last executing test programs: 16.55158127s ago: executing program 3 (id=1361): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) syz_pidfd_open(r1, 0x0) 15.983010357s ago: executing program 3 (id=1364): ioperm(0x0, 0x7, 0x7) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x502, 0x0) unshare(0x22020400) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x0, "00ffffffff00"}) 15.393956532s ago: executing program 3 (id=1368): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = dup3(r1, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3}) 15.052233049s ago: executing program 1 (id=1369): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xd4, 0xc0, 0x39, 0x10, 0x1604, 0x8007, 0x6511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x2, 0x2, 0x70, 0xec, [{{0x9, 0x4, 0x20, 0x10, 0x0, 0x1, 0x6c, 0x6c, 0x3}}, {{0x9, 0x4, 0x0, 0x9, 0x0, 0xd5, 0x3c, 0x64, 0x6a}}, {{0x9, 0x4, 0x37, 0x1, 0x0, 0xd, 0x92, 0x7d, 0x2}}]}}]}}, 0x0) 14.708683468s ago: executing program 0 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 14.558418775s ago: executing program 3 (id=1371): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x3, 0x100, 0x2}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 14.121745947s ago: executing program 0 (id=1372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x3c}}, 0x0) 13.871919819s ago: executing program 2 (id=1373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 13.703491906s ago: executing program 0 (id=1374): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xf1}, 0x2) 13.397522557s ago: executing program 2 (id=1375): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x20, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000380)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 13.212949708s ago: executing program 1 (id=1376): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200000c0) 13.036463308s ago: executing program 1 (id=1377): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) 12.518787981s ago: executing program 0 (id=1379): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x801) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000500)=0x0) 12.150375623s ago: executing program 0 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0xfffffffffffffffd, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 10.633203186s ago: executing program 3 (id=1382): mkdir(&(0x7f0000000440)='./file1\x00', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000040)='./file1\x00') r5 = creat(&(0x7f0000000540)='./bus\x00', 0x0) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, 0xee00, 0x0) 9.951125664s ago: executing program 4 (id=1383): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file1\x00'}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.888639453s ago: executing program 2 (id=1384): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0xf2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfe, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x18, &(0x7f0000000500)={0x20, 0x8, 0xb2, {0xb2, 0x24, "7e7cb9dc8e04bdc04b43d2da6f6230f16f6cef6988cc4c54edbd92675b91969fc06c1474d1d5320c5e80bc575f1bc9e9f4cd9d85836da8cccafa928966c2344befe610d568d967c5560823668a927864395bce867f2c177b389790ff1f4a5c973e27de2df6b6267440394969a0407fa832054103a30f39f332e44601f4d288556b647854cb2ccd72912a8d8a85735a398331af4cf5b166fe700d3537dc14c4b711f924ea1131bb838fc3ec924d592726"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.121563508s ago: executing program 1 (id=1385): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$media(&(0x7f0000000080), 0xb, 0x0) gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000340)={0x31, @time={0x7, 0xfffffff7}, 0x0, {}, 0x9, 0x2}) 8.79082532s ago: executing program 4 (id=1386): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) read$FUSE(r0, 0x0, 0x0) 7.45672629s ago: executing program 2 (id=1387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000001c40)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 7.345840246s ago: executing program 1 (id=1388): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000180)='./file2\x00', 0x2200886, &(0x7f0000006340)=ANY=[@ANYBLOB='iocharset=cp936,iocharset=cp1255,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696e746567726974792c646973636172643d3078303030303030303030303030303030382c6469736361726400756d61736b303030303030302c726573697a652c646973636172642c726573697a653d3078303030303030303030303030303030392c6572726f72733d72656d6f756e746861727365743d63703836312c00a963a7e1f5df03dc012c00"/150], 0x5, 0x6172, &(0x7f0000006440)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000005bc0)='./file0\x00', 0x0, 0x108) 7.345653934s ago: executing program 4 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}}, 0x40) 6.378159616s ago: executing program 4 (id=1390): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5885, 0x28141, 0x0, 0x30}, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x3, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x800, 0x0) sched_rr_get_interval(0x0, 0x0) 6.117133783s ago: executing program 2 (id=1391): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000080)={[{@mblk_io_submit}]}, 0x7, 0x644, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x23) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x2003, 0x2, 0xa, 0x7ec, 0x795, 0x2000000000005, 0x3, 0x0, 0x2}) 4.742526569s ago: executing program 4 (id=1392): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000001d80)=ANY=[], 0x81, 0x151a, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a1) 4.365573713s ago: executing program 2 (id=1393): syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file1\x00', 0x22080c6, &(0x7f0000000180)={[{@noalign}, {@grpquota}, {@inode64}, {@lazytime}, {@pquota}]}, 0x1, 0x9685, &(0x7f0000012c80)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7}) 2.368360461s ago: executing program 1 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.404716947s ago: executing program 0 (id=1395): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, 0xc) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}, 0x0) close(r2) 493.741493ms ago: executing program 3 (id=1396): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1397): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): -4 [ 496.283041][ T8661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 496.294822][ T8661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.301512][ T8661] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 496.321336][ T8661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 496.328259][ T8661] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 496.593613][ T5841] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 496.632777][ T5843] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 496.632943][ T44] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 496.767830][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 496.790269][ T5841] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 496.800614][ T5841] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 496.813482][ T5843] usb 3-1: device descriptor read/64, error -71 [ 496.822866][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 496.848321][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.849901][ T44] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 496.857820][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.857960][ T5841] usb 5-1: Product: syz [ 496.870142][ T44] usb 2-1: config 0 has no interface number 0 [ 496.878416][ T5841] usb 5-1: Manufacturer: syz [ 496.882714][ T44] usb 2-1: config 0 interface 184 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 496.882870][ T44] usb 2-1: config 0 interface 184 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 496.883021][ T44] usb 2-1: config 0 interface 184 altsetting 4 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 496.883188][ T44] usb 2-1: config 0 interface 184 altsetting 4 endpoint 0x81 has invalid maxpacket 57427, setting to 1024 [ 496.889403][ T5841] usb 5-1: SerialNumber: syz [ 496.894269][ T44] usb 2-1: config 0 interface 184 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 496.955962][ T44] usb 2-1: config 0 interface 184 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 496.971597][ T44] usb 2-1: config 0 interface 184 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 496.984358][ T44] usb 2-1: config 0 interface 184 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 496.994937][ T44] usb 2-1: config 0 interface 184 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 4 [ 497.008525][ T44] usb 2-1: config 0 interface 184 has no altsetting 0 [ 497.065751][ T8682] loop0: detected capacity change from 0 to 2048 [ 497.077964][ T5843] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 497.160768][ T44] usb 2-1: New USB device found, idVendor=03f0, idProduct=3239, bcdDevice=cb.62 [ 497.163835][ T8682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.173792][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.173951][ T44] usb 2-1: Product: syz [ 497.174057][ T44] usb 2-1: Manufacturer: syz [ 497.201470][ T44] usb 2-1: SerialNumber: syz [ 497.203036][ T5841] cdc_ncm 5-1:1.0: bind() failure [ 497.222820][ T5841] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 497.231658][ T5841] cdc_ncm 5-1:1.1: bind() failure [ 497.248399][ T5843] usb 3-1: device descriptor read/64, error -71 [ 497.259032][ T44] usb 2-1: config 0 descriptor?? [ 497.270325][ T8673] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 497.290740][ T8673] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 497.309788][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 497.349279][ T5841] usb 5-1: USB disconnect, device number 58 [ 497.361830][ T5843] usb usb3-port1: attempt power cycle [ 497.713910][ T5843] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 497.744129][ T8686] FAULT_INJECTION: forcing a failure. [ 497.744129][ T8686] name failslab, interval 1, probability 0, space 0, times 0 [ 497.757635][ T8686] CPU: 1 UID: 0 PID: 8686 Comm: syz.3.1027 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 497.757769][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.757845][ T8686] Call Trace: [ 497.757888][ T8686] [ 497.757931][ T8686] dump_stack_lvl+0x216/0x2d0 [ 497.758077][ T8686] dump_stack+0x1e/0x24 [ 497.758192][ T8686] should_fail_ex+0x767/0x830 [ 497.758365][ T8686] should_failslab+0x17f/0x210 [ 497.758536][ T8686] kmem_cache_alloc_lru_noprof+0xf5/0xe20 [ 497.758686][ T8686] ? __d_alloc+0x6a/0xa30 [ 497.758806][ T8686] ? kmsan_get_metadata+0x13e/0x1c0 [ 497.758985][ T8686] __d_alloc+0x6a/0xa30 [ 497.759098][ T8686] ? kmsan_get_metadata+0x13e/0x1c0 [ 497.759249][ T8686] ? kmsan_get_metadata+0x13e/0x1c0 [ 497.759407][ T8686] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 497.759573][ T8686] d_alloc_pseudo+0x3e/0x1a0 [ 497.759705][ T8686] alloc_file_pseudo+0x110/0x3d0 [ 497.759845][ T8686] __shmem_file_setup+0x3bf/0x4d0 [ 497.760035][ T8686] shmem_file_setup+0x61/0x80 [ 497.760205][ T8686] __se_sys_memfd_create+0x81b/0x11e0 [ 497.760352][ T8686] __ia32_sys_memfd_create+0x6b/0xa0 [ 497.760485][ T8686] ia32_sys_call+0x23dd/0x4180 [ 497.760641][ T8686] __do_fast_syscall_32+0xb0/0x110 [ 497.760792][ T8686] ? irqentry_exit+0x16/0x60 [ 497.760923][ T8686] do_fast_syscall_32+0x38/0x80 [ 497.761074][ T8686] do_SYSENTER_32+0x1f/0x30 [ 497.761216][ T8686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.761397][ T8686] RIP: 0023:0xf747d579 [ 497.761490][ T8686] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.761605][ T8686] RSP: 002b:00000000f510636c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 497.761728][ T8686] RAX: ffffffffffffffda RBX: 00000000f72f5a30 RCX: 0000000000000000 [ 497.761818][ T8686] RDX: 00000000f72268ee RSI: 00000000f5106410 RDI: 0000000000000040 [ 497.761902][ T8686] RBP: 0000000080000440 R08: 0000000000000000 R09: 0000000000000000 [ 497.761986][ T8686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.762064][ T8686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.762159][ T8686] [ 497.768998][ T5843] usb 3-1: device descriptor read/8, error -71 [ 498.265472][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 498.347670][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 498.348430][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 498.354308][ T7054] Bluetooth: hci2: command 0x0406 tx timeout [ 498.367570][ T5843] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 498.442599][ T5843] usb 3-1: device descriptor read/8, error -71 [ 498.556106][ T5843] usb usb3-port1: unable to enumerate USB device [ 498.768776][ T44] pl2303 2-1:0.184: pl2303 converter detected [ 498.789614][ T44] pl2303 2-1:0.184: pl2303_vendor_read - failed to read [8484]: -71 [ 498.813180][ T44] pl2303 2-1:0.184: pl2303_vendor_write - failed to write [0404]: -71 [ 498.830067][ T44] pl2303 2-1:0.184: pl2303_vendor_read - failed to read [8484]: -71 [ 498.854139][ T44] pl2303 2-1:0.184: pl2303_vendor_read - failed to read [8383]: -71 [ 498.892389][ T44] pl2303 2-1:0.184: pl2303_vendor_read - failed to read [8484]: -71 [ 498.921987][ T44] pl2303 2-1:0.184: pl2303_vendor_write - failed to write [0404]: -71 [ 498.957997][ T44] pl2303 2-1:0.184: pl2303_vendor_read - failed to read [8484]: -71 [ 498.993693][ T44] pl2303 2-1:0.184: pl2303_vendor_read - failed to read [8383]: -71 [ 499.003215][ T44] pl2303 2-1:0.184: pl2303_vendor_write - failed to write [0000]: -71 [ 499.046276][ T44] pl2303 2-1:0.184: pl2303_vendor_write - failed to write [0001]: -71 [ 499.111939][ T44] pl2303 2-1:0.184: pl2303_vendor_write - failed to write [0002]: -71 [ 499.161389][ T44] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 499.214622][ T44] usb 2-1: USB disconnect, device number 72 [ 499.258696][ T44] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 499.269573][ T44] pl2303 2-1:0.184: device disconnected [ 499.361122][ T8696] vcan1: entered promiscuous mode [ 499.379653][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 499.699078][ T25] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 499.867862][ T25] usb 1-1: device descriptor read/64, error -71 [ 500.167745][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 500.381222][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 500.415667][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 500.422043][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 500.422071][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 500.437101][ T25] usb 1-1: device descriptor read/64, error -71 [ 500.606095][ T25] usb usb1-port1: attempt power cycle [ 500.973237][ T25] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 501.034972][ T25] usb 1-1: device descriptor read/8, error -71 [ 501.266710][ T8720] FAULT_INJECTION: forcing a failure. [ 501.266710][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 501.279922][ T8720] CPU: 1 UID: 0 PID: 8720 Comm: syz.1.1041 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 501.280058][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.280179][ T8720] Call Trace: [ 501.280234][ T8720] [ 501.280279][ T8720] dump_stack_lvl+0x216/0x2d0 [ 501.280422][ T8720] dump_stack+0x1e/0x24 [ 501.280532][ T8720] should_fail_ex+0x767/0x830 [ 501.280708][ T8720] should_failslab+0x17f/0x210 [ 501.280873][ T8720] kmem_cache_alloc_noprof+0xee/0xe10 [ 501.281021][ T8720] ? getname_flags+0x102/0xa30 [ 501.281195][ T8720] ? kmsan_get_metadata+0x13e/0x1c0 [ 501.281364][ T8720] getname_flags+0x102/0xa30 [ 501.281534][ T8720] ? stack_depot_save_flags+0x2c/0x750 [ 501.281681][ T8720] ? kmsan_get_metadata+0x13e/0x1c0 [ 501.281844][ T8720] user_path_at+0x45/0x3e0 [ 501.281981][ T8720] ? __ia32_sys_mount+0xe3/0x150 [ 501.282146][ T8720] __se_sys_mount+0x673/0x800 [ 501.282304][ T8720] ? fput+0x359/0x400 [ 501.282435][ T8720] __ia32_sys_mount+0xe3/0x150 [ 501.282604][ T8720] ia32_sys_call+0x260e/0x4180 [ 501.282758][ T8720] __do_fast_syscall_32+0xb0/0x110 [ 501.282910][ T8720] ? irqentry_exit+0x16/0x60 [ 501.283045][ T8720] do_fast_syscall_32+0x38/0x80 [ 501.283189][ T8720] do_SYSENTER_32+0x1f/0x30 [ 501.283327][ T8720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.283512][ T8720] RIP: 0023:0xf73fd579 [ 501.283602][ T8720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.283718][ T8720] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 501.283839][ T8720] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000000 [ 501.283930][ T8720] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.284017][ T8720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.284093][ T8720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.284170][ T8720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.284265][ T8720] [ 501.780464][ T25] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 501.843470][ T25] usb 1-1: device descriptor read/8, error -71 [ 501.855680][ T8721] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 501.941394][ T8723] loop2: detected capacity change from 0 to 128 [ 501.970522][ T8723] vxfs: Unknown parameter 'subjDrole' [ 501.977775][ T25] usb usb1-port1: unable to enumerate USB device [ 502.397833][ T5843] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 502.557324][ T5843] usb 2-1: device descriptor read/64, error -71 [ 502.826535][ T5843] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 503.116291][ T5843] usb 2-1: device descriptor read/64, error -71 [ 503.243078][ T5843] usb usb2-port1: attempt power cycle [ 503.489759][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 503.552872][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1047'. [ 503.733118][ T5843] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 503.760779][ T5843] usb 2-1: device descriptor read/8, error -71 [ 504.013444][ T5843] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 504.081460][ T5843] usb 2-1: device descriptor read/8, error -71 [ 504.193650][ T5843] usb usb2-port1: unable to enumerate USB device [ 504.850621][ T8758] loop3: detected capacity change from 0 to 256 [ 504.987571][ T8760] FAULT_INJECTION: forcing a failure. [ 504.987571][ T8760] name failslab, interval 1, probability 0, space 0, times 0 [ 505.000929][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.2.1052 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 505.001069][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.001143][ T8760] Call Trace: [ 505.001191][ T8760] [ 505.001236][ T8760] dump_stack_lvl+0x216/0x2d0 [ 505.001378][ T8760] dump_stack+0x1e/0x24 [ 505.001496][ T8760] should_fail_ex+0x767/0x830 [ 505.001669][ T8760] should_failslab+0x17f/0x210 [ 505.001834][ T8760] kmem_cache_alloc_noprof+0xee/0xe10 [ 505.001976][ T8760] ? alloc_empty_file+0x1e9/0x530 [ 505.002101][ T8760] ? kmsan_get_metadata+0x13e/0x1c0 [ 505.002271][ T8760] alloc_empty_file+0x1e9/0x530 [ 505.002407][ T8760] alloc_file_pseudo+0x1f1/0x3d0 [ 505.002544][ T8760] __shmem_file_setup+0x3bf/0x4d0 [ 505.002730][ T8760] shmem_file_setup+0x61/0x80 [ 505.002898][ T8760] __se_sys_memfd_create+0x81b/0x11e0 [ 505.003041][ T8760] __ia32_sys_memfd_create+0x6b/0xa0 [ 505.003172][ T8760] ia32_sys_call+0x23dd/0x4180 [ 505.003325][ T8760] __do_fast_syscall_32+0xb0/0x110 [ 505.003481][ T8760] ? irqentry_exit+0x16/0x60 [ 505.003601][ T8760] do_fast_syscall_32+0x38/0x80 [ 505.003739][ T8760] do_SYSENTER_32+0x1f/0x30 [ 505.003874][ T8760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.004048][ T8760] RIP: 0023:0xf740d579 [ 505.004137][ T8760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.004246][ T8760] RSP: 002b:00000000f509636c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 505.004362][ T8760] RAX: ffffffffffffffda RBX: 00000000f7285a30 RCX: 0000000000000000 [ 505.004453][ T8760] RDX: 00000000f71b68ee RSI: 00000000f5096410 RDI: 0000000000000040 [ 505.004533][ T8760] RBP: 000000008001f400 R08: 0000000000000000 R09: 0000000000000000 [ 505.004609][ T8760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.004683][ T8760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.004773][ T8760] [ 505.052498][ T8758] FAT-fs (loop3): Directory bread(block 64) failed [ 505.055011][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.060842][ T8758] FAT-fs (loop3): Directory bread(block 65) failed [ 505.149809][ T8762] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 505.162974][ T8758] FAT-fs (loop3): Directory bread(block 66) failed [ 505.260463][ T8758] FAT-fs (loop3): Directory bread(block 67) failed [ 505.267357][ T8758] FAT-fs (loop3): Directory bread(block 68) failed [ 505.274287][ T8758] FAT-fs (loop3): Directory bread(block 69) failed [ 505.281330][ T8758] FAT-fs (loop3): Directory bread(block 70) failed [ 505.288325][ T8758] FAT-fs (loop3): Directory bread(block 71) failed [ 505.295561][ T8758] FAT-fs (loop3): Directory bread(block 72) failed [ 505.302454][ T8758] FAT-fs (loop3): Directory bread(block 73) failed [ 505.756946][ T5843] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 505.775943][ T8771] loop2: detected capacity change from 0 to 128 [ 505.827674][ T8771] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 505.860366][ T8771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.897469][ T8771] FAULT_INJECTION: forcing a failure. [ 505.897469][ T8771] name failslab, interval 1, probability 0, space 0, times 0 [ 505.910708][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.2.1055 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 505.910841][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.910916][ T8771] Call Trace: [ 505.910961][ T8771] [ 505.911005][ T8771] dump_stack_lvl+0x216/0x2d0 [ 505.911143][ T8771] dump_stack+0x1e/0x24 [ 505.911252][ T8771] should_fail_ex+0x767/0x830 [ 505.911427][ T8771] should_failslab+0x17f/0x210 [ 505.911600][ T8771] kmem_cache_alloc_noprof+0xee/0xe10 [ 505.911737][ T8771] ? filter_irq_stacks+0x164/0x1a0 [ 505.911891][ T8771] ? getname_flags+0x102/0xa30 [ 505.912061][ T8771] ? kmsan_get_metadata+0x13e/0x1c0 [ 505.912230][ T8771] getname_flags+0x102/0xa30 [ 505.912408][ T8771] getname+0x30/0x40 [ 505.912573][ T8771] do_sys_openat2+0xc3/0x2f0 [ 505.912753][ T8771] __ia32_compat_sys_openat+0x298/0x300 [ 505.912901][ T8771] ia32_sys_call+0x2fb4/0x4180 [ 505.913053][ T8771] __do_fast_syscall_32+0xb0/0x110 [ 505.913206][ T8771] ? irqentry_exit+0x16/0x60 [ 505.913335][ T8771] do_fast_syscall_32+0x38/0x80 [ 505.913480][ T8771] do_SYSENTER_32+0x1f/0x30 [ 505.913623][ T8771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.913810][ T8771] RIP: 0023:0xf740d579 [ 505.913901][ T8771] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.914016][ T8771] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 505.914136][ T8771] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 505.914227][ T8771] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 505.914304][ T8771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.914380][ T8771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.914459][ T8771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.914553][ T8771] [ 505.946881][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 506.126551][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 506.155789][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.166406][ T5843] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.192919][ T5843] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 506.202488][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.211161][ T5843] usb 5-1: Product: syz [ 506.215669][ T5843] usb 5-1: Manufacturer: syz [ 506.220490][ T5843] usb 5-1: SerialNumber: syz [ 506.254626][ T5843] usb 5-1: config 0 descriptor?? [ 506.285847][ T25] usb 1-1: device descriptor read/64, error -71 [ 506.545079][ T25] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 506.724457][ T25] usb 1-1: device descriptor read/64, error -71 [ 506.839056][ T25] usb usb1-port1: attempt power cycle [ 506.914947][ T8776] team0: Unable to change to the same mode the team is in [ 507.165703][ T5843] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 507.353624][ T25] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 507.377891][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 507.390079][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.407231][ T5843] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 507.416949][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.421831][ T25] usb 1-1: device descriptor read/8, error -71 [ 507.425253][ T5843] usb 4-1: Product: syz [ 507.425349][ T5843] usb 4-1: Manufacturer: syz [ 507.425449][ T5843] usb 4-1: SerialNumber: syz [ 507.458526][ T5843] usb 4-1: config 0 descriptor?? [ 507.692509][ T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 507.742239][ T8780] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.770836][ T25] usb 1-1: device descriptor read/8, error -71 [ 507.890013][ T25] usb usb1-port1: unable to enumerate USB device [ 507.963391][ T5843] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 508.641080][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 508.810901][ T5843] usb 5-1: USB disconnect, device number 59 [ 508.844775][ T8795] loop3: detected capacity change from 0 to 16 [ 509.048567][ T8795] erofs (device loop3): negative i_size @ nid 36 [ 509.346729][ T44] usb 4-1: USB disconnect, device number 75 [ 509.458130][ T8804] kAFS: unparsable volume name [ 509.568229][ T25] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 509.678313][ T5846] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 509.769091][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 509.793364][ T8804] loop1: detected capacity change from 0 to 4096 [ 509.806480][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 509.811454][ T8804] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 509.858938][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 509.868320][ T25] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 509.878160][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.886630][ T25] usb 5-1: Product: syz [ 509.891206][ T25] usb 5-1: Manufacturer: syz [ 509.896316][ T25] usb 5-1: SerialNumber: syz [ 509.918829][ T5846] usb 1-1: no configurations [ 509.923714][ T5846] usb 1-1: can't read configurations, error -22 [ 510.006801][ T25] usb 5-1: config 0 descriptor?? [ 510.116952][ T5846] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 510.239371][ T8800] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.315756][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 510.353171][ T5846] usb 1-1: no configurations [ 510.358304][ T5846] usb 1-1: can't read configurations, error -22 [ 510.395947][ T5846] usb usb1-port1: attempt power cycle [ 510.465469][ T25] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 510.795127][ T5846] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 510.831651][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 510.857609][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 510.886051][ T5846] usb 1-1: no configurations [ 510.891206][ T5846] usb 1-1: can't read configurations, error -22 [ 510.947536][ T8814] nbd: must specify at least one socket [ 511.093948][ T5846] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 511.138543][ T8812] loop4: detected capacity change from 0 to 16 [ 511.148132][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 511.163127][ T5846] usb 1-1: no configurations [ 511.168270][ T5846] usb 1-1: can't read configurations, error -22 [ 511.219125][ T5846] usb usb1-port1: unable to enumerate USB device [ 511.219247][ T8812] erofs (device loop4): negative i_size @ nid 36 [ 511.386758][ T25] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 511.395695][ T25] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 511.454119][ T25] usb 5-1: USB disconnect, device number 60 [ 512.302020][ T25] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 512.524561][ T25] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 512.535409][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.659615][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 512.669325][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.677666][ T25] usb 2-1: SerialNumber: syz [ 512.841562][ T5846] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 513.050970][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 513.172305][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 513.313851][ T5846] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 513.323531][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.332078][ T5846] usb 3-1: Product: syz [ 513.336623][ T5846] usb 3-1: Manufacturer: syz [ 513.341874][ T5846] usb 3-1: SerialNumber: syz [ 513.459227][ T8823] loop1: detected capacity change from 0 to 256 [ 513.703934][ T8831] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 513.746588][ T5846] usb 3-1: config 0 descriptor?? [ 513.832104][ T8835] process 'syz.0.1079' launched './file0' with NULL argv: empty string added [ 514.080450][ T8826] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.437169][ T8823] FAT-fs (loop1): Directory bread(block 64) failed [ 514.444677][ T8823] FAT-fs (loop1): Directory bread(block 65) failed [ 514.451874][ T8823] FAT-fs (loop1): Directory bread(block 66) failed [ 514.458982][ T8823] FAT-fs (loop1): Directory bread(block 67) failed [ 514.465872][ T8823] FAT-fs (loop1): Directory bread(block 68) failed [ 514.473019][ T8823] FAT-fs (loop1): Directory bread(block 69) failed [ 514.480258][ T8823] FAT-fs (loop1): Directory bread(block 70) failed [ 514.487007][ T8823] FAT-fs (loop1): Directory bread(block 71) failed [ 514.494243][ T8823] FAT-fs (loop1): Directory bread(block 72) failed [ 514.501342][ T8823] FAT-fs (loop1): Directory bread(block 73) failed [ 514.613290][ T5846] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 515.665460][ T5846] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 515.674757][ T5846] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 516.742250][ T5846] usb 3-1: USB disconnect, device number 73 [ 516.934472][ T25] usb 2-1: 0:2 : does not exist [ 516.990211][ T25] usb 2-1: USB disconnect, device number 77 [ 517.274020][ T8840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.280935][ T8840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.292114][ T8840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.300011][ T8840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.307602][ T8840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.981857][ T8854] nbd: must specify at least one socket [ 518.531627][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 519.338944][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 519.345523][ T7054] Bluetooth: hci3: command 0x0406 tx timeout [ 519.346444][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 519.352176][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 519.370923][ T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 519.510662][ T5841] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 519.550052][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 519.580007][ T25] usb 2-1: no configurations [ 519.592082][ T25] usb 2-1: can't read configurations, error -22 [ 519.720319][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 519.783506][ T25] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 519.794767][ T5841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.832729][ T5841] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 519.842381][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.855109][ T5841] usb 4-1: Product: syz [ 519.859512][ T5841] usb 4-1: Manufacturer: syz [ 519.864584][ T5841] usb 4-1: SerialNumber: syz [ 519.990946][ T5841] usb 4-1: config 0 descriptor?? [ 520.055257][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 520.080818][ T25] usb 2-1: no configurations [ 520.085763][ T25] usb 2-1: can't read configurations, error -22 [ 520.127955][ T25] usb usb2-port1: attempt power cycle [ 520.233616][ T8866] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.466204][ T5841] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 520.475074][ T5843] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 520.529775][ T25] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 520.599305][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 520.629447][ T25] usb 2-1: no configurations [ 520.634394][ T25] usb 2-1: can't read configurations, error -22 [ 520.811504][ T25] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 520.877103][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 520.895913][ T25] usb 2-1: no configurations [ 520.901121][ T25] usb 2-1: can't read configurations, error -22 [ 520.924680][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 520.939371][ T5846] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 520.973328][ T25] usb usb2-port1: unable to enumerate USB device [ 520.978928][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 521.146161][ T5846] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 521.157126][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.263897][ T5846] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 521.273655][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 521.285430][ T5846] usb 3-1: SerialNumber: syz [ 521.410733][ T8872] loop4: detected capacity change from 0 to 4096 [ 521.463778][ T8875] loop3: detected capacity change from 0 to 16 [ 521.770110][ T8874] loop2: detected capacity change from 0 to 256 [ 521.829132][ T8875] erofs (device loop3): negative i_size @ nid 36 [ 522.269231][ T8874] FAT-fs (loop2): Directory bread(block 64) failed [ 522.276201][ T8874] FAT-fs (loop2): Directory bread(block 65) failed [ 522.283581][ T8874] FAT-fs (loop2): Directory bread(block 66) failed [ 522.291448][ T8874] FAT-fs (loop2): Directory bread(block 67) failed [ 522.302859][ T8874] FAT-fs (loop2): Directory bread(block 68) failed [ 522.311258][ T8874] FAT-fs (loop2): Directory bread(block 69) failed [ 522.318509][ T8874] FAT-fs (loop2): Directory bread(block 70) failed [ 522.325428][ T8874] FAT-fs (loop2): Directory bread(block 71) failed [ 522.332769][ T8874] FAT-fs (loop2): Directory bread(block 72) failed [ 522.339804][ T8874] FAT-fs (loop2): Directory bread(block 73) failed [ 523.625718][ T5841] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 523.639592][ T5841] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 523.659544][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 523.668529][ T5841] usb 4-1: USB disconnect, device number 76 [ 523.710161][ T5846] usb 3-1: 0:2 : does not exist [ 523.749281][ T8872] ntfs3(loop4): Failed to read $AttrDef (-4). [ 523.824345][ T5843] usb 1-1: string descriptor 0 read error: -71 [ 523.831598][ T5843] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 523.844456][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.867020][ T5846] usb 3-1: USB disconnect, device number 74 [ 523.922348][ T5843] usb 1-1: config 0 descriptor?? [ 523.929468][ T5843] usb 1-1: can't set config #0, error -71 [ 523.996660][ T5843] usb 1-1: USB disconnect, device number 72 [ 524.410659][ T8881] loop0: detected capacity change from 0 to 512 [ 524.474786][ T8881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.592104][ T8881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.605567][ T8881] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.759384][ T29] audit: type=1800 audit(1740532434.421:2): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1095" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 524.815309][ T29] audit: type=1800 audit(1740532434.451:3): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1095" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 525.597046][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.621649][ T8895] nbd: must specify at least one socket [ 526.228639][ T8903] FAULT_INJECTION: forcing a failure. [ 526.228639][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 526.242205][ T8903] CPU: 0 UID: 0 PID: 8903 Comm: syz.3.1103 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 526.242337][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 526.242411][ T8903] Call Trace: [ 526.242459][ T8903] [ 526.242504][ T8903] dump_stack_lvl+0x216/0x2d0 [ 526.242649][ T8903] dump_stack+0x1e/0x24 [ 526.242758][ T8903] should_fail_ex+0x767/0x830 [ 526.242930][ T8903] should_failslab+0x17f/0x210 [ 526.243091][ T8903] __kmalloc_noprof+0x176/0x1230 [ 526.243225][ T8903] ? kmsan_get_metadata+0x13e/0x1c0 [ 526.243378][ T8903] ? tomoyo_encode+0x5f8/0xa40 [ 526.243544][ T8903] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 526.243709][ T8903] ? kmsan_get_metadata+0x13e/0x1c0 [ 526.243862][ T8903] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 526.244025][ T8903] tomoyo_encode+0x5f8/0xa40 [ 526.244201][ T8903] tomoyo_realpath_from_path+0x9dd/0xaa0 [ 526.244397][ T8903] tomoyo_check_open_permission+0x1ef/0xc50 [ 526.244589][ T8903] tomoyo_file_open+0x26e/0x350 [ 526.244719][ T8903] ? kmsan_get_metadata+0x13e/0x1c0 [ 526.244874][ T8903] security_file_open+0x129/0x520 [ 526.245020][ T8903] do_dentry_open+0x568/0x26b0 [ 526.245199][ T8903] vfs_open+0x53/0x5b0 [ 526.245344][ T8903] ? kmsan_get_metadata+0x13e/0x1c0 [ 526.245495][ T8903] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 526.245666][ T8903] path_openat+0x56a1/0x6250 [ 526.245805][ T8903] ? do_filp_open+0x47/0x600 [ 526.245945][ T8903] ? stack_depot_save_flags+0x2c/0x750 [ 526.246095][ T8903] ? kmsan_get_metadata+0x13e/0x1c0 [ 526.246246][ T8903] ? kmsan_get_metadata+0x13e/0x1c0 [ 526.246430][ T8903] do_filp_open+0x268/0x600 [ 526.246602][ T8903] do_sys_openat2+0x1bf/0x2f0 [ 526.246774][ T8903] __ia32_compat_sys_openat+0x298/0x300 [ 526.246913][ T8903] ia32_sys_call+0x2fb4/0x4180 [ 526.247061][ T8903] __do_fast_syscall_32+0xb0/0x110 [ 526.247202][ T8903] ? irqentry_exit+0x16/0x60 [ 526.247328][ T8903] do_fast_syscall_32+0x38/0x80 [ 526.247464][ T8903] do_SYSENTER_32+0x1f/0x30 [ 526.247595][ T8903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.247775][ T8903] RIP: 0023:0xf747d579 [ 526.247864][ T8903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 526.247972][ T8903] RSP: 002b:00000000f5106100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 526.248088][ T8903] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5106150 [ 526.248172][ T8903] RDX: 000000000014a042 RSI: 0000000000000000 RDI: 00000000f746cff4 [ 526.248251][ T8903] RBP: 000000000014a042 R08: 0000000000000000 R09: 0000000000000000 [ 526.248326][ T8903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 526.248399][ T8903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.248487][ T8903] [ 526.535975][ T8903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.615949][ T8897] delete_channel: no stack [ 526.769550][ T5843] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 526.933474][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 526.974249][ T5843] usb 5-1: no configurations [ 526.979116][ T5843] usb 5-1: can't read configurations, error -22 [ 527.152589][ T5843] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 527.296296][ T8910] FAULT_INJECTION: forcing a failure. [ 527.296296][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 527.310306][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.3.1106 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 527.310439][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 527.310511][ T8910] Call Trace: [ 527.310556][ T8910] [ 527.310602][ T8910] dump_stack_lvl+0x216/0x2d0 [ 527.310737][ T8910] dump_stack+0x1e/0x24 [ 527.310862][ T8910] should_fail_ex+0x767/0x830 [ 527.311043][ T8910] should_fail+0x2a/0x40 [ 527.311184][ T8910] should_fail_usercopy+0x2e/0x40 [ 527.311356][ T8910] _copy_from_user+0x35/0x110 [ 527.311517][ T8910] do_ipv6_setsockopt+0x33f/0x4d90 [ 527.311670][ T8910] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 527.311846][ T8910] ? kmsan_get_metadata+0x13e/0x1c0 [ 527.312011][ T8910] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 527.312184][ T8910] ? aa_label_sk_perm+0x677/0x7b0 [ 527.312336][ T8910] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 527.312526][ T8910] ipv6_setsockopt+0xea/0x300 [ 527.312685][ T8910] rawv6_setsockopt+0x407/0x8c0 [ 527.312846][ T8910] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 527.312991][ T8910] sock_common_setsockopt+0xf9/0x140 [ 527.313163][ T8910] do_sock_setsockopt+0x4bb/0x7d0 [ 527.313348][ T8910] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 527.313516][ T8910] __ia32_sys_setsockopt+0x33b/0x4f0 [ 527.313714][ T8910] ia32_sys_call+0x1acb/0x4180 [ 527.313874][ T8910] __do_fast_syscall_32+0xb0/0x110 [ 527.314025][ T8910] ? irqentry_exit+0x16/0x60 [ 527.314155][ T8910] do_fast_syscall_32+0x38/0x80 [ 527.314294][ T8910] do_SYSENTER_32+0x1f/0x30 [ 527.314435][ T8910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.314626][ T8910] RIP: 0023:0xf747d579 [ 527.314717][ T8910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.314837][ T8910] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 527.314955][ T8910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 527.315039][ T8910] RDX: 00000000000000c8 RSI: 0000000080000140 RDI: 0000000000000004 [ 527.315115][ T8910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.315187][ T8910] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.315262][ T8910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.315350][ T8910] [ 527.377028][ T5846] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 527.483972][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 527.610357][ T8910] loop3: detected capacity change from 0 to 256 [ 527.883077][ T5843] usb 5-1: no configurations [ 527.887949][ T5843] usb 5-1: can't read configurations, error -22 [ 527.918340][ T5843] usb usb5-port1: attempt power cycle [ 528.033036][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 528.052279][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 528.095960][ T5846] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 528.105645][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.114112][ T5846] usb 3-1: Product: syz [ 528.118518][ T5846] usb 3-1: Manufacturer: syz [ 528.123585][ T5846] usb 3-1: SerialNumber: syz [ 528.224671][ T5846] usb 3-1: config 0 descriptor?? [ 528.283451][ T5843] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 528.488396][ T8908] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.633479][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 528.672634][ T25] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 528.824350][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 528.876675][ T5846] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 528.940247][ T25] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 528.954620][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.038917][ T5843] usb 5-1: no configurations [ 529.044987][ T5843] usb 5-1: can't read configurations, error -22 [ 529.134755][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.145093][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.156991][ T25] usb 1-1: SerialNumber: syz [ 529.353350][ T5843] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 529.925831][ T8916] loop0: detected capacity change from 0 to 256 [ 530.014001][ T5846] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 530.023411][ T5846] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 530.751845][ T8916] FAT-fs (loop0): Directory bread(block 64) failed [ 530.758940][ T8916] FAT-fs (loop0): Directory bread(block 65) failed [ 530.766279][ T8916] FAT-fs (loop0): Directory bread(block 66) failed [ 530.773433][ T8916] FAT-fs (loop0): Directory bread(block 67) failed [ 530.780562][ T8916] FAT-fs (loop0): Directory bread(block 68) failed [ 530.787662][ T8916] FAT-fs (loop0): Directory bread(block 69) failed [ 530.799428][ T8916] FAT-fs (loop0): Directory bread(block 70) failed [ 530.807502][ T8916] FAT-fs (loop0): Directory bread(block 71) failed [ 530.814702][ T8916] FAT-fs (loop0): Directory bread(block 72) failed [ 530.821994][ T8916] FAT-fs (loop0): Directory bread(block 73) failed [ 531.159642][ T5846] usb 3-1: USB disconnect, device number 75 [ 531.556838][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.563857][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.623207][ T5843] usb 5-1: device descriptor read/8, error -71 [ 532.696355][ T25] usb 1-1: 0:2 : does not exist [ 532.710793][ T5846] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 532.754106][ T5843] usb usb5-port1: unable to enumerate USB device [ 532.781020][ T25] usb 1-1: USB disconnect, device number 73 [ 532.933656][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 532.997934][ T5846] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 533.009040][ T5846] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 533.072363][ T5846] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.081980][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.090446][ T5846] usb 3-1: Product: syz [ 533.094826][ T5846] usb 3-1: Manufacturer: syz [ 533.099806][ T5846] usb 3-1: SerialNumber: syz [ 533.172026][ T8936] nbd: must specify at least one socket [ 533.419885][ T5846] cdc_ncm 3-1:1.0: bind() failure [ 533.435954][ T5846] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 533.444336][ T5846] cdc_ncm 3-1:1.1: bind() failure [ 533.611184][ T5846] usb 3-1: USB disconnect, device number 76 [ 534.029709][ T8944] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 534.151664][ T8940] delete_channel: no stack [ 534.496586][ T8947] loop3: detected capacity change from 0 to 64 [ 534.540873][ T8947] hfs: Bad value for 'uid' [ 534.691813][ T8951] loop1: detected capacity change from 0 to 64 [ 534.797343][ T8951] netlink: 'syz.1.1122': attribute type 21 has an invalid length. [ 534.805596][ T8951] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1122'. [ 534.815116][ T8951] netlink: 'syz.1.1122': attribute type 4 has an invalid length. [ 534.823270][ T8951] netlink: 'syz.1.1122': attribute type 5 has an invalid length. [ 534.831310][ T8951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1122'. [ 534.870572][ T8947] program syz.3.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.919677][ T8955] loop2: detected capacity change from 0 to 256 [ 534.985239][ T8955] vfat: Unknown parameter 'u' [ 535.618000][ T8964] loop4: detected capacity change from 0 to 16 [ 535.700174][ T8964] erofs (device loop4): negative i_size @ nid 36 [ 535.860053][ T5846] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 536.023333][ T5846] usb 2-1: device descriptor read/64, error -71 [ 536.289441][ T5846] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 536.448427][ T5846] usb 2-1: device descriptor read/64, error -71 [ 536.572833][ T5846] usb usb2-port1: attempt power cycle [ 536.587208][ T8979] nbd: must specify at least one socket [ 536.958128][ T5846] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 536.976636][ T8982] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 537.026162][ T5846] usb 2-1: device descriptor read/8, error -71 [ 537.308017][ T5846] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 537.349044][ T5846] usb 2-1: device descriptor read/8, error -71 [ 537.469861][ T5846] usb usb2-port1: unable to enumerate USB device [ 537.904424][ T8994] loop3: detected capacity change from 0 to 64 [ 538.187632][ T8996] loop2: detected capacity change from 0 to 2048 [ 538.207918][ T8997] netlink: 'syz.3.1136': attribute type 21 has an invalid length. [ 538.216125][ T8997] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1136'. [ 538.225641][ T8997] netlink: 'syz.3.1136': attribute type 4 has an invalid length. [ 538.233847][ T8997] netlink: 'syz.3.1136': attribute type 5 has an invalid length. [ 538.241968][ T8997] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1136'. [ 538.322101][ T8996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.635096][ T8996] overlay: ./file0/file0 is not a directory [ 539.059286][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.471611][ T9010] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 539.579100][ T9011] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1142'. [ 539.615940][ T9004] team0: Unable to change to the same mode the team is in [ 539.922593][ T9014] loop3: detected capacity change from 0 to 16 [ 540.076462][ T9014] erofs (device loop3): negative i_size @ nid 36 [ 540.295105][ T9018] nbd: must specify at least one socket [ 540.585200][ T9021] netlink: 'syz.2.1148': attribute type 9 has an invalid length. [ 540.635002][ T9021] 9pnet_fd: Insufficient options for proto=fd [ 540.642516][ T9022] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 541.195638][ T9024] team0: Unable to change to the same mode the team is in [ 541.275270][ T9031] loop2: detected capacity change from 0 to 64 [ 541.496677][ T5846] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 541.522255][ T9031] netlink: 'syz.2.1151': attribute type 21 has an invalid length. [ 541.530964][ T9031] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1151'. [ 541.544786][ T9031] netlink: 'syz.2.1151': attribute type 4 has an invalid length. [ 541.554075][ T9031] netlink: 'syz.2.1151': attribute type 5 has an invalid length. [ 541.562233][ T9031] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1151'. [ 541.666690][ T5846] usb 4-1: device descriptor read/64, error -71 [ 541.906447][ T5846] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 542.010175][ T9038] loop0: detected capacity change from 0 to 512 [ 542.037397][ T9038] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 542.055045][ T9038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 542.095375][ T5846] usb 4-1: device descriptor read/64, error -71 [ 542.202996][ T9038] EXT4-fs (loop0): 1 truncate cleaned up [ 542.210972][ T9038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.240133][ T5846] usb usb4-port1: attempt power cycle [ 542.524442][ T9047] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 542.636528][ T5846] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 542.701274][ T5846] usb 4-1: device descriptor read/8, error -71 [ 542.957303][ T5846] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 543.020170][ T5846] usb 4-1: device descriptor read/8, error -71 [ 543.024841][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.139410][ T5846] usb usb4-port1: unable to enumerate USB device [ 543.404274][ T9054] loop1: detected capacity change from 0 to 16 [ 543.461059][ T9054] erofs (device loop1): negative i_size @ nid 36 [ 543.858393][ T9059] loop2: detected capacity change from 0 to 512 [ 543.920322][ T9059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 544.005327][ T9059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.018643][ T9059] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.028687][ T9065] nbd: must specify at least one socket [ 544.245243][ T9059] EXT4-fs (loop2): shut down requested (2) [ 544.289605][ T9059] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 544.399654][ T9067] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 544.854125][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.278495][ T9074] team0: Unable to change to the same mode the team is in [ 545.870427][ T9085] FAULT_INJECTION: forcing a failure. [ 545.870427][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 545.883875][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.3.1170 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 545.884012][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 545.884090][ T9085] Call Trace: [ 545.884139][ T9085] [ 545.884193][ T9085] dump_stack_lvl+0x216/0x2d0 [ 545.884333][ T9085] dump_stack+0x1e/0x24 [ 545.884447][ T9085] should_fail_ex+0x767/0x830 [ 545.884622][ T9085] should_failslab+0x17f/0x210 [ 545.884804][ T9085] __kmalloc_noprof+0x176/0x1230 [ 545.884940][ T9085] ? kfree+0x7bf/0xdb0 [ 545.885054][ T9085] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 545.885229][ T9085] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 545.885412][ T9085] ? kmsan_get_metadata+0x13e/0x1c0 [ 545.885576][ T9085] tomoyo_realpath_from_path+0x104/0xaa0 [ 545.885765][ T9085] ? __srcu_read_lock+0x76/0xd0 [ 545.885900][ T9085] tomoyo_path_number_perm+0x1cf/0x7d0 [ 545.886067][ T9085] ? kmsan_get_metadata+0x13e/0x1c0 [ 545.886232][ T9085] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 545.886426][ T9085] tomoyo_file_ioctl+0x3f/0x50 [ 545.886555][ T9085] security_file_ioctl_compat+0x145/0x590 [ 545.886719][ T9085] __se_compat_sys_ioctl+0xc8/0x1020 [ 545.886867][ T9085] ? ksys_write+0x408/0x4b0 [ 545.887002][ T9085] ? kmsan_get_metadata+0x13e/0x1c0 [ 545.887163][ T9085] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 545.887332][ T9085] __ia32_compat_sys_ioctl+0x93/0xe0 [ 545.887482][ T9085] ia32_sys_call+0x2226/0x4180 [ 545.887634][ T9085] __do_fast_syscall_32+0xb0/0x110 [ 545.887787][ T9085] ? irqentry_exit+0x16/0x60 [ 545.887916][ T9085] do_fast_syscall_32+0x38/0x80 [ 545.888061][ T9085] do_SYSENTER_32+0x1f/0x30 [ 545.888204][ T9085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.888390][ T9085] RIP: 0023:0xf747d579 [ 545.888483][ T9085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 545.888598][ T9085] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 545.888720][ T9085] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005423 [ 545.888805][ T9085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.888882][ T9085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.888958][ T9085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 545.889035][ T9085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.889130][ T9085] [ 546.138866][ T9085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.328679][ T9090] mmap: syz.4.1168 (9090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 546.679420][ T9088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1172'. [ 546.796892][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 547.207294][ T5846] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 547.385437][ T5846] usb 1-1: device descriptor read/64, error -71 [ 547.572907][ T9103] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 547.665466][ T5846] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 547.845226][ T5846] usb 1-1: device descriptor read/64, error -71 [ 547.956587][ T5846] usb usb1-port1: attempt power cycle [ 548.346070][ T5846] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 548.388298][ T5846] usb 1-1: device descriptor read/8, error -71 [ 548.657701][ T5846] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 548.698409][ T5846] usb 1-1: device descriptor read/8, error -71 [ 548.836013][ T5846] usb usb1-port1: unable to enumerate USB device [ 549.426275][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 549.515169][ T9126] loop1: detected capacity change from 0 to 512 [ 549.555430][ T9126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.662844][ T9126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.676202][ T9126] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.768745][ T9134] veth1_macvtap: left promiscuous mode [ 549.859325][ T29] audit: type=1800 audit(1740532459.512:4): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1185" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 549.881176][ T29] audit: type=1800 audit(1740532459.532:5): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1185" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 550.136092][ T9134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.232260][ T9139] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 550.246100][ T9134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.347507][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.422326][ T9134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.751497][ T9134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.207083][ T9134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.239678][ T9134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.276641][ T9134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.307587][ T9134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.432696][ T9160] nbd: must specify at least one socket [ 552.499670][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 552.588762][ T9163] loop1: detected capacity change from 0 to 64 [ 552.673380][ T9163] hfs: Unknown parameter 'Véle_umask' [ 552.907310][ T9163] overlay: ./file1 is not a directory [ 552.945879][ T5841] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 553.124298][ T5841] usb 3-1: device descriptor read/64, error -71 [ 553.418793][ T5841] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 553.441315][ T9177] loop3: detected capacity change from 0 to 512 [ 553.538885][ T9177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.579895][ T5841] usb 3-1: device descriptor read/64, error -71 [ 553.694885][ T9177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.708271][ T9177] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.735785][ T5841] usb usb3-port1: attempt power cycle [ 553.794124][ T9181] FAULT_INJECTION: forcing a failure. [ 553.794124][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 553.807607][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.0.1203 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 553.807735][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.807811][ T9181] Call Trace: [ 553.807857][ T9181] [ 553.807903][ T9181] dump_stack_lvl+0x216/0x2d0 [ 553.808039][ T9181] dump_stack+0x1e/0x24 [ 553.808151][ T9181] should_fail_ex+0x767/0x830 [ 553.808325][ T9181] should_failslab+0x17f/0x210 [ 553.808500][ T9181] __kmalloc_noprof+0x176/0x1230 [ 553.808638][ T9181] ? kfree+0x20/0xdb0 [ 553.808753][ T9181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 553.808918][ T9181] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 553.809102][ T9181] ? kmsan_get_metadata+0x13e/0x1c0 [ 553.809268][ T9181] tomoyo_realpath_from_path+0x104/0xaa0 [ 553.809469][ T9181] ? __srcu_read_lock+0x76/0xd0 [ 553.809603][ T9181] tomoyo_path_number_perm+0x1cf/0x7d0 [ 553.809776][ T9181] ? kmsan_get_metadata+0x13e/0x1c0 [ 553.809932][ T9181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 553.810132][ T9181] tomoyo_file_ioctl+0x3f/0x50 [ 553.810263][ T9181] security_file_ioctl_compat+0x145/0x590 [ 553.810450][ T9181] __se_compat_sys_ioctl+0xc8/0x1020 [ 553.810602][ T9181] ? ksys_write+0x408/0x4b0 [ 553.810740][ T9181] ? kmsan_get_metadata+0x13e/0x1c0 [ 553.810897][ T9181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 553.811070][ T9181] __ia32_compat_sys_ioctl+0x93/0xe0 [ 553.811222][ T9181] ia32_sys_call+0x2226/0x4180 [ 553.811376][ T9181] __do_fast_syscall_32+0xb0/0x110 [ 553.811531][ T9181] ? irqentry_exit+0x16/0x60 [ 553.811663][ T9181] do_fast_syscall_32+0x38/0x80 [ 553.811807][ T9181] do_SYSENTER_32+0x1f/0x30 [ 553.811947][ T9181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.812131][ T9181] RIP: 0023:0xf739d579 [ 553.812221][ T9181] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 553.812336][ T9181] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 553.812464][ T9181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008914 [ 553.812551][ T9181] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.812630][ T9181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.812708][ T9181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 553.812787][ T9181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.812881][ T9181] [ 553.812931][ T9181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.025352][ T29] audit: type=1800 audit(1740532463.682:6): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1201" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 554.103070][ T9185] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 554.111728][ T29] audit: type=1800 audit(1740532463.682:7): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1201" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 554.317404][ T5841] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 554.375367][ T5841] usb 3-1: device descriptor read/8, error -71 [ 554.418070][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.637922][ T5841] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 554.683335][ T9188] afs: Bad value for 'source' [ 554.696777][ T5841] usb 3-1: device descriptor read/8, error -71 [ 554.811463][ T5841] usb usb3-port1: unable to enumerate USB device [ 555.457552][ T9201] FAULT_INJECTION: forcing a failure. [ 555.457552][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 555.478206][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.1.1210 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 555.478340][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 555.478415][ T9201] Call Trace: [ 555.478463][ T9201] [ 555.478508][ T9201] dump_stack_lvl+0x216/0x2d0 [ 555.478646][ T9201] dump_stack+0x1e/0x24 [ 555.478757][ T9201] should_fail_ex+0x767/0x830 [ 555.478928][ T9201] should_failslab+0x17f/0x210 [ 555.479099][ T9201] __kmalloc_noprof+0x176/0x1230 [ 555.479240][ T9201] ? filter_irq_stacks+0x60/0x1a0 [ 555.479391][ T9201] ? genl_family_rcv_msg_attrs_parse+0x114/0x430 [ 555.479542][ T9201] ? kmsan_get_metadata+0x13e/0x1c0 [ 555.479700][ T9201] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 555.479877][ T9201] genl_family_rcv_msg_attrs_parse+0x114/0x430 [ 555.480027][ T9201] ? genl_rcv_msg+0xc4e/0x12c0 [ 555.480161][ T9201] genl_rcv_msg+0xc83/0x12c0 [ 555.480286][ T9201] ? __pfx_tipc_nl_peer_rm+0x10/0x10 [ 555.480454][ T9201] ? stack_depot_save_flags+0x2c/0x750 [ 555.480611][ T9201] ? kmsan_get_metadata+0x13e/0x1c0 [ 555.480784][ T9201] netlink_rcv_skb+0x375/0x650 [ 555.480943][ T9201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.481083][ T9201] ? __pfx_genl_rcv+0x10/0x10 [ 555.481195][ T9201] genl_rcv+0x40/0x60 [ 555.481305][ T9201] netlink_unicast+0xf52/0x1260 [ 555.481467][ T9201] netlink_sendmsg+0x10da/0x11e0 [ 555.481646][ T9201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.481802][ T9201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.481962][ T9201] __sock_sendmsg+0x30f/0x380 [ 555.482124][ T9201] ____sys_sendmsg+0x890/0xda0 [ 555.482272][ T9201] ___sys_sendmsg+0x28d/0x3c0 [ 555.482397][ T9201] ? kmsan_get_metadata+0x13e/0x1c0 [ 555.482554][ T9201] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 555.482726][ T9201] ? __rcu_read_unlock+0x7b/0xe0 [ 555.482905][ T9201] ? __fget_files+0x42b/0x500 [ 555.483079][ T9201] ? kmsan_get_metadata+0x13e/0x1c0 [ 555.483230][ T9201] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 555.483404][ T9201] __sys_sendmsg+0x1b6/0x300 [ 555.483548][ T9201] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 555.483712][ T9201] ia32_sys_call+0x2685/0x4180 [ 555.483858][ T9201] __do_fast_syscall_32+0xb0/0x110 [ 555.484021][ T9201] ? irqentry_exit+0x16/0x60 [ 555.484150][ T9201] do_fast_syscall_32+0x38/0x80 [ 555.484280][ T9201] do_SYSENTER_32+0x1f/0x30 [ 555.484409][ T9201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.484587][ T9201] RIP: 0023:0xf73fd579 [ 555.484673][ T9201] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 555.484783][ T9201] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 555.484898][ T9201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 555.484979][ T9201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.485062][ T9201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.485134][ T9201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 555.485207][ T9201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.485297][ T9201] [ 555.905216][ T9203] nbd: must specify at least one socket [ 556.613371][ T9214] loop0: detected capacity change from 0 to 512 [ 556.658775][ T9214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 556.791743][ T9213] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 556.832490][ T9223] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 556.864608][ T9214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.877915][ T9214] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.045063][ T9215] loop3: detected capacity change from 0 to 512 [ 557.052543][ T29] audit: type=1800 audit(1740532466.723:8): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1216" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 557.087901][ T9215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 557.109225][ T9215] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 557.121575][ T29] audit: type=1800 audit(1740532466.763:9): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1216" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 557.483860][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.588120][ T9227] loop2: detected capacity change from 0 to 65 [ 557.650259][ T9227] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 557.956653][ T9234] nbd: must specify at least one socket [ 558.613716][ T5841] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 558.753616][ T5841] usb 3-1: device descriptor read/64, error -71 [ 558.994223][ T5841] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 559.143537][ T5841] usb 3-1: device descriptor read/64, error -71 [ 559.278755][ T5841] usb usb3-port1: attempt power cycle [ 559.633553][ T5841] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 559.654742][ T5841] usb 3-1: device descriptor read/8, error -71 [ 559.903513][ T5841] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 559.924596][ T5841] usb 3-1: device descriptor read/8, error -71 [ 560.036347][ T5841] usb usb3-port1: unable to enumerate USB device [ 563.926315][ T9251] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 564.596784][ T9262] input: syz1 as /devices/virtual/input/input5 [ 564.801963][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 565.079156][ T9273] loop2: detected capacity change from 0 to 64 [ 565.142689][ T9273] hfs: Bad value for 'uid' [ 565.176144][ T9273] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1236'. [ 565.253426][ T5846] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 565.403535][ T5846] usb 5-1: device descriptor read/64, error -71 [ 565.514062][ T9273] program syz.2.1236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.653231][ T5846] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 565.709079][ T9285] nbd: must specify at least one socket [ 565.745856][ T9284] afs: Bad value for 'source' [ 565.809186][ T5846] usb 5-1: device descriptor read/64, error -71 [ 565.927468][ T5846] usb usb5-port1: attempt power cycle [ 566.172552][ T9291] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 566.283237][ T5846] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 566.294011][ T9294] FAULT_INJECTION: forcing a failure. [ 566.294011][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.307720][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.2.1244 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 566.307853][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.307932][ T9294] Call Trace: [ 566.307981][ T9294] [ 566.308025][ T9294] dump_stack_lvl+0x216/0x2d0 [ 566.308166][ T9294] dump_stack+0x1e/0x24 [ 566.308283][ T9294] should_fail_ex+0x767/0x830 [ 566.308460][ T9294] should_fail+0x2a/0x40 [ 566.308607][ T9294] should_fail_usercopy+0x2e/0x40 [ 566.308777][ T9294] _copy_from_user+0x35/0x110 [ 566.308938][ T9294] btf_new_fd+0x5a9/0x1880 [ 566.309115][ T9294] bpf_btf_load+0x345/0x3a0 [ 566.309292][ T9294] __sys_bpf+0xab2/0xd90 [ 566.309477][ T9294] __ia32_sys_bpf+0xa0/0xe0 [ 566.309625][ T9294] ia32_sys_call+0x394d/0x4180 [ 566.309780][ T9294] __do_fast_syscall_32+0xb0/0x110 [ 566.309916][ T9294] ? irqentry_exit+0x16/0x60 [ 566.310047][ T9294] do_fast_syscall_32+0x38/0x80 [ 566.310193][ T9294] do_SYSENTER_32+0x1f/0x30 [ 566.310341][ T9294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.310523][ T9294] RIP: 0023:0xf740d579 [ 566.310617][ T9294] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 566.310732][ T9294] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 566.310855][ T9294] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000000 [ 566.310942][ T9294] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.311020][ T9294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.311096][ T9294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.311174][ T9294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.311274][ T9294] [ 566.589742][ T5846] usb 5-1: device descriptor read/8, error -71 [ 566.713064][ T25] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 566.833340][ T5846] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 566.848549][ T9296] loop3: detected capacity change from 0 to 256 [ 566.860785][ T5846] usb 5-1: device descriptor read/8, error -71 [ 566.873041][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 566.885279][ T25] usb 2-1: config 9 has an invalid interface number: 98 but max is 0 [ 566.893871][ T25] usb 2-1: config 9 has no interface number 0 [ 566.900211][ T25] usb 2-1: config 9 interface 98 altsetting 0 endpoint 0x3 has invalid maxpacket 53212, setting to 64 [ 566.912037][ T25] usb 2-1: config 9 interface 98 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 566.922227][ T25] usb 2-1: config 9 interface 98 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 566.927126][ T9296] FAT-fs (loop3): Directory bread(block 64) failed [ 566.944263][ T9296] FAT-fs (loop3): Directory bread(block 65) failed [ 566.951211][ T9296] FAT-fs (loop3): Directory bread(block 66) failed [ 566.958166][ T9296] FAT-fs (loop3): Directory bread(block 67) failed [ 566.965213][ T9296] FAT-fs (loop3): Directory bread(block 68) failed [ 566.965855][ T25] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=f3.41 [ 566.971890][ T9296] FAT-fs (loop3): Directory bread(block 69) failed [ 566.972148][ T9296] FAT-fs (loop3): Directory bread(block 70) failed [ 566.981540][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.981669][ T25] usb 2-1: Product: syz [ 566.981761][ T25] usb 2-1: Manufacturer: syz [ 566.988377][ T9296] FAT-fs (loop3): Directory bread(block 71) failed [ 566.995211][ T25] usb 2-1: SerialNumber: syz [ 567.003413][ T9296] FAT-fs (loop3): Directory bread(block 72) failed [ 567.003535][ T9296] FAT-fs (loop3): Directory bread(block 73) failed [ 567.027348][ T5846] usb usb5-port1: unable to enumerate USB device [ 569.175172][ T25] s2255 2-1:9.98: Could not find bulk-in endpoint [ 569.188011][ T25] Sensoray 2255 driver load failed: 0xfffffff4 [ 569.195966][ T25] s2255 2-1:9.98: probe with driver s2255 failed with error -12 [ 569.211222][ T25] usb 2-1: USB disconnect, device number 86 [ 587.813482][ T9299] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1246'. [ 587.883833][ T9305] loop4: detected capacity change from 0 to 64 [ 587.901553][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 587.991428][ T9307] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1247'. [ 588.047107][ T9305] netlink: 'syz.4.1250': attribute type 21 has an invalid length. [ 588.055434][ T9305] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1250'. [ 588.065088][ T9305] netlink: 'syz.4.1250': attribute type 4 has an invalid length. [ 588.073244][ T9305] netlink: 'syz.4.1250': attribute type 5 has an invalid length. [ 588.081198][ T9305] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1250'. [ 588.106472][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 588.717889][ T9317] nbd: must specify at least one socket [ 588.822582][ T9319] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 589.531371][ T25] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 589.592976][ T9332] loop1: detected capacity change from 0 to 2048 [ 589.698088][ T9332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.718806][ T25] usb 3-1: device descriptor read/64, error -71 [ 589.742793][ T5841] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 589.921507][ T9332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1259: bg 0: block 234: padding at end of block bitmap is not set [ 589.949438][ T5841] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 589.958530][ T5841] usb 4-1: config 0 has no interface number 0 [ 589.965162][ T5841] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 589.978146][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.983184][ T25] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 589.989873][ T9332] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 154 with error 117 [ 590.007153][ T9332] EXT4-fs (loop1): This should not happen!! Data will be lost [ 590.007153][ T9332] [ 590.067055][ T5841] usb 4-1: config 0 descriptor?? [ 590.110085][ T5841] ttusbir 4-1:0.83: cannot find expected altsetting [ 590.155650][ T25] usb 3-1: device descriptor read/64, error -71 [ 590.273888][ T25] usb usb3-port1: attempt power cycle [ 590.293844][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 590.307895][ T9347] loop4: detected capacity change from 0 to 64 [ 590.317870][ T9332] syz.1.1259 (9332) used greatest stack depth: 4912 bytes left [ 590.320294][ T5841] usb 4-1: USB disconnect, device number 81 [ 590.411565][ T9347] netlink: 'syz.4.1262': attribute type 21 has an invalid length. [ 590.420107][ T9347] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1262'. [ 590.429534][ T9347] netlink: 'syz.4.1262': attribute type 4 has an invalid length. [ 590.438466][ T9347] netlink: 'syz.4.1262': attribute type 5 has an invalid length. [ 590.446554][ T9347] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1262'. [ 590.601516][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.635288][ T25] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 590.679478][ T25] usb 3-1: device descriptor read/8, error -71 [ 590.926968][ T25] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 591.000567][ T25] usb 3-1: device descriptor read/8, error -71 [ 591.114277][ T25] usb usb3-port1: unable to enumerate USB device [ 591.271065][ T9359] nbd: must specify at least one socket [ 591.681682][ T9363] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 591.986253][ T9369] loop1: detected capacity change from 0 to 2048 [ 591.996284][ T9369] EXT4-fs: Ignoring removed mblk_io_submit option [ 592.102476][ T9369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.696393][ T9383] loop2: detected capacity change from 0 to 64 [ 592.710351][ T9385] veth1_macvtap: left promiscuous mode [ 592.754652][ T9387] loop3: detected capacity change from 0 to 3 [ 592.765695][ T9387] syz.3.1278: attempt to access beyond end of device [ 592.765695][ T9387] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 592.779642][ T9387] SQUASHFS error: Failed to read block 0x0: -5 [ 592.786787][ T9387] unable to read squashfs_super_block [ 592.886922][ T9385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.906110][ T9383] netlink: 'syz.2.1276': attribute type 21 has an invalid length. [ 592.939283][ T9383] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1276'. [ 592.953379][ T9383] netlink: 'syz.2.1276': attribute type 4 has an invalid length. [ 592.961331][ T9383] netlink: 'syz.2.1276': attribute type 5 has an invalid length. [ 592.970770][ T9383] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1276'. [ 592.989545][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.996406][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.132688][ T9385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.332887][ T9385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.386432][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.610435][ T9385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.865318][ T9396] nbd: must specify at least one socket [ 593.936084][ T9385] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.972880][ T9385] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.006009][ T9385] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.036382][ T9385] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.081669][ T9401] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 594.520514][ T9403] loop3: detected capacity change from 0 to 128 [ 594.563942][ T9403] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.621648][ T9403] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 594.709437][ T9403] syz.3.1284 (pid 9403) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 594.922662][ T5843] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 595.007280][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.083021][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 595.114103][ T9413] FAULT_INJECTION: forcing a failure. [ 595.114103][ T9413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.127760][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.4.1289 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 595.127887][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 595.127960][ T9413] Call Trace: [ 595.128009][ T9413] [ 595.128054][ T9413] dump_stack_lvl+0x216/0x2d0 [ 595.128191][ T9413] dump_stack+0x1e/0x24 [ 595.128303][ T9413] should_fail_ex+0x767/0x830 [ 595.128475][ T9413] should_fail+0x2a/0x40 [ 595.128620][ T9413] should_fail_usercopy+0x2e/0x40 [ 595.128791][ T9413] strncpy_from_user+0x39/0x540 [ 595.128933][ T9413] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 595.129106][ T9413] getname_flags+0x187/0xa30 [ 595.129279][ T9413] ? stack_depot_save_flags+0x2c/0x750 [ 595.129432][ T9413] user_path_at+0x45/0x3e0 [ 595.129560][ T9413] ? __ia32_sys_mount+0xe3/0x150 [ 595.129723][ T9413] __se_sys_mount+0x673/0x800 [ 595.129882][ T9413] ? fput+0x359/0x400 [ 595.130006][ T9413] __ia32_sys_mount+0xe3/0x150 [ 595.130168][ T9413] ia32_sys_call+0x260e/0x4180 [ 595.130316][ T9413] __do_fast_syscall_32+0xb0/0x110 [ 595.130460][ T9413] ? irqentry_exit+0x16/0x60 [ 595.130587][ T9413] do_fast_syscall_32+0x38/0x80 [ 595.130722][ T9413] do_SYSENTER_32+0x1f/0x30 [ 595.130863][ T9413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 595.131039][ T9413] RIP: 0023:0xf73bd579 [ 595.131126][ T9413] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 595.131235][ T9413] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 595.131351][ T9413] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000000 [ 595.131438][ T9413] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.131522][ T9413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.131596][ T9413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 595.131669][ T9413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 595.131764][ T9413] [ 595.333397][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.424447][ T5843] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 595.434842][ T5843] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 595.484889][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.494563][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.505884][ T5843] usb 3-1: Product: syz [ 595.510287][ T5843] usb 3-1: Manufacturer: syz [ 595.516209][ T5843] usb 3-1: SerialNumber: syz [ 595.745322][ T9418] loop3: detected capacity change from 0 to 2048 [ 595.762714][ T5843] cdc_ncm 3-1:1.0: bind() failure [ 595.773480][ T5843] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 595.773677][ T5843] cdc_ncm 3-1:1.1: bind() failure [ 595.799081][ T5843] usb 3-1: USB disconnect, device number 89 [ 595.896796][ T9425] loop4: detected capacity change from 0 to 64 [ 595.973562][ T9427] 9pnet_fd: Insufficient options for proto=fd [ 596.360690][ T9430] loop3: detected capacity change from 0 to 128 [ 596.414508][ T9430] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.467604][ T9430] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.578931][ T9437] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 596.695599][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.100179][ T9443] veth1_macvtap: left promiscuous mode [ 597.169307][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 597.219996][ T9446] 9pnet_virtio: no channels available for device [ 597.249212][ T9443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.405980][ T9443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.552698][ T9443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.672855][ T9443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.934910][ T9443] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.941468][ T9458] loop2: detected capacity change from 0 to 128 [ 597.971249][ T9443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.008457][ T9443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.039893][ T9443] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.072947][ T9458] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 598.149252][ T9458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.224829][ T9458] FAULT_INJECTION: forcing a failure. [ 598.224829][ T9458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.238454][ T9458] CPU: 1 UID: 0 PID: 9458 Comm: syz.2.1305 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 598.238585][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.238661][ T9458] Call Trace: [ 598.238710][ T9458] [ 598.238761][ T9458] dump_stack_lvl+0x216/0x2d0 [ 598.238901][ T9458] dump_stack+0x1e/0x24 [ 598.239015][ T9458] should_fail_ex+0x767/0x830 [ 598.239192][ T9458] should_fail+0x2a/0x40 [ 598.239342][ T9458] should_fail_usercopy+0x2e/0x40 [ 598.239512][ T9458] strncpy_from_user+0x39/0x540 [ 598.239661][ T9458] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 598.239843][ T9458] getname_flags+0x187/0xa30 [ 598.240025][ T9458] getname+0x30/0x40 [ 598.240184][ T9458] do_sys_openat2+0xc3/0x2f0 [ 598.240380][ T9458] __ia32_compat_sys_openat+0x298/0x300 [ 598.240531][ T9458] ia32_sys_call+0x2fb4/0x4180 [ 598.240683][ T9458] __do_fast_syscall_32+0xb0/0x110 [ 598.240834][ T9458] ? irqentry_exit+0x16/0x60 [ 598.240966][ T9458] do_fast_syscall_32+0x38/0x80 [ 598.241110][ T9458] do_SYSENTER_32+0x1f/0x30 [ 598.241248][ T9458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.241430][ T9458] RIP: 0023:0xf740d579 [ 598.241522][ T9458] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 598.241635][ T9458] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 598.241762][ T9458] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 598.241854][ T9458] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 598.241933][ T9458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.242006][ T9458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 598.242079][ T9458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.242173][ T9458] [ 598.592218][ T9462] 9pnet_fd: Insufficient options for proto=fd [ 598.608164][ T9464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 598.793878][ T5846] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 598.962444][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 598.991415][ T5846] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 599.001803][ T5846] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 599.073732][ T9469] capability: warning: `syz.0.1309' uses deprecated v2 capabilities in a way that may be insecure [ 599.115522][ T5846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.125269][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.133744][ T5846] usb 2-1: Product: syz [ 599.138135][ T5846] usb 2-1: Manufacturer: syz [ 599.143096][ T5846] usb 2-1: SerialNumber: syz [ 599.502771][ T5846] cdc_ncm 2-1:1.0: bind() failure [ 599.519198][ T5846] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 599.526497][ T5846] cdc_ncm 2-1:1.1: bind() failure [ 599.701844][ T5846] usb 2-1: USB disconnect, device number 87 [ 599.942133][ T9478] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 600.357172][ T9480] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1314'. [ 600.366914][ T9480] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1314'. [ 600.461223][ T9486] loop0: detected capacity change from 0 to 128 [ 600.546079][ T9486] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 600.586440][ T9486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.649938][ T9487] loop1: detected capacity change from 0 to 512 [ 600.743344][ T9487] EXT4-fs error (device loop1): __ext4_iget:4984: inode #16: block 127754: comm syz.1.1315: invalid block [ 600.788819][ T9487] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1315: couldn't read orphan inode 16 (err -117) [ 600.854412][ T9487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.945805][ T9487] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.974166][ T9494] loop4: detected capacity change from 0 to 512 [ 600.996864][ T9494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 601.016732][ T29] audit: type=1326 audit(1740532510.684:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.042636][ T29] audit: type=1326 audit(1740532510.684:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.066012][ T29] audit: type=1326 audit(1740532510.684:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.088586][ T29] audit: type=1326 audit(1740532510.684:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.111581][ T29] audit: type=1326 audit(1740532510.684:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.137115][ T29] audit: type=1326 audit(1740532510.684:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.163602][ T29] audit: type=1326 audit(1740532510.694:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.185987][ T29] audit: type=1326 audit(1740532510.754:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.208425][ T29] audit: type=1326 audit(1740532510.754:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.1315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 601.288218][ T9494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.303096][ T9494] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.316924][ T9501] 9pnet_fd: Insufficient options for proto=fd [ 601.402207][ T5841] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 601.481179][ T9504] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.504657][ T9493] EXT4-fs (loop4): shut down requested (2) [ 601.523959][ T9493] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 601.578427][ T9504] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.589769][ T5841] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 601.599114][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.609613][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 601.619194][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.647366][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.697870][ T5841] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 601.708583][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 601.717714][ T5841] usb 4-1: Product: syz [ 601.722882][ T5841] usb 4-1: Manufacturer: syz [ 601.775637][ T9504] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.837967][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 601.846210][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 601.861856][ T5841] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 601.899404][ T9504] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.982745][ T5785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.159244][ T9496] loop3: detected capacity change from 0 to 512 [ 602.280714][ T9504] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.310742][ T9504] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.335238][ T9496] loop3: detected capacity change from 0 to 512 [ 602.341403][ T9504] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.377050][ T9496] loop3: detected capacity change from 0 to 512 [ 602.378825][ T9504] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.414553][ T9496] loop3: detected capacity change from 0 to 512 [ 602.452930][ T9496] loop3: detected capacity change from 0 to 512 [ 602.490252][ T9510] loop1: detected capacity change from 0 to 512 [ 602.538154][ T9510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 602.547191][ T9496] loop3: detected capacity change from 0 to 512 [ 602.600570][ T9496] loop3: detected capacity change from 0 to 512 [ 602.618548][ T9510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.632192][ T9510] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.645498][ T9496] loop3: detected capacity change from 0 to 512 [ 602.727191][ T9496] loop3: detected capacity change from 0 to 512 [ 602.820270][ T9506] EXT4-fs (loop1): shut down requested (2) [ 602.834260][ T9496] loop3: detected capacity change from 0 to 512 [ 602.845964][ T9506] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 602.878006][ T9496] loop3: detected capacity change from 0 to 512 [ 602.904853][ T9509] loop0: detected capacity change from 0 to 4096 [ 602.917114][ T9496] loop3: detected capacity change from 0 to 512 [ 602.955547][ T9496] loop3: detected capacity change from 0 to 512 [ 602.999660][ T9496] loop3: detected capacity change from 0 to 512 [ 603.037755][ T9496] loop3: detected capacity change from 0 to 512 [ 603.081205][ T9496] loop3: detected capacity change from 0 to 512 [ 603.135049][ T9496] loop3: detected capacity change from 0 to 512 [ 603.223166][ T9496] loop3: detected capacity change from 0 to 512 [ 603.336386][ T9496] loop3: detected capacity change from 0 to 512 [ 603.516512][ T9496] loop3: detected capacity change from 0 to 512 [ 603.617098][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.633300][ T9496] loop3: detected capacity change from 0 to 512 [ 603.743267][ T9521] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 603.752137][ T9496] loop3: detected capacity change from 0 to 512 [ 603.772582][ T25] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 603.840013][ T9496] loop3: detected capacity change from 0 to 512 [ 603.930883][ T9496] loop3: detected capacity change from 0 to 512 [ 603.943134][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 603.969406][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 603.980015][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 604.048097][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.057722][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.066327][ T25] usb 3-1: Product: syz [ 604.070727][ T25] usb 3-1: Manufacturer: syz [ 604.075677][ T25] usb 3-1: SerialNumber: syz [ 604.228412][ T5841] usb 4-1: USB disconnect, device number 82 [ 604.373465][ T25] cdc_ncm 3-1:1.0: bind() failure [ 604.389658][ T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 604.397021][ T25] cdc_ncm 3-1:1.1: bind() failure [ 604.494223][ T25] usb 3-1: USB disconnect, device number 90 [ 604.629707][ T9528] loop0: detected capacity change from 0 to 4096 [ 604.644020][ T9528] ntfs3(loop0): ino=3, Correct links count -> 2. [ 605.071557][ T9532] loop3: detected capacity change from 0 to 4096 [ 605.106965][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 605.115492][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 605.117457][ T9536] 9pnet_fd: Insufficient options for proto=fd [ 605.124369][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 605.124605][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 605.159791][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 605.176810][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 605.185255][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 605.193705][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 605.207333][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 605.215784][ T9532] ntfs3(loop3): try to read out of volume at offset 0x3fffffe0c00 [ 605.566181][ T9540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.579828][ T9541] loop2: detected capacity change from 0 to 512 [ 605.659349][ T9541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 605.729213][ T9540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.820790][ T9541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.834493][ T9541] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.919441][ T9540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.247520][ T9553] team0: Unable to change to the same mode the team is in [ 606.285054][ T9557] FAULT_INJECTION: forcing a failure. [ 606.285054][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 606.298760][ T9557] CPU: 1 UID: 0 PID: 9557 Comm: syz.3.1337 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 606.298885][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 606.298960][ T9557] Call Trace: [ 606.299007][ T9557] [ 606.299052][ T9557] dump_stack_lvl+0x216/0x2d0 [ 606.299192][ T9557] dump_stack+0x1e/0x24 [ 606.299306][ T9557] should_fail_ex+0x767/0x830 [ 606.299481][ T9557] should_failslab+0x17f/0x210 [ 606.299666][ T9557] __kmalloc_noprof+0x176/0x1230 [ 606.299808][ T9557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 606.299972][ T9557] ? kmsan_get_metadata+0x13e/0x1c0 [ 606.300125][ T9557] ? tomoyo_encode+0x5f8/0xa40 [ 606.300293][ T9557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 606.300457][ T9557] ? kmsan_get_metadata+0x13e/0x1c0 [ 606.300612][ T9557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 606.300787][ T9557] tomoyo_encode+0x5f8/0xa40 [ 606.300972][ T9557] tomoyo_mount_permission+0x3d2/0x10a0 [ 606.301145][ T9557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 606.301306][ T9557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 606.301476][ T9557] ? hook_sb_mount+0x6ae/0x720 [ 606.301606][ T9557] tomoyo_sb_mount+0x4f/0x70 [ 606.301737][ T9557] security_sb_mount+0x173/0x680 [ 606.301919][ T9557] path_mount+0x109/0x1f10 [ 606.302073][ T9557] ? user_path_at+0x374/0x3e0 [ 606.302214][ T9557] __se_sys_mount+0x71f/0x800 [ 606.302372][ T9557] ? fput+0x359/0x400 [ 606.302501][ T9557] __ia32_sys_mount+0xe3/0x150 [ 606.302668][ T9557] ia32_sys_call+0x260e/0x4180 [ 606.302829][ T9557] __do_fast_syscall_32+0xb0/0x110 [ 606.302978][ T9557] ? irqentry_exit+0x16/0x60 [ 606.303105][ T9557] do_fast_syscall_32+0x38/0x80 [ 606.303255][ T9557] do_SYSENTER_32+0x1f/0x30 [ 606.303392][ T9557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 606.303583][ T9557] RIP: 0023:0xf747d579 [ 606.303671][ T9557] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 606.303781][ T9557] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 606.303895][ T9557] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140 [ 606.303977][ T9557] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000080000100 [ 606.304056][ T9557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 606.304138][ T9557] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 606.304215][ T9557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.304310][ T9557] [ 606.577838][ T9540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.606109][ T9541] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 606.638989][ T9550] loop0: detected capacity change from 0 to 512 [ 606.657132][ T9550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.810688][ T9550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.824024][ T9550] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.876353][ T9562] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 606.903206][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.932535][ T9540] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.963112][ T9540] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.997347][ T9540] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.025792][ T9540] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.030309][ T9550] EXT4-fs (loop0): shut down requested (2) [ 607.136433][ T9550] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 607.511213][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.527686][ T9564] loop1: detected capacity change from 0 to 1024 [ 607.541089][ T9564] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 607.572545][ T9564] JBD2: no valid journal superblock found [ 607.578647][ T9564] EXT4-fs (loop1): Could not load journal inode [ 607.702299][ T44] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 607.760175][ T9564] netlink: 'syz.1.1341': attribute type 4 has an invalid length. [ 607.824293][ T9564] netlink: 'syz.1.1341': attribute type 4 has an invalid length. [ 607.873108][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 607.905000][ T9572] FAULT_INJECTION: forcing a failure. [ 607.905000][ T9572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.907653][ T44] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 607.919058][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.3.1344 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 607.919197][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.919270][ T9572] Call Trace: [ 607.919315][ T9572] [ 607.919364][ T9572] dump_stack_lvl+0x216/0x2d0 [ 607.919524][ T9572] dump_stack+0x1e/0x24 [ 607.919634][ T9572] should_fail_ex+0x767/0x830 [ 607.919806][ T9572] should_fail+0x2a/0x40 [ 607.919959][ T9572] should_fail_usercopy+0x2e/0x40 [ 607.920124][ T9572] strncpy_from_user+0x39/0x540 [ 607.920269][ T9572] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 607.920441][ T9572] getname_flags+0x187/0xa30 [ 607.920618][ T9572] __ia32_sys_renameat2+0xc3/0x1f0 [ 607.920791][ T9572] ia32_sys_call+0x2f8a/0x4180 [ 607.920944][ T9572] __do_fast_syscall_32+0xb0/0x110 [ 607.921092][ T9572] ? irqentry_exit+0x16/0x60 [ 607.921222][ T9572] do_fast_syscall_32+0x38/0x80 [ 607.921363][ T9572] do_SYSENTER_32+0x1f/0x30 [ 607.921500][ T9572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 607.921682][ T9572] RIP: 0023:0xf747d579 [ 607.921773][ T9572] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 607.921893][ T9572] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 607.922015][ T9572] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000580 [ 607.922104][ T9572] RDX: 00000000ffffff9c RSI: 00000000800005c0 RDI: 0000000000000000 [ 607.922187][ T9572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 607.922261][ T9572] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 607.922338][ T9572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 607.922429][ T9572] [ 608.072158][ T5841] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 608.079212][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.233914][ T44] usb 3-1: config 0 descriptor?? [ 608.250264][ T44] gspca_main: sunplus-2.14.0 probing 041e:400b [ 608.280363][ T9574] FAULT_INJECTION: forcing a failure. [ 608.280363][ T9574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.294166][ T9574] CPU: 0 UID: 0 PID: 9574 Comm: syz.1.1345 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 608.294295][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 608.294366][ T9574] Call Trace: [ 608.294412][ T9574] [ 608.294457][ T9574] dump_stack_lvl+0x216/0x2d0 [ 608.294594][ T9574] dump_stack+0x1e/0x24 [ 608.294702][ T9574] should_fail_ex+0x767/0x830 [ 608.294880][ T9574] should_fail+0x2a/0x40 [ 608.295031][ T9574] should_fail_usercopy+0x2e/0x40 [ 608.295204][ T9574] strncpy_from_user+0x39/0x540 [ 608.295355][ T9574] ? __msan_memcpy+0x108/0x1c0 [ 608.295496][ T9574] __se_sys_memfd_create+0x5c2/0x11e0 [ 608.295640][ T9574] __ia32_sys_memfd_create+0x6b/0xa0 [ 608.295775][ T9574] ia32_sys_call+0x23dd/0x4180 [ 608.295929][ T9574] __do_fast_syscall_32+0xb0/0x110 [ 608.296075][ T9574] ? irqentry_exit+0x16/0x60 [ 608.296206][ T9574] do_fast_syscall_32+0x38/0x80 [ 608.296352][ T9574] do_SYSENTER_32+0x1f/0x30 [ 608.296488][ T9574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.296673][ T9574] RIP: 0023:0xf73fd579 [ 608.296762][ T9574] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 608.296879][ T9574] RSP: 002b:00000000f508636c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 608.297004][ T9574] RAX: ffffffffffffffda RBX: 00000000f7275a30 RCX: 0000000000000000 [ 608.297089][ T9574] RDX: 00000000f71a68ee RSI: 00000000f5086410 RDI: 0000000000000040 [ 608.297172][ T9574] RBP: 000000008001f7c0 R08: 0000000000000000 R09: 0000000000000000 [ 608.297250][ T9574] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 608.297326][ T9574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.297418][ T9574] [ 608.479644][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.622831][ T5841] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 608.632702][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.647778][ T5841] usb 1-1: config 0 descriptor?? [ 608.663741][ T5841] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 608.671749][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 608.682982][ T5841] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 608.694532][ T5841] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 608.703521][ T5841] usb 1-1: media controller created [ 608.713784][ T5841] dvb-usb: bulk message failed: -22 (5/0) [ 608.719964][ T5841] dvb-usb: MAC address reading failed. [ 608.750294][ T44] gspca_sunplus: reg_w_riv err -71 [ 608.756361][ T44] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 608.780015][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.798460][ T44] usb 3-1: USB disconnect, device number 91 [ 608.840350][ T9577] 9pnet_fd: Insufficient options for proto=fd [ 608.849624][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 608.858187][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 608.865143][ T5841] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 608.930529][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 608.985910][ T5841] dvb-usb: schedule remote query interval to 100 msecs. [ 608.993447][ T5841] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 609.044432][ T5841] usb 1-1: USB disconnect, device number 78 [ 609.126552][ T5841] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 609.615872][ T9582] loop3: detected capacity change from 0 to 2048 [ 609.673782][ T9582] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 609.684362][ T9582] NILFS (loop3): mounting unchecked fs [ 609.690056][ T9582] NILFS (loop3): recovery required for readonly filesystem [ 609.697790][ T9582] NILFS (loop3): write access will be enabled during recovery [ 609.811446][ T9582] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 609.894189][ T9588] loop1: detected capacity change from 0 to 512 [ 609.944043][ T9589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.944323][ T9591] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 609.960236][ T9588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.043649][ T9588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.059292][ T9588] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.094252][ T9589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.238438][ T9589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.264799][ T9588] EXT4-fs (loop1): shut down requested (2) [ 610.283039][ T9597] loop4: detected capacity change from 0 to 512 [ 610.301679][ T9588] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 610.310142][ T9597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.325155][ T9589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.391065][ T9597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.404546][ T9597] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.458383][ T9589] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.476226][ T9605] FAULT_INJECTION: forcing a failure. [ 610.476226][ T9605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.486188][ T9589] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.489781][ T9605] CPU: 0 UID: 0 PID: 9605 Comm: syz.3.1355 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 610.489916][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 610.489990][ T9605] Call Trace: [ 610.490040][ T9605] [ 610.490085][ T9605] dump_stack_lvl+0x216/0x2d0 [ 610.490224][ T9605] dump_stack+0x1e/0x24 [ 610.490331][ T9605] should_fail_ex+0x767/0x830 [ 610.490511][ T9605] should_fail+0x2a/0x40 [ 610.490657][ T9605] should_fail_usercopy+0x2e/0x40 [ 610.490822][ T9605] strncpy_from_user+0x39/0x540 [ 610.490966][ T9605] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 610.491137][ T9605] getname_flags+0x187/0xa30 [ 610.491317][ T9605] getname+0x30/0x40 [ 610.491491][ T9605] do_sys_openat2+0xc3/0x2f0 [ 610.491669][ T9605] __ia32_compat_sys_openat+0x298/0x300 [ 610.491815][ T9605] ia32_sys_call+0x2fb4/0x4180 [ 610.491969][ T9605] __do_fast_syscall_32+0xb0/0x110 [ 610.492117][ T9605] ? irqentry_exit+0x16/0x60 [ 610.492244][ T9605] do_fast_syscall_32+0x38/0x80 [ 610.492391][ T9605] do_SYSENTER_32+0x1f/0x30 [ 610.492527][ T9605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.492705][ T9605] RIP: 0023:0xf747d579 [ 610.492794][ T9605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 610.492909][ T9605] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 610.493029][ T9605] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 610.493117][ T9605] RDX: 0000000000040103 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.493195][ T9605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.493270][ T9605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 610.493345][ T9605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.493444][ T9605] [ 610.588231][ T9597] EXT4-fs (loop4): shut down requested (2) [ 610.611032][ T9589] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.750818][ T9589] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.767170][ T9597] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 610.868565][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.176550][ T9609] loop3: detected capacity change from 0 to 1024 [ 611.207196][ T5785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.216325][ T9609] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 611.219464][ T9609] JBD2: no valid journal superblock found [ 611.234764][ T9609] EXT4-fs (loop3): Could not load journal inode [ 611.542742][ T5841] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 611.608570][ T9617] 9pnet_fd: Insufficient options for proto=fd [ 611.742351][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 611.776514][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.819145][ T5841] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 611.828679][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.837032][ T5841] usb 3-1: Product: syz [ 611.841426][ T5841] usb 3-1: Manufacturer: syz [ 611.846412][ T5841] usb 3-1: SerialNumber: syz [ 611.909986][ T5841] usb 3-1: config 0 descriptor?? [ 612.135442][ T9613] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.272864][ T5799] Bluetooth: Unexpected continuation frame (len 18) [ 612.388237][ T5841] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 612.915132][ T9637] loop3: detected capacity change from 0 to 512 [ 612.978919][ T9637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.993280][ T9637] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.027260][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 613.072742][ T5841] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 613.139888][ T9613] loop2: detected capacity change from 0 to 16 [ 613.165913][ T9613] erofs (device loop2): negative i_size @ nid 36 [ 613.200470][ T5846] usb 3-1: USB disconnect, device number 92 [ 613.252298][ T5841] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 613.263655][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.274889][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.285051][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 613.369200][ T25] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 613.432555][ T5841] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 613.441996][ T5841] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 613.450343][ T5841] usb 5-1: Manufacturer: syz [ 613.459469][ T5841] usb 5-1: config 0 descriptor?? [ 613.532272][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 613.561133][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.582246][ T25] usb 2-1: config 2 has an invalid interface number: 32 but max is 2 [ 613.590849][ T25] usb 2-1: config 2 has an invalid interface number: 55 but max is 2 [ 613.599413][ T25] usb 2-1: config 2 has no interface number 1 [ 613.606492][ T25] usb 2-1: config 2 has no interface number 2 [ 613.613732][ T25] usb 2-1: config 2 interface 32 has no altsetting 0 [ 613.621300][ T25] usb 2-1: config 2 interface 0 has no altsetting 0 [ 613.632465][ T25] usb 2-1: config 2 interface 55 has no altsetting 0 [ 613.724305][ T25] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 613.737535][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.746988][ T25] usb 2-1: Product: syz [ 613.751386][ T25] usb 2-1: Manufacturer: syz [ 613.756385][ T25] usb 2-1: SerialNumber: syz [ 613.911292][ T5841] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 613.955026][ T5841] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 614.013276][ T5841] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 614.373348][ T25] usb 2-1: USB disconnect, device number 88 [ 614.492226][ T5841] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 614.688763][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.700341][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.710521][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.723961][ T5841] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.733464][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.746786][ T5841] usb 4-1: config 0 descriptor?? [ 614.748372][ T44] usb 5-1: USB disconnect, device number 69 [ 614.976074][ T25] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 615.142287][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 615.155432][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 615.171382][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.192848][ T5841] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 615.201554][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.211347][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.221566][ T5841] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 615.221655][ T25] usb 3-1: Product: syz [ 615.234224][ T25] usb 3-1: Manufacturer: syz [ 615.239104][ T25] usb 3-1: SerialNumber: syz [ 615.249847][ T25] usb 3-1: config 0 descriptor?? [ 615.259584][ T5841] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 615.273278][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 615.273452][ T25] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 615.919187][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 615.932989][ T25] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 615.953465][ T5841] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 616.137788][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 616.166499][ T5841] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 616.175581][ T5841] usb 5-1: config 0 has no interface number 0 [ 616.182087][ T5841] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.197340][ T5841] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 616.210754][ T5841] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 616.222596][ T5841] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.329833][ T5841] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 616.339649][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.348499][ T5841] usb 5-1: Product: syz [ 616.353221][ T5841] usb 5-1: Manufacturer: syz [ 616.358137][ T5841] usb 5-1: SerialNumber: syz [ 616.397046][ T5841] usb 5-1: config 0 descriptor?? [ 616.575980][ T25] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 616.616565][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 616.645083][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 616.664797][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 616.681634][ T5841] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 616.683830][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 616.715665][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 616.751689][ T5841] usb 5-1: USB disconnect, device number 70 [ 617.319135][ T5843] usb 4-1: USB disconnect, device number 83 [ 617.335944][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 20 [ 617.356823][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 16 [ 617.403168][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 12 [ 617.436665][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 14 [ 617.450013][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 18 [ 617.462764][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 22 [ 617.470580][ T25] em28xx 3-1:0.0: couldn't setup AC97 register 24 [ 617.481002][ T25] em28xx 3-1:0.0: Binding audio extension [ 617.487476][ T25] em28xx 3-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 617.496118][ T25] em28xx 3-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 617.509945][ T25] em28xx 3-1:0.0: alt 0 doesn't exist on interface 7 [ 617.557807][ T25] usb 3-1: USB disconnect, device number 93 [ 617.565589][ T25] em28xx 3-1:0.0: Disconnecting em28xx [ 617.571473][ T25] em28xx 3-1:0.0: Closing audio extension [ 617.656044][ T25] em28xx 3-1:0.0: Freeing device [ 618.131797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 618.812165][ T25] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 618.832138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 619.092296][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 619.116963][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 619.128150][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 619.139546][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 619.156593][ T25] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 619.166607][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.194488][ T25] usb 3-1: config 0 descriptor?? [ 619.738139][ T25] belkin 0003:1020:0006.0003: hidraw0: USB HID v0.03 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 619.808709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 619.820498][ T9687] loop4: detected capacity change from 0 to 512 [ 619.850728][ T9687] EXT4-fs: Ignoring removed mblk_io_submit option [ 619.868537][ T9687] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 619.910532][ T9687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 619.919379][ T25] usb 3-1: USB disconnect, device number 94 [ 619.948261][ T9687] System zones: 1-12 [ 619.975922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 620.047307][ T9687] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1386: corrupted in-inode xattr: e_value size too large [ 620.070377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 620.082187][ T9687] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1386: couldn't read orphan inode 15 (err -117) [ 620.082353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 620.110600][ T9687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.751538][ T5785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.219371][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 621.253576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 621.316656][ T9694] loop2: detected capacity change from 0 to 1024 [ 621.458996][ T9694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.645394][ T9694] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 621.941477][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.126689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 622.607922][ T9708] loop2: detected capacity change from 0 to 1024 [ 622.637771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 622.764653][ T9708] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.866595][ T9708] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 622.945372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 622.962372][ T9708] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.1391: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 622.983079][ T9708] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1391: couldn't read orphan inode 11 (err -117) [ 623.006523][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.190611][ T9708] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1391: Invalid block bitmap block 0 in block_group 0 [ 623.215121][ T9708] Quota error (device loop2): write_blk: dquota write failed [ 623.223009][ T9708] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 623.233382][ T9708] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1391: Failed to acquire dquot type 0 [ 623.618990][ T9713] loop4: detected capacity change from 0 to 256 [ 623.669709][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.823661][ T9713] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 628.440084][ T9727] ===================================================== [ 628.448361][ T9727] BUG: KMSAN: uninit-value in cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 628.457537][ T9727] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 628.464101][ T9727] ____sys_sendmsg+0x22c/0xda0 [ 628.468977][ T9727] __sys_sendmsg_sock+0x42/0x60 [ 628.476957][ T9727] io_sendmsg+0x36a/0xe30 [ 628.481410][ T9727] io_issue_sqe+0x394/0x1fb0 [ 628.486888][ T9727] io_wq_submit_work+0xaf9/0xdc0 [ 628.492147][ T9727] io_worker_handle_work+0xd11/0x2110 [ 628.497716][ T9727] io_wq_worker+0x459/0x1420 [ 628.502595][ T9727] ret_from_fork+0x6d/0x90 [ 628.507108][ T9727] ret_from_fork_asm+0x1a/0x30 [ 628.512105][ T9727] [ 628.514472][ T9727] Uninit was stored to memory at: [ 628.519619][ T9727] io_sendmsg+0x694/0xe30 [ 628.524142][ T9727] io_issue_sqe+0x394/0x1fb0 [ 628.528857][ T9727] io_wq_submit_work+0xaf9/0xdc0 [ 628.534002][ T9727] io_worker_handle_work+0xd11/0x2110 [ 628.539480][ T9727] io_wq_worker+0x459/0x1420 [ 628.544276][ T9727] ret_from_fork+0x6d/0x90 [ 628.548789][ T9727] ret_from_fork_asm+0x1a/0x30 [ 628.553750][ T9727] [ 628.556113][ T9727] Uninit was created at: [ 628.560489][ T9727] __alloc_frozen_pages_noprof+0x9a7/0xe00 [ 628.566751][ T9727] alloc_pages_mpol+0x4cd/0x890 [ 628.571716][ T9727] alloc_frozen_pages_noprof+0x1bf/0x1e0 [ 628.579766][ T9727] allocate_slab+0x23a/0x1110 [ 628.585310][ T9727] ___slab_alloc+0x1287/0x3540 [ 628.590179][ T9727] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 628.596452][ T9727] __io_alloc_req_refill+0x84/0x5b0 [ 628.601747][ T9727] io_submit_sqes+0x90f/0x2ff0 [ 628.606773][ T9727] __se_sys_io_uring_enter+0x41d/0x4da0 [ 628.612536][ T9727] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 628.618338][ T9727] ia32_sys_call+0xd59/0x4180 [ 628.623278][ T9727] __do_fast_syscall_32+0xb0/0x110 [ 628.628488][ T9727] do_fast_syscall_32+0x38/0x80 [ 628.633517][ T9727] do_SYSENTER_32+0x1f/0x30 [ 628.638115][ T9727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.644674][ T9727] [ 628.647043][ T9727] CPU: 0 UID: 0 PID: 9727 Comm: iou-wrk-9726 Not tainted 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 628.658165][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 628.668413][ T9727] ===================================================== [ 628.675668][ T9727] Disabling lock debugging due to kernel taint [ 628.686477][ T9727] Kernel panic - not syncing: kmsan.panic set ... [ 628.692967][ T9727] CPU: 0 UID: 0 PID: 9727 Comm: iou-wrk-9726 Tainted: G B 6.14.0-rc4-syzkaller-00015-g2a1944bff549 #0 [ 628.705412][ T9727] Tainted: [B]=BAD_PAGE [ 628.709614][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 628.719763][ T9727] Call Trace: [ 628.723101][ T9727] [ 628.726104][ T9727] dump_stack_lvl+0x216/0x2d0 [ 628.730874][ T9727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 628.736804][ T9727] dump_stack+0x1e/0x24 [ 628.741039][ T9727] panic+0x4e2/0xcf0 [ 628.745058][ T9727] ? kmsan_get_metadata+0xc1/0x1c0 [ 628.750299][ T9727] kmsan_report+0x2c7/0x2d0 [ 628.754911][ T9727] ? __module_address+0x4d/0x630 [ 628.759958][ T9727] ? __msan_warning+0x95/0x120 [ 628.764819][ T9727] ? cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 628.771442][ T9727] ? ____sys_sendmsg+0x22c/0xda0 [ 628.776468][ T9727] ? __sys_sendmsg_sock+0x42/0x60 [ 628.781608][ T9727] ? io_sendmsg+0x36a/0xe30 [ 628.786293][ T9727] ? io_issue_sqe+0x394/0x1fb0 [ 628.791167][ T9727] ? io_wq_submit_work+0xaf9/0xdc0 [ 628.796392][ T9727] ? io_worker_handle_work+0xd11/0x2110 [ 628.802071][ T9727] ? io_wq_worker+0x459/0x1420 [ 628.806962][ T9727] ? ret_from_fork+0x6d/0x90 [ 628.811664][ T9727] ? ret_from_fork_asm+0x1a/0x30 [ 628.816709][ T9727] ? kernel_text_address+0x129/0x1b0 [ 628.822111][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.827425][ T9727] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 628.833865][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.839175][ T9727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 628.845105][ T9727] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 628.851038][ T9727] ? stack_depot_save_flags+0x6db/0x750 [ 628.856702][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.862017][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.867325][ T9727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 628.873256][ T9727] __msan_warning+0x95/0x120 [ 628.877944][ T9727] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 628.884429][ T9727] ? stack_depot_save_flags+0x2c/0x750 [ 628.890027][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.895344][ T9727] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 628.901788][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.907148][ T9727] ____sys_sendmsg+0x22c/0xda0 [ 628.911999][ T9727] ? filter_irq_stacks+0x60/0x1a0 [ 628.917137][ T9727] ? kmsan_get_metadata+0xc0/0x1c0 [ 628.922364][ T9727] __sys_sendmsg_sock+0x42/0x60 [ 628.927305][ T9727] io_sendmsg+0x36a/0xe30 [ 628.931757][ T9727] ? __pfx_io_sendmsg+0x10/0x10 [ 628.936754][ T9727] io_issue_sqe+0x394/0x1fb0 [ 628.941474][ T9727] io_wq_submit_work+0xaf9/0xdc0 [ 628.946565][ T9727] ? __pfx_io_wq_submit_work+0x10/0x10 [ 628.952145][ T9727] io_worker_handle_work+0xd11/0x2110 [ 628.957628][ T9727] ? kmsan_get_metadata+0x13e/0x1c0 [ 628.962980][ T9727] io_wq_worker+0x459/0x1420 [ 628.967685][ T9727] ? __pfx_io_wq_worker+0x10/0x10 [ 628.972818][ T9727] ? schedule_tail+0x11f/0x190 [ 628.977698][ T9727] ? __pfx_io_wq_worker+0x10/0x10 [ 628.982836][ T9727] ret_from_fork+0x6d/0x90 [ 628.987380][ T9727] ? __pfx_io_wq_worker+0x10/0x10 [ 628.992515][ T9727] ret_from_fork_asm+0x1a/0x30 [ 628.997379][ T9727] RIP: 0023:0x0 [ 629.000896][ T9727] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 629.008321][ T9727] RSP: 002b:0000000000000000 EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 629.016844][ T9727] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 00000000000047f6 [ 629.024891][ T9727] RDX: 000000000080ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 629.032936][ T9727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.040977][ T9727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 629.049039][ T9727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.057195][ T9727] [ 629.060578][ T9727] Kernel Offset: disabled [ 629.064987][ T9727] Rebooting in 86400 seconds..