last executing test programs: 8.503531054s ago: executing program 4 (id=816): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d00000000000000029000000360000002b160000000000000479d0cbe7ac5a4c0c91e431afb0540cce84c78d9fd9c2045b8eabeb887bf81e9da1072db683faf2fb2d478d23bbaa1a018c89d900571c06bb0a3784c9c89fbbc94e831ce2b032f0eab015952b46f39c50da1ecfed78389dd92b5bc14a2d750d0e1dd51616532740cbffff88a63dc0351f29a3499fe1bf330747784830d62f4e93bb42da8000010007100000000002800900090000000000000004010405020092010600000000000005020000c910ff010000000000000000000000000001"], 0xe8}}], 0x2, 0x4046040) 7.881129487s ago: executing program 4 (id=819): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) creat(&(0x7f0000000000)='./file1\x00', 0x14c) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r4, &(0x7f00000000c0)={0x18}, 0xfffffdef) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 7.825607391s ago: executing program 3 (id=820): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x2) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000300)) 7.308155402s ago: executing program 3 (id=823): read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0x8000000000000001, 0x0, 0x2, 0x0, 0x200004002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000003, 0x4, 0x8f], 0xeeee8000, 0x2010d3}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.051414622s ago: executing program 0 (id=824): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r2 = socket$unix(0x1, 0x6, 0x0) ioctl$FIOCLEX(r2, 0x5451) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x7, 0x9, 0x5, 0x401, 0x80, 0x2, 0xd61}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) ioprio_get$uid(0x2, 0x0) r8 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x177, &(0x7f0000000680)="$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") 7.051221915s ago: executing program 1 (id=825): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=") symlink(0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 6.015521744s ago: executing program 1 (id=826): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) unshare(0x2040400) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4050) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x4, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.754945463s ago: executing program 2 (id=827): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2000, 0x0}) 5.067599059s ago: executing program 3 (id=828): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x507502) syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0xdc, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0xafbcb7aa, {{0x2, 0x4e22, @remote}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 4.528532909s ago: executing program 4 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000844000001"], 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x2014408, &(0x7f0000000340)={[{@barrier}, {@nodecompose}, {@nobarrier}, {}, {@type={'type', 0x3d, "be8a3a3d"}}, {@nodecompose}, {@nobarrier}, {@uid}, {@nobarrier}]}, 0x1, 0x6f4, &(0x7f0000000400)="$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") clock_nanosleep(0xfffffffffffffdfc, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001300)='cgroup.procs\x00', 0x2, 0x0) getpgrp(0xffffffffffffffff) write$cgroup_pid(r1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000400)=ANY=[@ANYBLOB='adinicb,dmode=00000000000000000000007,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',longad,iocharset=macinuit,mode=00000000000000000010100,iocharset=cp869,longad,volume=00000000000000000001,umask=00000000000000000000005,gid=forget,gid=', @ANYRESDEC=0x0, @ANYBLOB="0020000000009d4ddeaacab395b9f991df9b87deb1307183b61072b005262fdedd43ebc1cd29f71d6a71e3521c64de57347cb7de247b53636b748de2de5d98312095bbae4dcfa9ee41641e60ff7046a70014d81678944496f65f534aeebfe14c130570662e48a97f75be46c718b5a7b46b35289108ce1e3673ffe988833f47284585b0ee3f6682afd2820dacb1103c1c660fc6dc4d126862c681925900ff5d144bb45223fbd76514328ed7e4adf730003182dbcababd457e4586999a546c2d395bb4dd5c7c77a5a67e2bf670f78df1131283ea897349f2d0ab64deb1901bef9e12912076066c6424000000"], 0x1, 0xc51, &(0x7f0000003c00)="$eJzs3U9sHNd9B/DfGy7FldxWTJwqThoHm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZkXfQ2gMAPBAXB772qkz2z3/AYDH1pWd/v8fAAAAAAAAAAAAAAA4KFIU8WSkmLu8liaq7x31S+3+W7fHh0e2r3Y4VTX7qvLlT/30mbPnvvz80PluXmrPfED9vfbZeHXsysXGS7M35+anFhamJhvjM+1rs5NT97yF3dbf6kR1ABo3X7s1ef36QuPMc2c3rb49+N7AE8cGLww9c/Lpbtnx4ZGRsY0i9d7ytftuSMdOIzwORREnI8Wz3/9ZakVEEbs/FvUHe+63Olx14kTVifHhkaoj0+3WzGK5crR7IIqIRk+lZvcYbX8uotb/QPuws2bEUtn8ssEnyu6NzbXmW1enpxqjrfnF9mJ7dmY0dVpb9qcRRZxPEcsRsTpw9+b6o4hapPju0bV0Nb/1ozoOX6oGBu/cjmIf+3gPynY2+qvL9+CfswNsIIp4JVL8/O3jcS3fZ6p7zRcjXinzhxFvlvliRCovjHMR725zHfFoqkURf16e/wtrabK6H3TvK5e+3vjqzPXZnrLd+8pHfD7cdad4SM+Hw1vywTjg96Z6FNGq7vhr6f5/swMAAAAAAAAAAAAAAADAXjscRXwmUrz8b39UjSuOalz60QtDvz/4y71jxp/6kO2UZZ+LiKUiYvkexuQeygMDR9NoSg95LPHHWT2K+OM8/u/bD7sxAAAAAAAAAAAAAAAAAAAAH2tF/DRSvPDO8bQcvXOKt2duNK60rk53ZoXtzv3bnTN9fX19vZE62cw5kXMp53LOlZyrOaPI9XM2c07kXMq5nHMl52rO6Mv1czb7Nua3r+rn5cs5V3Ku5oxarp+zmXMi51LO5ZwrOVdzxgGZuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HFSRBHvR4rvfHMtRYqIZsREdHJl4GG3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDaQifhApGn/QvLOsFhGp+rfjePnLuWgeKvOT0Rwq88VoXszZqrLW/PZDaD+705+K+EmkGKi/deeE5/Pf3/l25zKIN7+18e2ztU72dVcOvjfwxLGjF4ZGPv/UTp/Tdg04cak9c+t2Y3x4ZGSsZ3Et7/2TPcsG836Lvek6EbHw+huvtaanp+bv/0N5Cdxn9e6Z3MXeH+SHVHtkmurDXnyI2oFoxsPp+yb1h3FzYt+Vz/93I8Vvv/Pv3Qd+5/lfj1/qfLvzhI9f/MnG8/+FrRu6x+d/bWu9/PwvnwTbPf+f7Fn2Qv7dSH8tor54c67/WER94fU3TrZvtm5M3ZiaOXfq1FeGhr5y9lT/oYj69fb0VM+nPTlcAAAAAAAAAAAAAAAAAA9OKuJ3I0XrJ2upERG3q/FagxeGnjn5dF/0VeOtNo3bfnXsysXGS7M35+anFhamJhvjM+1rs5NT97q7ejXca3x4ZF8686EO73P7D9dfmp17fb594w8Xt11/pH7x6sLifOva9qvjcBQRzd4lJ6oGjw+PVI2ebrdmqqqj2w6m/+j6UxH/ESmunWukL+Rlefz/1hH+m8b/L23d0B6O///8kY3xf5/oKVruM6UifhEpfusvnoovVO08Encds1zubyLFifOfy+XiUFmu24bOewU6IwPLsv8TKf7h/c1lu+Mhn9woe/ojHdxHQHn+j0aKH/zZ9+LX87LN73/Y/vwf2bqhfXr/w6d6lh3Z9L6CXXedfP5PRooXn3wrfqNa8n8f+P6P7hsbjncKb7yfY5/O/6/2LBvM+/3Nveo8AAAAAAAAAADAI6w/FfG3keJHI7X0fF52L3//b3Lrhvbp7399umfZ5N7MV/ShH3Z9UAEAAADggOhPRfw0UtxYfOvOGOrN4797xn/+zsb4z+G0ZW3153y/Ur03YC///K/XYN7vxO67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n+dTn6jG80/uOJ/6SqR4+b+ezeXSsbJcdx74werX+uXZmZMXp6dn67HYujo91Riba12bKut+KlKs/fXnct2iml+9O998Z473jbnY5yPFyN91y3bmYu/OTd6ZD7y+vh5xuiz7iUjxn3+/uWyemjrPHV1t90xZ9q8ixTf+afuyxzbKni3Lfi9S/PgbjW7ZI2XZ7vtRP71R9rlrs8U+nBUAAAAAAAAAAAAAAAAAAAA+bvpTEX8aKf775vKdsfx5/v/+nq+VN7/VM9//Freref4Hq/n/d/p8P/P/V+8VWNpprwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HhKUcQbkWLu8lpaGSi/d9QvtWdu3R4fHtm+2uFU1eyrypc/9dNnzp778vND57v5wfX32mfi1bErFxsvzd6cm59aWJiabIzPtK/NTk7d8xZ2W3+rE9UBaNx87dbk9esLjTPPnd20+vbgewNPHBu8MPTMyae7ZceHR0bGesrU+u9773dJOyw/FEX8ZaR49vs/Sz8aiChi98fiQ66d/Xa46sSJqhPjwyNVR6bbrZnFcuVo90AUEY2eSs3uMXoA52JXmhFLZfPLBp8ouzc215pvXZ2eaoy25hfbi+3ZmdHUaW3Zn0YUcT5FLEfE6sDdm+uPIl6LFN89upb+eSCir3scvnR57GunzuzcjmIf+3gPynY2+iOWi0fgnB1gA1HEP0aKn799PP5lIKIWnZ/4YsQrZf4w4s3onO9UXhjnIt7d5jri0VSLIv63PP8X1tLbA+X9oHtfufT1xldnrs/2lO3eVx7558ODdMDvTfUo4sfVHX8t/av/rgEAAAAAAAAAAAAAAAAOkCJ+LVK88M7xVI0PvjOmuD1zo3GldXW6M6yvO/avO2Z6fX19vZE62cw5kXMp53LOlZyrOaPI9XM2y6yvr0/k70s5l3Ou5FzNGX25fs5mzomcSzmXc67kXM0ZtVw/ZzPnRM6lnMs5V3Ku5owDMnYPAAAAAAAAAAAAAAAAAAB4vBTVPym+8821tD7QmV96Ijq5Yj7Qx97/BwAA///V5PEV") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000001bc0)={0x2020}, 0x2020) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.353600277s ago: executing program 0 (id=830): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) creat(&(0x7f0000000080)='./file0\x00', 0x19c) fanotify_init(0xf00, 0x40000) rename(0x0, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$sndseq(0xffffffffffffff9c, 0x0, 0x284001) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x1, 0xfffffffffffffffb, 0x200009, 0x6, 0x0, 0x40000000000003}, {0xffffffffffffffff, 0x6, 0x53e4, 0xf0}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1001504, 0x4, 0x0, 0x0, 0xc32, 0x81}}, 0xe8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.119137128s ago: executing program 2 (id=831): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x31, 0xffffffffffffffff, 0xd363f000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x2a, 0x2c2, &(0x7f00000008c0)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0xa0) setresuid(0xee01, 0xee00, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000200)) 3.97639933s ago: executing program 1 (id=832): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x800000, &(0x7f00000004c0)) clock_gettime(0x0, 0x0) futex(&(0x7f0000000000)=0x4, 0x100, 0xfffffffd, &(0x7f0000000040), 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(0x0, &(0x7f0000000080)={0x4, 0x10fffd, 0xfffffffd}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.690339215s ago: executing program 0 (id=833): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8, 0x1, 0x1, 0x1, 0xa5c, 0x806}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.371722564s ago: executing program 1 (id=834): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000380)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$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") chdir(&(0x7f0000004340)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.202566324s ago: executing program 2 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.140280536s ago: executing program 4 (id=836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.007793476s ago: executing program 0 (id=837): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x2}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x7d}}], 0x4000070, 0x8000) 2.674516544s ago: executing program 1 (id=838): read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0x8000000000000001, 0x0, 0x2, 0x0, 0x200004002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000003, 0x4, 0x8f], 0xeeee8000, 0x2010d3}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.134630867s ago: executing program 3 (id=839): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x14, 0x6, 0x0, 0xffffffff, 0x0}) 1.827806508s ago: executing program 2 (id=840): r0 = gettid() r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1.734860091s ago: executing program 4 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.541623533s ago: executing program 0 (id=842): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@nolazytime}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") userfaultfd(0x801) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200000, 0x100000, 0x0, 0x7}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000016c0), 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 1.416685772s ago: executing program 3 (id=843): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030303031302c6e6c733d64656661756c742c00d4023937168c6a03faba6a3338c76bbb2cc123a1966858d8147d2c8f6696a3afb73a4233a7d6d17cbf793d9f3d5dc088fadadfdb7688c6a99fb22e09bb9b1fbe01fd94fae1e35f93fdbc2d26ac49430c71a16ad073e2416238a4b5f8c9877c553b2690fd7148fad9a9579680000d1a5caad58758c05f80c742dfc96510890d6ab62c3d6bc97ea00353e76f0f436500c88ef1b3ec52d6d1b6189c2c09e76160176ee4c21e9bcebdcac3565569f673575a04183f4095c2743d1547baa170a07fb5b39c0af610bbf13953ecb5e354858f41aa5b7bf2fbde", @ANYRESDEC, @ANYRESDEC], 0x44, 0x705, &(0x7f0000000480)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 1.079682985s ago: executing program 2 (id=844): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40100, 0x10) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3) 974.234748ms ago: executing program 1 (id=845): openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) userfaultfd(0x80001) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) 301.317132ms ago: executing program 3 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000140)=0x99) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x16, r3, 0x1, 0xd8}, 0x14) 235.898347ms ago: executing program 4 (id=847): r0 = gettid() readv(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000000240)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) 136.871397ms ago: executing program 0 (id=848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 0s ago: executing program 2 (id=849): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x507502) syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0xdc, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0xafbcb7aa, {{0x2, 0x4e22, @remote}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) kernel console output (not intermixed with test programs): Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.538976][ T6033] Call Trace: [ 214.539025][ T6033] [ 214.539071][ T6033] __dump_stack+0x26/0x30 [ 214.539234][ T6033] dump_stack_lvl+0x1df/0x270 [ 214.539402][ T6033] dump_stack+0x1e/0x25 [ 214.539548][ T6033] should_fail_ex+0x7dc/0x8a0 [ 214.539726][ T6033] should_fail+0x2a/0x40 [ 214.539878][ T6033] should_fail_usercopy+0x2e/0x40 [ 214.540040][ T6033] _copy_to_user+0x35/0x120 [ 214.540200][ T6033] simple_read_from_buffer+0x1b2/0x340 [ 214.540407][ T6033] proc_fail_nth_read+0x1e0/0x2d0 [ 214.540597][ T6033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.540774][ T6033] vfs_read+0x27c/0xf90 [ 214.540955][ T6033] ? stack_depot_save_flags+0x35/0x7b0 [ 214.541103][ T6033] ? kmsan_get_metadata+0xfb/0x160 [ 214.541251][ T6033] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 214.541465][ T6033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 214.541630][ T6033] __x64_sys_read+0x1fb/0x4d0 [ 214.541780][ T6033] x64_sys_call+0x2f9c/0x3e30 [ 214.541962][ T6033] do_syscall_64+0xd9/0xfa0 [ 214.542129][ T6033] ? irqentry_exit+0x16/0x60 [ 214.542281][ T6033] ? clear_bhb_loop+0x40/0x90 [ 214.542431][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.542569][ T6033] RIP: 0033:0x7fa8aa38d9dc [ 214.542667][ T6033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.542781][ T6033] RSP: 002b:00007fa8ab30c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.542918][ T6033] RAX: ffffffffffffffda RBX: 00007fa8aa5e5fa0 RCX: 00007fa8aa38d9dc [ 214.543015][ T6033] RDX: 000000000000000f RSI: 00007fa8ab30c0a0 RDI: 0000000000000005 [ 214.543099][ T6033] RBP: 00007fa8ab30c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.543181][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.543260][ T6033] R13: 00007fa8aa5e6038 R14: 00007fa8aa5e5fa0 R15: 00007ffd49019358 [ 214.543389][ T6033] [ 214.750448][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.802714][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.928193][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.815861][ T6047] Zero length message leads to an empty skb [ 216.306757][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 216.522373][ T6045] loop2: detected capacity change from 0 to 40427 [ 216.601611][ T1877] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 216.716754][ T6045] F2FS-fs (loop2): invalid crc value [ 217.122840][ T6045] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 217.134847][ T6045] F2FS-fs (loop2): Start checkpoint disabled! [ 217.155019][ T1877] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 217.163650][ T1877] usb 4-1: config 0 has no interface number 0 [ 217.255816][ T6045] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 217.266294][ T6045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 217.283612][ T1877] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 217.285718][ T6052] loop1: detected capacity change from 0 to 32768 [ 217.293316][ T1877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.310848][ T1877] usb 4-1: Product: syz [ 217.316452][ T1877] usb 4-1: Manufacturer: syz [ 217.321270][ T1877] usb 4-1: SerialNumber: syz [ 217.336995][ T6052] (syz.1.24,6052,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 217.351289][ T6052] (syz.1.24,6052,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 217.443003][ T6052] JBD2: Ignoring recovery information on journal [ 217.598902][ T1877] usb 4-1: config 0 descriptor?? [ 217.600299][ T6052] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 217.846261][ T1877] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 217.858065][ T1877] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 217.867546][ T1877] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 217.875913][ T1877] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 217.887811][ T5872] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 218.042080][ T1877] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 218.095136][ T1877] usb 4-1: USB disconnect, device number 2 [ 218.140458][ T5811] ocfs2: Unmounting device (7,1) on (node local) [ 218.156481][ T5872] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 218.213317][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.226238][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 242, changing to 11 [ 218.238925][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 59270, setting to 1024 [ 218.250665][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.295204][ T1877] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 218.308423][ T1877] keyspan 4-1:0.133: device disconnected [ 218.442237][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.452298][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 242, changing to 11 [ 218.464052][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 59270, setting to 1024 [ 218.475509][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 219.018584][ T6066] loop0: detected capacity change from 0 to 256 [ 219.197463][ T5872] usb 3-1: unable to read config index 2 descriptor/all [ 219.203574][ T6066] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.205333][ T5872] usb 3-1: can't read configurations, error -71 [ 219.559222][ T6063] loop1: detected capacity change from 0 to 4096 [ 219.570851][ T6064] loop4: detected capacity change from 0 to 4096 [ 219.864107][ T6072] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.939296][ T6073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.947699][ T6081] loop2: detected capacity change from 0 to 64 [ 220.957358][ T6081] hfs: Bad value for 'dir_umask' [ 221.000917][ T6081] loop2: detected capacity change from 0 to 256 [ 221.456085][ T6085] netlink: 'syz.1.33': attribute type 12 has an invalid length. [ 221.464305][ T6085] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.33'. [ 222.053925][ T3083] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 222.167405][ T6091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34'. [ 222.326030][ T3083] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 222.336034][ T3083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.407520][ T3083] usb 4-1: config 0 descriptor?? [ 222.536557][ T6095] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 222.641275][ T3083] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 222.880485][ T3083] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 222.887768][ T3083] [drm] Initialized udl on minor 2 [ 223.269413][ T3083] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 223.278777][ T3083] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 223.289478][ T5857] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 223.333177][ T5857] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 223.347324][ T5857] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 223.383600][ T3083] usb 4-1: USB disconnect, device number 3 [ 223.600617][ T6103] FAULT_INJECTION: forcing a failure. [ 223.600617][ T6103] name failslab, interval 1, probability 0, space 0, times 0 [ 223.613472][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(none) [ 223.613607][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.613684][ T6103] Call Trace: [ 223.613731][ T6103] [ 223.613779][ T6103] __dump_stack+0x26/0x30 [ 223.613940][ T6103] dump_stack_lvl+0x1df/0x270 [ 223.614107][ T6103] dump_stack+0x1e/0x25 [ 223.614258][ T6103] should_fail_ex+0x7dc/0x8a0 [ 223.614434][ T6103] should_failslab+0x15b/0x200 [ 223.614594][ T6103] __kmalloc_node_track_caller_noprof+0x18b/0x1ba0 [ 223.614761][ T6103] ? netlink_realloc_groups+0x1d4/0x3b0 [ 223.614959][ T6103] ? kmsan_get_metadata+0xfb/0x160 [ 223.615099][ T6103] ? kmsan_get_metadata+0xfb/0x160 [ 223.615267][ T6103] krealloc_node_align_noprof+0x2c0/0x1040 [ 223.615443][ T6103] ? kmsan_get_metadata+0xfb/0x160 [ 223.615602][ T6103] netlink_realloc_groups+0x1d4/0x3b0 [ 223.615802][ T6103] netlink_setsockopt+0x70d/0xd80 [ 223.615994][ T6103] ? __pfx_netlink_setsockopt+0x10/0x10 [ 223.616183][ T6103] __sys_setsockopt+0x43e/0x580 [ 223.616376][ T6103] __x64_sys_setsockopt+0xf4/0x1a0 [ 223.616569][ T6103] x64_sys_call+0x27c9/0x3e30 [ 223.616740][ T6103] do_syscall_64+0xd9/0xfa0 [ 223.616900][ T6103] ? irqentry_exit+0x16/0x60 [ 223.617049][ T6103] ? clear_bhb_loop+0x40/0x90 [ 223.617202][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.617353][ T6103] RIP: 0033:0x7f0bdab8efc9 [ 223.617453][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.617567][ T6103] RSP: 002b:00007f0bdb979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.617695][ T6103] RAX: ffffffffffffffda RBX: 00007f0bdade5fa0 RCX: 00007f0bdab8efc9 [ 223.617790][ T6103] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 223.617870][ T6103] RBP: 00007f0bdb979090 R08: 0000000000000000 R09: 0000000000000000 [ 223.617954][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.618035][ T6103] R13: 00007f0bdade6038 R14: 00007f0bdade5fa0 R15: 00007ffe00b9fc88 [ 223.618174][ T6103] [ 224.340962][ T6107] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 224.741419][ T6110] loop3: detected capacity change from 0 to 8 [ 224.866041][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 224.905435][ T6110] SQUASHFS error: xz decompression failed, data probably corrupt [ 224.914006][ T6110] SQUASHFS error: Failed to read block 0x108: -5 [ 224.920523][ T6110] SQUASHFS error: Unable to read metadata cache entry [106] [ 224.928309][ T6110] SQUASHFS error: Unable to read inode 0x101f [ 225.921722][ T6123] loop2: detected capacity change from 0 to 24 [ 226.113214][ T6123] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 226.561257][ T6127] netlink: 88 bytes leftover after parsing attributes in process `syz.1.46'. [ 226.595761][ T6133] FAULT_INJECTION: forcing a failure. [ 226.595761][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.610059][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(none) [ 226.610206][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.610285][ T6133] Call Trace: [ 226.610335][ T6133] [ 226.610384][ T6133] __dump_stack+0x26/0x30 [ 226.610547][ T6133] dump_stack_lvl+0x1df/0x270 [ 226.610717][ T6133] dump_stack+0x1e/0x25 [ 226.610863][ T6133] should_fail_ex+0x7dc/0x8a0 [ 226.611031][ T6133] should_fail+0x2a/0x40 [ 226.611170][ T6133] should_fail_usercopy+0x2e/0x40 [ 226.611326][ T6133] _copy_from_user+0x33/0x100 [ 226.611482][ T6133] ___sys_sendmsg+0x11b/0x3b0 [ 226.611659][ T6133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 226.611845][ T6133] ? __rcu_read_unlock+0x6d/0xd0 [ 226.611975][ T6133] ? __fget_files+0x3b4/0x4a0 [ 226.612110][ T6133] ? __fget_files+0x3b9/0x4a0 [ 226.612255][ T6133] ? kmsan_get_metadata+0xfb/0x160 [ 226.612399][ T6133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 226.612554][ T6133] __x64_sys_sendmsg+0x211/0x3e0 [ 226.612730][ T6133] ? kmsan_get_metadata+0xfb/0x160 [ 226.612875][ T6133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 226.613024][ T6133] ? kmsan_get_metadata+0xfb/0x160 [ 226.613169][ T6133] ? kmsan_get_metadata+0xfb/0x160 [ 226.613330][ T6133] x64_sys_call+0x1dfd/0x3e30 [ 226.613504][ T6133] do_syscall_64+0xd9/0xfa0 [ 226.613664][ T6133] ? irqentry_exit+0x16/0x60 [ 226.613813][ T6133] ? clear_bhb_loop+0x40/0x90 [ 226.613961][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.614104][ T6133] RIP: 0033:0x7fa8aa38efc9 [ 226.614211][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.614325][ T6133] RSP: 002b:00007fa8ab30c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.614452][ T6133] RAX: ffffffffffffffda RBX: 00007fa8aa5e5fa0 RCX: 00007fa8aa38efc9 [ 226.614550][ T6133] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000005 [ 226.614634][ T6133] RBP: 00007fa8ab30c090 R08: 0000000000000000 R09: 0000000000000000 [ 226.614719][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.614799][ T6133] R13: 00007fa8aa5e6038 R14: 00007fa8aa5e5fa0 R15: 00007ffd49019358 [ 226.614931][ T6133] [ 227.277069][ T6140] loop0: detected capacity change from 0 to 2048 [ 227.310187][ T6140] udf: Unknown parameter '017777777777777777777770xffffffffffffffff' [ 227.474814][ T6149] netlink: 'syz.3.52': attribute type 16 has an invalid length. [ 227.482943][ T6149] netlink: 'syz.3.52': attribute type 17 has an invalid length. [ 227.645938][ T6149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.046694][ T6159] capability: warning: `syz.1.53' uses deprecated v2 capabilities in a way that may be insecure [ 229.440575][ T6162] loop0: detected capacity change from 0 to 512 [ 229.652021][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.658843][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.823176][ T6175] overlayfs: failed to clone lowerpath [ 230.611584][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'. [ 230.741209][ T6183] loop2: detected capacity change from 0 to 512 [ 230.782103][ T6183] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.850158][ T6183] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 231.026615][ T6183] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 231.036656][ T6183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.311942][ T6191] loop3: detected capacity change from 0 to 2048 [ 231.419044][ T6191] EXT4-fs: Ignoring removed bh option [ 231.688307][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.833383][ T6198] netlink: 'syz.1.65': attribute type 12 has an invalid length. [ 231.845547][ T6198] netlink: 'syz.1.65': attribute type 29 has an invalid length. [ 231.855006][ T6198] netlink: 'syz.1.65': attribute type 2 has an invalid length. [ 231.862869][ T6198] netlink: 260 bytes leftover after parsing attributes in process `syz.1.65'. [ 232.013325][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 232.233262][ T5872] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 232.241619][ T5872] usb 4-1: config 1 has no interface number 0 [ 232.251233][ T5872] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 232.265499][ T5872] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 232.275842][ T5872] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 232.285973][ T5872] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.333750][ T5872] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 232.343430][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.355135][ T5872] usb 4-1: Product: syz [ 232.359495][ T5872] usb 4-1: Manufacturer: syz [ 232.365741][ T5872] usb 4-1: SerialNumber: syz [ 232.372995][ T1877] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 232.398891][ T6191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.410469][ T6191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.571110][ T6203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.630720][ T6191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.643442][ T1877] usb 1-1: not running at top speed; connect to a high speed hub [ 232.674190][ T1877] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 232.683330][ T1877] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 232.693933][ T1877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.703303][ T1877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.713540][ T6191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.789379][ T1877] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.799075][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.810442][ T1877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.819088][ T1877] usb 1-1: Product: ళ [ 232.846130][ T1877] usb 1-1: Manufacturer: ь [ 232.855101][ T1877] usb 1-1: SerialNumber: ꚬ朕謁ᡫ䴘앋鸞邅尦씟ၧ担胩ᱡ앃읋냴ꅬ꼻泸麮࠴쎪ပ攀蒳链Კ솱䅞纅퀺妪ख़᱄鉧鰴퀰穫嚨ﶆ伴憴㒹籺皠䁿믱 [ 233.013406][ T5872] usb 4-1: Incompatible driver and firmware versions [ 233.156254][ T6190] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.220879][ T5872] usb 4-1: USB disconnect, device number 4 [ 233.292847][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.550529][ T6201] loop0: detected capacity change from 0 to 16 [ 233.707782][ T6201] cramfs: Unknown parameter '@' [ 234.134437][ T6208] loop2: detected capacity change from 0 to 32768 [ 234.152153][ T6208] (syz.2.68,6208,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.170434][ T6208] (syz.2.68,6208,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.284743][ T6208] JBD2: Ignoring recovery information on journal [ 234.435470][ T6208] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 235.256070][ T5798] ocfs2: Unmounting device (7,2) on (node local) [ 236.034823][ T1877] usb 1-1: 0:2 : does not exist [ 236.081140][ T6230] Bluetooth: MGMT ver 1.23 [ 236.147158][ T1877] usb 1-1: USB disconnect, device number 2 [ 236.384968][ T6233] loop3: detected capacity change from 0 to 1024 [ 236.411865][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.473018][ T6233] hfsplus: Bad value for 'part' [ 236.692167][ T6237] bond1: option primary_reselect: invalid value (65) [ 236.802987][ T6237] bond1 (unregistering): Released all slaves [ 237.433449][ T30] audit: type=1326 audit(1761284220.763:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.456053][ T30] audit: type=1326 audit(1761284220.763:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.483460][ T30] audit: type=1326 audit(1761284220.813:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.509835][ T30] audit: type=1326 audit(1761284220.813:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.567314][ T6246] loop0: detected capacity change from 0 to 1024 [ 237.697562][ T30] audit: type=1326 audit(1761284220.953:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.720470][ T30] audit: type=1326 audit(1761284220.953:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.743065][ T30] audit: type=1326 audit(1761284220.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4bd8efc9 code=0x7ffc0000 [ 237.821621][ T6246] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 237.828744][ T6246] hfsplus: xattr searching failed [ 237.839594][ T6252] netlink: 'syz.0.77': attribute type 2 has an invalid length. [ 237.851318][ T6252] netlink: 'syz.0.77': attribute type 8 has an invalid length. [ 237.859370][ T6252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.77'. [ 238.320120][ T4371] hfsplus: b-tree write err: -5, ino 4 [ 238.591213][ T6261] loop2: detected capacity change from 0 to 512 [ 238.675076][ T6262] tipc: Started in network mode [ 238.680268][ T6262] tipc: Node identity 56745296015, cluster identity 4711 [ 238.690786][ T6262] tipc: Enabled bearer , priority 0 [ 238.738490][ T6263] syzkaller0: entered promiscuous mode [ 238.744435][ T6263] syzkaller0: entered allmulticast mode [ 238.775839][ T6261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.789182][ T6261] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.864553][ T6261] capability: warning: `syz.2.83' uses 32-bit capabilities (legacy support in use) [ 238.916313][ T6262] tipc: Resetting bearer [ 238.971531][ T30] audit: type=1326 audit(1761284222.313:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.1.86" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30ed78efc9 code=0x0 [ 239.010351][ T6260] tipc: Resetting bearer [ 239.078020][ T6260] tipc: Disabling bearer [ 240.429357][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.175976][ T1877] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 241.333815][ T1877] usb 1-1: Using ep0 maxpacket: 32 [ 241.354493][ T1877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.369160][ T1877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.380477][ T1877] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 241.391082][ T1877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.755126][ T1877] usb 1-1: config 0 descriptor?? [ 242.735937][ T1877] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 242.842158][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 242.938293][ T1877] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 243.092170][ C1] Unknown status report in ack skb [ 243.113187][ T6310] tipc: Started in network mode [ 243.118380][ T6310] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 243.128348][ T6310] tipc: Enabled bearer , priority 14 [ 243.272801][ T5872] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 243.316913][ T6312] tipc: Enabling of bearer rejected, failed to enable media [ 243.372745][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.383389][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.420398][ T6283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.88'. [ 243.430015][ T6283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.88'. [ 243.453366][ T5872] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 243.465628][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 243.477539][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 243.488811][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 243.500204][ T5872] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.513491][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.516318][ T5857] usb 1-1: USB disconnect, device number 3 [ 243.706934][ T6308] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.721292][ T6308] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.760604][ T5872] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.866862][ T6317] overlayfs: failed to clone upperpath [ 244.145260][ T6320] netlink: 'syz.3.97': attribute type 11 has an invalid length. [ 244.233434][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.242824][ T5857] tipc: Node number set to 10463914 [ 244.305114][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.404163][ T6308] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.485997][ T1877] usb 4-1: USB disconnect, device number 5 [ 244.565246][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 244.773390][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 244.791665][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 244.835689][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.848715][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.858219][ T5872] usb 3-1: Product: syz [ 244.862794][ T5872] usb 3-1: Manufacturer: syz [ 244.867727][ T5872] usb 3-1: SerialNumber: syz [ 244.939932][ T5872] usb 3-1: config 0 descriptor?? [ 245.087992][ T5872] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.097772][ T5872] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 245.613417][ T6335] loop0: detected capacity change from 0 to 8 [ 245.651821][ T5872] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 245.955836][ T6337] loop3: detected capacity change from 0 to 2048 [ 246.095302][ T6337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.108895][ T5857] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 246.250122][ T6337] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.105: corrupted in-inode xattr: e_name out of bounds [ 246.306389][ T6337] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.105: corrupted in-inode xattr: e_name out of bounds [ 246.335368][ T5857] usb 1-1: config 0 has an invalid interface descriptor of length 5, skipping [ 246.344818][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.355265][ T5857] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.364790][ T5857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.374143][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.401157][ T6348] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.105: corrupted in-inode xattr: e_name out of bounds [ 246.443721][ T5857] usb 1-1: config 0 descriptor?? [ 246.594142][ T6348] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[6348] [ 246.644188][ T5872] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 246.652720][ T5872] em28xx 3-1:0.0: board has no eeprom [ 246.681334][ T6337] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.711728][ T6337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 246.725024][ T6337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 246.725024][ T6337] [ 246.735478][ T6337] EXT4-fs (loop3): Total free blocks count 0 [ 246.741761][ T6337] EXT4-fs (loop3): Free/Dirty block details [ 246.748785][ T6337] EXT4-fs (loop3): free_blocks=2415919104 [ 246.754939][ T6337] EXT4-fs (loop3): dirty_blocks=32 [ 246.760364][ T6337] EXT4-fs (loop3): Block reservation details [ 246.766783][ T6337] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 246.983222][ T5872] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 246.996571][ T5872] em28xx 3-1:0.0: dvb set to bulk mode. [ 247.006219][ T1877] em28xx 3-1:0.0: Binding DVB extension [ 247.162086][ T5872] usb 3-1: USB disconnect, device number 4 [ 247.170394][ T5872] em28xx 3-1:0.0: Disconnecting em28xx [ 247.425215][ T6357] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 247.512998][ T5154] udevd[5154]: worker [6048] terminated by signal 33 (Unknown signal 33) [ 247.544563][ T5154] udevd[5154]: worker [6048] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 247.851536][ T1877] em28xx 3-1:0.0: Registering input extension [ 247.894477][ T5872] em28xx 3-1:0.0: Closing input extension [ 248.000470][ T5872] em28xx 3-1:0.0: Freeing device [ 248.673213][ T5857] usb 1-1: USB disconnect, device number 4 [ 248.852146][ T6366] loop3: detected capacity change from 0 to 256 [ 248.983085][ T6372] FAULT_INJECTION: forcing a failure. [ 248.983085][ T6372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.996949][ T6372] CPU: 0 UID: 0 PID: 6372 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(none) [ 248.997090][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.997170][ T6372] Call Trace: [ 248.997219][ T6372] [ 248.997270][ T6372] __dump_stack+0x26/0x30 [ 248.997433][ T6372] dump_stack_lvl+0x1df/0x270 [ 248.997608][ T6372] dump_stack+0x1e/0x25 [ 248.997755][ T6372] should_fail_ex+0x7dc/0x8a0 [ 248.997932][ T6372] should_fail+0x2a/0x40 [ 248.998073][ T6372] should_fail_usercopy+0x2e/0x40 [ 248.998235][ T6372] strncpy_from_user+0x38/0x470 [ 248.998374][ T6372] ? __se_sys_add_key+0x4c/0x870 [ 248.998549][ T6372] ? __x64_sys_add_key+0xe4/0x150 [ 248.998729][ T6372] __se_sys_add_key+0xa2/0x870 [ 248.998902][ T6372] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 248.999106][ T6372] ? kmsan_get_metadata+0xfb/0x160 [ 248.999252][ T6372] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 248.999417][ T6372] __x64_sys_add_key+0xe4/0x150 [ 248.999616][ T6372] x64_sys_call+0x317c/0x3e30 [ 248.999788][ T6372] do_syscall_64+0xd9/0xfa0 [ 248.999952][ T6372] ? irqentry_exit+0x16/0x60 [ 249.000101][ T6372] ? clear_bhb_loop+0x40/0x90 [ 249.000250][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.000395][ T6372] RIP: 0033:0x7f207b58efc9 [ 249.000502][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.000618][ T6372] RSP: 002b:00007f207c3d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 249.000747][ T6372] RAX: ffffffffffffffda RBX: 00007f207b7e5fa0 RCX: 00007f207b58efc9 [ 249.000844][ T6372] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 249.000937][ T6372] RBP: 00007f207c3d4090 R08: fffffffffffffffe R09: 0000000000000000 [ 249.001028][ T6372] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 249.001108][ T6372] R13: 00007f207b7e6038 R14: 00007f207b7e5fa0 R15: 00007fff8c3138b8 [ 249.001241][ T6372] [ 249.065867][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 249.391423][ T30] audit: type=1800 audit(1761284232.733:10): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.112" name="file2" dev="loop3" ino=1048608 res=0 errno=0 [ 250.491295][ T6386] FAULT_INJECTION: forcing a failure. [ 250.491295][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.504871][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT(none) [ 250.505014][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.505091][ T6386] Call Trace: [ 250.505138][ T6386] [ 250.505186][ T6386] __dump_stack+0x26/0x30 [ 250.505350][ T6386] dump_stack_lvl+0x1df/0x270 [ 250.505519][ T6386] dump_stack+0x1e/0x25 [ 250.505663][ T6386] should_fail_ex+0x7dc/0x8a0 [ 250.505839][ T6386] should_fail+0x2a/0x40 [ 250.505978][ T6386] should_fail_usercopy+0x2e/0x40 [ 250.506140][ T6386] _copy_from_user+0x33/0x100 [ 250.506307][ T6386] get_timespec64+0x5c/0x220 [ 250.506448][ T6386] ? x64_sys_call+0x2f74/0x3e30 [ 250.506624][ T6386] __x64_sys_recvmmsg+0x161/0x500 [ 250.506814][ T6386] ? kmsan_get_metadata+0xfb/0x160 [ 250.506986][ T6386] x64_sys_call+0x2f74/0x3e30 [ 250.507154][ T6386] do_syscall_64+0xd9/0xfa0 [ 250.507323][ T6386] ? irqentry_exit+0x16/0x60 [ 250.507473][ T6386] ? clear_bhb_loop+0x40/0x90 [ 250.507622][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.507768][ T6386] RIP: 0033:0x7fa8aa38efc9 [ 250.507870][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.507984][ T6386] RSP: 002b:00007fa8ab30c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 250.508113][ T6386] RAX: ffffffffffffffda RBX: 00007fa8aa5e5fa0 RCX: 00007fa8aa38efc9 [ 250.508211][ T6386] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 250.508308][ T6386] RBP: 00007fa8ab30c090 R08: 0000200000003700 R09: 0000000000000000 [ 250.508399][ T6386] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 250.508481][ T6386] R13: 00007fa8aa5e6038 R14: 00007fa8aa5e5fa0 R15: 00007ffd49019358 [ 250.508615][ T6386] [ 250.590677][ T6389] FAULT_INJECTION: forcing a failure. [ 250.590677][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 250.618875][ T6387] rdma_op ffff888051502180 conn xmit_rdma 0000000000000000 [ 250.620176][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT(none) [ 250.620309][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.620387][ T6389] Call Trace: [ 250.620437][ T6389] [ 250.620486][ T6389] __dump_stack+0x26/0x30 [ 250.620648][ T6389] dump_stack_lvl+0x1df/0x270 [ 250.620817][ T6389] dump_stack+0x1e/0x25 [ 250.620963][ T6389] should_fail_ex+0x7dc/0x8a0 [ 250.621144][ T6389] should_failslab+0x15b/0x200 [ 250.621302][ T6389] __kmalloc_noprof+0x18d/0x1b40 [ 250.621455][ T6389] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 250.621628][ T6389] ? tomoyo_path_number_perm+0x31/0x7d0 [ 250.621819][ T6389] ? filter_irq_stacks+0x49/0x190 [ 250.622006][ T6389] ? kmsan_get_metadata+0xfb/0x160 [ 250.622152][ T6389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.622315][ T6389] tomoyo_realpath_from_path+0xeb/0x9f0 [ 250.622490][ T6389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.622654][ T6389] ? __srcu_read_lock+0x5e/0xd0 [ 250.622817][ T6389] tomoyo_path_number_perm+0x1d0/0x7d0 [ 250.623021][ T6389] ? stack_depot_save_flags+0x35/0x7b0 [ 250.623191][ T6389] ? kmsan_get_metadata+0xfb/0x160 [ 250.623338][ T6389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.623540][ T6389] tomoyo_file_ioctl+0x3d/0x50 [ 250.623707][ T6389] security_file_ioctl+0x141/0x590 [ 250.623901][ T6389] __se_sys_ioctl+0xbb/0x400 [ 250.624089][ T6389] __x64_sys_ioctl+0x97/0xe0 [ 250.624264][ T6389] x64_sys_call+0x1cbc/0x3e30 [ 250.624436][ T6389] do_syscall_64+0xd9/0xfa0 [ 250.624600][ T6389] ? irqentry_exit+0x16/0x60 [ 250.624750][ T6389] ? clear_bhb_loop+0x40/0x90 [ 250.624898][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.625048][ T6389] RIP: 0033:0x7f0bdab8efc9 [ 250.625152][ T6389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.625267][ T6389] RSP: 002b:00007f0bdb979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.625397][ T6389] RAX: ffffffffffffffda RBX: 00007f0bdade5fa0 RCX: 00007f0bdab8efc9 [ 250.625495][ T6389] RDX: 0000200000000180 RSI: 0000000000003b86 RDI: 0000000000000003 [ 250.625582][ T6389] RBP: 00007f0bdb979090 R08: 0000000000000000 R09: 0000000000000000 [ 250.625667][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.625749][ T6389] R13: 00007f0bdade6038 R14: 00007f0bdade5fa0 R15: 00007ffe00b9fc88 [ 250.625881][ T6389] [ 250.626207][ T6389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.524958][ T6395] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 251.566985][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.125'. [ 253.182726][ T6399] loop2: detected capacity change from 0 to 65536 [ 253.284681][ T6399] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 253.486478][ T6399] XFS (loop2): Ending clean mount [ 253.495780][ C0] Unknown status report in ack skb [ 253.528251][ T6399] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1b0/0x2f0, xfs_agfl block 0x3 [ 253.541107][ T6399] XFS (loop2): Unmount and run xfs_repair [ 253.553130][ T6399] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 253.560735][ T6399] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 253.570028][ T6399] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 253.579345][ T6399] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 253.588586][ T6399] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 253.597981][ T6399] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 253.607247][ T6399] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 253.616551][ T6399] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 253.625875][ T6399] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 253.635232][ T6399] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x242/0x460" at daddr 0x3 len 1 error 74 [ 253.684133][ T6399] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x740/0xe70 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 253.699478][ T6399] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 254.135231][ T5798] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 254.386350][ T6426] FAULT_INJECTION: forcing a failure. [ 254.386350][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.399989][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(none) [ 254.400129][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.400210][ T6426] Call Trace: [ 254.400260][ T6426] [ 254.400311][ T6426] __dump_stack+0x26/0x30 [ 254.400475][ T6426] dump_stack_lvl+0x1df/0x270 [ 254.400644][ T6426] dump_stack+0x1e/0x25 [ 254.400796][ T6426] should_fail_ex+0x7dc/0x8a0 [ 254.400973][ T6426] should_fail+0x2a/0x40 [ 254.401118][ T6426] should_fail_usercopy+0x2e/0x40 [ 254.401280][ T6426] _copy_from_user+0x33/0x100 [ 254.401442][ T6426] get_timespec64+0x5c/0x220 [ 254.401587][ T6426] ? x64_sys_call+0x2f74/0x3e30 [ 254.401765][ T6426] __x64_sys_recvmmsg+0x161/0x500 [ 254.401957][ T6426] ? kmsan_get_metadata+0xfb/0x160 [ 254.402129][ T6426] x64_sys_call+0x2f74/0x3e30 [ 254.402300][ T6426] do_syscall_64+0xd9/0xfa0 [ 254.402460][ T6426] ? irqentry_exit+0x16/0x60 [ 254.402608][ T6426] ? clear_bhb_loop+0x40/0x90 [ 254.402753][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.402904][ T6426] RIP: 0033:0x7f207b58efc9 [ 254.403007][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.403123][ T6426] RSP: 002b:00007f207c3d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 254.403252][ T6426] RAX: ffffffffffffffda RBX: 00007f207b7e5fa0 RCX: 00007f207b58efc9 [ 254.403351][ T6426] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 254.403445][ T6426] RBP: 00007f207c3d4090 R08: 0000200000003700 R09: 0000000000000000 [ 254.403535][ T6426] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 254.403619][ T6426] R13: 00007f207b7e6038 R14: 00007f207b7e5fa0 R15: 00007fff8c3138b8 [ 254.403753][ T6426] [ 255.405523][ T6431] FAULT_INJECTION: forcing a failure. [ 255.405523][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.419180][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.3.135 Not tainted syzkaller #0 PREEMPT(none) [ 255.419322][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.419402][ T6431] Call Trace: [ 255.419452][ T6431] [ 255.419502][ T6431] __dump_stack+0x26/0x30 [ 255.419666][ T6431] dump_stack_lvl+0x1df/0x270 [ 255.419836][ T6431] dump_stack+0x1e/0x25 [ 255.419988][ T6431] should_fail_ex+0x7dc/0x8a0 [ 255.420162][ T6431] should_fail+0x2a/0x40 [ 255.420301][ T6431] should_fail_usercopy+0x2e/0x40 [ 255.420462][ T6431] _copy_from_user+0x33/0x100 [ 255.420619][ T6431] do_sock_getsockopt+0x1d0/0x580 [ 255.420814][ T6431] __x64_sys_getsockopt+0x32e/0x520 [ 255.420993][ T6431] ? __pfx_kmsan_internal_set_shadow_origin+0x10/0x10 [ 255.421218][ T6431] ? __pfx_kmsan_internal_set_shadow_origin+0x10/0x10 [ 255.421432][ T6431] x64_sys_call+0x36e0/0x3e30 [ 255.421603][ T6431] do_syscall_64+0xd9/0xfa0 [ 255.421763][ T6431] ? irqentry_exit+0x16/0x60 [ 255.421912][ T6431] ? clear_bhb_loop+0x40/0x90 [ 255.422064][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.422209][ T6431] RIP: 0033:0x7fa8aa38efc9 [ 255.422311][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.422431][ T6431] RSP: 002b:00007fa8ab30c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 255.422552][ T6431] RAX: ffffffffffffffda RBX: 00007fa8aa5e5fa0 RCX: 00007fa8aa38efc9 [ 255.422652][ T6431] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 255.422732][ T6431] RBP: 00007fa8ab30c090 R08: 00002000000001c0 R09: 0000000000000000 [ 255.422823][ T6431] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 255.422914][ T6431] R13: 00007fa8aa5e6038 R14: 00007fa8aa5e5fa0 R15: 00007ffd49019358 [ 255.423060][ T6431] [ 256.523671][ T6443] FAULT_INJECTION: forcing a failure. [ 256.523671][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.537155][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(none) [ 256.537295][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.537374][ T6443] Call Trace: [ 256.537424][ T6443] [ 256.537474][ T6443] __dump_stack+0x26/0x30 [ 256.537637][ T6443] dump_stack_lvl+0x1df/0x270 [ 256.537801][ T6443] dump_stack+0x1e/0x25 [ 256.537949][ T6443] should_fail_ex+0x7dc/0x8a0 [ 256.538124][ T6443] should_fail+0x2a/0x40 [ 256.538261][ T6443] should_fail_usercopy+0x2e/0x40 [ 256.538423][ T6443] _copy_from_user+0x33/0x100 [ 256.538582][ T6443] __sys_bpf+0x2c8/0xeb0 [ 256.538763][ T6443] __x64_sys_bpf+0xa4/0xf0 [ 256.538961][ T6443] x64_sys_call+0x3550/0x3e30 [ 256.539133][ T6443] do_syscall_64+0xd9/0xfa0 [ 256.539294][ T6443] ? irqentry_exit+0x16/0x60 [ 256.539440][ T6443] ? clear_bhb_loop+0x40/0x90 [ 256.539586][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.539730][ T6443] RIP: 0033:0x7fa8aa38efc9 [ 256.539826][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.539944][ T6443] RSP: 002b:00007fa8ab30c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.540074][ T6443] RAX: ffffffffffffffda RBX: 00007fa8aa5e5fa0 RCX: 00007fa8aa38efc9 [ 256.540173][ T6443] RDX: 0000000000000080 RSI: 0000200000000500 RDI: 0000000000000005 [ 256.540258][ T6443] RBP: 00007fa8ab30c090 R08: 0000000000000000 R09: 0000000000000000 [ 256.540344][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.540425][ T6443] R13: 00007fa8aa5e6038 R14: 00007fa8aa5e5fa0 R15: 00007ffd49019358 [ 256.540558][ T6443] [ 257.306212][ T6449] netlink: 196 bytes leftover after parsing attributes in process `syz.0.141'. [ 257.435372][ C0] Unknown status report in ack skb [ 257.585189][ T6449] loop0: detected capacity change from 0 to 1024 [ 257.663623][ T6449] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 257.674469][ T6449] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 257.799624][ T6449] EXT4-fs (loop0): invalid journal inode [ 257.806973][ T6449] EXT4-fs (loop0): can't get journal size [ 257.894196][ T6449] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 17104912: comm syz.0.141: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 258.044269][ T6449] EXT4-fs (loop0): failed to initialize system zone (-117) [ 258.103572][ T6449] EXT4-fs (loop0): mount failed [ 259.363650][ T6478] loop0: detected capacity change from 0 to 256 [ 259.428579][ T6478] vfat: Unknown parameter 'shoRtname' [ 259.568900][ T6481] overlayfs: failed to clone upperpath [ 259.658737][ T6481] veth0: entered promiscuous mode [ 259.741625][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 259.909763][ T6489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 259.916546][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.927834][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 260.212828][ T5857] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 260.283298][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 260.473506][ T5854] usb 4-1: device descriptor read/64, error -71 [ 260.744800][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 260.806046][ C1] Unknown status report in ack skb [ 260.953327][ T5854] usb 4-1: device descriptor read/64, error -71 [ 261.085396][ T5854] usb usb4-port1: attempt power cycle [ 261.534675][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 261.543743][ T5854] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 261.575745][ T5854] usb 4-1: device descriptor read/8, error -71 [ 261.720758][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.728986][ T5872] usb 3-1: can't read configurations, error -61 [ 261.912978][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 262.122095][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.130556][ T5872] usb 3-1: can't read configurations, error -61 [ 262.163942][ T6521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.225996][ T5872] usb usb3-port1: attempt power cycle [ 262.468556][ T5854] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 262.495380][ T5854] usb 4-1: device descriptor read/8, error -71 [ 262.604029][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 262.647030][ T6524] fuse: Bad value for 'fd' [ 262.664478][ T6524] fuse: Bad value for 'user_id' [ 262.669527][ T6524] fuse: Bad value for 'user_id' [ 262.973911][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.981926][ T5872] usb 3-1: can't read configurations, error -61 [ 263.187069][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 263.297604][ T6527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.319714][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 263.327932][ T5872] usb 3-1: can't read configurations, error -61 [ 263.342908][ T6490] vhci_hcd: connection reset by peer [ 263.362636][ T3946] vhci_hcd: stop threads [ 263.367189][ T3946] vhci_hcd: release socket [ 263.371925][ T3946] vhci_hcd: disconnect device [ 263.399128][ T6527] FAULT_INJECTION: forcing a failure. [ 263.399128][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 263.412685][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(none) [ 263.412825][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.412906][ T6527] Call Trace: [ 263.412956][ T6527] [ 263.413006][ T6527] __dump_stack+0x26/0x30 [ 263.413178][ T6527] dump_stack_lvl+0x1df/0x270 [ 263.413349][ T6527] dump_stack+0x1e/0x25 [ 263.413496][ T6527] should_fail_ex+0x7dc/0x8a0 [ 263.413672][ T6527] should_failslab+0x15b/0x200 [ 263.413831][ T6527] __kmalloc_noprof+0x18d/0x1b40 [ 263.413983][ T6527] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 263.414160][ T6527] ? tomoyo_path_number_perm+0x31/0x7d0 [ 263.414352][ T6527] ? filter_irq_stacks+0x49/0x190 [ 263.414534][ T6527] ? kmsan_get_metadata+0xfb/0x160 [ 263.414681][ T6527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.414845][ T6527] tomoyo_realpath_from_path+0xeb/0x9f0 [ 263.415015][ T6527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.415184][ T6527] ? __srcu_read_lock+0x5e/0xd0 [ 263.415344][ T6527] tomoyo_path_number_perm+0x1d0/0x7d0 [ 263.415543][ T6527] ? stack_depot_save_flags+0x35/0x7b0 [ 263.415715][ T6527] ? kmsan_get_metadata+0xfb/0x160 [ 263.415861][ T6527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.416063][ T6527] tomoyo_file_ioctl+0x3d/0x50 [ 263.416235][ T6527] security_file_ioctl+0x141/0x590 [ 263.416428][ T6527] __se_sys_ioctl+0xbb/0x400 [ 263.416611][ T6527] __x64_sys_ioctl+0x97/0xe0 [ 263.416788][ T6527] x64_sys_call+0x1cbc/0x3e30 [ 263.416961][ T6527] do_syscall_64+0xd9/0xfa0 [ 263.417127][ T6527] ? irqentry_exit+0x16/0x60 [ 263.417276][ T6527] ? clear_bhb_loop+0x40/0x90 [ 263.417425][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.417571][ T6527] RIP: 0033:0x7f207b58efc9 [ 263.417673][ T6527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.417789][ T6527] RSP: 002b:00007f207c3d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.417918][ T6527] RAX: ffffffffffffffda RBX: 00007f207b7e5fa0 RCX: 00007f207b58efc9 [ 263.418016][ T6527] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 263.418107][ T6527] RBP: 00007f207c3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.418192][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.418273][ T6527] R13: 00007f207b7e6038 R14: 00007f207b7e5fa0 R15: 00007fff8c3138b8 [ 263.418405][ T6527] [ 263.418456][ T6527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.510042][ T5854] usb usb4-port1: unable to enumerate USB device [ 263.548601][ T5872] usb usb3-port1: unable to enumerate USB device [ 264.835181][ T5854] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 265.449635][ C1] Unknown status report in ack skb [ 265.881928][ T6533] loop0: detected capacity change from 0 to 40427 [ 265.905223][ T5857] vhci_hcd: vhci_device speed not set [ 266.004447][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 266.099812][ T6533] F2FS-fs (loop0): build fault injection rate: 14 [ 266.113157][ T6533] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 266.171333][ T6533] F2FS-fs (loop0): invalid crc value [ 266.210118][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.220898][ T5854] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 266.231050][ T5854] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 266.412138][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 266.515918][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 266.633890][ T6544] loop2: detected capacity change from 0 to 32768 [ 266.868195][ T6533] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 266.877597][ T6533] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 266.902199][ T6544] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.919908][ T5854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.929332][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 266.937806][ T5854] usb 4-1: SerialNumber: syz [ 266.945097][ T6533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.998544][ T6533] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 267.017437][ T6533] F2FS-fs (loop0): inject truncate fail in f2fs_truncate of f2fs_setattr+0x2112/0x2820 [ 267.030011][ T6533] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 267.056369][ T6533] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x79e/0x19b0 [ 267.253548][ T6533] bond1: option packets_per_slave: invalid value (1768304430) [ 267.261387][ T6533] bond1: option packets_per_slave: allowed values 0 - 65535 [ 267.290579][ T6533] bond1 (unregistering): Released all slaves [ 267.494533][ T6544] XFS (loop2): Ending clean mount [ 267.605646][ T5806] syz-executor: attempt to access beyond end of device [ 267.605646][ T5806] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 267.620703][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 267.620847][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.620926][ T5806] Call Trace: [ 267.620977][ T5806] [ 267.621025][ T5806] __dump_stack+0x26/0x30 [ 267.621184][ T5806] dump_stack_lvl+0x1df/0x270 [ 267.621358][ T5806] dump_stack+0x1e/0x25 [ 267.621519][ T5806] f2fs_handle_critical_error+0xa6f/0xc20 [ 267.621696][ T5806] f2fs_stop_checkpoint+0x65/0x80 [ 267.621840][ T5806] f2fs_write_end_io+0x101c/0x1bc0 [ 267.622037][ T5806] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 267.622179][ T5806] bio_endio+0xeb4/0x1010 [ 267.622330][ T5806] submit_bio_noacct+0x2009/0x2930 [ 267.622539][ T5806] submit_bio+0x57c/0x630 [ 267.622698][ T5806] f2fs_submit_write_bio+0x92/0x250 [ 267.622912][ T5806] __submit_merged_bio+0x16f/0x6a0 [ 267.623104][ T5806] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.623271][ T5806] __submit_merged_write_cond+0x458/0x9a0 [ 267.623486][ T5806] f2fs_write_data_pages+0x4bb2/0x5480 [ 267.623764][ T5806] ? kmsan_get_metadata+0xfb/0x160 [ 267.623911][ T5806] ? folio_batch_move_lru+0x6a6/0x6e0 [ 267.624071][ T5806] ? __msan_warning+0x1b/0x30 [ 267.624191][ T5806] ? filter_irq_stacks+0x13f/0x190 [ 267.624387][ T5806] ? stack_depot_save_flags+0x35/0x7b0 [ 267.624533][ T5806] ? lru_gen_add_folio+0xd66/0x1190 [ 267.624713][ T5806] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 267.624918][ T5806] ? kmsan_get_metadata+0xfb/0x160 [ 267.625068][ T5806] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.625219][ T5806] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.625362][ T5806] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.625503][ T5806] do_writepages+0x3f2/0x860 [ 267.625682][ T5806] ? _raw_spin_unlock+0x30/0x50 [ 267.625824][ T5806] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 267.626026][ T5806] filemap_fdatawrite+0x207/0x260 [ 267.626297][ T5806] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 267.626489][ T5806] f2fs_write_checkpoint+0x10a4/0x3730 [ 267.626786][ T5806] kill_f2fs_super+0x31b/0x990 [ 267.626987][ T5806] ? __pfx_kill_f2fs_super+0x10/0x10 [ 267.627143][ T5806] deactivate_locked_super+0xcb/0x3c0 [ 267.627338][ T5806] deactivate_super+0x12f/0x140 [ 267.627513][ T5806] cleanup_mnt+0x6fb/0x780 [ 267.627651][ T5806] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 267.627864][ T5806] ? __pfx___cleanup_mnt+0x10/0x10 [ 267.628015][ T5806] __cleanup_mnt+0x22/0x30 [ 267.628152][ T5806] task_work_run+0x209/0x2b0 [ 267.628309][ T5806] exit_to_user_mode_loop+0x2d1/0x370 [ 267.628466][ T5806] do_syscall_64+0x1e3/0xfa0 [ 267.628629][ T5806] ? irqentry_exit+0x16/0x60 [ 267.628798][ T5806] ? clear_bhb_loop+0x40/0x90 [ 267.628952][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.629099][ T5806] RIP: 0033:0x7f207b5902f7 [ 267.629202][ T5806] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 267.629317][ T5806] RSP: 002b:00007fff8c312b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 267.629446][ T5806] RAX: 0000000000000000 RBX: 00007f207b611d7d RCX: 00007f207b5902f7 [ 267.629545][ T5806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8c312c00 [ 267.629629][ T5806] RBP: 00007fff8c312c00 R08: 0000000000000000 R09: 0000000000000000 [ 267.629714][ T5806] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8c313c90 [ 267.629803][ T5806] R13: 00007f207b611d7d R14: 000000000004147f R15: 00007fff8c313cd0 [ 267.629939][ T5806] [ 267.971476][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.983431][ T5806] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 267.990586][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 267.990732][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.990806][ T5806] Call Trace: [ 267.990856][ T5806] [ 267.990903][ T5806] __dump_stack+0x26/0x30 [ 267.991063][ T5806] dump_stack_lvl+0x1df/0x270 [ 267.991228][ T5806] dump_stack+0x1e/0x25 [ 267.991372][ T5806] f2fs_handle_critical_error+0xa6f/0xc20 [ 267.991550][ T5806] f2fs_stop_checkpoint+0x65/0x80 [ 267.991694][ T5806] f2fs_write_end_io+0x101c/0x1bc0 [ 267.991889][ T5806] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 267.992030][ T5806] bio_endio+0xeb4/0x1010 [ 267.992188][ T5806] submit_bio_noacct+0x2009/0x2930 [ 267.992399][ T5806] submit_bio+0x57c/0x630 [ 267.992558][ T5806] f2fs_submit_write_bio+0x92/0x250 [ 267.992758][ T5806] __submit_merged_bio+0x16f/0x6a0 [ 267.992943][ T5806] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.993114][ T5806] __submit_merged_write_cond+0x458/0x9a0 [ 267.993331][ T5806] f2fs_write_data_pages+0x4bb2/0x5480 [ 267.993614][ T5806] ? kmsan_get_metadata+0xfb/0x160 [ 267.993768][ T5806] ? folio_batch_move_lru+0x6a6/0x6e0 [ 267.993928][ T5806] ? __msan_warning+0x1b/0x30 [ 267.994053][ T5806] ? filter_irq_stacks+0x13f/0x190 [ 267.994251][ T5806] ? stack_depot_save_flags+0x35/0x7b0 [ 267.994397][ T5806] ? lru_gen_add_folio+0xd66/0x1190 [ 267.994573][ T5806] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 267.994786][ T5806] ? kmsan_get_metadata+0xfb/0x160 [ 267.994932][ T5806] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.995084][ T5806] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.995229][ T5806] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.995371][ T5806] do_writepages+0x3f2/0x860 [ 267.995550][ T5806] ? _raw_spin_unlock+0x30/0x50 [ 267.995693][ T5806] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 267.995883][ T5806] filemap_fdatawrite+0x207/0x260 [ 267.996154][ T5806] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 267.996345][ T5806] f2fs_write_checkpoint+0x10a4/0x3730 [ 267.996643][ T5806] kill_f2fs_super+0x31b/0x990 [ 267.996849][ T5806] ? __pfx_kill_f2fs_super+0x10/0x10 [ 267.997007][ T5806] deactivate_locked_super+0xcb/0x3c0 [ 267.997205][ T5806] deactivate_super+0x12f/0x140 [ 267.997382][ T5806] cleanup_mnt+0x6fb/0x780 [ 267.997519][ T5806] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 267.997741][ T5806] ? __pfx___cleanup_mnt+0x10/0x10 [ 267.997883][ T5806] __cleanup_mnt+0x22/0x30 [ 267.998021][ T5806] task_work_run+0x209/0x2b0 [ 267.998180][ T5806] exit_to_user_mode_loop+0x2d1/0x370 [ 267.998338][ T5806] do_syscall_64+0x1e3/0xfa0 [ 267.998502][ T5806] ? irqentry_exit+0x16/0x60 [ 267.998652][ T5806] ? clear_bhb_loop+0x40/0x90 [ 267.998807][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.998953][ T5806] RIP: 0033:0x7f207b5902f7 [ 267.999055][ T5806] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 267.999171][ T5806] RSP: 002b:00007fff8c312b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 267.999300][ T5806] RAX: 0000000000000000 RBX: 00007f207b611d7d RCX: 00007f207b5902f7 [ 267.999390][ T5806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8c312c00 [ 267.999474][ T5806] RBP: 00007fff8c312c00 R08: 0000000000000000 R09: 0000000000000000 [ 267.999614][ T5806] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8c313c90 [ 267.999703][ T5806] R13: 00007f207b611d7d R14: 000000000004147f R15: 00007fff8c313cd0 [ 267.999838][ T5806] [ 268.341750][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.359569][ T5806] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 268.543776][ T5854] usb 4-1: can't set config #1, error -71 [ 268.661461][ T5854] usb 4-1: USB disconnect, device number 10 [ 268.928979][ T5798] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 269.028447][ T30] audit: type=1326 audit(1761284252.373:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8aa38efc9 code=0x7ffc0000 [ 269.052165][ T30] audit: type=1326 audit(1761284252.373:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8aa38efc9 code=0x7ffc0000 [ 269.503701][ T5854] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 269.781043][ T5854] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 269.790591][ T5854] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 269.799274][ T5854] usb 4-1: Product: syz [ 269.803784][ T5854] usb 4-1: Manufacturer: syz [ 269.808587][ T5854] usb 4-1: SerialNumber: syz [ 269.909663][ T5854] usb 4-1: config 0 descriptor?? [ 269.959164][ T5854] ch341 4-1:0.0: ch341-uart converter detected [ 270.141883][ T6578] FAULT_INJECTION: forcing a failure. [ 270.141883][ T6578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.157150][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(none) [ 270.157292][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.157369][ T6578] Call Trace: [ 270.157418][ T6578] [ 270.157467][ T6578] __dump_stack+0x26/0x30 [ 270.157641][ T6578] dump_stack_lvl+0x1df/0x270 [ 270.157809][ T6578] dump_stack+0x1e/0x25 [ 270.157955][ T6578] should_fail_ex+0x7dc/0x8a0 [ 270.158131][ T6578] should_fail_alloc_page+0x222/0x240 [ 270.158300][ T6578] __alloc_frozen_pages_noprof+0x30f/0xf00 [ 270.158529][ T6578] alloc_pages_mpol+0x328/0x860 [ 270.158703][ T6578] vma_alloc_folio_noprof+0x382/0x870 [ 270.158885][ T6578] handle_mm_fault+0xacb9/0xded0 [ 270.159092][ T6578] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 270.159326][ T6578] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.159528][ T6578] do_user_addr_fault+0x1777/0x2550 [ 270.159721][ T6578] ? kmsan_get_metadata+0xfb/0x160 [ 270.159877][ T6578] ? kmsan_get_metadata+0xfb/0x160 [ 270.160060][ T6578] exc_page_fault+0x74/0xc0 [ 270.160222][ T6578] asm_exc_page_fault+0x2b/0x30 [ 270.160353][ T6578] RIP: 0033:0x7fa8aa25ff16 [ 270.160454][ T6578] Code: e3 fe ff 48 c7 c0 ff ff ff ff eb b0 0f 1f 84 00 00 00 00 00 41 56 41 55 41 54 55 53 48 81 ec 40 20 00 00 48 8b 05 12 ee 1c 00 <48> 89 7c 24 18 48 89 74 24 10 be 02 55 08 80 48 89 54 24 08 48 8b [ 270.160575][ T6578] RSP: 002b:00007fa8ab309fc0 EFLAGS: 00010206 [ 270.160692][ T6578] RAX: 0000100000000000 RBX: 00007fa8aa5e5fa0 RCX: 0000000000000000 [ 270.160783][ T6578] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000000000000003 [ 270.160868][ T6578] RBP: 00007fa8ab30c090 R08: 0000000000000000 R09: 0000000000000000 [ 270.160948][ T6578] R10: 0000000000000003 R11: 0000200000000780 R12: 0000000000000001 [ 270.161031][ T6578] R13: 00007fa8aa5e6038 R14: 00007fa8aa5e5fa0 R15: 00007ffd49019358 [ 270.161164][ T6578] [ 270.161315][ T6578] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 270.193429][ T30] audit: type=1326 audit(1761284253.483:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8aa38d810 code=0x7ffc0000 [ 270.193763][ T30] audit: type=1326 audit(1761284253.483:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa8aa38da7f code=0x7ffc0000 [ 270.438085][ T30] audit: type=1326 audit(1761284253.783:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8aa38ebcb code=0x7ffc0000 [ 270.464166][ T30] audit: type=1326 audit(1761284253.783:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8aa38ebcb code=0x7ffc0000 [ 270.475791][ T5854] usb 4-1: failed to receive control message: -121 [ 270.493862][ T5854] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 270.637493][ T30] audit: type=1326 audit(1761284253.843:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa8aa3c1885 code=0x7ffc0000 [ 270.700897][ T30] audit: type=1326 audit(1761284254.043:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa8aa38d9dc code=0x7ffc0000 [ 270.708675][ T5854] usb 4-1: USB disconnect, device number 11 [ 270.724192][ T30] audit: type=1326 audit(1761284254.043:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa8aa38da7f code=0x7ffc0000 [ 270.734185][ T5854] ch341 4-1:0.0: device disconnected [ 270.755391][ T30] audit: type=1326 audit(1761284254.043:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa8aa38dc2a code=0x7ffc0000 [ 271.515415][ T6598] raw_sendmsg: syz.0.188 forgot to set AF_INET. Fix it! [ 272.025517][ T6602] loop3: detected capacity change from 0 to 512 [ 272.091722][ T6605] process 'syz.4.190' launched './file0' with NULL argv: empty string added [ 272.121639][ T6602] ext4: Unknown parameter 'smackfsfloor' [ 272.993791][ T6616] loop0: detected capacity change from 0 to 1764 [ 273.979300][ T6633] loop0: detected capacity change from 0 to 64 [ 274.252829][ T5854] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 274.313669][ T5857] kernel read not supported for file /sysvipc/msg (pid: 5857 comm: kworker/0:4) [ 274.461856][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.473315][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.483733][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.497132][ T5854] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.506533][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.513459][ T6636] netlink: 'syz.4.202': attribute type 5 has an invalid length. [ 274.655693][ T5854] usb 3-1: config 0 descriptor?? [ 275.160925][ T5854] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.228928][ T6647] loop3: detected capacity change from 0 to 1024 [ 275.302179][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.312735][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.363734][ T6647] hfsplus: failed to load extents file [ 275.483510][ T6647] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 276.542891][ T6659] loop3: detected capacity change from 0 to 1764 [ 277.330399][ T5854] usb 3-1: USB disconnect, device number 9 [ 277.401354][ T6661] loop3: detected capacity change from 0 to 1024 [ 278.823538][ T6671] syz_tun: entered allmulticast mode [ 279.932399][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 279.950011][ T6685] loop2: detected capacity change from 0 to 1764 [ 280.459350][ T6690] netlink: 'syz.0.222': attribute type 3 has an invalid length. [ 280.543686][ T6690] Bluetooth: hci0: invalid len left 7, exp >= 174 [ 280.738905][ T6693] loop3: detected capacity change from 0 to 1024 [ 280.811913][ T6693] hfsplus: failed to load extents file [ 281.333693][ T6700] netlink: 824 bytes leftover after parsing attributes in process `syz.4.226'. [ 281.454880][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 281.633031][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 281.655544][ T5854] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 281.656821][ T6705] loop3: detected capacity change from 0 to 256 [ 281.664138][ T5854] usb 1-1: config 0 has no interface number 0 [ 281.664266][ T5854] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 281.692022][ T5854] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 281.773948][ T6705] FAT-fs (loop3): bogus number of FAT sectors [ 281.780270][ T6705] FAT-fs (loop3): Can't find a valid FAT filesystem [ 281.824760][ T6703] loop2: detected capacity change from 0 to 4096 [ 281.836027][ T5854] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 281.845671][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.854172][ T5854] usb 1-1: Product: syz [ 281.858550][ T5854] usb 1-1: Manufacturer: syz [ 281.863704][ T5854] usb 1-1: SerialNumber: syz [ 281.868653][ T6703] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 281.927929][ T6703] ntfs3(loop2): ino=3, mi_enum_attr [ 281.935911][ T5854] usb 1-1: config 0 descriptor?? [ 281.946543][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.228'. [ 282.048618][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 282.104033][ T6705] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.379748][ T6697] loop0: detected capacity change from 0 to 764 [ 282.496181][ T5854] radio-si470x 1-1:0.35: this is not a si470x device. [ 282.504964][ T6697] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 282.545966][ T5854] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 283.137459][ T5854] usb 1-1: USB disconnect, device number 5 [ 283.383493][ T6716] loop3: detected capacity change from 0 to 1764 [ 283.475876][ T6719] overlayfs: failed to resolve './file0': -2 [ 283.499056][ T6719] syz.2.234 uses obsolete (PF_INET,SOCK_PACKET) [ 283.532981][ T6719] vxcan1: tx address claim with dlc 0 [ 284.288114][ T6731] FAULT_INJECTION: forcing a failure. [ 284.288114][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.301865][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.0.239 Not tainted syzkaller #0 PREEMPT(none) [ 284.302008][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.302088][ T6731] Call Trace: [ 284.302137][ T6731] [ 284.302186][ T6731] __dump_stack+0x26/0x30 [ 284.302352][ T6731] dump_stack_lvl+0x1df/0x270 [ 284.302522][ T6731] dump_stack+0x1e/0x25 [ 284.302660][ T6731] should_fail_ex+0x7dc/0x8a0 [ 284.302827][ T6731] should_fail+0x2a/0x40 [ 284.302971][ T6731] should_fail_usercopy+0x2e/0x40 [ 284.303131][ T6731] _copy_from_iter+0x1d9/0x3350 [ 284.303281][ T6731] ? kmsan_get_metadata+0xfb/0x160 [ 284.303438][ T6731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 284.303602][ T6731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 284.303792][ T6731] netlink_sendmsg+0xc64/0x1250 [ 284.304004][ T6731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.304176][ T6731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.304354][ T6731] __sock_sendmsg+0x333/0x3d0 [ 284.304508][ T6731] ____sys_sendmsg+0x7e0/0xd80 [ 284.304719][ T6731] ___sys_sendmsg+0x271/0x3b0 [ 284.304920][ T6731] ? __rcu_read_unlock+0x6d/0xd0 [ 284.305048][ T6731] ? __fget_files+0x3b4/0x4a0 [ 284.305175][ T6731] ? __fget_files+0x3b9/0x4a0 [ 284.305306][ T6731] ? kmsan_get_metadata+0xfb/0x160 [ 284.305453][ T6731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 284.305611][ T6731] __x64_sys_sendmsg+0x211/0x3e0 [ 284.305798][ T6731] ? kmsan_get_metadata+0xfb/0x160 [ 284.305950][ T6731] x64_sys_call+0x1dfd/0x3e30 [ 284.306116][ T6731] do_syscall_64+0xd9/0xfa0 [ 284.306270][ T6731] ? irqentry_exit+0x16/0x60 [ 284.306421][ T6731] ? clear_bhb_loop+0x40/0x90 [ 284.306569][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.306712][ T6731] RIP: 0033:0x7f207b58efc9 [ 284.306815][ T6731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.306928][ T6731] RSP: 002b:00007f207c3d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.307056][ T6731] RAX: ffffffffffffffda RBX: 00007f207b7e5fa0 RCX: 00007f207b58efc9 [ 284.307153][ T6731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 284.307238][ T6731] RBP: 00007f207c3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 284.307323][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.307434][ T6731] R13: 00007f207b7e6038 R14: 00007f207b7e5fa0 R15: 00007fff8c3138b8 [ 284.307564][ T6731] [ 284.636332][ T6725] loop2: detected capacity change from 0 to 1024 [ 284.649681][ T6725] hfsplus: failed to load extents file [ 284.861519][ T6722] 9pnet_fd: Insufficient options for proto=fd [ 285.354480][ T6742] xt_bpf: check failed: parse error [ 285.713683][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 285.942139][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 285.951475][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 285.978070][ T6743] macvlan2: entered allmulticast mode [ 285.983768][ T6743] veth1_vlan: entered allmulticast mode [ 286.588356][ T6756] overlay: Unknown parameter '/' [ 286.699617][ T6754] loop3: detected capacity change from 0 to 1764 [ 287.286383][ T6759] loop0: detected capacity change from 0 to 1024 [ 287.496537][ T6759] 9pnet_fd: Insufficient options for proto=fd [ 287.708091][ T6765] loop3: detected capacity change from 0 to 1024 [ 287.787183][ T6765] hfsplus: failed to load extents file [ 287.913515][ T4371] hfsplus: b-tree write err: -5, ino 8 [ 289.728905][ T6774] loop3: detected capacity change from 0 to 40427 [ 289.763758][ T6774] F2FS-fs (loop3): build fault injection rate: 14 [ 289.770489][ T6774] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 289.913507][ T6774] F2FS-fs (loop3): invalid crc value [ 290.010242][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 290.040501][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 290.405103][ T6774] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 290.421612][ T6774] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 290.455637][ T6774] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 290.545262][ T6774] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 290.589102][ T6774] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x12a2/0x2fc0 [ 290.601786][ T6774] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 291.011939][ T5800] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of do_checkpoint+0x3b9e/0x4850 [ 291.110416][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.117570][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.226249][ T6877] veth0_vlan: entered allmulticast mode [ 301.168251][ T6922] pim6reg1: entered promiscuous mode [ 301.174377][ T6922] pim6reg1: entered allmulticast mode [ 302.073959][ T6940] pim6reg1: entered promiscuous mode [ 302.079487][ T6940] pim6reg1: entered allmulticast mode [ 302.615267][ T6949] pim6reg1: entered promiscuous mode [ 302.621082][ T6949] pim6reg1: entered allmulticast mode [ 303.268512][ T6954] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 305.764309][ T6993] pim6reg1: entered promiscuous mode [ 305.774989][ T6993] pim6reg1: entered allmulticast mode [ 309.760483][ T7038] pim6reg1: tun_chr_ioctl cmd 1074025680 [ 311.535892][ T7072] binder: 7071:7072 ioctl 4018620d 0 returned -22 [ 312.772950][ T1877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 312.956836][ T1877] usb 1-1: Using ep0 maxpacket: 32 [ 312.988979][ T1877] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 312.997965][ T1877] usb 1-1: config 0 has no interface number 0 [ 313.053037][ T1877] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.062331][ T1877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.070816][ T1877] usb 1-1: Product: syz [ 313.076037][ T1877] usb 1-1: Manufacturer: syz [ 313.080809][ T1877] usb 1-1: SerialNumber: syz [ 313.175602][ T1877] usb 1-1: config 0 descriptor?? [ 313.213993][ T1877] smsc95xx v2.0.0 [ 313.562274][ T7107] fuse: Bad value for 'fd' [ 313.623284][ T7073] Bluetooth: hci2: command 0x0406 tx timeout [ 313.628255][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 313.629492][ T7073] Bluetooth: hci4: command 0x0406 tx timeout [ 313.629606][ T7073] Bluetooth: hci0: command 0x0406 tx timeout [ 313.636150][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 314.454622][ T1877] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 314.465933][ T1877] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 314.511448][ T1877] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 314.524158][ T1877] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 314.594943][ T1877] usb 1-1: USB disconnect, device number 6 [ 314.873993][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 316.991544][ T7152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.413994][ T7180] overlayfs: failed to clone upperpath [ 319.483088][ T1877] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 319.667649][ T1877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.679380][ T1877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.716381][ T1877] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 319.726477][ T1877] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 319.734919][ T1877] usb 4-1: Manufacturer: syz [ 319.748167][ T1877] usb 4-1: config 0 descriptor?? [ 320.191228][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.204912][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.217612][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.226463][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.233618][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.240654][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.247870][ T1877] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 320.284859][ T1877] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 320.598535][ T1877] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 320.606496][ T1877] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 320.677984][ T1877] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 320.791013][ T1877] usb 4-1: USB disconnect, device number 12 [ 321.424581][ T7217] fido_id[7217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 322.234847][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 322.234922][ T30] audit: type=1326 audit(1761284305.573:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.0.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f207b58efc9 code=0x0 [ 322.471470][ T7241] overlayfs: failed to clone upperpath [ 323.303593][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 323.312800][ T7222] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 323.797201][ T7257] overlayfs: failed to clone upperpath [ 323.986468][ T7259] overlayfs: failed to clone upperpath [ 324.090855][ T7222] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 324.126194][ T7222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.133552][ T7222] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.159240][ T7222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.166129][ T7222] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 324.231919][ T7222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.238728][ T7222] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 324.264200][ T7222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.270791][ T7222] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 325.384978][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 326.183349][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 326.190145][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 326.262976][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 326.359695][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 326.373406][ T7286] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 326.400752][ T7292] binder: Unknown parameter '0x0000000000000000' [ 326.724439][ T1877] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 326.888976][ T1877] usb 4-1: Using ep0 maxpacket: 8 [ 326.963412][ T1877] usb 4-1: config 6 has an invalid interface number: 218 but max is 1 [ 326.975192][ T1877] usb 4-1: config 6 has an invalid interface number: 22 but max is 1 [ 326.987145][ T1877] usb 4-1: config 6 has no interface number 0 [ 326.993549][ T7299] binder: 7297:7299 ioctl c00c620f 0 returned -14 [ 327.003601][ T1877] usb 4-1: config 6 has no interface number 1 [ 327.010001][ T1877] usb 4-1: config 6 interface 218 altsetting 88 endpoint 0x9 has invalid wMaxPacketSize 0 [ 327.020852][ T1877] usb 4-1: config 6 interface 218 altsetting 88 has an invalid descriptor for endpoint zero, skipping [ 327.032335][ T1877] usb 4-1: config 6 interface 218 altsetting 88 bulk endpoint 0x7 has invalid maxpacket 64 [ 327.043238][ T1877] usb 4-1: config 6 interface 218 altsetting 88 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 327.054876][ T1877] usb 4-1: config 6 interface 218 altsetting 88 has a duplicate endpoint with address 0x1, skipping [ 327.066070][ T1877] usb 4-1: config 6 interface 218 altsetting 88 bulk endpoint 0x6 has invalid maxpacket 8 [ 327.079648][ T1877] usb 4-1: config 6 interface 218 has no altsetting 0 [ 327.087911][ T1877] usb 4-1: config 6 interface 22 has no altsetting 0 [ 327.183208][ T1877] usb 4-1: New USB device found, idVendor=0403, idProduct=fad0, bcdDevice= 1.42 [ 327.192903][ T1877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.201118][ T1877] usb 4-1: Product: syz [ 327.205741][ T1877] usb 4-1: Manufacturer: syz [ 327.210557][ T1877] usb 4-1: SerialNumber: syz [ 327.255079][ T7292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.269066][ T7292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.599272][ T1877] ftdi_sio 4-1:6.218: FTDI USB Serial Device converter detected [ 327.611239][ T1877] usb 4-1: Detected SIO [ 327.616766][ T1877] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 327.702369][ T1877] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 327.754933][ T1877] ftdi_sio 4-1:6.22: FTDI USB Serial Device converter detected [ 327.766282][ T1877] usb 4-1: Detected SIO [ 327.845099][ T1877] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 327.905234][ T1877] usb 4-1: USB disconnect, device number 13 [ 327.954411][ T1877] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 327.968453][ T1877] ftdi_sio 4-1:6.218: device disconnected [ 328.058622][ T1877] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 328.070757][ T1877] ftdi_sio 4-1:6.22: device disconnected [ 328.152976][ T5854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 328.263452][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 328.275345][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 328.340342][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 328.348829][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 328.365780][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.377139][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.387364][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 328.405571][ T5854] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 328.416729][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.427613][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 328.436934][ T5854] usb 3-1: config 0 descriptor?? [ 329.041103][ T5854] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input7 [ 329.226660][ T5854] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input8 [ 329.394961][ T5854] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 329.547380][ T5854] usb 3-1: USB disconnect, device number 10 [ 330.329446][ T7323] fido_id[7323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 330.533846][ T7329] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 331.683210][ T1877] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 331.817054][ T7347] overlayfs: failed to clone upperpath [ 331.903856][ T1877] usb 3-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 331.913952][ T1877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.004632][ T1877] usb 3-1: config 0 descriptor?? [ 332.740535][ T1877] usb 3-1: USB disconnect, device number 11 [ 334.067461][ T7375] loop3: detected capacity change from 0 to 256 [ 334.227891][ T7375] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 334.329804][ T7375] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 335.003096][ T1877] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 335.049374][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 335.205363][ T1877] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 335.214635][ T1877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.225240][ T1877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.234509][ T1877] usb 4-1: config 1 has no interface number 0 [ 335.240832][ T1877] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 335.252534][ T1877] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 335.393364][ T1877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.403191][ T1877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.411408][ T1877] usb 4-1: Product: syz [ 335.416410][ T1877] usb 4-1: Manufacturer: syz [ 335.421213][ T1877] usb 4-1: SerialNumber: syz [ 335.532385][ T1877] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 335.539775][ T1877] cdc_ncm 4-1:1.1: bind() failure [ 336.267001][ T5854] usb 4-1: USB disconnect, device number 14 [ 338.273163][ T1877] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 338.504528][ T1877] usb 4-1: Using ep0 maxpacket: 8 [ 338.584093][ T1877] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.596697][ T1877] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.606857][ T1877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.613839][ T1877] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 338.623253][ T1877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.931484][ T1877] usb 4-1: config 0 descriptor?? [ 339.611665][ T1877] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 339.619204][ T1877] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 339.626881][ T1877] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 339.634369][ T1877] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 339.641530][ T1877] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 340.024407][ T1877] ntrig 0003:1B96:0004.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 340.123741][ T1877] usb 4-1: USB disconnect, device number 15 [ 340.289274][ T7421] loop0: detected capacity change from 0 to 1024 [ 340.327963][ T7421] EXT4-fs: Ignoring removed nobh option [ 340.333953][ T7421] EXT4-fs: Ignoring removed bh option [ 340.460752][ T7421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.778388][ T7422] fido_id[7422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 340.981698][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.061380][ T7431] support for the xor transformation has been removed. [ 341.941595][ T1877] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 342.075714][ T7443] loop0: detected capacity change from 0 to 256 [ 342.139859][ T1877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.151305][ T1877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.185868][ T1877] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 342.195613][ T1877] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.204026][ T1877] usb 4-1: Manufacturer: syz [ 342.255184][ T1877] usb 4-1: config 0 descriptor?? [ 342.316496][ T7443] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 342.651939][ T7449] loop2: detected capacity change from 0 to 128 [ 342.751949][ T1877] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 342.759199][ T1877] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 342.766499][ T1877] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 342.773686][ T1877] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 342.780748][ T1877] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 342.843825][ T7449] FAT-fs (loop2): Directory bread(block 162) failed [ 342.850707][ T7449] FAT-fs (loop2): Directory bread(block 163) failed [ 342.857950][ T7449] FAT-fs (loop2): Directory bread(block 164) failed [ 342.865008][ T7449] FAT-fs (loop2): Directory bread(block 165) failed [ 342.871828][ T7449] FAT-fs (loop2): Directory bread(block 166) failed [ 342.879087][ T7449] FAT-fs (loop2): Directory bread(block 167) failed [ 342.886163][ T7449] FAT-fs (loop2): Directory bread(block 168) failed [ 342.893175][ T7449] FAT-fs (loop2): Directory bread(block 169) failed [ 342.936434][ T1877] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 342.991034][ T7449] FAT-fs (loop2): Directory bread(block 162) failed [ 342.998145][ T7449] FAT-fs (loop2): Directory bread(block 163) failed [ 343.184256][ T1877] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 343.192121][ T1877] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 343.267329][ T1877] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 343.314375][ T1877] usb 4-1: USB disconnect, device number 16 [ 343.332992][ T6049] udevd[6049]: setting mode of /dev/bus/usb/004/016 to 020664 failed: No such file or directory [ 343.393337][ T6049] udevd[6049]: setting owner of /dev/bus/usb/004/016 to uid=0, gid=0 failed: No such file or directory [ 344.248569][ T7455] fido_id[7455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 344.431977][ T7452] process '/newroot/114/file0' started with executable stack [ 344.984902][ T7471] loop2: detected capacity change from 0 to 128 [ 345.081514][ T7471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 345.234643][ T7471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.522239][ T7481] loop2: detected capacity change from 0 to 8192 [ 346.883336][ T1877] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 347.082910][ T1877] usb 3-1: Using ep0 maxpacket: 16 [ 347.141943][ T1877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.149119][ T1877] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 347.158865][ T1877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.246060][ T1877] usb 3-1: config 0 descriptor?? [ 347.707906][ T1877] hid (null): unknown global tag 0xe [ 347.713809][ T1877] hid (null): unknown global tag 0xc [ 347.719307][ T1877] hid (null): unknown global tag 0x1a [ 347.725230][ T1877] hid (null): unknown global tag 0xd [ 347.741357][ T1877] hid (null): global environment stack underflow [ 347.748772][ T1877] hid (null): unknown global tag 0xd [ 347.760133][ T1877] hid (null): invalid report_count 1666728304 [ 347.767903][ T1877] hid (null): unknown global tag 0xa1 [ 347.773972][ T1877] hid (null): unknown global tag 0xe [ 347.779750][ T1877] hid (null): invalid report_size 33679 [ 347.785901][ T1877] hid (null): unknown global tag 0xc [ 347.883596][ T5854] usb 3-1: USB disconnect, device number 12 [ 348.307814][ T7507] loop3: detected capacity change from 0 to 256 [ 348.410413][ T7507] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 348.424258][ T7507] exFAT-fs (loop3): failed to load alloc-bitmap [ 348.430781][ T7507] exFAT-fs (loop3): failed to recognize exfat type [ 349.767095][ T7524] loop3: detected capacity change from 0 to 1024 [ 349.966811][ T7524] hfsplus: xattr exists yet [ 350.100977][ T7529] overlayfs: failed to clone upperpath [ 350.384805][ T4287] hfsplus: b-tree write err: -5, ino 8 [ 350.992954][ T1877] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 351.191734][ T1877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.221162][ T1877] usb 3-1: not running at top speed; connect to a high speed hub [ 351.243271][ T1877] usb 3-1: config 15 interface 0 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.255497][ T1877] usb 3-1: config 15 interface 0 altsetting 6 endpoint 0x8F has invalid maxpacket 26080, setting to 64 [ 351.267583][ T1877] usb 3-1: config 15 interface 0 has no altsetting 0 [ 351.548776][ T1877] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=db.4d [ 351.558324][ T1877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.566799][ T1877] usb 3-1: Product: syz [ 351.571145][ T1877] usb 3-1: Manufacturer: syz [ 351.576054][ T1877] usb 3-1: SerialNumber: syz [ 351.660871][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 352.060583][ T7556] loop3: detected capacity change from 0 to 128 [ 352.426543][ T1877] snd-usb-audio 3-1:15.0: probe with driver snd-usb-audio failed with error -22 [ 352.490021][ T1877] usb 3-1: USB disconnect, device number 13 [ 352.569998][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.577548][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.636623][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:15.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.047709][ T7564] loop2: detected capacity change from 0 to 128 [ 353.105768][ T7564] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 353.153943][ T7564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.064184][ T7570] loop0: detected capacity change from 0 to 4096 [ 354.254399][ T7570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.362875][ T7570] EXT4-fs (loop0): shut down requested (1) [ 354.516248][ T7588] loop3: detected capacity change from 0 to 136 [ 354.573570][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.092926][ T1877] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 355.339470][ T1877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.353449][ T1877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.423600][ T1877] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 355.436545][ T1877] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.446273][ T1877] usb 3-1: Manufacturer: syz [ 355.486955][ T1877] usb 3-1: config 0 descriptor?? [ 355.932854][ T1877] hid_parser_main: 2 callbacks suppressed [ 355.932967][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 355.952007][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 355.961314][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 355.968559][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 355.975846][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 355.983022][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 355.990076][ T1877] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 356.087705][ T1877] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 356.283809][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.576'. [ 356.352389][ T1877] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 356.365905][ T1877] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 356.417178][ T1877] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 356.469929][ T1877] usb 3-1: USB disconnect, device number 14 [ 356.679881][ T7615] loop3: detected capacity change from 0 to 1024 [ 356.725796][ T7615] EXT4-fs: Ignoring removed nobh option [ 356.732040][ T7615] EXT4-fs: Ignoring removed bh option [ 356.829410][ T7615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.927154][ T7617] fido_id[7617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 357.000630][ T7615] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.578: Allocating blocks 385-513 which overlap fs metadata [ 357.078982][ T7615] EXT4-fs (loop3): Remounting filesystem read-only [ 357.332945][ T7624] EXT4-fs (loop3): pa ffff888124133460: logic 16, phys. 129, len 24 [ 357.351593][ T7630] rose0: tun_chr_ioctl cmd 1074025675 [ 357.357562][ T7630] rose0: persist enabled [ 357.386548][ T7630] rose0: tun_chr_ioctl cmd 1074025675 [ 357.392147][ T7630] rose0: persist disabled [ 357.400469][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.263347][ T5854] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 359.412703][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 359.431582][ T5854] usb 3-1: config 0 has no interfaces? [ 360.113424][ T7645] : renamed from bond_slave_0 (while UP) [ 360.400754][ T5854] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 360.410205][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.419618][ T5854] usb 3-1: Product: syz [ 360.424261][ T5854] usb 3-1: Manufacturer: syz [ 360.429037][ T5854] usb 3-1: SerialNumber: syz [ 360.713106][ T5854] usb 3-1: config 0 descriptor?? [ 361.113099][ T5854] usb 3-1: USB disconnect, device number 15 [ 361.711837][ T7663] loop3: detected capacity change from 0 to 512 [ 361.764355][ T7663] EXT4-fs: Ignoring removed bh option [ 361.866563][ T7663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.930847][ T7663] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.015430][ T7663] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.596: resize_inode disabled but reserved GDT blocks non-zero [ 362.218571][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.299448][ T7700] syzkaller0: entered promiscuous mode [ 364.305330][ T7700] syzkaller0: entered allmulticast mode [ 364.731493][ T7708] overlayfs: failed to clone upperpath [ 365.157842][ T7713] loop2: detected capacity change from 0 to 1024 [ 368.254542][ T7741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.474261][ T7740] loop3: detected capacity change from 0 to 2048 [ 368.512762][ T7740] EXT4-fs: Ignoring removed bh option [ 368.559006][ T7745] overlayfs: failed to clone upperpath [ 368.615199][ T7740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.803662][ T7740] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 369.161583][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 369.276119][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.391463][ T7757] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 369.450535][ T7757] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 369.549299][ T7757] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 369.705272][ T7757] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 369.738357][ T7763] mmap: syz.2.633 (7763): VmData 37466112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 369.765288][ T7757] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 369.845164][ T7757] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 369.924863][ T7757] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 369.980178][ T7757] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 370.062727][ T7757] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 370.123743][ T7757] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 371.091864][ T7778] loop0: detected capacity change from 0 to 128 [ 371.193500][ T7778] FAT-fs (loop0): bogus number of FAT sectors [ 371.199790][ T7778] FAT-fs (loop0): Can't find a valid FAT filesystem [ 373.364096][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 373.373475][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.410373][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.270359][ T7796] loop3: detected capacity change from 0 to 4096 [ 374.424407][ T7796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.841009][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.920218][ T7813] overlayfs: failed to clone upperpath [ 375.350878][ T7817] loop3: detected capacity change from 0 to 2048 [ 375.493503][ T7817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.597121][ T7823] loop2: detected capacity change from 0 to 1024 [ 376.502151][ T7835] loop2: detected capacity change from 0 to 128 [ 376.549232][ T7831] loop3: detected capacity change from 0 to 1024 [ 376.565319][ T7835] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 376.615382][ T7835] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 376.810868][ T3434] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 377.280709][ T7843] loop2: detected capacity change from 0 to 512 [ 377.316689][ T7843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 377.330384][ T7843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 377.371468][ T7843] EXT4-fs (loop2): 1 truncate cleaned up [ 377.379744][ T7843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.476298][ T7843] syz.2.667 (pid 7843) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 377.844219][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.913837][ T7851] overlayfs: overlapping lowerdir path [ 378.128831][ T7854] loop2: detected capacity change from 0 to 512 [ 378.146073][ T7854] EXT4-fs: Ignoring removed bh option [ 378.153083][ T7854] ext4: Unknown parameter 'nouser_xattr' [ 378.718792][ T7860] syzkaller0: entered promiscuous mode [ 378.724888][ T7860] syzkaller0: entered allmulticast mode [ 378.868827][ T7863] loop2: detected capacity change from 0 to 128 [ 378.971836][ T7863] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 379.427411][ T7868] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 379.533978][ T7863] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 381.506177][ T7888] overlayfs: overlapping lowerdir path [ 382.630726][ T7907] loop0: detected capacity change from 0 to 1024 [ 382.854101][ T7907] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 384.059246][ T7930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.139865][ T7932] loop3: detected capacity change from 0 to 512 [ 384.190530][ T7932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 384.234216][ T7932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 384.284510][ T7932] EXT4-fs (loop3): 1 truncate cleaned up [ 384.292841][ T7932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.526190][ T7941] EXT4-fs (loop3): shut down requested (1) [ 384.873719][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.277700][ T7952] loop3: detected capacity change from 0 to 512 [ 385.306270][ T7952] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.411656][ T7952] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 385.452029][ T7952] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.708: bg 0: block 248: padding at end of block bitmap is not set [ 385.580125][ T7952] Quota error (device loop3): write_blk: dquota write failed [ 385.588271][ T7952] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 385.599262][ T7952] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.708: Failed to acquire dquot type 1 [ 385.774925][ T7952] EXT4-fs (loop3): 1 truncate cleaned up [ 385.787365][ T7952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 386.099877][ T7960] loop0: detected capacity change from 0 to 4096 [ 386.179099][ T7952] syz.3.708 (7952) used greatest stack depth: 3192 bytes left [ 386.232680][ T7960] EXT4-fs (loop0): Test dummy encryption mode enabled [ 386.260511][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 386.268805][ T7960] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 386.297437][ T7960] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0002] [ 386.308202][ T7960] System zones: 0-5 [ 386.319609][ T7960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.456194][ T7970] overlayfs: overlapping lowerdir path [ 388.792772][ T7960] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 389.296016][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.316641][ T7983] loop3: detected capacity change from 0 to 512 [ 389.335262][ T7983] EXT4-fs (loop3): Test dummy encryption mode enabled [ 389.358646][ T7983] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.717: inode has both inline data and extents flags [ 389.375473][ T7983] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.717: couldn't read orphan inode 15 (err -117) [ 389.404826][ T7983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.967492][ T7998] loop0: detected capacity change from 0 to 128 [ 390.018255][ T7998] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 390.047987][ T7983] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 390.069124][ T5872] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 390.130273][ T7998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.148760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 390.250806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 390.353232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 390.631793][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.767729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 390.773575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 390.778236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 390.869629][ T8002] syz.1.723 (8002) used greatest stack depth: 2440 bytes left [ 391.192662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 391.714354][ T5872] usb 3-1: device descriptor read/all, error -71 [ 392.520098][ T8029] loop2: detected capacity change from 0 to 4096 [ 392.594769][ T8029] EXT4-fs (loop2): Test dummy encryption mode enabled [ 392.654474][ T8029] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 392.709742][ T8029] System zones: 0-5 [ 392.820643][ T8029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.202849][ T5872] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 393.247394][ T8048] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 393.418466][ T5872] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 393.430620][ T5872] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 393.441583][ T5872] usb 4-1: config 220 has an invalid descriptor of length 78, skipping remainder of the config [ 393.453239][ T5872] usb 4-1: config 220 has no interface number 2 [ 393.459743][ T5872] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 393.473816][ T5872] usb 4-1: config 220 interface 0 has no altsetting 0 [ 393.480818][ T5872] usb 4-1: config 220 interface 76 has no altsetting 0 [ 393.488049][ T5872] usb 4-1: config 220 interface 1 has no altsetting 0 [ 393.750627][ T5872] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 393.760405][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.766081][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.769364][ T5872] usb 4-1: Product: syz [ 393.782199][ T5872] usb 4-1: Manufacturer: syz [ 393.787184][ T5872] usb 4-1: SerialNumber: syz [ 393.987204][ T8060] loop0: detected capacity change from 0 to 512 [ 394.035917][ T8060] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 394.205044][ T5872] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 394.213092][ T5872] uvcvideo 4-1:220.0: No valid video chain found. [ 394.219867][ T5872] usb 4-1: selecting invalid altsetting 0 [ 394.363566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 394.653341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 394.776695][ T5872] usb 4-1: selecting invalid altsetting 0 [ 394.782953][ T5872] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 395.004740][ T5872] usb 4-1: USB disconnect, device number 17 [ 397.346910][ T8092] loop3: detected capacity change from 0 to 8 [ 397.419665][ T8092] SQUASHFS error: Failed to read block 0x260685: -5 [ 397.426686][ T8092] SQUASHFS error: Unable to read metadata cache entry [260685] [ 397.434779][ T8092] SQUASHFS error: Unable to read directory block [260685:0] [ 398.341585][ T8110] overlayfs: failed to clone upperpath [ 398.363065][ T5872] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 399.647112][ T5872] usb 3-1: device descriptor read/all, error -71 [ 399.878920][ T8134] loop3: detected capacity change from 0 to 512 [ 399.951227][ T8134] EXT4-fs (loop3): Test dummy encryption mode enabled [ 399.958535][ T8134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 400.133502][ T8134] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.763: bad orphan inode 131083 [ 400.246054][ T8134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.264498][ T8139] kvm: pic: non byte read [ 400.281210][ T8139] kvm: pic: non byte read [ 400.342555][ T8139] kvm: pic: non byte read [ 400.363861][ T8139] kvm: pic: non byte read [ 400.398151][ T8134] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.763: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 400.404177][ T8139] kvm: pic: non byte read [ 400.453862][ T8139] kvm: pic: non byte read [ 400.459583][ T8139] kvm: pic: non byte read [ 400.483621][ T8134] EXT4-fs error (device loop3) in ext4_delete_entry:2739: Corrupt filesystem [ 400.541275][ T8139] kvm: pic: non byte read [ 400.567012][ T8139] kvm: pic: non byte read [ 400.571902][ T8139] kvm: pic: non byte read [ 400.807483][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.659170][ T8162] netlink: 136 bytes leftover after parsing attributes in process `syz.3.772'. [ 402.251399][ T8166] loop3: detected capacity change from 0 to 256 [ 403.245479][ T8183] loop2: detected capacity change from 0 to 512 [ 403.426498][ T8183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 403.439807][ T8183] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.957452][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 404.102780][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 404.683331][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 404.906851][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 404.935913][ T8210] syzkaller0: entered promiscuous mode [ 404.942022][ T8210] syzkaller0: entered allmulticast mode [ 404.971129][ T5872] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 404.979865][ T5872] usb 3-1: config 0 has no interface number 0 [ 404.986555][ T5872] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 404.998894][ T5872] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 405.009541][ T5872] usb 3-1: config 0 interface 41 has no altsetting 0 [ 406.100999][ T5872] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 406.111787][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.122184][ T5872] usb 3-1: Product: syz [ 406.127077][ T5872] usb 3-1: Manufacturer: syz [ 406.131867][ T5872] usb 3-1: SerialNumber: syz [ 407.125447][ T5872] usb 3-1: config 0 descriptor?? [ 407.132880][ T8205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 408.052106][ T8218] loop3: detected capacity change from 0 to 1024 [ 408.095556][ T5872] usb 3-1: can't set config #0, error -71 [ 408.105823][ T5872] usb 3-1: USB disconnect, device number 20 [ 408.761909][ T8221] loop2: detected capacity change from 0 to 2048 [ 408.905183][ T8221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.081106][ T30] audit: type=1800 audit(1761284392.423:24): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.790" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 410.436587][ T5857] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 410.679092][ T5857] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 410.690586][ T5857] usb 4-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.704058][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 410.710931][ T5857] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 410.720411][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.885444][ T5857] usb 4-1: config 0 descriptor?? [ 411.085646][ T8249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.141341][ T8249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.613416][ T8249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 411.620189][ T8249] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 411.628972][ T8249] vhci_hcd vhci_hcd.0: Device attached [ 411.647203][ T30] audit: type=1800 audit(1761284394.853:25): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.790" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 411.887073][ T5857] logitech 0003:046D:C298.000A: item fetching failed at offset 6/7 [ 411.965113][ T3083] usb 40-1: SetAddress Request (2) to port 0 [ 411.971452][ T3083] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 412.075529][ T5857] logitech 0003:046D:C298.000A: parse failed [ 412.082136][ T5857] logitech 0003:046D:C298.000A: probe with driver logitech failed with error -22 [ 412.203682][ T8254] vhci_hcd: connection reset by peer [ 412.222660][ T4371] vhci_hcd: stop threads [ 412.227103][ T4371] vhci_hcd: release socket [ 412.231801][ T4371] vhci_hcd: disconnect device [ 412.251838][ T5857] usb 4-1: USB disconnect, device number 18 [ 412.532161][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.361816][ T8268] loop2: detected capacity change from 0 to 1024 [ 413.965425][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.972278][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.091388][ T8279] loop2: detected capacity change from 0 to 256 [ 414.188793][ T8279] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 414.276852][ T8279] exFAT-fs (loop2): error, data valid size is invalid(-9223372036854774758) [ 414.286358][ T8279] exFAT-fs (loop2): Filesystem has been set read-only [ 414.347461][ T8279] exFAT-fs (loop2): error, data valid size is invalid(-9223372036854774758) [ 415.457113][ T8300] loop0: detected capacity change from 0 to 128 [ 415.568267][ T8300] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.624683][ T8300] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 415.763341][ T8300] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 416.028989][ T8312] loop2: detected capacity change from 0 to 128 [ 416.113924][ T5806] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.180986][ T8312] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 416.707935][ T8321] loop0: detected capacity change from 0 to 16 [ 416.717794][ T8321] erofs: Unknown parameter 'cach' [ 417.143450][ T3083] usb 40-1: device descriptor read/8, error -110 [ 417.712883][ T3083] usb usb40-port1: attempt power cycle [ 418.403135][ T3083] usb usb40-port1: unable to enumerate USB device [ 418.733037][ T8327] loop2: detected capacity change from 0 to 4096 [ 418.777525][ T8327] EXT4-fs (loop2): Test dummy encryption mode enabled [ 418.801020][ T8327] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 418.830615][ T8327] System zones: 0-5 [ 418.855791][ T8327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.972735][ T3083] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 419.057283][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.239271][ T3083] usb 4-1: unable to get BOS descriptor or descriptor too short [ 419.267393][ T3083] usb 4-1: not running at top speed; connect to a high speed hub [ 419.310636][ T3083] usb 4-1: config 15 interface 0 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.322737][ T3083] usb 4-1: config 15 interface 0 altsetting 6 endpoint 0x8F has invalid maxpacket 26080, setting to 64 [ 419.337571][ T3083] usb 4-1: config 15 interface 0 has no altsetting 0 [ 419.410257][ T3083] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=db.4d [ 419.419919][ T3083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.431529][ T3083] usb 4-1: Product: syz [ 419.439345][ T3083] usb 4-1: Manufacturer: syz [ 419.445050][ T3083] usb 4-1: SerialNumber: syz [ 419.485403][ T8338] loop2: detected capacity change from 0 to 256 [ 419.543252][ T8330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.442402][ T3083] snd-usb-audio 4-1:15.0: probe with driver snd-usb-audio failed with error -22 [ 420.524777][ T3083] usb 4-1: USB disconnect, device number 19 [ 420.901773][ T6049] udevd[6049]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:15.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.924884][ T8370] loop0: detected capacity change from 0 to 512 [ 421.980210][ T5872] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 422.046867][ T5872] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 422.073919][ T8370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.090605][ T8370] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.178397][ T8372] loop3: detected capacity change from 0 to 1024 [ 422.326897][ T8377] loop2: detected capacity change from 0 to 128 [ 422.371859][ T8370] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 422.461757][ T8379] fuse: Invalid rootmode [ 422.479830][ T8377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 422.650183][ T8370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.684146][ T8377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.885499][ T3475] hfsplus: b-tree write err: -5, ino 4 [ 423.097764][ T8382] fido_id[8382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 423.344769][ T8386] syzkaller0: entered promiscuous mode [ 423.350596][ T8386] syzkaller0: entered allmulticast mode [ 423.390110][ T8388] ===================================================== [ 423.397620][ T8388] BUG: KMSAN: uninit-value in eth_type_trans+0x7af/0x9a0 [ 423.405079][ T8388] eth_type_trans+0x7af/0x9a0 [ 423.409976][ T8388] bpf_prog_run_generic_xdp+0x126b/0x2000 [ 423.416054][ T8388] do_xdp_generic+0xd52/0x1690 [ 423.421029][ T8388] tun_get_user+0x45be/0x6d70 [ 423.426022][ T8388] tun_chr_write_iter+0x3e9/0x5c0 [ 423.431265][ T8388] vfs_write+0xbe2/0x15d0 [ 423.436169][ T8388] __x64_sys_write+0x1fb/0x4d0 [ 423.441190][ T8388] x64_sys_call+0x3014/0x3e30 [ 423.446218][ T8388] do_syscall_64+0xd9/0xfa0 [ 423.450927][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.457261][ T8388] [ 423.459666][ T8388] Uninit was created at: [ 423.464280][ T8388] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 423.471016][ T8388] kmalloc_reserve+0x22f/0x4b0 [ 423.476131][ T8388] __alloc_skb+0x347/0x7d0 [ 423.480715][ T8388] alloc_skb_with_frags+0xc5/0xa60 [ 423.486211][ T8388] sock_alloc_send_pskb+0xacc/0xc60 [ 423.491716][ T8388] tun_get_user+0x1142/0x6d70 [ 423.496729][ T8388] tun_chr_write_iter+0x3e9/0x5c0 [ 423.501957][ T8388] vfs_write+0xbe2/0x15d0 [ 423.506646][ T8388] __x64_sys_write+0x1fb/0x4d0 [ 423.511580][ T8388] x64_sys_call+0x3014/0x3e30 [ 423.516614][ T8388] do_syscall_64+0xd9/0xfa0 [ 423.521352][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.527533][ T8388] [ 423.529965][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.0.848 Not tainted syzkaller #0 PREEMPT(none) [ 423.539475][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.549786][ T8388] ===================================================== [ 423.557125][ T8388] Disabling lock debugging due to kernel taint [ 423.563499][ T8388] Kernel panic - not syncing: kmsan.panic set ... [ 423.570076][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.0.848 Tainted: G B syzkaller #0 PREEMPT(none) [ 423.581048][ T8388] Tainted: [B]=BAD_PAGE [ 423.585291][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.595477][ T8388] Call Trace: [ 423.598933][ T8388] [ 423.601949][ T8388] __dump_stack+0x26/0x30 [ 423.606448][ T8388] dump_stack_lvl+0x53/0x270 [ 423.611206][ T8388] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 423.617188][ T8388] dump_stack+0x1e/0x25 [ 423.621503][ T8388] vpanic+0x435/0xd30 [ 423.625669][ T8388] panic+0x15d/0x160 [ 423.629806][ T8388] kmsan_report+0x31c/0x320 [ 423.634480][ T8388] ? do_syscall_64+0xd9/0xfa0 [ 423.639325][ T8388] ? __msan_warning+0x1b/0x30 [ 423.644131][ T8388] ? eth_type_trans+0x7af/0x9a0 [ 423.649169][ T8388] ? bpf_prog_run_generic_xdp+0x126b/0x2000 [ 423.655251][ T8388] ? do_xdp_generic+0xd52/0x1690 [ 423.660405][ T8388] ? tun_get_user+0x45be/0x6d70 [ 423.665426][ T8388] ? tun_chr_write_iter+0x3e9/0x5c0 [ 423.670847][ T8388] ? vfs_write+0xbe2/0x15d0 [ 423.675574][ T8388] ? __x64_sys_write+0x1fb/0x4d0 [ 423.680671][ T8388] ? x64_sys_call+0x3014/0x3e30 [ 423.685706][ T8388] ? do_syscall_64+0xd9/0xfa0 [ 423.690556][ T8388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.696786][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.702069][ T8388] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 423.708038][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.713306][ T8388] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 423.719863][ T8388] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 423.726149][ T8388] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 423.732125][ T8388] ? stack_depot_save_flags+0x615/0x7b0 [ 423.737846][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.743123][ T8388] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 423.749684][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.754970][ T8388] __msan_warning+0x1b/0x30 [ 423.759623][ T8388] eth_type_trans+0x7af/0x9a0 [ 423.764551][ T8388] bpf_prog_run_generic_xdp+0x126b/0x2000 [ 423.770553][ T8388] do_xdp_generic+0xd52/0x1690 [ 423.775501][ T8388] ? tun_get_user+0x4081/0x6d70 [ 423.780523][ T8388] ? filter_irq_stacks+0x49/0x190 [ 423.785767][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.791149][ T8388] ? tun_get_user+0x453d/0x6d70 [ 423.796173][ T8388] tun_get_user+0x45be/0x6d70 [ 423.801129][ T8388] ? stack_depot_save_flags+0x35/0x7b0 [ 423.806752][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.812104][ T8388] ? kmsan_get_metadata+0xfb/0x160 [ 423.817362][ T8388] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 423.823911][ T8388] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 423.830253][ T8388] tun_chr_write_iter+0x3e9/0x5c0 [ 423.835482][ T8388] vfs_write+0xbe2/0x15d0 [ 423.840042][ T8388] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 423.845780][ T8388] __x64_sys_write+0x1fb/0x4d0 [ 423.850706][ T8388] x64_sys_call+0x3014/0x3e30 [ 423.855564][ T8388] do_syscall_64+0xd9/0xfa0 [ 423.860252][ T8388] ? irqentry_exit+0x16/0x60 [ 423.865019][ T8388] ? clear_bhb_loop+0x40/0x90 [ 423.869883][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.875959][ T8388] RIP: 0033:0x7f207b58da7f [ 423.880758][ T8388] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 423.900535][ T8388] RSP: 002b:00007f207c3d4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 423.909105][ T8388] RAX: ffffffffffffffda RBX: 00007f207b7e5fa0 RCX: 00007f207b58da7f [ 423.917199][ T8388] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 00000000000000c8 [ 423.925282][ T8388] RBP: 00007f207b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.933365][ T8388] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 423.941441][ T8388] R13: 00007f207b7e6038 R14: 00007f207b7e5fa0 R15: 00007fff8c3138b8 [ 423.949568][ T8388] [ 423.953001][ T8388] Kernel Offset: disabled [ 423.957474][ T8388] Rebooting in 86400 seconds..