last executing test programs: 3m26.226653709s ago: executing program 0 (id=606): r0 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfc}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) 3m25.910192092s ago: executing program 0 (id=609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x852dd6c070cd7e4d, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) 3m25.83919776s ago: executing program 0 (id=612): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x640100ff}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480)={r2, 0x2}, 0x8) 3m25.730769712s ago: executing program 0 (id=615): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m25.088987473s ago: executing program 0 (id=622): munlockall() r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3m24.495243096s ago: executing program 0 (id=625): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000b80)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 3m24.192709337s ago: executing program 32 (id=625): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000b80)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 1m17.526836136s ago: executing program 3 (id=2262): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1m17.343998987s ago: executing program 3 (id=2264): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0x3) 1m17.260346574s ago: executing program 3 (id=2265): eventfd(0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x248, &(0x7f00000008c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 1m17.081179246s ago: executing program 3 (id=2266): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m16.938912439s ago: executing program 5 (id=2267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="825b", 0x2}], 0x1, &(0x7f0000000440)=[@iv={0x28, 0x117, 0x2, 0x10, "159e95e98b4d1ed5411a98b279503760"}], 0x28, 0x1}], 0x1, 0x80001) 1m16.866466464s ago: executing program 3 (id=2268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000200)="93205192", 0x4}], 0x2) 1m16.773564356s ago: executing program 5 (id=2269): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x24}}, 0x0) 1m16.686049474s ago: executing program 5 (id=2271): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x1, r2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0xb, 0x4) 1m16.589476132s ago: executing program 5 (id=2272): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m16.537351267s ago: executing program 3 (id=2274): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c000a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) 1m16.322577383s ago: executing program 33 (id=2274): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c000a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) 1m16.319031808s ago: executing program 5 (id=2276): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1m16.105349771s ago: executing program 5 (id=2279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "972d99", "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"}}, 0x110) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) 1m15.861742287s ago: executing program 34 (id=2279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "972d99", "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"}}, 0x110) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) 2.247701507s ago: executing program 4 (id=3278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.118929059s ago: executing program 1 (id=3283): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) r2 = add_key$keyring(&(0x7f0000001100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 2.009078119s ago: executing program 4 (id=3285): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) 2.004476395s ago: executing program 1 (id=3287): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 1.885449087s ago: executing program 4 (id=3288): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) ioctl$TCSETS(r0, 0x40204706, &(0x7f00000000c0)={0x8, 0x1, 0x10000, 0x3f, 0x1a, "3eccd25569e209000400"}) 1.879628474s ago: executing program 1 (id=3289): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x2, 0xc) 1.705419563s ago: executing program 4 (id=3290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='comm', 0x4) pipe(&(0x7f0000000e00)) 1.605628579s ago: executing program 4 (id=3291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)=':', 0x1, 0x5fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.406102725s ago: executing program 4 (id=3292): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) 893.649325ms ago: executing program 1 (id=3297): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) 722.260514ms ago: executing program 1 (id=3299): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1}) 721.340929ms ago: executing program 6 (id=3301): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r1, 0x0, r1, 0x0, 0x276) 645.574281ms ago: executing program 1 (id=3303): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 583.937443ms ago: executing program 7 (id=3304): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, r2, 0x36, 0x2004}, 0x20) 578.735684ms ago: executing program 6 (id=3305): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 525.458537ms ago: executing program 6 (id=3306): timer_create(0x9, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) timer_create(0x9, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000006c0), 0x0) 481.654135ms ago: executing program 2 (id=3307): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xa096a000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x93) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) 468.801222ms ago: executing program 7 (id=3308): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c5200ff0f00", 0x0, 0x1, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000440)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 466.464887ms ago: executing program 2 (id=3309): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) 424.357449ms ago: executing program 6 (id=3310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 369.596182ms ago: executing program 7 (id=3311): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) sysfs$2(0x2, 0x6f, 0x0) 369.310764ms ago: executing program 2 (id=3312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000006b80)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='I', 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x4924a19, 0x20000001) 333.331706ms ago: executing program 7 (id=3313): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 315.396693ms ago: executing program 2 (id=3314): listns(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x170) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) 275.045158ms ago: executing program 6 (id=3315): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 251.54284ms ago: executing program 2 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 135.466645ms ago: executing program 7 (id=3317): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 125.400008ms ago: executing program 6 (id=3318): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x80002001}) 49.8987ms ago: executing program 2 (id=3319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004d00)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x74, 0x80000002) 0s ago: executing program 7 (id=3320): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r2, 0x2}}, 0x48) dup3(r0, r1, 0x0) kernel console output (not intermixed with test programs): 394336][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.395383][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.406162][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.414729][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.428288][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.429275][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.439696][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.451786][ T5625] Bluetooth: hci2: command tx timeout [ 84.451805][ T5616] Bluetooth: hci3: command tx timeout [ 84.451824][ T5625] Bluetooth: hci1: command tx timeout [ 84.521885][ T5625] Bluetooth: hci4: command tx timeout [ 84.555408][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.565810][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.568241][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.575243][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.594777][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.599392][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.608648][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.622725][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.727528][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.736877][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.754011][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.759215][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.760253][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.766634][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.789192][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.800611][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.812719][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.852411][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.932577][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.957667][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.960947][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.962173][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.973884][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.987282][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.987421][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.998574][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.003005][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.019097][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.034361][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.037255][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.056934][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.057043][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.060852][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.060957][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.105446][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.105511][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.204725][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.294150][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.348844][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.348968][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.364531][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.379583][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.379702][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.482192][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.524050][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.536344][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.536472][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.594425][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.594543][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.673722][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.704186][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.704383][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.739737][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.739867][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.363246][ T5625] Bluetooth: hci0: command tx timeout [ 86.523444][ T5625] Bluetooth: hci2: command tx timeout [ 86.523468][ T5606] Bluetooth: hci1: command tx timeout [ 86.523484][ T5625] Bluetooth: hci3: command tx timeout [ 86.601765][ T5625] Bluetooth: hci4: command tx timeout [ 86.607061][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.814512][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.945365][ T5605] veth0_vlan: entered promiscuous mode [ 87.006393][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.026749][ T927] cfg80211: failed to load regulatory.db [ 87.052363][ T5605] veth1_vlan: entered promiscuous mode [ 87.160947][ T5609] veth0_vlan: entered promiscuous mode [ 87.233594][ T5609] veth1_vlan: entered promiscuous mode [ 87.348910][ T5605] veth0_macvtap: entered promiscuous mode [ 87.392299][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.397737][ T5605] veth1_macvtap: entered promiscuous mode [ 87.431752][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.469230][ T5609] veth0_macvtap: entered promiscuous mode [ 87.492255][ T5609] veth1_macvtap: entered promiscuous mode [ 87.500250][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.523977][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.576402][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.613086][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615597][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.676876][ T5617] veth0_vlan: entered promiscuous mode [ 87.719451][ T5612] veth0_vlan: entered promiscuous mode [ 87.762615][ T5617] veth1_vlan: entered promiscuous mode [ 87.797355][ T5611] veth0_vlan: entered promiscuous mode [ 87.816792][ T5612] veth1_vlan: entered promiscuous mode [ 87.823576][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.823598][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.880376][ T5611] veth1_vlan: entered promiscuous mode [ 87.904659][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.904683][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.947242][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.947263][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.018683][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.018705][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.032267][ T5612] veth0_macvtap: entered promiscuous mode [ 88.037263][ T5612] veth1_macvtap: entered promiscuous mode [ 88.063004][ T5617] veth0_macvtap: entered promiscuous mode [ 88.128797][ T5617] veth1_macvtap: entered promiscuous mode [ 88.137445][ T5611] veth0_macvtap: entered promiscuous mode [ 88.141714][ T85] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141766][ T85] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141802][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141845][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141878][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141911][ T85] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141944][ T85] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.173424][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.179291][ T5611] veth1_macvtap: entered promiscuous mode [ 88.210107][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.294323][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.325984][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.349097][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.351920][ T85] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353428][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353491][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353525][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.396533][ T5605] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.402487][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.441630][ T5625] Bluetooth: hci0: command tx timeout [ 88.542497][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542553][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542591][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542628][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542666][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542703][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542739][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542777][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.606112][ T5625] Bluetooth: hci3: command tx timeout [ 88.606121][ T5616] Bluetooth: hci1: command tx timeout [ 88.611516][ T5616] Bluetooth: hci2: command tx timeout [ 88.682043][ T5616] Bluetooth: hci4: command tx timeout [ 88.752800][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.752826][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.897563][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.897918][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.046340][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.046364][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.221309][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.221350][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.328885][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.328908][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.469496][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.469524][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.258311][ T5844] netlink: 27 bytes leftover after parsing attributes in process `syz.3.16'. [ 90.397536][ T5840] loop4: detected capacity change from 0 to 4096 [ 90.508474][ T5840] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 90.877619][ T5840] ntfs3(loop4): failed to convert "076c" to cp932 [ 91.300641][ T5837] loop2: detected capacity change from 0 to 32768 [ 91.316070][ T5849] loop0: detected capacity change from 0 to 32768 [ 91.338958][ T5837] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (5837) [ 91.357306][ T5721] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.430362][ T5849] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.478444][ T5837] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 91.478484][ T5837] BTRFS info (device loop2): using sha256 checksum algorithm [ 91.532284][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 91.536465][ T5721] usb 4-1: New USB device found: idVendor=6161, idProduct=4d15, bcdDevice=0.00 [ 91.564715][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.564749][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.564786][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.608496][ T5721] usb 4-1: config 0 descriptor?? [ 91.695075][ T5849] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 91.718326][ T5837] BTRFS info (device loop2): turning off barriers [ 91.718360][ T5837] BTRFS info (device loop2): enabling free space tree [ 91.763870][ T5849] XFS (loop0): Starting recovery (logdev: internal) [ 91.870100][ T5849] XFS (loop0): Ending recovery (logdev: internal) [ 91.886277][ T5837] ======================================================= [ 91.886277][ T5837] WARNING: The mand mount option has been deprecated and [ 91.886277][ T5837] and is ignored by this kernel. Remove the mand [ 91.886277][ T5837] option from the mount to silence this warning. [ 91.886277][ T5837] ======================================================= [ 92.048850][ T5617] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 92.099417][ T5721] hid (null): unknown global tag 0x57 [ 92.158433][ T5849] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 92.158488][ T5849] XFS (loop0): Unmount and run xfs_repair [ 92.158502][ T5849] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 92.158521][ T5849] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 92.158569][ T5849] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 92.158585][ T5849] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 92.158599][ T5849] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 92.158614][ T5849] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 92.158629][ T5849] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.158644][ T5849] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.158658][ T5849] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.158845][ T5849] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117 [ 92.307154][ T5721] usb 4-1: string descriptor 0 read error: -71 [ 92.308644][ T5612] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.338539][ T5612] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 92.357693][ T5721] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 92.357786][ T5721] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 92.431881][ T5721] usb 4-1: USB disconnect, device number 2 [ 92.859227][ T5902] loop2: detected capacity change from 0 to 128 [ 93.271219][ T5911] loop2: detected capacity change from 0 to 512 [ 93.387668][ T5917] loop0: detected capacity change from 0 to 512 [ 93.587882][ T5917] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.41: inode has both inline data and extents flags [ 93.588056][ T5917] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.591283][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 93.591312][ C1] EXT4-fs (loop0): initial error at time 1791460345: ext4_orphan_get:1403: inode 15 [ 93.591346][ C1] EXT4-fs (loop0): last error at time 1791460345: ext4_orphan_get:1403: inode 15 [ 93.592976][ T5917] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.41: couldn't read orphan inode 15 (err -117) [ 93.593110][ T5917] loop0: lost filesystem error report for type 5 error -117 [ 93.637902][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.959977][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.038106][ T5932] loop1: detected capacity change from 0 to 512 [ 94.519596][ T5942] ipvlan0: entered promiscuous mode [ 94.540986][ T5942] ipvlan0: left promiscuous mode [ 94.914920][ T5950] block2mtd: illegal erase size [ 94.974535][ T5952] loop4: detected capacity change from 0 to 64 [ 95.046327][ T5938] loop0: detected capacity change from 0 to 32768 [ 95.118104][ T5934] loop3: detected capacity change from 0 to 40427 [ 95.142042][ T5934] F2FS-fs (loop3): invalid crc value [ 95.273950][ T5938] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.492009][ T5743] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.635586][ T5934] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 95.640379][ T5934] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 95.640410][ T5934] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 95.643070][ T5934] F2FS-fs (loop3): Start checkpoint disabled! [ 95.662759][ T5743] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 95.669534][ T5934] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 95.679204][ T5934] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 95.689690][ T5743] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 95.689718][ T5743] usb 3-1: config 1 has no interface number 0 [ 95.700949][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.700976][ T5743] usb 3-1: Product: syz [ 95.700990][ T5743] usb 3-1: Manufacturer: syz [ 95.701003][ T5743] usb 3-1: SerialNumber: syz [ 95.781808][ T5965] loop1: detected capacity change from 0 to 4096 [ 95.826069][ T5743] usb 3-1: 3:0 : does not exist [ 95.826096][ T5743] usb 3-1: 3:0 : does not exist [ 95.995748][ T5612] ocfs2: Unmounting device (7,0) on (node local) [ 96.037481][ T5965] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 96.156490][ T5965] ntfs3(loop1): Failed to load $Extend (-22). [ 96.156520][ T5965] ntfs3(loop1): Failed to initialize $Extend. [ 96.328377][ T52] kworker/u8:3: attempt to access beyond end of device [ 96.328377][ T52] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 96.355978][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 96.356010][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.356024][ T52] Workqueue: writeback wb_workfn (flush-7:3) [ 96.356056][ T52] Call Trace: [ 96.356064][ T52] [ 96.356073][ T52] dump_stack_lvl+0xe8/0x150 [ 96.356100][ T52] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 96.356129][ T52] f2fs_write_end_bio+0xda7/0x11c0 [ 96.356171][ T52] __submit_merged_bio+0x258/0x6a0 [ 96.356201][ T52] ? rcu_is_watching+0x16/0xb0 [ 96.356235][ T52] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 96.356262][ T52] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 96.356312][ T52] f2fs_write_data_pages+0x2a13/0x36e0 [ 96.356376][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.356414][ T52] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 96.356472][ T52] ? __lock_acquire+0x747/0x2de0 [ 96.356512][ T52] ? lock_acquire+0x115/0x350 [ 96.356552][ T52] ? unwind_next_frame+0x8f/0x2550 [ 96.356572][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.356594][ T52] do_writepages+0x338/0x560 [ 96.356618][ T52] ? __lock_acquire+0x747/0x2de0 [ 96.356642][ T52] ? reacquire_held_locks+0x117/0x1a0 [ 96.356661][ T52] ? writeback_sb_inodes+0x450/0x1af0 [ 96.356688][ T52] __writeback_single_inode+0x136/0x1220 [ 96.356711][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 96.356736][ T52] writeback_sb_inodes+0x9de/0x1af0 [ 96.356755][ T52] ? __lock_acquire+0x747/0x2de0 [ 96.356802][ T52] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.356870][ T52] ? rcu_is_watching+0x16/0xb0 [ 96.356890][ T52] ? queue_io+0x2d3/0x470 [ 96.356913][ T52] wb_writeback+0x41c/0xad0 [ 96.356936][ T52] ? queue_io+0x1e1/0x470 [ 96.356966][ T52] ? __pfx_wb_writeback+0x10/0x10 [ 96.356983][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.357022][ T52] wb_workfn+0x431/0x10f0 [ 96.357063][ T52] ? __pfx_wb_workfn+0x10/0x10 [ 96.357088][ T52] ? trace_hrtimer_start+0x82/0x200 [ 96.357115][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.357144][ T52] ? lock_acquire+0x115/0x350 [ 96.357174][ T52] ? rcu_is_watching+0x16/0xb0 [ 96.357204][ T52] ? process_scheduled_works+0x97a/0x1630 [ 96.357226][ T52] process_scheduled_works+0xc3d/0x1630 [ 96.357283][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.357311][ T52] ? assign_work+0x3cf/0x5d0 [ 96.357338][ T52] worker_thread+0xa47/0xfb0 [ 96.357389][ T52] kthread+0x38b/0x480 [ 96.357409][ T52] ? __pfx_worker_thread+0x10/0x10 [ 96.357425][ T52] ? __pfx_kthread+0x10/0x10 [ 96.357446][ T52] ret_from_fork+0x514/0xb70 [ 96.357470][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 96.357490][ T52] ? __switch_to+0xc78/0x1410 [ 96.357514][ T52] ? __pfx_kthread+0x10/0x10 [ 96.357534][ T52] ret_from_fork_asm+0x1a/0x30 [ 96.357573][ T52] [ 96.411992][ T52] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.412103][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 96.412125][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.412137][ T52] Workqueue: writeback wb_workfn (flush-7:3) [ 96.412168][ T52] Call Trace: [ 96.412176][ T52] [ 96.412184][ T52] dump_stack_lvl+0xe8/0x150 [ 96.412208][ T52] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 96.412235][ T52] f2fs_write_end_bio+0xda7/0x11c0 [ 96.412272][ T52] __submit_merged_bio+0x258/0x6a0 [ 96.412290][ T52] ? rcu_is_watching+0x16/0xb0 [ 96.412316][ T52] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 96.412339][ T52] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 96.412384][ T52] f2fs_write_data_pages+0x2a13/0x36e0 [ 96.412442][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.412476][ T52] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 96.412531][ T52] ? __lock_acquire+0x747/0x2de0 [ 96.412569][ T52] ? lock_acquire+0x115/0x350 [ 96.412615][ T52] ? unwind_next_frame+0x8f/0x2550 [ 96.412634][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.412662][ T52] do_writepages+0x338/0x560 [ 96.412684][ T52] ? __lock_acquire+0x747/0x2de0 [ 96.412707][ T52] ? reacquire_held_locks+0x117/0x1a0 [ 96.412725][ T52] ? writeback_sb_inodes+0x450/0x1af0 [ 96.412750][ T52] __writeback_single_inode+0x136/0x1220 [ 96.412772][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 96.412796][ T52] writeback_sb_inodes+0x9de/0x1af0 [ 96.412813][ T52] ? __lock_acquire+0x747/0x2de0 [ 96.412857][ T52] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.412921][ T52] ? rcu_is_watching+0x16/0xb0 [ 96.412940][ T52] ? queue_io+0x2d3/0x470 [ 96.412962][ T52] wb_writeback+0x41c/0xad0 [ 96.412984][ T52] ? queue_io+0x1e1/0x470 [ 96.413008][ T52] ? __pfx_wb_writeback+0x10/0x10 [ 96.413024][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.413059][ T52] wb_workfn+0x431/0x10f0 [ 96.413098][ T52] ? __pfx_wb_workfn+0x10/0x10 [ 96.413122][ T52] ? trace_hrtimer_start+0x82/0x200 [ 96.413147][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.413175][ T52] ? lock_acquire+0x115/0x350 [ 96.413203][ T52] ? rcu_is_watching+0x16/0xb0 [ 96.413224][ T52] ? process_scheduled_works+0x97a/0x1630 [ 96.413245][ T52] process_scheduled_works+0xc3d/0x1630 [ 96.413299][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.413326][ T52] ? assign_work+0x3cf/0x5d0 [ 96.413351][ T52] worker_thread+0xa47/0xfb0 [ 96.413404][ T52] kthread+0x38b/0x480 [ 96.413423][ T52] ? __pfx_worker_thread+0x10/0x10 [ 96.413440][ T52] ? __pfx_kthread+0x10/0x10 [ 96.413460][ T52] ret_from_fork+0x514/0xb70 [ 96.413482][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 96.413501][ T52] ? __switch_to+0xc78/0x1410 [ 96.413524][ T52] ? __pfx_kthread+0x10/0x10 [ 96.413543][ T52] ret_from_fork_asm+0x1a/0x30 [ 96.413580][ T52] [ 96.432441][ T52] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.624338][ T5794] loop3: lost filesystem error report for type 5 error -108 [ 96.666071][ T5794] loop3: lost filesystem error report for type 5 error -108 [ 97.044266][ T5743] usb 3-1: USB disconnect, device number 2 [ 97.312429][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.475513][ T5986] loop0: detected capacity change from 0 to 512 [ 97.619661][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.619825][ T5986] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.654917][ T5971] loop4: detected capacity change from 0 to 32768 [ 97.686263][ T5971] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.690315][ T5986] EXT4-fs warning (device loop0): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 97.753231][ T5971] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 97.773715][ T5971] XFS (loop4): Starting recovery (logdev: internal) [ 97.806069][ T5971] XFS (loop4): Ending recovery (logdev: internal) [ 97.864728][ T5971] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8 [ 97.864825][ T5971] XFS (loop4): Unmount and run xfs_repair [ 97.865545][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.976627][ T5611] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.988102][ T5611] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 98.374955][ T6009] loop0: detected capacity change from 0 to 4096 [ 98.378712][ T6009] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 98.427493][ T6009] ntfs3(loop0): Failed to initialize $Secure::$SDH (-22). [ 98.427617][ T6009] ntfs3(loop0): Failed to initialize $Secure (-22). [ 98.999650][ T6024] ima: policy update failed [ 99.007700][ T33] audit: type=1802 audit(1791460351.206:2): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.78" res=0 errno=-22 [ 99.205543][ T6009] loop0: detected capacity change from 0 to 32768 [ 99.217698][ T6009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.72 (6009) [ 99.256229][ T6009] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.256272][ T6009] BTRFS info (device loop0): using crc32c checksum algorithm [ 99.470423][ T6023] loop1: detected capacity change from 0 to 32768 [ 99.487953][ T6023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.77 (6023) [ 99.489583][ T6009] BTRFS info (device loop0): enabling ssd optimizations [ 99.489611][ T6009] BTRFS info (device loop0): turning on flush-on-commit [ 99.489626][ T6009] BTRFS info (device loop0): enabling free space tree [ 99.489642][ T6009] BTRFS info (device loop0): enabling auto defrag [ 99.489659][ T6009] BTRFS info (device loop0): use lzo compression, level 1 [ 99.489678][ T6009] BTRFS info (device loop0): max_inline set to 4096 [ 99.559634][ T6023] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.559683][ T6023] BTRFS info (device loop1): using sha256 checksum algorithm [ 99.594353][ T6016] loop4: detected capacity change from 0 to 32768 [ 99.595641][ T6016] BTRFS warning: excessive commit interval 3581, use with care [ 99.597896][ T6016] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 09d0b022-f6d0-419b-828a-4c3242f4aa48 [ 99.597961][ T6016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.70 (6016) [ 99.657298][ T6016] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.657335][ T6016] BTRFS info (device loop4): using crc32c checksum algorithm [ 99.837182][ T6023] BTRFS info (device loop1): rebuilding free space tree [ 99.844506][ T6016] BTRFS info (device loop4): enabling ssd optimizations [ 99.844532][ T6016] BTRFS info (device loop4): turning on flush-on-commit [ 99.844548][ T6016] BTRFS info (device loop4): enabling free space tree [ 99.844565][ T6016] BTRFS info (device loop4): force zlib compression, level 3 [ 99.844582][ T6016] BTRFS info (device loop4): max_inline set to 4096 [ 99.928498][ T5612] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.068351][ T6023] BTRFS info (device loop1): disabling free space tree [ 100.068448][ T6023] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.068472][ T6023] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.271451][ T6023] BTRFS info (device loop1): enabling ssd optimizations [ 100.271480][ T6023] BTRFS info (device loop1): turning on async discard [ 100.271495][ T6023] BTRFS info (device loop1): force clearing of disk cache [ 100.271510][ T6023] BTRFS info (device loop1): enabling auto defrag [ 100.271526][ T6023] BTRFS info (device loop1): max_inline set to 4096 [ 100.479713][ T6074] xt_hashlimit: size too large, truncated to 1048576 [ 100.628729][ T33] audit: type=1800 audit(1791460352.836:3): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.77" name="bus" dev="loop1" ino=263 res=0 errno=-22 [ 100.821899][ T6016] BTRFS info (device loop4 state M): max_inline set to 4096 [ 101.004304][ T5611] BTRFS info (device loop4): last unmount of filesystem 09d0b022-f6d0-419b-828a-4c3242f4aa48 [ 101.044747][ T5605] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.290285][ T6096] loop2: detected capacity change from 0 to 128 [ 101.618513][ T6094] loop0: detected capacity change from 0 to 32768 [ 101.666857][ T6094] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.666901][ T6094] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 101.840680][ T6094] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 101.859979][ T5721] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 101.860002][ T5721] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.300224][ T5721] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 440ms [ 102.377840][ T5721] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.378493][ T6094] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.560766][ T6113] loop1: detected capacity change from 0 to 128 [ 102.711860][ T6113] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.712196][ T6113] hpfs: filesystem error: improperly stopped [ 102.712214][ T6113] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.712228][ T6113] hpfs: You really don't want any checks? You are crazy... [ 102.743412][ T6113] hpfs: hpfs_map_sector(): read error [ 102.743451][ T6113] hpfs: code page support is disabled [ 102.744187][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 102.744322][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 102.744331][ T6113] hpfs: filesystem error: unable to find root dir [ 102.830071][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 103.517331][ T6123] loop1: detected capacity change from 0 to 512 [ 103.529535][ T6121] loop4: detected capacity change from 0 to 4096 [ 103.540654][ T6123] EXT4-fs: Ignoring removed i_version option [ 103.540791][ T6123] EXT4-fs: Ignoring removed oldalloc option [ 103.587095][ T6123] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.600948][ T6121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.684021][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.737182][ T6121] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.826367][ T6123] EXT4-fs: Ignoring removed nobh option [ 103.826414][ T6123] EXT4-fs: Ignoring sb option on remount [ 103.826552][ T6123] EXT4-fs: Ignoring removed oldalloc option [ 103.828735][ T6123] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 103.974997][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.003327][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.229752][ T6141] loop3: detected capacity change from 0 to 256 [ 104.584001][ T6128] loop0: detected capacity change from 0 to 40427 [ 104.613276][ T6128] F2FS-fs (loop0): invalid crc value [ 104.778699][ T6152] loop4: detected capacity change from 0 to 64 [ 104.888374][ T6128] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 104.901940][ T6128] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 104.901973][ T6128] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 104.901999][ T6128] F2FS-fs (loop0): Start checkpoint disabled! [ 104.938749][ T6128] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 104.950323][ T6128] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 105.123424][ T33] audit: type=1804 audit(1791460357.336:4): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.97" name="/newroot/19/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 105.209690][ T6156] batman_adv: batadv0: Adding interface: netdevsim0 [ 105.209711][ T6156] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.209744][ T6156] batman_adv: batadv0: Interface activated: netdevsim0 [ 105.316077][ T63] kworker/u8:4: attempt to access beyond end of device [ 105.316077][ T63] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.316175][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 105.316198][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.316210][ T63] Workqueue: writeback wb_workfn (flush-7:0) [ 105.316242][ T63] Call Trace: [ 105.316251][ T63] [ 105.316259][ T63] dump_stack_lvl+0xe8/0x150 [ 105.316285][ T63] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 105.316314][ T63] f2fs_write_end_bio+0xda7/0x11c0 [ 105.316354][ T63] __submit_merged_bio+0x258/0x6a0 [ 105.316373][ T63] ? rcu_is_watching+0x16/0xb0 [ 105.316400][ T63] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 105.316433][ T63] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 105.316482][ T63] f2fs_write_data_pages+0x2a13/0x36e0 [ 105.316544][ T63] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.316563][ T63] ? ktime_get+0x45/0x220 [ 105.316661][ T63] ? __lock_acquire+0x747/0x2de0 [ 105.316707][ T63] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.316729][ T63] do_writepages+0x338/0x560 [ 105.316753][ T63] ? __lock_acquire+0x747/0x2de0 [ 105.316776][ T63] ? reacquire_held_locks+0x117/0x1a0 [ 105.316795][ T63] ? writeback_sb_inodes+0x450/0x1af0 [ 105.316821][ T63] __writeback_single_inode+0x136/0x1220 [ 105.316845][ T63] ? do_raw_spin_unlock+0xf5/0x200 [ 105.316870][ T63] writeback_sb_inodes+0x9de/0x1af0 [ 105.316889][ T63] ? __lock_acquire+0x747/0x2de0 [ 105.316937][ T63] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 105.317007][ T63] ? rcu_is_watching+0x16/0xb0 [ 105.317027][ T63] ? queue_io+0x2d3/0x470 [ 105.317050][ T63] wb_writeback+0x41c/0xad0 [ 105.317073][ T63] ? queue_io+0x1e1/0x470 [ 105.317099][ T63] ? __pfx_wb_writeback+0x10/0x10 [ 105.317158][ T63] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.317198][ T63] wb_workfn+0x431/0x10f0 [ 105.317239][ T63] ? __pfx_wb_workfn+0x10/0x10 [ 105.317263][ T63] ? trace_hrtimer_start+0x82/0x200 [ 105.317289][ T63] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.317319][ T63] ? lock_acquire+0x115/0x350 [ 105.317349][ T63] ? rcu_is_watching+0x16/0xb0 [ 105.317374][ T63] ? process_scheduled_works+0x97a/0x1630 [ 105.317396][ T63] process_scheduled_works+0xc3d/0x1630 [ 105.317453][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.317482][ T63] ? assign_work+0x3cf/0x5d0 [ 105.317509][ T63] worker_thread+0xa47/0xfb0 [ 105.317561][ T63] kthread+0x38b/0x480 [ 105.317580][ T63] ? __pfx_worker_thread+0x10/0x10 [ 105.317597][ T63] ? __pfx_kthread+0x10/0x10 [ 105.317617][ T63] ret_from_fork+0x514/0xb70 [ 105.317641][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 105.317661][ T63] ? __switch_to+0xc78/0x1410 [ 105.317685][ T63] ? __pfx_kthread+0x10/0x10 [ 105.317705][ T63] ret_from_fork_asm+0x1a/0x30 [ 105.317744][ T63] [ 105.328986][ T63] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.862156][ T6169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.466442][ T6192] loop0: detected capacity change from 0 to 512 [ 106.506073][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.628099][ T6198] loop4: detected capacity change from 0 to 2048 [ 106.747030][ T6201] syz_tun: entered promiscuous mode [ 106.751445][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.768513][ T6201] macvtap1: entered promiscuous mode [ 106.770519][ T6201] macvtap1: entered allmulticast mode [ 106.770542][ T6201] syz_tun: entered allmulticast mode [ 106.829366][ T6201] syz_tun: left allmulticast mode [ 106.829625][ T6201] syz_tun: left promiscuous mode [ 106.930752][ T6203] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.270270][ T6209] loop4: detected capacity change from 0 to 1024 [ 107.273309][ T6209] EXT4-fs: Ignoring removed orlov option [ 107.333343][ T6209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.355933][ T6215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.407925][ T6216] EXT4-fs error (device loop4): ext4_lookup:1787: inode #16: comm syz.4.133: unexpected EA_INODE flag [ 107.444393][ T6180] loop3: detected capacity change from 0 to 40427 [ 107.463135][ T6180] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 107.463167][ T6180] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 107.527453][ T6180] F2FS-fs (loop3): invalid crc value [ 107.563539][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.811584][ T6180] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 107.864441][ T6180] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 107.864479][ T6180] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.898718][ T6228] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.972794][ T6230] loop2: detected capacity change from 0 to 256 [ 108.046675][ T6230] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 108.207549][ T5609] syz-executor: attempt to access beyond end of device [ 108.207549][ T5609] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.243440][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 108.243470][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.243480][ T5609] Call Trace: [ 108.243487][ T5609] [ 108.243495][ T5609] dump_stack_lvl+0xe8/0x150 [ 108.243523][ T5609] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 108.243561][ T5609] f2fs_write_end_bio+0xda7/0x11c0 [ 108.243596][ T5609] __submit_merged_bio+0x258/0x6a0 [ 108.243612][ T5609] ? rcu_is_watching+0x16/0xb0 [ 108.243635][ T5609] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 108.243658][ T5609] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 108.243700][ T5609] f2fs_write_data_pages+0x2a13/0x36e0 [ 108.243756][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.243787][ T5609] ? is_bpf_text_address+0x292/0x2b0 [ 108.243804][ T5609] ? is_bpf_text_address+0x26/0x2b0 [ 108.243855][ T5609] ? stack_trace_save+0xa9/0x100 [ 108.243875][ T5609] ? __pfx_stack_trace_save+0x10/0x10 [ 108.243916][ T5609] ? lockdep_unlock+0x5c/0xd0 [ 108.243935][ T5609] ? __lock_acquire+0x1511/0x2de0 [ 108.243988][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.244011][ T5609] do_writepages+0x338/0x560 [ 108.244044][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 108.244070][ T5609] filemap_fdatawrite+0x1e9/0x2f0 [ 108.244096][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 108.244170][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 108.244196][ T5609] f2fs_sync_dirty_inodes+0x471/0x970 [ 108.244238][ T5609] f2fs_write_checkpoint+0x860/0x24d0 [ 108.244302][ T5609] kill_f2fs_super+0x2dc/0x700 [ 108.244325][ T5609] ? rcu_do_enqueue+0x616/0x870 [ 108.244341][ T5609] ? lockdep_hardirqs_on+0x7b/0x110 [ 108.244357][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 108.244390][ T5609] ? __pfx_call_rcu+0x10/0x10 [ 108.244412][ T5609] ? shrinker_free+0x2a7/0x3b0 [ 108.244433][ T5609] deactivate_locked_super+0xbe/0x110 [ 108.244453][ T5609] cleanup_mnt+0x204/0x2a0 [ 108.244476][ T5609] task_work_run+0x1d9/0x260 [ 108.244498][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 108.244526][ T5609] exit_to_user_mode_loop+0x204/0x770 [ 108.244555][ T5609] ? rcu_is_watching+0x16/0xb0 [ 108.244577][ T5609] do_syscall_64+0x328/0x520 [ 108.244600][ T5609] ? trace_irq_disable+0x3b/0x140 [ 108.244616][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.244634][ T5609] ? clear_bhb_loop+0x70/0xc0 [ 108.244653][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.244671][ T5609] RIP: 0033:0x7fc3e9b9f3d7 [ 108.244688][ T5609] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.244703][ T5609] RSP: 002b:00007ffe58f7c198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.244724][ T5609] RAX: 0000000000000000 RBX: 00007fc3e9c34ccb RCX: 00007fc3e9b9f3d7 [ 108.244737][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe58f7c250 [ 108.244747][ T5609] RBP: 00007ffe58f7c250 R08: 00007ffe58f7d250 R09: 00000000ffffffff [ 108.244758][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe58f7d2e0 [ 108.244769][ T5609] R13: 00007fc3e9c34ccb R14: 000000000001a5e8 R15: 00007ffe58f7d320 [ 108.244800][ T5609] [ 108.244825][ T5609] F2FS-fs (loop3): Remounting filesystem read-only [ 108.593045][ T6238] loop4: detected capacity change from 0 to 164 [ 108.656190][ T6238] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 108.740355][ T6238] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 109.508439][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'. [ 109.508479][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 109.552384][ T5743] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.631139][ T6266] Zero length message leads to an empty skb [ 109.703700][ T5743] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 109.705283][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.705467][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.748693][ T5743] usb 2-1: config 0 descriptor?? [ 109.829556][ T6256] loop2: detected capacity change from 0 to 32768 [ 109.905632][ T6256] JBD2: Ignoring recovery information on journal [ 109.925981][ T6256] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 109.947835][ T6256] JBD2: bad block at offset 32 [ 109.993309][ T6256] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.088382][ T6256] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 110.088450][ T6256] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 110.088461][ T6256] OCFS2: File system is now read-only. [ 110.088471][ T6256] (syz.2.152,6256,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 110.088523][ T6256] (syz.2.152,6256,1):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 110.088545][ T6256] (syz.2.152,6256,1):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 110.088567][ T6256] (syz.2.152,6256,1):ocfs2_block_group_alloc_contig:553 ERROR: status = -30 [ 110.088589][ T6256] (syz.2.152,6256,1):ocfs2_block_group_alloc:827 ERROR: status = -30 [ 110.088711][ T6256] (syz.2.152,6256,1):ocfs2_block_group_alloc:880 ERROR: status = -30 [ 110.088733][ T6256] (syz.2.152,6256,1):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30 [ 110.088755][ T6256] (syz.2.152,6256,1):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 110.088773][ T6256] (syz.2.152,6256,1):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30 [ 110.088841][ T6256] (syz.2.152,6256,1):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30 [ 110.088861][ T6256] (syz.2.152,6256,1):ocfs2_expand_inline_dir:2985 ERROR: status = -30 [ 110.088883][ T6256] (syz.2.152,6256,1):ocfs2_extend_dir:3349 ERROR: status = -30 [ 110.088903][ T6256] (syz.2.152,6256,1):ocfs2_prepare_dir_for_insert:4467 ERROR: status = -30 [ 110.088925][ T6256] (syz.2.152,6256,1):ocfs2_symlink:1881 ERROR: status = -30 [ 110.088978][ T6256] (syz.2.152,6256,1):ocfs2_symlink:2082 ERROR: status = -30 [ 110.315729][ T5617] ocfs2: Unmounting device (7,2) on (node local) [ 110.355554][ T6286] loop4: detected capacity change from 0 to 2048 [ 110.403626][ T6288] loop0: detected capacity change from 0 to 1024 [ 110.408055][ T5743] ath6kl: mismatched byte count 0 vs. expected 12 [ 110.454748][ T33] audit: type=1400 audit(1791460362.656:5): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6289 comm="syz.2.166" [ 110.474334][ T5743] ath6kl: Failed to init ath6kl core: -22 [ 110.474953][ T5743] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 110.478474][ T6286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.499299][ T6288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.598191][ T6286] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 110.657856][ T5794] usb 2-1: USB disconnect, device number 2 [ 110.664587][ T6286] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 110.815753][ T6295] loop2: detected capacity change from 0 to 512 [ 110.823730][ T6295] EXT4-fs: Ignoring removed nobh option [ 110.828472][ T6295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.828493][ T6295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.893356][ T6295] EXT4-fs (loop2): 1 truncate cleaned up [ 110.912280][ T6295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.959067][ T33] audit: type=1800 audit(1791460363.166:6): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.168" name="file2" dev="loop2" ino=16 res=0 errno=-22 [ 111.021196][ T33] audit: type=1804 audit(1791460363.226:7): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.168" name="/newroot/33/file2/file2" dev="loop2" ino=16 res=1 errno=0 [ 111.209442][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.355668][ T6297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.169 (6297) [ 111.419497][ T6297] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.419543][ T6297] BTRFS info (device loop3): using sha256 checksum algorithm [ 111.518705][ T6318] set_capacity_and_notify: 1 callbacks suppressed [ 111.518727][ T6318] loop1: detected capacity change from 0 to 256 [ 111.630842][ T6297] BTRFS info (device loop3): setting nodatasum [ 111.630872][ T6297] BTRFS info (device loop3): enabling ssd optimizations [ 111.630889][ T6297] BTRFS info (device loop3): using spread ssd allocation scheme [ 111.630907][ T6297] BTRFS info (device loop3): turning on flush-on-commit [ 111.630924][ T6297] BTRFS info (device loop3): turning on async discard [ 111.630940][ T6297] BTRFS info (device loop3): enabling free space tree [ 111.630956][ T6297] BTRFS info (device loop3): enabling auto defrag [ 111.630982][ T6297] BTRFS info (device loop3): max_inline set to 0 [ 111.647897][ T6324] loop2: detected capacity change from 0 to 4096 [ 111.652790][ T6318] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 111.652817][ T6318] FAT-fs (loop1): Filesystem has been set read-only [ 111.734834][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.833436][ T5609] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.100555][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.351442][ T5721] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.378292][ T6343] loop2: detected capacity change from 0 to 256 [ 112.398042][ T6343] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.462641][ T5743] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.502085][ T5721] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 112.504586][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.504638][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.507477][ T5721] usb 4-1: config 0 descriptor?? [ 112.577324][ T6345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.631358][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 112.635481][ T5743] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 112.638359][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.638395][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.638436][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.716580][ T5743] usb 5-1: config 0 descriptor?? [ 112.741982][ T5743] hub 5-1:0.0: USB hub found [ 112.876586][ T63] IPVS: starting estimator thread 0... [ 112.958007][ T5743] hub 5-1:0.0: 1 port detected [ 112.959452][ T5721] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 112.967269][ T6349] IPVS: using max 26 ests per chain, 62400 per kthread [ 113.006079][ T5721] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input5 [ 113.051755][ T6353] capability: warning: `syz.1.185' uses 32-bit capabilities (legacy support in use) [ 113.056979][ T6353] program syz.1.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.192406][ T5743] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 113.261767][ T5743] usbhid 5-1:0.0: can't add hid device: -71 [ 113.261875][ T5743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.319746][ T5743] usb 5-1: USB disconnect, device number 2 [ 113.336268][ T5721] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 113.418861][ T5721] usb 4-1: USB disconnect, device number 3 [ 113.545720][ T6359] loop0: detected capacity change from 0 to 64 [ 113.700446][ T6359] hfs: request for non-existent node 131072 in B*Tree [ 113.700469][ T6359] hfs: request for non-existent node 131072 in B*Tree [ 113.736597][ T6360] fido_id[6360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 113.911491][ T5742] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.008948][ T6368] tun0: tun_chr_ioctl cmd 1074025677 [ 114.009066][ T6368] tun0: linktype set to 773 [ 114.081400][ T5742] usb 3-1: not running at top speed; connect to a high speed hub [ 114.081444][ T5742] usb 3-1: New USB device found: idVendor=18b1, idProduct=0037, bcdDevice=1.00 [ 114.084219][ T5742] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.084297][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.187465][ T5613] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.235859][ T6377] loop3: detected capacity change from 0 to 256 [ 114.249243][ T6378] i2c i2c-0: delete_device: Can't find device in list [ 114.324482][ T6380] loop4: detected capacity change from 0 to 1024 [ 114.328923][ T6380] EXT4-fs: Ignoring removed bh option [ 114.350230][ T6380] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 114.362457][ T5613] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 114.362502][ T5613] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 114.373095][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.373122][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.381870][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.381898][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.383919][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.383954][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.385395][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.385417][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.392794][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.392820][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.399630][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.399660][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.402867][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.402893][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.414310][ T5613] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.414337][ T5613] usb 2-1: config 1 has no interface number 0 [ 114.421625][ T5613] usb 2-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 114.421655][ T5613] usb 2-1: Product: syz [ 114.421669][ T5613] usb 2-1: Manufacturer: syz [ 114.421683][ T5613] usb 2-1: SerialNumber: syz [ 114.472973][ T5613] usb 2-1: 3:0 : does not exist [ 114.472998][ T5613] usb 2-1: 3:0 : does not exist [ 114.487365][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.640011][ T6380] EXT4-fs error (device loop4): ext4_check_all_de:675: inode #12: block 7: comm syz.4.197: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=76 fake=0 [ 114.662132][ T5742] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 114.662192][ T5742] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 114.662216][ T5742] petalynx 0003:18B1:0037.0003: unexpected long global item [ 114.673494][ T5742] petalynx 0003:18B1:0037.0003: parse failed [ 114.673580][ T5742] petalynx 0003:18B1:0037.0003: probe with driver petalynx failed with error -22 [ 114.698853][ T6380] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 114.872601][ T6390] loop3: detected capacity change from 0 to 164 [ 114.875980][ T5742] usb 3-1: USB disconnect, device number 3 [ 114.915632][ T5613] usb 2-1: USB disconnect, device number 3 [ 114.980619][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.320440][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.472639][ T5743] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.619207][ T6403] loop3: detected capacity change from 0 to 1024 [ 115.620361][ T6403] EXT4-fs: Ignoring removed bh option [ 115.621256][ T5743] usb 5-1: Using ep0 maxpacket: 8 [ 115.642862][ T5743] usb 5-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 115.657907][ T5743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.657937][ T5743] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.657982][ T5743] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.658027][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.716099][ T5743] hub 5-1:1.0: bad descriptor, ignoring hub [ 115.716132][ T5743] hub 5-1:1.0: probe with driver hub failed with error -5 [ 115.730446][ T6403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.770041][ T6404] loop1: detected capacity change from 0 to 2048 [ 115.780854][ T5743] cdc_wdm 5-1:1.0: skipping garbage [ 115.780878][ T5743] cdc_wdm 5-1:1.0: skipping garbage [ 115.810018][ T5743] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 115.810046][ T5743] cdc_wdm 5-1:1.0: Unknown control protocol [ 115.877165][ T6403] EXT4-fs error (device loop3): __ext4_remount:6872: comm syz.3.205: Abort forced by user [ 115.950754][ T6403] EXT4-fs (loop3): Remounting filesystem read-only [ 115.950783][ T6403] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.035170][ T6413] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.057807][ T6415] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.134221][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.167749][ T5794] usb 5-1: USB disconnect, device number 3 [ 116.401650][ T947] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.572971][ T947] usb 1-1: Using ep0 maxpacket: 8 [ 116.575433][ T947] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.576902][ T947] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 116.576960][ T947] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.576982][ T947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.577004][ T947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.577027][ T947] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.577069][ T947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.661252][ T5794] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.718104][ T6430] WARNING! power/level is deprecated; use power/control instead [ 116.799454][ T6434] loop2: detected capacity change from 0 to 24 [ 116.800631][ T6434] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 116.812454][ T5794] usb 5-1: Using ep0 maxpacket: 8 [ 116.830658][ T5794] usb 5-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 116.833806][ T5794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.833831][ T5794] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.833902][ T5794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.833942][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.849552][ T6434] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 116.863250][ T947] usb 1-1: GET_CAPABILITIES returned 0 [ 116.863301][ T947] usbtmc 1-1:16.0: can't read capabilities [ 116.871553][ T5794] hub 5-1:1.0: bad descriptor, ignoring hub [ 116.873371][ T5794] hub 5-1:1.0: probe with driver hub failed with error -5 [ 116.873913][ T5794] cdc_wdm 5-1:1.0: skipping garbage [ 116.873926][ T5794] cdc_wdm 5-1:1.0: skipping garbage [ 116.894512][ T5794] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 116.894535][ T5794] cdc_wdm 5-1:1.0: Unknown control protocol [ 116.950626][ T6436] netlink: 'syz.1.215': attribute type 12 has an invalid length. [ 116.950653][ T6436] netlink: 'syz.1.215': attribute type 29 has an invalid length. [ 116.950669][ T6436] netlink: 148 bytes leftover after parsing attributes in process `syz.1.215'. [ 117.043123][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.089598][ T6439] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 117.089623][ T6439] syzkaller1: ignored: set checksum enabled [ 117.121568][ T5743] usb 1-1: USB disconnect, device number 2 [ 117.191915][ T10] usb 4-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 117.193618][ T10] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 117.204291][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.204320][ T10] usb 4-1: Product: syz [ 117.204334][ T10] usb 4-1: Manufacturer: syz [ 117.204347][ T10] usb 4-1: SerialNumber: syz [ 117.234444][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 117.234767][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 117.242815][ T5794] usb 5-1: USB disconnect, device number 4 [ 117.306346][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.315843][ T10] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 117.315901][ T10] usb 4-1: media controller created [ 117.408745][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.437722][ T6432] dvb-usb: bulk message failed: -22 (11/0) [ 117.589071][ T10] DVB: Unable to find symbol mt352_attach() [ 117.589091][ T10] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 117.590491][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 117.601839][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 117.620491][ T10] usb 4-1: USB disconnect, device number 4 [ 117.954303][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 118.084879][ T6445] loop1: detected capacity change from 0 to 40427 [ 118.113281][ T6445] F2FS-fs (loop1): invalid crc value [ 118.116975][ T6458] loop4: detected capacity change from 0 to 2048 [ 118.219047][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.302274][ T6445] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 118.305271][ T6445] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 118.305298][ T6445] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 118.305321][ T6445] F2FS-fs (loop1): Start checkpoint disabled! [ 118.319527][ T6445] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 118.357623][ T6445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 118.524294][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.645977][ T12] kworker/u8:0: attempt to access beyond end of device [ 118.645977][ T12] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 118.646069][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 118.646093][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.646106][ T12] Workqueue: writeback wb_workfn (flush-7:1) [ 118.646138][ T12] Call Trace: [ 118.646147][ T12] [ 118.646156][ T12] dump_stack_lvl+0xe8/0x150 [ 118.646185][ T12] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 118.646226][ T12] f2fs_write_end_bio+0xda7/0x11c0 [ 118.646270][ T12] __submit_merged_bio+0x258/0x6a0 [ 118.646291][ T12] ? rcu_is_watching+0x16/0xb0 [ 118.646321][ T12] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 118.646346][ T12] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 118.646412][ T12] f2fs_write_data_pages+0x2a13/0x36e0 [ 118.646488][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 118.646535][ T12] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 118.646630][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.646681][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 118.646705][ T12] do_writepages+0x338/0x560 [ 118.646731][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.646757][ T12] ? reacquire_held_locks+0x117/0x1a0 [ 118.646778][ T12] ? writeback_sb_inodes+0x450/0x1af0 [ 118.646806][ T12] __writeback_single_inode+0x136/0x1220 [ 118.646832][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 118.646860][ T12] writeback_sb_inodes+0x9de/0x1af0 [ 118.646887][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.646916][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.646941][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.646964][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 118.647030][ T12] ? rcu_is_watching+0x16/0xb0 [ 118.647051][ T12] ? queue_io+0x2d3/0x470 [ 118.647076][ T12] wb_writeback+0x41c/0xad0 [ 118.647101][ T12] ? queue_io+0x1e1/0x470 [ 118.647130][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 118.647148][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.647201][ T12] wb_workfn+0x431/0x10f0 [ 118.647245][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 118.647271][ T12] ? trace_hrtimer_start+0x82/0x200 [ 118.647300][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.647335][ T12] ? lock_acquire+0x115/0x350 [ 118.647369][ T12] ? rcu_is_watching+0x16/0xb0 [ 118.647392][ T12] ? process_scheduled_works+0x97a/0x1630 [ 118.647425][ T12] process_scheduled_works+0xc3d/0x1630 [ 118.647492][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.647525][ T12] ? assign_work+0x3cf/0x5d0 [ 118.647555][ T12] worker_thread+0xa47/0xfb0 [ 118.647615][ T12] kthread+0x38b/0x480 [ 118.647636][ T12] ? __pfx_worker_thread+0x10/0x10 [ 118.647653][ T12] ? __pfx_kthread+0x10/0x10 [ 118.647677][ T12] ret_from_fork+0x514/0xb70 [ 118.647704][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 118.647727][ T12] ? __switch_to+0xc78/0x1410 [ 118.647754][ T12] ? __pfx_kthread+0x10/0x10 [ 118.647777][ T12] ret_from_fork_asm+0x1a/0x30 [ 118.647822][ T12] [ 118.654715][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 118.654803][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 118.654825][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.654837][ T12] Workqueue: writeback wb_workfn (flush-7:1) [ 118.654866][ T12] Call Trace: [ 118.654874][ T12] [ 118.654882][ T12] dump_stack_lvl+0xe8/0x150 [ 118.654907][ T12] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 118.654935][ T12] f2fs_write_end_bio+0xda7/0x11c0 [ 118.654975][ T12] __submit_merged_bio+0x258/0x6a0 [ 118.654994][ T12] ? rcu_is_watching+0x16/0xb0 [ 118.655019][ T12] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 118.655043][ T12] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 118.655092][ T12] f2fs_write_data_pages+0x2a13/0x36e0 [ 118.655163][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 118.655200][ T12] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 118.655284][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.655329][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 118.655350][ T12] do_writepages+0x338/0x560 [ 118.655373][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.655396][ T12] ? reacquire_held_locks+0x117/0x1a0 [ 118.655415][ T12] ? writeback_sb_inodes+0x450/0x1af0 [ 118.655441][ T12] __writeback_single_inode+0x136/0x1220 [ 118.655464][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 118.655496][ T12] writeback_sb_inodes+0x9de/0x1af0 [ 118.655514][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.655539][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.655565][ T12] ? __lock_acquire+0x747/0x2de0 [ 118.655591][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 118.655660][ T12] ? rcu_is_watching+0x16/0xb0 [ 118.655679][ T12] ? queue_io+0x2d3/0x470 [ 118.655702][ T12] wb_writeback+0x41c/0xad0 [ 118.655728][ T12] ? queue_io+0x1e1/0x470 [ 118.655754][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 118.655770][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.655808][ T12] wb_workfn+0x431/0x10f0 [ 118.655850][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 118.655876][ T12] ? trace_hrtimer_start+0x82/0x200 [ 118.655902][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.655931][ T12] ? lock_acquire+0x115/0x350 [ 118.655960][ T12] ? rcu_is_watching+0x16/0xb0 [ 118.655981][ T12] ? process_scheduled_works+0x97a/0x1630 [ 118.656003][ T12] process_scheduled_works+0xc3d/0x1630 [ 118.656060][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.656088][ T12] ? assign_work+0x3cf/0x5d0 [ 118.656115][ T12] worker_thread+0xa47/0xfb0 [ 118.656166][ T12] kthread+0x38b/0x480 [ 118.656187][ T12] ? __pfx_worker_thread+0x10/0x10 [ 118.656203][ T12] ? __pfx_kthread+0x10/0x10 [ 118.656224][ T12] ret_from_fork+0x514/0xb70 [ 118.656249][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 118.656268][ T12] ? __switch_to+0xc78/0x1410 [ 118.656292][ T12] ? __pfx_kthread+0x10/0x10 [ 118.656312][ T12] ret_from_fork_asm+0x1a/0x30 [ 118.656352][ T12] [ 118.668542][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 119.516479][ T6463] loop0: detected capacity change from 0 to 32768 [ 119.582113][ T6463] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.679602][ T6463] XFS (loop0): Ending clean mount [ 119.770333][ T6463] XFS (loop0): Quotacheck needed: Please wait. [ 120.077923][ T6463] XFS (loop0): Quotacheck: Done. [ 120.214763][ T5612] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.359385][ T6499] loop1: detected capacity change from 0 to 16 [ 120.498771][ T6499] erofs (device loop1): mounted with root inode @ nid 36. [ 120.769796][ T6503] process 'syz.1.239' launched './file0' with NULL argv: empty string added [ 120.929347][ T6508] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 121.016049][ T6495] loop4: detected capacity change from 0 to 32768 [ 121.079992][ T6495] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.180747][ T6495] XFS (loop4): Ending clean mount [ 121.229088][ T6495] XFS (loop4): Quotacheck needed: Please wait. [ 121.438160][ T6495] XFS (loop4): Quotacheck: Done. [ 121.584345][ T5611] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.712443][ T5613] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.861180][ T5613] usb 2-1: Using ep0 maxpacket: 32 [ 121.862041][ T5613] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 121.863581][ T5613] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.863685][ T5613] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.863711][ T5613] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.868431][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.868461][ T5613] usb 2-1: Product: syz [ 121.868476][ T5613] usb 2-1: Manufacturer: syz [ 121.868491][ T5613] usb 2-1: SerialNumber: syz [ 121.901770][ T5613] usb 2-1: config 0 descriptor?? [ 122.090736][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 122.090772][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 122.352266][ T5613] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 122.397460][ T6533] loop4: detected capacity change from 0 to 128 [ 122.455299][ T6528] loop2: detected capacity change from 0 to 40427 [ 122.459179][ T6528] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 122.459211][ T6528] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.485335][ T6533] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 122.485374][ T6533] hpfs: filesystem error: improperly stopped [ 122.485389][ T6533] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 122.485404][ T6533] hpfs: You really don't want any checks? You are crazy... [ 122.485424][ T6533] hpfs: Code page index out of array [ 122.485432][ T6533] hpfs: code page support is disabled [ 122.485545][ T6533] hpfs: hpfs_map_4sectors(): unaligned read [ 122.485632][ T6533] hpfs: hpfs_map_4sectors(): unaligned read [ 122.485642][ T6533] hpfs: filesystem error: unable to find root dir [ 122.585131][ T6523] loop3: detected capacity change from 0 to 40427 [ 122.600465][ T6523] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 122.600494][ T6523] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 122.623415][ T6523] F2FS-fs (loop3): build fault injection rate: 771 [ 122.630513][ T6523] F2FS-fs (loop3): invalid crc value [ 122.792242][ T5613] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 122.795929][ T5613] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 122.831859][ T6523] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.867547][ T5613] usb 2-1: USB disconnect, device number 4 [ 122.892846][ T6528] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.915820][ T6523] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 122.915852][ T6523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.929062][ T6528] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.929104][ T6528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.961458][ T6545] netlink: 'syz.4.250': attribute type 15 has an invalid length. [ 122.982649][ T6545] netlink: 'syz.4.250': attribute type 15 has an invalid length. [ 123.035364][ T33] audit: type=1800 audit(1791460375.246:8): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.246" name="bus" dev="loop2" ino=10 res=0 errno=-22 [ 123.105012][ T5617] syz-executor: attempt to access beyond end of device [ 123.105012][ T5617] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.106394][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 123.106425][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.106438][ T5617] Call Trace: [ 123.106446][ T5617] [ 123.106455][ T5617] dump_stack_lvl+0xe8/0x150 [ 123.106484][ T5617] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 123.106524][ T5617] f2fs_write_end_bio+0xda7/0x11c0 [ 123.106567][ T5617] __submit_merged_bio+0x258/0x6a0 [ 123.106587][ T5617] ? rcu_is_watching+0x16/0xb0 [ 123.106613][ T5617] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 123.106637][ T5617] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 123.106684][ T5617] f2fs_write_data_pages+0x2a13/0x36e0 [ 123.106748][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 123.106766][ T5617] ? is_bpf_text_address+0x26/0x2b0 [ 123.106797][ T5617] ? arch_stack_walk+0xfb/0x150 [ 123.106849][ T5617] ? add_lock_to_list+0xc7/0x100 [ 123.106872][ T5617] ? lockdep_unlock+0x5c/0xd0 [ 123.106889][ T5617] ? __lock_acquire+0x1511/0x2de0 [ 123.106940][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 123.106971][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 123.106991][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 123.107012][ T5617] do_writepages+0x338/0x560 [ 123.107046][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 123.107072][ T5617] filemap_fdatawrite+0x1e9/0x2f0 [ 123.107097][ T5617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 123.107169][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 123.107194][ T5617] f2fs_sync_dirty_inodes+0x471/0x970 [ 123.107232][ T5617] f2fs_write_checkpoint+0x860/0x24d0 [ 123.107299][ T5617] kill_f2fs_super+0x2dc/0x700 [ 123.107324][ T5617] ? rcu_do_enqueue+0x616/0x870 [ 123.107343][ T5617] ? lockdep_hardirqs_on+0x7b/0x110 [ 123.107363][ T5617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 123.107398][ T5617] ? __pfx_call_rcu+0x10/0x10 [ 123.107424][ T5617] ? shrinker_free+0x2a7/0x3b0 [ 123.107446][ T5617] deactivate_locked_super+0xbe/0x110 [ 123.107471][ T5617] cleanup_mnt+0x204/0x2a0 [ 123.107495][ T5617] task_work_run+0x1d9/0x260 [ 123.107529][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 123.107562][ T5617] exit_to_user_mode_loop+0x204/0x770 [ 123.107583][ T5617] ? rcu_is_watching+0x16/0xb0 [ 123.107605][ T5617] do_syscall_64+0x328/0x520 [ 123.107624][ T5617] ? trace_irq_disable+0x3b/0x140 [ 123.107641][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.107662][ T5617] ? clear_bhb_loop+0x70/0xc0 [ 123.107684][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.107703][ T5617] RIP: 0033:0x7f01f159f3d7 [ 123.107724][ T5617] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 123.107740][ T5617] RSP: 002b:00007ffde6728ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 123.107778][ T5617] RAX: 0000000000000000 RBX: 00007f01f1634ccb RCX: 00007f01f159f3d7 [ 123.107793][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde6728d60 [ 123.107806][ T5617] RBP: 00007ffde6728d60 R08: 00007ffde6729d60 R09: 00000000ffffffff [ 123.107821][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde6729df0 [ 123.107834][ T5617] R13: 00007f01f1634ccb R14: 000000000001e06a R15: 00007ffde6729e30 [ 123.107867][ T5617] [ 123.147461][ T5617] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.390468][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 123.501548][ T5609] syz-executor: attempt to access beyond end of device [ 123.501548][ T5609] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.505294][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 123.505326][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.505338][ T5609] Call Trace: [ 123.505347][ T5609] [ 123.505356][ T5609] dump_stack_lvl+0xe8/0x150 [ 123.505388][ T5609] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 123.505416][ T5609] f2fs_write_end_bio+0xda7/0x11c0 [ 123.505456][ T5609] __submit_merged_bio+0x258/0x6a0 [ 123.505479][ T5609] ? rcu_is_watching+0x16/0xb0 [ 123.505507][ T5609] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 123.505535][ T5609] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 123.505585][ T5609] f2fs_write_data_pages+0x2a13/0x36e0 [ 123.505646][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 123.505681][ T5609] ? is_bpf_text_address+0x292/0x2b0 [ 123.505703][ T5609] ? is_bpf_text_address+0x26/0x2b0 [ 123.505755][ T5609] ? stack_trace_save+0xa9/0x100 [ 123.505776][ T5609] ? __pfx_stack_trace_save+0x10/0x10 [ 123.505819][ T5609] ? lockdep_unlock+0x5c/0xd0 [ 123.505837][ T5609] ? __lock_acquire+0x1511/0x2de0 [ 123.505890][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 123.505914][ T5609] do_writepages+0x338/0x560 [ 123.505951][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 123.505977][ T5609] filemap_fdatawrite+0x1e9/0x2f0 [ 123.506002][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 123.506078][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 123.506115][ T5609] f2fs_sync_dirty_inodes+0x471/0x970 [ 123.506157][ T5609] f2fs_write_checkpoint+0x860/0x24d0 [ 123.506235][ T5609] kill_f2fs_super+0x2dc/0x700 [ 123.506261][ T5609] ? rcu_do_enqueue+0x616/0x870 [ 123.506282][ T5609] ? lockdep_hardirqs_on+0x7b/0x110 [ 123.506304][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 123.506345][ T5609] ? __pfx_call_rcu+0x10/0x10 [ 123.506373][ T5609] ? shrinker_free+0x2a7/0x3b0 [ 123.506398][ T5609] deactivate_locked_super+0xbe/0x110 [ 123.506423][ T5609] cleanup_mnt+0x204/0x2a0 [ 123.506451][ T5609] task_work_run+0x1d9/0x260 [ 123.506476][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 123.506509][ T5609] exit_to_user_mode_loop+0x204/0x770 [ 123.506531][ T5609] ? rcu_is_watching+0x16/0xb0 [ 123.506557][ T5609] do_syscall_64+0x328/0x520 [ 123.506577][ T5609] ? trace_irq_disable+0x3b/0x140 [ 123.506597][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.506619][ T5609] ? clear_bhb_loop+0x70/0xc0 [ 123.506643][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.506665][ T5609] RIP: 0033:0x7fc3e9b9f3d7 [ 123.506686][ T5609] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 123.506704][ T5609] RSP: 002b:00007ffe58f7c198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 123.506728][ T5609] RAX: 0000000000000000 RBX: 00007fc3e9c34ccb RCX: 00007fc3e9b9f3d7 [ 123.506743][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe58f7c250 [ 123.506755][ T5609] RBP: 00007ffe58f7c250 R08: 00007ffe58f7d250 R09: 00000000ffffffff [ 123.506770][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe58f7d2e0 [ 123.506783][ T5609] R13: 00007fc3e9c34ccb R14: 000000000001e161 R15: 00007ffe58f7d320 [ 123.506819][ T5609] [ 123.507930][ T5609] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 123.634748][ T6549] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 123.634770][ T6549] netlink: 'syz.4.253': attribute type 2 has an invalid length. [ 123.916059][ T6555] loop0: detected capacity change from 0 to 256 [ 123.983568][ T6555] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 123.983920][ T6555] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 124.573582][ T6557] loop4: detected capacity change from 0 to 32768 [ 124.601971][ T6557] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.257 (6557) [ 124.617902][ T6566] loop1: detected capacity change from 0 to 512 [ 124.637390][ T6566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.681168][ T6557] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 124.681208][ T6557] BTRFS info (device loop4): using blake2b checksum algorithm [ 124.696365][ T6566] EXT4-fs (loop1): 1 truncate cleaned up [ 124.699046][ T6566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.900514][ T6557] BTRFS info (device loop4): enabling ssd optimizations [ 124.900544][ T6557] BTRFS info (device loop4): enabling free space tree [ 124.945053][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.297920][ T5611] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.852656][ T5743] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 125.852822][ T5735] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.011349][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 126.012980][ T5735] usb 5-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 126.015514][ T5735] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 126.015547][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 126.015605][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 126.015630][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 126.015655][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 126.017168][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.017221][ T5743] usb 4-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 126.021402][ T5743] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 126.021427][ T5743] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 126.021445][ T5743] usb 4-1: config 8 has no interface number 0 [ 126.021513][ T5743] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 126.021538][ T5743] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 126.021562][ T5743] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 126.028800][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.028825][ T5735] usb 5-1: Product: syz [ 126.028896][ T5735] usb 5-1: Manufacturer: syz [ 126.028911][ T5735] usb 5-1: SerialNumber: syz [ 126.030145][ T5743] usb 4-1: string descriptor 0 read error: -22 [ 126.030234][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.044555][ T6606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.067430][ T5743] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected [ 126.068631][ T5735] usb 5-1: config 0 descriptor?? [ 126.165833][ T5743] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 126.264501][ T6599] loop2: detected capacity change from 0 to 32768 [ 126.278257][ T6599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.264 (6599) [ 126.339374][ T6599] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.339456][ T6599] BTRFS info (device loop2): using crc32c checksum algorithm [ 126.410447][ C1] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 126.414442][ T5743] usb 4-1: USB disconnect, device number 5 [ 126.437463][ T5743] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 126.449588][ T5743] metro_usb 4-1:8.109: device disconnected [ 126.524646][ T6599] BTRFS info (device loop2): setting nodatasum [ 126.524677][ T6599] BTRFS info (device loop2): enabling ssd optimizations [ 126.524695][ T6599] BTRFS info (device loop2): disabling tree log [ 126.524712][ T6599] BTRFS info (device loop2): turning on async discard [ 126.524759][ T6599] BTRFS info (device loop2): enabling free space tree [ 126.524776][ T6599] BTRFS info (device loop2): enabling auto defrag [ 126.539430][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 126.539483][ T5735] input input6: Device does not respond to id packet M [ 126.595275][ T5735] input input6: Device does not respond to id packet P [ 126.661903][ T6599] BTRFS critical (device loop2 state EH): emergency shutdown [ 126.756584][ T6634] TCP: TCP_TX_DELAY enabled [ 126.813824][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 126.813879][ T5735] input input6: Device does not respond to id packet B [ 126.814594][ T5617] BTRFS info (device loop2 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.818344][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 126.818402][ T5735] input input6: Device does not respond to id packet N [ 126.819603][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 126.827468][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 126.829654][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 126.830911][ T5735] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 126.866779][ T5735] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 126.948861][ T63] IPVS: starting estimator thread 0... [ 127.054663][ T6638] IPVS: using max 23 ests per chain, 55200 per kthread [ 127.222781][ T5735] usb 5-1: USB disconnect, device number 5 [ 127.356811][ T6645] CIFS: Attempting to mount //127.0.0.1/share [ 127.581145][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.732007][ T10] usb 4-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 127.733335][ T10] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.733368][ T10] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 127.734723][ T10] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.734754][ T10] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 127.739098][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.739128][ T10] usb 4-1: Product: syz [ 127.739143][ T10] usb 4-1: Manufacturer: syz [ 127.739158][ T10] usb 4-1: SerialNumber: syz [ 127.836492][ T10] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 127.872242][ T10] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 127.904502][ T10] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 127.931208][ T5720] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.080792][ T6646] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 128.082463][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 128.084237][ T5720] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.085901][ T5720] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.086556][ T5720] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.086578][ T5720] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.086600][ T5720] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.086622][ T5720] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.086662][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.136131][ T6645] CIFS: VFS: cifs_mount failed w/return code = -112 [ 128.188933][ T5743] usb 4-1: USB disconnect, device number 6 [ 128.293623][ T5743] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 128.334496][ T5743] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 128.344381][ T5743] ti_usb_3410_5052 4-1:2.0: device disconnected [ 128.348477][ T5720] usb 2-1: usb_control_msg returned -32 [ 128.348525][ T5720] usbtmc 2-1:16.0: can't read capabilities [ 128.647686][ T6673] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.660215][ T6673] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.683689][ T6675] syz_tun: entered promiscuous mode [ 128.684134][ T6675] macvtap1: entered promiscuous mode [ 128.684390][ T6675] macvtap1: entered allmulticast mode [ 128.684405][ T6675] syz_tun: entered allmulticast mode [ 128.689609][ T6675] syz_tun: left allmulticast mode [ 128.689831][ T6675] syz_tun: left promiscuous mode [ 128.697003][ T6673] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 128.861606][ T6679] loop2: detected capacity change from 0 to 128 [ 128.916651][ T6679] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.938581][ T5743] usb 2-1: USB disconnect, device number 5 [ 128.955354][ T6679] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.159661][ T5617] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.220426][ T6672] loop4: detected capacity change from 0 to 32768 [ 129.244436][ T6672] (syz.4.287,6672,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.252188][ T6672] (syz.4.287,6672,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.382106][ T6672] JBD2: Ignoring recovery information on journal [ 129.525233][ T6672] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 130.160211][ T6687] loop3: detected capacity change from 0 to 32768 [ 130.161877][ T6687] BTRFS warning: excessive commit interval 3581, use with care [ 130.167654][ T6687] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.295 (6687) [ 130.178931][ T6687] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.178989][ T6687] BTRFS info (device loop3): using crc32c checksum algorithm [ 130.228759][ T5611] ocfs2: Unmounting device (7,4) on (node local) [ 130.364016][ T6687] BTRFS info (device loop3): enabling ssd optimizations [ 130.364048][ T6687] BTRFS info (device loop3): turning on flush-on-commit [ 130.364065][ T6687] BTRFS info (device loop3): enabling free space tree [ 130.364083][ T6687] BTRFS info (device loop3): force zlib compression, level 3 [ 130.364104][ T6687] BTRFS info (device loop3): max_inline set to 4096 [ 130.393143][ T6689] loop2: detected capacity change from 0 to 32768 [ 130.516117][ T6689] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.516141][ T6689] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.566494][ T6716] netlink: 9 bytes leftover after parsing attributes in process `syz.1.302'. [ 130.626865][ T6716] gretap0: entered promiscuous mode [ 130.662118][ T6722] netlink: 5 bytes leftover after parsing attributes in process `syz.1.302'. [ 130.728842][ T6722] 0ªî{X¹¦: renamed from gretap0 [ 130.787199][ T6722] 0ªî{X¹¦: left promiscuous mode [ 130.787225][ T6722] 0ªî{X¹¦: entered allmulticast mode [ 130.827666][ T6722] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 130.831456][ T6687] BTRFS info (device loop3 state M): max_inline set to 4096 [ 130.924414][ T6689] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 130.955403][ T5720] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 130.955427][ T5720] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 131.008587][ T5609] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.389353][ T5720] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 433ms [ 131.389825][ T5720] gfs2: fsid=syz:syz.0: jid=0: Done [ 131.393024][ T6689] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 131.680070][ T6733] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 131.838695][ T6725] loop4: detected capacity change from 0 to 40427 [ 131.854198][ T6725] F2FS-fs (loop4): Small segment_count (20 < 1 * 24) [ 131.854231][ T6725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.862603][ T6725] F2FS-fs (loop4): build fault injection rate: 26 [ 131.862628][ T6725] F2FS-fs (loop4): build fault injection type: 0x7698c [ 131.870713][ T6725] F2FS-fs (loop4): invalid crc value [ 131.956581][ T6725] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_caches+0x20e/0x930 [ 132.084304][ T6742] loop3: detected capacity change from 0 to 256 [ 132.184152][ T6742] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 132.258150][ T6735] loop1: detected capacity change from 0 to 32768 [ 132.365985][ T6725] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 132.411325][ T6725] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 132.411358][ T6725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.421554][ T6725] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_cache_write+0x64e/0x1430 [ 132.421599][ T6725] F2FS-fs (loop4): invalid blkaddr: 1026, type: 10, run fsck to fix. [ 132.542381][ T6725] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_cache_write+0x64e/0x1430 [ 132.542432][ T6725] F2FS-fs (loop4): invalid blkaddr: 1025, type: 10, run fsck to fix. [ 132.726147][ T6750] Illegal XDP return value 3458 on prog (id 17) dev syz_tun, expect packet loss! [ 132.825018][ T6752] loop3: detected capacity change from 0 to 128 [ 132.878537][ T6752] ip_tables: iptables: counters copy to user failed while replacing table [ 133.090838][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090936][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.447938][ T6764] loop3: detected capacity change from 0 to 2048 [ 133.518625][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.591612][ T33] audit: type=1800 audit(1791460385.796:9): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.319" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 133.658250][ T6771] syz.4.320 uses obsolete (PF_INET,SOCK_PACKET) [ 133.845225][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.903703][ T6762] loop0: detected capacity change from 0 to 32768 [ 133.962986][ T6762] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.048713][ T6762] XFS (loop0): Ending clean mount [ 134.236226][ T33] audit: type=1326 audit(1791460386.446:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.266881][ T33] audit: type=1326 audit(1791460386.476:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.300534][ T33] audit: type=1326 audit(1791460386.506:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.300590][ T33] audit: type=1326 audit(1791460386.506:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.300640][ T33] audit: type=1326 audit(1791460386.506:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.323702][ T33] audit: type=1326 audit(1791460386.536:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.338677][ T33] audit: type=1326 audit(1791460386.546:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.339451][ T33] audit: type=1326 audit(1791460386.546:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.375834][ T33] audit: type=1326 audit(1791460386.586:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc3e9b9e199 code=0x7ffc0000 [ 134.545910][ T5612] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.972769][ T6805] loop4: detected capacity change from 0 to 2048 [ 134.990892][ T6802] loop1: detected capacity change from 0 to 32768 [ 134.992859][ T6802] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 135.012414][ T6802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.328 (6802) [ 135.033803][ T6802] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.033839][ T6802] BTRFS info (device loop1): using sha256 checksum algorithm [ 135.138277][ T6805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.157833][ T6777] loop2: detected capacity change from 0 to 40427 [ 135.189643][ T6777] F2FS-fs (loop2): invalid crc value [ 135.309523][ T6802] BTRFS info (device loop1): rebuilding free space tree [ 135.326475][ T6802] BTRFS info (device loop1): disabling free space tree [ 135.326578][ T6802] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.326601][ T6802] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.332082][ T6802] BTRFS info (device loop1): enabling ssd optimizations [ 135.332117][ T6802] BTRFS info (device loop1): turning on async discard [ 135.332131][ T6802] BTRFS info (device loop1): force clearing of disk cache [ 135.634376][ T5611] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 135.661865][ T6831] capability: warning: `syz.3.331' uses deprecated v2 capabilities in a way that may be insecure [ 135.695522][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.733708][ T6831] loop3: detected capacity change from 0 to 512 [ 135.748005][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.753318][ T6777] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 135.808007][ T6777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 135.839803][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.839942][ T6831] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.096547][ T6841] netlink: 104 bytes leftover after parsing attributes in process `syz.0.335'. [ 136.364481][ T6843] loop4: detected capacity change from 0 to 4096 [ 136.380848][ T6843] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 136.738277][ T5617] syz-executor: attempt to access beyond end of device [ 136.738277][ T5617] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.766664][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 136.766700][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.766714][ T5617] Call Trace: [ 136.766723][ T5617] [ 136.766732][ T5617] dump_stack_lvl+0xe8/0x150 [ 136.766768][ T5617] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 136.766799][ T5617] f2fs_write_end_bio+0xda7/0x11c0 [ 136.766842][ T5617] __submit_merged_bio+0x258/0x6a0 [ 136.766864][ T5617] ? rcu_is_watching+0x16/0xb0 [ 136.766893][ T5617] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 136.766930][ T5617] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 136.766983][ T5617] f2fs_write_data_pages+0x2a13/0x36e0 [ 136.767049][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 136.767068][ T5617] ? is_bpf_text_address+0x26/0x2b0 [ 136.767104][ T5617] ? arch_stack_walk+0xfb/0x150 [ 136.767161][ T5617] ? add_lock_to_list+0xc7/0x100 [ 136.767185][ T5617] ? lockdep_unlock+0x5c/0xd0 [ 136.767203][ T5617] ? __lock_acquire+0x1511/0x2de0 [ 136.767256][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.767292][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 136.767313][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 136.767337][ T5617] do_writepages+0x338/0x560 [ 136.767374][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 136.767401][ T5617] filemap_fdatawrite+0x1e9/0x2f0 [ 136.767426][ T5617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 136.767496][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 136.767522][ T5617] f2fs_sync_dirty_inodes+0x471/0x970 [ 136.767564][ T5617] f2fs_write_checkpoint+0x860/0x24d0 [ 136.767629][ T5617] kill_f2fs_super+0x2dc/0x700 [ 136.767655][ T5617] ? rcu_do_enqueue+0x616/0x870 [ 136.767676][ T5617] ? lockdep_hardirqs_on+0x7b/0x110 [ 136.767697][ T5617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 136.767738][ T5617] ? __pfx_call_rcu+0x10/0x10 [ 136.767767][ T5617] ? shrinker_free+0x2a7/0x3b0 [ 136.767791][ T5617] deactivate_locked_super+0xbe/0x110 [ 136.767816][ T5617] cleanup_mnt+0x204/0x2a0 [ 136.767843][ T5617] task_work_run+0x1d9/0x260 [ 136.767867][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 136.767901][ T5617] exit_to_user_mode_loop+0x204/0x770 [ 136.767932][ T5617] ? rcu_is_watching+0x16/0xb0 [ 136.767959][ T5617] do_syscall_64+0x328/0x520 [ 136.767979][ T5617] ? trace_irq_disable+0x3b/0x140 [ 136.767998][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.768020][ T5617] ? clear_bhb_loop+0x70/0xc0 [ 136.768045][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.768066][ T5617] RIP: 0033:0x7f01f159f3d7 [ 136.768087][ T5617] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 136.768104][ T5617] RSP: 002b:00007ffde6728ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 136.768127][ T5617] RAX: 0000000000000000 RBX: 00007f01f1634ccb RCX: 00007f01f159f3d7 [ 136.768140][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde6728d60 [ 136.768153][ T5617] RBP: 00007ffde6728d60 R08: 00007ffde6729d60 R09: 00000000ffffffff [ 136.768167][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde6729df0 [ 136.768180][ T5617] R13: 00007f01f1634ccb R14: 00000000000213ee R15: 00007ffde6729e30 [ 136.768218][ T5617] [ 136.821471][ T6853] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 136.841183][ T5617] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.884491][ T6851] ntfs3(loop4): ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 137.159156][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.419622][ T6857] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.446400][ T6860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.477462][ T6862] loop1: detected capacity change from 0 to 256 [ 137.478834][ T6862] exfat: Deprecated parameter 'namecase' [ 137.478901][ T6862] exfat: Deprecated parameter 'namecase' [ 137.533712][ T6855] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 137.608911][ T6862] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 137.907866][ T6869] loop0: detected capacity change from 0 to 4096 [ 138.051892][ T6879] loop4: detected capacity change from 0 to 16 [ 138.070213][ T6869] ntfs3(loop0): Failed to load $Extend (-22). [ 138.070242][ T6869] ntfs3(loop0): Failed to initialize $Extend. [ 138.108015][ T6879] erofs (device loop4): mounted with root inode @ nid 36. [ 138.355121][ T6881] loop1: detected capacity change from 0 to 256 [ 138.371685][ T6881] exfat: Deprecated parameter 'utf8' [ 138.371745][ T6881] exfat: Deprecated parameter 'namecase' [ 138.371854][ T6881] exfat: Deprecated parameter 'namecase' [ 138.371880][ T6881] exfat: Deprecated parameter 'utf8' [ 138.448915][ T6881] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 138.449284][ T6881] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 138.477775][ T6881] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 138.541165][ T6869] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 138.541305][ T6869] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 138.581676][ T6885] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.586031][ T6885] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.952238][ T6891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.007685][ T6873] set_capacity_and_notify: 2 callbacks suppressed [ 139.007704][ T6873] loop3: detected capacity change from 0 to 40427 [ 139.041520][ T6873] F2FS-fs (loop3): invalid crc value [ 139.048731][ T6893] loop1: detected capacity change from 0 to 4096 [ 139.074551][ T6893] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 139.216353][ T6895] loop2: detected capacity change from 0 to 4096 [ 139.297828][ T5611] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.378543][ T6873] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.389178][ T6895] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 139.391267][ T6895] ntfs3(loop2): Failed to load $Extend (-22). [ 139.415406][ T6895] ntfs3(loop2): Failed to initialize $Extend. [ 139.468438][ T6873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.707054][ T143] ntfs3(loop1): ino=1e, ni_find_attr [ 139.754540][ T6873] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 139.755845][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT(full) [ 139.755879][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.755893][ T6873] Call Trace: [ 139.755902][ T6873] [ 139.755913][ T6873] dump_stack_lvl+0xe8/0x150 [ 139.755947][ T6873] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 139.755978][ T6873] do_garbage_collect+0x123f/0x6f30 [ 139.756024][ T6873] ? trace_contention_end+0x3d/0x140 [ 139.756103][ T6873] ? __pfx_do_garbage_collect+0x10/0x10 [ 139.756127][ T6873] ? f2fs_get_victim+0x4725/0x4dd0 [ 139.756234][ T6873] f2fs_gc+0xd08/0x25b0 [ 139.756253][ T6873] ? check_noncircular+0xdb/0x150 [ 139.756316][ T6873] ? __pfx_f2fs_gc+0x10/0x10 [ 139.756384][ T6873] ? rcu_is_watching+0x16/0xb0 [ 139.756414][ T6873] f2fs_expand_inode_data+0x64d/0xb10 [ 139.756459][ T6873] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 139.756499][ T6873] ? __pfx_inode_dio_wait+0x10/0x10 [ 139.756531][ T6873] ? mnt_put_write_access_file+0xc3/0x100 [ 139.756556][ T6873] ? file_update_time_flags+0x3ab/0x440 [ 139.756585][ T6873] f2fs_fallocate+0x4d8/0x970 [ 139.756615][ T6873] vfs_fallocate+0x65a/0x7e0 [ 139.756646][ T6873] ? __pfx_vfs_fallocate+0x10/0x10 [ 139.756669][ T6873] ? __might_fault+0xaf/0x130 [ 139.756701][ T6873] file_ioctl+0x564/0x7d0 [ 139.756727][ T6873] ? __pfx_file_ioctl+0x10/0x10 [ 139.756766][ T6873] ? kasan_quarantine_put+0xbb/0x1f0 [ 139.756801][ T6873] ? tomoyo_path_number_perm+0x219/0x5f0 [ 139.756826][ T6873] ? tomoyo_path_number_perm+0x219/0x5f0 [ 139.756853][ T6873] do_vfs_ioctl+0xc27/0x1530 [ 139.756879][ T6873] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.756919][ T6873] ? do_futex+0x3e7/0x4e0 [ 139.756966][ T6873] ? __fget_files+0x2a/0x420 [ 139.756989][ T6873] ? __fget_files+0x2a/0x420 [ 139.757010][ T6873] ? __fget_files+0x2a/0x420 [ 139.757036][ T6873] ? bpf_lsm_file_ioctl+0x9/0x20 [ 139.757062][ T6873] __se_sys_ioctl+0x82/0x170 [ 139.757088][ T6873] do_syscall_64+0x166/0x520 [ 139.757109][ T6873] ? trace_irq_disable+0x3b/0x140 [ 139.757129][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.757151][ T6873] ? clear_bhb_loop+0x70/0xc0 [ 139.757177][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.757199][ T6873] RIP: 0033:0x7fc3e9b9e199 [ 139.757220][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.757238][ T6873] RSP: 002b:00007fc3eaa3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.757262][ T6873] RAX: ffffffffffffffda RBX: 00007fc3e9e25fa0 RCX: 00007fc3e9b9e199 [ 139.757278][ T6873] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000004 [ 139.757293][ T6873] RBP: 00007fc3e9c35888 R08: 0000000000000000 R09: 0000000000000000 [ 139.757306][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.757319][ T6873] R13: 00007fc3e9e26038 R14: 00007fc3e9e25fa0 R15: 00007ffe58f7cf28 [ 139.757357][ T6873] [ 139.778671][ T6873] F2FS-fs (loop3): Stopped filesystem due to reason: 4 [ 140.104006][ T6913] loop4: detected capacity change from 0 to 128 [ 140.133244][ T6913] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.133284][ T6913] hpfs: filesystem error: improperly stopped [ 140.133299][ T6913] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.133317][ T6913] hpfs: You really don't want any checks? You are crazy... [ 140.133334][ T6913] hpfs: Code page index out of array [ 140.133342][ T6913] hpfs: code page support is disabled [ 140.133698][ T6913] hpfs: hpfs_map_4sectors(): unaligned read [ 140.133781][ T6913] hpfs: hpfs_map_4sectors(): unaligned read [ 140.133791][ T6913] hpfs: filesystem error: unable to find root dir [ 140.343790][ T6913] hpfs: hpfs_map_4sectors(): unaligned read [ 140.653505][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 140.715808][ T6930] syz_tun: entered promiscuous mode [ 140.716160][ T6930] macvtap1: entered promiscuous mode [ 140.723602][ T6930] macvtap1: entered allmulticast mode [ 140.723626][ T6930] syz_tun: entered allmulticast mode [ 140.747085][ T6930] syz_tun: left allmulticast mode [ 140.747322][ T6930] syz_tun: left promiscuous mode [ 140.891177][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.044552][ T5720] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.045763][ T5720] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.045815][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.059399][ T5720] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.059430][ T5720] usb 3-1: Manufacturer: syz [ 141.095200][ T5720] usb 3-1: config 0 descriptor?? [ 141.322562][ T5720] rc_core: IR keymap rc-hauppauge not found [ 141.322582][ T5720] Registered IR keymap rc-empty [ 141.329696][ T5720] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 141.360763][ T5720] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 141.423682][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 141.423704][ T33] audit: type=1326 audit(1791460393.636:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.3.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3e9b9e199 code=0x0 [ 141.532827][ T5742] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 141.549533][ T6959] loop3: detected capacity change from 0 to 512 [ 141.615789][ C1] igorplugusb 3-1:0.0: receive overflow invalid: 255 [ 141.684764][ T5742] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.684852][ T5742] usb 1-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 141.687078][ T5742] usb 1-1: config 8 has an invalid interface number: 109 but max is 0 [ 141.687108][ T5742] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 141.687128][ T5742] usb 1-1: config 8 has no interface number 0 [ 141.687200][ T5742] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 141.687230][ T5742] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 141.687257][ T5742] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 141.777879][ T5742] usb 1-1: string descriptor 0 read error: -22 [ 141.778069][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.805325][ T6951] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 141.809533][ T5742] metro_usb 1-1:8.109: Metrologic USB to Serial converter detected [ 141.835734][ T5742] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 141.838209][ T5743] usb 3-1: USB disconnect, device number 4 [ 142.026794][ T10] usb 1-1: USB disconnect, device number 3 [ 142.034509][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 142.035138][ T10] metro_usb 1-1:8.109: device disconnected [ 142.319795][ T6968] FAULT_INJECTION: forcing a failure. [ 142.319795][ T6968] name failslab, interval 1, probability 0, space 0, times 0 [ 142.319831][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.3.381 Not tainted syzkaller #0 PREEMPT(full) [ 142.319856][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.319869][ T6968] Call Trace: [ 142.319877][ T6968] [ 142.319887][ T6968] dump_stack_lvl+0xe8/0x150 [ 142.319918][ T6968] should_fail_ex+0x3eb/0x540 [ 142.319947][ T6968] should_failslab+0xa8/0x100 [ 142.319978][ T6968] ? alloc_empty_file+0x5b/0x1d0 [ 142.320000][ T6968] kmem_cache_alloc_noprof+0x9c/0x600 [ 142.320027][ T6968] ? alloc_empty_file+0x5b/0x1d0 [ 142.320057][ T6968] alloc_empty_file+0x5b/0x1d0 [ 142.320084][ T6968] alloc_file_pseudo+0x110/0x1e0 [ 142.320110][ T6968] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 142.320131][ T6968] ? _raw_spin_unlock+0x28/0x50 [ 142.320162][ T6968] sock_alloc_file+0xb8/0x2e0 [ 142.320182][ T6968] ? __sys_socket+0x12b/0x1b0 [ 142.320205][ T6968] __sys_socket+0x13f/0x1b0 [ 142.320233][ T6968] __x64_sys_socket+0x7a/0x90 [ 142.320256][ T6968] do_syscall_64+0x166/0x520 [ 142.320276][ T6968] ? trace_irq_disable+0x3b/0x140 [ 142.320296][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.320319][ T6968] ? clear_bhb_loop+0x70/0xc0 [ 142.320345][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.320366][ T6968] RIP: 0033:0x7fc3e9b9e199 [ 142.320388][ T6968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.320407][ T6968] RSP: 002b:00007fc3eaa3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 142.320434][ T6968] RAX: ffffffffffffffda RBX: 00007fc3e9e25fa0 RCX: 00007fc3e9b9e199 [ 142.320450][ T6968] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 142.320464][ T6968] RBP: 00007fc3e9c35888 R08: 0000000000000000 R09: 0000000000000000 [ 142.320478][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.320492][ T6968] R13: 00007fc3e9e26038 R14: 00007fc3e9e25fa0 R15: 00007ffe58f7cf28 [ 142.320529][ T6968] [ 142.577064][ T6975] loop2: detected capacity change from 0 to 8 [ 142.652561][ T6973] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 373.308076][T15396] printk: console [ttyS0] enabled [ 373.344163][ T5617] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 373.371970][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 373.372574][ T5728] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 373.381513][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.381551][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.381587][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.427400][ T5728] usb 5-1: config 0 descriptor?? [ 373.429737][ T5728] hub 5-1:0.0: USB hub found [ 373.638893][ T5728] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 374.046958][ T5728] hid_parser_main: 5 callbacks suppressed [ 374.047060][ T5728] hid-generic 0003:046D:C31C.001F: unknown main item tag 0x0 [ 374.067889][T15438] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 374.067916][T15438] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 374.068046][T15438] overlayfs: failed to set uuid (560/file2, err=-13); falling back to uuid=null. [ 374.104371][ T5728] hid-generic 0003:046D:C31C.001F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 374.147763][T15441] FAULT_INJECTION: forcing a failure. [ 374.147763][T15441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.147804][T15441] CPU: 1 UID: 0 PID: 15441 Comm: syz.6.3315 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 374.147839][T15441] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 374.147848][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.147862][T15441] Call Trace: [ 374.147870][T15441] [ 374.147880][T15441] dump_stack_lvl+0xe8/0x150 [ 374.147920][T15441] should_fail_ex+0x3eb/0x540 [ 374.147945][T15441] _copy_from_user+0x2d/0xb0 [ 374.147966][T15441] do_fcntl+0x47e/0x1a80 [ 374.147988][T15441] ? __pfx_do_fcntl+0x10/0x10 [ 374.148008][T15441] ? rcu_is_watching+0x16/0xb0 [ 374.148029][T15441] ? lock_release+0x4b/0x3c0 [ 374.148048][T15441] ? __se_sys_futex+0x3a8/0x450 [ 374.148069][T15441] ? __fget_files+0x2a/0x420 [ 374.148091][T15441] ? bpf_lsm_file_fcntl+0x9/0x20 [ 374.148114][T15441] __se_sys_fcntl+0xc8/0x150 [ 374.148132][T15441] do_syscall_64+0x166/0x520 [ 374.148153][T15441] ? trace_irq_disable+0x3b/0x140 [ 374.148172][T15441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.148207][T15441] ? clear_bhb_loop+0x70/0xc0 [ 374.148228][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.148248][T15441] RIP: 0033:0x7f255ad9e199 [ 374.148267][T15441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.148287][T15441] RSP: 002b:00007f255bd09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 374.148312][T15441] RAX: ffffffffffffffda RBX: 00007f255b025fa0 RCX: 00007f255ad9e199 [ 374.148328][T15441] RDX: 0000000000000000 RSI: 000000000000040c RDI: 0000000000000003 [ 374.148341][T15441] RBP: 00007f255ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 374.148354][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.148367][T15441] R13: 00007f255b026038 R14: 00007f255b025fa0 R15: 00007ffc0d472b28 [ 374.148390][T15441] [ 374.195607][T15444] FAULT_INJECTION: forcing a failure. [ 374.195607][T15444] name failslab, interval 1, probability 0, space 0, times 0 [ 374.195645][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.2.3316 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 374.195674][T15444] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 374.195682][T15444] Hardware name: Google Goo ** replaying previous printk message ** [ 374.195682][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.195694][T15444] Call Trace: [ 374.195702][T15444] [ 374.195710][T15444] dump_stack_lvl+0xe8/0x150 [ 374.195737][T15444] should_fail_ex+0x3eb/0x540 [ 374.195760][T15444] should_failslab+0xa8/0x100 [ 374.195779][T15444] ? security_inode_alloc+0x39/0x310 [ 374.195870][T15444] kmem_cache_alloc_noprof+0x9c/0x600 [ 374.195891][T15444] ? security_inode_alloc+0x39/0x310 [ 374.195913][T15444] security_inode_alloc+0x39/0x310 [ 374.195931][T15444] inode_init_always_gfp+0x97e/0xd30 [ 374.195961][T15444] ? __pfx_sock_alloc_inode+0x10/0x10 [ 374.195980][T15444] alloc_inode+0x82/0x1b0 [ 374.195999][T15444] __sock_create+0x127/0xac0 [ 374.196018][T15444] ? smc_hash_sk+0x165/0x270 [ 374.196095][T15444] ? __local_bh_enable_ip+0xd6/0x140 [ 374.196116][T15444] ? smc_hash_sk+0x1f2/0x270 [ 374.196136][T15444] smc_create+0x148/0x260 [ 374.196177][T15444] __sock_create+0x4b5/0xac0 [ 374.196200][T15444] __sys_socket+0xd6/0x1b0 [ 374.196221][T15444] __x64_sys_socket+0x7a/0x90 [ 374.196241][T15444] do_syscall_64+0x166/0x520 [ 374.196260][T15444] ? trace_irq_disable+0x3b/0x140 [ 374.196280][T15444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.196300][T15444] ? clear_bhb_loop+0x70/0xc0 [ 374.196320][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.196340][T15444] RIP: 0033:0x7f01f159e199 [ 374.196360][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.196378][T15444] RSP: 002b:00007f01f24bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 374.196403][T15444] RAX: ffffffffffffffda RBX: 00007f01f1825fa0 RCX: 00007f01f159e199 [ 374.196419][T15444] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 374.196433][T15444] RBP: 00007f01f1635888 R08: 0000000000000000 R09: 0000000000000000 [ 374.196446][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.196458][T15444] R13: 00007f01f1826038 R14: 00007f01f1825fa0 R15: 00007ffde6729a38 [ 374.196483][T15444] [ 374.196621][T15444] socket: no more sockets [ 374.407989][T15450] ================================================================== [ 374.408076][T15450] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 374.408162][T15450] Read of size 1 at addr ffff8880276b7900 by task syz.2.3319/15450 [ 374.408205][T15450] [ 374.408242][T15450] CPU: 1 UID: 0 PID: 15450 Comm: syz.2.3319 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 374.408294][T15450] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 374.408304][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.408316][T15450] Call Trace: [ 374.408325][T15450] [ 374.408335][T15450] dump_stack_lvl+0xe8/0x150 [ 374.408369][T15450] print_address_description+0x55/0x1e0 [ 374.408399][T15450] ? string+0x216/0x2d0 [ 374.408417][T15450] print_report+0x58/0x70 [ 374.408436][T15450] kasan_report+0x117/0x150 [ 374.408457][T15450] ? string+0x216/0x2d0 [ 374.408480][T15450] string+0x216/0x2d0 [ 374.408502][T15450] vsnprintf+0x74a/0xef0 [ 374.408526][T15450] seq_printf+0x188/0x290 [ 374.408551][T15450] ? __pfx_seq_printf+0x10/0x10 [ 374.408572][T15450] ? seq_put_decimal_ull_width+0x290/0x370 [ 374.408597][T15450] irq_seq_show+0x5f3/0x860 [ 374.408619][T15450] seq_read_iter+0x8d5/0xca0 [ 374.408646][T15450] proc_reg_read_iter+0x1b7/0x280 [ 374.408669][T15450] do_iter_readv_writev+0x612/0x8c0 [ 374.408691][T15450] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 374.408713][T15450] ? bpf_lsm_file_permission+0x9/0x20 [ 374.408732][T15450] ? security_file_permission+0x75/0x260 [ 374.408754][T15450] ? rw_verify_area+0x24a/0x4c0 [ 374.408776][T15450] vfs_readv+0x28d/0x850 [ 374.408799][T15450] ? __pfx_vfs_readv+0x10/0x10 [ 374.408822][T15450] ? lock_release+0x4b/0x3c0 [ 374.408844][T15450] ? __fget_files+0x3a2/0x420 [ 374.408864][T15450] ? __fget_files+0x2a/0x420 [ 374.408887][T15450] ? fdget+0x1ac/0x250 [ 374.408907][T15450] __x64_sys_preadv+0x19c/0x2b0 [ 374.408928][T15450] ? __pfx___x64_sys_preadv+0x10/0x10 [ 374.408949][T15450] ? rcu_is_watching+0x16/0xb0 [ 374.408971][T15450] do_syscall_64+0x166/0x520 [ 374.408990][T15450] ? trace_irq_disable+0x3b/0x140 [ 374.409008][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.409030][T15450] ? clear_bhb_loop+0x70/0xc0 [ 374.409050][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.409071][T15450] RIP: 0033:0x7f01f159e199 [ 374.409090][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.409108][T15450] RSP: 002b:00007f01f24bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 374.409133][T15450] RAX: ffffffffffffffda RBX: 00007f01f1825fa0 RCX: 00007f01f159e199 [ 374.409148][T15450] RDX: 0000000000000001 RSI: 0000200000004d00 RDI: 0000000000000003 [ 374.409162][T15450] RBP: 00007f01f1635888 R08: 0000000080000002 R09: 0000000000000000 [ 374.409177][T15450] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 374.409190][T15450] R13: 00007f01f1826038 R14: 00007f01f1825fa0 R15: 00007ffde6729a38 [ 374.409212][T15450] [ 374.409220][T15450] [ 374.409225][T15450] Allocated by task 12383: [ 374.409263][T15450] kasan_save_track+0x3e/0x80 [ 374.409281][T15450] __kasan_kmalloc+0x93/0xb0 [ 374.409299][T15450] __kmalloc_node_noprof+0x4b4/0x720 [ 374.409317][T15450] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 374.409338][T15450] vzalloc_noprof+0xb2/0xe0 [ 374.409362][T15450] alloc_counters+0x63/0x5d0 [ 374.409443][T15450] do_ip6t_get_ctl+0xb17/0x12f0 [ 374.409459][T15450] nf_getsockopt+0x26e/0x290 [ 374.409519][T15450] ipv6_getsockopt+0x213/0x2c0 [ 374.409560][T15450] do_sock_getsockopt+0x4aa/0x640 [ 374.409576][T15450] __x64_sys_getsockopt+0x1a4/0x240 [ 374.409594][T15450] do_syscall_64+0x166/0x520 [ 374.409610][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.409628][T15450] [ 374.409633][T15450] Freed by task 12383: [ 374.409667][T15450] kasan_save_track+0x3e/0x80 [ 374.409683][T15450] kasan_save_free_info+0x40/0x50 [ 374.409699][T15450] __kasan_slab_free+0x5c/0x80 [ 374.409714][T15450] kfree+0x1c5/0x650 [ 374.409729][T15450] vfree+0x426/0x490 [ 374.409744][T15450] do_ip6t_get_ctl+0xf3e/0x12f0 [ 374.409760][T15450] nf_getsockopt+0x26e/0x290 [ 374.409776][T15450] ipv6_getsockopt+0x213/0x2c0 [ 374.409792][T15450] do_sock_getsockopt+0x4aa/0x640 [ 374.409808][T15450] __x64_sys_getsockopt+0x1a4/0x240 [ 374.409824][T15450] do_syscall_64+0x166/0x520 [ 374.409840][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.409859][T15450] [ 374.409863][T15450] The buggy address belongs to the object at ffff8880276b7900 [ 374.409863][T15450] which belongs to the cache kmalloc-8 of size 8 [ 374.409880][T15450] The buggy address is located 0 bytes inside of [ 374.409880][T15450] freed 8-byte region [ffff8880276b7900, ffff8880276b7908) [ 374.409898][T15450] [ 374.409903][T15450] The buggy address belongs to the physical page: [ 374.409935][T15450] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x276b7 [ 374.409953][T15450] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 374.409969][T15450] page_type: f5(slab) [ 374.409988][T15450] raw: 00fff00000000000 ffff88801c041500 dead000000000100 dead000000000122 [ 374.410005][T15450] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 374.410016][T15450] page dumped because: kasan: bad access detected [ 374.410026][T15450] page_owner tracks the page as allocated [ 374.410034][T15450] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6193475483 [ 374.410064][T15450] post_alloc_hook+0x1f9/0x250 [ 374.410081][T15450] get_page_from_freelist+0x220f/0x2280 [ 374.410099][T15450] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 374.410116][T15450] allocate_slab+0x7d/0x5e0 [ 374.410132][T15450] refill_objects+0x2d5/0x350 [ 374.410147][T15450] __pcs_replace_empty_main+0x2c8/0x6c0 [ 374.410164][T15450] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 374.410183][T15450] kstrdup+0x42/0x100 [ 374.410198][T15450] __kernfs_new_node+0xa9/0x980 [ 374.410214][T15450] kernfs_new_node+0xeb/0x140 [ 374.410230][T15450] kernfs_create_link+0xe3/0x240 [ 374.410245][T15450] sysfs_do_create_link_sd+0x83/0x110 [ 374.410261][T15450] device_create_sys_dev_entry+0x122/0x190 [ 374.410327][T15450] device_add+0x71e/0xb80 [ 374.410350][T15450] tty_register_device_attr+0x428/0x9b0 [ 374.410369][T15450] tty_register_driver+0x868/0xe50 [ 374.410386][T15450] page_owner free stack trace missing [ 374.410393][T15450] [ 374.410398][T15450] Memory state around the buggy address: [ 374.410434][T15450] ffff8880276b7800: fa fc fc fc 05 fc fc fc 06 fc fc fc 05 fc fc fc [ 374.410448][T15450] ffff8880276b7880: 06 fc fc fc fa fc fc fc 05 fc fc fc 06 fc fc fc [ 374.410479][T15450] >ffff8880276b7900: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 374.410489][T15450] ^ [ 374.410499][T15450] ffff8880276b7980: 05 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 374.410512][T15450] ffff8880276b7a00: 04 fc fc fc 00 fc fc fc 00 fc fc fc 06 fc fc fc [ 374.410522][T15450] ================================================================== [ 374.410534][T15450] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 375.344132][T15450] CPU: 1 UID: 0 PID: 15450 Comm: syz.2.3319 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 375.355643][T15450] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 375.361543][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.372135][T15450] Call Trace: [ 375.375430][T15450] [ 375.378819][T15450] vpanic+0x26f/0x710 [ 375.382832][T15450] panic+0xc5/0xd0 [ 375.386570][T15450] ? __pfx_panic+0x10/0x10 [ 375.391088][T15450] ? string+0x216/0x2d0 [ 375.396513][T15450] ? rcu_is_watching+0x16/0xb0 [ 375.401298][T15450] ? string+0x216/0x2d0 [ 375.405472][T15450] ? string+0x216/0x2d0 [ 375.409640][T15450] check_panic_on_warn+0x89/0xb0 [ 375.414771][T15450] ? string+0x216/0x2d0 [ 375.418955][T15450] end_report+0x73/0x170 [ 375.423345][T15450] ? string+0x216/0x2d0 [ 375.427606][T15450] kasan_report+0x128/0x150 [ 375.432228][T15450] ? string+0x216/0x2d0 [ 375.436410][T15450] string+0x216/0x2d0 [ 375.440496][T15450] vsnprintf+0x74a/0xef0 [ 375.444847][T15450] seq_printf+0x188/0x290 [ 375.449198][T15450] ? __pfx_seq_printf+0x10/0x10 [ 375.454354][T15450] ? seq_put_decimal_ull_width+0x290/0x370 [ 375.460278][T15450] irq_seq_show+0x5f3/0x860 [ 375.464894][T15450] seq_read_iter+0x8d5/0xca0 [ 375.469697][T15450] proc_reg_read_iter+0x1b7/0x280 [ 375.474946][T15450] do_iter_readv_writev+0x612/0x8c0 [ 375.480471][T15450] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 375.486248][T15450] ? bpf_lsm_file_permission+0x9/0x20 [ 375.491993][T15450] ? security_file_permission+0x75/0x260 [ 375.497671][T15450] ? rw_verify_area+0x24a/0x4c0 [ 375.502675][T15450] vfs_readv+0x28d/0x850 [ 375.507029][T15450] ? __pfx_vfs_readv+0x10/0x10 [ 375.511985][T15450] ? lock_release+0x4b/0x3c0 [ 375.516738][T15450] ? __fget_files+0x3a2/0x420 [ 375.521807][T15450] ? __fget_files+0x2a/0x420 [ 375.526598][T15450] ? fdget+0x1ac/0x250 [ 375.530682][T15450] __x64_sys_preadv+0x19c/0x2b0 [ 375.535550][T15450] ? __pfx___x64_sys_preadv+0x10/0x10 [ 375.540955][T15450] ? rcu_is_watching+0x16/0xb0 [ 375.546008][T15450] do_syscall_64+0x166/0x520 [ 375.550878][T15450] ? trace_irq_disable+0x3b/0x140 [ 375.556120][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.562402][T15450] ? clear_bhb_loop+0x70/0xc0 [ 375.567481][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.574094][T15450] RIP: 0033:0x7f01f159e199 [ 375.579150][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.599729][T15450] RSP: 002b:00007f01f24bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 375.608431][T15450] RAX: ffffffffffffffda RBX: 00007f01f1825fa0 RCX: 00007f01f159e199 [ 375.616526][T15450] RDX: 0000000000000001 RSI: 0000200000004d00 RDI: 0000000000000003 [ 375.624783][T15450] RBP: 00007f01f1635888 R08: 0000000080000002 R09: 0000000000000000 [ 375.632870][T15450] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 375.640852][T15450] R13: 00007f01f1826038 R14: 00007f01f1825fa0 R15: 00007ffde6729a38 [ 375.649036][T15450] [ 376.778335][T15450] Shutting down cpus with NMI [ 376.783492][T15450] Kernel Offset: disabled [ 376.788075][T15450] Rebooting in 86400 seconds..