last executing test programs: 3m27.397358392s ago: executing program 3 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x44080) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = socket$inet6(0xa, 0x80000, 0x8) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r8, r12, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0x1a4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c1, 0x80, 0x2, 0x2af, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63bd, 0x400, 0x9, 0x502, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x6, 0x3, 0x219, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x40, 0x2, 0x40021b, 0x0, r8}}], 0x4, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x9, 0x0, r3}) syz_ublk_setup_io_uring(0x171a, &(0x7f00000003c0)={0x0, 0xbe62, 0x0, 0x2, 0x1c2}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.pending_reads\x00', 0x206001, 0x2) 3m26.139473131s ago: executing program 3 (id=85): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/116, 0x74) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95a", 0x4}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc9785d1e005960720b409eea239ed139f0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 3m25.720718361s ago: executing program 3 (id=87): syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x3, 0x3, 0x7ff, 0x85, 0x5, 0x1400000000000000, 0x3ff, 0x5, 0x5}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000009000000731109000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0xb3, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 3m21.466841179s ago: executing program 3 (id=105): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000280)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@acl}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) creat(0x0, 0xdafbe5d6891b6c4) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m20.837383674s ago: executing program 3 (id=107): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1eb14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m19.957824875s ago: executing program 3 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0xf8, 0x0, 0x1, 0x7}, 0x14) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x9000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m19.461711656s ago: executing program 32 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0xf8, 0x0, 0x1, 0x7}, 0x14) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x9000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.686115635s ago: executing program 5 (id=545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 1m6.388790352s ago: executing program 5 (id=549): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r3, 0x20, &(0x7f0000000140)={0x25, 0xe, 0x1ff}, 0x0) 1m5.381798045s ago: executing program 5 (id=550): futimesat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) inotify_init() r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0xea0a5275367c6a92, 0x10f) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getcwd(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 1m4.190298573s ago: executing program 5 (id=559): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) fchown(r0, 0x0, 0xee01) syz_clone(0x80b44440, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc1042, 0x0) fchown(r0, 0x0, 0x0) 1m3.077158729s ago: executing program 5 (id=562): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@usrquota}, {@nodiscard}, {@sysvgroups}, {@nomblk_io_submit}, {@init_itable}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m2.669600888s ago: executing program 5 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chdir(&(0x7f0000000040)='./file0\x00') r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) 1m2.467606013s ago: executing program 33 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chdir(&(0x7f0000000040)='./file0\x00') r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) 17.245830198s ago: executing program 0 (id=730): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0\x00', 0xc08, &(0x7f00000001c0)=ANY=[], 0x3, 0x242, &(0x7f0000000380)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000028000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='/dev/kvm\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(0xffffffffffffffff, 0x0, 0x0) 12.933380219s ago: executing program 0 (id=739): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fallocate(r4, 0x1, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) 10.286041841s ago: executing program 2 (id=745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10.024110357s ago: executing program 1 (id=747): sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 10.004479227s ago: executing program 2 (id=748): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) symlinkat(&(0x7f0000002300)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) 9.86977969s ago: executing program 6 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000002400)=""/4108, 0x100c}, {&(0x7f0000000180)=""/54, 0x36}], 0x2, 0x0, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r4, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 8.726728767s ago: executing program 6 (id=750): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 8.472597623s ago: executing program 2 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xffff, 0xd4, 0x0, 0x400c, 0x5, "00009be7b7170000000090684aeabe4d665b00", 0x70000000, 0x1ff}) read(r2, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(r1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 7.417856418s ago: executing program 2 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="671723c202002c", 0x20}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="000000b814", 0x5}, {&(0x7f0000000340)="33c4", 0x2}], 0x4}, 0x0) 7.3183388s ago: executing program 1 (id=753): bpf$ENABLE_STATS(0x20, 0x0, 0x0) eventfd2(0x53, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.046599296s ago: executing program 1 (id=754): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000180)={0x7}) fsmount(r3, 0x0, 0x1) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) 6.340297433s ago: executing program 0 (id=755): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x0) socket(0x18, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 6.081863769s ago: executing program 4 (id=756): get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000600)={0x8, 0x41}) 5.949927452s ago: executing program 6 (id=757): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) 5.879708673s ago: executing program 0 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 5.776339376s ago: executing program 4 (id=759): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, 0x0) r5 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.770313506s ago: executing program 6 (id=760): syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff00070581024000000705010240000009040001"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000600)={0x3, 0x1, 0x0, 0x13, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) accept4(r1, &(0x7f0000000040)=@rc, &(0x7f00000000c0)=0x80, 0x80000) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, 'rfdno'}, {0x20, '\xf7'}, {0x20, '/dev/dvb/adapter#/demux#\x00'}, {}, {0x20, '@.'}, {0x20, 'attr\x00'}, {0x20, '}{.'}, {0x20, 'wfdno'}], 0xa, "916bfa045f35906ed5327f89f431da78d2b8f83d5484ac8d5118660b333ed8f40967640b52231742747a43d5380311f3e1774bc9e8e6095f44875a4466c12f293e118473c55b35fb02925721a949e59e35809814f98b12ff39fc7c19324393f1c520eb593b750be19a09e6379c8fdc7798c73a3b79ce7acff985af0282f130e5fc97322e6962f8a50d5a70c8d777eee1b060d92c4ec37b33a1b5e18b54b6864e41b02a7989f96875f7cc2544642e80a0c90aed29e9be1aa40c9844fe7f3ff73fceec83d7a0dd91b6d6645a58ea290cc2"}, 0x115) 5.493809523s ago: executing program 4 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000002400)=""/4108, 0x100c}, {&(0x7f0000000180)=""/54, 0x36}], 0x2, 0x0, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r4, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 5.464822063s ago: executing program 0 (id=762): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) 5.408158145s ago: executing program 2 (id=763): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x1, 0x1) bind$xdp(r0, 0x0, 0x0) 4.464780747s ago: executing program 4 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuCiJP4kw6MU1jCGRG4zmb3pn7Xt+7M2SSTW5SFL7e/hxZ1or2fuzH91bsRjumzgIA2CYXKcW3VGh6LwBAPVZ4//9R85YAgA17/ebty6eDwcFhnmcR52fj4XhY/C3yz18MDh7lv+xWs87H4+GNy/zjfP6zwyS/EzfL/JNifn6Z7kbEsBsP7xf5Se7Zq0H++/xevN9w7QAAAAAAAAAAAAAAAAAAAAAA0JS7kU8t7O+ztzef75f54mimP9Bc/55O3OmUh1V7oHRaR1EAAAAAAAAAAAAAAAAAAADwjzk++fTx3Wj04agKehExe6azYMz1Qav8xysNbj5ox3rT+2WZayzaKi/RZgvsL765qwTR+VvuzrpBXsNa/aWXN6VJsPhVMG2Lce30bkQsX/3B4bqbv0gpjb7cOzo+ibR0cPWM6NX6RAIAAAAAAAAAAAAAAAAAgP/XzLe+r8ia2BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANKD6/f9JcPXM0uA0Im7FHwdP19qJrNFaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2F4/AwAA//856SI7") r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r5, 0x8800000) sendfile(0xffffffffffffffff, r5, 0x0, 0x558410e9) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='foo int x; bar int', 0x12) clock_adjtime(0x0, &(0x7f00000004c0)={0x930b, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x400}) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.361734149s ago: executing program 2 (id=765): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001640), &(0x7f0000001680)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_usb_connect$uac2(0x5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x0, 0x5}) io_setup(0x8, &(0x7f0000000280)) rseq(0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 4.32810755s ago: executing program 0 (id=766): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0xe) fallocate(r4, 0x1, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010028bd0300fcdbdf250a1d0afe05bfa0936b7f"], 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000050) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x4b9) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="2c00000040000100fcff0700040000000100000004004880080001800400829c0c0002000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x40007}, 0x8) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) 3.117830958s ago: executing program 1 (id=767): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 2.765859036s ago: executing program 1 (id=768): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xca6e, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10b300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioperm(0x1, 0xb2be, 0x163f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x28048048) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl(0xffffffffffffffff, 0x81, 0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x8000, 0x100001, 0x214}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x200, 0x4003c003, 0x2b8, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x271, 0x0, r3}}], 0x1, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000080)={{0xb, 0x209}, 0x20}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000001200)=0x8a4, 0x4) 1.172192643s ago: executing program 4 (id=769): get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000600)={0x8, 0x41}) 455.68627ms ago: executing program 6 (id=770): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) 407.649481ms ago: executing program 1 (id=771): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000440)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') socket$kcm(0x29, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0xffffffffffffffff) 42.85231ms ago: executing program 4 (id=772): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 0s ago: executing program 6 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002780)=@vmx={0x100, 0x0, 0x2080, {0xe000, 0xfec00000, {0x2}, 0x1, 0x8000}, {"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", "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"}}) kernel console output (not intermixed with test programs): 60: missing EA_INODE flag [ 115.896651][ T4990] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.160: error while reading EA inode 12 err=-117 [ 116.389606][ T5007] Mass Storage Function, version: 2009/09/11 [ 116.395664][ T5007] LUN: removable file: (no medium) [ 117.370347][ T4990] EXT4-fs (loop0): 1 orphan inode deleted [ 117.376163][ T4990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.102168][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 120.223912][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.249448][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.263532][ T4781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.277047][ T5020] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 120.503997][ T5019] loop2: detected capacity change from 0 to 512 [ 120.609156][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.802320][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 120.824033][ T7] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 120.859383][ T7] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 120.901353][ T5041] loop0: detected capacity change from 0 to 1024 [ 120.923796][ T7] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 120.924797][ T5019] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.027565][ T5019] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 121.130210][ T5041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.156033][ T7] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 121.167825][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.176863][ T7] usb 5-1: Product: syz [ 121.181339][ T7] usb 5-1: Manufacturer: syz [ 121.185928][ T7] usb 5-1: SerialNumber: syz [ 121.212334][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 121.225273][ T7] imon 5-1:155.0: unable to initialize intf0, err -19 [ 121.235509][ T7] imon:imon_probe: failed to initialize context! [ 121.244844][ T7] imon 5-1:155.0: unable to register, err -19 [ 121.291608][ T5019] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 121.303776][ T5019] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.164: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.459481][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 121.482384][ T5019] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.164: couldn't read orphan inode 13 (err -117) [ 121.674086][ T5056] loop0: detected capacity change from 0 to 256 [ 121.681964][ T5019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.746833][ T5056] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 121.895066][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.947092][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.037621][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.061588][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.073817][ T5019] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.164: deleted inode referenced: 12 [ 122.106666][ T4781] device veth0_vlan entered promiscuous mode [ 122.131238][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.183120][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.245614][ T4781] device veth1_vlan entered promiscuous mode [ 122.274776][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.320622][ T5019] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.164: deleted inode referenced: 12 [ 122.407253][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.426873][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.604523][ T4781] device veth0_macvtap entered promiscuous mode [ 122.647848][ T5073] Mass Storage Function, version: 2009/09/11 [ 122.654107][ T5073] LUN: removable file: (no medium) [ 122.665057][ T4781] device veth1_macvtap entered promiscuous mode [ 122.792595][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.929802][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.019182][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.099301][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.177136][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.239544][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.280738][ T4781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.335582][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.344909][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.389813][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.446628][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.500356][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.549137][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.579076][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.615926][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.666694][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.738769][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.795742][ T4781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.834205][ T4375] usb 5-1: USB disconnect, device number 3 [ 123.851395][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.880637][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.913756][ T4781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.943331][ T4781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.972922][ T4781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051274][ T4781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.286430][ T5086] loop4: detected capacity change from 0 to 256 [ 125.443492][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 125.669516][ T4922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.715784][ T4922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.793581][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.840910][ T4922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.919220][ T4922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.977125][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.330971][ T5091] netlink: 'syz.4.176': attribute type 2 has an invalid length. [ 126.594722][ T3654] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.669248][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.789178][ T3654] usb 6-1: Using ep0 maxpacket: 32 [ 126.800940][ T3654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.849928][ T3654] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.874922][ T3654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.887618][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 126.908054][ T27] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 126.951764][ T3654] usb 6-1: config 0 descriptor?? [ 126.959141][ T27] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 126.984388][ T3654] hub 6-1:0.0: USB hub found [ 127.012190][ T27] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 127.061141][ T27] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 127.111321][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.183591][ T3654] hub 6-1:0.0: 1 port detected [ 127.204093][ T27] usb 5-1: Product: syz [ 127.246345][ T27] usb 5-1: Manufacturer: syz [ 127.287330][ T27] usb 5-1: SerialNumber: syz [ 127.363332][ T27] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 127.387323][ T27] imon 5-1:155.0: unable to initialize intf0, err -19 [ 127.403056][ T3654] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 127.415574][ T5115] loop2: detected capacity change from 0 to 256 [ 127.422258][ T3654] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 127.430156][ T27] imon:imon_probe: failed to initialize context! [ 127.436508][ T27] imon 5-1:155.0: unable to register, err -19 [ 127.463915][ T3654] usbhid 6-1:0.0: can't add hid device: -71 [ 127.510085][ T3654] usbhid: probe of 6-1:0.0 failed with error -71 [ 127.547478][ T127] usb 5-1: USB disconnect, device number 4 [ 127.592038][ T5115] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.599891][ T3654] usb 6-1: USB disconnect, device number 2 [ 127.736287][ T5115] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 127.843775][ T5115] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 128.003762][ T5115] exFAT-fs (loop2): failed to load alloc-bitmap [ 128.099388][ T5115] exFAT-fs (loop2): failed to recognize exfat type [ 128.279495][ T5126] device syzkaller0 entered promiscuous mode [ 130.148020][ T5142] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 130.479080][ T3654] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.779304][ T3654] usb 5-1: Using ep0 maxpacket: 32 [ 130.808719][ T3654] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 130.875611][ T5154] loop0: detected capacity change from 0 to 256 [ 130.973630][ T3654] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 130.984649][ T3654] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 132.178797][ T3654] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 132.251511][ T3654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.316214][ T3654] usb 5-1: Product: syz [ 132.378458][ T3654] usb 5-1: Manufacturer: syz [ 132.408902][ T3654] usb 5-1: SerialNumber: syz [ 132.486867][ T3654] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 132.596867][ T3654] imon 5-1:155.0: unable to initialize intf0, err -19 [ 132.607267][ T5157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.186'. [ 132.682391][ T3654] imon:imon_probe: failed to initialize context! [ 132.711013][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.717433][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.755936][ T3654] imon 5-1:155.0: unable to register, err -19 [ 132.849247][ T7] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 132.998007][ T5171] binder: 5170:5171 unknown command 1074553619 [ 133.014480][ T5171] binder: 5170:5171 ioctl c0306201 200000000040 returned -22 [ 133.060809][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60296, setting to 64 [ 133.093252][ T5173] netlink: 'syz.0.190': attribute type 2 has an invalid length. [ 133.126366][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 133.144147][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.185774][ T7] usb 6-1: config 0 descriptor?? [ 133.206880][ T5160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 133.589150][ T3654] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.637407][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x2 [ 133.744251][ T5191] device syzkaller0 entered promiscuous mode [ 133.789211][ T3654] usb 1-1: Using ep0 maxpacket: 32 [ 133.798337][ T3654] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 133.807721][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x1 [ 133.844925][ T3654] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 133.847570][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 133.875942][ T3654] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 133.916731][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 133.924535][ T3654] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 133.967425][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 133.973202][ T3654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.014437][ T7] logitech-djreceiver 0003:046D:C53A.0002: ignoring exceeding usage max [ 134.014499][ T3654] usb 1-1: Product: syz [ 134.044651][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x5 [ 134.068070][ T3654] usb 1-1: Manufacturer: syz [ 134.078210][ T7] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x6 [ 134.086616][ T3654] usb 1-1: SerialNumber: syz [ 134.105914][ T3654] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 134.141312][ T3654] imon 1-1:155.0: unable to initialize intf0, err -19 [ 134.173849][ T7] usb 6-1: USB disconnect, device number 3 [ 134.183236][ T3654] imon:imon_probe: failed to initialize context! [ 134.212987][ T3654] imon 1-1:155.0: unable to register, err -19 [ 134.303154][ T27] usb 1-1: USB disconnect, device number 3 [ 134.679433][ T4316] usb 5-1: USB disconnect, device number 5 [ 134.749159][ T3654] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.058849][ T3654] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.076290][ T3654] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 135.119295][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.204218][ T3654] usb 2-1: config 0 descriptor?? [ 135.732726][ T5218] loop0: detected capacity change from 0 to 256 [ 135.802546][ T3654] kye 0003:0458:0138.0003: unknown main item tag 0x6 [ 135.834248][ T3654] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 135.849219][ T3654] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 135.875775][ T3654] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 135.900522][ T3654] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 135.953876][ T3654] kye 0003:0458:0138.0003: item fetching failed at offset 12/38 [ 135.962446][ T3654] kye 0003:0458:0138.0003: parse failed [ 135.978168][ T3654] kye: probe of 0003:0458:0138.0003 failed with error -22 [ 136.038354][ T3654] usb 2-1: USB disconnect, device number 2 [ 136.430744][ T5233] loop0: detected capacity change from 0 to 512 [ 136.538546][ T5233] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.203: iget: bad i_size value: 38620345925642 [ 136.581936][ T5233] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.203: couldn't read orphan inode 15 (err -117) [ 136.671127][ T5233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.829828][ T5240] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.203: bg 0: block 5: invalid block bitmap [ 136.940921][ T5240] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 200 with error 28 [ 137.019373][ T5240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.019373][ T5240] [ 137.038281][ T5245] loop2: detected capacity change from 0 to 16 [ 137.085128][ T5240] EXT4-fs (loop0): Total free blocks count 0 [ 137.112162][ T5240] EXT4-fs (loop0): Free/Dirty block details [ 137.118188][ T5240] EXT4-fs (loop0): free_blocks=0 [ 137.167849][ T5240] EXT4-fs (loop0): dirty_blocks=204 [ 137.187886][ T5240] EXT4-fs (loop0): Block reservation details [ 137.229285][ T5240] EXT4-fs (loop0): i_reserved_data_blocks=204 [ 137.264665][ T5245] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.382270][ T5252] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 137.428859][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 137.573502][ T5245] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 137.650404][ T5245] syz.2.204: attempt to access beyond end of device [ 137.650404][ T5245] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 137.686689][ T5257] netlink: 'syz.0.209': attribute type 2 has an invalid length. [ 137.777212][ T5232] loop4: detected capacity change from 0 to 40427 [ 137.843655][ T5232] F2FS-fs (loop4): build fault injection attr: rate: 174, type: 0x3ffff [ 137.875532][ T5245] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 137.936792][ T5245] syz.2.204: attempt to access beyond end of device [ 137.936792][ T5245] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 137.999170][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.083757][ T5245] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 138.111579][ T3654] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.189188][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 138.197417][ T26] audit: type=1800 audit(1788912870.630:5): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 138.218798][ T4317] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 138.249168][ T4317] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 138.291143][ T4317] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 138.311460][ T3654] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.332972][ T3654] usb 2-1: config 189 has an invalid interface number: 37 but max is 0 [ 138.342753][ T4317] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 138.359077][ T127] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 138.372622][ T3654] usb 2-1: config 189 has no interface number 0 [ 138.382320][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.400623][ T3654] usb 2-1: config 189 interface 37 has no altsetting 0 [ 138.408291][ T4317] usb 1-1: Product: syz [ 138.416696][ T4317] usb 1-1: Manufacturer: syz [ 138.433184][ T3654] usb 2-1: New USB device found, idVendor=1901, idProduct=0006, bcdDevice=1a.7c [ 138.444594][ T4317] usb 1-1: SerialNumber: syz [ 138.451767][ T3654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.477230][ T4317] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 138.491084][ T3654] usb 2-1: Product: syz [ 138.505550][ T4317] imon 1-1:155.0: unable to initialize intf0, err -19 [ 138.518431][ T3654] usb 2-1: Manufacturer: syz [ 138.537878][ T3654] usb 2-1: SerialNumber: syz [ 138.543784][ T4317] imon:imon_probe: failed to initialize context! [ 138.577563][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.599712][ T4317] imon 1-1:155.0: unable to register, err -19 [ 138.616409][ T127] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 138.639236][ T127] usb 5-1: can't read configurations, error -71 [ 138.679046][ T27] usb 1-1: USB disconnect, device number 4 [ 138.834642][ T3654] cdc_acm 2-1:189.37: More than one union descriptor, skipping ... [ 138.863557][ T3654] usb 2-1: USB disconnect, device number 3 [ 139.049114][ T4316] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.239170][ T4316] usb 6-1: Using ep0 maxpacket: 16 [ 139.260347][ T4316] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.317668][ T4316] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.334162][ T4316] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 139.403089][ T4316] usb 6-1: config 0 interface 0 has no altsetting 0 [ 139.461378][ T4316] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 139.481903][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.523776][ T5289] loop0: detected capacity change from 0 to 8192 [ 139.541517][ T4316] usb 6-1: config 0 descriptor?? [ 139.586012][ T26] audit: type=1804 audit(1788912872.020:6): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.216" name="/newroot/53/bus/bus" dev="loop0" ino=1048608 res=1 errno=0 [ 139.695732][ T26] audit: type=1800 audit(1788912872.020:7): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.216" name="bus" dev="loop0" ino=1048608 res=0 errno=0 [ 140.034945][ T4316] hid (null): report_id 34376 is invalid [ 140.040871][ T4316] hid (null): invalid report_size 29285 [ 140.046574][ T4316] hid (null): invalid report_size 29285 [ 140.052289][ T4316] hid (null): report_id 34376 is invalid [ 140.057984][ T4316] hid (null): report_id 0 is invalid [ 140.063456][ T4316] hid (null): global environment stack underflow [ 140.069882][ T4316] hid (null): unknown global tag 0xc [ 140.075325][ T4316] hid (null): unknown global tag 0xe [ 140.097630][ T4316] hid (null): unknown global tag 0xc [ 140.127311][ T4316] hid (null): unknown global tag 0xc [ 140.167003][ T5302] loop0: detected capacity change from 0 to 256 [ 140.799603][ T4316] usb 6-1: USB disconnect, device number 4 [ 141.695150][ T5318] loop5: detected capacity change from 0 to 256 [ 142.135975][ T5324] loop0: detected capacity change from 0 to 256 [ 142.325404][ T5327] loop5: detected capacity change from 0 to 4096 [ 142.342340][ T5327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.351302][ T5327] EXT4-fs (loop5): Test dummy encryption mode enabled [ 142.382121][ T5327] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=285ec018, mo2=0003] [ 142.391002][ T5327] System zones: 0-5 [ 142.413454][ T5327] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 143.080778][ T5334] netlink: 'syz.2.226': attribute type 2 has an invalid length. [ 143.176651][ T4781] EXT4-fs (loop5): unmounting filesystem. [ 143.368889][ T5329] loop4: detected capacity change from 0 to 40427 [ 143.434518][ T5329] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 143.460977][ T5329] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.484359][ T5343] loop5: detected capacity change from 0 to 512 [ 143.499214][ T4317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.556640][ T5329] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.699055][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 143.710476][ T4317] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 143.734995][ T5329] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 143.751479][ T5329] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.769502][ T4317] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 143.822292][ T4317] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 143.882913][ T4317] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 143.918021][ T26] audit: type=1800 audit(1788912876.350:8): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.228" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 143.918666][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.030688][ T5329] syz.4.228: attempt to access beyond end of device [ 144.030688][ T5329] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 144.064354][ T4317] usb 3-1: Product: syz [ 144.079648][ T4317] usb 3-1: Manufacturer: syz [ 144.102598][ T4317] usb 3-1: SerialNumber: syz [ 144.149807][ T4317] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 144.175433][ T4317] imon 3-1:155.0: unable to initialize intf0, err -19 [ 144.203839][ T4317] imon:imon_probe: failed to initialize context! [ 144.236854][ T4317] imon 3-1:155.0: unable to register, err -19 [ 145.209092][ T26] audit: type=1800 audit(1788912877.640:9): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.228" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 146.512879][ T5379] loop1: detected capacity change from 0 to 256 [ 146.555676][ T5385] loop0: detected capacity change from 0 to 4096 [ 146.588257][ T5385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.668786][ T5385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.842430][ T5380] loop1: detected capacity change from 0 to 256 [ 146.926322][ T5380] exfat: Deprecated parameter 'utf8' [ 146.985207][ T5380] exfat: Deprecated parameter 'namecase' [ 147.128033][ T5380] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0bdaf, utbl_chksum : 0xe619d30d) [ 147.226985][ T5385] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 147.492120][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 147.833901][ T5407] loop4: detected capacity change from 0 to 512 [ 147.865727][ T5407] ext4: Unknown parameter 'appraise_type' [ 147.948919][ T5409] CIFS: iocharset name too long [ 148.020497][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.057450][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.105162][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.213380][ T5411] device bridge_slave_0 left promiscuous mode [ 148.283238][ T5417] loop1: detected capacity change from 0 to 512 [ 148.342690][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.351843][ T5417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 148.411259][ T5417] System zones: 1-12 [ 148.476338][ T5417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.247: missing EA_INODE flag [ 148.530324][ T5417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.247: error while reading EA inode 12 err=-117 [ 148.543851][ T5411] device bridge_slave_1 left promiscuous mode [ 148.551561][ T5417] EXT4-fs (loop1): 1 orphan inode deleted [ 148.567943][ T5417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.583887][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.645880][ T5411] bond0: (slave bond_slave_0): Releasing backup interface [ 148.680881][ T5411] bond0: (slave bond_slave_1): Releasing backup interface [ 148.848681][ T5411] team0: Port device team_slave_0 removed [ 148.930678][ T5411] team0: Port device team_slave_1 removed [ 148.951737][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.977055][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.997041][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.014105][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.042297][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.071183][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.109576][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.149494][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.165024][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.207789][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.238204][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.256145][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.276373][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.296259][ T4319] usb 3-1: USB disconnect, device number 3 [ 149.355390][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 149.479728][ T5429] overlayfs: failed to resolve './bus': -2 [ 151.846846][ T5461] loop4: detected capacity change from 0 to 512 [ 151.983380][ T5461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.604247][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 152.704728][ T5473] netlink: 'syz.5.262': attribute type 2 has an invalid length. [ 153.019652][ T5484] loop0: detected capacity change from 0 to 4096 [ 153.046959][ T5484] ext4: Unknown parameter 'noacl' [ 153.062830][ T5484] overlayfs: failed to resolve './file0': -2 [ 153.089313][ T4316] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.289183][ T4316] usb 6-1: Using ep0 maxpacket: 32 [ 153.298000][ T4316] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 153.357245][ T4316] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 153.396290][ T4316] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 153.454348][ T4316] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 153.501765][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.544719][ T4316] usb 6-1: Product: syz [ 153.576534][ T4316] usb 6-1: Manufacturer: syz [ 153.608138][ T4316] usb 6-1: SerialNumber: syz [ 153.691605][ T4316] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 153.880865][ T4316] imon 6-1:155.0: unable to initialize intf0, err -19 [ 153.936315][ T4316] imon:imon_probe: failed to initialize context! [ 153.975534][ T4316] imon 6-1:155.0: unable to register, err -19 [ 154.106003][ T5506] device syzkaller0 entered promiscuous mode [ 154.994470][ T5520] CIFS: iocharset name too long [ 155.071499][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.116508][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.169732][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.354417][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 155.485478][ T5518] loop0: detected capacity change from 0 to 2048 [ 155.657426][ T5518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.694624][ T5518] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.030028][ T5518] fs-verity: sha256 using implementation "sha256-avx2" [ 156.275032][ T4375] usb 6-1: USB disconnect, device number 5 [ 156.580927][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 156.880347][ T5561] loop5: detected capacity change from 0 to 256 [ 157.134457][ T5561] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 158.269886][ T5594] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 158.435514][ T5600] device syzkaller0 entered promiscuous mode [ 158.629520][ T127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.835494][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 158.869321][ T127] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 158.920151][ T127] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 158.944796][ T127] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 159.018525][ T4274] syz-executor invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 159.047426][ T127] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 159.064703][ T4274] CPU: 0 PID: 4274 Comm: syz-executor Not tainted syzkaller #0 [ 159.072339][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.082401][ T4274] Call Trace: [ 159.085679][ T4274] [ 159.088598][ T4274] dump_stack_lvl+0x188/0x24e [ 159.093299][ T4274] ? ___ratelimit+0x14e/0x610 [ 159.097969][ T4274] ? show_regs_print_info+0x12/0x12 [ 159.103275][ T4274] ? load_image+0x410/0x410 [ 159.107768][ T4274] ? ___ratelimit+0x474/0x610 [ 159.112524][ T4274] ? radix_tree_cpu_dead+0x160/0x160 [ 159.117800][ T4274] dump_header+0xd8/0x820 [ 159.122147][ T4274] oom_kill_process+0x361/0x550 [ 159.126996][ T4274] out_of_memory+0xe25/0x1220 [ 159.131664][ T4274] ? mutex_lock_nested+0x10/0x10 [ 159.136593][ T4274] ? unregister_oom_notifier+0x20/0x20 [ 159.142051][ T4274] mem_cgroup_out_of_memory+0x2c0/0x390 [ 159.147589][ T4274] ? mem_cgroup_oom_trylock+0x210/0x210 [ 159.153139][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 159.158330][ T4274] try_charge_memcg+0xc9d/0x17c0 [ 159.163277][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 159.168312][ T4274] ? percpu_ref_put+0x180/0x180 [ 159.173157][ T4274] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 159.178893][ T4274] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 159.184630][ T4274] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 159.190367][ T4274] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 159.196199][ T4274] __memcg_kmem_charge_page+0x220/0x380 [ 159.201761][ T4274] __alloc_pages+0x21e/0x4f0 [ 159.206371][ T4274] ? zone_statistics+0x170/0x170 [ 159.211398][ T4274] ? alloc_pages+0x4dd/0x740 [ 159.215987][ T4274] get_zeroed_page+0x13/0x30 [ 159.220595][ T4274] __pud_alloc+0x31/0x150 [ 159.224937][ T4274] ? copy_page_range+0x706/0x3a60 [ 159.229974][ T4274] copy_page_range+0x3643/0x3a60 [ 159.234903][ T4274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.240903][ T4274] ? mas_store+0x566/0x680 [ 159.245309][ T4274] ? pfn_valid+0x450/0x450 [ 159.249742][ T4274] ? anon_vma_fork+0x4bc/0x520 [ 159.254504][ T4274] copy_mm+0xeb0/0x1680 [ 159.258674][ T4274] ? copy_signal+0x640/0x640 [ 159.263287][ T4274] ? lockdep_init_map_type+0x98/0x8d0 [ 159.268683][ T4274] ? __init_rwsem+0x11e/0x160 [ 159.273789][ T4274] ? copy_signal+0x51f/0x640 [ 159.278392][ T4274] copy_process+0x1952/0x4070 [ 159.283063][ T4274] ? verify_lock_unused+0x140/0x140 [ 159.288254][ T4274] ? copy_process+0x974/0x4070 [ 159.293016][ T4274] ? idle_dummy+0x10/0x10 [ 159.297338][ T4274] kernel_clone+0x24b/0x900 [ 159.301833][ T4274] ? create_io_thread+0x170/0x170 [ 159.306850][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 159.311868][ T4274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.317863][ T4274] __x64_sys_clone+0x1a7/0x220 [ 159.322618][ T4274] ? __might_fault+0xc2/0x120 [ 159.327288][ T4274] ? __ia32_sys_vfork+0x140/0x140 [ 159.332328][ T4274] ? lock_chain_count+0x20/0x20 [ 159.337189][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 159.342374][ T4274] do_syscall_64+0x4c/0xa0 [ 159.346801][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 159.351466][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 159.356140][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.362038][ T4274] RIP: 0033:0x7f6667bc6bd2 [ 159.366461][ T4274] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 159.386077][ T4274] RSP: 002b:00007ffe8e248e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 159.394503][ T4274] RAX: ffffffffffffffda RBX: 00007ffe8e248e80 RCX: 00007f6667bc6bd2 [ 159.402465][ T4274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 159.410424][ T4274] RBP: 00007ffe8e24900c R08: 0000000000000000 R09: 0000000000000001 [ 159.418383][ T4274] R10: 000055556773e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 159.426348][ T4274] R13: 00000000000927c0 R14: 0000000000026980 R15: 00007ffe8e249060 [ 159.434322][ T4274] [ 159.462886][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.493369][ T127] usb 5-1: Product: syz [ 159.497566][ T127] usb 5-1: Manufacturer: syz [ 159.523628][ T127] usb 5-1: SerialNumber: syz [ 159.559546][ T127] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 159.593821][ T127] imon 5-1:155.0: unable to initialize intf0, err -19 [ 159.619507][ T127] imon:imon_probe: failed to initialize context! [ 159.643721][ T127] imon 5-1:155.0: unable to register, err -19 [ 160.381650][ T4274] memory: usage 307200kB, limit 307200kB, failcnt 20942 [ 160.407608][ T4274] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 160.432607][ T4274] kmem: usage 2188kB, limit 9007199254740988kB, failcnt 0 [ 160.452629][ T4274] Memory cgroup stats for /syz2: [ 160.453368][ T4274] anon 618496 [ 160.453368][ T4274] file 311619584 [ 160.453368][ T4274] kernel 2240512 [ 160.453368][ T4274] kernel_stack 98304 [ 160.453368][ T4274] pagetables 692224 [ 160.453368][ T4274] sec_pagetables 0 [ 160.453368][ T4274] percpu 9888 [ 160.453368][ T4274] sock 0 [ 160.453368][ T4274] vmalloc 0 [ 160.453368][ T4274] shmem 311586816 [ 160.453368][ T4274] zswap 0 [ 160.453368][ T4274] zswapped 0 [ 160.453368][ T4274] file_mapped 219783168 [ 160.453368][ T4274] file_dirty 32768 [ 160.453368][ T4274] file_writeback 0 [ 160.453368][ T4274] swapcached 128020480 [ 160.453368][ T4274] anon_thp 0 [ 160.453368][ T4274] file_thp 0 [ 160.453368][ T4274] shmem_thp 0 [ 160.453368][ T4274] inactive_anon 247590912 [ 160.453368][ T4274] active_anon 64708608 [ 160.453368][ T4274] inactive_file 0 [ 160.453368][ T4274] active_file 32768 [ 160.453368][ T4274] unevictable 0 [ 160.453368][ T4274] slab_reclaimable 1231320 [ 160.453368][ T4274] slab_unreclaimable 146024 [ 160.746537][ T4274] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.139,pid=4888,uid=0 [ 160.796800][ T4274] Memory cgroup out of memory: Killed process 4888 (syz.2.139) total-vm:202600kB, anon-rss:1540kB, file-rss:20608kB, shmem-rss:107312kB, UID:0 pgtables:316kB oom_score_adj:1000 [ 162.778740][ T4319] usb 5-1: USB disconnect, device number 8 [ 162.873063][ T29] oom_reaper: reaped process 4888 (syz.2.139), now anon-rss:0kB, file-rss:20480kB, shmem-rss:52604kB [ 162.977792][ T5651] loop4: detected capacity change from 0 to 512 [ 163.032245][ T5651] EXT4-fs: Ignoring removed nobh option [ 163.074857][ T5651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.120340][ T5651] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 163.139646][ T5649] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 163.171998][ T5651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 163.189180][ T5651] System zones: 1-12 [ 163.194225][ T5651] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.201133][ T5649] CPU: 1 PID: 5649 Comm: syz-executor Not tainted syzkaller #0 [ 163.208724][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.218804][ T5649] Call Trace: [ 163.222112][ T5649] [ 163.225088][ T5649] dump_stack_lvl+0x188/0x24e [ 163.229792][ T5649] ? ___ratelimit+0x14e/0x610 [ 163.234497][ T5649] ? show_regs_print_info+0x12/0x12 [ 163.239775][ T5649] ? load_image+0x410/0x410 [ 163.244308][ T5649] ? ___ratelimit+0x474/0x610 [ 163.249014][ T5649] ? radix_tree_cpu_dead+0x160/0x160 [ 163.254337][ T5649] dump_header+0xd8/0x820 [ 163.258702][ T5649] oom_kill_process+0x361/0x550 [ 163.263575][ T5649] out_of_memory+0xe25/0x1220 [ 163.268282][ T5649] ? mutex_lock_nested+0x10/0x10 [ 163.273223][ T5649] ? unregister_oom_notifier+0x20/0x20 [ 163.278687][ T5649] mem_cgroup_out_of_memory+0x2c0/0x390 [ 163.284239][ T5649] ? mem_cgroup_oom_trylock+0x210/0x210 [ 163.289793][ T5649] ? do_raw_spin_unlock+0x11d/0x230 [ 163.295080][ T5649] try_charge_memcg+0xc9d/0x17c0 [ 163.300042][ T5649] ? percpu_ref_put+0x180/0x180 [ 163.304895][ T5649] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 163.310628][ T5649] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.316614][ T5649] ? percpu_ref_tryget+0x15/0x180 [ 163.321640][ T5649] ? percpu_ref_tryget+0x15/0x180 [ 163.326665][ T5649] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 163.332386][ T5649] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 163.338115][ T5649] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 163.343934][ T5649] obj_cgroup_charge+0x36a/0x620 [ 163.348880][ T5649] ? obj_cgroup_charge+0xe9/0x620 [ 163.353908][ T5649] ? mod_objcg_mlstate+0x320/0x320 [ 163.359024][ T5649] ? percpu_ref_put+0x12/0x100 [ 163.363788][ T5649] ? percpu_ref_put+0x12/0x100 [ 163.368572][ T5649] slab_pre_alloc_hook+0x2e2/0x300 [ 163.373681][ T5649] ? slab_pre_alloc_hook+0xb1/0x300 [ 163.378881][ T5649] kmem_cache_alloc_lru+0x49/0x2e0 [ 163.383990][ T5649] ? __d_alloc+0x2e/0x6e0 [ 163.388322][ T5649] __d_alloc+0x2e/0x6e0 [ 163.392476][ T5649] d_alloc+0x46/0x250 [ 163.396461][ T5649] lookup_one_qstr_excl+0xc6/0x240 [ 163.401579][ T5649] filename_create+0x242/0x450 [ 163.406345][ T5649] ? kern_path_create+0x50/0x50 [ 163.411199][ T5649] ? __virt_addr_valid+0x467/0x540 [ 163.416321][ T5649] do_symlinkat+0xc1/0x400 [ 163.420738][ T5649] ? vfs_symlink+0x3d0/0x3d0 [ 163.425333][ T5649] __x64_sys_symlinkat+0x95/0xa0 [ 163.430359][ T5649] do_syscall_64+0x4c/0xa0 [ 163.434782][ T5649] ? clear_bhb_loop+0x60/0xb0 [ 163.439461][ T5649] ? clear_bhb_loop+0x60/0xb0 [ 163.444141][ T5649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.450061][ T5649] RIP: 0033:0x7f6667b9d217 [ 163.454478][ T5649] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.474085][ T5649] RSP: 002b:00007ffe8e248fc8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 163.482501][ T5649] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6667b9d217 [ 163.490477][ T5649] RDX: 00007f6667c35ffd RSI: 00000000ffffff9c RDI: 00007ffe8e249060 [ 163.498445][ T5649] RBP: 00007ffe8e24900c R08: 0000000000000001 R09: 00000000ffffffff [ 163.506419][ T5649] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000029 [ 163.514390][ T5649] R13: 00000000000927c0 R14: 0000000000026980 R15: 00007ffe8e249060 [ 163.522382][ T5649] [ 163.608070][ T5651] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.298: Block bitmap for bg 0 marked uninitialized [ 163.629207][ T5649] memory: usage 307200kB, limit 307200kB, failcnt 21223 [ 163.670177][ T5651] EXT4-fs (loop4): Remounting filesystem read-only [ 163.725204][ T5649] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 163.733729][ T5651] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.298: Block bitmap for bg 0 marked uninitialized [ 163.780444][ T5649] kmem: usage 2208kB, limit 9007199254740988kB, failcnt 0 [ 163.787940][ T5649] Memory cgroup stats for /syz2: [ 163.795855][ T5649] anon 401408 [ 163.795855][ T5649] file 311816192 [ 163.795855][ T5649] kernel 2260992 [ 163.795855][ T5649] kernel_stack 98304 [ 163.795855][ T5649] pagetables 704512 [ 163.795855][ T5649] sec_pagetables 0 [ 163.795855][ T5649] percpu 9888 [ 163.795855][ T5649] sock 0 [ 163.795855][ T5649] vmalloc 0 [ 163.795855][ T5649] shmem 311783424 [ 163.795855][ T5649] zswap 0 [ 163.795855][ T5649] zswapped 0 [ 163.795855][ T5649] file_mapped 120070144 [ 163.795855][ T5649] file_dirty 32768 [ 163.795855][ T5649] file_writeback 0 [ 163.795855][ T5649] swapcached 128020480 [ 163.795855][ T5649] anon_thp 0 [ 163.795855][ T5649] file_thp 0 [ 163.795855][ T5649] shmem_thp 0 [ 163.795855][ T5649] inactive_anon 247447552 [ 163.795855][ T5649] active_anon 64831488 [ 163.795855][ T5649] inactive_file 0 [ 163.795855][ T5649] active_file 32768 [ 163.795855][ T5649] unevictable 0 [ 163.795855][ T5649] slab_reclaimable 1233128 [ 163.795855][ T5649] slab_unreclaimable 148424 [ 163.924464][ T5664] loop5: detected capacity change from 0 to 256 [ 165.099964][ T5651] EXT4-fs (loop4): Remounting filesystem read-only [ 165.128399][ T5649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.139,pid=4892,uid=0 [ 165.131667][ T5649] Memory cgroup out of memory: Killed process 4892 (syz.2.139) total-vm:202732kB, anon-rss:1548kB, file-rss:20608kB, shmem-rss:107312kB, UID:0 pgtables:316kB oom_score_adj:1000 [ 165.354380][ T5651] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.298: Block bitmap for bg 0 marked uninitialized [ 165.476938][ T5651] EXT4-fs (loop4): Remounting filesystem read-only [ 165.544788][ T5651] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 165.675342][ T5651] EXT4-fs (loop4): 1 truncate cleaned up [ 165.694419][ T5651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.712913][ T5669] overlayfs: failed to get inode (-116) [ 165.781106][ T5669] overlayfs: failed to get inode (-116) [ 166.100434][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 167.511812][ T29] oom_reaper: reaped process 4892 (syz.2.139), now anon-rss:0kB, file-rss:20480kB, shmem-rss:60820kB [ 168.032645][ T5698] netlink: 'syz.0.309': attribute type 2 has an invalid length. [ 168.409212][ T4317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.460715][ T5706] loop4: detected capacity change from 0 to 7 [ 168.525558][ T5706] Dev loop4: unable to read RDB block 7 [ 168.564145][ T5706] loop4: unable to read partition table [ 168.599229][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 168.615024][ T4317] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 168.674914][ T4317] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 168.699809][ T5706] loop4: partition table beyond EOD, truncated [ 168.723501][ T4317] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 168.762270][ T5706] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.798826][ T4317] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 168.838919][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.867922][ T4317] usb 1-1: Product: syz [ 168.879079][ T4317] usb 1-1: Manufacturer: syz [ 168.894065][ T4317] usb 1-1: SerialNumber: syz [ 168.925114][ T3638] Dev loop4: unable to read RDB block 7 [ 168.930695][ T4317] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 168.930772][ T4317] imon 1-1:155.0: unable to initialize intf0, err -19 [ 168.930789][ T4317] imon:imon_probe: failed to initialize context! [ 168.930802][ T4317] imon 1-1:155.0: unable to register, err -19 [ 169.145496][ T3638] loop4: unable to read partition table [ 169.178345][ T3638] loop4: partition table beyond EOD, truncated [ 169.698108][ T5726] loop4: detected capacity change from 0 to 512 [ 169.724159][ T5713] loop5: detected capacity change from 0 to 40427 [ 169.808099][ T5713] F2FS-fs (loop5): Unrecognized mount option "whint_mode=fs-based" or missing value [ 169.845119][ T5726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.859392][ T5726] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.162524][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 170.231634][ T5736] loop5: detected capacity change from 0 to 512 [ 170.289477][ T5732] 9pnet_fd: Insufficient options for proto=fd [ 170.302812][ T5736] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.302880][ T5736] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.499358][ T4781] EXT4-fs (loop5): unmounting filesystem. [ 171.057886][ T5760] loop4: detected capacity change from 0 to 2048 [ 171.203712][ T5760] Alternate GPT is invalid, using primary GPT. [ 171.237197][ T5760] loop4: p2 p3 p7 [ 171.361487][ T4375] usb 1-1: USB disconnect, device number 5 [ 173.049759][ T5784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.159030][ T5784] capability: warning: `syz.4.324' uses 32-bit capabilities (legacy support in use) [ 173.564905][ T5788] 9pnet_fd: Insufficient options for proto=fd [ 173.721168][ T5778] loop4: detected capacity change from 0 to 512 [ 173.760749][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 173.771290][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 173.782827][ T4435] udevd[4435]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 173.945359][ T5778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.954618][ T5778] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.223126][ T5797] loop1: detected capacity change from 0 to 256 [ 174.233814][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 174.359360][ T4317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 174.387110][ T4435] udevd[4435]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 174.389056][ T5797] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 174.401919][ T4436] udevd[4436]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 174.425208][ T5800] loop4: detected capacity change from 0 to 512 [ 174.450019][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 174.571066][ T5800] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 174.639258][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 174.656649][ T4317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.689074][ T5800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 174.699587][ T4317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.770343][ T5800] System zones: 0-1, 15-15, 18-18, 34-34 [ 174.782966][ T5800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.795857][ T4317] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.799227][ T5800] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 174.829121][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.850484][ T5804] CIFS: iocharset name too long [ 174.861936][ T4317] usb 3-1: Product: syz [ 174.866159][ T4317] usb 3-1: Manufacturer: syz [ 174.887858][ T5800] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 174.899051][ T4317] usb 3-1: SerialNumber: syz [ 174.933592][ T5809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.969197][ T5800] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 174.976394][ T5809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.999707][ T5800] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.330: bad orphan inode 16 [ 175.021944][ T5809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.050434][ T5800] ext4_test_bit(bit=15, block=18) = 1 [ 175.059228][ T5800] is_bad_inode(inode)=0 [ 175.076269][ T5800] NEXT_ORPHAN(inode)=0 [ 175.095277][ T5800] max_ino=32 [ 175.108781][ T5800] i_nlink=2 [ 175.137445][ T5800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.144174][ T4317] usb 3-1: 0:2 : does not exist [ 175.178937][ T4317] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 175.213467][ T5800] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 175.256054][ T5815] netlink: 'syz.1.333': attribute type 2 has an invalid length. [ 175.391523][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 175.444794][ T4317] usb 3-1: USB disconnect, device number 4 [ 175.769667][ T4328] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.639124][ T4328] usb 2-1: Using ep0 maxpacket: 32 [ 176.726918][ T4328] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 176.742178][ T5836] binder: 5835:5836 unknown command 1074553619 [ 176.769201][ T5836] binder: 5835:5836 ioctl c0306201 200000000040 returned -22 [ 176.791334][ T4328] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 176.823696][ T4328] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 176.875058][ T4328] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 176.899628][ T5839] loop0: detected capacity change from 0 to 512 [ 176.914217][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.953758][ T5839] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 176.979098][ T4328] usb 2-1: Product: syz [ 176.983303][ T4328] usb 2-1: Manufacturer: syz [ 177.018468][ T4328] usb 2-1: SerialNumber: syz [ 177.055859][ T5839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 177.093891][ T4328] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 177.151826][ T5839] System zones: 1-12 [ 177.173103][ T5839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.179896][ T4328] imon 2-1:155.0: unable to initialize intf0, err -19 [ 177.212688][ T4328] imon:imon_probe: failed to initialize context! [ 177.233813][ T5839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.339: bg 0: block 361: padding at end of block bitmap is not set [ 177.268499][ T4328] imon 2-1:155.0: unable to register, err -19 [ 177.330290][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 177.357524][ T5839] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 177.400264][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 177.409714][ T5839] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.339: invalid indirect mapped block 12 (level 1) [ 177.447628][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 177.466964][ T5839] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.339: invalid indirect mapped block 2 (level 2) [ 177.522846][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 177.550841][ T5839] EXT4-fs (loop0): 1 truncate cleaned up [ 177.567225][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.905098][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 177.970955][ T5823] loop5: detected capacity change from 0 to 40427 [ 178.011572][ T4888] syz.2.139 (4888) used greatest stack depth: 17712 bytes left [ 178.030444][ T5823] F2FS-fs (loop5): invalid crc value [ 178.074430][ T5823] F2FS-fs (loop5): Mismatch valid blocks 5 vs. 35 [ 178.108163][ T5823] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 181.993895][ T5874] loop5: detected capacity change from 0 to 1024 [ 182.102475][ T5874] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 182.219606][ T5874] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 182.246551][ T5874] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 182.291770][ T5874] EXT4-fs (loop5): This should not happen!! Data will be lost [ 182.291770][ T5874] [ 182.325826][ T5874] EXT4-fs (loop5): Total free blocks count 0 [ 182.344602][ T3654] usb 2-1: USB disconnect, device number 4 [ 182.395117][ T5874] EXT4-fs (loop5): Free/Dirty block details [ 182.414263][ T5874] EXT4-fs (loop5): free_blocks=20480 [ 182.424427][ T5874] EXT4-fs (loop5): dirty_blocks=80 [ 182.498789][ T5874] EXT4-fs (loop5): Block reservation details [ 182.536341][ T5874] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 182.544947][ T5887] xt_hashlimit: size too large, truncated to 1048576 [ 182.545812][ T5886] binder: 5885:5886 unknown command 1074553619 [ 182.589108][ T5886] binder: 5885:5886 ioctl c0306201 200000000040 returned -22 [ 182.607520][ T5882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.329084][ T4328] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 183.528090][ T4328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.544763][ T4328] usb 1-1: not running at top speed; connect to a high speed hub [ 183.569855][ T4328] usb 1-1: config 222 has an invalid interface number: 172 but max is 0 [ 183.620096][ T4328] usb 1-1: config 222 contains an unexpected descriptor of type 0x1, skipping [ 183.653433][ T4328] usb 1-1: config 222 has no interface number 0 [ 183.664711][ T5911] loop4: detected capacity change from 0 to 1024 [ 183.689148][ T4328] usb 1-1: config 222 interface 172 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.707838][ T5911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.720153][ T4328] usb 1-1: config 222 interface 172 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.734884][ T5911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.749386][ T4328] usb 1-1: config 222 interface 172 has no altsetting 0 [ 183.768522][ T5911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 183.777190][ T4328] usb 1-1: New USB device found, idVendor=1b3d, idProduct=015c, bcdDevice=b6.a6 [ 183.792054][ T5911] System zones: 0-1, 3-36 [ 183.797684][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.809503][ T4328] usb 1-1: Product: syz [ 183.813720][ T4328] usb 1-1: Manufacturer: syz [ 183.818220][ T5911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.818411][ T4328] usb 1-1: SerialNumber: syz [ 183.929125][ T4892] syz.2.139 (4892) used greatest stack depth: 17488 bytes left [ 184.051702][ T4328] ftdi_sio 1-1:222.172: FTDI USB Serial Device converter detected [ 184.072442][ T4328] ftdi_sio ttyUSB0: unknown device type: 0xb6a6 [ 184.096272][ T4328] usb 1-1: USB disconnect, device number 6 [ 184.145113][ T4328] ftdi_sio 1-1:222.172: device disconnected [ 185.476686][ T5930] binder: 5929:5930 unknown command 1074553619 [ 185.505708][ T5930] binder: 5929:5930 ioctl c0306201 200000000040 returned -22 [ 185.684411][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 186.442073][ T5945] loop2: detected capacity change from 0 to 128 [ 186.536497][ T5945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.579448][ T5945] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.380007][ T5936] loop4: detected capacity change from 0 to 40427 [ 187.388138][ T5936] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 187.394937][ T5936] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 187.454904][ T5936] F2FS-fs (loop4): invalid crc value [ 187.462919][ T5953] __nla_validate_parse: 10 callbacks suppressed [ 187.462937][ T5953] netlink: 40 bytes leftover after parsing attributes in process `syz.5.370'. [ 187.464431][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 187.516181][ T5936] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 187.839808][ T5936] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 187.847284][ T5936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.641466][ T4281] syz-executor: attempt to access beyond end of device [ 188.641466][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.793060][ T5967] netlink: 124 bytes leftover after parsing attributes in process `syz.2.375'. [ 188.822604][ T5967] netlink: 124 bytes leftover after parsing attributes in process `syz.2.375'. [ 188.834036][ T5967] netlink: 124 bytes leftover after parsing attributes in process `syz.2.375'. [ 189.069223][ T4375] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.279193][ T4375] usb 6-1: Using ep0 maxpacket: 32 [ 189.287270][ T4375] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.324422][ T4375] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.352651][ T5979] loop1: detected capacity change from 0 to 512 [ 189.379681][ T4375] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 189.399307][ T4375] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.400098][ T5979] ext4: Unknown parameter 'nouser_xattr' [ 189.452271][ T4375] usb 6-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice= 0.40 [ 189.494388][ T4375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.523845][ T4375] usb 6-1: Product: syz [ 189.539034][ T4375] usb 6-1: Manufacturer: syz [ 189.551061][ T4375] usb 6-1: SerialNumber: syz [ 189.780957][ T5987] loop0: detected capacity change from 0 to 256 [ 189.815459][ T5987] exfat: Deprecated parameter 'utf8' [ 189.824200][ T4375] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 189.841106][ T5987] exfat: Deprecated parameter 'namecase' [ 189.854651][ T4375] usb 6-1: USB disconnect, device number 6 [ 189.876482][ T5987] exfat: Deprecated parameter 'namecase' [ 189.902998][ T5987] exfat: Deprecated parameter 'namecase' [ 189.934271][ T5987] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 189.954465][ T5975] loop2: detected capacity change from 0 to 40427 [ 189.988022][ T5975] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 190.057792][ T5977] loop4: detected capacity change from 0 to 40427 [ 190.077298][ T5977] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 190.102752][ T5977] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.122733][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.165427][ T5977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.368598][ T5977] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.376959][ T5977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.110289][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 191.110824][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 191.111321][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 191.129704][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 191.420703][ T26] audit: type=1800 audit(1700006398.999:10): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.388" name="max_speed" dev="configfs" ino=41244 res=0 errno=0 [ 191.500472][ T6011] syz.2.390 uses obsolete (PF_INET,SOCK_PACKET) [ 191.504582][ T4281] syz-executor: attempt to access beyond end of device [ 191.504582][ T4281] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 191.652436][ T6013] Zero length message leads to an empty skb [ 192.135792][ T6004] loop5: detected capacity change from 0 to 40427 [ 192.154230][ T6004] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 192.197426][ T6004] F2FS-fs (loop5): invalid crc value [ 192.217701][ T6004] F2FS-fs (loop5): invalid crc value [ 192.244914][ T6004] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 192.619849][ T6019] 9pnet_fd: Insufficient options for proto=fd [ 192.700926][ T6029] loop0: detected capacity change from 0 to 512 [ 192.956094][ T6029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.977472][ T6029] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.052905][ T26] audit: type=1800 audit(1700006401.620:11): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.398" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 194.169564][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183309][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.679181][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 197.689153][ T6080] 9pnet_fd: Insufficient options for proto=fd [ 198.288789][ T6090] netlink: 'syz.0.415': attribute type 2 has an invalid length. [ 198.345046][ T6093] loop5: detected capacity change from 0 to 512 [ 198.421861][ T6093] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.462458][ T6098] loop4: detected capacity change from 0 to 512 [ 198.505143][ T6093] EXT4-fs (loop5): 1 truncate cleaned up [ 198.519529][ T6098] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.524919][ T6102] tipc: Enabling not permitted [ 198.540666][ T6093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 198.564282][ T6102] tipc: Enabling of bearer rejected, failed to enable media [ 198.569306][ T6098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.669206][ T4375] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.803850][ T4781] EXT4-fs (loop5): unmounting filesystem. [ 198.832350][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 198.890164][ T4375] usb 1-1: Using ep0 maxpacket: 32 [ 198.897783][ T4375] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 198.897828][ T4375] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 198.897854][ T4375] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 198.901201][ T4375] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 198.901232][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.901252][ T4375] usb 1-1: Product: syz [ 198.901267][ T4375] usb 1-1: Manufacturer: syz [ 198.901282][ T4375] usb 1-1: SerialNumber: syz [ 198.926895][ T4375] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 198.926952][ T4375] imon 1-1:155.0: unable to initialize intf0, err -19 [ 198.926969][ T4375] imon:imon_probe: failed to initialize context! [ 198.926981][ T4375] imon 1-1:155.0: unable to register, err -19 [ 200.903965][ T6133] loop4: detected capacity change from 0 to 128 [ 200.938424][ T6133] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.960036][ T6133] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.025276][ T26] audit: type=1326 audit(1700006408.610:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21db9e159 code=0x7ffc0000 [ 201.176633][ T26] audit: type=1326 audit(1700006408.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21db9e159 code=0x7ffc0000 [ 201.218759][ T4328] usb 1-1: USB disconnect, device number 7 [ 201.429566][ T4532] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.495141][ T26] audit: type=1326 audit(1700006408.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21db9e159 code=0x7ffc0000 [ 201.609819][ T6148] loop2: detected capacity change from 0 to 256 [ 201.621257][ T26] audit: type=1326 audit(1700006408.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff21db9e159 code=0x7ffc0000 [ 201.642487][ T6148] exfat: Deprecated parameter 'utf8' [ 201.673402][ T6148] exfat: Deprecated parameter 'utf8' [ 201.687559][ T26] audit: type=1326 audit(1700006408.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff21db9dec2 code=0x7ffc0000 [ 201.717911][ T26] audit: type=1326 audit(1700006408.640:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff21db5e98e code=0x7ffc0000 [ 201.750006][ T4328] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.787281][ T6152] loop4: detected capacity change from 0 to 512 [ 201.796974][ T6148] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 201.802359][ T26] audit: type=1326 audit(1700006408.660:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff21db9df87 code=0x7ffc0000 [ 201.868586][ T6152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.953425][ T6152] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.971976][ T4328] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.015591][ T26] audit: type=1326 audit(1700006408.660:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff21db5e98e code=0x7ffc0000 [ 202.039039][ T4328] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 202.117365][ T4328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.266475][ T26] audit: type=1326 audit(1700006408.660:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff21db9ddeb code=0x7ffc0000 [ 202.700458][ T26] audit: type=1326 audit(1700006408.660:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff21db9ddeb code=0x7ffc0000 [ 203.654760][ T4328] usb 1-1: cannot find UAC_HEADER [ 203.681635][ T4328] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 203.710030][ T4328] usb 1-1: USB disconnect, device number 8 [ 203.759256][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.879394][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 204.009209][ T3654] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.832945][ T3654] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.894237][ T3654] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 204.997331][ T3654] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.030736][ T3654] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.054080][ T3654] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 205.076798][ T6179] netlink: 'syz.4.443': attribute type 2 has an invalid length. [ 205.125060][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.186593][ T3654] usb 2-1: config 0 descriptor?? [ 205.216768][ T6165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.649937][ T3654] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 205.692147][ T3654] input: HID 0079:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0079:0006.0005/input/input7 [ 205.920400][ T3654] dragonrise 0003:0079:0006.0005: input,hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 205.963025][ T3654] dragonrise 0003:0079:0006.0005: not enough values in the field [ 205.985150][ T3654] dragonrise 0003:0079:0006.0005: force feedback init failed [ 206.106049][ T3654] usb 2-1: USB disconnect, device number 5 [ 206.341256][ T6192] fido_id[6192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 206.523981][ T6200] loop5: detected capacity change from 0 to 256 [ 206.555522][ T6200] FAT-fs (loop5): Directory bread(block 64) failed [ 206.575677][ T6200] FAT-fs (loop5): Directory bread(block 65) failed [ 206.596975][ T6200] FAT-fs (loop5): Directory bread(block 66) failed [ 206.616952][ T6200] FAT-fs (loop5): Directory bread(block 67) failed [ 206.633367][ T6202] loop1: detected capacity change from 0 to 256 [ 206.644157][ T6200] FAT-fs (loop5): Directory bread(block 68) failed [ 206.666975][ T6200] FAT-fs (loop5): Directory bread(block 69) failed [ 206.677506][ T6202] FAT-fs (loop1): bogus logical sector size 11520 [ 206.681690][ T6200] FAT-fs (loop5): Directory bread(block 70) failed [ 206.709825][ T6202] FAT-fs (loop1): Can't find a valid FAT filesystem [ 206.710091][ T6200] FAT-fs (loop5): Directory bread(block 71) failed [ 206.753169][ T6200] FAT-fs (loop5): Directory bread(block 72) failed [ 206.765114][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 206.765130][ T26] audit: type=1326 audit(1700006414.350:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.1.450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e339e159 code=0x7ffc0000 [ 206.799802][ T6200] FAT-fs (loop5): Directory bread(block 73) failed [ 206.810688][ T26] audit: type=1326 audit(1700006414.350:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.1.450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f51e339e159 code=0x7ffc0000 [ 206.845767][ T26] audit: type=1326 audit(1700006414.350:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.1.450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e339e159 code=0x7ffc0000 [ 206.907038][ T26] audit: type=1326 audit(1700006414.350:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.1.450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51e339e159 code=0x7ffc0000 [ 206.907634][ T6190] loop0: detected capacity change from 0 to 40427 [ 206.937420][ T26] audit: type=1326 audit(1700006414.350:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.1.450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e339e159 code=0x7ffc0000 [ 206.964517][ T6190] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 206.989274][ T6190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 206.997652][ T26] audit: type=1326 audit(1700006414.350:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.1.450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f51e339e159 code=0x7ffc0000 [ 207.022106][ T6190] F2FS-fs (loop0): invalid crc value [ 207.053727][ T6190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.213437][ T6190] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 207.229967][ T6190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.471726][ T4532] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 207.525644][ T4532] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 208.152908][ T6228] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.673343][ T6263] loop1: detected capacity change from 0 to 256 [ 210.826264][ T6263] FAT-fs (loop1): Directory bread(block 64) failed [ 210.838238][ T6263] FAT-fs (loop1): Directory bread(block 65) failed [ 210.859433][ T6263] FAT-fs (loop1): Directory bread(block 66) failed [ 210.870130][ T6263] FAT-fs (loop1): Directory bread(block 67) failed [ 210.876793][ T6263] FAT-fs (loop1): Directory bread(block 68) failed [ 210.930868][ T6263] FAT-fs (loop1): Directory bread(block 69) failed [ 210.959145][ T6263] FAT-fs (loop1): Directory bread(block 70) failed [ 210.989781][ T6263] FAT-fs (loop1): Directory bread(block 71) failed [ 211.015565][ T6263] FAT-fs (loop1): Directory bread(block 72) failed [ 211.049096][ T6263] FAT-fs (loop1): Directory bread(block 73) failed [ 211.421135][ T127] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 211.493934][ T6280] loop0: detected capacity change from 0 to 256 [ 211.819253][ T127] usb 6-1: Using ep0 maxpacket: 16 [ 211.874702][ T127] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 212.092382][ T6281] loop2: detected capacity change from 0 to 512 [ 212.109160][ T127] usb 6-1: config 0 has no interface number 0 [ 212.115387][ T127] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.168656][ T6281] EXT4-fs (loop2): Test dummy encryption mode enabled [ 212.209577][ T127] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.265822][ T6281] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.471: inode has both inline data and extents flags [ 212.302585][ T127] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 212.341927][ T6281] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.471: couldn't read orphan inode 15 (err -117) [ 212.358902][ T127] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 212.388104][ T6281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.407213][ T127] usb 6-1: Product: syz [ 212.412693][ T127] usb 6-1: SerialNumber: syz [ 212.457491][ T127] usb 6-1: config 0 descriptor?? [ 212.494892][ T127] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 212.534431][ T127] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input8 [ 213.272993][ T4319] usb 6-1: USB disconnect, device number 7 [ 213.273016][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.286045][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 213.344348][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 213.355593][ T4319] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 213.502530][ T6290] device syzkaller0 entered promiscuous mode [ 213.586838][ T6295] loop1: detected capacity change from 0 to 512 [ 213.602934][ T6295] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 213.602964][ T6295] EXT4-fs (loop1): group descriptors corrupted! [ 213.859274][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.088567][ T6309] loop5: detected capacity change from 0 to 512 [ 214.132460][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.829136][ T7] usb 1-1: config 0 has no interfaces? [ 214.949687][ T7] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 214.974069][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.004302][ T7] usb 1-1: Product: syz [ 215.026651][ T7] usb 1-1: Manufacturer: syz [ 215.043006][ T7] usb 1-1: SerialNumber: syz [ 215.064407][ T7] usb 1-1: config 0 descriptor?? [ 215.374345][ T6326] loop5: detected capacity change from 0 to 256 [ 216.036032][ T6330] device syzkaller0 entered promiscuous mode [ 216.338166][ T6334] loop4: detected capacity change from 0 to 1024 [ 216.365199][ T6334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.407521][ T6334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.436777][ T6334] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 216.450942][ T6334] System zones: 0-1, 3-36 [ 216.458860][ T6334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.607740][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 217.005886][ T6339] netlink: 'syz.5.491': attribute type 1 has an invalid length. [ 217.104063][ T4375] usb 1-1: USB disconnect, device number 9 [ 217.397816][ T6352] netlink: 'syz.0.494': attribute type 2 has an invalid length. [ 218.297734][ T6361] loop1: detected capacity change from 0 to 1024 [ 218.341701][ T6361] EXT4-fs: Ignoring removed orlov option [ 218.373884][ T6361] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 218.398582][ T6365] device syzkaller0 entered promiscuous mode [ 218.519247][ T4319] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.577228][ T6367] loop5: detected capacity change from 0 to 1024 [ 218.593258][ T6367] EXT4-fs: Ignoring removed bh option [ 218.645238][ T6367] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 218.709249][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 218.865461][ T4319] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 218.876301][ T4319] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 218.888300][ T4319] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 220.159323][ T4319] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 220.168418][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.189024][ T4319] usb 1-1: Product: syz [ 220.193239][ T4319] usb 1-1: Manufacturer: syz [ 220.197850][ T4319] usb 1-1: SerialNumber: syz [ 220.470745][ T4781] EXT4-fs (loop5): unmounting filesystem. [ 220.698366][ T4319] usb 1-1: can't set config #155, error -71 [ 220.725936][ T4319] usb 1-1: USB disconnect, device number 10 [ 221.005604][ T6384] loop5: detected capacity change from 0 to 256 [ 221.975446][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 222.049187][ T4317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.249148][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 222.260538][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.272391][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.282467][ T4317] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 222.291639][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.346713][ T4317] usb 2-1: config 0 descriptor?? [ 222.842690][ T4317] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 222.850411][ T4317] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 222.857742][ T4317] koneplus 0003:1E7D:2D51.0006: item fetching failed at offset 2/5 [ 222.869459][ T4317] koneplus 0003:1E7D:2D51.0006: parse failed [ 222.875637][ T4317] koneplus: probe of 0003:1E7D:2D51.0006 failed with error -22 [ 223.658949][ T27] usb 2-1: USB disconnect, device number 6 [ 223.809187][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.043990][ T6398] device syzkaller0 entered promiscuous mode [ 225.146052][ T6400] 9pnet_fd: Insufficient options for proto=fd [ 225.311945][ T4317] usb 1-1: device descriptor read/all, error -71 [ 225.531742][ T6414] netlink: 'syz.5.514': attribute type 2 has an invalid length. [ 225.727866][ T6420] process 'syz.0.517' launched './file0' with NULL argv: empty string added [ 226.131156][ T4321] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.909660][ T4321] usb 6-1: Using ep0 maxpacket: 32 [ 226.925257][ T4321] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 226.959189][ T4321] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 226.988791][ T4321] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 227.024375][ T4321] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 227.031156][ T6436] loop2: detected capacity change from 0 to 1024 [ 227.051352][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.175385][ T6436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.194510][ T6436] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.216573][ T4321] usb 6-1: Product: syz [ 227.221352][ T4321] usb 6-1: Manufacturer: syz [ 227.225994][ T4321] usb 6-1: SerialNumber: syz [ 227.235573][ T4321] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 227.253030][ T4321] imon 6-1:155.0: unable to initialize intf0, err -19 [ 227.260658][ T4321] imon:imon_probe: failed to initialize context! [ 227.263434][ T6436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.523: bg 0: block 112: padding at end of block bitmap is not set [ 227.267146][ T4321] imon 6-1:155.0: unable to register, err -19 [ 227.299470][ T6436] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 227.317344][ T6436] EXT4-fs (loop2): This should not happen!! Data will be lost [ 227.317344][ T6436] [ 227.329353][ T6436] EXT4-fs (loop2): Total free blocks count 0 [ 227.395302][ T6436] EXT4-fs (loop2): Free/Dirty block details [ 227.424664][ T6436] EXT4-fs (loop2): free_blocks=0 [ 227.440492][ T6436] EXT4-fs (loop2): dirty_blocks=16 [ 227.456874][ T6436] EXT4-fs (loop2): Block reservation details [ 227.463404][ T6436] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 228.135262][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 228.509439][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 228.729572][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 228.739932][ T7] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 228.752682][ T7] usb 3-1: config 0 has no interface number 0 [ 228.762692][ T7] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.774473][ T7] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.787697][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 228.798190][ T7] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 228.815579][ T7] usb 3-1: Product: syz [ 228.828863][ T7] usb 3-1: SerialNumber: syz [ 228.847042][ T7] usb 3-1: config 0 descriptor?? [ 228.861870][ T7] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 228.881950][ T7] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 229.175130][ T27] usb 6-1: USB disconnect, device number 8 [ 230.328726][ T6490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 230.688330][ T6499] device syzkaller0 entered promiscuous mode [ 230.809846][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.818918][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.827446][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.836253][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.843852][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.851086][ T4319] usb 3-1: USB disconnect, device number 5 [ 230.869329][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 230.876605][ T4319] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 231.363782][ T6513] netlink: 'syz.0.547': attribute type 2 has an invalid length. [ 231.763485][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.860072][ T4321] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 232.341154][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.364311][ T27] usb 2-1: config 0 has no interfaces? [ 232.370128][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 232.377145][ T4321] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 232.415309][ T27] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 232.439287][ T4321] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 232.455883][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.487752][ T4321] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 232.502657][ T27] usb 2-1: config 0 descriptor?? [ 232.530809][ T4321] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 232.556819][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.575406][ T4321] usb 1-1: Product: syz [ 232.585528][ T4321] usb 1-1: Manufacturer: syz [ 232.595640][ T4321] usb 1-1: SerialNumber: syz [ 232.644910][ T4321] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 232.676437][ T4321] imon 1-1:155.0: unable to initialize intf0, err -19 [ 232.691826][ T6526] loop2: detected capacity change from 0 to 256 [ 232.699211][ T4321] imon:imon_probe: failed to initialize context! [ 232.737030][ T4321] imon 1-1:155.0: unable to register, err -19 [ 233.124716][ T6535] loop4: detected capacity change from 0 to 512 [ 233.155049][ T6534] loop1: detected capacity change from 0 to 4096 [ 233.156173][ T6535] EXT4-fs: inline encryption not supported [ 233.175263][ T6534] EXT4-fs: inline encryption not supported [ 233.218359][ T6534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.244667][ T6534] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.265632][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.289326][ T6535] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.306098][ T6534] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 233.386752][ T6534] System zones: 0-5 [ 233.408937][ T6534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.480329][ T6535] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 233.538882][ T6535] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 233.574126][ T6546] loop5: detected capacity change from 0 to 512 [ 233.586973][ T6535] EXT4-fs (loop4): This should not happen!! Data will be lost [ 233.586973][ T6535] [ 233.630819][ T6535] EXT4-fs (loop4): Total free blocks count 0 [ 233.651399][ T6546] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 233.667385][ T6535] EXT4-fs (loop4): Free/Dirty block details [ 233.695647][ T6546] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.711971][ T6535] EXT4-fs (loop4): free_blocks=65280 [ 233.737105][ T6535] EXT4-fs (loop4): dirty_blocks=1 [ 233.782341][ T6535] EXT4-fs (loop4): Block reservation details [ 233.812100][ T6535] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 233.971105][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 234.271526][ T7] usb 1-1: USB disconnect, device number 13 [ 234.339513][ T6543] loop2: detected capacity change from 0 to 40427 [ 234.398294][ T6543] overlayfs: statfs failed on './file0' [ 234.431549][ T6534] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 234.524072][ T4781] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 234.546144][ T4781] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 234.829089][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.844756][ T6559] EXT4-fs (loop5): unmounting filesystem. [ 234.907579][ T5951] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.079379][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 235.093608][ T7] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 235.108497][ T7] usb 1-1: config 0 has no interface number 0 [ 235.130826][ T7] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.147989][ T7] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 235.178080][ T7] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 235.193046][ T7] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 235.205055][ T7] usb 1-1: Product: syz [ 235.213657][ T7] usb 1-1: SerialNumber: syz [ 235.222232][ T7] usb 1-1: config 0 descriptor?? [ 235.233109][ T5951] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.237643][ T7] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 235.245900][ T6574] loop2: detected capacity change from 0 to 512 [ 235.260962][ T7] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12 [ 235.314041][ T6574] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.565: invalid indirect mapped block 10 (level 1) [ 235.409985][ T5951] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.464480][ T6574] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.565: invalid indirect mapped block 8 (level 1) [ 235.563053][ T5951] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.580769][ T7] usb 2-1: USB disconnect, device number 7 [ 235.594441][ T6574] EXT4-fs (loop2): 1 truncate cleaned up [ 235.618059][ T6574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.648559][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 235.836069][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 236.260236][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.274506][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.284524][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.297986][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.305621][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.313198][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.424502][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 236.432258][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 236.440381][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 236.454315][ T130] usb 1-1: USB disconnect, device number 14 [ 236.484987][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 236.492019][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 236.511856][ T6597] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 236.533261][ T130] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 236.839164][ T127] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 237.049053][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 237.062654][ T127] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 237.096984][ T127] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 237.097047][ T127] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 237.112625][ T127] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 237.112684][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.112732][ T127] usb 2-1: Product: syz [ 237.112772][ T127] usb 2-1: Manufacturer: syz [ 237.112813][ T127] usb 2-1: SerialNumber: syz [ 237.138037][ T127] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 237.138095][ T127] imon 2-1:155.0: unable to initialize intf0, err -19 [ 237.138115][ T127] imon:imon_probe: failed to initialize context! [ 237.138131][ T127] imon 2-1:155.0: unable to register, err -19 [ 237.226142][ T6594] chnl_net:caif_netlink_parms(): no params data found [ 237.298616][ T6590] loop4: detected capacity change from 0 to 40427 [ 237.331297][ T6590] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 237.402691][ T6590] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.412308][ T6590] F2FS-fs (loop4): invalid crc value [ 237.472133][ T6590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.661174][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.682060][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.738899][ T6594] device bridge_slave_0 entered promiscuous mode [ 237.788210][ T6590] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 237.805167][ T6590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.883865][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.925870][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.967490][ T6594] device bridge_slave_1 entered promiscuous mode [ 238.114958][ T6594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.148135][ T6594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.372953][ T6594] team0: Port device team_slave_0 added [ 238.389155][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 238.457446][ T6594] team0: Port device team_slave_1 added [ 238.857057][ T5951] device hsr_slave_0 left promiscuous mode [ 238.931646][ T5951] device hsr_slave_1 left promiscuous mode [ 238.970689][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.986271][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.030478][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.041956][ T6632] loop0: detected capacity change from 0 to 512 [ 239.048677][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.060194][ T5951] device bridge_slave_1 left promiscuous mode [ 239.098581][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.100481][ T6632] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.576: missing EA_INODE flag [ 239.148695][ T6632] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.576: error while reading EA inode 2 err=-117 [ 239.209194][ T6632] EXT4-fs (loop0): 1 orphan inode deleted [ 239.216306][ T6632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.272389][ T5951] device bridge_slave_0 left promiscuous mode [ 239.279879][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.402866][ T5951] device veth1_macvtap left promiscuous mode [ 239.413241][ T5951] device veth0_macvtap left promiscuous mode [ 239.430316][ T5951] device veth1_vlan left promiscuous mode [ 239.436125][ T5951] device veth0_vlan left promiscuous mode [ 239.461069][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 239.824961][ T130] usb 2-1: USB disconnect, device number 8 [ 240.469254][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 240.970484][ T6628] loop4: detected capacity change from 0 to 131072 [ 241.005915][ T6628] F2FS-fs (loop4): Test dummy encryption mode enabled [ 241.036514][ T6628] F2FS-fs (loop4): invalid crc value [ 241.093146][ T6628] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.438417][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 241.528639][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 241.598104][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.687052][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.095060][ T6635] loop0: detected capacity change from 0 to 131072 [ 242.128906][ T6635] F2FS-fs (loop0): invalid crc value [ 242.157378][ T6635] F2FS-fs (loop0): Found nat_bits in checkpoint [ 242.347768][ T6635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 242.398531][ T6635] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753 [ 242.415802][ T6659] loop2: detected capacity change from 0 to 512 [ 242.456985][ T6659] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.549043][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 242.559487][ T6659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.568791][ T6659] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.601331][ T5951] bond0 (unregistering): Released all slaves [ 242.788915][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 242.972260][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.984016][ T6657] loop4: detected capacity change from 0 to 40427 [ 242.989238][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.995872][ T6657] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 243.039118][ T6657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 243.106760][ T6657] F2FS-fs (loop4): invalid crc value [ 243.117211][ T6594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.176107][ T6657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.199649][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.229021][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.348196][ T6594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.420445][ T6657] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 243.478152][ T6657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 243.553710][ T6594] device hsr_slave_0 entered promiscuous mode [ 243.591645][ T6594] device hsr_slave_1 entered promiscuous mode [ 243.614692][ T6594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.669623][ T6594] Cannot create hsr debugfs directory [ 243.675208][ T6681] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.589'. [ 243.704568][ T6681] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.589'. [ 243.749178][ T6681] netlink: 802 bytes leftover after parsing attributes in process `syz.2.589'. [ 244.492819][ T6594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.523486][ T6594] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.535793][ T6703] loop0: detected capacity change from 0 to 16 [ 244.550373][ T6594] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.587683][ T6594] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.604749][ T6703] erofs: (device loop0): mounted with root inode @ nid 36. [ 244.640189][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 244.932443][ T6594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.082200][ T6709] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 245.093071][ T6709] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 245.317857][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.666627][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.692679][ T6594] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.765851][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.785145][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.842318][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.849521][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.958644][ T6714] netlink: 'syz.0.597': attribute type 29 has an invalid length. [ 245.968953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.978447][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.000862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.044766][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.051978][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.094435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.103905][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.121900][ T6714] netlink: 'syz.0.597': attribute type 29 has an invalid length. [ 246.140045][ T6719] netlink: 'syz.0.597': attribute type 29 has an invalid length. [ 246.177525][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.218105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.285567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.306131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.324694][ T6594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.384631][ T6594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.417606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.454826][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.483656][ T6731] binder: 6728:6731 unknown command 1074553619 [ 246.500184][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.533223][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.574900][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.584330][ T6731] binder: 6728:6731 ioctl c0306201 200000000040 returned -22 [ 246.596743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.555925][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.579816][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.613001][ T6594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.840121][ T6735] loop2: detected capacity change from 0 to 40427 [ 247.914269][ T6735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 247.964843][ T6735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.999159][ T130] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 248.019708][ T6735] F2FS-fs (loop2): invalid crc value [ 248.097854][ T6735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.190894][ T130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.226610][ T130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.263779][ T6735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 248.279196][ T6735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.288059][ T130] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 248.338613][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.375454][ T130] usb 1-1: config 0 descriptor?? [ 248.480540][ T33] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 248.505432][ T33] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 248.805783][ T130] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 5/7 [ 248.819954][ T130] arvo 0003:1E7D:30D4.0007: parse failed [ 248.825882][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.843622][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.852912][ T130] arvo: probe of 0003:1E7D:30D4.0007 failed with error -22 [ 248.961323][ T6594] device veth0_vlan entered promiscuous mode [ 248.974549][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.984125][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.993871][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.002308][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.023026][ T127] usb 1-1: USB disconnect, device number 15 [ 249.272077][ T6782] loop2: detected capacity change from 0 to 512 [ 249.374874][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 249.384226][ T6782] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.989570][ T26] audit: type=1800 audit(1700006458.551:67): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.609" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 250.334143][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 250.512225][ T6801] binder: 6800:6801 unknown command 1074553619 [ 250.518744][ T6801] binder: 6800:6801 ioctl c0306201 200000000040 returned -22 [ 252.111686][ T6594] device veth1_vlan entered promiscuous mode [ 252.125890][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.135734][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.169525][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.178262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.213080][ T6594] device veth0_macvtap entered promiscuous mode [ 252.235165][ T6594] device veth1_macvtap entered promiscuous mode [ 252.321328][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.363486][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.413757][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.450845][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.484162][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.533420][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.553575][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.609575][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.630464][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.652995][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.678896][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.715367][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.740423][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.762419][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.779899][ T6594] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.788853][ T6594] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.798282][ T6594] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.807906][ T6594] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.966359][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.760479][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.637075][ T6833] device syzkaller0 entered promiscuous mode [ 254.885673][ T6856] netlink: 'syz.2.626': attribute type 29 has an invalid length. [ 255.594463][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.600972][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.435838][ T6878] loop4: detected capacity change from 0 to 512 [ 256.461316][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.479205][ T6878] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.881807][ T26] audit: type=1800 audit(1700006465.461:68): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.631" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 257.431732][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 257.772150][ T6889] CIFS: iocharset name too long [ 258.291044][ T6856] netlink: 'syz.2.626': attribute type 29 has an invalid length. [ 258.326231][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.371414][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.397392][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.446810][ T6891] device bridge_slave_0 left promiscuous mode [ 258.455270][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.468257][ T6891] device bridge_slave_1 left promiscuous mode [ 258.482673][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.495588][ T6891] bond0: (slave bond_slave_0): Releasing backup interface [ 258.523094][ T6891] bond0: (slave bond_slave_1): Releasing backup interface [ 258.532500][ T6898] fuse: Bad value for 'fd' [ 258.700665][ T6891] team0: Port device team_slave_0 removed [ 258.738931][ T6891] team0: Port device team_slave_1 removed [ 258.745260][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.753192][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.762737][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.777080][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.929584][ T6883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.948487][ T6883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.996670][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.007258][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.056002][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.478424][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.501860][ T6910] device veth1_to_bond entered promiscuous mode [ 259.523554][ T6918] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.642'. [ 259.548867][ T6918] netlink: 5304 bytes leftover after parsing attributes in process `syz.4.642'. [ 259.569090][ T6918] netlink: 802 bytes leftover after parsing attributes in process `syz.4.642'. [ 260.746713][ T6952] tmpfs: Bad value for 'mpol' [ 264.968938][ T7000] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 266.833030][ T127] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.041016][ T127] usb 7-1: config 0 has no interfaces? [ 267.046601][ T127] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 267.185510][ T127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.551142][ T127] usb 7-1: config 0 descriptor?? [ 267.852580][ T7046] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 267.936701][ T7031] FAULT_INJECTION: forcing a failure. [ 267.936701][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 267.950502][ T7046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.966634][ T7052] CIFS: iocharset name too long [ 267.995419][ T7031] CPU: 1 PID: 7031 Comm: syz.6.673 Not tainted syzkaller #0 [ 268.002768][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.012858][ T7031] Call Trace: [ 268.016180][ T7031] [ 268.019123][ T7031] dump_stack_lvl+0x188/0x24e [ 268.023836][ T7031] ? show_regs_print_info+0x12/0x12 [ 268.029070][ T7031] ? load_image+0x410/0x410 [ 268.033622][ T7031] ? __might_sleep+0xd0/0xd0 [ 268.038227][ T7031] ? __lock_acquire+0x7c40/0x7c40 [ 268.043284][ T7031] should_fail_ex+0x390/0x4c0 [ 268.048074][ T7031] should_failslab+0x5/0x20 [ 268.052588][ T7031] slab_pre_alloc_hook+0x59/0x300 [ 268.057655][ T7031] kmem_cache_alloc+0x56/0x2f0 [ 268.062535][ T7031] ? __kernfs_new_node+0xe1/0x7f0 [ 268.067600][ T7031] __kernfs_new_node+0xe1/0x7f0 [ 268.072501][ T7031] ? __lock_acquire+0x7c40/0x7c40 [ 268.077567][ T7031] ? kernfs_new_node+0x250/0x250 [ 268.082553][ T7031] kernfs_new_node+0x148/0x250 [ 268.087361][ T7031] __kernfs_create_file+0x47/0x2e0 [ 268.092514][ T7031] sysfs_add_file_mode_ns+0x233/0x2f0 [ 268.097945][ T7031] sysfs_create_file_ns+0x128/0x1b0 [ 268.103183][ T7031] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 268.109114][ T7031] ? kset_find_obj+0xdf/0x100 [ 268.113830][ T7031] ? module_add_driver+0x27a/0x290 [ 268.118980][ T7031] ? sysfs_create_groups+0x9c/0x120 [ 268.124220][ T7031] bus_add_driver+0x441/0x5d0 [ 268.128932][ T7031] driver_register+0x32d/0x430 [ 268.133776][ T7031] usb_gadget_register_driver_owner+0xf5/0x260 [ 268.139978][ T7031] raw_ioctl+0x13a0/0x3cd0 [ 268.143402][ T7047] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 268.144413][ T7031] ? __kmem_cache_free+0xb6/0x200 [ 268.144441][ T7031] ? tomoyo_path_number_perm+0x205/0x650 [ 268.167939][ T7031] ? tomoyo_path_number_perm+0x5a4/0x650 [ 268.173612][ T7031] ? tomoyo_path_number_perm+0x205/0x650 [ 268.179280][ T7031] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 268.184769][ T7031] ? make_qualifier+0x3b0/0x3b0 [ 268.189690][ T7031] ? __fget_files+0x28/0x460 [ 268.194320][ T7031] ? bpf_lsm_file_ioctl+0x5/0x10 [ 268.199284][ T7031] ? security_file_ioctl+0x7c/0xa0 [ 268.204420][ T7031] ? make_qualifier+0x3b0/0x3b0 [ 268.209302][ T7031] __se_sys_ioctl+0xfa/0x170 [ 268.213950][ T7031] do_syscall_64+0x4c/0xa0 [ 268.214666][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.218380][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 268.230270][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 268.234982][ T7031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.240914][ T7031] RIP: 0033:0x7fdc3f99ddeb [ 268.245356][ T7031] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 268.264987][ T7031] RSP: 002b:00007fdc40828f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.273427][ T7031] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdc3f99ddeb [ 268.281427][ T7031] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 268.289422][ T7031] RBP: 00007fdc40829fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 268.297415][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.305408][ T7031] R13: 00002000000006c0 R14: 0000000000000000 R15: 0000000000000868 [ 268.313460][ T7031] [ 268.334465][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.397011][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.556468][ T7062] zram0: detected capacity change from 0 to 8 [ 268.797719][ T7031] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 268.816476][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.846618][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.048734][ T27] usb 7-1: USB disconnect, device number 2 [ 270.143373][ T7090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.151350][ T7090] IPv6: NLM_F_CREATE should be set when creating new route [ 270.158670][ T7090] IPv6: NLM_F_CREATE should be set when creating new route [ 270.165921][ T7090] IPv6: NLM_F_CREATE should be set when creating new route [ 270.494790][ T7095] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 272.522341][ T4321] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 272.770463][ T4321] usb 1-1: Dual-Role OTG device on HNP port [ 272.786366][ T4321] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 272.819672][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.945750][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 273.015442][ T4321] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 12:b4:ea:36:72:9b [ 273.072879][ T7161] netlink: 'syz.6.701': attribute type 2 has an invalid length. [ 273.134658][ T7164] Bluetooth: MGMT ver 1.22 [ 273.349146][ T4375] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 273.549080][ T4375] usb 7-1: Using ep0 maxpacket: 32 [ 273.663199][ T4375] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 273.674494][ T7183] overlayfs: missing 'lowerdir' [ 273.688308][ T4375] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 273.702068][ T4375] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 273.840150][ T4375] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 273.857183][ T4375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.876578][ T4375] usb 7-1: Product: syz [ 273.906398][ T4375] usb 7-1: Manufacturer: syz [ 273.915714][ T4375] usb 7-1: SerialNumber: syz [ 273.960510][ T4375] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 273.973581][ T7190] loop0: detected capacity change from 0 to 3904 [ 273.988473][ T4375] imon 7-1:155.0: unable to initialize intf0, err -19 [ 274.024934][ T4375] imon:imon_probe: failed to initialize context! [ 274.055122][ T4375] imon 7-1:155.0: unable to register, err -19 [ 274.083789][ T7190] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 274.099149][ T7190] ldm_validate_privheads(): Disk read failed. [ 274.170705][ T7190] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 274.238076][ T7190] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 274.330682][ T7190] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 274.402460][ T7190] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 274.472112][ T7190] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 274.486117][ T7190] loop0: [ 274.497185][ T7190] loop0: partition table partially beyond EOD, truncated [ 276.951445][ T7230] mmap: syz.2.718 (7230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 280.223186][ T127] usb 7-1: USB disconnect, device number 3 [ 280.235150][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 280.374382][ T7270] loop0: detected capacity change from 0 to 16 [ 280.417940][ T7270] erofs: (device loop0): mounted with root inode @ nid 36. [ 281.621720][ T7287] device veth1_macvtap left promiscuous mode [ 281.638368][ T7287] device veth1_macvtap entered promiscuous mode [ 286.007692][ T7338] netlink: 'syz.4.740': attribute type 2 has an invalid length. [ 288.901715][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 291.873085][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 292.159147][ T7] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 292.546699][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.564486][ T7] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 292.577244][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.588677][ T7] usb 7-1: Product: syz [ 292.595152][ T7] usb 7-1: Manufacturer: syz [ 293.149078][ T7] usb 7-1: SerialNumber: syz [ 293.695938][ T7425] netlink: 'syz.0.766': attribute type 2 has an invalid length. [ 293.769135][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 293.782665][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.838025][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.009124][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 294.020635][ T27] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 294.068550][ T27] usb 3-1: config 0 has no interface number 0 [ 294.096454][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.135105][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.181245][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 294.212949][ T27] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 294.235488][ T27] usb 3-1: Product: syz [ 294.249147][ T27] usb 3-1: SerialNumber: syz [ 294.298211][ T27] usb 3-1: config 0 descriptor?? [ 294.327184][ T27] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 294.379392][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input13 [ 295.125295][ T7442] loop4: detected capacity change from 0 to 256 [ 297.110948][ T7] snd-usb-caiaq 7-1:1.0: can't set alt interface. [ 297.117488][ T7] usb 7-1: unable to init card! (ret=-5) [ 297.199547][ T7] snd-usb-caiaq: probe of 7-1:1.0 failed with error -5 [ 297.259605][ T7] usb 7-1: USB disconnect, device number 4 [ 297.742839][ T7458] ------------[ cut here ]------------ [ 297.748352][ T7458] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3091 (size 64) [ 297.761942][ T7458] WARNING: CPU: 0 PID: 7458 at kernel/trace/trace.c:3091 __ftrace_trace_stack+0x3ce/0x530 [ 297.771926][ T7458] Modules linked in: [ 297.775847][ T7458] CPU: 0 PID: 7458 Comm: syz.6.773 Not tainted syzkaller #0 [ 297.783217][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.793367][ T7458] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 297.800103][ T7458] Code: fe ff ff e8 54 4c fc ff c6 05 42 bb 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7b 90 8a 4c 89 ee 48 c7 c2 00 93 90 8a e8 82 d3 c7 ff <0f> 0b e9 25 fe ff ff e8 26 4c fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 297.820135][ T7458] RSP: 0018:ffffc9000c9e78b8 EFLAGS: 00010246 [ 297.826234][ T7458] RAX: b68810a0589d1500 RBX: ffff8880174c2028 RCX: ffff88802d9fbc00 [ 297.834264][ T7458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 297.842289][ T7458] RBP: ffff8880174c2018 R08: ffffc9000c9e7547 R09: 1ffff9200193cea8 [ 297.850310][ T7458] R10: dffffc0000000000 R11: fffff5200193cea9 R12: ffff8880b8e2b5a0 [ 297.858305][ T7458] R13: 0000000000000080 R14: ffff8880174c2010 R15: 0000000000001d22 [ 297.866345][ T7458] FS: 000055558c2fe500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 297.875372][ T7458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.882014][ T7458] CR2: 00007f51e15b4d58 CR3: 0000000020341000 CR4: 00000000003526f0 [ 297.890041][ T7458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.898033][ T7458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.906052][ T7458] Call Trace: [ 297.909365][ T7458] [ 297.912311][ T7458] stacktrace_trigger+0xf0/0x140 [ 297.917279][ T7458] ? stacktrace_trigger_print+0xe0/0xe0 [ 297.922883][ T7458] ? trace_event_buffer_commit+0x236/0x780 [ 297.928736][ T7458] event_triggers_post_call+0xfd/0x180 [ 297.934248][ T7458] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 297.941493][ T7458] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 297.947160][ T7458] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 297.953896][ T7458] stimer_cleanup+0x3a7/0x430 [ 297.958610][ T7458] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 297.963545][ T7458] kvm_arch_vcpu_destroy+0xba/0x270 [ 297.968783][ T7458] kvm_destroy_vcpus+0xdd/0x250 [ 297.973690][ T7458] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 297.979631][ T7458] ? xa_find_after+0xab/0x430 [ 297.984336][ T7458] ? kvm_ioapic_destroy+0xa8/0xc0 [ 297.989412][ T7458] kvm_arch_destroy_vm+0x31a/0x410 [ 297.994548][ T7458] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 298.000148][ T7458] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 298.005629][ T7458] ? synchronize_srcu+0x18f/0x1b0 [ 298.010716][ T7458] ? mmu_notifier_unregister+0x302/0x390 [ 298.016371][ T7458] ? mmu_notifier_unregister+0xad/0x390 [ 298.022003][ T7458] kvm_put_kvm+0xdbb/0x1a10 [ 298.026533][ T7458] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 298.031859][ T7458] kvm_vm_release+0x42/0x50 [ 298.036381][ T7458] __fput+0x20a/0x8b0 [ 298.040598][ T7458] task_work_run+0x1d0/0x260 [ 298.045215][ T7458] ? task_work_cancel+0x220/0x220 [ 298.050292][ T7458] ? __close_range+0x20c/0x770 [ 298.055083][ T7458] ? exit_to_user_mode_loop+0x3b/0x110 [ 298.060614][ T7458] exit_to_user_mode_loop+0xe6/0x110 [ 298.065938][ T7458] exit_to_user_mode_prepare+0xee/0x180 [ 298.071558][ T7458] syscall_exit_to_user_mode+0x16/0x40 [ 298.077046][ T7458] do_syscall_64+0x58/0xa0 [ 298.081520][ T7458] ? clear_bhb_loop+0x60/0xb0 [ 298.086224][ T7458] ? clear_bhb_loop+0x60/0xb0 [ 298.090960][ T7458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.096887][ T7458] RIP: 0033:0x7fdc3f99e159 [ 298.101352][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.121037][ T7458] RSP: 002b:00007ffe9a30d588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 298.129559][ T7458] RAX: 0000000000000000 RBX: 00007ffe9a30d670 RCX: 00007fdc3f99e159 [ 298.137564][ T7458] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 298.146213][ T7458] RBP: 0000000000048a68 R08: 0000000000000001 R09: 0000000000000000 [ 298.154243][ T7458] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007ffe9a30d6b0 [ 298.162260][ T7458] R13: 00007fdc3fc25fac R14: 0000000000048ac4 R15: 00007fdc3fc25fa0 [ 298.170300][ T7458] [ 298.173362][ T7458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.180653][ T7458] CPU: 0 PID: 7458 Comm: syz.6.773 Not tainted syzkaller #0 [ 298.187953][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.198032][ T7458] Call Trace: [ 298.201361][ T7458] [ 298.204342][ T7458] dump_stack_lvl+0x188/0x24e [ 298.209050][ T7458] ? memcpy+0x3c/0x60 [ 298.213046][ T7458] ? show_regs_print_info+0x12/0x12 [ 298.218266][ T7458] ? load_image+0x410/0x410 [ 298.222800][ T7458] panic+0x2d3/0x710 [ 298.226717][ T7458] ? bpf_jit_dump+0xd0/0xd0 [ 298.231271][ T7458] __warn+0x2f8/0x4f0 [ 298.235279][ T7458] ? __ftrace_trace_stack+0x3ce/0x530 [ 298.240673][ T7458] ? __ftrace_trace_stack+0x3ce/0x530 [ 298.246241][ T7458] report_bug+0x2ba/0x4f0 [ 298.250594][ T7458] ? __ftrace_trace_stack+0x3ce/0x530 [ 298.255990][ T7458] handle_bug+0x3a/0x70 [ 298.260172][ T7458] exc_invalid_op+0x16/0x40 [ 298.264701][ T7458] asm_exc_invalid_op+0x16/0x20 [ 298.269570][ T7458] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 298.275569][ T7458] Code: fe ff ff e8 54 4c fc ff c6 05 42 bb 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7b 90 8a 4c 89 ee 48 c7 c2 00 93 90 8a e8 82 d3 c7 ff <0f> 0b e9 25 fe ff ff e8 26 4c fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 298.295371][ T7458] RSP: 0018:ffffc9000c9e78b8 EFLAGS: 00010246 [ 298.301563][ T7458] RAX: b68810a0589d1500 RBX: ffff8880174c2028 RCX: ffff88802d9fbc00 [ 298.309555][ T7458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 298.317544][ T7458] RBP: ffff8880174c2018 R08: ffffc9000c9e7547 R09: 1ffff9200193cea8 [ 298.325532][ T7458] R10: dffffc0000000000 R11: fffff5200193cea9 R12: ffff8880b8e2b5a0 [ 298.333520][ T7458] R13: 0000000000000080 R14: ffff8880174c2010 R15: 0000000000001d22 [ 298.341564][ T7458] ? __ftrace_trace_stack+0x3ce/0x530 [ 298.346968][ T7458] stacktrace_trigger+0xf0/0x140 [ 298.351930][ T7458] ? stacktrace_trigger_print+0xe0/0xe0 [ 298.357497][ T7458] ? trace_event_buffer_commit+0x236/0x780 [ 298.363322][ T7458] event_triggers_post_call+0xfd/0x180 [ 298.368806][ T7458] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 298.376022][ T7458] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 298.381685][ T7458] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 298.388396][ T7458] stimer_cleanup+0x3a7/0x430 [ 298.393102][ T7458] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 298.397982][ T7458] kvm_arch_vcpu_destroy+0xba/0x270 [ 298.403205][ T7458] kvm_destroy_vcpus+0xdd/0x250 [ 298.408091][ T7458] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 298.414015][ T7458] ? xa_find_after+0xab/0x430 [ 298.418724][ T7458] ? kvm_ioapic_destroy+0xa8/0xc0 [ 298.423808][ T7458] kvm_arch_destroy_vm+0x31a/0x410 [ 298.428946][ T7458] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 298.434516][ T7458] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 298.440021][ T7458] ? synchronize_srcu+0x18f/0x1b0 [ 298.445070][ T7458] ? mmu_notifier_unregister+0x302/0x390 [ 298.450755][ T7458] ? mmu_notifier_unregister+0xad/0x390 [ 298.456329][ T7458] kvm_put_kvm+0xdbb/0x1a10 [ 298.460860][ T7458] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 298.466169][ T7458] kvm_vm_release+0x42/0x50 [ 298.470694][ T7458] __fput+0x20a/0x8b0 [ 298.474703][ T7458] task_work_run+0x1d0/0x260 [ 298.479320][ T7458] ? task_work_cancel+0x220/0x220 [ 298.484400][ T7458] ? __close_range+0x20c/0x770 [ 298.489194][ T7458] ? exit_to_user_mode_loop+0x3b/0x110 [ 298.494682][ T7458] exit_to_user_mode_loop+0xe6/0x110 [ 298.499994][ T7458] exit_to_user_mode_prepare+0xee/0x180 [ 298.505564][ T7458] syscall_exit_to_user_mode+0x16/0x40 [ 298.511050][ T7458] do_syscall_64+0x58/0xa0 [ 298.515492][ T7458] ? clear_bhb_loop+0x60/0xb0 [ 298.520191][ T7458] ? clear_bhb_loop+0x60/0xb0 [ 298.524902][ T7458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.530821][ T7458] RIP: 0033:0x7fdc3f99e159 [ 298.535269][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.554904][ T7458] RSP: 002b:00007ffe9a30d588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 298.563341][ T7458] RAX: 0000000000000000 RBX: 00007ffe9a30d670 RCX: 00007fdc3f99e159 [ 298.571343][ T7458] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 298.579337][ T7458] RBP: 0000000000048a68 R08: 0000000000000001 R09: 0000000000000000 [ 298.587331][ T7458] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007ffe9a30d6b0 [ 298.595327][ T7458] R13: 00007fdc3fc25fac R14: 0000000000048ac4 R15: 00007fdc3fc25fa0 [ 298.603336][ T7458] [ 298.606544][ T7458] Kernel Offset: disabled [ 298.610868][ T7458] Rebooting in 86400 seconds..