last executing test programs: 9.008746383s ago: executing program 1 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.880915786s ago: executing program 0 (id=1409): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) 8.874762927s ago: executing program 1 (id=1410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa17, &(0x7f0000000b00)="$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") fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8.780069546s ago: executing program 0 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) 8.101207354s ago: executing program 3 (id=1413): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, 0x0}}], 0x1, 0x11) 7.994717675s ago: executing program 3 (id=1414): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x1c2, &(0x7f0000000280)="$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") syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) poll(&(0x7f0000000000)=[{r4, 0x5208}], 0x1, 0x800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 7.901086395s ago: executing program 4 (id=1415): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0xca, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0xa, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800500018013000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010500028005000100980000003c0003"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000010104000000000000000002"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) write$tun(r1, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) write$cgroup_pid(r0, &(0x7f0000000080)=0xffffffffffffffff, 0x12) getpid() 7.900090945s ago: executing program 0 (id=1416): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66602e39800fdd840bbec951"], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) close_range(r1, r1, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) 7.142306661s ago: executing program 0 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x841, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8,iocharset=iso8859-6,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c696f636861727365743d63703836342c646d61736b3d30303030303030303030303030303030303030303030312c74696d655f6f66667365743d3078303030303030303030303030303030362c757466382c00f655f33bca7c359a6e20db88c482abd4c03a772db26d915826d61d5e5d2eb6c301f2d8a46c071353cf921f058bb8a0e12aa07a89503e0ec0121d0ccc3754f1d489f96c05e5e11e4aff3ed0ee88e4014c42de9d46c0edd6ed23f4593ccf36c7e0828d1165032162586d433021f3508f056230cb8e510645ee1e018817a8784a295d0910e9fc0cb3334e9733"], 0x1, 0x152b, &(0x7f0000000a00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a00"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000440)={0x0, 0x15}, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) truncate(0x0, 0x81) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) waitid(0x0, r1, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 6.425778053s ago: executing program 2 (id=1418): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 6.35385571s ago: executing program 1 (id=1419): syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) uname(0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000300)=""/218) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@journal_async_commit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x453, &(0x7f00000006c0)="$eJzs3LtvHEUYAPBv92yD88AmhEcegCE8Ih527ARIQQMCiQIkJChCaWwnCnFiFBuJRBEYhEKJIqVHlEj8BVSkQUCFRAsFHYoUoTQJVIf2btc+n8+OfbrzktzvJ+15ZndOM593525mx+sAetZI9pJE7IiI3yNiqJ5dWWCk/uPm9QtT/1y/MJVEtfrO30mt3I3rF6aKosX7tueZg2lE+kUS+1rUO3/u/KnJ2dmZs3l+bOH0h2Pz584ni6cnT8ycmDkzcfTokcPjL7048UJH4sziurH3k7n9e95479JbU8cuvf/zd0kRf1McHTKy3sEnq9UOV1eunQ3ppK/EhrAplYjITld/rf8PRSWWT95QvP55qY0DuqqaW+PwYhW4gyVRdguAchRf9Nn8t9i2bvRRvmuv1CdAWdw3861+pC/SvEx/0/y2k0Yi4tjiv19nW3TnPgQAwAo/ZOOf51qN/9J4oKHcPfkaynBE3BsRuyLivojYHRH3R9TKPhgRD22y/uZFktXjn/RqW4FtUDb+ezlf21o5/itGfzFcyXM7a/H3J8dPzs4cqh9bzF6y/Pg6dVx57bev1jrWOP7Ltqz+YiyYt+Nq310r3zM9uTDZbrzNrn0WsbevVfzJ0kpAEhF7ImJvm3WcfObb/Wsdu3X8S9JVezqwzlT9JuLp+vlfjKb4C0nD+uTzJ1etT47dHbMzh8Yaroomv/x68e216t9E/F2Rnf9tLa//pfiHk8b12vnN13Hxjy/XnNO0e/0PJO/W0gP5vo8nFxbOjkcMJG/WG924f2L5vUW+KJ/Ff/BA6/6/K5Z/E/siIruIH46IRyLi0bztj0XE4xFxYJ34f3r1iQ/aj7+7svinN3X+lxMD0byndaJy6sfvV1Q6vJn4s/N/pJY6mO+pff4l68e1kXa1dzUDAADA7SeNiB2RpKNL6TQdHa3/Df/u2JbOzs0vPHt87qMz0/VnBIajPy3udA013A8dz6f1RX6iKX84v298uTJYy49Ozc1Olx089Ljta/T/zF+VslsHdJ3ntaB36f/Qky4P6v/Q0/R/6F0t+v9gGe0Atl6r7/9PI+LKUyU0BthSTf3fsh/0kI3O/1c/gQfc7tz/g961gf7/553176qBiJgfjFs/JN/dRCXKrF2izUSk/4tmSHQpUfYnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8FwAA//+u8+2B") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) 6.05853524s ago: executing program 2 (id=1420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.05760505s ago: executing program 3 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.187412928s ago: executing program 3 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)={r8}) 5.129940373s ago: executing program 4 (id=1423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="c16b90ad0f0000004193fc04574d3ca94f95bdef8a6701633b8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d3e901cf5eb094e044c36a7e312576131f1c2de4c159d29ab0c76798f3c75cf5d68d137fe86e1d0b8baa2f8d1b3c6f655cc", 0x69}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}, 0x6}], 0x1, 0x40002101, 0x0) 4.024359575s ago: executing program 0 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4bfa, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x18418, &(0x7f0000000380)=ANY=[], 0xfe, 0x4b5, &(0x7f0000000680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x101042, 0x0) pwrite64(r3, 0x0, 0x0, 0xe7c) write$UHID_INPUT(r3, 0x0, 0x0) 3.826461505s ago: executing program 4 (id=1425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0) 2.896857269s ago: executing program 0 (id=1426): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)={r8}) 2.757028223s ago: executing program 4 (id=1427): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66602e39800fdd840bbec951"], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) close_range(r1, r1, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) 2.099695328s ago: executing program 3 (id=1428): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, 0x0}}], 0x1, 0x11) 2.08317363s ago: executing program 4 (id=1429): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x8004080) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1.956281283s ago: executing program 1 (id=1430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x1c2, &(0x7f0000000280)="$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") syz_open_pts(0xffffffffffffffff, 0x2800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) poll(&(0x7f0000000000)=[{r5, 0x5208}], 0x1, 0x800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r7, 0x0) 1.955490653s ago: executing program 2 (id=1431): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1.954258403s ago: executing program 3 (id=1432): socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55ad, &(0x7f0000009840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="00a28a239d00000000000000004b83db00a041cf0e26af704e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r1, 0x2007ffc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40942, 0x0) 1.892495299s ago: executing program 4 (id=1433): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x13, 0x80000001, 0x35b3, 0x2, 0x800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r3, 0x58, &(0x7f0000001100)}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) 1.208105618s ago: executing program 2 (id=1434): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) 1.024450057s ago: executing program 1 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) 693.03692ms ago: executing program 2 (id=1436): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0x41) 137.580546ms ago: executing program 1 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4bfa, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x18418, &(0x7f0000000380)=ANY=[], 0xfe, 0x4b5, &(0x7f0000000680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x101042, 0x0) pwrite64(r3, 0x0, 0x0, 0xe7c) write$UHID_INPUT(r3, 0x0, 0x0) 0s ago: executing program 2 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)={r8}) kernel console output (not intermixed with test programs): bad extra_isize 90 (inode size 256) [ 172.862177][ T5563] tipc: Disabling bearer [ 172.874649][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 172.881592][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.348: error while reading EA inode 11 err=-117 [ 172.897796][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 172.909237][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.348: iget: bad extra_isize 90 (inode size 256) [ 172.989396][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 173.069675][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.348: error while reading EA inode 18 err=-117 [ 173.127580][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 173.137796][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.348: iget: bad extra_isize 90 (inode size 256) [ 173.167804][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 173.185254][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.348: error while reading EA inode 18 err=-117 [ 173.226203][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 173.240239][ T5585] loop3: detected capacity change from 0 to 128 [ 173.247096][ T5559] EXT4-fs (loop0): 1 orphan inode deleted [ 173.252916][ T5559] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,init_itable,init_itable=0x0000000000000003,. Quota mode: none. [ 173.427053][ T5586] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 173.433937][ T5586] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 173.440422][ T5586] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 173.499422][ T5585] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 175.631762][ T4174] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.551548][ T4174] usb 2-1: Using ep0 maxpacket: 8 [ 176.811839][ T5620] loop2: detected capacity change from 0 to 40427 [ 176.841285][ T4174] usb 2-1: no configurations [ 176.846129][ T4174] usb 2-1: can't read configurations, error -22 [ 177.113973][ T4421] Bluetooth: hci4: command 0x0406 tx timeout [ 177.120842][ T4421] Bluetooth: hci0: command 0x0406 tx timeout [ 177.273685][ T4174] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.444065][ T4421] Bluetooth: hci3: command 0x0406 tx timeout [ 177.461922][ T5620] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 177.469797][ T5620] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 177.483662][ T5620] F2FS-fs (loop2): invalid crc value [ 177.785965][ T4421] Bluetooth: hci1: command 0x0406 tx timeout [ 177.792164][ T4421] Bluetooth: hci2: command 0x0406 tx timeout [ 177.806528][ T5620] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.854593][ T5632] tipc: Enabled bearer , priority 0 [ 177.862954][ T5620] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.870049][ T5620] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 178.077319][ T4174] usb 2-1: Using ep0 maxpacket: 8 [ 178.082687][ T26] audit: type=1800 audit(1763476661.203:10): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.366" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 178.295470][ T5632] device syzkaller0 entered promiscuous mode [ 178.330272][ T5623] tipc: Resetting bearer [ 178.391614][ T4174] usb 2-1: device descriptor read/all, error -71 [ 178.391624][ T5623] tipc: Disabling bearer [ 178.418781][ T4174] usb usb2-port1: attempt power cycle [ 182.478992][ T5652] loop4: detected capacity change from 0 to 128 [ 182.547916][ T5652] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 182.566094][ T5652] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 183.531506][ T4300] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 183.901847][ T4506] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.922153][ T4300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.986147][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 184.117444][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 184.181623][ T4506] usb 5-1: Using ep0 maxpacket: 8 [ 184.222560][ T4506] usb 5-1: no configurations [ 184.231174][ T4506] usb 5-1: can't read configurations, error -22 [ 184.442268][ T4300] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 184.471802][ T4506] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 184.517320][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 184.575262][ T4300] usb 1-1: Product: syz [ 184.575357][ T5678] loop2: detected capacity change from 0 to 512 [ 184.579456][ T4300] usb 1-1: Manufacturer: syz [ 184.658210][ T4300] usb 1-1: SerialNumber: syz [ 185.313255][ T4300] usb 1-1: config 0 descriptor?? [ 185.353902][ T4506] usb 5-1: Using ep0 maxpacket: 8 [ 185.359687][ T4300] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 185.374729][ T4300] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 185.596985][ T5687] loop3: detected capacity change from 0 to 40427 [ 185.611717][ T4506] usb 5-1: no configurations [ 185.616436][ T4506] usb 5-1: can't read configurations, error -22 [ 185.623208][ T4506] usb usb5-port1: attempt power cycle [ 185.628891][ T4300] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 185.638409][ T4300] usb 1-1: USB disconnect, device number 7 [ 185.648421][ T5687] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 185.656339][ T5687] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 185.682752][ T5687] F2FS-fs (loop3): invalid crc value [ 185.731682][ T5693] loop0: detected capacity change from 0 to 512 [ 185.763297][ T5687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.812243][ T5687] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 185.819355][ T5687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.891723][ T5693] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 185.984435][ T26] audit: type=1800 audit(1763476925.219:11): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.384" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 186.135396][ T5693] EXT4-fs (loop0): invalid journal inode [ 186.153917][ T5693] EXT4-fs (loop0): can't get journal size [ 186.268286][ T5693] EXT4-fs (loop0): 1 truncate cleaned up [ 186.327417][ T5693] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 186.559998][ T5688] loop2: detected capacity change from 0 to 40427 [ 186.581530][ T4506] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.589505][ T5688] F2FS-fs (loop2): invalid crc value [ 186.617102][ T5688] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.632750][ T4421] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.651761][ T4506] usb 5-1: device descriptor read/8, error -71 [ 186.894605][ T5688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.741752][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.759036][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.771008][ T4421] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 187.802464][ T4421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.855303][ T4421] usb 2-1: config 0 descriptor?? [ 188.161595][ T4506] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.269125][ T4200] attempt to access beyond end of device [ 188.269125][ T4200] loop2: rw=2049, want=45104, limit=40427 [ 188.414066][ T4506] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.474437][ T5746] loop0: detected capacity change from 0 to 256 [ 188.491807][ T4421] usbhid 2-1:0.0: can't add hid device: -71 [ 188.499251][ T4421] usbhid: probe of 2-1:0.0 failed with error -71 [ 188.532515][ T4421] usb 2-1: USB disconnect, device number 10 [ 188.545010][ T4506] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49919, setting to 1024 [ 189.222181][ T5746] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.232753][ T4506] usb 5-1: config 1 interface 1 has no altsetting 0 [ 189.451814][ T4506] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.491540][ T4506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.498483][ T5753] loop3: detected capacity change from 0 to 1024 [ 189.518749][ T4506] usb 5-1: Product: syz [ 189.997330][ T5753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.064665][ T4506] usb 5-1: Manufacturer: syz [ 190.069291][ T4506] usb 5-1: SerialNumber: syz [ 190.320353][ T5753] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 191.082353][ T4506] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 191.176448][ T4506] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 191.184472][ T4506] usb 5-1: 2:1: All rates were zero [ 191.929296][ T4506] usb 5-1: USB disconnect, device number 6 [ 192.183261][ T5781] loop3: detected capacity change from 0 to 32768 [ 192.280386][ T5781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.404 (5781) [ 192.368176][ T5781] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 192.377100][ T5781] BTRFS info (device loop3): turning on async discard [ 192.384336][ T5781] BTRFS info (device loop3): setting nodatasum [ 192.390566][ T5781] BTRFS info (device loop3): enabling auto defrag [ 192.397093][ T5781] BTRFS info (device loop3): max_inline at 0 [ 192.403154][ T5781] BTRFS info (device loop3): using free space tree [ 192.409661][ T5781] BTRFS info (device loop3): has skinny extents [ 192.425468][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.549942][ T5813] loop1: detected capacity change from 0 to 40427 [ 194.308768][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315302][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.343037][ T5813] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x1ffff [ 194.356395][ T5813] F2FS-fs (loop1): invalid crc value [ 194.386413][ T5813] F2FS-fs (loop1) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67b0 [ 194.397180][ T5813] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 194.444118][ T5827] loop0: detected capacity change from 0 to 512 [ 194.747404][ T5827] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 194.879713][ T5827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.418: bg 0: block 104: invalid block bitmap [ 195.124968][ T5827] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 195.164730][ T5827] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.418: invalid indirect mapped block 1 (level 1) [ 195.241616][ T5849] loop2: detected capacity change from 0 to 512 [ 196.191475][ T5849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.202249][ T5849] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 196.235947][ T5827] EXT4-fs (loop0): 1 truncate cleaned up [ 196.405048][ T5827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.190890][ T5857] xt_hashlimit: max too large, truncated to 1048576 [ 197.845342][ T5859] loop2: detected capacity change from 0 to 40427 [ 197.965469][ T5859] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 197.973406][ T5859] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 197.995329][ T5859] F2FS-fs (loop2): invalid crc value [ 198.062539][ T5859] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.159128][ T5859] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 198.167143][ T5859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.306622][ T26] audit: type=1800 audit(1763476937.469:12): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 199.145670][ T5878] loop3: detected capacity change from 0 to 40427 [ 200.273278][ T4423] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.289555][ T5878] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x1ffff [ 200.301132][ T5878] F2FS-fs (loop3): invalid crc value [ 200.454977][ T5878] F2FS-fs (loop3) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67b0 [ 200.465508][ T5878] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 200.646483][ T4423] usb 2-1: Using ep0 maxpacket: 8 [ 200.771926][ T4423] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 200.790613][ T4423] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.622339][ T4423] usb 2-1: config 0 has no interfaces? [ 201.741608][ T4423] usb 2-1: string descriptor 0 read error: -71 [ 201.747872][ T4423] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 201.766136][ T4423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.142664][ T4423] usb 2-1: config 0 descriptor?? [ 203.161551][ T4423] usb 2-1: can't set config #0, error -71 [ 203.171814][ T4423] usb 2-1: USB disconnect, device number 11 [ 203.398733][ T5921] loop4: detected capacity change from 0 to 8 [ 203.699528][ T5928] loop1: detected capacity change from 0 to 8 [ 203.748977][ T5921] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.752601][ T5928] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.771865][ T5921] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.781725][ T5921] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.790662][ T5928] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.802603][ T5921] SQUASHFS error: Unable to read inode 0x127 [ 203.814076][ T5928] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.832311][ T5928] SQUASHFS error: Unable to read inode 0x127 [ 204.494522][ T26] audit: type=1326 audit(1763477199.705:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.1.443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fbde1e6c9 code=0x0 [ 205.131269][ T5935] loop0: detected capacity change from 0 to 40427 [ 205.518306][ T5945] loop3: detected capacity change from 0 to 16 [ 205.609928][ T5935] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 205.618066][ T5935] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 205.623869][ T5945] erofs: (device loop3): mounted with root inode @ nid 36. [ 205.633196][ T5935] F2FS-fs (loop0): invalid crc value [ 205.725275][ T5935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.851679][ T5935] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 205.858839][ T5935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.927400][ T26] audit: type=1800 audit(1763477201.155:14): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.444" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 206.141455][ T5963] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 206.152538][ T5963] attempt to access beyond end of device [ 206.152538][ T5963] loop3: rw=524288, want=34359740336, limit=16 [ 206.972547][ T26] audit: type=1800 audit(1763477202.185:15): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.444" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 206.996248][ T1107] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.014798][ T5970] capability: warning: `syz.2.434' uses 32-bit capabilities (legacy support in use) [ 207.080650][ T5971] loop4: detected capacity change from 0 to 512 [ 207.176690][ T5978] fuse: root generation should be zero [ 207.261517][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 207.337238][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.362096][ T5979] loop2: detected capacity change from 0 to 4096 [ 207.391921][ T1107] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 207.453493][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.479415][ T5983] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.493044][ T5979] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 207.514267][ T5979] NILFS (loop2): mounting fs with errors [ 207.550167][ T5971] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.687329][ T1107] usb 2-1: config 0 has no interfaces? [ 207.932209][ T1107] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 208.142065][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.150170][ T1107] usb 2-1: Product: syz [ 208.157598][ T1107] usb 2-1: Manufacturer: syz [ 208.162889][ T1107] usb 2-1: SerialNumber: syz [ 208.169933][ T1107] usb 2-1: config 0 descriptor?? [ 208.785339][ T4174] usb 2-1: USB disconnect, device number 12 [ 208.880638][ T5999] loop2: detected capacity change from 0 to 8 [ 208.915839][ T5999] SQUASHFS error: zlib decompression failed, data probably corrupt [ 208.942017][ T5999] SQUASHFS error: Failed to read block 0x9b: -5 [ 209.111873][ T5999] SQUASHFS error: Unable to read metadata cache entry [99] [ 209.154810][ T5999] SQUASHFS error: Unable to read inode 0x127 [ 209.783986][ T6008] loop3: detected capacity change from 0 to 8 [ 210.104719][ T6014] loop4: detected capacity change from 0 to 1024 [ 210.241355][ T6014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.517181][ T6008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 210.571025][ T6017] loop2: detected capacity change from 0 to 512 [ 210.589818][ T6008] SQUASHFS error: Failed to read block 0x9b: -5 [ 210.612775][ T6008] SQUASHFS error: Unable to read metadata cache entry [99] [ 210.620007][ T6008] SQUASHFS error: Unable to read inode 0x127 [ 210.706331][ T6017] EXT4-fs (loop2): Ignoring removed orlov option [ 210.746383][ T6017] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 210.896740][ T6022] loop1: detected capacity change from 0 to 40427 [ 210.905447][ T6017] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 210.915903][ T6017] EXT4-fs (loop2): group descriptors corrupted! [ 210.985496][ T6022] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 210.993470][ T6022] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 211.202286][ T26] audit: type=1326 audit(1763477206.365:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95989746c9 code=0x0 [ 211.246962][ T6022] F2FS-fs (loop1): invalid crc value [ 211.628363][ T6022] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.779952][ T6022] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 211.787135][ T6022] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.915719][ T26] audit: type=1800 audit(1763477463.145:17): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.462" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 212.398734][ T6044] loop4: detected capacity change from 0 to 512 [ 212.999250][ T6044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.402323][ T6044] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.464137][ T6060] loop4: detected capacity change from 0 to 32768 [ 214.639505][ T6063] loop0: detected capacity change from 0 to 1024 [ 214.655495][ T6060] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 214.664493][ T6060] BTRFS info (device loop4): using free space tree [ 214.671545][ T6060] BTRFS info (device loop4): has skinny extents [ 214.699149][ T6063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.870270][ T6060] BTRFS info (device loop4): enabling ssd optimizations [ 216.139500][ T6093] loop3: detected capacity change from 0 to 8 [ 217.145974][ T6093] SQUASHFS error: zlib decompression failed, data probably corrupt [ 217.241835][ T6093] SQUASHFS error: Failed to read block 0x9b: -5 [ 217.252767][ T6093] SQUASHFS error: Unable to read metadata cache entry [99] [ 217.463430][ T6093] SQUASHFS error: Unable to read inode 0x127 [ 217.833851][ T6105] loop0: detected capacity change from 0 to 4096 [ 217.965601][ T26] audit: type=1326 audit(1763477725.199:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95989746c9 code=0x0 [ 218.385275][ T4421] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 218.393194][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022004400: rx timeout, send abort [ 218.394329][ T6105] ntfs3: Unknown parameter 'hide_dot_files' [ 218.405292][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022004400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.858633][ T4185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4185) [ 220.561721][ T4421] usb 2-1: unable to read config index 0 descriptor/all [ 220.568710][ T4421] usb 2-1: can't read configurations, error -71 [ 220.797922][ T6149] loop3: detected capacity change from 0 to 1024 [ 221.604056][ T6149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.628443][ T6158] loop1: detected capacity change from 0 to 8 [ 222.002780][ T6158] SQUASHFS error: zlib decompression failed, data probably corrupt [ 222.298454][ T6158] SQUASHFS error: Failed to read block 0x9b: -5 [ 222.498723][ T6158] SQUASHFS error: Unable to read metadata cache entry [99] [ 222.610892][ T6158] SQUASHFS error: Unable to read inode 0x127 [ 224.082615][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.494'. [ 224.180695][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.496'. [ 225.171271][ T6189] loop1: detected capacity change from 0 to 1024 [ 225.457743][ T6193] loop0: detected capacity change from 0 to 512 [ 225.858818][ T6193] EXT4-fs (loop0): orphan cleanup on readonly fs [ 225.992064][ T6193] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 226.022532][ T6193] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 226.068214][ T6189] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.105082][ T6189] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.112524][ T6193] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.499: attempt to clear invalid blocks 2 len 1 [ 226.176268][ T6204] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.182425][ T6193] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.499: invalid indirect mapped block 1819239214 (level 0) [ 226.199521][ T6193] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.499: invalid indirect mapped block 1819239214 (level 1) [ 226.290286][ T6193] EXT4-fs (loop0): 1 truncate cleaned up [ 226.298379][ T6204] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.304947][ T6193] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 226.336169][ T6193] EXT4-fs (loop0): shut down requested (2) [ 226.354396][ T6211] loop3: detected capacity change from 0 to 2048 [ 226.357647][ T6204] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.359402][ T6204] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.514308][ T4820] hfsplus: b-tree write err: -5, ino 4 [ 226.520602][ T6211] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,norecovery,,errors=continue. Quota mode: none. [ 226.539016][ T4820] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 226.769846][ T6220] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 227.075822][ T6220] syz.3.503 (6220) used greatest stack depth: 20488 bytes left [ 227.268352][ T6232] loop3: detected capacity change from 0 to 8 [ 227.598344][ T6240] loop1: detected capacity change from 0 to 512 [ 227.634424][ T6232] SQUASHFS error: zlib decompression failed, data probably corrupt [ 227.705642][ T6232] SQUASHFS error: Failed to read block 0x9b: -5 [ 227.840192][ T6232] SQUASHFS error: Unable to read metadata cache entry [99] [ 227.946134][ T6232] SQUASHFS error: Unable to read inode 0x127 [ 228.114120][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.146854][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.160771][ T6240] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.356070][ T6273] loop3: detected capacity change from 0 to 256 [ 229.386520][ T6273] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.412159][ T6273] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 229.441119][ T6273] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 230.912986][ T6288] loop3: detected capacity change from 0 to 512 [ 230.959274][ T6290] loop2: detected capacity change from 0 to 64 [ 230.971311][ T6288] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.521: inode has both inline data and extents flags [ 231.013353][ T6288] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.521: couldn't read orphan inode 15 (err -117) [ 231.035575][ T6288] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.100803][ T6298] loop4: detected capacity change from 0 to 8 [ 231.650892][ T26] audit: type=1800 audit(1763477738.729:19): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.525" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 232.585979][ T6298] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 232.617724][ T6298] unable to read xattr id index table [ 234.734179][ T6335] netlink: 164 bytes leftover after parsing attributes in process `syz.3.539'. [ 236.877704][ T6374] loop1: detected capacity change from 0 to 2048 [ 237.116586][ T6374] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 237.211472][ T6374] UDF-fs: Scanning with blocksize 512 failed [ 237.235988][ T6374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.073586][ T6388] loop0: detected capacity change from 0 to 1024 [ 238.164922][ T6391] loop2: detected capacity change from 0 to 2048 [ 238.525827][ T6396] loop1: detected capacity change from 0 to 4096 [ 239.051122][ T6391] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 239.787250][ T6401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.800019][ T6396] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 239.814202][ T6396] NILFS (loop1): mounting fs with errors [ 241.354996][ T6410] loop3: detected capacity change from 0 to 32768 [ 241.424678][ T6417] device syzkaller0 entered promiscuous mode [ 241.772015][ T6424] loop1: detected capacity change from 0 to 512 [ 242.526577][ T6424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.566496][ T6424] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 243.043382][ T6429] loop4: detected capacity change from 0 to 1 [ 243.071935][ T6429] Dev loop4: unable to read RDB block 1 [ 243.079350][ T6429] loop4: unable to read partition table [ 243.087391][ T6429] loop4: partition table beyond EOD, truncated [ 243.100680][ T6427] loop2: detected capacity change from 0 to 8 [ 243.107030][ T6429] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 243.202949][ T6427] SQUASHFS error: zlib decompression failed, data probably corrupt [ 243.233081][ T6427] SQUASHFS error: Failed to read block 0x9b: -5 [ 243.311643][ T6427] SQUASHFS error: Unable to read metadata cache entry [99] [ 243.411530][ T6427] SQUASHFS error: Unable to read inode 0x127 [ 244.178850][ T6435] loop0: detected capacity change from 0 to 1024 [ 244.532629][ T4416] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.591763][ T26] audit: type=1326 audit(1763478263.830:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.2.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9a41816c9 code=0x0 [ 244.921789][ T4416] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 245.352951][ T4416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.417724][ T6457] loop2: detected capacity change from 0 to 764 [ 245.434098][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 245.453906][ T4416] usb 4-1: config 0 descriptor?? [ 245.495511][ T4416] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 245.682156][ T6466] Symlink component flag not implemented [ 245.691708][ T6466] Symlink component flag not implemented [ 245.705192][ T6466] Symlink component flag not implemented (128) [ 245.705953][ T5489] usb 4-1: USB disconnect, device number 3 [ 245.764284][ T6466] Symlink component flag not implemented (122) [ 245.862525][ T6464] loop4: detected capacity change from 0 to 4096 [ 246.593218][ T6473] loop0: detected capacity change from 0 to 512 [ 246.728838][ T6473] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.745002][ T6473] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 249.040928][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 249.051145][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 249.058709][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.068773][ T4196] Workqueue: hci3 hci_rx_work [ 249.073484][ T4196] Call Trace: [ 249.076768][ T4196] [ 249.079503][ T6504] loop1: detected capacity change from 0 to 4096 [ 249.079697][ T4196] dump_stack_lvl+0x168/0x230 [ 249.090675][ T4196] ? show_regs_print_info+0x20/0x20 [ 249.095890][ T4196] ? load_image+0x3b0/0x3b0 [ 249.100423][ T4196] sysfs_create_dir_ns+0x252/0x280 [ 249.105548][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 249.110584][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 249.115358][ T4196] ? le_conn_complete_evt+0xcbc/0x1590 [ 249.120822][ T4196] ? hci_event_packet+0xe05/0x12f0 [ 249.125935][ T4196] ? process_one_work+0x863/0x1000 [ 249.131056][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 249.136271][ T4196] kobject_add_internal+0x662/0xd00 [ 249.141582][ T4196] kobject_add+0x152/0x210 [ 249.146010][ T4196] ? kobject_init+0x1d0/0x1d0 [ 249.150699][ T4196] ? klist_children_get+0x50/0x50 [ 249.155729][ T4196] ? get_device_parent+0x121/0x3f0 [ 249.160852][ T4196] device_add+0x483/0xfb0 [ 249.165202][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 249.170149][ T4196] le_conn_complete_evt+0xcbc/0x1590 [ 249.175454][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 249.180581][ T4196] ? __mutex_trylock_common+0x14f/0x250 [ 249.186144][ T4196] hci_le_meta_evt+0x289/0x3b80 [ 249.191004][ T4196] ? hci_event_packet+0x36d/0x12f0 [ 249.196125][ T4196] ? hci_event_packet+0x2e2/0x12f0 [ 249.201250][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 249.206294][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 249.212370][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 249.218016][ T4196] ? mark_lock+0x94/0x320 [ 249.222365][ T4196] ? mutex_unlock+0x10/0x10 [ 249.227140][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 249.233138][ T4196] ? lock_chain_count+0x20/0x20 [ 249.238002][ T4196] ? __rwlock_init+0x140/0x140 [ 249.242778][ T4196] hci_event_packet+0xe05/0x12f0 [ 249.247729][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 249.252949][ T4196] ? rcu_lock_release+0x20/0x20 [ 249.257813][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 249.263028][ T4196] hci_rx_work+0x255/0xa10 [ 249.267472][ T4196] process_one_work+0x863/0x1000 [ 249.272432][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 249.278067][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 249.283365][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 249.288401][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 249.293796][ T4196] ? wq_worker_running+0x97/0x170 [ 249.298834][ T4196] worker_thread+0xaa8/0x12a0 [ 249.303554][ T4196] kthread+0x436/0x520 [ 249.307628][ T4196] ? rcu_lock_release+0x20/0x20 [ 249.312481][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 249.317080][ T4196] ret_from_fork+0x1f/0x30 [ 249.321522][ T4196] [ 249.331129][ T4196] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 249.344456][ T4196] Bluetooth: hci3: failed to register connection device [ 249.489110][ T6504] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 249.700310][ T6527] device syzkaller0 entered promiscuous mode [ 249.749459][ T6504] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 249.815883][ T6504] ntfs3: loop1: mft corrupted [ 249.841118][ T6504] ntfs3: loop1: Failed to load $Extend. [ 251.504691][ T6545] device syzkaller0 entered promiscuous mode [ 251.765897][ T6561] loop3: detected capacity change from 0 to 1024 [ 251.845870][ T6561] EXT4-fs (loop3): inline encryption not supported [ 251.964736][ T6561] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.296627][ T6561] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 252.740487][ T6571] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 252.748299][ T6571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.603'. [ 252.757399][ T6571] netlink: 9 bytes leftover after parsing attributes in process `syz.1.603'. [ 253.474568][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 253.580082][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.618639][ T6578] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 253.752659][ T6581] loop4: detected capacity change from 0 to 64 [ 254.012980][ T26] audit: type=1800 audit(1763479041.155:21): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.601" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 254.040968][ T6561] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.601: Allocating blocks 449-513 which overlap fs metadata [ 254.055430][ T26] audit: type=1800 audit(1763479041.165:22): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.598" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 254.137639][ T6561] EXT4-fs (loop3): Remounting filesystem read-only [ 254.159340][ T6589] loop4: detected capacity change from 0 to 256 [ 254.196851][ T6589] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 254.224665][ T6589] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 254.251697][ T6589] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 254.290004][ T6589] UDF-fs: Scanning with blocksize 512 failed [ 254.320064][ T6589] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 254.363973][ T6589] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 255.135528][ T6601] device syzkaller0 entered promiscuous mode [ 255.354999][ T6604] loop4: detected capacity change from 0 to 4096 [ 255.473377][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.479785][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.544579][ T5498] Bluetooth: hci3: command 0x0406 tx timeout [ 257.043602][ T6607] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.044308][ T6604] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 257.385443][ T6604] NILFS (loop4): mounting fs with errors [ 257.432638][ T6613] loop0: detected capacity change from 0 to 4096 [ 257.508691][ T6613] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 257.720280][ T6618] loop4: detected capacity change from 0 to 8 [ 257.789086][ T6618] SQUASHFS error: zlib decompression failed, data probably corrupt [ 257.803200][ T6618] SQUASHFS error: Failed to read block 0x9b: -5 [ 257.831533][ T6618] SQUASHFS error: Unable to read metadata cache entry [99] [ 257.838798][ T6618] SQUASHFS error: Unable to read inode 0x127 [ 259.159926][ T26] audit: type=1326 audit(1763479046.385:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e0ad626c9 code=0x0 [ 260.418897][ T6645] loop3: detected capacity change from 0 to 64 [ 260.485349][ T6647] device syzkaller0 entered promiscuous mode [ 260.580007][ T26] audit: type=1800 audit(1763479047.805:24): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.625" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 260.600373][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.935930][ T6655] loop4: detected capacity change from 0 to 4096 [ 262.257039][ T6656] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.271250][ T6655] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 262.287334][ T6655] NILFS (loop4): mounting fs with errors [ 263.188135][ T6667] loop1: detected capacity change from 0 to 2048 [ 263.234083][ T6670] netlink: 83 bytes leftover after parsing attributes in process `syz.4.631'. [ 263.294372][ T6671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.492751][ T6674] netlink: 27 bytes leftover after parsing attributes in process `syz.1.633'. [ 264.144073][ T6673] loop3: detected capacity change from 0 to 32768 [ 265.543409][ T6690] loop4: detected capacity change from 0 to 64 [ 265.696859][ T6695] loop0: detected capacity change from 0 to 512 [ 265.951678][ T5489] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 267.396333][ T26] audit: type=1800 audit(1763479054.305:25): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.640" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 267.560023][ T6693] loop2: detected capacity change from 0 to 4096 [ 269.044113][ T6695] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.061657][ T5489] usb 2-1: device descriptor read/all, error -71 [ 269.102293][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 269.111623][ T6695] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.709754][ T6693] NILFS (loop2): error -4 creating segctord thread [ 270.935926][ T6737] loop4: detected capacity change from 0 to 128 [ 271.467123][ T6737] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.298327][ T6756] loop2: detected capacity change from 0 to 512 [ 272.330992][ T6755] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[6755] [ 272.974575][ T6737] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.000811][ T6756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.011648][ T6756] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 273.113328][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 273.636586][ T6769] loop2: detected capacity change from 0 to 164 [ 273.681832][ T6769] Unable to read rock-ridge attributes [ 273.695719][ T6769] Unable to read rock-ridge attributes [ 273.745646][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.765335][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.785562][ T1107] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 273.799496][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.813744][ T1107] usb 4-1: config 0 descriptor?? [ 273.856379][ T4430] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.286627][ T1107] usbhid 4-1:0.0: can't add hid device: -71 [ 275.298387][ T1107] usbhid: probe of 4-1:0.0 failed with error -71 [ 275.516315][ T1107] usb 4-1: USB disconnect, device number 4 [ 276.126634][ T6806] loop0: detected capacity change from 0 to 512 [ 276.271680][ T6806] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 276.286170][ T6806] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 277.494524][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 277.729658][ T6818] loop2: detected capacity change from 0 to 40427 [ 277.816232][ T6818] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 277.824123][ T6818] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 277.843675][ T6818] F2FS-fs (loop2): invalid crc value [ 277.952317][ T6826] loop3: detected capacity change from 0 to 32768 [ 277.974007][ T6818] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.067948][ T6818] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 278.075657][ T6818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.252696][ T6835] loop3: detected capacity change from 0 to 256 [ 278.317602][ T6835] exfat: Deprecated parameter 'utf8' [ 278.323936][ T6835] exfat: Deprecated parameter 'namecase' [ 278.330146][ T6835] exfat: Deprecated parameter 'utf8' [ 278.382649][ T6835] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 278.743099][ T26] audit: type=1800 audit(1763479065.975:26): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.679" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 278.763898][ T4423] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 279.531820][ T4423] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 279.664272][ T5852] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.711748][ T4423] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 279.719341][ T4423] usb 4-1: can't read configurations, error -61 [ 279.978385][ T6857] loop0: detected capacity change from 0 to 32768 [ 280.091676][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.153210][ T4423] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.293639][ T6857] XFS (loop0): Mounting V5 Filesystem [ 280.481864][ T4423] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 280.529306][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.539206][ T5852] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 280.548341][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.558254][ T5852] usb 2-1: config 0 descriptor?? [ 280.577744][ T26] audit: type=1800 audit(1763479323.805:27): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 280.692377][ T4423] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 280.700820][ T4423] usb 4-1: can't read configurations, error -61 [ 280.708080][ T4423] usb usb4-port1: attempt power cycle [ 280.874465][ T6857] XFS (loop0): Ending clean mount [ 280.976621][ T6872] loop4: detected capacity change from 0 to 512 [ 281.090814][ T6857] XFS (loop0): Quotacheck needed: Please wait. [ 281.387961][ T6872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 281.414408][ T6872] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 281.488932][ T6857] XFS (loop0): Quotacheck: Done. [ 281.571516][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 281.577784][ T5852] usbhid: probe of 2-1:0.0 failed with error -71 [ 281.606924][ T5852] usb 2-1: USB disconnect, device number 17 [ 281.763480][ T6878] tipc: Enabled bearer , priority 0 [ 281.771037][ T6878] device syzkaller0 entered promiscuous mode [ 281.798646][ T4188] XFS (loop0): Unmounting Filesystem [ 281.827774][ T6878] tipc: Resetting bearer [ 281.858565][ T6877] tipc: Resetting bearer [ 281.902916][ T6877] tipc: Disabling bearer [ 282.167183][ T4317] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 282.327537][ T6887] loop3: detected capacity change from 0 to 512 [ 282.974658][ T6887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.985641][ T4317] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.009973][ T6887] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 283.076979][ T6888] loop1: detected capacity change from 0 to 4096 [ 283.115434][ T4317] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 283.284365][ T4317] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.403354][ T4317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 283.652154][ T4317] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.686459][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.069279][ T6889] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.081732][ T6888] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 284.099315][ T4317] usb 5-1: Product: syz [ 284.104209][ T6888] NILFS (loop1): mounting fs with errors [ 284.151587][ T4317] usb 5-1: Manufacturer: syz [ 284.334903][ T4317] cdc_wdm 5-1:1.0: skipping garbage [ 284.392005][ T4317] cdc_wdm 5-1:1.0: skipping garbage [ 284.550990][ T4317] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 284.557889][ T4317] cdc_wdm 5-1:1.0: Unknown control protocol [ 284.582623][ T4413] usb 5-1: USB disconnect, device number 7 [ 285.311536][ T6900] loop3: detected capacity change from 0 to 64 [ 285.646143][ T6902] loop0: detected capacity change from 0 to 32768 [ 287.508152][ T6909] loop0: detected capacity change from 0 to 256 [ 287.652109][ T6909] exfat: Deprecated parameter 'utf8' [ 287.657597][ T6909] exfat: Deprecated parameter 'namecase' [ 287.663816][ T6909] exfat: Deprecated parameter 'utf8' [ 288.574162][ T6909] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 289.171595][ T5498] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 290.976976][ T6930] loop0: detected capacity change from 0 to 4096 [ 290.991772][ T5498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.058818][ T6944] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.059137][ T6930] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 291.091661][ T6930] NILFS (loop0): mounting fs with errors [ 291.201468][ T5498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.217226][ T5498] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 291.226721][ T5498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.885837][ T6950] loop2: detected capacity change from 0 to 512 [ 293.172425][ T5498] usb 2-1: config 0 descriptor?? [ 293.235574][ T6947] loop3: detected capacity change from 0 to 1024 [ 293.261671][ T5498] usb 2-1: can't set config #0, error -71 [ 293.282283][ T5498] usb 2-1: USB disconnect, device number 18 [ 293.338758][ T6947] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 293.350827][ T6947] EXT4-fs (loop3): orphan cleanup on readonly fs [ 293.367320][ T6947] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 293.388788][ T6947] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 293.404766][ T6947] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 293.937832][ T6947] EXT4-fs (loop3): 1 truncate cleaned up [ 294.116554][ T6947] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 294.765412][ T6963] loop1: detected capacity change from 0 to 32768 [ 295.270097][ T6963] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 295.642400][ T6994] loop3: detected capacity change from 0 to 1024 [ 295.781460][ T4257] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 295.796811][ T6999] loop0: detected capacity change from 0 to 4096 [ 295.932691][ T7000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.944351][ T6999] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 295.957007][ T6999] NILFS (loop0): mounting fs with errors [ 296.407890][ T6963] (syz.1.718,6963,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -12 [ 296.456805][ T7005] ptrace attach of "./syz-executor exec"[4200] was attempted by "./syz-executor exec"[7005] [ 296.593766][ T7008] netlink: 'syz.2.731': attribute type 12 has an invalid length. [ 296.601745][ T7008] netlink: 'syz.2.731': attribute type 29 has an invalid length. [ 296.609712][ T7008] netlink: 148 bytes leftover after parsing attributes in process `syz.2.731'. [ 296.623206][ T6963] syz.1.718 (6963) used greatest stack depth: 18176 bytes left [ 296.677374][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 296.736901][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.761172][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.771599][ T4257] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 296.801373][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.833029][ T4257] usb 5-1: config 0 descriptor?? [ 297.052496][ T7015] loop2: detected capacity change from 0 to 8192 [ 297.069900][ T7023] loop1: detected capacity change from 0 to 512 [ 297.162233][ T7023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.194798][ T7023] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.421474][ T4257] usbhid 5-1:0.0: can't add hid device: -71 [ 298.427490][ T4257] usbhid: probe of 5-1:0.0 failed with error -71 [ 298.453386][ T4257] usb 5-1: USB disconnect, device number 8 [ 300.422227][ T7054] program syz.4.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.752313][ T7055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.372808][ T7065] tipc: Enabled bearer , priority 0 [ 301.459516][ T7067] loop3: detected capacity change from 0 to 1024 [ 301.711657][ T7065] tipc: Resetting bearer [ 301.721850][ T7067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.077796][ T7076] loop2: detected capacity change from 0 to 64 [ 302.131828][ T7077] loop4: detected capacity change from 0 to 512 [ 303.623471][ T7077] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.668615][ T7077] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.710810][ T7103] vivid-002: disconnect [ 305.252776][ T7095] vivid-002: reconnect [ 305.382648][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 305.417942][ T7108] netlink: 'syz.1.760': attribute type 3 has an invalid length. [ 305.532599][ T7110] tipc: Enabled bearer , priority 0 [ 305.581359][ T7110] tipc: Resetting bearer [ 305.612515][ T7109] tipc: Disabling bearer [ 305.707187][ T7105] loop4: detected capacity change from 0 to 32768 [ 305.789991][ T7105] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.759 (7105) [ 305.859508][ T7116] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[7116] [ 306.438882][ T7105] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 306.461912][ T7105] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 306.482833][ T7105] BTRFS info (device loop4): use zstd compression, level 3 [ 306.498608][ T7105] BTRFS info (device loop4): using free space tree [ 306.515157][ T7105] BTRFS info (device loop4): has skinny extents [ 306.725882][ T5498] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 308.375889][ T7133] loop1: detected capacity change from 0 to 512 [ 308.678360][ T7133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 308.690964][ T7133] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 308.751545][ T5498] usb 4-1: Using ep0 maxpacket: 16 [ 309.026423][ T5498] usb 4-1: device descriptor read/all, error -71 [ 309.653602][ T7157] input: syz1 as /devices/virtual/input/input6 [ 309.948823][ T7105] BTRFS error (device loop4): open_ctree failed: -12 [ 309.962953][ T4185] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4185) [ 310.177903][ T7170] loop2: detected capacity change from 0 to 64 [ 310.236059][ T7166] tipc: Enabled bearer , priority 0 [ 310.577921][ T7163] loop0: detected capacity change from 0 to 1024 [ 310.674782][ T7166] tipc: Resetting bearer [ 310.707433][ T7163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.786320][ T26] audit: type=1800 audit(1763480122.004:28): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.776" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 310.971473][ T5498] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 311.102671][ T7165] tipc: Disabling bearer [ 311.471709][ T5498] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 311.480163][ T5498] usb 4-1: config 0 has no interface number 0 [ 311.515215][ T5498] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 311.568046][ T5498] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 311.637481][ T5498] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 311.679539][ T5498] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.736710][ T5498] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 311.861014][ T5498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.102816][ T5498] usb 4-1: config 0 descriptor?? [ 312.264289][ T7179] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.320498][ T7179] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.383998][ T5498] ldusb 4-1:0.55: Interrupt in endpoint not found [ 312.478390][ T7207] loop2: detected capacity change from 0 to 4096 [ 312.528745][ T7214] loop0: detected capacity change from 0 to 8 [ 312.567833][ T7214] SQUASHFS error: zlib decompression failed, data probably corrupt [ 312.591467][ T7207] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 312.612537][ T4506] usb 4-1: USB disconnect, device number 10 [ 312.643453][ T7214] SQUASHFS error: Failed to read block 0x9b: -5 [ 312.786238][ T7214] SQUASHFS error: Unable to read metadata cache entry [99] [ 312.804643][ T7214] SQUASHFS error: Unable to read inode 0x127 [ 313.725197][ T7221] loop4: detected capacity change from 0 to 32768 [ 314.864929][ T7243] tipc: Enabling of bearer rejected, failed to enable media [ 314.972026][ T4506] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 315.023905][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.794'. [ 315.033180][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.794'. [ 315.146837][ T7259] loop1: detected capacity change from 0 to 2048 [ 315.198847][ T7264] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.343700][ T4506] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 316.121514][ T4506] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 316.129114][ T4506] usb 5-1: can't read configurations, error -71 [ 316.498704][ T7277] loop3: detected capacity change from 0 to 1024 [ 316.920591][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.927280][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.817662][ T7285] loop2: detected capacity change from 0 to 64 [ 317.852453][ T7285] hfs: unable to change codepage [ 317.861394][ T7285] hfs: unable to parse mount options [ 317.895929][ T7291] loop0: detected capacity change from 0 to 8 [ 317.932501][ T4303] hfsplus: bad catalog file entry [ 317.938187][ T4303] hfsplus: b-tree write err: -5, ino 3 [ 318.050354][ T7291] SQUASHFS error: zlib decompression failed, data probably corrupt [ 318.063347][ T4193] udevd[4193]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 318.090910][ T7291] SQUASHFS error: Failed to read block 0x9b: -5 [ 318.127331][ T4193] udevd[4193]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 318.138654][ T7291] SQUASHFS error: Unable to read metadata cache entry [99] [ 318.169269][ T7291] SQUASHFS error: Unable to read inode 0x127 [ 319.138272][ T7309] loop3: detected capacity change from 0 to 2048 [ 319.212806][ T7307] loop0: detected capacity change from 0 to 32768 [ 319.302246][ T7315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.921514][ T4421] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 321.199823][ T7341] loop2: detected capacity change from 0 to 512 [ 321.249013][ T4421] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 321.293846][ T7341] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.373327][ T7341] EXT4-fs (loop2): 1 truncate cleaned up [ 321.379017][ T7341] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 321.398830][ T7349] loop4: detected capacity change from 0 to 1024 [ 321.409552][ T4423] Bluetooth: hci0: command 0x0c20 tx timeout [ 321.418204][ T4421] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 321.569595][ T4421] usb 1-1: can't read configurations, error -61 [ 321.585962][ T7349] EXT4-fs (loop4): Unrecognized mount option "nojournal" or missing value [ 321.875994][ T7360] loop4: detected capacity change from 0 to 8 [ 321.975638][ T7360] SQUASHFS error: zlib decompression failed, data probably corrupt [ 322.366516][ T7360] SQUASHFS error: Failed to read block 0x9b: -5 [ 322.381700][ T4421] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 322.437704][ T7360] SQUASHFS error: Unable to read metadata cache entry [99] [ 322.480129][ T7360] SQUASHFS error: Unable to read inode 0x127 [ 322.679232][ T7376] ptrace attach of "./syz-executor exec"[4188] was attempted by ""[7376] [ 322.952090][ T7378] loop3: detected capacity change from 0 to 512 [ 323.844158][ T7380] loop0: detected capacity change from 0 to 2048 [ 323.854386][ T7378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 323.864886][ T7378] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 325.201541][ T7389] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.378619][ T7394] loop2: detected capacity change from 0 to 64 [ 326.469054][ T7398] netlink: 27 bytes leftover after parsing attributes in process `syz.0.823'. [ 328.541056][ T7412] loop2: detected capacity change from 0 to 1024 [ 328.620782][ T7412] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.725652][ T7411] loop3: detected capacity change from 0 to 32768 [ 328.728218][ T7412] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 328.761858][ T7412] overlayfs: unrecognized mount option ";b4õ¦·i ûfJDâ+rèCçÏUó”ÏuÑÍ>çš%û˜ÌE³ýä>BáPÔ¢ýÝš—gt" or missing value [ 329.300302][ T7422] loop2: detected capacity change from 0 to 512 [ 329.361038][ T7418] loop0: detected capacity change from 0 to 40427 [ 329.382895][ T7422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 329.411184][ T7422] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 329.545619][ T7418] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 329.825313][ T1107] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 330.618844][ T7430] loop4: detected capacity change from 0 to 8 [ 330.627718][ T7418] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 330.646727][ T7418] F2FS-fs (loop0): invalid crc value [ 330.674478][ T7430] SQUASHFS error: zlib decompression failed, data probably corrupt [ 330.685214][ T7418] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.687828][ T7430] SQUASHFS error: Failed to read block 0x9b: -5 [ 330.713956][ T7430] SQUASHFS error: Unable to read metadata cache entry [99] [ 330.739601][ T7430] SQUASHFS error: Unable to read inode 0x127 [ 330.785304][ T7418] F2FS-fs (loop0): Start checkpoint disabled! [ 330.798738][ T1107] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 330.811067][ T7418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 330.971762][ T1107] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 330.983981][ T1107] usb 4-1: can't read configurations, error -61 [ 331.105281][ T4339] attempt to access beyond end of device [ 331.105281][ T4339] loop0: rw=1, want=45112, limit=40427 [ 331.180159][ T4339] attempt to access beyond end of device [ 331.180159][ T4339] loop0: rw=2049, want=40976, limit=40427 [ 331.321513][ T1107] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 331.728174][ T7432] loop2: detected capacity change from 0 to 40427 [ 331.803197][ T7432] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 331.823912][ T7432] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 331.848267][ T7432] F2FS-fs (loop2): invalid crc value [ 331.949261][ T7432] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.171010][ T7432] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 332.201510][ T7432] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 334.311557][ T1107] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 334.788365][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.954991][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.965121][ T1107] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 334.980391][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.994133][ T1107] usb 5-1: config 0 descriptor?? [ 336.214417][ T7479] loop0: detected capacity change from 0 to 512 [ 336.709251][ T7479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 336.719544][ T7479] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 336.761650][ T7485] tipc: Enabled bearer , priority 0 [ 336.792328][ T7485] device syzkaller0 entered promiscuous mode [ 336.813842][ T7485] tipc: Resetting bearer [ 336.833433][ T7485] tipc: Resetting bearer [ 337.245083][ T1107] usbhid 5-1:0.0: can't add hid device: -71 [ 338.099985][ T7500] loop2: detected capacity change from 0 to 64 [ 338.111442][ T1107] usbhid: probe of 5-1:0.0 failed with error -71 [ 338.191484][ T1107] usb 5-1: USB disconnect, device number 11 [ 338.323498][ T7506] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[7506] [ 338.418983][ T7505] loop0: detected capacity change from 0 to 512 [ 339.062780][ T7505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.116837][ T7505] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.041501][ T26] audit: type=1800 audit(1763481174.835:29): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.857" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 341.580618][ T7536] device syzkaller0 entered promiscuous mode [ 341.615107][ T7536] tipc: Resetting bearer [ 341.773516][ T7540] loop2: detected capacity change from 0 to 512 [ 341.900103][ T7540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 341.924602][ T7540] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 343.433988][ T7557] loop0: detected capacity change from 0 to 8 [ 343.515565][ T7557] SQUASHFS error: zlib decompression failed, data probably corrupt [ 343.541405][ T7557] SQUASHFS error: Failed to read block 0x9b: -5 [ 343.547682][ T7557] SQUASHFS error: Unable to read metadata cache entry [99] [ 343.571359][ T7557] SQUASHFS error: Unable to read inode 0x127 [ 343.585849][ T7559] loop4: detected capacity change from 0 to 1024 [ 343.632289][ T7561] loop3: detected capacity change from 0 to 512 [ 343.637860][ T7559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.681478][ T4506] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 343.804709][ T7561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 343.926845][ T7561] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.686942][ T4506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.698472][ T4506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.708480][ T4506] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.717951][ T4506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.736159][ T4506] usb 2-1: config 0 descriptor?? [ 344.869056][ T7571] loop3: detected capacity change from 0 to 2048 [ 344.960039][ T7573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.086751][ T7574] netlink: 27 bytes leftover after parsing attributes in process `syz.3.877'. [ 345.361608][ T4506] usbhid 2-1:0.0: can't add hid device: -71 [ 345.368665][ T4506] usbhid: probe of 2-1:0.0 failed with error -71 [ 345.511503][ T4506] usb 2-1: USB disconnect, device number 19 [ 345.779081][ T7566] loop2: detected capacity change from 0 to 40427 [ 345.888458][ T7566] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x1ffff [ 347.481409][ T7566] F2FS-fs (loop2): invalid crc value [ 347.574855][ T7566] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 347.605728][ T7593] tipc: Enabling of bearer rejected, failed to enable media [ 347.803585][ T7600] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[7600] [ 348.825961][ T7616] loop3: detected capacity change from 0 to 2048 [ 348.937881][ T7623] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.036284][ T7625] netlink: 27 bytes leftover after parsing attributes in process `syz.3.888'. [ 349.721477][ T4423] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 350.089525][ T4423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.141450][ T4423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.186934][ T4423] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 350.238412][ T4423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.033754][ T4423] usb 5-1: config 0 descriptor?? [ 351.049850][ T7637] loop3: detected capacity change from 0 to 64 [ 352.051546][ T4423] usbhid 5-1:0.0: can't add hid device: -71 [ 352.057711][ T4423] usbhid: probe of 5-1:0.0 failed with error -71 [ 352.202468][ T7653] tipc: Enabling of bearer rejected, failed to enable media [ 352.261451][ T4423] usb 5-1: USB disconnect, device number 12 [ 352.273998][ T7656] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[7656] [ 352.619432][ T7657] loop2: detected capacity change from 0 to 512 [ 353.223830][ T7657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 353.234072][ T7657] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 354.839077][ T7683] netlink: 27 bytes leftover after parsing attributes in process `syz.1.903'. [ 355.034556][ T7691] loop4: detected capacity change from 0 to 8 [ 355.188939][ T7691] SQUASHFS error: zlib decompression failed, data probably corrupt [ 355.206715][ T7691] SQUASHFS error: Failed to read block 0x9b: -5 [ 355.217349][ T7691] SQUASHFS error: Unable to read metadata cache entry [99] [ 355.231539][ T7691] SQUASHFS error: Unable to read inode 0x127 [ 355.267329][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 355.280065][ T7706] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[7706] [ 355.651968][ T26] audit: type=1326 audit(1763481190.885:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.4.907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e0ad626c9 code=0x0 [ 356.081482][ T4324] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 356.762090][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.866342][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.086341][ T4324] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 357.109806][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.136451][ T4324] usb 1-1: config 0 descriptor?? [ 357.524784][ T7741] loop4: detected capacity change from 0 to 40427 [ 357.579934][ T7745] loop2: detected capacity change from 0 to 512 [ 358.460682][ T7741] F2FS-fs (loop4): invalid crc value [ 358.485391][ T7745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.502642][ T7745] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 358.524748][ T7741] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.566579][ T7741] F2FS-fs (loop4): Start checkpoint disabled! [ 358.583543][ T7741] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 359.269183][ T7757] tipc: Enabling of bearer rejected, failed to enable media [ 359.331453][ T4324] usbhid 1-1:0.0: can't add hid device: -71 [ 359.337450][ T4324] usbhid: probe of 1-1:0.0 failed with error -71 [ 359.354069][ T4324] usb 1-1: USB disconnect, device number 10 [ 359.379230][ T4430] attempt to access beyond end of device [ 359.379230][ T4430] loop4: rw=2049, want=40984, limit=40427 [ 359.741879][ T7771] syz.4.925[7771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.741971][ T7771] syz.4.925[7771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.612330][ T7790] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[7790] [ 362.163135][ T7800] device syzkaller0 left promiscuous mode [ 362.174757][ T7800] tipc: Resetting bearer [ 363.537931][ T7810] syz.3.938[7810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.538022][ T7810] syz.3.938[7810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.707423][ T7814] tipc: Enabling of bearer rejected, failed to enable media [ 366.185768][ T7835] loop0: detected capacity change from 0 to 2048 [ 366.801930][ T7844] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[7844] [ 367.371901][ T7854] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.473107][ T7856] loop3: detected capacity change from 0 to 512 [ 367.712768][ T7856] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 367.725111][ T7856] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 369.704305][ T7862] loop0: detected capacity change from 0 to 64 [ 369.872432][ T7866] syz.1.953[7866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.872523][ T7866] syz.1.953[7866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.053966][ T7874] tipc: Enabling of bearer rejected, already enabled [ 370.075765][ T26] audit: type=1800 audit(1763481461.305:31): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.952" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 370.087713][ T7876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 370.367952][ T7886] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[7886] [ 370.619333][ T7884] loop3: detected capacity change from 0 to 1024 [ 370.813545][ T7884] hfsplus: xattr searching failed [ 370.897090][ T7897] ptrace attach of "./syz-executor exec"[4188] was attempted by ""[7897] [ 372.230852][ T7900] netlink: 27 bytes leftover after parsing attributes in process `syz.1.963'. [ 373.160594][ T7906] syz.0.966[7906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.188834][ T7906] syz.0.966[7906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.580337][ T7916] tipc: Started in network mode [ 374.036370][ T7916] tipc: Node identity 4af94c9f493f, cluster identity 4711 [ 374.077679][ T7916] tipc: Enabled bearer , priority 0 [ 374.091906][ T7926] device syzkaller0 left promiscuous mode [ 374.110449][ T7926] tipc: Resetting bearer [ 374.245161][ T7916] tipc: Resetting bearer [ 374.339030][ T7915] tipc: Disabling bearer [ 374.524146][ T7930] loop4: detected capacity change from 0 to 64 [ 374.625180][ T7932] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[7932] [ 374.951433][ T26] audit: type=1800 audit(1763481466.155:32): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.973" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 375.252031][ T7944] ptrace attach of "./syz-executor exec"[4200] was attempted by ""[7944] [ 375.491590][ T7947] loop0: detected capacity change from 0 to 4096 [ 375.698866][ T7948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.711140][ T7947] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 375.725596][ T7947] NILFS (loop0): mounting fs with errors [ 376.200216][ T7954] syz.3.980[7954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.200307][ T7954] syz.3.980[7954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.332752][ T7959] loop0: detected capacity change from 0 to 8 [ 376.390138][ T7959] SQUASHFS error: zlib decompression failed, data probably corrupt [ 376.402704][ T7959] SQUASHFS error: Failed to read block 0x9b: -5 [ 377.347770][ T7959] SQUASHFS error: Unable to read metadata cache entry [99] [ 377.409000][ T7959] SQUASHFS error: Unable to read inode 0x127 [ 377.446354][ T7973] tipc: Enabled bearer , priority 0 [ 377.521787][ T7973] tipc: Resetting bearer [ 377.595451][ T7970] tipc: Disabling bearer [ 378.359514][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.365851][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.430721][ T7990] ptrace attach of "./syz-executor exec"[4188] was attempted by ""[7990] [ 379.083026][ T7992] loop2: detected capacity change from 0 to 64 [ 379.166149][ T7995] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[7995] [ 379.405384][ T26] audit: type=1800 audit(1763481470.635:33): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.992" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 379.614258][ T8001] loop0: detected capacity change from 0 to 4096 [ 380.408967][ T8003] syz.3.995[8003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.410287][ T8003] syz.3.995[8003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.465947][ T8017] tipc: Enabled bearer , priority 0 [ 383.721024][ T8017] tipc: Resetting bearer [ 383.834537][ T8016] tipc: Disabling bearer [ 384.132490][ T8043] ptrace attach of "./syz-executor exec"[4200] was attempted by ""[8043] [ 385.256030][ T8073] loop2: detected capacity change from 0 to 4096 [ 386.418370][ T8075] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.430401][ T8073] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 386.447091][ T8073] NILFS (loop2): mounting fs with errors [ 386.991545][ T8078] loop3: detected capacity change from 0 to 40427 [ 387.015277][ T8056] infiniband syz2: set active [ 387.020570][ T8056] infiniband syz2: added bond_slave_1 [ 387.083762][ T8078] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 387.091949][ T8078] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 387.115463][ T8078] F2FS-fs (loop3): invalid crc value [ 387.194489][ T8078] F2FS-fs (loop3): Found nat_bits in checkpoint [ 387.353182][ T8078] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 387.360338][ T8078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 387.920653][ T8056] infiniband syz2: Couldn't open port 1 [ 388.615799][ T26] audit: type=1800 audit(1763481991.225:34): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1013" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 388.636245][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.245902][ T8097] loop2: detected capacity change from 0 to 40427 [ 389.272356][ T8097] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x1ffff [ 389.283484][ T8097] F2FS-fs (loop2): invalid crc value [ 389.300390][ T8056] RDS/IB: syz2: added [ 389.317691][ T8097] F2FS-fs (loop2) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67b0 [ 389.328201][ T8097] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 389.342932][ T8056] smc: adding ib device syz2 with port count 1 [ 389.357965][ T8056] smc: ib device syz2 port 1 has pnetid [ 390.625343][ T8113] loop0: detected capacity change from 0 to 512 [ 390.767636][ T8113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.779414][ T8113] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 392.591219][ T8135] loop0: detected capacity change from 0 to 4096 [ 392.729313][ T8137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.751374][ T8135] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 392.764811][ T8135] NILFS (loop0): mounting fs with errors [ 393.469517][ T8156] device syzkaller0 entered promiscuous mode [ 393.588037][ T8157] loop0: detected capacity change from 0 to 512 [ 393.725061][ T8157] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 393.739094][ T8157] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 394.150102][ T8160] loop3: detected capacity change from 0 to 64 [ 394.560887][ T8167] loop0: detected capacity change from 0 to 32768 [ 395.141864][ T8174] loop0: detected capacity change from 0 to 256 [ 395.223327][ T8174] exfat: Deprecated parameter 'utf8' [ 395.228703][ T8174] exfat: Deprecated parameter 'namecase' [ 395.333659][ T8174] exfat: Deprecated parameter 'utf8' [ 395.507296][ T8176] loop3: detected capacity change from 0 to 40427 [ 395.560558][ T8176] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 395.568535][ T8176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 395.672932][ T8174] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 395.725500][ T8176] F2FS-fs (loop3): invalid crc value [ 395.896085][ T8176] F2FS-fs (loop3): Found nat_bits in checkpoint [ 396.095382][ T8176] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 396.102825][ T8176] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 396.987498][ T26] audit: type=1800 audit(1763482000.215:35): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1040" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 397.577539][ T8189] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1042'. [ 398.060549][ T8194] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[8194] [ 398.448186][ T8197] device syzkaller0 entered promiscuous mode [ 398.486239][ T8197] tipc: Resetting bearer [ 399.400723][ T8207] loop4: detected capacity change from 0 to 512 [ 399.522015][ T8207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 399.532529][ T8207] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 400.437835][ T8229] loop2: detected capacity change from 0 to 2048 [ 400.581610][ T5489] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 400.983384][ T8235] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.995263][ T5489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.085517][ T5489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.347078][ T8236] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1055'. [ 401.484240][ T5489] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 401.494666][ T5489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.525446][ T5489] usb 5-1: config 0 descriptor?? [ 401.869503][ T8250] device syzkaller0 entered promiscuous mode [ 402.071463][ T5489] usbhid 5-1:0.0: can't add hid device: -71 [ 402.077490][ T5489] usbhid: probe of 5-1:0.0 failed with error -71 [ 402.128908][ T5489] usb 5-1: USB disconnect, device number 13 [ 403.814450][ T8268] loop2: detected capacity change from 0 to 512 [ 404.195857][ T8268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 404.229959][ T8268] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 404.308064][ T8278] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1066'. [ 405.010304][ T8282] loop4: detected capacity change from 0 to 40427 [ 405.902478][ T8282] F2FS-fs (loop4): build fault injection attr: rate: 25, type: 0x1ffff [ 405.921493][ T8282] F2FS-fs (loop4): invalid crc value [ 405.961074][ T8282] F2FS-fs (loop4) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67b0 [ 405.971853][ T8282] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 405.983684][ T8289] loop2: detected capacity change from 0 to 64 [ 406.000192][ T8278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.036635][ T8278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.092967][ T26] audit: type=1800 audit(1763482265.321:36): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1068" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 406.130273][ T8278] bond0 (unregistering): Released all slaves [ 406.927001][ T8302] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1069'. [ 407.165117][ T8305] loop0: detected capacity change from 0 to 128 [ 407.233112][ T8305] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 407.248960][ T8305] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 407.449619][ T8318] loop3: detected capacity change from 0 to 8 [ 407.887688][ T5851] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 407.944198][ T8319] loop2: detected capacity change from 0 to 512 [ 408.146779][ T8318] SQUASHFS error: zlib decompression failed, data probably corrupt [ 408.154980][ T8319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 408.167475][ T8319] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 408.251124][ T8328] loop0: detected capacity change from 0 to 512 [ 408.341830][ T8318] SQUASHFS error: Failed to read block 0x9b: -5 [ 408.364666][ T8318] SQUASHFS error: Unable to read metadata cache entry [99] [ 408.462089][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.529835][ T8318] SQUASHFS error: Unable to read inode 0x127 [ 408.591667][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.738169][ T5851] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 408.769215][ T8328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 408.787249][ T8328] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 408.804224][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.862111][ T5851] usb 5-1: config 0 descriptor?? [ 409.251470][ T26] audit: type=1326 audit(1763482268.451:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.1077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95989746c9 code=0x0 [ 409.763309][ T8348] loop3: detected capacity change from 0 to 64 [ 409.791557][ T5851] usbhid 5-1:0.0: can't add hid device: -71 [ 409.797559][ T5851] usbhid: probe of 5-1:0.0 failed with error -71 [ 409.847455][ T26] audit: type=1800 audit(1763482269.071:38): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1082" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 409.861910][ T5851] usb 5-1: USB disconnect, device number 14 [ 410.077260][ T8354] loop2: detected capacity change from 0 to 2048 [ 410.352702][ T8362] loop0: detected capacity change from 0 to 128 [ 410.372479][ T8363] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.691899][ T8362] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 410.708559][ T8362] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 410.954882][ T8373] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1084'. [ 411.558051][ T8376] loop0: detected capacity change from 0 to 512 [ 411.859597][ T8376] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 411.876590][ T8376] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 412.248026][ T8389] loop4: detected capacity change from 0 to 512 [ 412.960527][ T8389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 412.972794][ T8389] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 413.020048][ T8394] loop2: detected capacity change from 0 to 64 [ 413.022758][ T8392] device syzkaller0 entered promiscuous mode [ 413.035900][ T8392] tipc: Resetting bearer [ 413.097318][ T26] audit: type=1800 audit(1763482528.324:39): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1095" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 413.193527][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'. [ 414.315683][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 414.381427][ T5852] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 415.082790][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.104982][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.129332][ T5852] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 415.145055][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.181069][ T5852] usb 4-1: config 0 descriptor?? [ 415.301175][ T8421] loop2: detected capacity change from 0 to 40427 [ 415.350639][ T8421] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 415.385019][ T8421] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 415.509438][ T8421] F2FS-fs (loop2): invalid crc value [ 415.573424][ T8421] F2FS-fs (loop2): Found nat_bits in checkpoint [ 415.603309][ T8440] loop4: detected capacity change from 0 to 8 [ 415.658761][ T8440] SQUASHFS error: zlib decompression failed, data probably corrupt [ 415.697390][ T8440] SQUASHFS error: Failed to read block 0x9b: -5 [ 415.714210][ T8440] SQUASHFS error: Unable to read metadata cache entry [99] [ 415.731813][ T8440] SQUASHFS error: Unable to read inode 0x127 [ 415.737868][ T8421] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 415.745413][ T8421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 415.801397][ T5852] usbhid 4-1:0.0: can't add hid device: -71 [ 415.807560][ T5852] usbhid: probe of 4-1:0.0 failed with error -71 [ 415.847742][ T5852] usb 4-1: USB disconnect, device number 13 [ 416.801396][ T8451] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[8451] [ 416.863235][ T26] audit: type=1800 audit(1763482532.094:40): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1106" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 416.902400][ T8454] loop3: detected capacity change from 0 to 512 [ 416.959201][ T8454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 416.981754][ T8454] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 417.194661][ T8460] loop4: detected capacity change from 0 to 128 [ 417.273027][ T8460] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 417.334774][ T8460] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 417.782675][ T8468] loop3: detected capacity change from 0 to 4096 [ 417.958262][ T26] audit: type=1800 audit(1763482533.184:41): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1106" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 417.980170][ T8469] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.992139][ T8468] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 418.005661][ T8468] NILFS (loop3): mounting fs with errors [ 418.838045][ T8480] loop4: detected capacity change from 0 to 64 [ 419.232607][ T26] audit: type=1800 audit(1763482534.464:42): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1121" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 419.521523][ T5851] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 419.992128][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.085785][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.191293][ T5851] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 420.405433][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.421155][ T5851] usb 4-1: config 0 descriptor?? [ 420.511004][ T8503] loop0: detected capacity change from 0 to 128 [ 420.588558][ T8503] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 420.612097][ T8503] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 420.812189][ T8506] loop4: detected capacity change from 0 to 512 [ 420.879930][ T8506] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 420.891557][ T8506] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.954682][ T8511] ptrace attach of "./syz-executor exec"[4200] was attempted by ""[8511] [ 421.231689][ T5851] usbhid 4-1:0.0: can't add hid device: -71 [ 421.237810][ T5851] usbhid: probe of 4-1:0.0 failed with error -71 [ 421.292749][ T5851] usb 4-1: USB disconnect, device number 14 [ 421.799006][ T8526] loop2: detected capacity change from 0 to 64 [ 422.849939][ T26] audit: type=1800 audit(1763482538.074:43): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1135" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 423.197812][ T8550] loop3: detected capacity change from 0 to 4096 [ 423.304148][ T8551] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.316069][ T8550] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 423.330323][ T8550] NILFS (loop3): mounting fs with errors [ 423.687010][ T8554] loop0: detected capacity change from 0 to 8 [ 423.893328][ T8554] SQUASHFS error: zlib decompression failed, data probably corrupt [ 423.944852][ T8554] SQUASHFS error: Failed to read block 0x9b: -5 [ 424.061663][ T8554] SQUASHFS error: Unable to read metadata cache entry [99] [ 424.079087][ T8554] SQUASHFS error: Unable to read inode 0x127 [ 425.254502][ T8562] loop3: detected capacity change from 0 to 512 [ 425.524286][ T8579] netlink: 'syz.0.1149': attribute type 12 has an invalid length. [ 425.551473][ T8562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.723383][ T8562] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.246754][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 426.280956][ T8590] device hsr0 entered promiscuous mode [ 426.304860][ T8590] device macsec1 entered promiscuous mode [ 426.965671][ T8609] loop0: detected capacity change from 0 to 4096 [ 427.201713][ T8613] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.216005][ T8609] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 427.232001][ T8609] NILFS (loop0): mounting fs with errors [ 427.512303][ T8617] loop4: detected capacity change from 0 to 64 [ 427.670424][ T26] audit: type=1800 audit(1763482798.898:44): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1156" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 427.840369][ T8630] tipc: Enabling of bearer rejected, already enabled [ 427.860085][ T8632] loop0: detected capacity change from 0 to 8 [ 427.938233][ T8632] SQUASHFS error: zlib decompression failed, data probably corrupt [ 428.076486][ T8632] SQUASHFS error: Failed to read block 0x9b: -5 [ 428.111050][ T8632] SQUASHFS error: Unable to read metadata cache entry [99] [ 428.141841][ T8632] SQUASHFS error: Unable to read inode 0x127 [ 429.351345][ T1107] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 430.000711][ T8664] loop0: detected capacity change from 0 to 512 [ 430.053645][ T8664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 430.073485][ T8664] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 430.101597][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.208695][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.410039][ T1107] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 430.610779][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.756585][ T1107] usb 4-1: config 0 descriptor?? [ 431.049752][ T8675] loop4: detected capacity change from 0 to 4096 [ 431.177132][ T8676] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.178447][ T8675] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 431.204085][ T8675] NILFS (loop4): mounting fs with errors [ 431.421659][ T1107] usbhid 4-1:0.0: can't add hid device: -71 [ 431.432065][ T1107] usbhid: probe of 4-1:0.0 failed with error -71 [ 431.656741][ T1107] usb 4-1: USB disconnect, device number 15 [ 431.714779][ T8682] loop2: detected capacity change from 0 to 8 [ 431.922736][ T8682] SQUASHFS error: zlib decompression failed, data probably corrupt [ 431.944303][ T8682] SQUASHFS error: Failed to read block 0x9b: -5 [ 432.001170][ T8682] SQUASHFS error: Unable to read metadata cache entry [99] [ 432.083575][ T8682] SQUASHFS error: Unable to read inode 0x127 [ 433.286944][ T8710] loop4: detected capacity change from 0 to 64 [ 433.334600][ T8714] loop0: detected capacity change from 0 to 8 [ 433.653919][ T8719] loop3: detected capacity change from 0 to 512 [ 433.679762][ T8714] SQUASHFS error: zlib decompression failed, data probably corrupt [ 433.698064][ T8714] SQUASHFS error: Failed to read block 0x9b: -5 [ 433.722868][ T8714] SQUASHFS error: Unable to read metadata cache entry [99] [ 433.739602][ T8719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 433.751762][ T8719] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 433.770348][ T8714] SQUASHFS error: Unable to read inode 0x127 [ 434.771009][ T26] audit: type=1326 audit(1763483318.000:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.1170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9a41816c9 code=0x0 [ 434.907777][ T8740] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[8740] [ 437.292115][ T8775] loop3: detected capacity change from 0 to 512 [ 437.298633][ T8778] loop0: detected capacity change from 0 to 2048 [ 437.425435][ T8775] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.441973][ T8775] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.472847][ T8781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.751799][ T8778] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1193'. [ 438.333823][ T8803] ptrace attach of "./syz-executor exec"[4200] was attempted by "./syz-executor exec"[8803] [ 438.767484][ T8814] loop0: detected capacity change from 0 to 4096 [ 438.929466][ T8814] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 438.939459][ T8822] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.003516][ T8814] NILFS (loop0): mounting fs with errors [ 439.794796][ T1422] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.805993][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.821072][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.819273][ T8842] loop0: detected capacity change from 0 to 512 [ 440.876558][ T8844] device syzkaller0 left promiscuous mode [ 440.965265][ T8842] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 441.025831][ T8842] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.314993][ T8852] device syzkaller0 entered promiscuous mode [ 442.019153][ T8870] loop2: detected capacity change from 0 to 512 [ 442.288160][ T8870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 442.298989][ T8870] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 442.541403][ T4257] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 442.985319][ T8880] loop2: detected capacity change from 0 to 40427 [ 442.995846][ T8880] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 443.003633][ T8880] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 443.020160][ T8880] F2FS-fs (loop2): invalid crc value [ 443.084989][ T8880] F2FS-fs (loop2): Found nat_bits in checkpoint [ 443.143296][ T8880] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 443.150444][ T8880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 443.162000][ T8885] loop4: detected capacity change from 0 to 128 [ 443.364490][ T8885] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 443.391799][ T8885] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 443.431524][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.436880][ T8892] loop3: detected capacity change from 0 to 512 [ 443.490033][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.509563][ T26] audit: type=1800 audit(1763483326.740:46): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1219" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 443.529938][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.574480][ T4257] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 443.601355][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.639572][ T4257] usb 2-1: config 0 descriptor?? [ 443.650600][ T8892] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 443.686085][ T8892] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.762131][ T8901] device syzkaller0 left promiscuous mode [ 443.798925][ T8901] tipc: Resetting bearer [ 444.241419][ T4257] usbhid 2-1:0.0: can't add hid device: -71 [ 444.247544][ T4257] usbhid: probe of 2-1:0.0 failed with error -71 [ 444.279465][ T4257] usb 2-1: USB disconnect, device number 20 [ 444.479007][ T8906] device syzkaller0 entered promiscuous mode [ 444.510161][ T8906] tipc: Resetting bearer [ 444.616947][ T8913] loop4: detected capacity change from 0 to 64 [ 445.008041][ T26] audit: type=1800 audit(1763483328.240:47): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1227" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 445.555042][ T8924] loop3: detected capacity change from 0 to 2048 [ 445.696549][ T26] audit: type=1800 audit(1763483328.930:48): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1219" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 445.803758][ T8927] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.828440][ T8924] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1230'. [ 447.359967][ T8939] loop0: detected capacity change from 0 to 8 [ 447.410064][ T8942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 447.419430][ T8939] SQUASHFS error: zlib decompression failed, data probably corrupt [ 447.445004][ T8939] SQUASHFS error: Failed to read block 0x9b: -5 [ 447.454621][ T8939] SQUASHFS error: Unable to read metadata cache entry [99] [ 447.464509][ T8939] SQUASHFS error: Unable to read inode 0x127 [ 447.746531][ T8944] loop4: detected capacity change from 0 to 4096 [ 448.091692][ T26] audit: type=1326 audit(1763483331.120:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.1236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f793fd5d6c9 code=0x0 [ 448.248723][ T8948] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.249067][ T8944] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 448.270138][ T8944] NILFS (loop4): mounting fs with errors [ 452.005912][ T9006] loop4: detected capacity change from 0 to 64 [ 452.518087][ T9010] loop3: detected capacity change from 0 to 40427 [ 452.547047][ T9010] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x1ffff [ 452.557253][ T9010] F2FS-fs (loop3): invalid crc value [ 452.607788][ T9010] F2FS-fs (loop3) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67b0 [ 452.618380][ T9010] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 453.144470][ T9021] loop3: detected capacity change from 0 to 8 [ 453.204693][ T9021] SQUASHFS error: zlib decompression failed, data probably corrupt [ 453.217056][ T9021] SQUASHFS error: Failed to read block 0x9b: -5 [ 453.223420][ T9021] SQUASHFS error: Unable to read metadata cache entry [99] [ 453.231089][ T9021] SQUASHFS error: Unable to read inode 0x127 [ 453.302644][ T26] audit: type=1800 audit(1763483592.532:50): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1247" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 454.240455][ T9035] device syzkaller0 entered promiscuous mode [ 455.609669][ T9059] loop4: detected capacity change from 0 to 128 [ 455.909897][ T9060] loop2: detected capacity change from 0 to 512 [ 456.017654][ T9060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 456.028330][ T9060] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 456.066609][ T9059] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 456.121439][ T4317] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 456.130022][ T9053] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 456.162662][ T9054] loop0: detected capacity change from 0 to 40427 [ 456.206243][ T9054] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 456.214105][ T9054] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 456.225044][ T9054] F2FS-fs (loop0): invalid crc value [ 456.361239][ T9054] F2FS-fs (loop0): Found nat_bits in checkpoint [ 456.399933][ T9067] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1264'. [ 456.418442][ T9054] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 456.426021][ T9054] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 456.548027][ T9072] loop2: detected capacity change from 0 to 512 [ 456.629176][ T9072] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 456.642710][ T9072] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.672822][ T9078] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[9078] [ 456.682242][ T26] audit: type=1800 audit(1763483851.919:51): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1261" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 456.891443][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.962146][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.075310][ T4317] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 457.160678][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.239776][ T4317] usb 2-1: config 0 descriptor?? [ 457.871504][ T4317] usbhid 2-1:0.0: can't add hid device: -71 [ 457.877540][ T4317] usbhid: probe of 2-1:0.0 failed with error -71 [ 457.918213][ T4317] usb 2-1: USB disconnect, device number 21 [ 459.282162][ T9109] loop2: detected capacity change from 0 to 128 [ 459.833363][ T9109] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 459.892832][ T9106] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 459.915254][ T9113] loop3: detected capacity change from 0 to 512 [ 460.008377][ T9113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 460.025862][ T9113] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 460.967797][ T9121] loop4: detected capacity change from 0 to 40427 [ 461.405898][ T9121] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 461.413920][ T9121] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 461.438109][ T9121] F2FS-fs (loop4): invalid crc value [ 461.695593][ T9121] F2FS-fs (loop4): Found nat_bits in checkpoint [ 461.739803][ T9121] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 461.747402][ T9121] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 462.003057][ T9138] loop3: detected capacity change from 0 to 64 [ 462.009328][ T26] audit: type=1800 audit(1763484369.236:52): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1281" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 462.171434][ T5851] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 462.357523][ T9125] loop2: detected capacity change from 0 to 32768 [ 462.484781][ T9125] XFS (loop2): Mounting V5 Filesystem [ 462.541559][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.643684][ T26] audit: type=1800 audit(1763484369.856:53): pid=9148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1286" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 462.769530][ T9125] XFS (loop2): Ending clean mount [ 462.930457][ T26] audit: type=1800 audit(1763484370.156:54): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1280" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 462.946366][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.961377][ T5851] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 462.970616][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.980461][ T5851] usb 2-1: config 0 descriptor?? [ 462.995202][ T26] audit: type=1800 audit(1763484370.216:55): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1280" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 463.104640][ T4200] XFS (loop2): Unmounting Filesystem [ 463.863540][ T26] audit: type=1800 audit(1763484371.096:56): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1281" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 463.964488][ T5851] usbhid 2-1:0.0: can't add hid device: -71 [ 463.970485][ T5851] usbhid: probe of 2-1:0.0 failed with error -71 [ 463.987947][ T5851] usb 2-1: USB disconnect, device number 22 [ 464.146719][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.156747][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.184551][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.215872][ T9163] device bridge_slave_0 left promiscuous mode [ 464.230291][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.253361][ T9163] device bridge_slave_1 left promiscuous mode [ 464.268698][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.307299][ T9163] bond0: (slave bond_slave_0): Releasing backup interface [ 464.350095][ T9163] bond0: (slave bond_slave_1): Releasing backup interface [ 464.359240][ T9166] loop2: detected capacity change from 0 to 64 [ 464.426175][ T9163] team0: Port device team_slave_0 removed [ 464.535440][ T9163] team0: Port device team_slave_1 removed [ 464.559954][ T9163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.586844][ T9163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.649972][ T9163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.657892][ T9163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.680862][ T9163] tipc: Resetting bearer [ 464.920531][ T9172] loop3: detected capacity change from 0 to 128 [ 464.989376][ T9172] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 465.070756][ T9172] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 466.709325][ T9190] loop0: detected capacity change from 0 to 64 [ 467.208874][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 467.948899][ T9204] loop4: detected capacity change from 0 to 512 [ 467.975371][ T9204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 467.985597][ T9204] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 468.054847][ T26] audit: type=1800 audit(1763484631.291:57): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1297" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 468.097694][ T9222] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1304'. [ 468.151516][ T9222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.182718][ T9222] rdma_rxe: ignoring netdev event = 27 for bond_slave_1 [ 468.215364][ T9222] rdma_rxe: ignoring netdev event = 26 for bond_slave_1 [ 468.230592][ T9222] rdma_rxe: ignoring netdev event = 21 for bond_slave_1 [ 468.261336][ T9222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.301174][ T9222] rdma_rxe: ignoring netdev event = 10 for bond_slave_1 [ 468.330177][ T9222] infiniband syz2: set down [ 468.347076][ T9222] rdma_rxe: ignoring netdev event = 9 for bond_slave_1 [ 468.369827][ T9222] rdma_rxe: ignoring netdev event = 8 for bond_slave_1 [ 468.392714][ T9222] bond0 (unregistering): Released all slaves [ 468.706994][ T9239] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1306'. [ 468.773193][ T9239] device syzkaller0 left promiscuous mode [ 468.793400][ T9239] tipc: Resetting bearer [ 469.350079][ T9251] device syzkaller0 entered promiscuous mode [ 469.458905][ T9251] tipc: Resetting bearer [ 470.236528][ T9269] loop3: detected capacity change from 0 to 512 [ 470.252112][ T9269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 470.262687][ T9269] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 471.775239][ T9312] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[9312] [ 472.122566][ T9320] device syzkaller0 entered promiscuous mode [ 472.292996][ T9329] loop3: detected capacity change from 0 to 512 [ 472.347619][ T9329] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 472.357692][ T9329] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 472.693270][ T9348] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 472.944348][ T9357] loop3: detected capacity change from 0 to 8 [ 473.087504][ T9357] SQUASHFS error: zlib decompression failed, data probably corrupt [ 473.276270][ T9357] SQUASHFS error: Failed to read block 0x9b: -5 [ 473.396127][ T9357] SQUASHFS error: Unable to read metadata cache entry [99] [ 473.512308][ T9357] SQUASHFS error: Unable to read inode 0x127 [ 473.992918][ T9368] loop2: detected capacity change from 0 to 512 [ 474.015023][ T26] audit: type=1326 audit(1763485149.242:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.3.1334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95989746c9 code=0x0 [ 474.091617][ T9366] device syzkaller0 left promiscuous mode [ 474.103968][ T9366] tipc: Resetting bearer [ 474.109906][ T9368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 474.120754][ T9368] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 474.391878][ T9392] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[9392] [ 476.817009][ T9422] loop2: detected capacity change from 0 to 512 [ 476.878386][ T9422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.890976][ T9422] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 476.973378][ T9430] loop3: detected capacity change from 0 to 8 [ 477.097876][ T9430] SQUASHFS error: zlib decompression failed, data probably corrupt [ 477.138637][ T9430] SQUASHFS error: Failed to read block 0x9b: -5 [ 477.158805][ T9430] SQUASHFS error: Unable to read metadata cache entry [99] [ 477.178347][ T9430] SQUASHFS error: Unable to read inode 0x127 [ 477.900094][ T26] audit: type=1326 audit(1763485409.126:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.3.1354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95989746c9 code=0x0 [ 478.585814][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1360'. [ 480.900608][ T9488] loop0: detected capacity change from 0 to 64 [ 481.794209][ T9501] loop4: detected capacity change from 0 to 64 [ 482.337189][ T26] audit: type=1800 audit(1763485413.566:60): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1363" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 482.755882][ T9513] loop2: detected capacity change from 0 to 1024 [ 482.872069][ T26] audit: type=1800 audit(1763485414.106:61): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1369" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 483.055541][ T9513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.159354][ T9522] loop0: detected capacity change from 0 to 128 [ 483.249367][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 483.307872][ T9522] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 484.792561][ T9532] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[9532] [ 485.666091][ T9537] binder: BINDER_SET_CONTEXT_MGR already set [ 485.697252][ T9537] binder: 9536:9537 ioctl 4018620d 200000000100 returned -16 [ 486.233505][ T9538] binder: BINDER_SET_CONTEXT_MGR already set [ 486.239512][ T9538] binder: 9536:9538 ioctl 4018620d 2000000002c0 returned -16 [ 486.381538][ T9546] device syzkaller0 entered promiscuous mode [ 486.438301][ T9546] tipc: Resetting bearer [ 488.456525][ T9575] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[9575] [ 488.791820][ T9576] binder: BINDER_SET_CONTEXT_MGR already set [ 488.925610][ T9576] binder: 9573:9576 ioctl 4018620d 200000000100 returned -16 [ 489.236977][ T9582] binder: BINDER_SET_CONTEXT_MGR already set [ 489.243185][ T9582] binder: 9573:9582 ioctl 4018620d 2000000002c0 returned -16 [ 489.803392][ T9586] tipc: Enabling of bearer rejected, failed to enable media [ 490.431937][ T9599] loop3: detected capacity change from 0 to 1024 [ 490.531554][ T9599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.861550][ T9605] tipc: Enabling of bearer rejected, already enabled [ 491.056622][ T9607] binder: BINDER_SET_CONTEXT_MGR already set [ 491.143686][ T9607] binder: 9606:9607 ioctl 4018620d 200000000100 returned -16 [ 491.835595][ T9607] binder: BINDER_SET_CONTEXT_MGR already set [ 491.841805][ T9607] binder: 9606:9607 ioctl 4018620d 2000000002c0 returned -16 [ 492.046958][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 492.249790][ T9632] tipc: Enabling of bearer rejected, failed to enable media [ 493.295439][ T9662] loop3: detected capacity change from 0 to 8 [ 493.501372][ T9662] SQUASHFS error: zlib decompression failed, data probably corrupt [ 493.509408][ T9662] SQUASHFS error: Failed to read block 0x9b: -5 [ 493.516075][ T9662] SQUASHFS error: Unable to read metadata cache entry [99] [ 493.523715][ T9662] SQUASHFS error: Unable to read inode 0x127 [ 494.222942][ T26] audit: type=1326 audit(1763485937.453:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.3.1414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95989746c9 code=0x0 [ 494.803377][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 495.032088][ T9688] loop0: detected capacity change from 0 to 32768 [ 495.217116][ T9698] binder: BINDER_SET_CONTEXT_MGR already set [ 495.349289][ T9698] binder: 9697:9698 ioctl 4018620d 200000000100 returned -16 [ 495.350443][ T9699] tipc: Enabling of bearer rejected, failed to enable media [ 495.731590][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 496.082241][ T21] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 496.231845][ T21] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 496.254526][ T21] usb 1-1: can't read configurations, error -61 [ 497.514852][ T9722] loop0: detected capacity change from 0 to 128 [ 498.115799][ T9722] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 499.178929][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1429'. [ 499.405292][ T9744] loop4: detected capacity change from 0 to 512 [ 499.678991][ T9745] loop3: detected capacity change from 0 to 40427 [ 499.891492][ T9745] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 499.899247][ T9745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 499.950426][ T9745] F2FS-fs (loop3): invalid crc value [ 500.030254][ T9745] F2FS-fs (loop3): Found nat_bits in checkpoint [ 500.083537][ T9744] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 500.097706][ T9745] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 500.104801][ T9745] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 500.167539][ T9744] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.410383][ T9762] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[9762] [ 500.424455][ T26] audit: type=1800 audit(1763486199.510:63): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1432" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 500.444905][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.231649][ C1] ================================================================== [ 501.240236][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 501.247709][ C1] Read of size 2 at addr ffff888060ebec2a by task syz.1.1437/9769 [ 501.251415][ T1422] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.255504][ C1] [ 501.265825][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.266467][ C1] CPU: 1 PID: 9769 Comm: syz.1.1437 Not tainted syzkaller #0 [ 501.273331][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.280021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.280034][ C1] Call Trace: [ 501.280041][ C1] [ 501.280049][ C1] dump_stack_lvl+0x168/0x230 [ 501.280077][ C1] ? show_regs_print_info+0x20/0x20 [ 501.280095][ C1] ? _printk+0xcc/0x110 [ 501.316402][ C1] ? rose_timer_expiry+0x470/0x490 [ 501.321531][ C1] ? load_image+0x3b0/0x3b0 [ 501.326053][ C1] print_address_description+0x60/0x2d0 [ 501.331609][ C1] ? rose_timer_expiry+0x470/0x490 [ 501.336725][ C1] kasan_report+0xdf/0x130 [ 501.341149][ C1] ? rose_timer_expiry+0x470/0x490 [ 501.346266][ C1] rose_timer_expiry+0x470/0x490 [ 501.351205][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 501.356229][ C1] call_timer_fn+0x16c/0x530 [ 501.360823][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 501.365858][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 501.371845][ C1] ? __run_timers+0x7c0/0x7c0 [ 501.376532][ C1] ? rcu_is_watching+0x11/0xa0 [ 501.381307][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 501.386508][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 501.391713][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 501.396767][ C1] __run_timers+0x525/0x7c0 [ 501.401288][ C1] ? detach_timer+0x2b0/0x2b0 [ 501.405961][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 501.411950][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 501.416798][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 501.422089][ C1] run_timer_softirq+0x63/0xf0 [ 501.426859][ C1] handle_softirqs+0x328/0x820 [ 501.431629][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 501.436485][ C1] ? do_softirq+0x200/0x200 [ 501.440993][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 501.446196][ C1] __irq_exit_rcu+0x12f/0x220 [ 501.450876][ C1] ? irq_exit_rcu+0x20/0x20 [ 501.455398][ C1] irq_exit_rcu+0x5/0x20 [ 501.459638][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 501.465272][ C1] [ 501.468199][ C1] [ 501.471125][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 501.477115][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 501.482925][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 de 9e a9 f7 48 89 df e8 a6 73 aa f7 e8 41 0d cb f7 fb bf 01 00 00 00 76 95 9e f7 65 8b 05 07 93 4f 76 85 c0 74 02 5b c3 e8 b4 9d 4d [ 501.502531][ C1] RSP: 0018:ffffc900031df490 EFLAGS: 00000286 [ 501.508599][ C1] RAX: 397fd2750384e400 RBX: ffff888025f60990 RCX: 397fd2750384e400 [ 501.516572][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 [ 501.524544][ C1] RBP: ffffc900031df600 R08: dffffc0000000000 R09: fffffbfff1ff7c1f [ 501.532522][ C1] R10: fffffbfff1ff7c1f R11: 1ffffffff1ff7c1e R12: ffffc900031df540 [ 501.540493][ C1] R13: 0000000000000001 R14: 0000000000000cc0 R15: ffffea00014b5600 [ 501.548480][ C1] shmem_add_to_page_cache+0xff4/0x14b0 [ 501.554052][ C1] ? put_page+0x200/0x200 [ 501.558392][ C1] ? mark_lock+0x94/0x320 [ 501.562732][ C1] ? verify_lock_unused+0x140/0x140 [ 501.567935][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 501.572966][ C1] shmem_getpage_gfp+0x1793/0x2d40 [ 501.578112][ C1] shmem_fault+0x1a9/0x520 [ 501.582545][ C1] ? shmem_fallocate+0xe20/0xe20 [ 501.587489][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 501.592596][ C1] ? count_memcg_event_mm+0x311/0x360 [ 501.597979][ C1] __do_fault+0x141/0x330 [ 501.602317][ C1] handle_mm_fault+0x2946/0x43b0 [ 501.607268][ C1] ? get_page+0xe0/0xe0 [ 501.611438][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 501.616569][ C1] __get_user_pages+0x93e/0x11c0 [ 501.621536][ C1] ? populate_vma_page_range+0x290/0x290 [ 501.623929][ T9773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1439'. [ 501.627173][ C1] ? read_lock_is_recursive+0x10/0x10 [ 501.627210][ C1] populate_vma_page_range+0x213/0x290 [ 501.647018][ C1] __mm_populate+0x26f/0x3a0 [ 501.651632][ C1] ? check_vma_flags+0x480/0x480 [ 501.656574][ C1] ? preempt_count_add+0x8d/0x190 [ 501.661604][ C1] ? up_write+0x1bb/0x420 [ 501.665950][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 501.670546][ C1] ? account_locked_vm+0xe0/0xe0 [ 501.675488][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 501.679786][ T9773] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1439'. [ 501.680526][ C1] ksys_mmap_pgoff+0x140/0x780 [ 501.694192][ C1] ? mmap_region+0x1660/0x1660 [ 501.698980][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 501.704195][ C1] do_syscall_64+0x4c/0xa0 [ 501.708613][ C1] ? clear_bhb_loop+0x30/0x80 [ 501.713287][ C1] ? clear_bhb_loop+0x30/0x80 [ 501.717967][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.723856][ C1] RIP: 0033:0x7f1fbde1e6c9 [ 501.728269][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.747877][ C1] RSP: 002b:00007f1fbc085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 501.756312][ C1] RAX: ffffffffffffffda RBX: 00007f1fbe074fa0 RCX: 00007f1fbde1e6c9 [ 501.764291][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 501.772273][ C1] RBP: 00007f1fbdea0f91 R08: ffffffffffffffff R09: 0000000000000000 [ 501.780252][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 501.788223][ C1] R13: 00007f1fbe075038 R14: 00007f1fbe074fa0 R15: 00007ffce1d878b8 [ 501.796218][ C1] [ 501.799249][ C1] [ 501.801569][ C1] Allocated by task 6813: [ 501.805887][ C1] __kasan_kmalloc+0xb5/0xf0 [ 501.810475][ C1] rose_add_node+0x227/0xdb0 [ 501.815066][ C1] rose_rt_ioctl+0x9db/0xe20 [ 501.819659][ C1] rose_ioctl+0x27a/0x790 [ 501.823985][ C1] sock_do_ioctl+0xd3/0x2f0 [ 501.828487][ C1] sock_ioctl+0x4ed/0x6e0 [ 501.832898][ C1] __se_sys_ioctl+0xfa/0x170 [ 501.837479][ C1] do_syscall_64+0x4c/0xa0 [ 501.841879][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.847762][ C1] [ 501.850072][ C1] Freed by task 9556: [ 501.854033][ C1] kasan_set_track+0x4b/0x70 [ 501.858605][ C1] kasan_set_free_info+0x1f/0x40 [ 501.863523][ C1] ____kasan_slab_free+0xd5/0x110 [ 501.868527][ C1] slab_free_freelist_hook+0xea/0x170 [ 501.873877][ C1] kfree+0xef/0x2a0 [ 501.877663][ C1] rose_rt_device_down+0x4e2/0x530 [ 501.882755][ C1] rose_device_event+0x5ec/0x680 [ 501.887671][ C1] raw_notifier_call_chain+0xcb/0x160 [ 501.893036][ C1] __dev_notify_flags+0x178/0x2d0 [ 501.898041][ C1] dev_change_flags+0xe3/0x1a0 [ 501.902788][ C1] dev_ifsioc+0x147/0xe70 [ 501.907095][ C1] dev_ioctl+0x55f/0xe50 [ 501.911313][ C1] sock_do_ioctl+0x222/0x2f0 [ 501.915885][ C1] sock_ioctl+0x4ed/0x6e0 [ 501.920195][ C1] __se_sys_ioctl+0xfa/0x170 [ 501.924765][ C1] do_syscall_64+0x4c/0xa0 [ 501.929158][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.935032][ C1] [ 501.937334][ C1] Last potentially related work creation: [ 501.943027][ C1] kasan_save_stack+0x35/0x60 [ 501.947683][ C1] kasan_record_aux_stack+0xb8/0x100 [ 501.952947][ C1] insert_work+0x54/0x3d0 [ 501.957253][ C1] __queue_work+0x9c5/0xd50 [ 501.961733][ C1] call_timer_fn+0x16c/0x530 [ 501.966303][ C1] __run_timers+0x550/0x7c0 [ 501.970787][ C1] run_timer_softirq+0x63/0xf0 [ 501.975529][ C1] handle_softirqs+0x328/0x820 [ 501.980274][ C1] __irq_exit_rcu+0x12f/0x220 [ 501.984930][ C1] irq_exit_rcu+0x5/0x20 [ 501.989150][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 501.994761][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 502.000721][ C1] [ 502.003022][ C1] The buggy address belongs to the object at ffff888060ebec00 [ 502.003022][ C1] which belongs to the cache kmalloc-512 of size 512 [ 502.017070][ C1] The buggy address is located 42 bytes inside of [ 502.017070][ C1] 512-byte region [ffff888060ebec00, ffff888060ebee00) [ 502.030237][ C1] The buggy address belongs to the page: [ 502.035877][ C1] page:ffffea000183af00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60ebc [ 502.046011][ C1] head:ffffea000183af00 order:2 compound_mapcount:0 compound_pincount:0 [ 502.054389][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 502.062355][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 502.070916][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 502.079486][ C1] page dumped because: kasan: bad access detected [ 502.085885][ C1] page_owner tracks the page as allocated [ 502.091575][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4264, ts 59799826444, free_ts 11564400279 [ 502.110042][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 502.115572][ C1] __alloc_pages+0x1e1/0x470 [ 502.120142][ C1] new_slab+0xc0/0x4b0 [ 502.124193][ C1] ___slab_alloc+0x81e/0xdf0 [ 502.128761][ C1] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 502.134556][ C1] __alloc_skb+0x22c/0x750 [ 502.138964][ C1] arp_create+0x127/0x900 [ 502.143279][ C1] batadv_bla_send_claim+0x14c/0xb30 [ 502.148551][ C1] batadv_bla_get_backbone_gw+0xa6d/0xe70 [ 502.154256][ C1] batadv_bla_tx+0xb52/0x1280 [ 502.158916][ C1] batadv_interface_tx+0x50f/0x1410 [ 502.164094][ C1] dev_hard_start_xmit+0x2a5/0x7e0 [ 502.169187][ C1] __dev_queue_xmit+0x19df/0x2ed0 [ 502.174198][ C1] ip6_finish_output2+0x1035/0x1500 [ 502.179390][ C1] NF_HOOK+0x15f/0x430 [ 502.183441][ C1] mld_sendpack+0x713/0xc30 [ 502.188021][ C1] page last free stack trace: [ 502.192674][ C1] free_unref_page_prepare+0x637/0x6c0 [ 502.198121][ C1] free_unref_page+0x94/0x280 [ 502.202780][ C1] free_contig_range+0x96/0xf0 [ 502.207524][ C1] destroy_args+0x100/0xa20 [ 502.212011][ C1] debug_vm_pgtable+0x318/0x370 [ 502.216850][ C1] do_one_initcall+0x1ee/0x680 [ 502.221591][ C1] do_initcall_level+0x137/0x1f0 [ 502.226596][ C1] do_initcalls+0x4b/0x90 [ 502.230904][ C1] kernel_init_freeable+0x3ce/0x560 [ 502.236083][ C1] kernel_init+0x19/0x1b0 [ 502.240390][ C1] ret_from_fork+0x1f/0x30 [ 502.244790][ C1] [ 502.247091][ C1] Memory state around the buggy address: [ 502.252697][ C1] ffff888060ebeb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.260735][ C1] ffff888060ebeb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.268774][ C1] >ffff888060ebec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.276811][ C1] ^ [ 502.282165][ C1] ffff888060ebec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.290204][ C1] ffff888060ebed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.298241][ C1] ================================================================== [ 502.306275][ C1] Disabling lock debugging due to kernel taint [ 502.312532][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 502.319721][ C1] CPU: 1 PID: 9769 Comm: syz.1.1437 Tainted: G B syzkaller #0 [ 502.328472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.338527][ C1] Call Trace: [ 502.341805][ C1] [ 502.344636][ C1] dump_stack_lvl+0x168/0x230 [ 502.349315][ C1] ? show_regs_print_info+0x20/0x20 [ 502.354516][ C1] ? load_image+0x3b0/0x3b0 [ 502.359029][ C1] panic+0x2c9/0x7f0 [ 502.362932][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 502.367442][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 502.373339][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 502.379231][ C1] ? _raw_spin_unlock+0x40/0x40 [ 502.384079][ C1] ? print_memory_metadata+0x314/0x400 [ 502.389540][ C1] ? rose_timer_expiry+0x470/0x490 [ 502.394654][ C1] check_panic_on_warn+0x80/0xa0 [ 502.399584][ C1] ? rose_timer_expiry+0x470/0x490 [ 502.404696][ C1] end_report+0x6d/0xf0 [ 502.408854][ C1] kasan_report+0x102/0x130 [ 502.413355][ C1] ? rose_timer_expiry+0x470/0x490 [ 502.418467][ C1] rose_timer_expiry+0x470/0x490 [ 502.423401][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 502.428594][ C1] call_timer_fn+0x16c/0x530 [ 502.433192][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 502.438211][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 502.444189][ C1] ? __run_timers+0x7c0/0x7c0 [ 502.448867][ C1] ? rcu_is_watching+0x11/0xa0 [ 502.453625][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 502.458818][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 502.464014][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 502.469034][ C1] __run_timers+0x525/0x7c0 [ 502.473545][ C1] ? detach_timer+0x2b0/0x2b0 [ 502.478220][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 502.484201][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 502.489051][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 502.494336][ C1] run_timer_softirq+0x63/0xf0 [ 502.499100][ C1] handle_softirqs+0x328/0x820 [ 502.503857][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 502.508756][ C1] ? do_softirq+0x200/0x200 [ 502.513255][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 502.518462][ C1] __irq_exit_rcu+0x12f/0x220 [ 502.523134][ C1] ? irq_exit_rcu+0x20/0x20 [ 502.527640][ C1] irq_exit_rcu+0x5/0x20 [ 502.531880][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 502.537519][ C1] [ 502.540444][ C1] [ 502.543365][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 502.549344][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 502.555148][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 de 9e a9 f7 48 89 df e8 a6 73 aa f7 e8 41 0d cb f7 fb bf 01 00 00 00 76 95 9e f7 65 8b 05 07 93 4f 76 85 c0 74 02 5b c3 e8 b4 9d 4d [ 502.574759][ C1] RSP: 0018:ffffc900031df490 EFLAGS: 00000286 [ 502.580834][ C1] RAX: 397fd2750384e400 RBX: ffff888025f60990 RCX: 397fd2750384e400 [ 502.588810][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 [ 502.596791][ C1] RBP: ffffc900031df600 R08: dffffc0000000000 R09: fffffbfff1ff7c1f [ 502.604766][ C1] R10: fffffbfff1ff7c1f R11: 1ffffffff1ff7c1e R12: ffffc900031df540 [ 502.612738][ C1] R13: 0000000000000001 R14: 0000000000000cc0 R15: ffffea00014b5600 [ 502.620715][ C1] shmem_add_to_page_cache+0xff4/0x14b0 [ 502.626279][ C1] ? put_page+0x200/0x200 [ 502.630619][ C1] ? mark_lock+0x94/0x320 [ 502.634953][ C1] ? verify_lock_unused+0x140/0x140 [ 502.640156][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 502.645199][ C1] shmem_getpage_gfp+0x1793/0x2d40 [ 502.650333][ C1] shmem_fault+0x1a9/0x520 [ 502.654756][ C1] ? shmem_fallocate+0xe20/0xe20 [ 502.659689][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 502.664795][ C1] ? count_memcg_event_mm+0x311/0x360 [ 502.670176][ C1] __do_fault+0x141/0x330 [ 502.674509][ C1] handle_mm_fault+0x2946/0x43b0 [ 502.679456][ C1] ? get_page+0xe0/0xe0 [ 502.683636][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 502.688756][ C1] __get_user_pages+0x93e/0x11c0 [ 502.693696][ C1] ? populate_vma_page_range+0x290/0x290 [ 502.699329][ C1] ? read_lock_is_recursive+0x10/0x10 [ 502.704714][ C1] populate_vma_page_range+0x213/0x290 [ 502.710178][ C1] __mm_populate+0x26f/0x3a0 [ 502.714776][ C1] ? check_vma_flags+0x480/0x480 [ 502.719723][ C1] ? preempt_count_add+0x8d/0x190 [ 502.724750][ C1] ? up_write+0x1bb/0x420 [ 502.729089][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 502.733681][ C1] ? account_locked_vm+0xe0/0xe0 [ 502.738616][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 502.743641][ C1] ksys_mmap_pgoff+0x140/0x780 [ 502.748410][ C1] ? mmap_region+0x1660/0x1660 [ 502.753175][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 502.758371][ C1] do_syscall_64+0x4c/0xa0 [ 502.762783][ C1] ? clear_bhb_loop+0x30/0x80 [ 502.767463][ C1] ? clear_bhb_loop+0x30/0x80 [ 502.772147][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 502.778043][ C1] RIP: 0033:0x7f1fbde1e6c9 [ 502.782490][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.802103][ C1] RSP: 002b:00007f1fbc085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 502.810524][ C1] RAX: ffffffffffffffda RBX: 00007f1fbe074fa0 RCX: 00007f1fbde1e6c9 [ 502.818500][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 502.826470][ C1] RBP: 00007f1fbdea0f91 R08: ffffffffffffffff R09: 0000000000000000 [ 502.834438][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 502.842412][ C1] R13: 00007f1fbe075038 R14: 00007f1fbe074fa0 R15: 00007ffce1d878b8 [ 502.850388][ C1] [ 502.853611][ C1] Kernel Offset: disabled [ 502.857933][ C1] Rebooting in 86400 seconds..