last executing test programs: 19.323693755s ago: executing program 1 (id=588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) 15.55970081s ago: executing program 1 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0xfc01, 0x1000f4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x3, '\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) 14.377776557s ago: executing program 2 (id=599): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x4801) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, 0x0) 14.116542058s ago: executing program 0 (id=600): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a019200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 14.108799073s ago: executing program 2 (id=602): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x4, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x880, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 12.924603098s ago: executing program 1 (id=604): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000017c0)=""/4090, 0xffa) 12.346100247s ago: executing program 2 (id=606): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xffffffdfffffffff, 0x4100, 0xb, 0x0, 0x3, 0x95, 0x4, 0x0, 0x100, 0x7, 0x0, 0x7, 0x2, 0x9f, 0x1, 0x0, 0x4, 0x300000000000, 0x9, 0x8001, 0x9, 0x1, 0x3, 0x1, 0xe}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) 11.942792658s ago: executing program 0 (id=607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) userfaultfd(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000240)={0x0, 0x0, 0x9}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setresuid(0xee00, 0xee01, 0xee01) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) sendmsg$nl_route(r1, 0x0, 0x0) 11.26805726s ago: executing program 3 (id=608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) 10.168581246s ago: executing program 2 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x4, 0x0, 0xc, 0xf7, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x4, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x23}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8, '\x00', 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x7, 0x8, '\x00', 0x28}, {}, {0x6, 0x7, 0x0, '\x00', 0x1}, {0x0, 0xbf, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) 9.816139859s ago: executing program 0 (id=610): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000100), 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$netlink(0x10, 0x3, 0x0) 9.674133829s ago: executing program 2 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) 9.067872968s ago: executing program 0 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20000026, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x1, 0x0, &(0x7f0000000000)=0xf) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800"], 0x38}}, 0x0) 8.756555662s ago: executing program 3 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.769599358s ago: executing program 0 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0xfc01, 0x1000f4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x3, '\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) 7.724203526s ago: executing program 1 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000280), 0x57, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 6.601363643s ago: executing program 0 (id=616): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x4, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x880, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 5.941820399s ago: executing program 2 (id=618): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) chdir(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0) 5.837243296s ago: executing program 1 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000001c0)={0x1}) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x5, {0x1, 0x5, 0xa, 0x8, 0x7fffffffffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, 0x0}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000700), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, 0x0, 0x948, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4050) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) getsockopt$ax25_int(r6, 0x101, 0x0, &(0x7f0000000380), &(0x7f0000000440)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 5.836425658s ago: executing program 3 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) userfaultfd(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000240)={0x0, 0x0, 0x9}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setresuid(0xee00, 0xee01, 0xee01) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) sendmsg$nl_route(r1, 0x0, 0x0) 5.513073544s ago: executing program 4 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x4, 0x0, 0xc, 0xf7, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x4, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x23}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8, '\x00', 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x7, 0x8, '\x00', 0x28}, {}, {0x6, 0x7, 0x0, '\x00', 0x1}, {0x0, 0xbf, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) 3.997390813s ago: executing program 3 (id=622): epoll_create1(0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)=0x2) setregid(0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004d40)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004fed, &(0x7f0000000180)={0x2, 0xce23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x11000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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") r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) 3.868093234s ago: executing program 1 (id=623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) 3.116119398s ago: executing program 4 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20000026, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x1, 0x0, &(0x7f0000000000)=0xf) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800"], 0x38}}, 0x0) 2.772289589s ago: executing program 3 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.042806078s ago: executing program 4 (id=626): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYRES64=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x19}, {@empty, 0x4e22, 0x3, 0x10001, 0x400fc1a, 0x8}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r7], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.32539367s ago: executing program 4 (id=627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000400000000000010000000800010003000000080002000100000004000480040008802c000c800c000b8008000a009ff8"], 0x58}}, 0x0) 1.232091562s ago: executing program 3 (id=628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) 987.906358ms ago: executing program 4 (id=629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 0s ago: executing program 4 (id=630): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x24402, 0x2a2) write$FUSE_DIRENTPLUS(r0, 0x0, 0x4000) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) kernel console output (not intermixed with test programs): corrupted PEBs: 0 [ 141.862581][ T6268] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 142.191145][ T6268] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2073776525 [ 142.358876][ T6268] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 142.383012][ T6271] ubi31: background thread "ubi_bgt31d" started, PID 6271 [ 143.963033][ T6280] loop1: detected capacity change from 0 to 2048 [ 144.112872][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 144.196177][ T6280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.449259][ T6286] syz.3.93 (6286) used greatest stack depth: 17992 bytes left [ 148.194145][ T6326] tipc: Started in network mode [ 148.204401][ T6326] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 148.223877][ T6326] tipc: Enabled bearer , priority 10 [ 149.769882][ T5897] tipc: Node number set to 8432298 [ 150.323558][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 153.054653][ T6352] siw: device registration error -23 [ 153.229182][ T6354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.246363][ T5897] lo speed is unknown, defaulting to 1000 [ 155.420882][ T6375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.435439][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 157.562852][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.943519][ T5937] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.952271][ T5937] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.997718][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.070059][ T5937] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 158.258964][ T5937] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 158.494433][ T5937] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.539764][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.567516][ T5937] usb 5-1: Product: syz [ 158.571941][ T5937] usb 5-1: Manufacturer: syz [ 158.601598][ T5937] cdc_wdm 5-1:1.0: skipping garbage [ 158.616707][ T5937] cdc_wdm 5-1:1.0: skipping garbage [ 158.624027][ T6391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.637477][ T5937] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 158.650391][ T5937] cdc_wdm 5-1:1.0: Unknown control protocol [ 158.660993][ T6391] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 160.132892][ T5937] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 160.535532][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.550193][ T5937] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 160.559903][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.574006][ T5937] usb 2-1: config 0 descriptor?? [ 161.566103][ T5937] ldusb 2-1:0.0: Interrupt in endpoint not found [ 161.578254][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.584913][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.591861][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.598503][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.604988][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.611631][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.617943][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.624663][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.630951][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.637591][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.643908][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.650541][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.656901][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.663537][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.670518][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.677156][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.683870][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.690511][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.697134][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 161.703772][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 161.711855][ T5897] usb 5-1: USB disconnect, device number 3 [ 161.717784][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 161.844789][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 161.905983][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 162.739635][ T6435] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 162.747322][ T6435] UDF-fs: Scanning with blocksize 512 failed [ 162.756329][ T6435] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 162.763907][ T6435] UDF-fs: Scanning with blocksize 1024 failed [ 162.772216][ T6435] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 162.779777][ T6435] UDF-fs: Scanning with blocksize 2048 failed [ 162.787815][ T6435] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 162.795382][ T6435] UDF-fs: Scanning with blocksize 4096 failed [ 163.451705][ T6432] loop4: detected capacity change from 0 to 128 [ 163.975333][ T6437] siw: device registration error -23 [ 164.640380][ T5897] usb 2-1: USB disconnect, device number 3 [ 164.952942][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 166.095540][ T6458] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 170.093761][ T6486] loop0: detected capacity change from 0 to 40427 [ 170.113096][ T6486] F2FS-fs (loop0): invalid crc value [ 170.215251][ T6486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.143230][ T5839] syz-executor: attempt to access beyond end of device [ 171.143230][ T5839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.229328][ T6500] netlink: 'syz.1.154': attribute type 12 has an invalid length. [ 171.310471][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 171.310501][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.310521][ T5839] Call Trace: [ 171.310529][ T5839] [ 171.310538][ T5839] dump_stack_lvl+0x189/0x250 [ 171.310563][ T5839] ? irqentry_exit+0x74/0x90 [ 171.310592][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.310621][ T5839] ? f2fs_handle_critical_error+0x322/0x540 [ 171.310653][ T5839] f2fs_handle_critical_error+0x37c/0x540 [ 171.310685][ T5839] f2fs_write_end_io+0x495/0x810 [ 171.310711][ T5839] ? blkg_put+0x22/0x240 [ 171.310751][ T5839] __submit_merged_bio+0x27a/0x6a0 [ 171.310782][ T5839] __submit_merged_write_cond+0x255/0x530 [ 171.310814][ T5839] f2fs_write_data_pages+0x261d/0x3000 [ 171.310880][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.310980][ T5839] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 171.311007][ T5839] ? irqentry_exit+0x74/0x90 [ 171.311026][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.311055][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.311088][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.311116][ T5839] do_writepages+0x32b/0x550 [ 171.311155][ T5839] ? preempt_schedule_thunk+0x16/0x30 [ 171.311189][ T5839] filemap_fdatawrite+0x191/0x230 [ 171.311209][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 171.311275][ T5839] ? preempt_schedule_thunk+0x16/0x30 [ 171.311308][ T5839] f2fs_sync_dirty_inodes+0x31f/0x830 [ 171.311354][ T5839] f2fs_write_checkpoint+0x94a/0x1de0 [ 171.311408][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 171.311434][ T5839] ? preempt_schedule_irq+0xde/0x150 [ 171.311496][ T5839] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 171.311524][ T5839] ? kfree+0x18e/0x440 [ 171.311543][ T5839] ? kill_f2fs_super+0x298/0x6c0 [ 171.311582][ T5839] kill_f2fs_super+0x2c3/0x6c0 [ 171.311617][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 171.311643][ T5839] ? radix_tree_delete_item+0x2b6/0x400 [ 171.311670][ T5839] ? shrinker_free+0x2ce/0x3e0 [ 171.311699][ T5839] deactivate_locked_super+0xb9/0x130 [ 171.311730][ T5839] cleanup_mnt+0x425/0x4c0 [ 171.311757][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.311781][ T5839] task_work_run+0x1d1/0x260 [ 171.311809][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 171.311830][ T5839] ? __x64_sys_umount+0x122/0x160 [ 171.311855][ T5839] ? exit_to_user_mode_loop+0x40/0x110 [ 171.311887][ T5839] exit_to_user_mode_loop+0xec/0x110 [ 171.311916][ T5839] do_syscall_64+0x2bd/0x3b0 [ 171.311937][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.311956][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.311976][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 171.312001][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.312038][ T5839] RIP: 0033:0x7f78f678fc57 [ 171.312061][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 171.312078][ T5839] RSP: 002b:00007fff119a6d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.312099][ T5839] RAX: 0000000000000000 RBX: 00007f78f6810925 RCX: 00007f78f678fc57 [ 171.312113][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff119a6dc0 [ 171.312125][ T5839] RBP: 00007fff119a6dc0 R08: 0000000000000000 R09: 0000000000000000 [ 171.312137][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff119a7e50 [ 171.312150][ T5839] R13: 00007f78f6810925 R14: 0000000000029a66 R15: 00007fff119a7e90 [ 171.312184][ T5839] [ 171.993160][ T6499] loop3: detected capacity change from 0 to 1024 [ 172.013454][ T6499] hfsplus: invalid btree extent records (0 size) [ 172.020215][ T6499] hfsplus: failed to load attributes file [ 172.116498][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 173.556381][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.724774][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.743204][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.770666][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.781436][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 173.795518][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 173.808889][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.822342][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.831608][ T9] usb 5-1: Product: syz [ 173.839645][ T9] usb 5-1: Manufacturer: syz [ 174.083515][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 174.119299][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 174.146638][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 174.171756][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 176.591878][ T6536] loop3: detected capacity change from 0 to 128 [ 177.327942][ C0] wdm_int_callback: 9 callbacks suppressed [ 177.327965][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.340430][ C0] wdm_int_callback: 9 callbacks suppressed [ 177.340449][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.352853][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.359488][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.366532][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.373160][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.380485][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.387124][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.393966][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.400588][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.407879][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.414503][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.420902][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.427531][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.434310][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.440942][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.447891][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.454524][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.461732][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.468376][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.498598][ T5937] usb 5-1: USB disconnect, device number 4 [ 177.498783][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 177.784431][ T6543] loop1: detected capacity change from 0 to 512 [ 177.845640][ T6543] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.167: iget: bad extended attribute block 1 [ 177.881106][ T6543] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.167: couldn't read orphan inode 15 (err -117) [ 177.885536][ T6545] loop0: detected capacity change from 0 to 128 [ 177.915409][ T6543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.123857][ T6556] netlink: 'syz.3.169': attribute type 12 has an invalid length. [ 179.152429][ T6543] EXT4-fs (loop1): shut down requested (1) [ 180.018459][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.357807][ T6567] loop2: detected capacity change from 0 to 128 [ 180.399962][ T6567] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 180.607018][ T6570] loop3: detected capacity change from 0 to 128 [ 180.614627][ T6570] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.723728][ T6570] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.741377][ T6569] random: crng reseeded on system resumption [ 180.781778][ T6569] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 180.810727][ T6571] lo speed is unknown, defaulting to 1000 [ 181.360094][ T6577] loop1: detected capacity change from 0 to 128 [ 182.558818][ T6583] misc userio: Invalid payload size [ 182.564454][ T6583] misc userio: No port type given on /dev/userio [ 182.571151][ T6583] misc userio: The device must be registered before sending interrupts [ 182.618477][ T6583] Bluetooth: MGMT ver 1.23 [ 182.825159][ T6589] loop1: detected capacity change from 0 to 512 [ 182.901609][ T6589] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 183.153434][ T6589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.955666][ T6589] EXT4-fs (loop1): 1 truncate cleaned up [ 183.965828][ T6589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.075643][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 184.573471][ T5897] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 184.905662][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.918808][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.945719][ T5897] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 184.954930][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 184.964518][ T5897] usb 2-1: SerialNumber: syz [ 184.973908][ T5897] usb 2-1: config 0 descriptor?? [ 185.001779][ T5897] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 185.035321][ T5897] usb 2-1: No valid video chain found. [ 185.083925][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.263634][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 185.282274][ T5911] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.306271][ T5911] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.325806][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.348580][ T5911] usb 3-1: Product: syz [ 185.361637][ T5911] usb 3-1: Manufacturer: syz [ 185.372711][ T5911] usb 3-1: SerialNumber: syz [ 185.393655][ T5911] usb 3-1: config 0 descriptor?? [ 185.412092][ T6605] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 186.975956][ T5897] usb 2-1: USB disconnect, device number 4 [ 187.025314][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.630115][ T6637] loop4: detected capacity change from 0 to 128 [ 187.637930][ T6637] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.877458][ T5911] usb 3-1: USB disconnect, device number 3 [ 188.107954][ T6637] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.743307][ T6647] loop1: detected capacity change from 0 to 40427 [ 188.794456][ T6647] F2FS-fs (loop1): invalid crc value [ 189.309160][ T6647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.081098][ T30] audit: type=1326 audit(1749226919.711:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 191.145778][ T30] audit: type=1326 audit(1749226919.711:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 191.177499][ T5833] syz-executor: attempt to access beyond end of device [ 191.177499][ T5833] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.184771][ T30] audit: type=1326 audit(1749226919.711:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 191.213755][ T30] audit: type=1326 audit(1749226919.711:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 191.236389][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 191.236415][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.236427][ T5833] Call Trace: [ 191.236435][ T5833] [ 191.236443][ T5833] dump_stack_lvl+0x189/0x250 [ 191.236497][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.236532][ T5833] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 191.236565][ T5833] ? __pfx_queue_work_on+0x10/0x10 [ 191.236586][ T5833] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.236627][ T5833] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.236661][ T5833] ? f2fs_hw_is_readonly+0x39b/0x470 [ 191.236691][ T5833] f2fs_handle_critical_error+0x37c/0x540 [ 191.236723][ T5833] f2fs_write_end_io+0x495/0x810 [ 191.236748][ T5833] ? blkg_put+0x22/0x240 [ 191.236789][ T5833] __submit_merged_bio+0x27a/0x6a0 [ 191.236819][ T5833] __submit_merged_write_cond+0x255/0x530 [ 191.236850][ T5833] f2fs_write_data_pages+0x261d/0x3000 [ 191.236874][ T5833] ? __lock_acquire+0xab9/0xd20 [ 191.236934][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.237006][ T5833] ? __mod_zone_page_state+0xd7/0x140 [ 191.237037][ T5833] ? folios_put_refs+0x560/0x640 [ 191.237075][ T5833] ? __lock_acquire+0xab9/0xd20 [ 191.237110][ T5833] ? do_raw_spin_lock+0x121/0x290 [ 191.237145][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 191.237168][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.237196][ T5833] do_writepages+0x32b/0x550 [ 191.237240][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 191.237268][ T5833] filemap_fdatawrite+0x191/0x230 [ 191.237299][ T5833] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 191.237365][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 191.237392][ T5833] f2fs_sync_dirty_inodes+0x31f/0x830 [ 191.237436][ T5833] f2fs_write_checkpoint+0x94a/0x1de0 [ 191.237487][ T5833] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 191.237556][ T5833] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 191.237583][ T5833] ? kfree+0x18e/0x440 [ 191.237602][ T5833] ? kill_f2fs_super+0x298/0x6c0 [ 191.237646][ T5833] kill_f2fs_super+0x2c3/0x6c0 [ 191.237681][ T5833] ? __pfx_kill_f2fs_super+0x10/0x10 [ 191.237716][ T5833] ? radix_tree_delete_item+0x2b6/0x400 [ 191.237742][ T5833] ? shrinker_free+0x2ce/0x3e0 [ 191.237768][ T5833] deactivate_locked_super+0xb9/0x130 [ 191.237797][ T5833] cleanup_mnt+0x425/0x4c0 [ 191.237822][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.237844][ T5833] task_work_run+0x1d1/0x260 [ 191.237869][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 191.237890][ T5833] ? __x64_sys_umount+0x122/0x160 [ 191.237913][ T5833] ? exit_to_user_mode_loop+0x40/0x110 [ 191.237943][ T5833] exit_to_user_mode_loop+0xec/0x110 [ 191.237969][ T5833] do_syscall_64+0x2bd/0x3b0 [ 191.237988][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.238007][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.238025][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 191.238047][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.238065][ T5833] RIP: 0033:0x7f529a98fc57 [ 191.238088][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 191.238103][ T5833] RSP: 002b:00007ffe8af73598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 191.238130][ T5833] RAX: 0000000000000000 RBX: 00007f529aa10925 RCX: 00007f529a98fc57 [ 191.238142][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8af73650 [ 191.238153][ T5833] RBP: 00007ffe8af73650 R08: 0000000000000000 R09: 0000000000000000 [ 191.238164][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8af746e0 [ 191.238176][ T5833] R13: 00007f529aa10925 R14: 000000000002ea5e R15: 00007ffe8af74720 [ 191.238206][ T5833] [ 191.238214][ T5833] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 191.344390][ T30] audit: type=1326 audit(1749226919.711:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 191.772367][ T30] audit: type=1326 audit(1749226919.721:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 192.567055][ T30] audit: type=1326 audit(1749226919.721:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 192.590108][ T30] audit: type=1326 audit(1749226919.721:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 192.623048][ T30] audit: type=1326 audit(1749226919.721:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 192.657288][ T30] audit: type=1326 audit(1749226919.721:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 192.927516][ T5966] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.949553][ T6681] loop0: detected capacity change from 0 to 512 [ 192.958568][ T6681] EXT4-fs: inline encryption not supported [ 193.061395][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 193.104103][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 193.114823][ T5966] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.134380][ T6681] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.207: corrupted in-inode xattr: invalid ea_ino [ 193.157113][ T6681] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.207: couldn't read orphan inode 15 (err -117) [ 193.169460][ T5966] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 193.210049][ T5966] usb 4-1: config 220 has no interface number 2 [ 193.242187][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.254572][ T5966] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 193.291770][ T5966] usb 4-1: config 220 interface 0 has no altsetting 0 [ 193.317912][ T5966] usb 4-1: config 220 interface 76 has no altsetting 0 [ 193.446342][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 193.491993][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 193.502780][ T5966] usb 4-1: config 220 interface 1 has no altsetting 0 [ 193.548541][ T5966] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.560020][ T6682] ceph: No mds server is up or the cluster is laggy [ 193.568520][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.598550][ T5966] usb 4-1: Product: syz [ 193.612189][ T5966] usb 4-1: Manufacturer: syz [ 193.627196][ T5966] usb 4-1: SerialNumber: syz [ 193.844125][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.890865][ T5966] usb 4-1: selecting invalid altsetting 0 [ 193.898210][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 193.940213][ T5966] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 193.966127][ T5966] usb 4-1: No valid video chain found. [ 194.026311][ T5966] usb 4-1: selecting invalid altsetting 0 [ 194.032136][ T5966] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 194.178061][ T6696] loop1: detected capacity change from 0 to 512 [ 194.212205][ T6696] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.267880][ T5966] usb 4-1: USB disconnect, device number 3 [ 194.988409][ T6696] EXT4-fs (loop1): 1 truncate cleaned up [ 195.019404][ T6696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.035272][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.044989][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.855005][ T5827] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 197.016790][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.739342][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.750798][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 197.778047][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.787607][ T5827] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 197.854138][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 197.907809][ T5827] usb 2-1: config 0 descriptor?? [ 197.945362][ T5827] usb 2-1: can't set config #0, error -71 [ 197.985377][ T5827] usb 2-1: USB disconnect, device number 5 [ 198.329424][ T6722] netlink: 'syz.3.215': attribute type 12 has an invalid length. [ 198.377958][ T6723] loop1: detected capacity change from 0 to 128 [ 198.429290][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.470520][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.486695][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.502678][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.517822][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.525686][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.533176][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.633350][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.651658][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.660565][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.668427][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.677829][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.712944][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.823893][ T5827] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 198.935739][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 198.935979][ T30] audit: type=1326 audit(1749226927.880:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.044363][ T5827] hid-generic 00A0:0008:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 199.392147][ T30] audit: type=1326 audit(1749226927.920:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.415259][ T30] audit: type=1326 audit(1749226927.980:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.515272][ T30] audit: type=1326 audit(1749226928.030:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.645441][ T30] audit: type=1326 audit(1749226928.040:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.668368][ T6734] loop2: detected capacity change from 0 to 512 [ 199.687241][ T6734] EXT4-fs: inline encryption not supported [ 199.721897][ T6730] fido_id[6730]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.751881][ T30] audit: type=1326 audit(1749226928.430:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.829274][ T30] audit: type=1326 audit(1749226928.430:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.929679][ T30] audit: type=1326 audit(1749226928.440:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 199.953352][ T6734] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.218: corrupted in-inode xattr: invalid ea_ino [ 200.185612][ T6734] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.218: couldn't read orphan inode 15 (err -117) [ 200.656185][ T30] audit: type=1326 audit(1749226928.440:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 200.709291][ T6734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.722472][ T30] audit: type=1326 audit(1749226928.460:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f78f678e929 code=0x7ffc0000 [ 201.286116][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.314461][ T6750] siw: device registration error -23 [ 203.689200][ T6755] siw: device registration error -23 [ 203.967418][ T6761] loop1: detected capacity change from 0 to 512 [ 203.998794][ T6761] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.060635][ T6761] EXT4-fs (loop1): 1 truncate cleaned up [ 204.103576][ T6761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.353651][ T6776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.787167][ T6785] loop4: detected capacity change from 0 to 512 [ 205.807601][ T6785] EXT4-fs: inline encryption not supported [ 205.836674][ T6785] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.232: corrupted in-inode xattr: invalid ea_ino [ 205.856881][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 205.882143][ T6785] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.232: couldn't read orphan inode 15 (err -117) [ 205.965903][ T6785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.029761][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.283471][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 207.040460][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.041348][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.523606][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 208.523654][ T30] audit: type=1326 audit(1749226937.439:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 209.449990][ T30] audit: type=1326 audit(1749226937.439:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 209.474555][ T30] audit: type=1326 audit(1749226937.439:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 209.503060][ T30] audit: type=1326 audit(1749226937.439:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 209.529367][ T30] audit: type=1326 audit(1749226937.439:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 209.684683][ T6814] hub 8-0:1.0: USB hub found [ 209.690290][ T6814] hub 8-0:1.0: 1 port detected [ 210.468242][ T6810] siw: device registration error -23 [ 210.485538][ T30] audit: type=1326 audit(1749226937.439:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 210.642482][ T6815] netlink: 'syz.0.238': attribute type 12 has an invalid length. [ 210.725374][ T30] audit: type=1326 audit(1749226937.449:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 210.941628][ T30] audit: type=1326 audit(1749226937.449:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 210.965206][ T30] audit: type=1326 audit(1749226937.449:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 211.016902][ T30] audit: type=1326 audit(1749226937.449:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 211.668148][ T9] usb 2-1: string descriptor 0 read error: -71 [ 211.674403][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 211.696729][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 211.801651][ T9] usb 2-1: config 0 descriptor?? [ 211.841772][ T9] usb 2-1: can't set config #0, error -71 [ 211.886003][ T9] usb 2-1: USB disconnect, device number 6 [ 211.958261][ T6828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.190318][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.667842][ T6839] loop1: detected capacity change from 0 to 128 [ 212.722699][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 212.794253][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 212.850656][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.000386][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 213.714859][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.745090][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.783583][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.811536][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.830360][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.847343][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.865021][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.879357][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.947096][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 213.995292][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 214.037096][ T9] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 214.078109][ T9] hid-generic 00A0:0008:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 214.092345][ T6848] loop3: detected capacity change from 0 to 128 [ 214.100147][ T6848] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.154972][ T6848] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.353093][ T6849] fido_id[6849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.853808][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 215.853850][ T30] audit: type=1326 audit(1749226944.738:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.367919][ T30] audit: type=1326 audit(1749226944.738:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.391927][ T30] audit: type=1326 audit(1749226944.738:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.415498][ T30] audit: type=1326 audit(1749226944.748:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.439708][ T30] audit: type=1326 audit(1749226944.748:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.462614][ T30] audit: type=1326 audit(1749226944.748:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.485667][ T30] audit: type=1326 audit(1749226944.758:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.579693][ T30] audit: type=1326 audit(1749226944.758:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.630369][ T30] audit: type=1326 audit(1749226944.758:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.796285][ T30] audit: type=1326 audit(1749226944.768:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 216.905925][ T6866] hub 8-0:1.0: USB hub found [ 216.912010][ T6866] hub 8-0:1.0: 1 port detected [ 216.979027][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 216.985257][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 216.993528][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 216.999882][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 217.021465][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 217.609580][ T6869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.776440][ T6871] loop1: detected capacity change from 0 to 512 [ 217.805251][ T6871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.846352][ T6871] EXT4-fs (loop1): 1 truncate cleaned up [ 217.864400][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.299950][ T6878] siw: device registration error -23 [ 218.397843][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 218.649488][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 218.717818][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.848340][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.950231][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 218.977921][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 218.986370][ T9] usb 2-1: SerialNumber: syz [ 219.010953][ T9] usb 2-1: config 0 descriptor?? [ 219.036833][ T9] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 219.046277][ T9] usb 2-1: No valid video chain found. [ 219.135444][ T6892] loop2: detected capacity change from 0 to 128 [ 219.174526][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.210084][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.239051][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.260941][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.268540][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.276049][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.283780][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.488652][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.496304][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.504342][ T6897] loop4: detected capacity change from 0 to 128 [ 219.506390][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 219.512941][ T6897] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.531861][ T6897] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.568549][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 220.032568][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 220.312434][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 220.320282][ T9] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 220.330812][ T9] hid-generic 00A0:0008:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 221.394556][ T5966] usb 2-1: USB disconnect, device number 7 [ 221.407546][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 221.407580][ T30] audit: type=1326 audit(1749227205.700:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 221.463790][ T6910] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 221.475426][ T6910] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 222.393973][ T30] audit: type=1326 audit(1749227205.700:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 222.416831][ T30] audit: type=1326 audit(1749227205.710:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 222.439933][ T30] audit: type=1326 audit(1749227205.710:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 222.465064][ T30] audit: type=1326 audit(1749227205.710:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 222.590757][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.625692][ T30] audit: type=1326 audit(1749227205.710:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 222.650968][ T6913] hub 8-0:1.0: USB hub found [ 222.655886][ T6913] hub 8-0:1.0: 1 port detected [ 222.664165][ T6902] fido_id[6902]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.677733][ T30] audit: type=1326 audit(1749227205.710:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 223.816011][ T30] audit: type=1326 audit(1749227205.710:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 223.967815][ T30] audit: type=1326 audit(1749227205.710:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 224.078009][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 224.111331][ T30] audit: type=1326 audit(1749227205.710:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 224.356770][ T6930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.719074][ T6937] siw: device registration error -23 [ 225.834971][ T6945] loop2: detected capacity change from 0 to 128 [ 225.856762][ T6945] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.428839][ T6945] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.725299][ T6949] loop3: detected capacity change from 0 to 128 [ 226.733247][ T6948] loop1: detected capacity change from 0 to 512 [ 226.778930][ T6948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.809050][ T6948] EXT4-fs (loop1): 1 truncate cleaned up [ 226.813986][ T6949] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 226.824331][ T6948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.153307][ T6955] lo speed is unknown, defaulting to 1000 [ 227.386604][ T6961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 227.398335][ T6961] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 229.089435][ T5966] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 229.308307][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.454381][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.886855][ T6977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.925354][ T5966] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 229.949373][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 230.085221][ T5966] usb 2-1: config 0 descriptor?? [ 230.201160][ T5966] usb 2-1: can't set config #0, error -71 [ 230.381199][ T5966] usb 2-1: USB disconnect, device number 8 [ 230.702464][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.794454][ T6988] random: crng reseeded on system resumption [ 231.824468][ T6988] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 232.166497][ T6992] loop3: detected capacity change from 0 to 128 [ 232.173985][ T6992] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.186630][ T6992] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 232.270576][ T6994] loop2: detected capacity change from 0 to 128 [ 232.296406][ T6994] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 232.758734][ T7001] lo speed is unknown, defaulting to 1000 [ 233.390508][ T7013] loop1: detected capacity change from 0 to 512 [ 233.454351][ T7013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.562104][ T7013] EXT4-fs (loop1): 1 truncate cleaned up [ 233.604205][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.663400][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 235.019644][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 235.167738][ T7029] random: crng reseeded on system resumption [ 235.183532][ T7029] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 235.205282][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.254796][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.277701][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 235.287057][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 235.299615][ T9] usb 2-1: SerialNumber: syz [ 235.320719][ T9] usb 2-1: config 0 descriptor?? [ 235.361691][ T9] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 235.368624][ T9] usb 2-1: No valid video chain found. [ 236.608884][ T5897] usb 2-1: USB disconnect, device number 9 [ 236.644861][ T7038] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.695213][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.711550][ T7038] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 236.965079][ T7044] loop0: detected capacity change from 0 to 128 [ 237.011671][ T7044] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 237.235590][ T7046] loop1: detected capacity change from 0 to 128 [ 237.243563][ T7046] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.264219][ T7046] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.482113][ T7047] lo speed is unknown, defaulting to 1000 [ 238.636878][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 240.152614][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 240.152631][ T30] audit: type=1326 audit(1749227481.090:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b578e929 code=0x7ffc0000 [ 240.205412][ T30] audit: type=1326 audit(1749227481.090:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b578e929 code=0x7ffc0000 [ 240.752764][ T7080] netlink: 'syz.0.314': attribute type 12 has an invalid length. [ 241.456209][ T7083] loop2: detected capacity change from 0 to 512 [ 241.496888][ T7083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 241.577338][ T7087] loop3: detected capacity change from 0 to 128 [ 241.625117][ T7087] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 241.648852][ T7083] EXT4-fs (loop2): 1 truncate cleaned up [ 241.728271][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.192747][ T7092] lo speed is unknown, defaulting to 1000 [ 243.129005][ T7101] loop0: detected capacity change from 0 to 128 [ 243.136765][ T7101] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.149330][ T7101] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.210558][ T5897] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 243.403449][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.430520][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.461641][ T5897] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 243.480484][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 243.505967][ T5897] usb 3-1: SerialNumber: syz [ 243.523788][ T5897] usb 3-1: config 0 descriptor?? [ 243.536931][ T5897] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 243.550507][ T5897] usb 3-1: No valid video chain found. [ 244.039886][ T7110] siw: device registration error -23 [ 244.824720][ T5897] usb 3-1: USB disconnect, device number 4 [ 244.903413][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.248268][ T30] audit: type=1326 audit(1749227486.159:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 245.821551][ T30] audit: type=1326 audit(1749227486.159:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 245.848387][ T30] audit: type=1326 audit(1749227486.159:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 245.872337][ T30] audit: type=1326 audit(1749227486.159:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 245.895079][ T30] audit: type=1326 audit(1749227486.169:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 245.920163][ T30] audit: type=1326 audit(1749227486.169:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 246.053834][ T30] audit: type=1326 audit(1749227486.169:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 246.257413][ T30] audit: type=1326 audit(1749227486.169:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 246.280849][ T30] audit: type=1326 audit(1749227486.179:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 246.303245][ T30] audit: type=1326 audit(1749227486.179:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125178e929 code=0x7ffc0000 [ 246.434089][ T7126] netlink: 'syz.3.328': attribute type 12 has an invalid length. [ 249.317387][ T7157] loop4: detected capacity change from 0 to 512 [ 249.328201][ T7155] loop2: detected capacity change from 0 to 128 [ 249.336211][ T7155] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.350971][ T7155] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.398111][ T7157] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.433264][ T7157] EXT4-fs (loop4): 1 truncate cleaned up [ 249.455303][ T7157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.766119][ T5966] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 250.773842][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 250.773858][ T30] audit: type=1326 audit(1749227491.219:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 250.802941][ T30] audit: type=1326 audit(1749227491.219:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 250.836741][ T30] audit: type=1326 audit(1749227491.219:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 250.928452][ T30] audit: type=1326 audit(1749227491.219:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 250.957524][ T30] audit: type=1326 audit(1749227491.219:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 251.017867][ T30] audit: type=1326 audit(1749227491.219:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 251.098175][ T30] audit: type=1326 audit(1749227491.219:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 251.155363][ T30] audit: type=1326 audit(1749227491.219:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 251.213807][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.239488][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.257804][ T7171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.270116][ T7171] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 251.695290][ T5966] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 251.891602][ T30] audit: type=1326 audit(1749227491.219:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 251.915496][ T30] audit: type=1326 audit(1749227491.219:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 251.971671][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 251.987162][ T5966] usb 5-1: SerialNumber: syz [ 252.205591][ T5966] usb 5-1: config 0 descriptor?? [ 252.224436][ T5966] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 252.231368][ T5966] usb 5-1: No valid video chain found. [ 253.222406][ T5966] usb 5-1: USB disconnect, device number 5 [ 253.400098][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.812634][ T7193] siw: device registration error -23 [ 255.618072][ T7222] siw: device registration error -23 [ 255.765367][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.771891][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.663500][ T7224] loop2: detected capacity change from 0 to 512 [ 256.694059][ T7224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.806783][ T7224] EXT4-fs (loop2): 1 truncate cleaned up [ 256.835212][ T7224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.422526][ T5966] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 257.673860][ T7232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 257.685133][ T7232] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 258.462292][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.474163][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.485484][ T5966] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 258.494664][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 258.502742][ T5966] usb 3-1: SerialNumber: syz [ 258.533182][ T5966] usb 3-1: config 0 descriptor?? [ 258.723565][ T5966] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 258.972614][ T5966] usb 3-1: No valid video chain found. [ 259.536880][ T7246] netlink: 'syz.0.360': attribute type 12 has an invalid length. [ 260.266130][ T5966] usb 3-1: USB disconnect, device number 5 [ 260.305049][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.465250][ T7269] loop3: detected capacity change from 0 to 128 [ 261.475610][ T7269] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.489273][ T7269] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.623537][ T7270] siw: device registration error -23 [ 262.687565][ T7279] loop3: detected capacity change from 0 to 128 [ 262.882974][ T7279] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 263.740540][ T7286] loop4: detected capacity change from 0 to 128 [ 263.879687][ T7287] lo speed is unknown, defaulting to 1000 [ 263.951983][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 263.977274][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 263.989978][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.008241][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.107559][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.121587][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.141916][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.152178][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.160371][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.168119][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.195558][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.265806][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.308106][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.334028][ T10] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 264.379033][ T10] hid-generic 00A0:0008:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 264.625937][ T7294] fido_id[7294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.711206][ T7296] random: crng reseeded on system resumption [ 264.846092][ T7297] loop2: detected capacity change from 0 to 512 [ 265.058882][ T7297] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.425612][ T7297] EXT4-fs (loop2): 1 truncate cleaned up [ 265.458337][ T7296] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 265.464078][ T7297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.883643][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 267.176688][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.201592][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.228604][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 267.252905][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 267.302039][ T10] usb 3-1: SerialNumber: syz [ 267.363770][ T10] usb 3-1: config 0 descriptor?? [ 267.408350][ T10] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 267.428934][ T10] usb 3-1: No valid video chain found. [ 267.765933][ T7324] loop4: detected capacity change from 0 to 128 [ 267.779051][ T7324] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.834434][ T7324] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.241527][ T7334] loop3: detected capacity change from 0 to 128 [ 268.303950][ T7334] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 268.341510][ T7331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 268.352698][ T7331] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 268.621989][ T7337] lo speed is unknown, defaulting to 1000 [ 268.745283][ T10] usb 3-1: USB disconnect, device number 6 [ 268.765339][ T7336] misc userio: Invalid payload size [ 268.770721][ T7336] misc userio: No port type given on /dev/userio [ 268.780984][ T7336] misc userio: The device must be registered before sending interrupts [ 268.817119][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.218126][ T7344] netlink: 'syz.2.384': attribute type 12 has an invalid length. [ 269.517563][ T7349] loop3: detected capacity change from 0 to 128 [ 269.960109][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.044461][ T7357] random: crng reseeded on system resumption [ 270.267419][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.275078][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.282629][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.290115][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.297610][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.305101][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.312545][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.320049][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.327512][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.410525][ T7357] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 270.413986][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.810818][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.827366][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.834900][ T5966] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 270.847473][ T5966] hid-generic 00A0:0008:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 270.985978][ T7366] fido_id[7366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.793795][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.063902][ T10] usb 4-1: device descriptor read/64, error -71 [ 272.308551][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 272.318744][ T7379] misc userio: No port type given on /dev/userio [ 272.467333][ T10] usb 4-1: device descriptor read/64, error -71 [ 272.589885][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 272.589925][ T30] audit: type=1326 audit(1749228281.500:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 272.996565][ T30] audit: type=1326 audit(1749228281.500:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.088459][ T30] audit: type=1326 audit(1749228281.500:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.111705][ T30] audit: type=1326 audit(1749228281.510:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.195324][ T10] usb usb4-port1: attempt power cycle [ 273.203465][ T30] audit: type=1326 audit(1749228281.510:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.237057][ T30] audit: type=1326 audit(1749228281.510:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.374246][ T30] audit: type=1326 audit(1749228281.510:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.397169][ T30] audit: type=1326 audit(1749228281.510:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.633970][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 273.679512][ T7391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.690686][ T7391] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 273.737289][ T30] audit: type=1326 audit(1749228281.520:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 273.755360][ T10] usb 4-1: device descriptor read/8, error -71 [ 273.837420][ T7393] misc userio: Invalid payload size [ 273.842871][ T7393] misc userio: No port type given on /dev/userio [ 273.850233][ T7393] misc userio: The device must be registered before sending interrupts [ 273.881972][ T30] audit: type=1326 audit(1749228281.520:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 274.294068][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 274.324344][ T7404] loop1: detected capacity change from 0 to 128 [ 274.357153][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.382285][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.411277][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.427150][ T10] usb 4-1: device descriptor read/8, error -71 [ 274.458199][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.532502][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.544800][ T7406] loop0: detected capacity change from 0 to 128 [ 274.552776][ T7406] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.567645][ T7406] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.576651][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.594647][ T10] usb usb4-port1: unable to enumerate USB device [ 274.776046][ T7403] siw: device registration error -23 [ 274.821753][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.971251][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.985522][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 274.993468][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 275.024158][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 275.047485][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 275.173259][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 275.252329][ T5827] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 275.286249][ T5827] hid-generic 00A0:0008:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 276.310295][ T7417] fido_id[7417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.629648][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 277.885862][ T7442] misc userio: Invalid payload size [ 277.891591][ T7442] misc userio: No port type given on /dev/userio [ 277.899154][ T7442] misc userio: The device must be registered before sending interrupts [ 279.192614][ T7456] loop3: detected capacity change from 0 to 128 [ 279.200714][ T7456] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.213767][ T7456] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.297164][ T7457] siw: device registration error -23 [ 279.797698][ T7438] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.808879][ T7438] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 280.385489][ T7470] loop3: detected capacity change from 0 to 128 [ 280.436628][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 280.468811][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 281.538333][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 281.538391][ T30] audit: type=1326 audit(1749228545.702:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 281.553512][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 281.664998][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 281.672458][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 281.680338][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.068299][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.082186][ T30] audit: type=1326 audit(1749228545.702:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.186484][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.193943][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.209524][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.297663][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.308843][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.334507][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.342224][ T30] audit: type=1326 audit(1749228545.732:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342273][ T30] audit: type=1326 audit(1749228545.732:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342318][ T30] audit: type=1326 audit(1749228545.732:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342361][ T30] audit: type=1326 audit(1749228545.732:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342413][ T30] audit: type=1326 audit(1749228545.742:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342476][ T30] audit: type=1326 audit(1749228545.842:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342522][ T30] audit: type=1326 audit(1749228545.842:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.342567][ T30] audit: type=1326 audit(1749228545.842:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2458e929 code=0x7ffc0000 [ 282.588376][ T5827] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x0 [ 282.740768][ T5827] hid-generic 00A0:0008:0003.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 283.037078][ T7490] fido_id[7490]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.158668][ T7492] misc userio: Invalid payload size [ 283.164299][ T7492] misc userio: No port type given on /dev/userio [ 283.180071][ T7492] misc userio: The device must be registered before sending interrupts [ 283.630325][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 283.761482][ T7507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.393272][ T7513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 284.408394][ T7516] loop2: detected capacity change from 0 to 128 [ 284.416913][ T7516] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.429289][ T7513] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 284.442614][ T7516] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.523497][ T7519] netlink: 'syz.4.428': attribute type 12 has an invalid length. [ 285.978018][ T7527] loop0: detected capacity change from 0 to 128 [ 286.004372][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.036853][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.162182][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.220966][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.255811][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.285583][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.312599][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.492453][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.511350][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.519695][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.527537][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.536238][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.544484][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.777456][ T5937] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 286.806570][ T5937] hid-generic 00A0:0008:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 286.884415][ T7543] siw: device registration error -23 [ 287.911499][ T7549] loop2: detected capacity change from 0 to 40427 [ 287.944702][ T7544] fido_id[7544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.968064][ T7549] F2FS-fs (loop2): invalid crc value [ 288.093258][ T7549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.280849][ T7556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.866647][ T5834] syz-executor: attempt to access beyond end of device [ 288.866647][ T5834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 288.967913][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 288.967945][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.967958][ T5834] Call Trace: [ 288.967966][ T5834] [ 288.967976][ T5834] dump_stack_lvl+0x189/0x250 [ 288.968006][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.968023][ T5834] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 288.968055][ T5834] ? __pfx_queue_work_on+0x10/0x10 [ 288.968077][ T5834] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 288.968108][ T5834] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 288.968141][ T5834] ? f2fs_hw_is_readonly+0x39b/0x470 [ 288.968172][ T5834] f2fs_handle_critical_error+0x37c/0x540 [ 288.968205][ T5834] f2fs_write_end_io+0x495/0x810 [ 288.968230][ T5834] ? blkg_put+0x22/0x240 [ 288.968275][ T5834] __submit_merged_bio+0x27a/0x6a0 [ 288.968308][ T5834] __submit_merged_write_cond+0x255/0x530 [ 288.968342][ T5834] f2fs_write_data_pages+0x261d/0x3000 [ 288.968386][ T5834] ? __lock_acquire+0xab9/0xd20 [ 288.968457][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 288.968548][ T5834] ? __mod_zone_page_state+0xd7/0x140 [ 288.968577][ T5834] ? folios_put_refs+0x560/0x640 [ 288.968614][ T5834] ? __lock_acquire+0xab9/0xd20 [ 288.968648][ T5834] ? do_raw_spin_lock+0x121/0x290 [ 288.968681][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 288.968702][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 288.968726][ T5834] do_writepages+0x32b/0x550 [ 288.968766][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 288.968792][ T5834] filemap_fdatawrite+0x191/0x230 [ 288.968813][ T5834] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 288.968894][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 288.968923][ T5834] f2fs_sync_dirty_inodes+0x31f/0x830 [ 288.968972][ T5834] f2fs_write_checkpoint+0x94a/0x1de0 [ 288.969031][ T5834] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 288.969114][ T5834] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 288.969141][ T5834] ? kfree+0x18e/0x440 [ 288.969161][ T5834] ? kill_f2fs_super+0x298/0x6c0 [ 288.969196][ T5834] kill_f2fs_super+0x2c3/0x6c0 [ 288.969233][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 288.969258][ T5834] ? radix_tree_delete_item+0x2b6/0x400 [ 288.969288][ T5834] ? shrinker_free+0x2ce/0x3e0 [ 288.969318][ T5834] deactivate_locked_super+0xb9/0x130 [ 288.969350][ T5834] cleanup_mnt+0x425/0x4c0 [ 288.969377][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.969402][ T5834] task_work_run+0x1d1/0x260 [ 288.969431][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 288.969453][ T5834] ? __x64_sys_umount+0x122/0x160 [ 288.969480][ T5834] ? exit_to_user_mode_loop+0x40/0x110 [ 288.969514][ T5834] exit_to_user_mode_loop+0xec/0x110 [ 288.969547][ T5834] do_syscall_64+0x2bd/0x3b0 [ 288.969566][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.969584][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.969601][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 288.969623][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.969640][ T5834] RIP: 0033:0x7f48b578fc57 [ 288.969657][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 288.969673][ T5834] RSP: 002b:00007ffdce256b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 288.969692][ T5834] RAX: 0000000000000000 RBX: 00007f48b5810925 RCX: 00007f48b578fc57 [ 288.969704][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdce256c10 [ 288.969715][ T5834] RBP: 00007ffdce256c10 R08: 0000000000000000 R09: 0000000000000000 [ 288.969726][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdce257ca0 [ 288.969737][ T5834] R13: 00007f48b5810925 R14: 00000000000466c4 R15: 00007ffdce257ce0 [ 288.969769][ T5834] [ 288.969777][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 289.147733][ T7570] hub 8-0:1.0: USB hub found [ 289.351907][ T7570] hub 8-0:1.0: 1 port detected [ 289.788499][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 289.788519][ T30] audit: type=1326 audit(1749228554.710:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 289.870463][ T30] audit: type=1326 audit(1749228554.710:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 289.893097][ T30] audit: type=1326 audit(1749228554.710:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 289.915922][ T30] audit: type=1326 audit(1749228554.710:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 289.938205][ T30] audit: type=1326 audit(1749228554.710:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 290.069803][ T30] audit: type=1326 audit(1749228554.710:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 290.113145][ T30] audit: type=1326 audit(1749228554.710:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 290.334234][ T30] audit: type=1326 audit(1749228554.710:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 290.365982][ T30] audit: type=1326 audit(1749228554.710:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 290.419356][ T7578] netlink: 'syz.0.450': attribute type 12 has an invalid length. [ 290.437844][ T30] audit: type=1326 audit(1749228554.710:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529a98e929 code=0x7ffc0000 [ 290.465714][ T7566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.478352][ T7586] misc userio: No port type given on /dev/userio [ 290.527477][ T7587] loop3: detected capacity change from 0 to 128 [ 290.554208][ T7566] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 290.573135][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.602797][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.627502][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.642504][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.657538][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.682043][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.700487][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.709071][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.718099][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.885232][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.901384][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.917528][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 290.934332][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 291.050345][ T10] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 291.094790][ T10] hid-generic 00A0:0008:0003.000B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 291.320108][ T7596] fido_id[7596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 292.004385][ T7603] siw: device registration error -23 [ 293.992253][ T7622] hub 8-0:1.0: USB hub found [ 293.998538][ T7622] hub 8-0:1.0: 1 port detected [ 294.711671][ T7619] loop3: detected capacity change from 0 to 40427 [ 294.745959][ T7619] F2FS-fs (loop3): invalid crc value [ 294.844851][ T7619] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.075406][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 296.110062][ T7633] misc userio: No port type given on /dev/userio [ 296.586264][ T5843] syz-executor: attempt to access beyond end of device [ 296.586264][ T5843] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.636713][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 296.636753][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.636765][ T5843] Call Trace: [ 296.636773][ T5843] [ 296.636781][ T5843] dump_stack_lvl+0x189/0x250 [ 296.636807][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.636823][ T5843] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 296.636853][ T5843] ? __pfx_queue_work_on+0x10/0x10 [ 296.636880][ T5843] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 296.636908][ T5843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.636939][ T5843] ? f2fs_hw_is_readonly+0x39b/0x470 [ 296.636966][ T5843] f2fs_handle_critical_error+0x37c/0x540 [ 296.636995][ T5843] f2fs_write_end_io+0x495/0x810 [ 296.637020][ T5843] ? blkg_put+0x22/0x240 [ 296.637057][ T5843] __submit_merged_bio+0x27a/0x6a0 [ 296.637086][ T5843] __submit_merged_write_cond+0x255/0x530 [ 296.637116][ T5843] f2fs_write_data_pages+0x261d/0x3000 [ 296.637139][ T5843] ? __lock_acquire+0xab9/0xd20 [ 296.637196][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 296.637278][ T5843] ? __mod_zone_page_state+0xd7/0x140 [ 296.637308][ T5843] ? folios_put_refs+0x560/0x640 [ 296.637346][ T5843] ? __lock_acquire+0xab9/0xd20 [ 296.637381][ T5843] ? do_raw_spin_lock+0x121/0x290 [ 296.637416][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 296.637449][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 296.637475][ T5843] do_writepages+0x32b/0x550 [ 296.637513][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 296.637538][ T5843] filemap_fdatawrite+0x191/0x230 [ 296.637556][ T5843] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 296.637636][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 296.637663][ T5843] f2fs_sync_dirty_inodes+0x31f/0x830 [ 296.637706][ T5843] f2fs_write_checkpoint+0x94a/0x1de0 [ 296.637759][ T5843] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 296.637836][ T5843] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 296.637861][ T5843] ? kfree+0x18e/0x440 [ 296.637884][ T5843] ? kill_f2fs_super+0x298/0x6c0 [ 296.637934][ T5843] kill_f2fs_super+0x2c3/0x6c0 [ 296.637968][ T5843] ? __pfx_kill_f2fs_super+0x10/0x10 [ 296.637993][ T5843] ? radix_tree_delete_item+0x2b6/0x400 [ 296.638021][ T5843] ? shrinker_free+0x2ce/0x3e0 [ 296.638057][ T5843] deactivate_locked_super+0xb9/0x130 [ 296.638088][ T5843] cleanup_mnt+0x425/0x4c0 [ 296.638116][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.638140][ T5843] task_work_run+0x1d1/0x260 [ 296.638168][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 296.638190][ T5843] ? __x64_sys_umount+0x122/0x160 [ 296.638215][ T5843] ? exit_to_user_mode_loop+0x40/0x110 [ 296.638246][ T5843] exit_to_user_mode_loop+0xec/0x110 [ 296.638273][ T5843] do_syscall_64+0x2bd/0x3b0 [ 296.638295][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.638314][ T5843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.638333][ T5843] ? clear_bhb_loop+0x60/0xb0 [ 296.638357][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.638376][ T5843] RIP: 0033:0x7f125178fc57 [ 296.638393][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 296.638410][ T5843] RSP: 002b:00007ffe83995c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 296.638431][ T5843] RAX: 0000000000000000 RBX: 00007f1251810925 RCX: 00007f125178fc57 [ 296.638445][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe83995d00 [ 296.638457][ T5843] RBP: 00007ffe83995d00 R08: 0000000000000000 R09: 0000000000000000 [ 296.638470][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe83996d90 [ 296.638483][ T5843] R13: 00007f1251810925 R14: 0000000000048419 R15: 00007ffe83996dd0 [ 296.638515][ T5843] [ 296.638524][ T5843] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 297.065483][ T7644] loop0: detected capacity change from 0 to 128 [ 297.102759][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.168365][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.187829][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.204445][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.252900][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.294507][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.336981][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.377149][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.410682][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.436750][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.463726][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.502981][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.522504][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.536225][ T7647] loop2: detected capacity change from 0 to 128 [ 297.543970][ T7647] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.556835][ T7647] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.616375][ T5827] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 297.630481][ T7648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 297.641777][ T7648] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 297.669548][ T5827] hid-generic 00A0:0008:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 297.787949][ T7649] fido_id[7649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 299.243681][ T7672] hub 8-0:1.0: USB hub found [ 299.252700][ T7672] hub 8-0:1.0: 1 port detected [ 301.545617][ T7681] loop2: detected capacity change from 0 to 40427 [ 301.556894][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.465'. [ 302.152466][ T7681] F2FS-fs (loop2): invalid crc value [ 302.271722][ T7681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.762969][ T7698] netlink: 'syz.3.480': attribute type 12 has an invalid length. [ 303.046849][ T5834] syz-executor: attempt to access beyond end of device [ 303.046849][ T5834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.359440][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 304.033943][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 304.033973][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.033993][ T5834] Call Trace: [ 304.034001][ T5834] [ 304.034010][ T5834] dump_stack_lvl+0x189/0x250 [ 304.034037][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.034054][ T5834] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 304.034085][ T5834] ? __pfx_queue_work_on+0x10/0x10 [ 304.034105][ T5834] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 304.034136][ T5834] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.034168][ T5834] ? f2fs_hw_is_readonly+0x39b/0x470 [ 304.034197][ T5834] f2fs_handle_critical_error+0x37c/0x540 [ 304.034228][ T5834] f2fs_write_end_io+0x495/0x810 [ 304.034259][ T5834] ? blkg_put+0x22/0x240 [ 304.034300][ T5834] __submit_merged_bio+0x27a/0x6a0 [ 304.034329][ T5834] __submit_merged_write_cond+0x255/0x530 [ 304.034358][ T5834] f2fs_write_data_pages+0x261d/0x3000 [ 304.034414][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.034484][ T5834] ? __mod_zone_page_state+0xd7/0x140 [ 304.034512][ T5834] ? folios_put_refs+0x560/0x640 [ 304.034549][ T5834] ? __lock_acquire+0xab9/0xd20 [ 304.034584][ T5834] ? do_raw_spin_lock+0x121/0x290 [ 304.034619][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 304.034642][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.034669][ T5834] do_writepages+0x32b/0x550 [ 304.034711][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 304.034738][ T5834] filemap_fdatawrite+0x191/0x230 [ 304.034759][ T5834] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 304.034825][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 304.034851][ T5834] f2fs_sync_dirty_inodes+0x31f/0x830 [ 304.034894][ T5834] f2fs_write_checkpoint+0x94a/0x1de0 [ 304.034945][ T5834] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 304.035015][ T5834] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 304.035043][ T5834] ? kfree+0x18e/0x440 [ 304.035063][ T5834] ? kill_f2fs_super+0x298/0x6c0 [ 304.035096][ T5834] kill_f2fs_super+0x2c3/0x6c0 [ 304.035131][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 304.035156][ T5834] ? radix_tree_delete_item+0x2b6/0x400 [ 304.035184][ T5834] ? shrinker_free+0x2ce/0x3e0 [ 304.035212][ T5834] deactivate_locked_super+0xb9/0x130 [ 304.035251][ T5834] cleanup_mnt+0x425/0x4c0 [ 304.035279][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.035302][ T5834] task_work_run+0x1d1/0x260 [ 304.035331][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 304.035353][ T5834] ? __x64_sys_umount+0x122/0x160 [ 304.035378][ T5834] ? exit_to_user_mode_loop+0x40/0x110 [ 304.035410][ T5834] exit_to_user_mode_loop+0xec/0x110 [ 304.035438][ T5834] do_syscall_64+0x2bd/0x3b0 [ 304.035470][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.035488][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.035507][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 304.035529][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.035547][ T5834] RIP: 0033:0x7f48b578fc57 [ 304.035564][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 304.035581][ T5834] RSP: 002b:00007ffdce256b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 304.035600][ T5834] RAX: 0000000000000000 RBX: 00007f48b5810925 RCX: 00007f48b578fc57 [ 304.035613][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdce256c10 [ 304.035624][ T5834] RBP: 00007ffdce256c10 R08: 0000000000000000 R09: 0000000000000000 [ 304.035636][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdce257ca0 [ 304.035648][ T5834] R13: 00007f48b5810925 R14: 0000000000049f4f R15: 00007ffdce257ce0 [ 304.035676][ T5834] [ 304.470240][ T7699] siw: device registration error -23 [ 304.483799][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 304.958764][ T7709] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 304.971366][ T7709] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 307.980620][ T7733] hub 8-0:1.0: USB hub found [ 307.986724][ T7733] hub 8-0:1.0: 1 port detected [ 308.323480][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 309.075282][ T7744] loop2: detected capacity change from 0 to 128 [ 309.291991][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.304073][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.315891][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.514060][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.677170][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.690622][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.698197][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.705721][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.713331][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.720866][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.728416][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.735907][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.743781][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.751627][ T5937] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 309.759379][ T7748] netlink: 'syz.1.493': attribute type 12 has an invalid length. [ 309.888641][ T5937] hid-generic 00A0:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 309.919443][ T7749] fido_id[7749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.456275][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 311.221717][ T7766] siw: device registration error -23 [ 312.890379][ T7771] siw: device registration error -23 [ 314.341982][ T7793] loop1: detected capacity change from 0 to 128 [ 314.500926][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.037140][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 315.198070][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.366201][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.404334][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.454740][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.500858][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.541935][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 315.762233][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 315.842276][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 316.139997][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 316.574489][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 316.629050][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 316.691921][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 316.729787][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 316.984326][ T10] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 317.023038][ T10] hid-generic 00A0:0008:0003.000E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 317.162789][ T7819] fido_id[7819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 317.203872][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.214923][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.340581][ T5937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 317.742276][ T5937] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 317.902410][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 318.076570][ T5937] usb 5-1: SerialNumber: syz [ 318.134552][ T5937] usb 5-1: config 0 descriptor?? [ 318.254312][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 318.272133][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 318.497053][ T5937] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 318.504774][ T5937] hackrf 5-1:0.0: Could not detect board [ 318.511564][ T5937] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 318.686239][ T5937] usb 5-1: USB disconnect, device number 6 [ 318.922192][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 319.133884][ T7846] loop1: detected capacity change from 0 to 128 [ 319.198004][ T7846] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.255021][ T43] libceph: connect (1)[c::]:6789 error -101 [ 319.261467][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 319.268114][ T7846] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.835856][ T7833] ceph: No mds server is up or the cluster is laggy [ 319.842178][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 319.867251][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 321.617897][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 321.639839][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 321.959207][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 322.848925][ T7875] loop3: detected capacity change from 0 to 1024 [ 323.425198][ T7875] hfsplus: invalid btree extent records (0 size) [ 323.760235][ T7875] hfsplus: failed to load attributes file [ 324.433848][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 325.420242][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 325.686573][ T5827] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 325.697340][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 325.717990][ T5827] usb 5-1: SerialNumber: syz [ 325.739214][ T5827] usb 5-1: config 0 descriptor?? [ 326.051178][ T5827] hackrf 5-1:0.0: usb_control_msg() failed -32 request 0e [ 326.102008][ T5827] hackrf 5-1:0.0: Could not detect board [ 326.108826][ T5827] hackrf 5-1:0.0: probe with driver hackrf failed with error -32 [ 326.121689][ T5827] usb 5-1: USB disconnect, device number 7 [ 326.449698][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 327.777691][ T7918] misc userio: No port type given on /dev/userio [ 328.333182][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 329.468210][ T7931] loop4: detected capacity change from 0 to 1024 [ 329.546814][ T7931] hfsplus: invalid btree extent records (0 size) [ 329.554970][ T7931] hfsplus: failed to load attributes file [ 331.135702][ T7945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.577325][ T5937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 331.757836][ T5937] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.521333][ T5937] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.573743][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.588409][ T5937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 333.602504][ T5937] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.611848][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.620082][ T5937] usb 2-1: Product: syz [ 333.630163][ T5937] usb 2-1: Manufacturer: syz [ 333.650504][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 333.659651][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 333.665214][ T5937] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 335.246203][ T7974] loop4: detected capacity change from 0 to 512 [ 335.465737][ T7974] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.557: iget: bad extended attribute block 1 [ 335.820023][ T7974] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.557: couldn't read orphan inode 15 (err -117) [ 335.871682][ T7981] misc userio: Invalid payload size [ 335.913110][ T7981] misc userio: No port type given on /dev/userio [ 335.933431][ T7974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.962910][ T7981] misc userio: The device must be registered before sending interrupts [ 336.071060][ T7980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 336.080478][ T7974] EXT4-fs (loop4): shut down requested (1) [ 336.193020][ T5911] usb 2-1: USB disconnect, device number 10 [ 336.826503][ T7988] loop0: detected capacity change from 0 to 128 [ 336.835952][ T7988] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.942183][ T7988] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 337.420965][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.503307][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 338.212569][ T8006] random: crng reseeded on system resumption [ 340.062227][ T8010] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 341.858954][ T8022] loop0: detected capacity change from 0 to 512 [ 342.131807][ T8022] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.571: iget: bad extended attribute block 1 [ 342.421815][ T5827] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 342.433712][ T8022] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.571: couldn't read orphan inode 15 (err -117) [ 342.663241][ T8022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.702637][ T5827] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.951902][ T5827] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 342.978019][ T8022] EXT4-fs (loop0): shut down requested (1) [ 342.989252][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.999013][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 343.018571][ T5827] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.028109][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.061864][ T5827] usb 4-1: Product: syz [ 343.066093][ T5827] usb 4-1: Manufacturer: syz [ 343.092064][ T5827] cdc_wdm 4-1:1.0: skipping garbage [ 343.097326][ T5827] cdc_wdm 4-1:1.0: skipping garbage [ 343.114960][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 343.124025][ T5827] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 343.294805][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.384856][ T8038] siw: device registration error -23 [ 345.642306][ T5827] usb 4-1: USB disconnect, device number 8 [ 346.191293][ T8064] random: crng reseeded on system resumption [ 346.734737][ T8064] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 347.079757][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 347.247279][ T8063] loop3: detected capacity change from 0 to 8192 [ 348.610925][ T43] libceph: connect (1)[c::]:6789 error -101 [ 348.622813][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 348.913753][ T43] libceph: connect (1)[c::]:6789 error -101 [ 348.934417][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 349.536304][ T8085] ceph: No mds server is up or the cluster is laggy [ 350.252217][ T43] libceph: connect (1)[c::]:6789 error -101 [ 350.259690][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 352.122986][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 352.347040][ T8109] loop1: detected capacity change from 0 to 40427 [ 352.385349][ T8109] F2FS-fs (loop1): invalid crc value [ 352.496363][ T43] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.505538][ T8109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 352.608486][ T8118] loop2: detected capacity change from 0 to 16 [ 352.729099][ T43] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.739472][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.748576][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 352.788995][ T43] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.807254][ T8118] erofs (device loop2): mounted with root inode @ nid 36. [ 352.823013][ T43] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.859132][ T43] usb 4-1: Product: syz [ 352.869735][ T43] usb 4-1: Manufacturer: syz [ 352.878041][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 354.008787][ T5833] syz-executor: attempt to access beyond end of device [ 354.008787][ T5833] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.040668][ T43] usb 4-1: can't set config #1, error -71 [ 354.078766][ T43] usb 4-1: USB disconnect, device number 9 [ 354.087272][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 354.087298][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.087310][ T5833] Call Trace: [ 354.087318][ T5833] [ 354.087326][ T5833] dump_stack_lvl+0x189/0x250 [ 354.087352][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.087375][ T5833] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 354.087406][ T5833] ? __pfx_queue_work_on+0x10/0x10 [ 354.087427][ T5833] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 354.087455][ T5833] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.087486][ T5833] ? f2fs_hw_is_readonly+0x39b/0x470 [ 354.087514][ T5833] f2fs_handle_critical_error+0x37c/0x540 [ 354.087544][ T5833] f2fs_write_end_io+0x495/0x810 [ 354.087568][ T5833] ? blkg_put+0x22/0x240 [ 354.087606][ T5833] __submit_merged_bio+0x27a/0x6a0 [ 354.087635][ T5833] __submit_merged_write_cond+0x255/0x530 [ 354.087665][ T5833] f2fs_write_data_pages+0x261d/0x3000 [ 354.087688][ T5833] ? __lock_acquire+0xab9/0xd20 [ 354.087746][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 354.087816][ T5833] ? stack_depot_save_flags+0x40/0x900 [ 354.087861][ T5833] ? __lock_acquire+0xab9/0xd20 [ 354.087894][ T5833] ? do_raw_spin_lock+0x121/0x290 [ 354.087925][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 354.087946][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 354.087971][ T5833] do_writepages+0x32b/0x550 [ 354.088011][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 354.088036][ T5833] filemap_fdatawrite+0x191/0x230 [ 354.088055][ T5833] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 354.088116][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 354.088140][ T5833] f2fs_sync_dirty_inodes+0x31f/0x830 [ 354.088179][ T5833] f2fs_write_checkpoint+0x94a/0x1de0 [ 354.088227][ T5833] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 354.088290][ T5833] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 354.088315][ T5833] ? kfree+0x18e/0x440 [ 354.088332][ T5833] ? kill_f2fs_super+0x298/0x6c0 [ 354.088363][ T5833] kill_f2fs_super+0x2c3/0x6c0 [ 354.088400][ T5833] ? __pfx_kill_f2fs_super+0x10/0x10 [ 354.088423][ T5833] ? radix_tree_delete_item+0x2b6/0x400 [ 354.088449][ T5833] ? shrinker_free+0x2ce/0x3e0 [ 354.088477][ T5833] deactivate_locked_super+0xb9/0x130 [ 354.088506][ T5833] cleanup_mnt+0x425/0x4c0 [ 354.088532][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.088556][ T5833] task_work_run+0x1d1/0x260 [ 354.088582][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 354.088612][ T5833] ? exit_to_user_mode_loop+0x40/0x110 [ 354.088643][ T5833] exit_to_user_mode_loop+0xec/0x110 [ 354.088669][ T5833] do_syscall_64+0x2bd/0x3b0 [ 354.088689][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.088707][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.088726][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 354.088749][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.088767][ T5833] RIP: 0033:0x7f529a98fc57 [ 354.088784][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 354.088800][ T5833] RSP: 002b:00007ffe8af73598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 354.088820][ T5833] RAX: 0000000000000000 RBX: 00007f529aa10925 RCX: 00007f529a98fc57 [ 354.088832][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8af73650 [ 354.088843][ T5833] RBP: 00007ffe8af73650 R08: 0000000000000000 R09: 0000000000000000 [ 354.088855][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8af746e0 [ 354.088867][ T5833] R13: 00007f529aa10925 R14: 0000000000056238 R15: 00007ffe8af74720 [ 354.088898][ T5833] [ 354.088905][ T5833] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 355.741119][ T8134] loop4: detected capacity change from 0 to 1024 [ 355.756621][ T8134] hfsplus: invalid btree extent records (0 size) [ 355.767235][ T8134] hfsplus: failed to load attributes file [ 359.145161][ T8168] loop0: detected capacity change from 0 to 40427 [ 359.238978][ T8168] F2FS-fs (loop0): invalid crc value [ 359.339243][ T8168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 359.639447][ T8179] random: crng reseeded on system resumption [ 359.836513][ T8181] overlayfs: invalid origin (0000007900b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 360.163545][ T5839] syz-executor: attempt to access beyond end of device [ 360.163545][ T5839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 360.271777][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 360.271803][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.271815][ T5839] Call Trace: [ 360.271822][ T5839] [ 360.271831][ T5839] dump_stack_lvl+0x189/0x250 [ 360.271866][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.271882][ T5839] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 360.271912][ T5839] ? __pfx_queue_work_on+0x10/0x10 [ 360.271932][ T5839] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 360.271961][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.271992][ T5839] ? f2fs_hw_is_readonly+0x39b/0x470 [ 360.272020][ T5839] f2fs_handle_critical_error+0x37c/0x540 [ 360.272050][ T5839] f2fs_write_end_io+0x495/0x810 [ 360.272073][ T5839] ? blkg_put+0x22/0x240 [ 360.272112][ T5839] __submit_merged_bio+0x27a/0x6a0 [ 360.272140][ T5839] __submit_merged_write_cond+0x255/0x530 [ 360.272169][ T5839] f2fs_write_data_pages+0x261d/0x3000 [ 360.272227][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.272266][ T5839] ? finish_task_switch+0x266/0x950 [ 360.272321][ T5839] ? __schedule+0x1713/0x4d00 [ 360.272342][ T5839] ? folios_put_refs+0x559/0x640 [ 360.272379][ T5839] ? __lock_acquire+0xab9/0xd20 [ 360.272413][ T5839] ? do_raw_spin_lock+0x121/0x290 [ 360.272445][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 360.272467][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.272512][ T5839] do_writepages+0x32b/0x550 [ 360.272553][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 360.272580][ T5839] filemap_fdatawrite+0x191/0x230 [ 360.272601][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 360.272668][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 360.272694][ T5839] f2fs_sync_dirty_inodes+0x31f/0x830 [ 360.272738][ T5839] f2fs_write_checkpoint+0x94a/0x1de0 [ 360.272789][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 360.272870][ T5839] ? kill_f2fs_super+0x298/0x6c0 [ 360.272904][ T5839] kill_f2fs_super+0x2c3/0x6c0 [ 360.272938][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 360.272962][ T5839] ? radix_tree_delete_item+0x2b6/0x400 [ 360.272990][ T5839] ? shrinker_free+0x2ce/0x3e0 [ 360.273018][ T5839] deactivate_locked_super+0xb9/0x130 [ 360.273048][ T5839] cleanup_mnt+0x425/0x4c0 [ 360.273074][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.273097][ T5839] task_work_run+0x1d1/0x260 [ 360.273125][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 360.273147][ T5839] ? __x64_sys_umount+0x122/0x160 [ 360.273171][ T5839] ? exit_to_user_mode_loop+0x40/0x110 [ 360.273202][ T5839] exit_to_user_mode_loop+0xec/0x110 [ 360.273230][ T5839] do_syscall_64+0x2bd/0x3b0 [ 360.273250][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.273269][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.273288][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 360.273312][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.273331][ T5839] RIP: 0033:0x7f78f678fc57 [ 360.273348][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 360.273366][ T5839] RSP: 002b:00007fff119a6d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 360.273387][ T5839] RAX: 0000000000000000 RBX: 00007f78f6810925 RCX: 00007f78f678fc57 [ 360.273399][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff119a6dc0 [ 360.273412][ T5839] RBP: 00007fff119a6dc0 R08: 0000000000000000 R09: 0000000000000000 [ 360.273423][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff119a7e50 [ 360.273436][ T5839] R13: 00007f78f6810925 R14: 0000000000057c4b R15: 00007fff119a7e90 [ 360.273467][ T5839] [ 360.273475][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 360.692994][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 360.802764][ T8186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.982842][ T8199] loop3: detected capacity change from 0 to 8 [ 365.271978][ T8213] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.625'. [ 365.281308][ T8213] netlink: zone id is out of range [ 365.287458][ T8213] netlink: zone id is out of range [ 365.434994][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 365.608592][ T8219] loop0: detected capacity change from 0 to 16 [ 365.658099][ T8219] erofs (device loop0): mounted with root inode @ nid 36. [ 365.990329][ T8224] random: crng reseeded on system resumption [ 366.924308][ T8226] loop4: detected capacity change from 0 to 2048 [ 366.991771][ T8226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.087707][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 367.087725][ T30] audit: type=1800 audit(1749230680.017:325): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 367.140051][ T8226] ------------[ cut here ]------------ [ 367.146370][ T8226] WARNING: CPU: 0 PID: 8226 at fs/udf/inode.c:677 udf_setsize+0xd4e/0x1000 [ 367.155531][ T8226] Modules linked in: [ 367.159585][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.4.630 Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 367.171149][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.181590][ T8226] RIP: 0010:udf_setsize+0xd4e/0x1000 [ 367.187066][ T8226] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 64 34 08 cc e8 40 29 8b fe 45 89 f4 e9 49 fe ff ff e8 33 29 8b fe 90 <0f> 0b 90 e9 00 f8 ff ff 44 89 e9 80 e1 07 38 c1 0f 8c 49 f3 ff ff [ 367.206838][ T8226] RSP: 0018:ffffc90004177a20 EFLAGS: 00010287 [ 367.212954][ T8226] RAX: ffffffff833535ad RBX: ffff888059610e18 RCX: 0000000000080000 [ 367.221448][ T8226] RDX: ffffc9000d265000 RSI: 00000000000004ea RDI: 00000000000004eb [ 367.230375][ T8226] RBP: ffffc90004177b48 R08: ffff888059610ddb R09: 1ffff1100b2c21bb [ 367.239202][ T8226] R10: dffffc0000000000 R11: ffffed100b2c21bc R12: 0000000000000001 [ 367.247350][ T8226] R13: 0000000000000c00 R14: 0000000000000e00 R15: 0000000000001000 [ 367.255378][ T8226] FS: 00007fbf253556c0(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 367.264333][ T8226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.271268][ T8226] CR2: 0000000000000000 CR3: 0000000033ea0000 CR4: 00000000003526f0 [ 367.279334][ T8226] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.287519][ T8226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.295743][ T8226] Call Trace: [ 367.299331][ T8226] [ 367.302402][ T8226] ? __pfx_udf_setsize+0x10/0x10 [ 367.307777][ T8226] ? down_write+0x162/0x1f0 [ 367.312456][ T8226] ? __pfx_current_time+0x10/0x10 [ 367.318015][ T8226] udf_setattr+0x3a1/0x5a0 [ 367.322563][ T8226] ? __pfx_udf_setattr+0x10/0x10 [ 367.327889][ T8226] notify_change+0xb33/0xe40 [ 367.433267][ T8226] do_truncate+0x1a4/0x220 [ 367.439654][ T8226] ? __pfx_do_truncate+0x10/0x10 [ 367.511041][ T8226] ? apparmor_path_truncate+0x238/0x2d0 [ 367.516693][ T8226] ? mnt_get_write_access+0x223/0x2a0 [ 367.522087][ T8226] vfs_truncate+0x493/0x520 [ 367.526625][ T8226] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.531856][ T8226] ? __pfx_vfs_truncate+0x10/0x10 [ 367.537995][ T8226] ? user_path_at+0x44/0x60 [ 367.542583][ T8226] do_sys_truncate+0xdb/0x190 [ 367.548161][ T8226] ? __pfx_do_sys_truncate+0x10/0x10 [ 367.553501][ T8226] ? rcu_is_watching+0x15/0xb0 [ 367.558419][ T8226] __x64_sys_truncate+0x5b/0x70 [ 367.563319][ T8226] do_syscall_64+0xfa/0x3b0 [ 367.568339][ T8226] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.573677][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.580247][ T8226] ? clear_bhb_loop+0x60/0xb0 [ 367.585182][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.591219][ T8226] RIP: 0033:0x7fbf2458e929 [ 367.596630][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.616794][ T8226] RSP: 002b:00007fbf25355038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 367.625720][ T8226] RAX: ffffffffffffffda RBX: 00007fbf247b5fa0 RCX: 00007fbf2458e929 [ 367.633833][ T8226] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 0000200000000080 [ 367.765036][ T8226] RBP: 00007fbf24610b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.035288][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.043335][ T8226] R13: 0000000000000000 R14: 00007fbf247b5fa0 R15: 00007ffe21ca7268 [ 368.052868][ T8226] [ 368.056701][ T8226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.064015][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.4.630 Not tainted 6.15.0-next-20250606-syzkaller #0 PREEMPT(full) [ 368.075074][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.085154][ T8226] Call Trace: [ 368.088448][ T8226] [ 368.091393][ T8226] dump_stack_lvl+0x99/0x250 [ 368.096007][ T8226] ? __asan_memcpy+0x40/0x70 [ 368.100647][ T8226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.105874][ T8226] ? __pfx__printk+0x10/0x10 [ 368.110507][ T8226] panic+0x2db/0x790 [ 368.114439][ T8226] ? __pfx_panic+0x10/0x10 [ 368.118882][ T8226] ? show_trace_log_lvl+0x4fb/0x550 [ 368.124166][ T8226] __warn+0x31b/0x4b0 [ 368.128185][ T8226] ? udf_setsize+0xd4e/0x1000 [ 368.132891][ T8226] ? udf_setsize+0xd4e/0x1000 [ 368.137603][ T8226] report_bug+0x2be/0x4f0 [ 368.141963][ T8226] ? udf_setsize+0xd4e/0x1000 [ 368.146671][ T8226] ? udf_setsize+0xd4e/0x1000 [ 368.151380][ T8226] ? udf_setsize+0xd50/0x1000 [ 368.156087][ T8226] handle_bug+0x84/0x160 [ 368.160356][ T8226] exc_invalid_op+0x1a/0x50 [ 368.164887][ T8226] asm_exc_invalid_op+0x1a/0x20 [ 368.169773][ T8226] RIP: 0010:udf_setsize+0xd4e/0x1000 [ 368.175089][ T8226] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 64 34 08 cc e8 40 29 8b fe 45 89 f4 e9 49 fe ff ff e8 33 29 8b fe 90 <0f> 0b 90 e9 00 f8 ff ff 44 89 e9 80 e1 07 38 c1 0f 8c 49 f3 ff ff [ 368.194720][ T8226] RSP: 0018:ffffc90004177a20 EFLAGS: 00010287 [ 368.200820][ T8226] RAX: ffffffff833535ad RBX: ffff888059610e18 RCX: 0000000000080000 [ 368.208824][ T8226] RDX: ffffc9000d265000 RSI: 00000000000004ea RDI: 00000000000004eb [ 368.216824][ T8226] RBP: ffffc90004177b48 R08: ffff888059610ddb R09: 1ffff1100b2c21bb [ 368.224818][ T8226] R10: dffffc0000000000 R11: ffffed100b2c21bc R12: 0000000000000001 [ 368.232825][ T8226] R13: 0000000000000c00 R14: 0000000000000e00 R15: 0000000000001000 [ 368.240815][ T8226] ? udf_setsize+0xd4d/0x1000 [ 368.245536][ T8226] ? __pfx_udf_setsize+0x10/0x10 [ 368.250480][ T8226] ? down_write+0x162/0x1f0 [ 368.255004][ T8226] ? __pfx_current_time+0x10/0x10 [ 368.260045][ T8226] udf_setattr+0x3a1/0x5a0 [ 368.264480][ T8226] ? __pfx_udf_setattr+0x10/0x10 [ 368.269432][ T8226] notify_change+0xb33/0xe40 [ 368.274046][ T8226] do_truncate+0x1a4/0x220 [ 368.278472][ T8226] ? __pfx_do_truncate+0x10/0x10 [ 368.283418][ T8226] ? apparmor_path_truncate+0x238/0x2d0 [ 368.288979][ T8226] ? mnt_get_write_access+0x223/0x2a0 [ 368.294370][ T8226] vfs_truncate+0x493/0x520 [ 368.298882][ T8226] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.304101][ T8226] ? __pfx_vfs_truncate+0x10/0x10 [ 368.309126][ T8226] ? user_path_at+0x44/0x60 [ 368.313649][ T8226] do_sys_truncate+0xdb/0x190 [ 368.318350][ T8226] ? __pfx_do_sys_truncate+0x10/0x10 [ 368.323677][ T8226] ? rcu_is_watching+0x15/0xb0 [ 368.328482][ T8226] __x64_sys_truncate+0x5b/0x70 [ 368.333340][ T8226] do_syscall_64+0xfa/0x3b0 [ 368.337858][ T8226] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.343065][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.349139][ T8226] ? clear_bhb_loop+0x60/0xb0 [ 368.353824][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.359722][ T8226] RIP: 0033:0x7fbf2458e929 [ 368.364148][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.383850][ T8226] RSP: 002b:00007fbf25355038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 368.392273][ T8226] RAX: ffffffffffffffda RBX: 00007fbf247b5fa0 RCX: 00007fbf2458e929 [ 368.400271][ T8226] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 0000200000000080 [ 368.408253][ T8226] RBP: 00007fbf24610b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.416232][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.424206][ T8226] R13: 0000000000000000 R14: 00007fbf247b5fa0 R15: 00007ffe21ca7268 [ 368.432216][ T8226] [ 368.435587][ T8226] Kernel Offset: disabled [ 368.439916][ T8226] Rebooting in 86400 seconds..