [ 150.469629][ T7099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.473375][ T7076] loop0: detected capacity change from 0 to 2048 [ 150.860441][ T7101] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.482'. [ 150.997907][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 150.997968][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 151.227710][ T7113] loop0: detected capacity change from 0 to 4096 [ 151.290664][ T7113] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 151.290688][ T7113] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 151.291264][ T7113] loop0: [ 151.989248][ T7116] __nla_validate_parse: 1 callbacks suppressed [ 151.989269][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 152.073434][ T7118] loop0: detected capacity change from 0 to 512 [ 152.098551][ T7118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 152.098678][ T7118] System zones: 1-12 [ 152.104701][ T7118] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.489: missing EA_INODE flag [ 152.104774][ T7118] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 152.105643][ T7118] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.489: error while reading EA inode 12 err=-117 [ 152.105759][ T7118] loop0: lost filesystem error report for type 5 error -117 [ 152.106572][ T7118] EXT4-fs (loop0): 1 orphan inode deleted [ 152.120075][ T7118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.618582][ T7132] loop2: detected capacity change from 0 to 1024 [ 153.662473][ T7132] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 153.662526][ T7132] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 153.662547][ T7132] EXT4-fs error (device loop2): ext4_acquire_dquot:7111: comm syz.2.493: Failed to acquire dquot type 0 [ 153.662571][ T7132] loop2: lost filesystem error report for type 5 error -117 [ 153.674678][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 153.674704][ C1] EXT4-fs (loop2): initial error at time 1791622997: ext4_acquire_dquot:7111 [ 153.674731][ C1] EXT4-fs (loop2): last error at time 1791622997: ext4_acquire_dquot:7111 [ 153.674933][ T7132] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 153.686755][ T7132] EXT4-fs (loop2): 1 truncate cleaned up [ 153.754446][ T7132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.970308][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.059654][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.091863][ T7136] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.494'. [ 154.168052][ T7138] loop2: detected capacity change from 0 to 512 [ 154.230502][ T7138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.230629][ T7138] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.375272][ T7145] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.495: corrupted xattr block 32: invalid ea_ino [ 154.503596][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.641979][ T7150] loop0: detected capacity change from 0 to 4096 [ 154.665326][ T7150] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 154.665351][ T7150] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 154.665409][ T7150] loop0: [ 154.810457][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 155.005089][ T7156] Bluetooth: MGMT ver 1.23 [ 155.138607][ T7161] loop1: detected capacity change from 0 to 512 [ 155.180631][ T7161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 155.180757][ T7161] System zones: 1-12 [ 155.194910][ T7161] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.504: missing EA_INODE flag [ 155.194939][ T7161] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 155.201401][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 155.201423][ C0] EXT4-fs (loop1): initial error at time 1791622999: ext4_xattr_inode_iget:437: inode 12 [ 155.201454][ C0] EXT4-fs (loop1): last error at time 1791622999: ext4_xattr_inode_iget:437: inode 12 [ 155.218568][ T7161] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.504: error while reading EA inode 12 err=-117 [ 155.218703][ T7161] loop1: lost filesystem error report for type 5 error -117 [ 155.220624][ T7161] EXT4-fs (loop1): 1 orphan inode deleted [ 155.257479][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.406642][ T7103] syz.4.483 (7103) used greatest stack depth: 19328 bytes left [ 155.619352][ T7170] loop2: detected capacity change from 0 to 2048 [ 155.724997][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.727253][ T7170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.980165][ T7184] loop0: detected capacity change from 0 to 4096 [ 156.069044][ T7184] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 156.081113][ T7184] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 156.081147][ T7184] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 156.081162][ T7184] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 156.090643][ T7184] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 156.090668][ T7184] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 156.090684][ T7184] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 156.090700][ T7184] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 156.090713][ T7184] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 156.090764][ T7184] loop0: [ 156.423388][ T7197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.428620][ T7198] loop2: detected capacity change from 0 to 1024 [ 158.523416][ T5614] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 158.523744][ T5614] Bluetooth: hci0: command 0x0c13 tx timeout [ 159.099754][ T7250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.157086][ T7254] loop3: detected capacity change from 0 to 2048 [ 159.218448][ T7254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.283750][ T7267] syzkaller0: entered promiscuous mode [ 160.283778][ T7267] syzkaller0: entered allmulticast mode [ 160.381448][ T7279] loop4: detected capacity change from 0 to 16 [ 160.410967][ T7279] erofs (device loop4): invalid ishare xattr prefix id 0 [ 160.856838][ T7293] loop4: detected capacity change from 0 to 256 [ 160.909192][ T7293] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 161.293463][ T7307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.428607][ T7312] ip_tables: iptables: counters copy to user failed while replacing table [ 161.541156][ T7318] loop0: detected capacity change from 0 to 512 [ 161.644814][ T7318] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 161.644836][ T7318] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.644854][ T7318] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 161.752855][ T5740] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.388884][ T7324] loop4: detected capacity change from 0 to 2048 [ 162.443586][ T5740] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 162.446809][ T5740] usb 2-1: config index 0 descriptor too short (expected 65445, got 45) [ 162.461787][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.461813][ T5740] usb 2-1: Product: syz [ 162.461829][ T5740] usb 2-1: Manufacturer: syz [ 162.461845][ T5740] usb 2-1: SerialNumber: syz [ 163.121579][ T7334] loop3: detected capacity change from 0 to 1024 [ 163.518421][ T7334] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 163.518474][ T7334] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 163.518494][ T7334] EXT4-fs error (device loop3): ext4_acquire_dquot:7111: comm syz.3.550: Failed to acquire dquot type 0 [ 163.518517][ T7334] loop3: lost filesystem error report for type 5 error -117 [ 163.520847][ T7334] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 163.521417][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 163.521438][ C1] EXT4-fs (loop3): initial error at time 1791623007: ext4_acquire_dquot:7111 [ 163.521463][ C1] EXT4-fs (loop3): last error at time 1791623007: mb_free_blocks:2047: inode 13: block 160 [ 163.521887][ T7334] EXT4-fs (loop3): 1 truncate cleaned up [ 163.523649][ T7334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.040076][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.109320][ T5740] rtl8150 2-1:1.0: couldn't reset the device [ 164.143606][ T5740] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 164.196126][ T5740] usb 2-1: USB disconnect, device number 4 [ 165.150340][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 165.150402][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 165.270726][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 165.270773][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 165.489573][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 165.489636][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 165.627957][ T7378] loop3: detected capacity change from 0 to 164 [ 165.640900][ T7378] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 165.958457][ T7382] loop1: detected capacity change from 0 to 512 [ 166.789008][ T7388] loop4: detected capacity change from 0 to 1024 [ 166.889953][ T7382] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.562: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 166.889993][ T7382] loop1: lost filesystem error report for type 5 error -117 [ 166.891390][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 166.891413][ C1] EXT4-fs (loop1): initial error at time 1791623010: ext4_xattr_inode_iget:473 [ 166.891441][ C1] EXT4-fs (loop1): last error at time 1791623010: ext4_xattr_inode_iget:473 [ 167.055371][ T7382] EXT4-fs (loop1): 1 orphan inode deleted [ 167.057161][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.554715][ T7388] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 167.554774][ T7388] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 167.554796][ T7388] EXT4-fs error (device loop4): ext4_acquire_dquot:7111: comm syz.4.563: Failed to acquire dquot type 0 [ 167.554822][ T7388] loop4: lost filesystem error report for type 5 error -117 [ 167.556876][ T7388] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 167.559970][ T7388] EXT4-fs (loop4): 1 truncate cleaned up [ 167.562861][ T7388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.766818][ T7392] loop3: detected capacity change from 0 to 512 [ 167.852693][ T7392] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 167.930842][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.045500][ T7392] EXT4-fs (loop3): 1 truncate cleaned up [ 168.064792][ T7395] loop4: detected capacity change from 0 to 512 [ 168.079225][ T7392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.133297][ T7395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.133424][ T7395] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.315606][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.356557][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.689747][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.646801][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 169.646860][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 169.695920][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 169.695965][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 169.864356][ T7429] loop2: detected capacity change from 0 to 164 [ 169.865299][ T7429] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 170.806351][ T7433] loop2: detected capacity change from 0 to 1024 [ 170.820844][ T7433] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 170.820877][ T7433] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 170.820962][ T7433] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 170.843634][ T7433] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.575: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 170.843683][ T7433] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.845428][ T7433] EXT4-fs (loop2): no journal found [ 170.845499][ T7433] EXT4-fs (loop2): can't get journal size [ 170.851446][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 170.851500][ C1] EXT4-fs (loop2): initial error at time 1791623014: ext4_ext_check_inode:521: inode 3 [ 170.851587][ C1] EXT4-fs (loop2): last error at time 1791623014: ext4_ext_check_inode:521: inode 3 [ 170.870083][ T7433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.968066][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.073878][ T7438] loop2: detected capacity change from 0 to 512 [ 171.501638][ T7398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.282198][ T7455] __nla_validate_parse: 2 callbacks suppressed [ 172.282219][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 172.282296][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 172.329204][ T7458] loop4: detected capacity change from 0 to 164 [ 172.333124][ T7458] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 172.369983][ T7453] syzkaller0: entered promiscuous mode [ 172.370006][ T7453] syzkaller0: entered allmulticast mode [ 172.487399][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 172.487463][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 173.545288][ T7479] loop2: detected capacity change from 0 to 764 [ 174.267891][ T7473] xt_CT: No such helper "pptp" [ 175.657584][ T7509] syzkaller0: entered promiscuous mode [ 175.657611][ T7509] syzkaller0: entered allmulticast mode [ 175.788878][ T7523] futex_wake_op: syz.3.603 tries to shift op by 144; fix this program [ 175.822542][ T7523] loop3: detected capacity change from 0 to 128 [ 175.975961][ T7523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 175.999337][ T7523] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.352026][ T5617] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.496566][ T7494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.571256][ T7536] capability: warning: `syz.1.609' uses deprecated v2 capabilities in a way that may be insecure [ 177.591010][ T7537] loop3: detected capacity change from 0 to 1024 [ 177.659733][ T7537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.659849][ T7537] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.776853][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.970799][ T7553] loop1: detected capacity change from 0 to 764 [ 178.002890][ T7553] iso9660: Corrupted directory entry in block 29 of inode 1792 [ 178.007401][ T7553] isofs_fill_super: get root inode failed [ 178.125516][ T5724] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 178.281463][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 178.288728][ T5724] usb 3-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 178.290055][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.305810][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.305876][ T5724] usb 3-1: Product: syz [ 178.305911][ T5724] usb 3-1: Manufacturer: syz [ 178.305953][ T5724] usb 3-1: SerialNumber: syz [ 179.724575][ T7566] loop1: detected capacity change from 0 to 256 [ 179.796324][ T7566] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 179.836722][ T7566] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 181.281734][ T7585] loop0: detected capacity change from 0 to 3904 [ 181.304554][ T7585] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 181.304587][ T7585] ldm_validate_privheads(): Disk read failed. [ 181.305141][ T7585] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 181.305186][ T7585] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 181.305265][ T7585] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 181.305283][ T7585] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 181.305298][ T7585] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 181.305347][ T7585] loop0: [ 181.305367][ T7585] loop0: partition table partially beyond EOD, truncated [ 181.499413][ T7589] loop1: detected capacity change from 0 to 256 [ 182.100477][ T5724] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 182.104140][ T5724] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 182.120879][ T5724] usb 3-1: 1:1 : bogus bTerminalLink 7 [ 182.912207][ T5724] usb 3-1: USB disconnect, device number 8 [ 184.032183][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 184.032215][ T4982] ldm_validate_privheads(): Disk read failed. [ 184.033489][ T4982] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 184.033511][ T4982] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 184.033524][ T4982] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 184.033537][ T4982] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 184.033550][ T4982] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 184.033599][ T4982] loop0: [ 184.033619][ T4982] loop0: partition table partially beyond EOD, truncated [ 184.096833][ T5740] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.266330][ T5740] usb 5-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 184.271119][ T5740] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.271146][ T5740] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.301583][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.301612][ T5740] usb 5-1: SerialNumber: syz [ 184.375351][ T7628] syzkaller0: entered promiscuous mode [ 184.375377][ T7628] syzkaller0: entered allmulticast mode [ 184.575012][ T5740] usb 5-1: 0:2 : does not exist [ 184.580088][ T5740] usb 5-1: unit 5: unexpected type 0x03 [ 184.693616][ T5740] usb 5-1: USB disconnect, device number 5 [ 184.777345][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.746481][ T7655] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input10 [ 188.297064][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.982242][ T7675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.655'. [ 190.420184][ T7688] loop4: detected capacity change from 0 to 764 [ 190.838375][ T7693] capability: warning: `syz.0.662' uses 32-bit capabilities (legacy support in use) [ 192.365530][ T7709] loop2: detected capacity change from 0 to 1024 [ 192.391982][ T7712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.667'. [ 192.440102][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.605986][ T7718] loop1: detected capacity change from 0 to 512 [ 192.636932][ T7719] loop4: detected capacity change from 0 to 764 [ 192.689738][ T7718] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.672: iget: bad i_size value: 38620345925642 [ 192.689776][ T7718] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.690309][ T7718] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.672: couldn't read orphan inode 15 (err -117) [ 192.690341][ T7718] loop1: lost filesystem error report for type 5 error -117 [ 192.703357][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 192.703382][ C0] EXT4-fs (loop1): initial error at time 1791623036: ext4_orphan_get:1404: inode 15 [ 192.703417][ C0] EXT4-fs (loop1): last error at time 1791623036: ext4_orphan_get:1409 [ 192.780846][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.967292][ T7718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.672: bg 0: block 5: invalid block bitmap [ 193.008838][ T7718] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 690 with error 28 [ 193.008876][ T7718] EXT4-fs (loop1): This should not happen!! Data will be lost [ 193.008876][ T7718] [ 193.008906][ T7718] EXT4-fs (loop1): Total free blocks count 0 [ 193.008921][ T7718] EXT4-fs (loop1): Free/Dirty block details [ 193.008957][ T7718] EXT4-fs (loop1): free_blocks=0 [ 193.008991][ T7718] EXT4-fs (loop1): dirty_blocks=692 [ 193.009006][ T7718] EXT4-fs (loop1): Block reservation details [ 193.009020][ T7718] EXT4-fs (loop1): i_reserved_data_blocks=692 [ 193.129031][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.309865][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.329186][ T7736] loop2: detected capacity change from 0 to 2048 [ 193.409131][ T7736] EXT4-fs error (device loop2): __ext4_iget:6466: inode #2: block 127754: comm syz.2.677: invalid block [ 193.409169][ T7736] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 193.412164][ T7736] EXT4-fs (loop2): get root inode failed [ 193.412210][ T7736] EXT4-fs (loop2): mount failed [ 193.432373][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 193.432395][ C1] EXT4-fs (loop2): initial error at time 1791623037: __ext4_iget:6466: inode 2: block 127754 [ 193.432454][ C1] EXT4-fs (loop2): last error at time 1791623037: __ext4_iget:6466: inode 2: block 127754 [ 193.552817][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 193.552869][ T7736] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 194.372535][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.910725][ T7771] netlink: 'syz.2.682': attribute type 8 has an invalid length. [ 195.975447][ T7773] loop4: detected capacity change from 0 to 764 [ 197.466574][ T7797] SET target dimension over the limit! [ 199.342952][ T7828] loop1: detected capacity change from 0 to 8 [ 199.370559][ T7831] loop4: detected capacity change from 0 to 764 [ 199.474500][ T7828] SQUASHFS error: Failed to read block 0x6e6: -5 [ 199.474540][ T7828] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 199.474555][ T7828] SQUASHFS error: Unable to read directory block [6e4:0] [ 201.021478][ T5740] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.246572][ T7866] loop3: detected capacity change from 0 to 764 [ 201.285504][ T5740] usb 3-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 201.514730][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.515181][ T5740] usb 3-1: Product: syz [ 201.515480][ T5740] usb 3-1: Manufacturer: syz [ 201.515793][ T5740] usb 3-1: SerialNumber: syz [ 201.603548][ T5740] usb 3-1: config 0 descriptor?? [ 201.630666][ T5740] ch341 3-1:0.0: ch341-uart converter detected [ 203.082797][ T54] Bluetooth: hci0: command 0x0c13 tx timeout [ 203.128260][ T5740] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 203.326401][ T7912] usb usb8: usbfs: process 7912 (syz.1.725) did not claim interface 0 before use [ 203.551075][ T5724] usb 3-1: USB disconnect, device number 9 [ 203.613769][ T5724] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 203.615913][ T5724] ch341 3-1:0.0: device disconnected [ 204.309063][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 204.619557][ T3329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.619580][ T3329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.202706][ T7964] syz.3.746: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 205.202897][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.3.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.202927][ T7964] Tainted: [L]=SOFTLOCKUP [ 205.202935][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.202948][ T7964] Call Trace: [ 205.202957][ T7964] [ 205.202968][ T7964] dump_stack_lvl+0xe8/0x150 [ 205.202999][ T7964] warn_alloc+0x24d/0x270 [ 205.203029][ T7964] ? __pfx_warn_alloc+0x10/0x10 [ 205.203073][ T7964] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 205.203125][ T7964] ? lock_acquire+0x115/0x350 [ 205.203159][ T7964] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.203196][ T7964] ? down_write+0x166/0x200 [ 205.203218][ T7964] ? __pfx_down_write+0x10/0x10 [ 205.203239][ T7964] ? disksize_store+0x121/0x3e0 [ 205.203263][ T7964] vzalloc_noprof+0xb2/0xe0 [ 205.203286][ T7964] ? disksize_store+0x121/0x3e0 [ 205.203310][ T7964] disksize_store+0x121/0x3e0 [ 205.203330][ T7964] ? sysfs_kf_write+0x166/0x260 [ 205.203357][ T7964] ? __pfx_sysfs_kf_write+0x10/0x10 [ 205.203376][ T7964] kernfs_fop_write_iter+0x3a4/0x540 [ 205.203407][ T7964] vfs_write+0x612/0xba0 [ 205.203440][ T7964] ? __pfx_vfs_write+0x10/0x10 [ 205.203475][ T7964] ? __fget_files+0x3a2/0x420 [ 205.203496][ T7964] ? __fget_files+0x2a/0x420 [ 205.203522][ T7964] ? fdget+0x1ac/0x250 [ 205.203553][ T7964] ksys_write+0x150/0x270 [ 205.203578][ T7964] ? __pfx_ksys_write+0x10/0x10 [ 205.203613][ T7964] do_syscall_64+0x166/0x520 [ 205.203632][ T7964] ? trace_irq_disable+0x3b/0x140 [ 205.203652][ T7964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.203675][ T7964] ? clear_bhb_loop+0x70/0xc0 [ 205.203701][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.203723][ T7964] RIP: 0033:0x7f3ea0b9e1d9 [ 205.203745][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.203764][ T7964] RSP: 002b:00007f3ea1b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.203787][ T7964] RAX: ffffffffffffffda RBX: 00007f3ea0e25fa0 RCX: 00007f3ea0b9e1d9 [ 205.203804][ T7964] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 205.203818][ T7964] RBP: 00007f3ea0c35888 R08: 0000000000000000 R09: 0000000000000000 [ 205.203832][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.203845][ T7964] R13: 00007f3ea0e26038 R14: 00007f3ea0e25fa0 R15: 00007ffcbf6a9c08 [ 205.203894][ T7964] [ 205.205820][ T7964] Mem-Info: [ 205.205906][ T7964] active_anon:5490 inactive_anon:0 isolated_anon:0 [ 205.205906][ T7964] active_file:0 inactive_file:55142 isolated_file:0 [ 205.205906][ T7964] unevictable:0 dirty:330 writeback:0 [ 205.205906][ T7964] slab_reclaimable:10707 slab_unreclaimable:95947 [ 205.205906][ T7964] mapped:29967 shmem:521 pagetables:1224 [ 205.205906][ T7964] sec_pagetables:0 bounce:0 [ 205.205906][ T7964] kernel_misc_reclaimable:0 [ 205.205906][ T7964] free:1309908 free_pcp:13056 free_cma:0 [ 205.205991][ T7964] Node 0 active_anon:21960kB inactive_anon:0kB active_file:0kB inactive_file:220356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119868kB dirty:1320kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12236kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 205.206077][ T7964] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 205.206160][ T7964] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.206304][ T7964] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 205.206632][ T7964] Node 0 DMA32 free:1283112kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21960kB inactive_anon:0kB active_file:0kB inactive_file:220356kB unevictable:0kB writepending:1320kB zspages:0kB present:3129332kB managed:2526984kB mlocked:0kB bounce:0kB free_pcp:52224kB local_pcp:32364kB free_cma:0kB [ 205.206747][ T7964] lowmem_reserve[]: 0 0 0 0 0 [ 205.206786][ T7964] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.206872][ T7964] lowmem_reserve[]: 0 0 0 0 0 [ 205.207101][ T7964] Node 1 Normal free:3941160kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.207309][ T7964] lowmem_reserve[]: 0 0 0 0 0 [ 205.207525][ T7964] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.208053][ T7964] Node 0 DMA32: 908*4kB (UME) 735*8kB (UM) 709*16kB (UME) 1277*32kB (UME) 425*64kB (UME) 203*128kB (UM) 129*256kB (UM) 31*512kB (UME) 13*1024kB (UM) 4*2048kB (UM) 268*4096kB (M) = 1283032kB [ 206.081694][ T7964] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 206.081796][ T7964] Node 1 Normal: 6*4kB (UM) 8*8kB (UM) 7*16kB (UM) 3*32kB (UM) 10*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941160kB [ 206.081963][ T7964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.081981][ T7964] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.081997][ T7964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.082014][ T7964] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.082030][ T7964] 55658 total pagecache pages [ 206.082060][ T7964] 0 pages in swap cache [ 206.082068][ T7964] Free swap = 124996kB [ 206.082075][ T7964] Total swap = 124996kB [ 206.082084][ T7964] 2097051 pages RAM [ 206.082090][ T7964] 0 pages HighMem/MovableOnly [ 206.082098][ T7964] 433689 pages reserved [ 206.082105][ T7964] 0 pages cma reserved [ 206.609000][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 206.609090][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 207.670747][ T193] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 207.904527][ T193] usb 4-1: Using ep0 maxpacket: 8 [ 207.905466][ T193] usb 4-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 207.906798][ T193] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.910926][ T193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.910953][ T193] usb 4-1: Product: syz [ 207.910971][ T193] usb 4-1: Manufacturer: syz [ 207.910988][ T193] usb 4-1: SerialNumber: syz [ 208.058906][ T8000] loop2: detected capacity change from 0 to 764 [ 208.208962][ T5733] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.210018][ T193] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 208.215272][ T193] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.310504][ T193] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 208.387420][ T5733] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 208.452905][ T5733] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.452980][ T5733] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 208.453096][ T5733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.453291][ T5733] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.486796][ T54] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 208.560156][ T54] Bluetooth: hci0: command 0x0c13 tx timeout [ 208.604158][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.604271][ T5733] usb 5-1: Product: syz [ 208.605031][ T5733] usb 5-1: Manufacturer: syz [ 208.912253][ T5733] cdc_wdm 5-1:1.0: skipping garbage [ 208.917772][ T5733] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 208.951944][ T193] usb 4-1: USB disconnect, device number 4 [ 209.127048][ T7721] udevd[7721]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.153224][ T1634] usb 5-1: USB disconnect, device number 6 [ 209.241270][ T8012] xt_CT: No such helper "pptp" [ 210.268289][ T54] Bluetooth: hci2: unexpected event for opcode 0x200c [ 210.484268][ T5724] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 210.660604][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 210.661426][ T5724] usb 5-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 210.672885][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.702658][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.702678][ T5724] usb 5-1: Product: syz [ 210.702689][ T5724] usb 5-1: Manufacturer: syz [ 210.702699][ T5724] usb 5-1: SerialNumber: syz [ 210.942325][ T5724] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 210.954743][ T5724] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.984122][ T5724] usb 5-1: 1:1 : bogus bTerminalLink 7 [ 211.054748][ T5724] usb 5-1: USB disconnect, device number 7 [ 211.168995][ T8049] loop3: detected capacity change from 0 to 2048 [ 211.181928][ T8002] udevd[8002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.272462][ T8049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.504838][ T8056] xt_CT: No such helper "pptp" [ 211.996384][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.163316][ T8063] loop4: detected capacity change from 0 to 2048 [ 212.222436][ T8063] loop4: p3 < > p4 < > [ 212.222483][ T8063] loop4: partition table partially beyond EOD, truncated [ 212.225401][ T8063] loop4: p3 start 4284289 is beyond EOD, truncated [ 212.263640][ T8067] loop3: detected capacity change from 0 to 256 [ 212.274712][ T8067] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.274731][ T8067] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 212.344285][ T8067] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.345060][ T8067] exFAT-fs (loop3): failed to load alloc-bitmap [ 212.345077][ T8067] exFAT-fs (loop3): failed to recognize exfat type [ 212.657099][ T8074] fuse: Bad value for 'fd' [ 212.710355][ T8075] loop4: detected capacity change from 0 to 1024 [ 212.735126][ T8075] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 212.735171][ T8075] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 212.735184][ T8075] EXT4-fs error (device loop4): ext4_acquire_dquot:7111: comm syz.4.782: Failed to acquire dquot type 0 [ 212.735200][ T8075] loop4: lost filesystem error report for type 5 error -117 [ 212.738516][ T8075] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 212.739459][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 212.739480][ C1] EXT4-fs (loop4): initial error at time 1792147344: ext4_acquire_dquot:7111 [ 212.739508][ C1] EXT4-fs (loop4): last error at time 1792147344: ext4_acquire_dquot:7111 [ 212.749442][ T8075] EXT4-fs (loop4): 1 truncate cleaned up [ 212.751172][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.471472][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.139206][ T8096] loop3: detected capacity change from 0 to 2048 [ 214.154285][ T5724] kernel read not supported for file /kmsg (pid: 5724 comm: kworker/1:4) [ 214.221886][ T8096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.858860][ T8106] ip_tables: iptables: counters copy to user failed while replacing table [ 214.860322][ T8106] ip_tables: iptables: counters copy to user failed while replacing table [ 215.013731][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.645015][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 218.056597][ T8153] loop1: detected capacity change from 0 to 512 [ 218.072472][ T5724] kernel read not supported for file /kmsg (pid: 5724 comm: kworker/1:4) [ 218.097834][ T193] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.139618][ T8153] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.805: iget: bad i_size value: 38620345925642 [ 218.139657][ T8153] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.141133][ T8153] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.805: couldn't read orphan inode 15 (err -117) [ 218.141228][ T8153] loop1: lost filesystem error report for type 5 error -117 [ 218.180218][ T8153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.283978][ T193] usb 4-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 218.288744][ T193] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.288790][ T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 218.288819][ T193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.288861][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.357037][ T193] usb 4-1: config 0 descriptor?? [ 218.504630][ T8153] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.805: bg 0: block 5: invalid block bitmap [ 218.506274][ T8153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 218.506361][ T8153] EXT4-fs (loop1): This should not happen!! Data will be lost [ 218.506361][ T8153] [ 218.506451][ T8153] EXT4-fs (loop1): Total free blocks count 0 [ 218.506493][ T8153] EXT4-fs (loop1): Free/Dirty block details [ 218.506541][ T8153] EXT4-fs (loop1): free_blocks=0 [ 218.506678][ T8153] EXT4-fs (loop1): dirty_blocks=232 [ 218.506712][ T8153] EXT4-fs (loop1): Block reservation details [ 218.506751][ T8153] EXT4-fs (loop1): i_reserved_data_blocks=232 [ 218.607092][ T8162] EXT4-fs (loop1): shut down requested (0) [ 218.626341][ T8150] loop3: detected capacity change from 0 to 512 [ 218.692989][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.693098][ T8150] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.783453][ T8167] loop2: detected capacity change from 0 to 1024 [ 218.804975][ T8167] hfsplus: failed to load extents file [ 219.217074][ T8169] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8169] [ 219.235358][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.238738][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.456289][ T8182] loop1: detected capacity change from 0 to 512 [ 220.498206][ T8182] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 220.522846][ T8182] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 220.522879][ T8182] loop1: lost filesystem error report for type 5 error -12 [ 220.525656][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 220.525721][ C0] EXT4-fs (loop1): initial error at time 1792147352: ext4_process_orphan:346 [ 220.525754][ C0] EXT4-fs (loop1): last error at time 1792147352: ext4_process_orphan:346 [ 220.679357][ T8182] EXT4-fs (loop1): 1 truncate cleaned up [ 220.715805][ T8182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.735958][ T5740] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.915134][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 220.929051][ T5740] usb 5-1: New USB device found: idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 221.546554][ T8155] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 221.639691][ T5740] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 221.639724][ T5740] usb 5-1: config 2 has no interface number 0 [ 221.639766][ T5740] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 221.639794][ T5740] usb 5-1: config 2 interface 88 has no altsetting 0 [ 221.665196][ T8155] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 221.695002][ T193] usbhid 4-1:0.0: can't add hid device: -71 [ 221.695129][ T193] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 221.697216][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.748539][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 221.748569][ T5740] usb 5-1: Product: syz [ 221.748586][ T5740] usb 5-1: Manufacturer: syz [ 221.748602][ T5740] usb 5-1: SerialNumber: syz [ 221.765863][ T8189] loop2: detected capacity change from 0 to 1024 [ 221.896221][ T193] usb 4-1: USB disconnect, device number 5 [ 221.983315][ T8180] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 222.393369][ T8180] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 222.465235][ T193] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.559725][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.594665][ T8196] netlink: 84 bytes leftover after parsing attributes in process `syz.3.818'. [ 222.594715][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.818'. [ 222.623383][ T193] usb 3-1: Using ep0 maxpacket: 16 [ 222.624102][ T193] usb 3-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 222.625287][ T193] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 222.625313][ T193] usb 3-1: config 1 has no interface number 0 [ 222.625356][ T193] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 222.625384][ T193] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 222.625410][ T193] usb 3-1: config 1 interface 105 has no altsetting 0 [ 222.631383][ T193] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 222.631410][ T193] usb 3-1: Product: syz [ 222.631426][ T193] usb 3-1: Manufacturer: syz [ 222.631442][ T193] usb 3-1: SerialNumber: syz [ 222.723690][ T8189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.723855][ T8189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.825346][ T5740] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 222.825920][ T5740] asix 5-1:2.88: probe with driver asix failed with error -71 [ 222.864006][ T5740] usb 5-1: USB disconnect, device number 8 [ 223.966957][ T8189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.967111][ T8189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.545983][ T193] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 224.549504][ T193] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 224.550808][ T193] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 224.681626][ T193] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1a:a5:aa:81:6e:1e [ 224.683975][ T193] usb 3-1: USB disconnect, device number 10 [ 224.706499][ T193] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 224.746396][ T8219] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input12 [ 225.681542][ T193] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 225.681676][ T193] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 225.681807][ T193] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 229.820117][ T8256] loop2: detected capacity change from 0 to 164 [ 229.839337][ T8256] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 231.462794][ T8280] loop4: detected capacity change from 0 to 1024 [ 231.476008][ T5733] kernel read not supported for file /kmsg (pid: 5733 comm: kworker/0:6) [ 231.522250][ T8280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.600599][ T8285] SET target dimension over the limit! [ 232.658881][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.777624][ T8293] loop2: detected capacity change from 0 to 512 [ 232.974271][ T8305] loop4: detected capacity change from 0 to 164 [ 232.975379][ T8305] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 233.005643][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 233.006384][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.006418][ T54] Tainted: [L]=SOFTLOCKUP [ 233.006427][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.006442][ T54] Workqueue: hci1 hci_rx_work [ 233.006475][ T54] Call Trace: [ 233.006484][ T54] [ 233.006495][ T54] dump_stack_lvl+0xe8/0x150 [ 233.006524][ T54] sysfs_create_dir_ns+0x271/0x2a0 [ 233.006552][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 233.006580][ T54] ? do_raw_spin_unlock+0xf5/0x200 [ 233.006610][ T54] kobject_add_internal+0x622/0xcd0 [ 233.006643][ T54] kobject_add+0x163/0x240 [ 233.006672][ T54] ? __pfx_kobject_add+0x10/0x10 [ 233.006702][ T54] ? get_device_parent+0x366/0x3a0 [ 233.006731][ T54] device_add+0x3fa/0xb80 [ 233.006758][ T54] hci_conn_add_sysfs+0xd5/0x210 [ 233.006786][ T54] le_conn_complete_evt+0x1094/0x1780 [ 233.006821][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 233.006847][ T54] ? __mutex_unlock_slowpath+0x731/0x900 [ 233.006875][ T54] ? skb_pull_data+0xf0/0x200 [ 233.006904][ T54] hci_le_conn_complete_evt+0x187/0x470 [ 233.006937][ T54] hci_event_packet+0x67a/0xf10 [ 233.006971][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 233.006994][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 233.007023][ T54] ? kcov_remote_start+0x523/0x7e0 [ 233.007050][ T54] ? hci_send_to_monitor+0xdf/0x600 [ 233.007077][ T54] hci_rx_work+0x2b4/0x1110 [ 233.007110][ T54] ? process_scheduled_works+0x97a/0x1630 [ 233.007135][ T54] process_scheduled_works+0xc3d/0x1630 [ 233.007204][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 233.007238][ T54] ? assign_work+0x3cf/0x5d0 [ 233.007268][ T54] worker_thread+0xa47/0xfb0 [ 233.007323][ T54] kthread+0x38b/0x480 [ 233.007351][ T54] ? __pfx_worker_thread+0x10/0x10 [ 233.007372][ T54] ? __pfx_kthread+0x10/0x10 [ 233.007396][ T54] ret_from_fork+0x514/0xb70 [ 233.007422][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 233.007443][ T54] ? __switch_to+0xc78/0x1410 [ 233.007468][ T54] ? __pfx_kthread+0x10/0x10 [ 233.007492][ T54] ret_from_fork_asm+0x1a/0x30 [ 233.007531][ T54] [ 233.007689][ T54] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 233.007728][ T54] Bluetooth: hci1: failed to register connection device [ 233.785431][ T5725] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 234.221432][ T5725] usb 2-1: New USB device found: idVendor=05c6, idProduct=1000, bcdDevice=0.00 [ 234.252124][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.561393][ T5725] usb-storage 2-1:1.0: USB Mass Storage device detected [ 235.281713][ T5725] scsi host1: usb-storage 2-1:1.0 [ 235.292802][ T5725] usb 2-1: USB disconnect, device number 5 [ 235.364511][ T8328] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input13 [ 235.685715][ T8343] xt_NFQUEUE: number of total queues is 0 [ 235.734687][ T8345] loop3: detected capacity change from 0 to 164 [ 235.812189][ T8347] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 236.065267][ T193] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.124938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 236.858609][ T8354] loop3: detected capacity change from 0 to 512 [ 236.868633][ T8358] loop1: detected capacity change from 0 to 164 [ 236.869623][ T8358] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 236.902592][ T193] usb 3-1: New USB device found: idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 236.903937][ T193] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.903972][ T193] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.909052][ T193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.909080][ T193] usb 3-1: Product: syz [ 236.909096][ T193] usb 3-1: Manufacturer: syz [ 236.909112][ T193] usb 3-1: SerialNumber: syz [ 237.029319][ T193] usb 3-1: config 0 descriptor?? [ 237.046602][ T193] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 237.047012][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 237.067772][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 237.067893][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 237.068006][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 237.068114][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 237.117781][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 237.289623][ T193] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 237.328575][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 237.328711][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 237.346851][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 237.346942][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 237.347024][ T193] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 237.349682][ T8354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.358890][ T8354] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.407797][ T193] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 237.426948][ T193] usb 3-1: USB disconnect, device number 11 [ 237.449926][ T193] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 237.455695][ T193] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 237.456944][ T193] keyspan 3-1:0.0: device disconnected [ 237.671805][ T8354] EXT4-fs error (device loop3): ext4_xattr_block_find:1885: inode #15: comm syz.3.872: corrupted xattr block 32: invalid ea_ino [ 237.949876][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.037787][ T193] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 238.202746][ T193] usb 2-1: not running at top speed; connect to a high speed hub [ 238.202775][ T193] usb 2-1: New USB device found: idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 238.203924][ T193] usb 2-1: config 6 has an invalid interface number: 6 but max is 0 [ 238.203942][ T193] usb 2-1: config 6 has no interface number 0 [ 238.203972][ T193] usb 2-1: config 6 interface 6 has no altsetting 0 [ 238.247911][ T193] usb 2-1: string descriptor 0 read error: -22 [ 238.248058][ T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.290056][ T193] uvcvideo 2-1:6.6: probe with driver uvcvideo failed with error -22 [ 238.346443][ T5816] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 238.407533][ T8377] syzkaller0: entered promiscuous mode [ 238.407551][ T8377] syzkaller0: entered allmulticast mode [ 238.538582][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.538638][ T5816] usb 4-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 238.542020][ T5816] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 238.542051][ T5816] usb 4-1: config 142 has no interface number 0 [ 238.542089][ T5816] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 238.542116][ T5816] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 238.542139][ T5816] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 238.542160][ T5816] usb 4-1: config 142 interface 251 has no altsetting 0 [ 238.613452][ T5816] usb 4-1: string descriptor 0 read error: -22 [ 238.613574][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.648981][ T8373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.649094][ T8373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.676969][ T5816] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 238.684229][ T5816] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 238.764266][ T5816] usb 2-1: USB disconnect, device number 6 [ 239.453008][ T5724] usb 4-1: USB disconnect, device number 6 [ 239.564332][ T5724] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 239.568160][ T5724] cypress_m8 4-1:142.251: device disconnected [ 239.765193][ T8399] loop3: detected capacity change from 0 to 1024 [ 240.418227][ T8399] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 240.418282][ T8399] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 240.418305][ T8399] EXT4-fs error (device loop3): ext4_acquire_dquot:7111: comm syz.3.885: Failed to acquire dquot type 0 [ 240.418330][ T8399] loop3: lost filesystem error report for type 5 error -117 [ 240.419574][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 240.419637][ C1] EXT4-fs (loop3): initial error at time 1792147372: ext4_acquire_dquot:7111 [ 240.419707][ C1] EXT4-fs (loop3): last error at time 1792147372: ext4_acquire_dquot:7111 [ 240.420514][ T8399] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 240.422986][ T8399] EXT4-fs (loop3): 1 truncate cleaned up [ 240.427412][ T8399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.751913][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.437357][ T8423] loop3: detected capacity change from 0 to 128 [ 241.953247][ T8426] SET target dimension over the limit! [ 242.261920][ T8430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.891'. [ 243.721656][ T5724] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 244.209981][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 244.223329][ T5724] usb 4-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 244.243511][ T5724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.243552][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.263811][ T5724] usb 4-1: config 0 descriptor?? [ 244.275284][ T5724] rndis_host 4-1:0.0: rndis: master #0/ffff88802a2e0000 slave #1/0000000000000000 [ 244.534812][ T5733] usb 4-1: USB disconnect, device number 7 [ 245.468049][ T5816] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 245.640457][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 245.640501][ T5816] usb 4-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 245.641563][ T5816] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 245.641582][ T5816] usb 4-1: config 142 has no interface number 0 [ 245.641930][ T5816] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 245.641949][ T5816] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 245.641966][ T5816] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 245.641982][ T5816] usb 4-1: config 142 interface 251 has no altsetting 0 [ 245.701300][ T5816] usb 4-1: string descriptor 0 read error: -22 [ 245.701701][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.735309][ T8443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.735407][ T8443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.753851][ T5816] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 245.777034][ T5816] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 246.543470][ T5724] usb 4-1: USB disconnect, device number 8 [ 246.592912][ T5724] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 246.593335][ T5724] cypress_m8 4-1:142.251: device disconnected [ 247.063421][ T5724] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 247.216105][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.216160][ T5724] usb 4-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 247.217172][ T5724] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 247.217200][ T5724] usb 4-1: config 142 has no interface number 0 [ 247.217242][ T5724] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 247.217271][ T5724] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 247.217298][ T5724] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 247.217322][ T5724] usb 4-1: config 142 interface 251 has no altsetting 0 [ 247.220247][ T5724] usb 4-1: string descriptor 0 read error: -22 [ 247.220412][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.238383][ T8447] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.238963][ T8447] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.297890][ T5724] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 247.331704][ T5724] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 247.881500][ T8456] loop1: detected capacity change from 0 to 164 [ 247.882705][ T8456] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 248.159693][ T8447] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 248.159735][ T8447] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 248.159969][ C1] usb 4-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 248.796624][ T5725] usb 4-1: USB disconnect, device number 9 [ 248.997964][ T5725] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 249.015118][ T5725] cypress_m8 4-1:142.251: device disconnected [ 249.335330][ T8485] syzkaller0: entered promiscuous mode [ 249.335357][ T8485] syzkaller0: entered allmulticast mode [ 249.671254][ T8489] loop4: detected capacity change from 0 to 1024 [ 249.719656][ T8489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.007920][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.340093][ T8502] loop4: detected capacity change from 0 to 1024 [ 250.412170][ T8502] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 250.412276][ T8502] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 250.412335][ T8502] EXT4-fs error (device loop4): ext4_acquire_dquot:7111: comm syz.4.914: Failed to acquire dquot type 0 [ 250.412378][ T8502] loop4: lost filesystem error report for type 5 error -117 [ 250.416571][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 250.416597][ C1] EXT4-fs (loop4): initial error at time 1792147382: ext4_acquire_dquot:7111 [ 250.416626][ C1] EXT4-fs (loop4): last error at time 1792147382: ext4_acquire_dquot:7111 [ 250.438350][ T8502] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 250.453493][ T8502] EXT4-fs (loop4): 1 truncate cleaned up [ 250.457859][ T8502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.089429][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.164268][ T8506] loop2: detected capacity change from 0 to 512 [ 251.218273][ T8506] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 251.222580][ T8506] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 251.222609][ T8506] loop2: lost filesystem error report for type 5 error -12 [ 251.225299][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 251.225321][ C0] EXT4-fs (loop2): initial error at time 1792147383: ext4_process_orphan:346 [ 251.225346][ C0] EXT4-fs (loop2): last error at time 1792147383: ext4_process_orphan:346 [ 251.252081][ T8506] EXT4-fs (loop2): 1 truncate cleaned up [ 251.293224][ T8506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.318621][ T8511] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.920'. [ 253.304768][ T8534] syzkaller0: entered promiscuous mode [ 253.304792][ T8534] syzkaller0: entered allmulticast mode [ 253.305017][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.525474][ T8536] syzkaller0: entered promiscuous mode [ 253.525575][ T8536] syzkaller0: entered allmulticast mode [ 253.698097][ T8546] SET target dimension over the limit! [ 253.893422][ T8557] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.931'. [ 253.948540][ T8555] loop4: detected capacity change from 0 to 2048 [ 253.949625][ T8555] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 253.994183][ T8559] loop2: detected capacity change from 0 to 512 [ 253.998897][ T8559] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 253.998917][ T8559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.185072][ T8559] EXT4-fs (loop2): 1 truncate cleaned up [ 254.197125][ T8559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.419870][ T8563] loop4: detected capacity change from 0 to 512 [ 255.498714][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.483818][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.730250][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 256.755584][ T8577] loop2: detected capacity change from 0 to 2048 [ 256.827181][ T8577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.727440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 257.997375][ T8589] ------------[ cut here ]------------ [ 257.997391][ T8589] within_last_ext && elen > ((loff_t)offset + 1) << inode->i_blkbits [ 257.997414][ T8589] WARNING: fs/udf/inode.c:699 at udf_setsize+0xcb2/0xf50, CPU#1: syz.2.937/8589 [ 258.021756][ T8589] Modules linked in: [ 258.025719][ T8589] CPU: 1 UID: 0 PID: 8589 Comm: syz.2.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.037062][ T8589] Tainted: [L]=SOFTLOCKUP [ 258.041424][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.051798][ T8589] RIP: 0010:udf_setsize+0xcb2/0xf50 [ 258.057120][ T8589] Code: 5b 2a 11 48 3b 84 24 c0 00 00 00 75 7a 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1f c3 5b fe 90 <0f> 0b 90 e9 b8 f8 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d6 f3 ff ff [ 258.077137][ T8589] RSP: 0018:ffffc90002dc7ae0 EFLAGS: 00010287 [ 258.083263][ T8589] RAX: ffffffff836cd531 RBX: ffff888056180810 RCX: 0000000000080000 [ 258.091576][ T8589] RDX: ffffc900110c9000 RSI: 00000000000004cb RDI: 00000000000004cc [ 258.099912][ T8589] RBP: ffffc90002dc7bf8 R08: ffff8880561807d3 R09: 1ffff1100ac300fa [ 258.108118][ T8589] R10: dffffc0000000000 R11: ffffed100ac300fb R12: 0000000000003c00 [ 258.116164][ T8589] R13: 0000000000003e00 R14: 0000000000000009 R15: 0000000000000001 [ 258.124262][ T8589] FS: 00007fb6cd4276c0(0000) GS:ffff888123bad000(0000) knlGS:0000000000000000 [ 258.133316][ T8589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.140001][ T8589] CR2: 00007ffcbf6aa000 CR3: 0000000077756000 CR4: 00000000003526f0 [ 258.148089][ T8589] DR0: 0000000008000003 DR1: 00000000000001f8 DR2: 0000000000000086 [ 258.156095][ T8589] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 258.164175][ T8589] Call Trace: [ 258.167576][ T8589] [ 258.170560][ T8589] ? __pfx_udf_setsize+0x10/0x10 [ 258.175538][ T8589] ? down_write+0x166/0x200 [ 258.180148][ T8589] ? setattr_prepare+0x220/0xb30 [ 258.185145][ T8589] udf_setattr+0x412/0x6f0 [ 258.189734][ T8589] ? __pfx_udf_setattr+0x10/0x10 [ 258.194751][ T8589] notify_change+0xbba/0xea0 [ 258.199508][ T8589] do_truncate+0x1c2/0x250 [ 258.204032][ T8589] ? __pfx_do_truncate+0x10/0x10 [ 258.209129][ T8589] do_ftruncate+0x4d4/0x580 [ 258.213681][ T8589] ? __pfx_do_ftruncate+0x10/0x10 [ 258.218822][ T8589] ? __fget_files+0x3a2/0x420 [ 258.223543][ T8589] ? __fget_files+0x2a/0x420 [ 258.228254][ T8589] ? fdget+0x1ac/0x250 [ 258.232373][ T8589] __x64_sys_ftruncate+0x8f/0xe0 [ 258.237411][ T8589] do_syscall_64+0x166/0x520 [ 258.242050][ T8589] ? trace_irq_disable+0x3b/0x140 [ 258.247199][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.253330][ T8589] ? clear_bhb_loop+0x70/0xc0 [ 258.258129][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.264073][ T8589] RIP: 0033:0x7fb6cc59e1d9 [ 258.268635][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.288430][ T8589] RSP: 002b:00007fb6cd427028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 258.297054][ T8589] RAX: ffffffffffffffda RBX: 00007fb6cc826180 RCX: 00007fb6cc59e1d9 [ 258.305079][ T8589] RDX: 0000000000000000 RSI: 0000000000004a8e RDI: 0000000000000004 [ 258.313231][ T8589] RBP: 00007fb6cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 258.321297][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.329400][ T8589] R13: 00007fb6cc826218 R14: 00007fb6cc826180 R15: 00007fff50b65b68 [ 258.337543][ T8589] [ 258.340606][ T8589] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.347924][ T8589] CPU: 1 UID: 0 PID: 8589 Comm: syz.2.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.358815][ T8589] Tainted: [L]=SOFTLOCKUP [ 258.363208][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.373308][ T8589] Call Trace: [ 258.376631][ T8589] [ 258.379598][ T8589] vpanic+0x26f/0x710 [ 258.383640][ T8589] panic+0xc5/0xd0 [ 258.387411][ T8589] ? __pfx_panic+0x10/0x10 [ 258.391899][ T8589] __warn+0x315/0x4c0 [ 258.395929][ T8589] ? udf_setsize+0xcb2/0xf50 [ 258.400561][ T8589] ? udf_setsize+0xcb2/0xf50 [ 258.405189][ T8589] __report_bug+0x276/0x570 [ 258.409777][ T8589] ? udf_setsize+0xcb2/0xf50 [ 258.414411][ T8589] ? __pfx___report_bug+0x10/0x10 [ 258.419471][ T8589] ? udf_get_fileshortad+0xcb/0x1b0 [ 258.424722][ T8589] ? udf_current_aext+0x6d0/0xd20 [ 258.429796][ T8589] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.434866][ T8589] ? udf_setsize+0xcb2/0xf50 [ 258.439498][ T8589] report_bug+0x16b/0x220 [ 258.443868][ T8589] ? udf_setsize+0xcb2/0xf50 [ 258.448497][ T8589] ? udf_setsize+0xcb4/0xf50 [ 258.453124][ T8589] handle_bug+0x9c/0x200 [ 258.457408][ T8589] exc_invalid_op+0x1a/0x50 [ 258.461969][ T8589] asm_exc_invalid_op+0x1a/0x20 [ 258.466862][ T8589] RIP: 0010:udf_setsize+0xcb2/0xf50 [ 258.472107][ T8589] Code: 5b 2a 11 48 3b 84 24 c0 00 00 00 75 7a 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1f c3 5b fe 90 <0f> 0b 90 e9 b8 f8 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d6 f3 ff ff [ 258.491756][ T8589] RSP: 0018:ffffc90002dc7ae0 EFLAGS: 00010287 [ 258.497871][ T8589] RAX: ffffffff836cd531 RBX: ffff888056180810 RCX: 0000000000080000 [ 258.505880][ T8589] RDX: ffffc900110c9000 RSI: 00000000000004cb RDI: 00000000000004cc [ 258.513891][ T8589] RBP: ffffc90002dc7bf8 R08: ffff8880561807d3 R09: 1ffff1100ac300fa [ 258.521904][ T8589] R10: dffffc0000000000 R11: ffffed100ac300fb R12: 0000000000003c00 [ 258.529923][ T8589] R13: 0000000000003e00 R14: 0000000000000009 R15: 0000000000000001 [ 258.537966][ T8589] ? udf_setsize+0xcb1/0xf50 [ 258.542626][ T8589] ? __pfx_udf_setsize+0x10/0x10 [ 258.547607][ T8589] ? down_write+0x166/0x200 [ 258.552170][ T8589] ? setattr_prepare+0x220/0xb30 [ 258.557165][ T8589] udf_setattr+0x412/0x6f0 [ 258.561627][ T8589] ? __pfx_udf_setattr+0x10/0x10 [ 258.566604][ T8589] notify_change+0xbba/0xea0 [ 258.571244][ T8589] do_truncate+0x1c2/0x250 [ 258.575696][ T8589] ? __pfx_do_truncate+0x10/0x10 [ 258.580691][ T8589] do_ftruncate+0x4d4/0x580 [ 258.585247][ T8589] ? __pfx_do_ftruncate+0x10/0x10 [ 258.590312][ T8589] ? __fget_files+0x3a2/0x420 [ 258.595041][ T8589] ? __fget_files+0x2a/0x420 [ 258.599678][ T8589] ? fdget+0x1ac/0x250 [ 258.603794][ T8589] __x64_sys_ftruncate+0x8f/0xe0 [ 258.609215][ T8589] do_syscall_64+0x166/0x520 [ 258.613860][ T8589] ? trace_irq_disable+0x3b/0x140 [ 258.618928][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.625037][ T8589] ? clear_bhb_loop+0x70/0xc0 [ 258.629751][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.635682][ T8589] RIP: 0033:0x7fb6cc59e1d9 [ 258.640130][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.659779][ T8589] RSP: 002b:00007fb6cd427028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 258.668241][ T8589] RAX: ffffffffffffffda RBX: 00007fb6cc826180 RCX: 00007fb6cc59e1d9 [ 258.676261][ T8589] RDX: 0000000000000000 RSI: 0000000000004a8e RDI: 0000000000000004 [ 258.684267][ T8589] RBP: 00007fb6cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 258.692272][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.700461][ T8589] R13: 00007fb6cc826218 R14: 00007fb6cc826180 R15: 00007fff50b65b68 [ 258.708497][ T8589] [ 258.711753][ T8589] Kernel Offset: disabled [ 258.716114][ T8589] Rebooting in 86400 seconds..