last executing test programs: 4m41.189688407s ago: executing program 0 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230a29bd7000fcdbdf253100000008000300", @ANYRES32=r3, @ANYBLOB="0800db"], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 4m41.0502649s ago: executing program 0 (id=15): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000440)=ANY=[], 0x4, 0x2a4, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) unlink(&(0x7f0000000040)='./file1\x00') 4m40.65748725s ago: executing program 0 (id=20): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 4m40.287673069s ago: executing program 0 (id=24): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000840)='.\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f00000008c0)='.\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1005848, 0x0) 4m39.923644528s ago: executing program 0 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005900)=ANY=[@ANYBLOB="14"], 0x110}}], 0x2, 0x24040014) 4m39.183884965s ago: executing program 0 (id=35): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0000006970768a616e0800080002"], 0x44}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m38.825340844s ago: executing program 32 (id=35): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0000006970768a616e0800080002"], 0x44}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m32.514206057s ago: executing program 2 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x6}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe73) 4m32.132840067s ago: executing program 2 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 4m31.867105303s ago: executing program 2 (id=86): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4m31.422111274s ago: executing program 2 (id=89): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 4m30.733839461s ago: executing program 2 (id=93): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m29.894370511s ago: executing program 2 (id=97): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 4m29.441815812s ago: executing program 33 (id=97): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 3m4.755696357s ago: executing program 4 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d1", 0x1}], 0x1, 0x8, 0x7fffffff) 3m4.525646492s ago: executing program 4 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r1, &(0x7f0000000600)="566fbd", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3m4.22108621s ago: executing program 4 (id=665): r0 = socket$inet(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(r0) 3m3.016944709s ago: executing program 4 (id=670): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m2.408136954s ago: executing program 4 (id=678): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/w\f.\x0el\x85op#\x00O\xaa\x8f)\xa82\x8bl\xd4p\xe9\xdaw\x9f\xc8'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32dcc548e812"}, 0x160) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x3]}}) 3m1.970444124s ago: executing program 4 (id=679): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 3m1.406852758s ago: executing program 34 (id=679): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 1m33.038107582s ago: executing program 1 (id=1094): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m23.23652192s ago: executing program 6 (id=1096): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) 1m23.161942102s ago: executing program 3 (id=1097): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 1m21.111900552s ago: executing program 5 (id=1098): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r1, 0x73}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) 1m20.641431973s ago: executing program 1 (id=1099): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r1, r1, 0x0, 0x1000000201005) 1m13.014191178s ago: executing program 6 (id=1100): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) syz_emit_ethernet(0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd68b5b945000e32fffe80"], 0x0) 1m12.469993572s ago: executing program 3 (id=1101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) 1m11.775774929s ago: executing program 5 (id=1102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0xfffffeff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0) 1m2.935238623s ago: executing program 5 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x1ca9) 1m2.880805534s ago: executing program 3 (id=1104): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setns(0xc9, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)) 1m2.876702274s ago: executing program 6 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r0, &(0x7f0000002700)={0x4e, 0xfffffffffffffff5, 0x0, {0x5}}, 0x18) write$cgroup_type(r0, &(0x7f0000000700), 0x9) 1m2.824042895s ago: executing program 1 (id=1105): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @empty, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0xfffc) 53.073035662s ago: executing program 1 (id=1106): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) 53.006392964s ago: executing program 3 (id=1107): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 52.182913414s ago: executing program 5 (id=1108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) io_setup(0x4, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x2}]) 50.366190028s ago: executing program 6 (id=1109): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) futex(0x0, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x2) 42.952171748s ago: executing program 1 (id=1110): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000a40), 0x208e24b) mmap(&(0x7f00006df000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) 42.917921588s ago: executing program 3 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x5c91, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f79568c029e530c3899ae5d322348df7"}]}}}}}}}}, 0x0) 39.502925752s ago: executing program 6 (id=1112): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) 39.489897932s ago: executing program 5 (id=1113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) 31.531694895s ago: executing program 3 (id=1114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)={0x0, 0x14, 0xe, "0e91812dfad13f6b6487cf5dcfdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.113921075s ago: executing program 1 (id=1115): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYBLOB, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x1, 0x574, &(0x7f0000000980)="$eJzs3V9v094ZwPHHpR1RJnXTmBCqChzKJhWpBCeBoIgrzzlJDYkd2Q5qr1BFU1SRwkSZtPYGesM2abuYtDfALvcipr0htJfQn3zs9G/+AC1tf9X3E5VzYp/4PE4sP5w2PhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCWW7PtoiVNz+8sqeHcWhi09p9mrz62QO4dKkb0K2IlP5LLyY100Y3f7q++nvwzJ7Pps1nJJUVOtn95/ddPrk1O9F8/IuBv8u/v3NLm1vbrlV6v++60ArmAbl4dvq6hfS8KvJbT0MqLAlWtVOwHi/VI1b2mjpajWLeUG2onDkI1795TxWq1rHRhOej4jZrT1P2Fj++XbLuinhba2gmjwH/wtBC5i16z6fkN0yZZnbR5nByIz7xYxdppKbW23uuWx+1A0qj4NY1K4xqV7FKpWCyVipVH1UePbXvy2AL7CDnW4vQOWvw8neLZGziZiSz/S1M88aUjS6IGPlypSSiBtIasz/Tz/+8f6JH9Hsz//Sx/Y3/1jJj8fyt9dmtY/h8Sy9k9NmVLtuW1rEhPetKVd+ce0dk+GqLFF08iCcSTljhmicqWKKlKRSpiywtZlPpU8iHWxZOmaIlkWSKJRZsjypVQtDgSSyChKJkXV+6JkqJUpSplUaKlIMsSSEd8aUhNHLOVNVk373tZlDUsxr1GxaG7ke8fd10pifrnv2TwkUX+x8md5ukbOJHdfv4HAAAAAACXlmV++z5lfm6a53Wvqe3zDgsAAAAAAJwi85f/2aQw3866KRbjfwAAAAAALhvLXGNniUhebqe1NbHM5VL8EgAAAAAAgEvC/P3/VlKYOVBui7U3XQrjfwAAAAAALom/jp1jP2pftf77fwnDKWunvfQ7a8PMzetsXElfd+XoFuP6jDWdbcQUlbSYnHT1rJVLG+1NgvklK9bGxWHtB+DsBfDxWwK4Nil/lztpmzurabmarflV2ku+7jV1wQ2aT4riONMTsV6K//Rm/c9idv9vfmvaysl6r1t4+ba3amLZSbays5FNoHhsHsURsbw38y2Yay4G7vGUuRAj6zdvydp6r2u3l65mW3Y2JtLKxOEeP0yP6POTzKWt5rIZb/P9NWmfuaTPYmHY3mdRFE+455/kbtrm7vzdtBgQRWlcFKWDUQx+L04eRXlcFOUTRgEA52VtTBay5Fje/Y6z3JHsnpz2viK7yzdm908yn7aZnzEn1smZAWd0e9wZ3T5hdvvPsXsgDcuxSb//OJJVPycv+Dy036hZspK38Mr7jT/K9c2t7fvrGyuvuq+6b0qlcsV+aNuPSjJldiMryD0AgAEO3mPHOpD//7ebskbehWd3N8ndD7NR9c7RUXWW8X6z95WCgryUt9KTVVkwVxuYbxwM/H9H/sDXEBbGjFrzJk2md3hZGDGq+4W5yqG/3dLItodjKJ/FRwEAwJmZG5OHR+f/dOy+MGbcfTiXjx4d5w/crQ0AAPwYOvxi5eO/WGHotV8Uq9WiEy9qFQbuMxV6tYZWnh/r0F10/IZW7TCIAzdoJpXnXk1HKuq020EYq3oQqnYQeUtm+kCV3fo90i3Hjz03aje1E2nlBn7suLGqeZGr2p0/NL1oUYfmxVFbu17dc53YC3wVBZ3Q1QWlIq0PNPRq2o+9updUfdUOvZYT5tTzoNlpaVXTkRt67ThIN9jvy/PrQdgymy2c95sNAMAFsbm1/Xql1+u++4GVgR3nznxXAQBAZkyWBgAAAAAAAAAAAAAAAAAAAAAAF8BZXP9HZa8yeTHCOOVKfyroixIPlVOopB+p9XHoqePD2ZyhAPwoPwUAAP//r55ZHg==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x101040, 0x8a) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) 30.124566299s ago: executing program 5 (id=1116): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.492648457s ago: executing program 6 (id=1117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x7f) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[], 0x128) read(r0, &(0x7f0000000040)=""/1, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0) 12.376227689s ago: executing program 35 (id=1114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)={0x0, 0x14, 0xe, "0e91812dfad13f6b6487cf5dcfdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.518867423s ago: executing program 36 (id=1115): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYBLOB, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x1, 0x574, &(0x7f0000000980)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x101040, 0x8a) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) 5.076772936s ago: executing program 37 (id=1116): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 38 (id=1117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x7f) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[], 0x128) read(r0, &(0x7f0000000040)=""/1, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.759231][ T6888] RSP: 002b:00007f4903ae5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 136.767709][ T6888] RAX: ffffffffffffffda RBX: 00007f4902e25fa0 RCX: 00007f4902b9e559 [ 136.775713][ T6888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 136.783721][ T6888] RBP: 00007f4902c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 136.791738][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.799740][ T6888] R13: 00007f4902e26038 R14: 00007f4902e25fa0 R15: 00007ffc8d89ff08 [ 136.807762][ T6888] [ 136.825626][ T6856] syz.4.265: attempt to access beyond end of device [ 136.825626][ T6856] loop4: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 136.960363][ T5974] syz-executor: attempt to access beyond end of device [ 136.960363][ T5974] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.981300][ T6894] loop1: detected capacity change from 0 to 1024 [ 136.989863][ T5974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 137.004520][ T6894] EXT4-fs: Ignoring removed oldalloc option [ 137.025903][ T6894] EXT4-fs: Ignoring removed oldalloc option [ 137.088523][ T6894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.135250][ T6894] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 137.202916][ T6894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.240918][ T6901] loop5: detected capacity change from 0 to 164 [ 137.349627][ T5772] usb 4-1: USB disconnect, device number 3 [ 137.650360][ T6914] warning: `syz.5.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.875442][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.163392][ T6924] loop4: detected capacity change from 0 to 2048 [ 138.237240][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.398025][ T6938] input: syz0 as /devices/virtual/input/input7 [ 138.478043][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.699709][ T6946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.009340][ T6960] overlayfs: failed to verify origin (/syz1, ino=36, err=-116) [ 139.029180][ T6960] overlayfs: failed to verify upper root origin [ 139.623075][ T6985] netlink: 'syz.5.306': attribute type 5 has an invalid length. [ 139.648001][ T6985] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.657794][ T6985] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.666819][ T6985] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.675948][ T6985] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.737780][ T6985] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.747117][ T6985] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.756620][ T6985] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.766369][ T6985] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.354381][ T8] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.417570][ T7000] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 140.595898][ T8] usb 2-1: config 0 interface 0 altsetting 238 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.636308][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.643050][ T8] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 140.675252][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.697986][ T8] usb 2-1: config 0 descriptor?? [ 141.130931][ T8] hid (null): invalid report_size 2187 [ 141.149785][ T8] saitek 0003:06A3:0CCD.0002: invalid report_size 2187 [ 141.174117][ T8] saitek 0003:06A3:0CCD.0002: item 0 2 1 7 parsing failed [ 141.195266][ T8] saitek 0003:06A3:0CCD.0002: parse failed [ 141.201257][ T8] saitek: probe of 0003:06A3:0CCD.0002 failed with error -22 [ 141.380630][ T5846] usb 2-1: USB disconnect, device number 6 [ 141.503286][ T7009] loop4: detected capacity change from 0 to 32768 [ 141.527464][ T7009] XFS: ikeep mount option is deprecated. [ 141.572396][ T7009] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.706802][ T7009] XFS (loop4): Ending clean mount [ 142.204663][ T5974] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.438971][ T7068] loop3: detected capacity change from 0 to 40427 [ 143.505193][ T7068] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.564421][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.625423][ T7068] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.773121][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 143.782393][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.795575][ T5775] syz-executor: attempt to access beyond end of device [ 143.795575][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.815950][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.243438][ T8] usb 2-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (183) [ 144.367566][ T7105] loop5: detected capacity change from 0 to 2048 [ 144.410563][ T7105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.454367][ T8] usb 2-1: Firmware: build [ 144.649898][ T8] usb 2-1: failed to fetch extended address, random address set [ 144.662854][ T8] usb 2-1: atusb_probe: initialization failed, error = -524 [ 144.672587][ T8] atusb: probe of 2-1:1.0 failed with error -524 [ 144.689451][ T8] usb 2-1: USB disconnect, device number 7 [ 144.788567][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.910999][ T7117] loop3: detected capacity change from 0 to 128 [ 144.943974][ T7117] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.995001][ T7117] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.061977][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.294318][ T5846] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.406119][ T7130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.477104][ T7132] TCP: MD5 Hash mismatch for [fe88::102]:20004->[ff02::1]:20004 L3 index 0 [ 145.496480][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.507971][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.518944][ T5846] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 145.529808][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.563369][ T5846] usb 6-1: config 0 descriptor?? [ 146.001733][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.043249][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.063263][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.081788][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.089347][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.110544][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.134432][ T5846] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.165948][ T5846] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 146.289958][ T5846] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 146.425260][ T5875] smpboot: CPU 1 is now offline [ 146.627398][ T7156] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 146.687825][ T5846] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 146.706111][ T5846] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 146.721184][ T5846] usb 6-1: USB disconnect, device number 3 [ 146.734899][ T5085] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 146.946408][ T7161] tipc: Started in network mode [ 146.962118][ T7161] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 146.972443][ T7161] tipc: Enabled bearer , priority 0 [ 146.993156][ T7161] tipc: Resetting bearer [ 147.069201][ T7161] tipc: Disabling bearer [ 149.436644][ T7233] loop1: detected capacity change from 0 to 256 [ 149.465594][ T7233] exfat: Deprecated parameter 'utf8' [ 149.470984][ T7233] exfat: Deprecated parameter 'utf8' [ 149.514242][ T7233] exfat: Deprecated parameter 'utf8' [ 149.645617][ T7233] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 149.859533][ T7247] loop5: detected capacity change from 0 to 512 [ 149.950908][ T7247] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.376: iget: bad i_size value: 38620345925642 [ 150.042062][ T7247] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.376: couldn't read orphan inode 15 (err -117) [ 150.129467][ T7247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.338530][ T7219] loop3: detected capacity change from 0 to 32768 [ 150.384251][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.576539][ T32] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 150.594213][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 150.606811][ T5845] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.634489][ T5845] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.649684][ T32] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 150.678592][ T5845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.699489][ T32] EXT4-fs (loop5): This should not happen!! Data will be lost [ 150.699489][ T32] [ 150.728870][ T5845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.735461][ T32] EXT4-fs (loop5): Total free blocks count 0 [ 150.761272][ T5845] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.774197][ T32] EXT4-fs (loop5): Free/Dirty block details [ 150.793980][ T32] EXT4-fs (loop5): free_blocks=0 [ 150.803397][ T32] EXT4-fs (loop5): dirty_blocks=19 [ 150.819142][ T5845] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.832364][ T32] EXT4-fs (loop5): Block reservation details [ 150.849005][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.857270][ T32] EXT4-fs (loop5): i_reserved_data_blocks=19 [ 150.884925][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.198596][ T28] audit: type=1326 audit(1792159292.741:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.278676][ T28] audit: type=1326 audit(1792159292.741:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.329033][ T28] audit: type=1326 audit(1792159292.771:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.392556][ T28] audit: type=1326 audit(1792159292.771:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.445282][ T28] audit: type=1326 audit(1792159292.781:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.521775][ T28] audit: type=1326 audit(1792159292.781:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.576489][ T28] audit: type=1326 audit(1792159292.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.613287][ T28] audit: type=1326 audit(1792159292.781:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4902b982d7 code=0x7ffc0000 [ 151.665602][ T28] audit: type=1326 audit(1792159292.781:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4902b3f8d9 code=0x7ffc0000 [ 151.719330][ T28] audit: type=1326 audit(1792159292.781:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.5.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902b9e559 code=0x7ffc0000 [ 151.778973][ T7287] usbtmc 5-1:16.0: simple control status returned bd [ 151.974706][ T5875] usb 5-1: USB disconnect, device number 3 [ 152.664430][ T7279] loop3: detected capacity change from 0 to 40427 [ 152.748363][ T7279] F2FS-fs (loop3): invalid crc value [ 152.788662][ T7279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.945861][ T6391] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.954714][ T7279] F2FS-fs (loop3): Start checkpoint disabled! [ 153.022684][ T7279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 153.156387][ T6391] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 153.184276][ T6391] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 153.217388][ T6391] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 153.238638][ T6391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.268841][ T6391] usb 5-1: Product: syz [ 153.293219][ T6391] usb 5-1: Manufacturer: syz [ 153.298431][ T6391] usb 5-1: SerialNumber: syz [ 153.319673][ T6391] usb 5-1: config 0 descriptor?? [ 153.349620][ T7313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.360799][ T7313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.518885][ T49] kworker/u4:3: attempt to access beyond end of device [ 153.518885][ T49] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 153.589242][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 153.597112][ T49] kworker/u4:3: attempt to access beyond end of device [ 153.597112][ T49] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 153.637366][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 153.659631][ T7313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.682248][ T7313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.119049][ T6391] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 154.531632][ T6391] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 154.593629][ T6391] usb 5-1: USB disconnect, device number 4 [ 154.601468][ T7326] loop1: detected capacity change from 0 to 32768 [ 154.655815][ T7326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.389 (7326) [ 154.711596][ T7326] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.740133][ T7355] FAULT_INJECTION: forcing a failure. [ 154.740133][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 154.763632][ T7326] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 154.788218][ T7326] BTRFS info (device loop1): using free space tree [ 154.796472][ T7355] CPU: 0 PID: 7355 Comm: syz.3.388 Not tainted syzkaller #0 [ 154.803938][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.814191][ T7355] Call Trace: [ 154.817531][ T7355] [ 154.820512][ T7355] dump_stack_lvl+0x18c/0x250 [ 154.825262][ T7355] ? show_regs_print_info+0x20/0x20 [ 154.830523][ T7355] ? load_image+0x420/0x420 [ 154.835104][ T7355] ? __lock_acquire+0x7eb0/0x7eb0 [ 154.840204][ T7355] should_fail_ex+0x394/0x4c0 [ 154.844965][ T7355] should_failslab+0x9/0x20 [ 154.849530][ T7355] slab_pre_alloc_hook+0x59/0x300 [ 154.854610][ T7355] ? lockdep_softirqs_off+0x440/0x440 [ 154.860043][ T7355] ? init_pseudo+0x56/0x140 [ 154.864606][ T7355] __kmem_cache_alloc_node+0x53/0x250 [ 154.870054][ T7355] ? init_pseudo+0x56/0x140 [ 154.874612][ T7355] kmalloc_trace+0x2a/0xe0 [ 154.879095][ T7355] init_pseudo+0x56/0x140 [ 154.883483][ T7355] pipefs_init_fs_context+0x1c/0x90 [ 154.888741][ T7355] alloc_fs_context+0x618/0x7a0 [ 154.893666][ T7355] __se_sys_fsopen+0xa0/0x2c0 [ 154.898410][ T7355] do_syscall_64+0x55/0xb0 [ 154.902881][ T7355] ? clear_bhb_loop+0x40/0x90 [ 154.907619][ T7355] ? clear_bhb_loop+0x40/0x90 [ 154.912353][ T7355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.918298][ T7355] RIP: 0033:0x7ff21fb9e559 [ 154.922745][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.942391][ T7355] RSP: 002b:00007ff220afe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 154.950842][ T7355] RAX: ffffffffffffffda RBX: 00007ff21fe25fa0 RCX: 00007ff21fb9e559 [ 154.958878][ T7355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 154.966886][ T7355] RBP: 00007ff21fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 154.974890][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.982894][ T7355] R13: 00007ff21fe26038 R14: 00007ff21fe25fa0 R15: 00007ffd82e850e8 [ 154.990943][ T7355] [ 155.414282][ T7326] BTRFS info (device loop1): enabling ssd optimizations [ 155.439040][ T7326] BTRFS info (device loop1): auto enabling async discard [ 155.651701][ T7382] macsec1: entered allmulticast mode [ 156.063050][ T7393] loop4: detected capacity change from 0 to 64 [ 156.072448][ T7326] BTRFS info (device loop1): balance: start -sconvert=raid0,usage=0..1342177280 [ 156.203168][ T7326] BTRFS info (device loop1): relocating block group 1048576 flags system [ 156.274308][ T7326] BTRFS info (device loop1): balance: canceled [ 156.289939][ T7399] jffs2: notice: (7399) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.913220][ T5778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.400741][ T7429] syzkaller1: entered promiscuous mode [ 157.424511][ T7429] syzkaller1: entered allmulticast mode [ 158.094679][ T5845] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 158.296198][ T5845] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.326760][ T5845] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.362344][ T5845] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.392370][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.434441][ T5845] usb 2-1: Product: syz [ 158.438709][ T5845] usb 2-1: Manufacturer: syz [ 158.470093][ T5845] usb 2-1: SerialNumber: syz [ 158.487756][ T7437] loop5: detected capacity change from 0 to 40427 [ 158.496032][ T5845] usb 2-1: config 0 descriptor?? [ 158.533562][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 158.550132][ T5845] usb 2-1: selecting invalid altsetting 0 [ 158.558146][ T7437] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 158.571981][ T7437] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 158.627793][ T7437] F2FS-fs (loop5): invalid crc value [ 158.652592][ T7437] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 158.754136][ T7437] F2FS-fs (loop5): Found nat_bits in checkpoint [ 158.810080][ T5845] usb 2-1: USB disconnect, device number 8 [ 158.900059][ T7462] FAULT_INJECTION: forcing a failure. [ 158.900059][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 158.972410][ T7462] CPU: 0 PID: 7462 Comm: syz.3.408 Not tainted syzkaller #0 [ 158.979805][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.990102][ T7462] Call Trace: [ 158.993458][ T7462] [ 158.996439][ T7462] dump_stack_lvl+0x18c/0x250 [ 159.001183][ T7462] ? show_regs_print_info+0x20/0x20 [ 159.006533][ T7462] ? load_image+0x420/0x420 [ 159.011107][ T7462] ? __might_sleep+0xe0/0xe0 [ 159.015815][ T7462] ? __lock_acquire+0x7eb0/0x7eb0 [ 159.020914][ T7462] should_fail_ex+0x394/0x4c0 [ 159.025675][ T7462] should_failslab+0x9/0x20 [ 159.030266][ T7462] slab_pre_alloc_hook+0x59/0x300 [ 159.035364][ T7462] ? key_put+0x9c/0xc0 [ 159.039511][ T7462] kmem_cache_alloc+0x5a/0x2c0 [ 159.044340][ T7462] ? prepare_creds+0x30/0x5d0 [ 159.049122][ T7462] prepare_creds+0x30/0x5d0 [ 159.053698][ T7462] join_session_keyring+0x1b/0x440 [ 159.058901][ T7462] lookup_user_key+0x4e6/0x1140 [ 159.063842][ T7462] ? lookup_user_key_possessed+0x40/0x40 [ 159.069543][ T7462] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 159.075604][ T7462] keyctl_keyring_move+0x3d/0x110 [ 159.080720][ T7462] __se_sys_keyctl+0x84a/0xb50 [ 159.085634][ T7462] ? __x64_sys_keyctl+0xc0/0xc0 [ 159.090546][ T7462] ? do_futex+0x2ff/0x3e0 [ 159.094942][ T7462] ? __ia32_sys_get_robust_list+0x110/0x110 [ 159.100938][ T7462] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 159.106992][ T7462] ? lock_chain_count+0x20/0x20 [ 159.111910][ T7462] ? lockdep_hardirqs_on+0x98/0x150 [ 159.117170][ T7462] ? __x64_sys_keyctl+0x20/0xc0 [ 159.122122][ T7462] do_syscall_64+0x55/0xb0 [ 159.126595][ T7462] ? clear_bhb_loop+0x40/0x90 [ 159.131332][ T7462] ? clear_bhb_loop+0x40/0x90 [ 159.136072][ T7462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.142035][ T7462] RIP: 0033:0x7ff21fb9e559 [ 159.146515][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.166183][ T7462] RSP: 002b:00007ff220afe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 159.174672][ T7462] RAX: ffffffffffffffda RBX: 00007ff21fe25fa0 RCX: 00007ff21fb9e559 [ 159.182724][ T7462] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 000000000000001e [ 159.190788][ T7462] RBP: 00007ff21fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 159.198833][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.206859][ T7462] R13: 00007ff21fe26038 R14: 00007ff21fe25fa0 R15: 00007ffd82e850e8 [ 159.214939][ T7462] [ 159.318533][ T7437] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.326191][ T7437] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.371302][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 159.371320][ T28] audit: type=1800 audit(1792159300.911:171): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.404" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 159.393732][ T7437] syz.5.404: attempt to access beyond end of device [ 159.393732][ T7437] loop5: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 159.468943][ T6193] syz-executor: attempt to access beyond end of device [ 159.468943][ T6193] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.528006][ T6193] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 159.728916][ T7475] ip6erspan0: entered allmulticast mode [ 159.826548][ T7478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.411'. [ 160.237341][ T7489] loop1: detected capacity change from 0 to 2048 [ 160.310684][ T7489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.738005][ T7504] syzkaller1: entered promiscuous mode [ 160.743572][ T7504] syzkaller1: entered allmulticast mode [ 160.957247][ T7512] loop5: detected capacity change from 0 to 64 [ 161.409181][ T7527] ip6erspan0: entered allmulticast mode [ 161.614964][ T7536] ip_tables: iptables: counters copy to user failed while replacing table [ 162.173496][ T7564] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 162.837874][ T7559] loop1: detected capacity change from 0 to 40427 [ 162.849498][ T7559] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 162.860440][ T7559] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 162.873929][ T7559] F2FS-fs (loop1): invalid crc value [ 162.914493][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.993908][ T7559] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 163.002923][ T7559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 163.099830][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.118430][ T5875] usb 5-1: config 0 has no interfaces? [ 163.126741][ T5778] syz-executor: attempt to access beyond end of device [ 163.126741][ T5778] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.142191][ T5875] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.151941][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.163042][ T5778] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.176647][ T5875] usb 5-1: config 0 descriptor?? [ 163.431529][ T5875] usb 5-1: USB disconnect, device number 5 [ 164.004204][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.026176][ T7608] loop1: detected capacity change from 0 to 1764 [ 164.226522][ T5875] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.248888][ T7615] loop3: detected capacity change from 0 to 256 [ 164.268468][ T5875] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.283633][ T7615] exfat: Deprecated parameter 'utf8' [ 164.302657][ T7615] exfat: Deprecated parameter 'utf8' [ 164.318584][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.325616][ T7615] exfat: Deprecated parameter 'utf8' [ 164.341149][ T5875] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 164.351038][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.391689][ T5875] usb 5-1: config 0 descriptor?? [ 164.400083][ T7619] loop5: detected capacity change from 0 to 1024 [ 164.426017][ T7619] EXT4-fs: Ignoring removed oldalloc option [ 164.440583][ T7615] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 164.456217][ T7619] EXT4-fs: Ignoring removed oldalloc option [ 164.500791][ T7619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.540152][ T7619] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 164.578425][ T7617] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.602733][ T7619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.852944][ T5875] input: HID 5543:0781 Keyboard as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0781.0004/input/input9 [ 165.109565][ T5875] uclogic 0003:5543:0781.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 165.168263][ T5875] usb 5-1: USB disconnect, device number 6 [ 165.258158][ T7627] fido_id[7627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 165.346265][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.626985][ T7635] loop3: detected capacity change from 0 to 131072 [ 166.647274][ T7635] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 166.655760][ T7635] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.673377][ T7635] F2FS-fs (loop3): invalid crc value [ 166.689157][ T7635] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.728158][ T5845] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.761231][ T7635] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 166.768500][ T7635] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 166.926098][ T7642] sctp: [Deprecated]: syz.4.458 (pid 7642) Use of int in max_burst socket option. [ 166.926098][ T7642] Use struct sctp_assoc_value instead [ 166.974183][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 166.986854][ T5845] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 167.011914][ T5845] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.054204][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.081517][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.118570][ T5845] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.162748][ T5845] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.192825][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.370274][ T7646] loop4: detected capacity change from 0 to 1764 [ 167.484431][ T5845] usb 6-1: usb_control_msg returned -32 [ 167.506365][ T5845] usbtmc 6-1:16.0: can't read capabilities [ 167.884241][ T7649] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 168.118163][ T6391] usb 6-1: USB disconnect, device number 4 [ 168.421348][ T7659] bonding: no command found in bonding_masters - use +ifname or -ifname [ 168.849650][ T7672] loop5: detected capacity change from 0 to 1764 [ 169.220809][ T7683] loop1: detected capacity change from 0 to 512 [ 169.333614][ T7683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.393539][ T7683] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.479693][ T7692] loop4: detected capacity change from 0 to 128 [ 169.512909][ T7683] EXT4-fs (loop1): shut down requested (1) [ 169.544972][ T7692] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.610889][ T7692] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.656624][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.689846][ T1087] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 169.853497][ T5974] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.040165][ T7706] netlink: 'syz.3.485': attribute type 12 has an invalid length. [ 170.070078][ T7706] netlink: 'syz.3.485': attribute type 29 has an invalid length. [ 170.095417][ T7706] netlink: 148 bytes leftover after parsing attributes in process `syz.3.485'. [ 170.124267][ T7706] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 170.154218][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.161995][ T7706] netlink: 'syz.3.485': attribute type 2 has an invalid length. [ 170.277253][ T7710] loop5: detected capacity change from 0 to 128 [ 170.327289][ T7710] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 170.356028][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 170.381706][ T7710] hpfs: filesystem error: improperly stopped [ 170.390220][ T5845] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 170.404161][ T5845] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.414592][ T7710] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 170.422489][ T7710] hpfs: You really don't want any checks? You are crazy... [ 170.454168][ T5845] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.474195][ T7710] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 170.492455][ T5845] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.513461][ T7710] hpfs: code page support is disabled [ 170.529720][ T7710] hpfs: hpfs_map_4sectors(): unaligned read [ 170.535916][ T5845] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.562829][ T7710] hpfs: hpfs_map_4sectors(): unaligned read [ 170.580155][ T5845] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.589542][ T7710] hpfs: filesystem error: unable to find root dir [ 170.624500][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.654007][ T7710] hpfs: hpfs_map_4sectors(): unaligned read [ 170.661080][ T7710] hpfs: hpfs_map_sector(): read error [ 170.773823][ T7719] loop4: detected capacity change from 0 to 512 [ 170.867442][ T7719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.895363][ T5845] usb 2-1: usb_control_msg returned -32 [ 170.901063][ T5845] usbtmc 2-1:16.0: can't read capabilities [ 170.927729][ T7719] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.017013][ T7719] EXT4-fs (loop4): shut down requested (1) [ 171.064645][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.074453][ T3529] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 171.276669][ T7736] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 171.479218][ T5845] usb 2-1: USB disconnect, device number 9 [ 171.648023][ T7750] loop3: detected capacity change from 0 to 128 [ 171.686407][ T7750] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.711392][ T7750] hpfs: filesystem error: improperly stopped [ 171.730501][ T7750] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.747299][ T7750] hpfs: You really don't want any checks? You are crazy... [ 171.792759][ T7750] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 171.821529][ T7750] hpfs: code page support is disabled [ 171.833098][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 171.852346][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 171.877606][ T7750] hpfs: filesystem error: unable to find root dir [ 171.926452][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 171.947029][ T7750] hpfs: hpfs_map_sector(): read error [ 172.534604][ T7775] FAULT_INJECTION: forcing a failure. [ 172.534604][ T7775] name fail_futex, interval 1, probability 0, space 0, times 1 [ 172.576935][ T7778] Invalid argument reading file caps for ./file0 [ 172.588375][ T7775] CPU: 0 PID: 7775 Comm: syz.4.512 Not tainted syzkaller #0 [ 172.595704][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.605784][ T7775] Call Trace: [ 172.609090][ T7775] [ 172.612038][ T7775] dump_stack_lvl+0x18c/0x250 [ 172.616741][ T7775] ? show_regs_print_info+0x20/0x20 [ 172.621955][ T7775] ? load_image+0x420/0x420 [ 172.626491][ T7775] ? asan.module_dtor+0x20/0x20 [ 172.631369][ T7775] should_fail_ex+0x394/0x4c0 [ 172.636254][ T7775] get_futex_key+0x136/0x1030 [ 172.641068][ T7775] ? __lock_acquire+0x7eb0/0x7eb0 [ 172.646188][ T7775] ? preempt_schedule_common+0x82/0xc0 [ 172.651720][ T7775] ? futex_setup_timer+0xc0/0xc0 [ 172.656713][ T7775] ? preempt_schedule+0xc0/0xd0 [ 172.661653][ T7775] ? schedule_preempt_disabled+0x20/0x20 [ 172.667360][ T7775] futex_requeue+0x288/0x13c0 [ 172.672081][ T7775] ? preempt_schedule_thunk+0x1a/0x30 [ 172.677514][ T7775] ? try_to_wake_up+0x6f5/0x10e0 [ 172.682522][ T7775] ? put_task_struct+0xc0/0xc0 [ 172.687787][ T7775] ? wake_up_q+0xca/0x100 [ 172.692189][ T7775] ? futex_wake+0x42a/0x4f0 [ 172.697544][ T7775] ? rcu_read_lock_any_held+0xb4/0x140 [ 172.703110][ T7775] do_futex+0x32b/0x3e0 [ 172.707346][ T7775] ? __ia32_sys_get_robust_list+0x110/0x110 [ 172.713496][ T7775] __se_sys_futex+0x3a9/0x440 [ 172.718330][ T7775] ? __x64_sys_futex+0xf0/0xf0 [ 172.723188][ T7775] ? __x64_sys_futex+0x21/0xf0 [ 172.727998][ T7775] do_syscall_64+0x55/0xb0 [ 172.732482][ T7775] ? clear_bhb_loop+0x40/0x90 [ 172.737514][ T7775] ? clear_bhb_loop+0x40/0x90 [ 172.742260][ T7775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.748225][ T7775] RIP: 0033:0x7f5d9fb9e559 [ 172.752785][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.774217][ T7775] RSP: 002b:00007f5da0a4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.783640][ T7775] RAX: ffffffffffffffda RBX: 00007f5d9fe25fa0 RCX: 00007f5d9fb9e559 [ 172.792628][ T7775] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000000 [ 172.800644][ T7775] RBP: 00007f5d9fc358b0 R08: 0000000000000000 R09: 0000000000000001 [ 172.808655][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.816664][ T7775] R13: 00007f5d9fe26038 R14: 00007f5d9fe25fa0 R15: 00007ffcafd72d48 [ 172.824694][ T7775] [ 172.827813][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.099836][ T7788] kernel read not supported for file /events/enable (pid: 7788 comm: syz.5.518) [ 173.643851][ T7809] loop4: detected capacity change from 0 to 2048 [ 173.706450][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.724786][ T7813] loop5: detected capacity change from 0 to 128 [ 173.781413][ T7813] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.811070][ T7813] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.867035][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.950005][ T6193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.163157][ T7820] loop5: detected capacity change from 0 to 7 [ 174.221034][ T7820] Dev loop5: unable to read RDB block 7 [ 174.232671][ T7820] loop5: unable to read partition table [ 174.263406][ T7820] loop5: partition table beyond EOD, truncated [ 174.280433][ T7820] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.305089][ T7822] all (unregistering): Released all slaves [ 175.148557][ T7854] loop3: detected capacity change from 0 to 1024 [ 175.171364][ T7854] EXT4-fs: Ignoring removed orlov option [ 175.184453][ T7854] EXT4-fs: Ignoring removed orlov option [ 175.196520][ T7854] EXT4-fs: inline encryption not supported [ 175.245078][ T7854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.367814][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.550269][ T7866] loop3: detected capacity change from 0 to 128 [ 175.600583][ T28] audit: type=1800 audit(1792159317.141:172): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.547" name="file1" dev="loop3" ino=1048654 res=0 errno=0 [ 175.680233][ T7866] syz.3.547: attempt to access beyond end of device [ 175.680233][ T7866] loop3: rw=2049, sector=145, nr_sectors = 28 limit=128 [ 176.194199][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 176.386253][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.399213][ T9] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 176.408672][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.417161][ T9] usb 6-1: Product: syz [ 176.421616][ T9] usb 6-1: Manufacturer: syz [ 176.436007][ T9] usb 6-1: SerialNumber: syz [ 176.457757][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 176.618997][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 176.652573][ T7898] ip6gre1: entered promiscuous mode [ 176.667432][ T7898] ip6gre1: entered allmulticast mode [ 176.864582][ T9] gspca_mr97310a: reg read [21] error -71 [ 176.881153][ T9] mr97310a: probe of 6-1:1.0 failed with error -71 [ 176.912678][ T9] usb 6-1: USB disconnect, device number 5 [ 177.934064][ C0] sched: RT throttling activated [ 178.283978][ T2908] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.294257][ T2908] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.304860][ T5772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.067969][ T5772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.214850][ T5772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.428710][ T7938] loop5: detected capacity change from 0 to 256 [ 179.529057][ T7938] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 179.562900][ T6391] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 179.764145][ T6391] usb 4-1: Using ep0 maxpacket: 32 [ 179.807258][ T6391] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.838220][ T6391] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.870498][ T6391] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.936799][ T6391] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 179.964179][ T6391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.002831][ T6391] usb 4-1: Product: syz [ 180.017751][ T6391] usb 4-1: Manufacturer: syz [ 180.022444][ T6391] usb 4-1: SerialNumber: syz [ 180.209007][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 180.395780][ T6391] usb 4-1: USB disconnect, device number 4 [ 180.493551][ T7949] loop1: detected capacity change from 0 to 8 [ 180.738636][ T7953] loop1: detected capacity change from 0 to 256 [ 180.924766][ T5875] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 181.071912][ T7957] ip_tables: iptables: counters copy to user failed while replacing table [ 181.142516][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 181.164377][ T5875] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.203155][ T5875] usb 6-1: config 0 has no interface number 0 [ 181.217196][ T5875] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.246758][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.280926][ T5875] usb 6-1: Product: syz [ 181.304191][ T5875] usb 6-1: Manufacturer: syz [ 181.314950][ T7959] capability: warning: `syz.1.584' uses 32-bit capabilities (legacy support in use) [ 181.334170][ T5875] usb 6-1: SerialNumber: syz [ 181.351240][ T5875] usb 6-1: config 0 descriptor?? [ 181.391042][ T5875] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 181.603090][ T5875] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 181.665228][ T5875] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 181.915855][ T7966] sctp: [Deprecated]: syz.1.587 (pid 7966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.915855][ T7966] Use struct sctp_sack_info instead [ 182.031466][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 182.041760][ T5875] usb 6-1: USB disconnect, device number 6 [ 182.071580][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 182.139540][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.171995][ T5875] quatech2 6-1:0.51: device disconnected [ 182.309550][ T7974] loop4: detected capacity change from 0 to 16 [ 182.362591][ T7974] erofs: (device loop4): mounted with root inode @ nid 36. [ 182.642810][ T7984] loop3: detected capacity change from 0 to 128 [ 182.749672][ T7984] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.819401][ T7984] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.906936][ T7992] loop4: detected capacity change from 0 to 2048 [ 182.972548][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.000794][ T7992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.044778][ T7992] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.192887][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.545887][ T7991] loop1: detected capacity change from 0 to 32768 [ 183.566416][ T7991] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.599 (7991) [ 183.590168][ T7991] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 183.601012][ T7991] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 183.611466][ T7991] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.627203][ T7991] BTRFS info (device loop1): use zstd compression, level 3 [ 183.636213][ T7991] BTRFS info (device loop1): using free space tree [ 183.687129][ T7991] BTRFS info (device loop1): enabling ssd optimizations [ 183.698255][ T7991] BTRFS info (device loop1): auto enabling async discard [ 183.714259][ T6391] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.827028][ T5778] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 183.906332][ T6391] usb 5-1: Using ep0 maxpacket: 32 [ 183.926216][ T6391] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 183.964166][ T6391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.054613][ T6391] usb 5-1: config 0 descriptor?? [ 184.275234][ T6391] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 184.346836][ T6391] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.388625][ T6391] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 184.422178][ T6391] usb 5-1: media controller created [ 184.454545][ T8030] device-mapper: ioctl: name not supplied when creating device [ 184.483673][ T8006] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 184.531672][ T6391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.672880][ T6391] az6027: usb out operation failed. (-71) [ 184.714402][ T6391] az6027: usb out operation failed. (-71) [ 184.734955][ T6391] stb0899_attach: Driver disabled by Kconfig [ 184.741054][ T6391] az6027: no front-end attached [ 184.741054][ T6391] [ 184.788921][ T6391] az6027: usb out operation failed. (-71) [ 184.814162][ T6391] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 184.839397][ T6391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 184.894726][ T6391] dvb-usb: schedule remote query interval to 400 msecs. [ 184.916389][ T6391] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 184.986580][ T6391] usb 5-1: USB disconnect, device number 7 [ 185.216829][ T6391] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 185.272103][ T8045] loop1: detected capacity change from 0 to 256 [ 185.317845][ T8024] loop5: detected capacity change from 0 to 40427 [ 185.326165][ T8045] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿ" or missing value [ 185.375565][ T8024] F2FS-fs (loop5): invalid crc value [ 185.439512][ T8024] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.672261][ T8024] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 185.820770][ T6193] syz-executor: attempt to access beyond end of device [ 185.820770][ T6193] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.895738][ T6193] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 185.920353][ T8055] loop3: detected capacity change from 0 to 256 [ 185.998414][ T8055] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.518771][ T8044] loop4: detected capacity change from 0 to 40427 [ 186.582552][ T8044] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 186.619435][ T8044] F2FS-fs (loop4): Image doesn't support compression [ 186.644267][ T8044] F2FS-fs (loop4): Image doesn't support compression [ 186.678790][ T8044] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 186.708161][ T8044] F2FS-fs (loop4): invalid crc value [ 186.735463][ T8044] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.901390][ T8044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 187.087320][ T5974] syz-executor: attempt to access beyond end of device [ 187.087320][ T5974] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.143569][ T5974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 187.416420][ T8079] x86/PAT: syz.1.630:8079 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 188.226560][ T8111] loop5: detected capacity change from 0 to 512 [ 188.278365][ T8111] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 188.325894][ T8111] EXT4-fs (loop5): invalid journal inode [ 188.364322][ T8111] EXT4-fs (loop5): can't get journal size [ 188.412309][ T8111] EXT4-fs (loop5): 1 truncate cleaned up [ 188.449395][ T8111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.687634][ T8132] rtc_cmos 00:00: Alarms can be up to one day in the future [ 188.804173][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.973179][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.014600][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 189.022195][ T5845] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 189.043850][ T5845] usb 2-1: config 0 has no interface number 0 [ 189.071629][ T5845] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 189.102365][ T5845] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 189.138810][ T5845] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 189.172064][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.194318][ T6391] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.204653][ T5845] usb 2-1: Product: syz [ 189.208948][ T5845] usb 2-1: Manufacturer: syz [ 189.215480][ T8148] FAULT_INJECTION: forcing a failure. [ 189.215480][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 189.238547][ T5845] usb 2-1: SerialNumber: syz [ 189.254857][ T8148] CPU: 0 PID: 8148 Comm: syz.5.644 Not tainted syzkaller #0 [ 189.262289][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.272442][ T8148] Call Trace: [ 189.275829][ T8148] [ 189.278848][ T8148] dump_stack_lvl+0x18c/0x250 [ 189.283592][ T8148] ? show_regs_print_info+0x20/0x20 [ 189.288890][ T8148] ? load_image+0x420/0x420 [ 189.293466][ T8148] ? __lock_acquire+0x7eb0/0x7eb0 [ 189.298570][ T8148] should_fail_ex+0x394/0x4c0 [ 189.303356][ T8148] should_failslab+0x9/0x20 [ 189.307932][ T8148] slab_pre_alloc_hook+0x59/0x300 [ 189.313028][ T8148] kmem_cache_alloc+0x5a/0x2c0 [ 189.318034][ T8148] ? security_inode_alloc+0x34/0x110 [ 189.323428][ T8148] security_inode_alloc+0x34/0x110 [ 189.328611][ T8148] inode_init_always+0x914/0xc90 [ 189.333601][ T8148] new_inode_pseudo+0x95/0x1d0 [ 189.338436][ T8148] new_inode+0x22/0x1d0 [ 189.342662][ T8148] shmem_get_inode+0x34d/0xcd0 [ 189.347466][ T8148] ? mas_destroy+0x20a0/0x20a0 [ 189.352282][ T8148] __shmem_file_setup+0x167/0x2c0 [ 189.357350][ T8148] shmem_zero_setup+0x8d/0x130 [ 189.362168][ T8148] mmap_region+0x1225/0x2090 [ 189.367132][ T8148] ? file_mmap_ok+0x170/0x170 [ 189.371859][ T8148] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 189.377529][ T8148] ? cap_mmap_addr+0x157/0x2b0 [ 189.382363][ T8148] do_mmap+0x98f/0x10a0 [ 189.386582][ T8148] ? mlock_future_ok+0xf0/0xf0 [ 189.391435][ T8148] ? down_write+0x200/0x200 [ 189.395989][ T8148] vm_mmap_pgoff+0x1c4/0x3f0 [ 189.400679][ T8148] ? account_locked_vm+0x200/0x200 [ 189.405852][ T8148] ? ksys_mmap_pgoff+0xf3/0x720 [ 189.410761][ T8148] ? __x64_sys_mmap+0x7a/0x130 [ 189.415576][ T8148] do_syscall_64+0x55/0xb0 [ 189.420199][ T8148] ? clear_bhb_loop+0x40/0x90 [ 189.424905][ T8148] ? clear_bhb_loop+0x40/0x90 [ 189.429615][ T8148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.435570][ T8148] RIP: 0033:0x7f4902b9e559 [ 189.440025][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.459695][ T8148] RSP: 002b:00007f4903ae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 189.468160][ T8148] RAX: ffffffffffffffda RBX: 00007f4902e25fa0 RCX: 00007f4902b9e559 [ 189.476171][ T8148] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 189.484212][ T8148] RBP: 00007f4902c358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 189.492255][ T8148] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 189.500264][ T8148] R13: 00007f4902e26038 R14: 00007f4902e25fa0 R15: 00007ffc8d89ff08 [ 189.508293][ T8148] [ 189.511360][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.532951][ T5845] usb 2-1: config 0 descriptor?? [ 189.550172][ T5875] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.574656][ T5875] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.582635][ T5875] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.610755][ T5875] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.624221][ T5875] rtc rtc0: __rtc_set_alarm: err=-22 [ 189.651791][ T8122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.664492][ T8122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.851121][ T6391] usb 5-1: Using ep0 maxpacket: 8 [ 189.874940][ T6391] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.894246][ T6391] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.911228][ T6391] usb 5-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 189.935536][ T8122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.943068][ T6391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.951781][ T8122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.973928][ T6391] usb 5-1: config 0 descriptor?? [ 190.173467][ T5845] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 190.184470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.409610][ T6391] sony 0003:054C:0002.0005: unknown main item tag 0x3 [ 190.455638][ T8162] netlink: 292 bytes leftover after parsing attributes in process `syz.3.651'. [ 190.501680][ T6391] sony 0003:054C:0002.0005: No inputs registered, leaving [ 190.545468][ T6391] sony 0003:054C:0002.0005: hidraw0: USB HID v0.00 Joystick [HID 054c:0002] on usb-dummy_hcd.4-1/input0 [ 190.597397][ T6391] sony 0003:054C:0002.0005: failed to claim input [ 190.609148][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.645836][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.701135][ T6391] usb 5-1: USB disconnect, device number 8 [ 190.763434][ T8166] input: syz0 as /devices/virtual/input/input12 [ 190.779929][ T5845] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 190.802584][ T5845] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 190.885229][ T5845] asix: probe of 2-1:0.34 failed with error -71 [ 190.916181][ T5845] usb 2-1: USB disconnect, device number 10 [ 191.714559][ T8169] loop3: detected capacity change from 0 to 32768 [ 192.105649][ T8191] loop5: detected capacity change from 0 to 1764 [ 192.180690][ T8191] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.490623][ T8199] loop1: detected capacity change from 0 to 128 [ 192.556110][ T8201] FAULT_INJECTION: forcing a failure. [ 192.556110][ T8201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.610064][ T8201] CPU: 0 PID: 8201 Comm: syz.5.667 Not tainted syzkaller #0 [ 192.617433][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.627504][ T8201] Call Trace: [ 192.630796][ T8201] [ 192.633738][ T8201] dump_stack_lvl+0x18c/0x250 [ 192.638444][ T8201] ? show_regs_print_info+0x20/0x20 [ 192.643676][ T8201] ? load_image+0x420/0x420 [ 192.648207][ T8201] ? __lock_acquire+0x7eb0/0x7eb0 [ 192.653258][ T8201] should_fail_ex+0x394/0x4c0 [ 192.657969][ T8201] prepare_alloc_pages+0x1e1/0x5b0 [ 192.663123][ T8201] __alloc_pages+0x134/0x460 [ 192.667752][ T8201] ? zone_statistics+0x170/0x170 [ 192.672752][ T8201] ? __lock_acquire+0x7eb0/0x7eb0 [ 192.677844][ T8201] ? alloc_pages+0x4e1/0x740 [ 192.682485][ T8201] ? xas_load+0x12b/0x140 [ 192.686975][ T8201] folio_alloc+0x1e/0x30 [ 192.691262][ T8201] filemap_alloc_folio+0xdf/0x490 [ 192.696332][ T8201] ? filemap_add_folio+0x3d0/0x3d0 [ 192.701490][ T8201] __filemap_get_folio+0x3fb/0xbe0 [ 192.706740][ T8201] pagecache_get_page+0x2a/0x250 [ 192.711722][ T8201] aio_setup_ring+0x3b7/0xf30 [ 192.716537][ T8201] ? free_ioctx_reqs+0x190/0x190 [ 192.721521][ T8201] ioctx_alloc+0x316/0x770 [ 192.725985][ T8201] __se_sys_io_setup+0x7b/0x190 [ 192.730889][ T8201] do_syscall_64+0x55/0xb0 [ 192.735342][ T8201] ? clear_bhb_loop+0x40/0x90 [ 192.740056][ T8201] ? clear_bhb_loop+0x40/0x90 [ 192.744769][ T8201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.750709][ T8201] RIP: 0033:0x7f4902b9e559 [ 192.755158][ T8201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.775420][ T8201] RSP: 002b:00007f4903ae5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 192.783897][ T8201] RAX: ffffffffffffffda RBX: 00007f4902e25fa0 RCX: 00007f4902b9e559 [ 192.791927][ T8201] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000007fff [ 192.799953][ T8201] RBP: 00007f4902c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 192.808137][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.816158][ T8201] R13: 00007f4902e26038 R14: 00007f4902e25fa0 R15: 00007ffc8d89ff08 [ 192.824189][ T8201] [ 192.827653][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.038300][ T8199] syz.1.675: attempt to access beyond end of device [ 193.038300][ T8199] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 193.301276][ T8204] syz.1.675: attempt to access beyond end of device [ 193.301276][ T8204] loop1: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 193.380306][ T8214] loop4: detected capacity change from 0 to 512 [ 193.417683][ T8214] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 193.451313][ T8214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.537106][ T8214] EXT4-fs (loop4): 1 truncate cleaned up [ 193.543957][ T8214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.878960][ T5974] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 194.029802][ T8230] ptp ptp0: new virtual clock ptp1 [ 194.072365][ T8230] ptp ptp0: guarantee physical clock free running [ 194.107092][ T8232] ptp ptp0: delete virtual clock ptp1 [ 194.189452][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.221980][ T8232] ptp ptp0: only physical clock in use now [ 194.333987][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.512940][ T8236] FAULT_INJECTION: forcing a failure. [ 194.512940][ T8236] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 194.554444][ T8236] CPU: 0 PID: 8236 Comm: syz.1.681 Not tainted syzkaller #0 [ 194.561825][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.571935][ T8236] Call Trace: [ 194.575269][ T8236] [ 194.578245][ T8236] dump_stack_lvl+0x18c/0x250 [ 194.582989][ T8236] ? show_regs_print_info+0x20/0x20 [ 194.588243][ T8236] ? load_image+0x420/0x420 [ 194.592811][ T8236] ? __might_fault+0xaa/0x120 [ 194.597546][ T8236] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.602628][ T8236] should_fail_ex+0x394/0x4c0 [ 194.607371][ T8236] _copy_from_user+0x2f/0xe0 [ 194.612019][ T8236] get_timespec64+0x97/0x1b0 [ 194.616664][ T8236] ? timespec64_add_safe+0x1f0/0x1f0 [ 194.622018][ T8236] __se_sys_futex+0x19b/0x440 [ 194.626754][ T8236] ? __x64_sys_futex+0xf0/0xf0 [ 194.631560][ T8236] ? __x64_sys_futex+0x21/0xf0 [ 194.636367][ T8236] do_syscall_64+0x55/0xb0 [ 194.640824][ T8236] ? clear_bhb_loop+0x40/0x90 [ 194.645541][ T8236] ? clear_bhb_loop+0x40/0x90 [ 194.650253][ T8236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.656191][ T8236] RIP: 0033:0x7fed49d9e559 [ 194.660642][ T8236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.680303][ T8236] RSP: 002b:00007fed4ac85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 194.688781][ T8236] RAX: ffffffffffffffda RBX: 00007fed4a025fa0 RCX: 00007fed49d9e559 [ 194.696791][ T8236] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 194.704796][ T8236] RBP: 00007fed49e358b0 R08: 0000000000000000 R09: 0000000000000002 [ 194.712804][ T8236] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.720842][ T8236] R13: 00007fed4a026038 R14: 00007fed4a025fa0 R15: 00007ffc1615f2b8 [ 194.728893][ T8236] [ 194.731993][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.782648][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.789920][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.986701][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.158125][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.356820][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.568075][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.580673][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.595847][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.617181][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.627311][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.637969][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.890113][ T49] tipc: Left network mode [ 195.945620][ T8248] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.125532][ T8243] mmap: syz.5.685 (8243) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.494387][ T1087] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 196.713387][ T8274] loop1: detected capacity change from 0 to 164 [ 196.926389][ T8283] loop5: detected capacity change from 0 to 256 [ 197.300121][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 197.481646][ T8294] Bluetooth: MGMT ver 1.22 [ 197.694353][ T5085] Bluetooth: hci0: command tx timeout [ 198.102994][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.110690][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.120470][ T8248] bridge_slave_0: entered allmulticast mode [ 198.129009][ T8248] bridge_slave_0: entered promiscuous mode [ 198.148975][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.164369][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.175125][ T8248] bridge_slave_1: entered allmulticast mode [ 198.186292][ T8248] bridge_slave_1: entered promiscuous mode [ 198.401521][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.487520][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.844126][ T28] audit: type=1326 audit(1792159340.381:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.3.705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff21fb9e559 code=0x0 [ 198.885017][ T8248] team0: Port device team_slave_0 added [ 199.056377][ T8248] team0: Port device team_slave_1 added [ 199.171188][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.194226][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.237173][ T8248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.261628][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.272109][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.350418][ T8248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.581346][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 199.777709][ T5085] Bluetooth: hci0: command tx timeout [ 199.789860][ T8248] hsr_slave_0: entered promiscuous mode [ 199.797403][ T8248] hsr_slave_1: entered promiscuous mode [ 199.804397][ T8248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.812221][ T8248] Cannot create hsr debugfs directory [ 199.833081][ T49] hsr_slave_0: left promiscuous mode [ 199.842147][ T49] hsr_slave_1: left promiscuous mode [ 199.857372][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.869017][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.880876][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.892411][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.911293][ T49] bridge_slave_1: left allmulticast mode [ 199.920086][ T49] bridge_slave_1: left promiscuous mode [ 199.930232][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.958827][ T49] bridge_slave_0: left allmulticast mode [ 199.968843][ T49] bridge_slave_0: left promiscuous mode [ 199.978084][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.053862][ T49] veth1_macvtap: left promiscuous mode [ 200.061406][ T49] veth0_macvtap: left promiscuous mode [ 200.068202][ T49] veth1_vlan: left promiscuous mode [ 200.073692][ T49] veth0_vlan: left promiscuous mode [ 201.534229][ T49] team0 (unregistering): Port device team_slave_1 removed [ 201.599429][ T49] team0 (unregistering): Port device team_slave_0 removed [ 201.659546][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.733067][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.856475][ T5085] Bluetooth: hci0: command tx timeout [ 202.212892][ T49] bond0 (unregistering): Released all slaves [ 202.379079][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 202.465084][ T8373] netlink: 34959 bytes leftover after parsing attributes in process `syz.1.717'. [ 202.551192][ T8379] loop3: detected capacity change from 0 to 128 [ 202.782774][ T8382] loop1: detected capacity change from 0 to 1024 [ 202.855180][ T8382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 203.090606][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 203.381762][ T8248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.421964][ T8248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.478293][ T8248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.536180][ T8248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.627844][ T8403] loop3: detected capacity change from 0 to 164 [ 203.901044][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.936845][ T5085] Bluetooth: hci0: command tx timeout [ 203.982332][ T8248] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.020033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.027299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.093229][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.100535][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.207142][ T8248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.500039][ T8421] loop3: detected capacity change from 0 to 16 [ 204.539292][ T8421] erofs: (device loop3): mounted with root inode @ nid 36. [ 204.593505][ T8398] loop5: detected capacity change from 0 to 32768 [ 204.628793][ T5085] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 204.678228][ T8421] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 204.717385][ T28] audit: type=1800 audit(1792159346.251:174): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.730" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 204.725652][ T8421] syz.3.730 (8421) used greatest stack depth: 20472 bytes left [ 204.821233][ T8398] JBD2: Ignoring recovery information on journal [ 205.053570][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.086461][ T8398] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 205.306924][ T8442] loop1: detected capacity change from 0 to 512 [ 205.379744][ T8442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.433151][ T8442] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.523296][ T8442] EXT4-fs (loop1): shut down requested (1) [ 205.663053][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.733149][ T6193] ocfs2: Unmounting device (7,5) on (node local) [ 205.920713][ T8248] veth0_vlan: entered promiscuous mode [ 205.943006][ T8248] veth1_vlan: entered promiscuous mode [ 206.001623][ T8248] veth0_macvtap: entered promiscuous mode [ 206.028042][ T8248] veth1_macvtap: entered promiscuous mode [ 206.063910][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.081236][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.092203][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.108214][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.121525][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.140958][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.155410][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.174322][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.199072][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.213860][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.225740][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.249530][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.270085][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.282300][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.299419][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.323246][ T8248] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.335461][ T8248] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.352092][ T8248] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.362463][ T8248] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.551253][ T8465] loop1: detected capacity change from 0 to 512 [ 206.647894][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.679606][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.743380][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.782733][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.647898][ T8507] loop5: detected capacity change from 0 to 256 [ 207.724811][ T8507] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 208.842804][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.752'. [ 209.181606][ T8552] loop5: detected capacity change from 0 to 32768 [ 209.206160][ T8552] [ 209.206160][ T8552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.206160][ T8552] [ 209.252216][ T8552] ERROR: (device loop5): diWrite: ixpxd invalid [ 209.252216][ T8552] [ 209.284193][ T8552] ERROR: (device loop5): remounting filesystem as read-only [ 209.301896][ T8552] ERROR: (device loop5): txCommit: [ 209.301896][ T8552] [ 209.588005][ T8552] blkno = 0, nblocks = 40 [ 209.594110][ T8552] ERROR: (device loop5): dbFree: block to be freed is outside the map [ 209.594110][ T8552] [ 209.680408][ T6193] [ 209.680408][ T6193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.680408][ T6193] [ 209.712655][ T6193] [ 209.712655][ T6193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.712655][ T6193] [ 209.774686][ T8499] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 209.781562][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.510800][ T8499] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 210.587899][ T8499] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 210.660237][ T8499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.670046][ T8499] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 210.722924][ T8499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.749567][ T8499] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 210.810838][ T8499] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 210.865459][ T8499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.883502][ T8499] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.936566][ T8499] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 211.855237][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.334675][ T8624] loop5: detected capacity change from 0 to 32768 [ 212.402920][ T8624] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.597301][ T8674] loop1: detected capacity change from 0 to 512 [ 212.620194][ T8674] EXT4-fs: inline encryption not supported [ 212.649458][ T8674] EXT4-fs: Ignoring removed nobh option [ 212.692311][ T8674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.735076][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 212.741174][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.761112][ T8674] EXT4-fs (loop1): 1 truncate cleaned up [ 212.793171][ T8674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.838738][ T8680] batadv_slave_1: entered promiscuous mode [ 212.862664][ T8624] XFS (loop5): Ending clean mount [ 212.877538][ T8677] batadv_slave_1: left promiscuous mode [ 212.896105][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.003930][ T8683] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 213.060098][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.204252][ T6193] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.445549][ T8658] loop3: detected capacity change from 0 to 40427 [ 213.508720][ T8658] F2FS-fs (loop3): invalid crc value [ 213.558099][ T8658] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.813162][ T8658] F2FS-fs (loop3): Start checkpoint disabled! [ 213.823434][ T8696] gadgetfs: bound to dummy_udc driver [ 213.876904][ T8658] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 213.934239][ T5774] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.391250][ T8545] kworker/u4:16: attempt to access beyond end of device [ 214.391250][ T8545] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 214.450362][ T8545] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 214.474667][ T8545] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 214.568251][ T8716] loop6: detected capacity change from 0 to 128 [ 214.619729][ T8716] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.663021][ T8716] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.816673][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.822803][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 214.835798][ T8248] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.975098][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.274166][ T6391] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 215.466349][ T6391] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.482220][ T6391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.519829][ T6391] usb 2-1: config 0 descriptor?? [ 215.547491][ T6391] cp210x 2-1:0.0: cp210x converter detected [ 215.810633][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.795'. [ 215.965941][ T6391] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 216.016059][ T6391] usb 2-1: cp210x converter now attached to ttyUSB0 [ 216.067999][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'. [ 216.230492][ T5845] usb 2-1: USB disconnect, device number 11 [ 216.268338][ T5845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.282685][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.302504][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.323970][ T5845] cp210x 2-1:0.0: device disconnected [ 216.341385][ T8752] bridge0: port 3(batadv_slave_0) entered blocking state [ 216.360231][ T8752] bridge0: port 3(batadv_slave_0) entered disabled state [ 216.374472][ T8752] batadv_slave_0: entered allmulticast mode [ 216.392882][ T8752] batadv_slave_0: entered promiscuous mode [ 216.412051][ T8752] bridge0: port 3(batadv_slave_0) entered blocking state [ 216.420042][ T8752] bridge0: port 3(batadv_slave_0) entered forwarding state [ 216.447257][ T8752] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 216.534001][ T8743] loop6: detected capacity change from 0 to 32768 [ 216.593133][ T8743] JBD2: Ignoring recovery information on journal [ 216.688985][ T8743] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 216.781570][ T8763] loop5: detected capacity change from 0 to 1024 [ 216.873048][ T28] audit: type=1800 audit(1792159359.405:175): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.797" name="file1" dev="loop6" ino=17059 res=0 errno=0 [ 216.894573][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.058095][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.140266][ T8743] syz.6.797 (8743) used greatest stack depth: 19736 bytes left [ 217.273650][ T8768] loop1: detected capacity change from 0 to 8192 [ 217.281473][ T8248] ocfs2: Unmounting device (7,6) on (node local) [ 217.370910][ T8768] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 217.415913][ T8768] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 217.454418][ T8768] REISERFS (device loop1): using ordered data mode [ 217.478697][ T8768] reiserfs: using flush barriers [ 217.515646][ T8768] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.579648][ T8768] REISERFS (device loop1): checking transaction log (loop1) [ 217.895161][ T8768] REISERFS (device loop1): Using tea hash to sort names [ 217.923151][ T8768] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 218.002412][ T8768] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 218.234453][ T5781] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 218.315708][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 218.446683][ T5781] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.462500][ T5781] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 218.473442][ T5781] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 218.487719][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.510796][ T5781] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 218.548360][ T5781] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 218.900928][ T8795] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 218.910227][ T8795] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 218.923895][ T8795] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 219.084925][ T8794] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 219.103269][ T5781] usb 7-1: USB disconnect, device number 2 [ 219.140624][ T5781] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 219.149584][ T5781] spcp8x5 7-1:1.0: device disconnected [ 219.756640][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 220.359041][ T5781] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 220.544490][ T5781] usb 7-1: Using ep0 maxpacket: 16 [ 220.560840][ T5781] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.574303][ T5781] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.593285][ T5781] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.601537][ T5781] usb 7-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 220.621094][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.642981][ T5781] usb 7-1: config 0 descriptor?? [ 221.094530][ T5781] input: HID 046d:c215 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C215.0006/input/input13 [ 221.280399][ T5781] logitech 0003:046D:C215.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.6-1/input0 [ 221.344679][ T5781] usb 7-1: USB disconnect, device number 3 [ 221.442274][ T8875] fido_id[8875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 221.740083][ T8883] syzkaller1: entered promiscuous mode [ 221.752336][ T8883] syzkaller1: entered allmulticast mode [ 221.968801][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 222.004159][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 222.033874][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 222.091657][ T8889] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.101072][ T8889] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.110517][ T8889] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.119897][ T8889] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.661060][ T5845] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 222.874193][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 222.882360][ T5845] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 222.892755][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.980164][ T5845] usb 2-1: config 0 descriptor?? [ 223.007985][ T5845] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 223.241443][ T8910] device-mapper: ioctl: Invalid ioctl structure: name sn, dev f800 [ 223.901839][ T8904] loop3: detected capacity change from 0 to 40427 [ 223.926922][ T8904] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 223.948579][ T8904] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 223.990286][ T8904] F2FS-fs (loop3): heap/no_heap options were deprecated [ 224.010519][ T8904] F2FS-fs (loop3): Image doesn't support compression [ 224.036124][ T8904] F2FS-fs (loop3): invalid crc value [ 224.043422][ T5845] gspca_sonixj: reg_w1 err -71 [ 224.066533][ T8904] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.074488][ T5845] sonixj: probe of 2-1:0.0 failed with error -71 [ 224.114542][ T5845] usb 2-1: USB disconnect, device number 12 [ 224.280775][ T8904] F2FS-fs (loop3): Start checkpoint disabled! [ 224.390138][ T8904] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 224.408591][ T8904] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 224.575046][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.672190][ T8532] kworker/u4:10: attempt to access beyond end of device [ 224.672190][ T8532] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 224.703769][ T8532] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 224.719524][ T8532] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 224.779575][ T8942] input: syz1 as /devices/virtual/input/input14 [ 225.546264][ T8956] loop6: detected capacity change from 0 to 4096 [ 225.586909][ T8956] EXT4-fs: Ignoring removed nobh option [ 225.592851][ T8956] EXT4-fs: Ignoring removed bh option [ 225.656058][ T8956] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.713681][ T8956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.723154][ T8960] loop3: detected capacity change from 0 to 1024 [ 225.865117][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.114895][ T8969] loop1: detected capacity change from 0 to 256 [ 226.269070][ T8969] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 226.415486][ T28] audit: type=1800 audit(1792159368.945:176): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.871" name="file2" dev="loop1" ino=1048674 res=0 errno=0 [ 226.700124][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.875'. [ 226.955986][ T8991] loop6: detected capacity change from 0 to 128 [ 227.214478][ T6391] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.394507][ T6391] usb 4-1: Using ep0 maxpacket: 16 [ 227.402277][ T6391] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.438537][ T6391] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 227.466892][ T6391] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 227.506037][ T6391] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.552065][ T6391] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.569602][ T6391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.595836][ T6391] usb 4-1: SerialNumber: syz [ 227.626621][ T8993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.638003][ T8993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.682464][ T6391] hub 4-1:1.0: bad descriptor, ignoring hub [ 227.718040][ T6391] hub: probe of 4-1:1.0 failed with error -5 [ 227.875792][ T8993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.904614][ T8993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.355739][ T6391] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 228.711540][ T6391] usb 4-1: USB disconnect, device number 5 [ 228.730376][ T6391] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 228.764616][ T8833] Set syz1 is full, maxelem 65536 reached [ 229.313711][ T9055] loop4: detected capacity change from 0 to 7 [ 229.344542][ T9055] Dev loop4: unable to read RDB block 7 [ 229.355172][ T9058] loop5: detected capacity change from 0 to 256 [ 229.366566][ T9055] loop4: unable to read partition table [ 229.372565][ T9055] loop4: partition table beyond EOD, truncated [ 229.415065][ T9055] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.182810][ T9085] sock: sock_set_timeout: `syz.6.906' (pid 9085) tries to set negative timeout [ 231.073607][ T9115] loop3: detected capacity change from 0 to 2048 [ 231.234705][ T9115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.427771][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.873688][ T9096] loop6: detected capacity change from 0 to 40427 [ 231.923941][ T9096] F2FS-fs (loop6): invalid crc value [ 231.998577][ T9096] F2FS-fs (loop6): Found nat_bits in checkpoint [ 232.219639][ T9096] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 233.062604][ T9140] loop5: detected capacity change from 0 to 131072 [ 233.077702][ T8248] syz-executor: attempt to access beyond end of device [ 233.077702][ T8248] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.157121][ T9140] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 233.166076][ T9140] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 233.174624][ T9140] F2FS-fs (loop5): Test dummy encryption mode enabled [ 233.186560][ T9140] F2FS-fs (loop5): invalid crc value [ 233.197592][ T9140] F2FS-fs (loop5): Found nat_bits in checkpoint [ 233.212780][ T8248] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 233.247790][ T9140] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 233.271311][ T9140] F2FS-fs (loop5): Start checkpoint disabled! [ 233.302299][ T9140] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 233.309583][ T9140] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 233.343622][ T28] audit: type=1800 audit(1792159375.885:177): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.921" name="file2" dev="loop5" ino=8 res=0 errno=0 [ 233.578700][ T9173] overlay: Unexpected value for 'default_permissions' [ 233.717813][ T8543] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 234.302720][ T9188] jffs2: notice: (9188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.443303][ T5875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.764368][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.689579][ T9198] loop5: detected capacity change from 0 to 32768 [ 235.812297][ T9198] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 235.971394][ T9198] syz.5.933 (9198) used greatest stack depth: 18808 bytes left [ 237.640419][ T6193] ocfs2: Unmounting device (7,5) on (node local) [ 237.738090][ T9211] loop3: detected capacity change from 0 to 16 [ 237.790589][ T9211] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300) [ 238.069063][ T9217] loop1: detected capacity change from 0 to 256 [ 238.086226][ T9211] loop3: detected capacity change from 0 to 8192 [ 238.141551][ T9217] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 238.211870][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.243859][ T9211] FAT-fs (loop3): Filesystem has been set read-only [ 238.273720][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.318038][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.341880][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.361381][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.391143][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.404787][ T9217] rxe_eth0 speed is unknown, defaulting to 1000 [ 238.418633][ T9211] syz.3.937: attempt to access beyond end of device [ 238.418633][ T9211] loop3: rw=0, sector=15583, nr_sectors = 1 limit=8192 [ 238.469005][ T9211] Buffer I/O error on dev loop3, logical block 15583, async page read [ 238.487065][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.505808][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.523075][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.545097][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.563512][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.593772][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.615818][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.634595][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.651557][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.673188][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.699090][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.722206][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.749954][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.755961][ T9215] loop6: detected capacity change from 0 to 32768 [ 238.767945][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.777780][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.803361][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.822497][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.840197][ T9211] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 238.848669][ T9215] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.858786][ T9211] syz.3.937: attempt to access beyond end of device [ 238.858786][ T9211] loop3: rw=0, sector=15583, nr_sectors = 1 limit=8192 [ 238.887372][ T9211] Buffer I/O error on dev loop3, logical block 15583, async page read [ 238.913903][ T28] audit: type=1800 audit(1792159381.445:178): pid=9211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.937" name="file2" dev="loop3" ino=1048678 res=0 errno=0 [ 238.954573][ T9215] XFS (loop6): Ending clean mount [ 239.321626][ T8248] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 239.467469][ T9238] loop3: detected capacity change from 0 to 4096 [ 239.620374][ T9243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.640944][ T9238] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 239.713277][ T9238] NILFS (loop3): mounting fs with errors [ 239.810863][ T28] audit: type=1800 audit(1792159382.345:179): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.944" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 239.837827][ T9238] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 240.238163][ T9249] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 240.294217][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.303373][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.395080][ T9251] loop3: detected capacity change from 0 to 4096 [ 240.943880][ T9258] loop6: detected capacity change from 0 to 64 [ 241.031475][ T9261] loop3: detected capacity change from 0 to 256 [ 241.236832][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.957'. [ 241.605689][ T9285] smc: net device lo applied user defined pnetid SYZ2 [ 241.621264][ T9285] smc: net device lo erased user defined pnetid SYZ2 [ 241.711627][ T9288] loop5: detected capacity change from 0 to 512 [ 241.742353][ T9290] loop6: detected capacity change from 0 to 512 [ 241.757985][ T9290] EXT4-fs: Ignoring removed i_version option [ 241.769775][ T9290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.783500][ T9290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.868216][ T9290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.912895][ T9290] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.046843][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.190358][ T9302] loop6: detected capacity change from 0 to 256 [ 242.203836][ T9302] exfat: Deprecated parameter 'utf8' [ 242.235379][ T9302] exfat: Deprecated parameter 'namecase' [ 242.241142][ T9302] exfat: Deprecated parameter 'namecase' [ 242.291612][ T9302] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 242.478330][ T9312] loop6: detected capacity change from 0 to 512 [ 242.492370][ T9312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.531372][ T9312] EXT4-fs: Ignoring removed nobh option [ 242.559651][ T9312] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 242.589504][ T9312] EXT4-fs (loop6): 1 truncate cleaned up [ 242.605963][ T9312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.699848][ T9317] loop3: detected capacity change from 0 to 128 [ 242.732705][ T9317] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 242.785792][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.925153][ T9317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 242.946677][ T9317] FAT-fs (loop3): Filesystem has been set read-only [ 243.064556][ T5775] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 243.305895][ T9337] input: syz0 as /devices/virtual/input/input15 [ 243.334232][ T9337] input: failed to attach handler leds to device input15, error: -6 [ 243.397290][ T5779] udevd[5779]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 243.484563][ T5781] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 243.574559][ T9343] scsi_dev_info_list_add_str: bad dev info string 'Ã' '(null)' '(null)' [ 243.674193][ T5781] usb 7-1: Using ep0 maxpacket: 32 [ 243.681975][ T5781] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.694216][ T5781] usb 7-1: config 0 has no interface number 0 [ 243.713341][ T5781] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.727895][ T5781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.739833][ T5781] usb 7-1: Product: syz [ 243.750769][ T5781] usb 7-1: Manufacturer: syz [ 243.757402][ T5781] usb 7-1: SerialNumber: syz [ 243.779098][ T5781] usb 7-1: config 0 descriptor?? [ 243.799319][ T5781] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.020412][ T5781] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.058283][ T9335] loop3: detected capacity change from 0 to 32768 [ 244.078412][ T5781] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.087879][ T9353] loop5: detected capacity change from 0 to 128 [ 244.155266][ T9353] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 244.178956][ T9353] hpfs: filesystem error: improperly stopped [ 244.190478][ T9353] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 244.204809][ T9335] JBD2: Ignoring recovery information on journal [ 244.220365][ T9353] hpfs: You really don't want any checks? You are crazy... [ 244.228876][ T9335] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 244.240009][ T9356] loop1: detected capacity change from 0 to 1024 [ 244.247698][ T9353] hpfs: Code page index out of array [ 244.253080][ T9353] hpfs: code page support is disabled [ 244.267535][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.275967][ T9335] JBD2: bad block at offset 32 [ 244.281705][ T9353] hpfs: hpfs_map_4sectors(): unaligned read [ 244.291500][ T9353] hpfs: hpfs_map_4sectors(): unaligned read [ 244.297608][ T9356] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 244.313562][ T9353] hpfs: filesystem error: unable to find root dir [ 244.323546][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.335607][ T9335] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 244.437448][ T9335] (syz.3.983,9335,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 244.702735][ T9359] EXT4-fs: Ignoring removed orlov option [ 244.718642][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 244.731853][ T5772] usb 7-1: USB disconnect, device number 4 [ 244.750727][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 244.753687][ T5772] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 244.757795][ T9359] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 244.825156][ T5772] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 244.874920][ T5772] quatech2 7-1:0.51: device disconnected [ 244.947072][ T9359] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.994448][ T9359] ext2 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.164691][ T9362] hfsplus: filesystem is marked journaled, leaving read-only. [ 245.178009][ T9359] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 33: comm syz.5.995: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 245.241814][ T9359] EXT4-fs (loop5): Remounting filesystem read-only [ 245.369303][ T6193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.719865][ T9379] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 246.623764][ T9392] set_capacity_and_notify: 1 callbacks suppressed [ 246.623782][ T9392] loop6: detected capacity change from 0 to 512 [ 246.726619][ T9394] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1009'. [ 246.736892][ T9392] FAT-fs (loop6): error, invalid access to FAT (entry 0x00020000) [ 246.751902][ T9392] FAT-fs (loop6): Filesystem has been set read-only [ 246.760321][ T9392] FAT-fs (loop6): error, invalid access to FAT (entry 0x00020000) [ 247.331403][ T9416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.481250][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 248.525641][ T28] audit: type=1326 audit(1792159391.065:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.555931][ T28] audit: type=1326 audit(1792159391.065:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.584183][ T5846] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 248.600798][ T28] audit: type=1326 audit(1792159391.065:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.634368][ T28] audit: type=1326 audit(1792159391.085:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.666727][ T28] audit: type=1326 audit(1792159391.085:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.697354][ T28] audit: type=1326 audit(1792159391.085:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.729655][ T28] audit: type=1326 audit(1792159391.085:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.770804][ T28] audit: type=1326 audit(1792159391.085:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.802782][ T28] audit: type=1326 audit(1792159391.085:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.837010][ T28] audit: type=1326 audit(1792159391.085:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed49d9e559 code=0x7ffc0000 [ 248.837197][ T5846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 109 [ 248.891406][ T5846] usb 7-1: string descriptor 0 read error: -22 [ 248.901421][ T5846] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 248.913835][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.930134][ T9446] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 248.942710][ T5846] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null)) [ 248.955884][ T5846] etas_es58x 7-1:1.0: could not retrieve the product info string [ 249.183043][ T9446] etas_es58x 7-1:1.0 can0: bit-timing not yet defined [ 249.183199][ C0] etas_es58x 7-1:1.0 can0: es58x_write_bulk_callback: error -EPROTO [ 249.215945][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 249.223781][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 249.231691][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 249.239609][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 249.249746][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 249.257650][ T9446] etas_es58x 7-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL [ 249.288313][ T5846] usb 7-1: USB disconnect, device number 5 [ 249.300522][ T5846] etas_es58x 7-1:1.0: Disconnecting (null) (null) [ 249.356010][ T9464] loop1: detected capacity change from 0 to 8192 [ 249.694447][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 249.702399][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 250.299926][ T9492] loop6: detected capacity change from 0 to 1024 [ 250.661856][ T9507] loop6: detected capacity change from 0 to 256 [ 250.669735][ T9507] exfat: Deprecated parameter 'namecase' [ 250.733037][ T9507] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 250.752385][ T9509] loop1: detected capacity change from 0 to 512 [ 250.759206][ T5845] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 250.824933][ T9509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 250.840861][ T9509] System zones: 1-12 [ 250.858881][ T9512] loop3: detected capacity change from 0 to 2048 [ 250.867382][ T9509] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.1050: missing EA_INODE flag [ 250.889195][ T9509] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1050: error while reading EA inode 12 err=-117 [ 250.914530][ T9509] EXT4-fs (loop1): 1 orphan inode deleted [ 250.921742][ T9509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.960480][ T9509] syz.1.1050 (pid 9509) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 250.984105][ T5845] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.998050][ T5845] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 251.029804][ T5845] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.040904][ T9512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 251.073842][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.153889][ T5845] usb 6-1: Product: syz [ 251.193557][ T5845] usb 6-1: Manufacturer: syz [ 251.201784][ T9512] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1051: bg 0: block 240: padding at end of block bitmap is not set [ 251.229276][ T5845] usb 6-1: SerialNumber: syz [ 251.283432][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.305206][ T5845] cdc_mbim 6-1:1.0: skipping garbage [ 251.327236][ T9512] EXT4-fs error (device loop3) in ext4_setattr:5695: error 28 [ 251.482558][ T9496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 251.533474][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 251.746966][ T9534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.776409][ T9534] netlink: 'syz.1.1057': attribute type 12 has an invalid length. [ 251.794703][ T9534] netlink: 'syz.1.1057': attribute type 29 has an invalid length. [ 251.808990][ T9534] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1057'. [ 251.821373][ T9534] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 251.829569][ T9534] netlink: 'syz.1.1057': attribute type 3 has an invalid length. [ 251.839464][ T9534] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1057'. [ 252.011162][ T9543] loop1: detected capacity change from 0 to 1024 [ 252.110874][ T9496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 252.134741][ T5845] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 252.354425][ T5845] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 252.389520][ T5845] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 252.413579][ T9553] loop1: detected capacity change from 0 to 2048 [ 252.477124][ T5845] wwan wwan0: port wwan0mbim0 attached [ 252.507900][ T5845] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 8e:73:ac:18:51:70 [ 252.553101][ T5845] usb 6-1: USB disconnect, device number 7 [ 252.595358][ T5845] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 252.611462][ T9553] UDF-fs: iocharset iso:85-1qostrict not found [ 252.718323][ T9560] loop6: detected capacity change from 0 to 1024 [ 252.862018][ T5779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.950501][ T5845] wwan wwan0: port wwan0mbim0 disconnected [ 253.131453][ T9563] loop3: detected capacity change from 0 to 256 [ 253.161789][ T9563] exfat: Bad value for 'uid' [ 254.303503][ T5845] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 254.695803][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 254.829365][ T5845] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.888658][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 254.943181][ T5845] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 255.005405][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.412871][ T5845] usb 6-1: config 0 descriptor?? [ 256.145696][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.152652][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.281981][ T9586] raw-gadget.0 gadget.5: fail, usb_ep_set_halt returned -11 [ 256.457573][ T5845] usbhid 6-1:0.0: can't add hid device: -71 [ 256.524955][ T5845] usbhid: probe of 6-1:0.0 failed with error -71 [ 257.045508][ T5845] usb 6-1: USB disconnect, device number 8 [ 286.356516][ T5875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 286.658389][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 286.760227][ T5875] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.846996][ T5875] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 286.949802][ T5875] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 287.045778][ T5875] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 287.247825][ T5875] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.307059][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 287.392122][ T5875] usb 6-1: SerialNumber: syz [ 287.897337][ T9648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.065753][ T9648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.277771][ T5875] hub 6-1:1.0: bad descriptor, ignoring hub [ 288.314578][ T5875] hub: probe of 6-1:1.0 failed with error -5 [ 288.632763][ T9654] jffs2: notice: (9654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.575734][ T5875] cdc_ether: probe of 6-1:1.0 failed with error -110 [ 295.094969][ T6391] usb 6-1: USB disconnect, device number 9 [ 299.112767][ T9664] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 299.182544][ T9664] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 299.297263][ T9664] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 299.375296][ T9664] Error parsing options; rc = [-22] [ 308.216961][ T5875] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.937618][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.025466][ T5875] usb 6-1: config 0 has no interfaces? [ 309.031623][ T5875] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.136485][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.550398][ T5875] usb 6-1: config 0 descriptor?? [ 313.185593][ T5845] usb 6-1: USB disconnect, device number 10 [ 317.552239][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.567333][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.567510][ T9599] smpboot: CPU 1 is now offline [ 320.981842][ T9697] zswap: could not alloc crypto acomp_request lz4 [ 339.677633][ T9725] TCP: MD5 Hash mismatch for [fe88::104]:20004->[ff02::1]:20004 L3 index 0 [ 350.738814][ T9740] loop1: detected capacity change from 0 to 164 [ 350.985404][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 351.796812][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.965144][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.142289][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 352.286805][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.706910][ T8] usb 4-1: config 0 descriptor?? [ 358.484871][ T8] usbhid 4-1:0.0: can't add hid device: -32 [ 358.491468][ T8] usbhid: probe of 4-1:0.0 failed with error -32 [ 360.977825][ T9] usb 4-1: USB disconnect, device number 6 [ 379.061322][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.084182][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.180985][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.479613][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.696828][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.735039][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.756169][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.821057][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.926233][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.955827][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.118774][ T5774] Bluetooth: hci0: command tx timeout [ 420.176246][ T5774] Bluetooth: hci0: command tx timeout [ 420.216551][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.324477][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.002247][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.111926][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.168060][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.272966][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.326386][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.379555][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.156861][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.281278][ T5085] Bluetooth: hci0: command tx timeout [ 422.313880][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.861116][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.922688][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.959314][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.058013][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.084990][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 423.100009][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.538209][ T5774] Bluetooth: hci1: command tx timeout [ 424.121617][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.256271][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.354144][ T5774] Bluetooth: hci0: command tx timeout [ 424.564547][ T9777] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.334735][ T5774] Bluetooth: hci2: command tx timeout [ 425.625504][ T5774] Bluetooth: hci1: command tx timeout [ 427.395457][ T5085] Bluetooth: hci2: command tx timeout [ 427.467729][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.483911][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.541111][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.635077][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.695556][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 427.703287][ T5085] Bluetooth: hci1: command tx timeout [ 427.714064][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.474242][ T5085] Bluetooth: hci2: command tx timeout [ 429.814226][ T5085] Bluetooth: hci1: command tx timeout [ 430.365828][ T5085] Bluetooth: hci3: command tx timeout [ 431.556041][ T5085] Bluetooth: hci2: command tx timeout [ 432.445214][ T5085] Bluetooth: hci3: command tx timeout [ 434.529340][ T5085] Bluetooth: hci3: command tx timeout [ 436.594195][ T5085] Bluetooth: hci3: command tx timeout [ 440.423216][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449522][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.665419][ T9782] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.920623][ T9784] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.601135][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.677428][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.761610][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.868340][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.937226][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 472.999470][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.265762][ T9786] rxe_eth0 speed is unknown, defaulting to 1000 [ 475.388042][ T5774] Bluetooth: hci4: command tx timeout [ 476.862823][ T5085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.899369][ T5085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.920559][ T5085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.073160][ T5085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.154913][ T5085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 477.195040][ T5085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.466624][ T5085] Bluetooth: hci4: command tx timeout [ 479.398898][ T5085] Bluetooth: hci5: command tx timeout [ 479.544447][ T5085] Bluetooth: hci4: command tx timeout [ 480.978281][ T5774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.022545][ T5774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.051784][ T5774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.166455][ T5774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.212602][ T5774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 481.263881][ T5774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 481.456314][ T5774] Bluetooth: hci5: command tx timeout [ 481.637160][ T5774] Bluetooth: hci4: command tx timeout [ 483.538359][ T5774] Bluetooth: hci6: command tx timeout [ 483.551134][ T5085] Bluetooth: hci5: command tx timeout [ 485.644844][ T5774] Bluetooth: hci5: command tx timeout [ 485.650675][ T5774] Bluetooth: hci6: command tx timeout [ 485.735449][ T5786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 485.823658][ T5786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.840923][ T5786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.951551][ T5786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 486.015376][ T5786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 486.049218][ T5786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 487.719648][ T5786] Bluetooth: hci6: command tx timeout [ 488.260964][ T5786] Bluetooth: hci7: command tx timeout [ 489.804847][ T5786] Bluetooth: hci6: command tx timeout [ 490.356364][ T5786] Bluetooth: hci7: command tx timeout [ 491.515942][ T9806] rxe_eth0 speed is unknown, defaulting to 1000 [ 492.449525][ T5786] Bluetooth: hci7: command tx timeout [ 494.505136][ T5786] Bluetooth: hci7: command tx timeout [ 501.903245][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.935647][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.264776][ T11] hsr_slave_0: left promiscuous mode [ 519.458753][ T11] hsr_slave_1: left promiscuous mode [ 519.826115][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.833819][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.140828][ T11] batadv_slave_0: left allmulticast mode [ 520.196278][ T2908] ------------[ cut here ]------------ [ 520.202736][ T2908] WARNING: CPU: 0 PID: 2908 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 520.213537][ T2908] Modules linked in: [ 520.219111][ T2908] CPU: 0 PID: 2908 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 520.229014][ T2908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 520.240899][ T2908] Workqueue: iou_exit io_ring_exit_work [ 520.247302][ T2908] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 520.254145][ T2908] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 520.276898][ T2908] RSP: 0018:ffffc9000bbe7a40 EFLAGS: 00010293 [ 520.283160][ T2908] RAX: ffffffff8a8a8179 RBX: ffff88802585c000 RCX: ffff88802c9dda00 [ 520.291953][ T2908] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 520.300853][ T2908] RBP: ffffc9000bbe7bb0 R08: ffffc9000bbe79c7 R09: 1ffff9200177cf38 [ 520.310381][ T2908] R10: dffffc0000000000 R11: fffff5200177cf39 R12: dffffc0000000000 [ 520.319616][ T2908] R13: 0000000100005529 R14: 000000010000552a R15: ffff88802585c510 [ 520.330246][ T2908] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 520.341588][ T2908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.349211][ T2908] CR2: 00007f3f2e12b32d CR3: 0000000048a89000 CR4: 00000000003506f0 [ 520.358249][ T2908] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.367171][ T2908] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 520.376320][ T2908] Call Trace: [ 520.380021][ T2908] [ 520.383322][ T2908] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 520.390409][ T2908] ? preempt_schedule_thunk+0x1a/0x30 [ 520.396825][ T2908] ? process_scheduled_works+0x975/0x1600 [ 520.402763][ T2908] ? process_scheduled_works+0x975/0x1600 [ 520.409142][ T2908] process_scheduled_works+0xa60/0x1600 [ 520.416876][ T2908] ? worker_attach_to_pool+0x370/0x370 [ 520.422642][ T2908] ? assign_work+0x3cc/0x5d0 [ 520.429977][ T2908] worker_thread+0xa5e/0xfe0 [ 520.436277][ T2908] ? _raw_spin_unlock+0x40/0x40 [ 520.441580][ T2908] ? __kthread_parkme+0x71/0x1c0 [ 520.447435][ T2908] kthread+0x2fa/0x390 [ 520.451771][ T2908] ? pr_cont_work+0x550/0x550 [ 520.457398][ T2908] ? kthread_blkcg+0xd0/0xd0 [ 520.462384][ T2908] ret_from_fork+0x48/0x80 [ 520.467679][ T2908] ? kthread_blkcg+0xd0/0xd0 [ 520.472555][ T2908] ret_from_fork_asm+0x11/0x20 [ 520.478712][ T2908] [ 520.481904][ T2908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 520.489402][ T2908] CPU: 0 PID: 2908 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 520.497168][ T2908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 520.507468][ T2908] Workqueue: iou_exit io_ring_exit_work [ 520.513520][ T2908] Call Trace: [ 520.516875][ T2908] [ 520.519942][ T2908] dump_stack_lvl+0x18c/0x250 [ 520.524978][ T2908] ? show_regs_print_info+0x20/0x20 [ 520.530547][ T2908] ? load_image+0x420/0x420 [ 520.535577][ T2908] panic+0x2ca/0x720 [ 520.540021][ T2908] ? bpf_jit_dump+0xd0/0xd0 [ 520.544896][ T2908] ? ret_from_fork_asm+0x11/0x20 [ 520.550272][ T2908] __warn+0x2e0/0x470 [ 520.554540][ T2908] ? io_ring_exit_work+0x3b9/0x830 [ 520.559773][ T2908] ? io_ring_exit_work+0x3b9/0x830 [ 520.565062][ T2908] report_bug+0x2be/0x4f0 [ 520.569783][ T2908] ? io_ring_exit_work+0x3b9/0x830 [ 520.575280][ T2908] ? io_ring_exit_work+0x3b9/0x830 [ 520.580576][ T2908] ? io_ring_exit_work+0x3bb/0x830 [ 520.585847][ T2908] handle_bug+0xcf/0x120 [ 520.590313][ T2908] exc_invalid_op+0x1a/0x50 [ 520.595087][ T2908] asm_exc_invalid_op+0x1a/0x20 [ 520.600379][ T2908] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 520.606196][ T2908] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 520.626078][ T2908] RSP: 0018:ffffc9000bbe7a40 EFLAGS: 00010293 [ 520.632607][ T2908] RAX: ffffffff8a8a8179 RBX: ffff88802585c000 RCX: ffff88802c9dda00 [ 520.640903][ T2908] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 520.649175][ T2908] RBP: ffffc9000bbe7bb0 R08: ffffc9000bbe79c7 R09: 1ffff9200177cf38 [ 520.657476][ T2908] R10: dffffc0000000000 R11: fffff5200177cf39 R12: dffffc0000000000 [ 520.665898][ T2908] R13: 0000000100005529 R14: 000000010000552a R15: ffff88802585c510 [ 520.674291][ T2908] ? io_ring_exit_work+0x3b9/0x830 [ 520.680002][ T2908] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 520.686556][ T2908] ? preempt_schedule_thunk+0x1a/0x30 [ 520.692043][ T2908] ? process_scheduled_works+0x975/0x1600 [ 520.697913][ T2908] ? process_scheduled_works+0x975/0x1600 [ 520.704106][ T2908] process_scheduled_works+0xa60/0x1600 [ 520.710720][ T2908] ? worker_attach_to_pool+0x370/0x370 [ 520.716747][ T2908] ? assign_work+0x3cc/0x5d0 [ 520.721650][ T2908] worker_thread+0xa5e/0xfe0 [ 520.726871][ T2908] ? _raw_spin_unlock+0x40/0x40 [ 520.731872][ T2908] ? __kthread_parkme+0x71/0x1c0 [ 520.737387][ T2908] kthread+0x2fa/0x390 [ 520.741687][ T2908] ? pr_cont_work+0x550/0x550 [ 520.746505][ T2908] ? kthread_blkcg+0xd0/0xd0 [ 520.751338][ T2908] ret_from_fork+0x48/0x80 [ 520.755979][ T2908] ? kthread_blkcg+0xd0/0xd0 [ 520.760934][ T2908] ret_from_fork_asm+0x11/0x20 [ 520.766137][ T2908] [ 520.769512][ T2908] Kernel Offset: disabled [ 520.774343][ T2908] Rebooting in 86400 seconds..