last executing test programs: 8m16.231119915s ago: executing program 32 (id=308): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x4, {0x4a3, 0x1, 0x0, {0x4, 0x7fffffffffffffff, 0x408, 0x201, 0x4, 0x6d6d, 0x9, 0x20020a, 0xe000, 0x4000, 0x3, 0xffffffffffffffff, 0x0, 0xfffff1df, 0x808003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8m12.808761258s ago: executing program 33 (id=238): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7m40.037305792s ago: executing program 34 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, &(0x7f00000011c0)={0x2020}, 0xffb4) 6m25.762105446s ago: executing program 35 (id=1007): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) 5m59.430594401s ago: executing program 36 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000001bc0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m46.819247978s ago: executing program 37 (id=1276): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000000ffffffffffff080211000000fffffffffffff00f04"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m5.376976011s ago: executing program 38 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/205, 0xcd}], 0x1, 0x5c, 0x25c) 4m1.165462571s ago: executing program 0 (id=2244): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040381010140000000000010902"], 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 3m59.554996612s ago: executing program 0 (id=2256): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3m59.37141058s ago: executing program 0 (id=2259): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000004c0)={0x250, 0x0, 0x20, 0xc138, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_CSA_IES={0x230, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x158, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "9bd71d626f16e1818ab9b1f283218cfb7cfa73e27b793f648a5aa72997f8cecd23f9dda4a6d9446391f9b0f35f1e3d63a5e02e0c6db7642b478552b698"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "717aca1efff627ce5c67b886a9c80f64db7637abbfbe1b8019f0bae81912c6102d893d1b9e7a2b0eee878258b1ef9a4846a0cf70738fdc1200f9c86593f7a4e89858e2d953273e96f39a23e8fa"}, @NL80211_FTM_RESP_ATTR_LCI={0x45, 0x2, "3bfca8ad0c947098127fb029183c0399e4a4c58e80c2ee93a7a671e75f9bc31e9e99fbf68220e37e5db9ad02f29656fe95b87797757765e3da7086654714c69944"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x69, 0x3, "d4a28e296bf7ad3b716ddb9780bb6bf052be651d433a0b3044a028830c8dd9d527676280c4b915b33533663df7ddd90af34b4582e6d0dd58562bc9c4a0625bd277daa1554cee3b559651b391b3b6b5752bf935d49f109e9e5070b9a9685866f58bb0838d4c"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x69, 0x80, [@preq={0x82, 0x30, {{0x0, 0x0, 0x1}, 0xf9, 0xf1, 0xeb5e, @device_b, 0x81, @void, 0x8, 0x7f, 0x2, [{{0x1}}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}]}}, @ibss={0x6, 0x2, 0xcd50}, @channel_switch={0x25, 0x3, {0x1, 0xb, 0x6}}, @prep={0x83, 0x1f, {{}, 0xf9, 0x7, @broadcast, 0x8, @void, 0x0, 0x1, @device_a, 0x1}}, @supported_rates={0x1, 0x4, [{0x18, 0x1}, {0x73513816d6fb75d4, 0x1}, {0x60, 0x1}, {0x4}]}, @dsss={0x3, 0x1, 0x95}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x40]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x2b, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xe4, 0x81, @broadcast, 0x5, @value, 0x8, 0x3, @device_b}}]}, @NL80211_ATTR_BEACON_TAIL={0x23, 0xf, [@challenge={0x10, 0x1, 0xa6}, @preq={0x82, 0x1a, {{0x0, 0x1, 0x1}, 0x8, 0xb, 0x40, @device_a, 0x4, @void, 0x1, 0x462f74ae}}]}]]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3m59.184943189s ago: executing program 0 (id=2261): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000380)="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", 0x3ac}, {&(0x7f0000002200)="3fa1bc40b06c4fd578cf02494ca7ff2e31895081", 0x14}], 0x2}}], 0x1, 0x1) 3m58.861700221s ago: executing program 0 (id=2264): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 3m58.509342067s ago: executing program 0 (id=2268): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1d) 3m43.407657688s ago: executing program 39 (id=2268): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1d) 3m33.871464937s ago: executing program 9 (id=2473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffff9}, 0x1c) write(r0, &(0x7f0000000140)="da", 0xffd1) 3m33.659369958s ago: executing program 9 (id=2476): r0 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000014}) 3m33.504270094s ago: executing program 9 (id=2477): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x38880, &(0x7f00000001c0), 0x1, 0x51a, &(0x7f0000000e40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m33.299397534s ago: executing program 9 (id=2478): syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000001d00)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f0000001d40)="$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") mount$overlay(0x0, &(0x7f000000c340)='./file0\x00', &(0x7f000000c380), 0x0, &(0x7f000000c3c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f000002bac0)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f000002bb00)={@id={0x2, 0x0, @d}}) openat(0xffffffffffffff9c, &(0x7f000000c440)='./file0\x00', 0x0, 0x41) 3m32.152713979s ago: executing program 9 (id=2497): r0 = io_uring_setup(0x2ac0, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0x0, 0x156}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(r0, r0, 0x0) 3m31.04302586s ago: executing program 9 (id=2493): r0 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000700)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000740)={0x0, 0x3938700}, r1, 0x1) 3m30.502982635s ago: executing program 40 (id=2493): r0 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000700)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000740)={0x0, 0x3938700}, r1, 0x1) 3m4.585133778s ago: executing program 3 (id=2694): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x1a) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './mnt/trace_marker', [], 0xa, "c2bc5dfb33c2199b3febec6003b6ac1d07388becfecc8163b0b3567218ca093586ce717188bef0bac91548ade822044f0cf1fc1a60b1a1672dde2205bb617df1f9"}, 0x57) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 3m4.275727499s ago: executing program 3 (id=2699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 3m3.934970224s ago: executing program 3 (id=2702): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000380)={0x0, 0x0, {0x3, 0x1, 0x0, 0x2, 0x8}, 0x3}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0xa8c01) write$sndseq(r1, &(0x7f0000000440)=[{0x1f, 0x0, 0x8, 0xfd, @tick=0x7ff, {0x0, 0xb4}, {}, @result}], 0x1c) 3m3.565007391s ago: executing program 3 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 3m3.251106492s ago: executing program 3 (id=2707): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3m2.722738515s ago: executing program 3 (id=2713): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net\x00') 3m2.110953617s ago: executing program 41 (id=2713): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net\x00') 1m28.972799903s ago: executing program 1 (id=3505): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = io_uring_setup(0x1054, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) mremap$dontunmap(&(0x7f00002da000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00001f4000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m27.254962165s ago: executing program 1 (id=3517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000002380)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000023c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000002400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) 1m27.060180515s ago: executing program 1 (id=3520): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m26.321259869s ago: executing program 1 (id=3526): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m25.92156225s ago: executing program 1 (id=3530): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 1m25.567554175s ago: executing program 1 (id=3532): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000000)={[{@test_dummy_encryption}, {@errors_continue}, {@nogrpid}, {@usrquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@user_xattr}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f00000029c0)='./bus\x00', 0x280d824, 0x0, 0x1, 0x0, &(0x7f0000002a00)) chdir(&(0x7f0000002a40)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a80)='.\x00', 0x101000, 0x108) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 1m25.074797734s ago: executing program 42 (id=3532): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000000)={[{@test_dummy_encryption}, {@errors_continue}, {@nogrpid}, {@usrquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@user_xattr}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f00000029c0)='./bus\x00', 0x280d824, 0x0, 0x1, 0x0, &(0x7f0000002a00)) chdir(&(0x7f0000002a40)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a80)='.\x00', 0x101000, 0x108) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 50.393779918s ago: executing program 5 (id=3753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.837872824s ago: executing program 5 (id=3762): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x88308411, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x128) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback, 0xffffffffffffffff, 0xc, 0x20}, 0x20) 47.624245606s ago: executing program 5 (id=3767): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r1, &(0x7f0000000380)=""/153, 0x99, 0x6fca) 46.974854702s ago: executing program 5 (id=3770): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 45.489798341s ago: executing program 5 (id=3777): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='dev/ttyUSB0\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0x2, 0xb, 0x0, 0x1}, 0x47, [0xa, 0x3, 0x393ceec7, 0x78b7, 0x1, 0x1, 0xcd6c, 0x5, 0xf, 0x7000, 0x10000, 0x8, 0xf, 0x81, 0x5, 0x0, 0x5, 0x8, 0x0, 0x8, 0x80000000, 0xb1c, 0x5, 0xfffffffc, 0x0, 0x6, 0x91, 0x800, 0x80000001, 0x80, 0x401, 0x80, 0x3, 0x3, 0x2, 0x6, 0xcbbd, 0x5, 0x7ff, 0x3, 0x5, 0x3, 0x3, 0x1, 0xc, 0x7, 0x10000, 0x5, 0x10001, 0x1000, 0x3, 0x4, 0x1, 0xdec, 0x7, 0x3c0, 0xfffffff6, 0x8, 0x7, 0x7, 0xdec, 0x9, 0x1, 0xfff], [0x9, 0x2, 0x1, 0x3, 0x7, 0x8, 0x1, 0x7, 0x2, 0x299, 0xb6f, 0x8, 0x200, 0xedc8, 0x3, 0xac, 0x5, 0x80000001, 0x100, 0xffffff01, 0x8, 0x5, 0x7, 0xa, 0x1, 0xff, 0x3, 0x7, 0xd4c, 0x23b, 0x9, 0x2, 0x200, 0x0, 0x3, 0x0, 0x5, 0xc69d, 0x101, 0x80000000, 0x7, 0xf6, 0x4, 0x64d, 0x1, 0x5, 0xfff, 0x9, 0xc2, 0x10001, 0x1032800, 0x5d, 0xb, 0x751, 0x3, 0xa, 0x3, 0xe0000000, 0x8, 0x3, 0x6, 0x4, 0x8001, 0x80000001], [0x3, 0xfffffff7, 0x3, 0x53, 0x8, 0x35, 0x3, 0x7, 0x1ff, 0x5, 0x0, 0xfff, 0x9, 0x8, 0x3, 0x0, 0x6, 0x4, 0xfffffffb, 0x7, 0xb, 0x2, 0x3, 0x0, 0x4, 0x8001, 0x80000000, 0x5, 0x1, 0x22bc48d0, 0x3, 0x6, 0x8000, 0x6, 0x1, 0x4, 0x7, 0x5, 0x7, 0x6, 0x2, 0x7, 0x40, 0x9, 0x3, 0xffffff81, 0x63, 0x9, 0x7, 0xe9b, 0x8, 0x2, 0x75, 0x9, 0xd, 0x8001, 0x7fff, 0x8, 0x7, 0x9, 0x18, 0x20000, 0x400, 0x9], [0x5, 0xff, 0x3, 0x0, 0x8001, 0x7, 0x1, 0x7, 0xe, 0x1, 0x81, 0x3, 0x3, 0x9, 0xffff, 0x2, 0x2b57, 0x6, 0xa5, 0x356d, 0x9, 0xb2a3, 0x8, 0x6, 0x4, 0xfffffffb, 0xfffffffc, 0x7, 0x80000000, 0x7fffffff, 0xffff0000, 0x1000, 0x40, 0x2, 0x7, 0xfffffffd, 0x1, 0xffffffff, 0xb1a3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x6, 0x401, 0x34f, 0x33a, 0xe7d, 0x78b6, 0x80000000, 0x7ff, 0x4, 0x3, 0x2, 0x8, 0x3, 0xffff, 0xff, 0x8, 0x1600, 0x6, 0x0, 0xa]}, 0x45c) 42.538330108s ago: executing program 5 (id=3806): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000ec0)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a6ea85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb0400000000000000839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119303ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfeb3278035912763401edd4efb5d5744d5afbdf65d4df37f718c36166d43d03ff9ec61a16b91d6f8beffc1de63496edcaa26d71829c92476f30ec4ca9c719c93611c4ba869dc044923fb8fa7e8e1e5fafc33a64deb307e3dc1e4d440118ba3d1cce4694a95eb9f1dae0f22a151f2de0a680c943f09928a20ffdea468d457a6206c13c5481a63101bdbc60f7a24b8e2c01e75b29466cace3e1347521995de18cac59392b0ab71285115528186e8f5d5ad0c4f46966515c2ba7f692aa6d4c87ebd93f4d286a32d3501545dde40f2be11891d5f0860d62320838ea95d35973e73466cc7f74ce1f06051de75abe44d6e0d72cb5d05a147c9f57bc37b1a5e03cd95194541636d2d9eb6e8d051d3a4d209b8db5c38999e10ab71309e005526beef8d81e385a00acfc9c6ce1ec7c4c36753c0622145e23ce7b8422d97248fb6ff22a0a589985c273c84ce7726eee34f32845e28433cf312f504734f0bada7d3d3043881b40c9117535d6bfd6dbd15095792ade05551a78f59", 0x633}], 0x2) 41.827239939s ago: executing program 43 (id=3806): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000ec0)="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", 0x633}], 0x2) 14.600708263s ago: executing program 8 (id=3927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x7, 0x4) 13.384140446s ago: executing program 8 (id=3933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 13.05043633s ago: executing program 8 (id=3937): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) flock(r0, 0x2) 12.740953461s ago: executing program 8 (id=3939): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 12.35173105s ago: executing program 8 (id=3941): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 12.042866031s ago: executing program 8 (id=3944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd020001dcdf2594a9092f08000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040808) 11.192696876s ago: executing program 7 (id=3952): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.929847944s ago: executing program 7 (id=3963): write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x3}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) 7.875677839s ago: executing program 2 (id=3964): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e28, 0x2000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 7.612468756s ago: executing program 7 (id=3965): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 7.499384977s ago: executing program 2 (id=3966): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000280)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f00000002c0)='1', 0x1) 6.827478995s ago: executing program 2 (id=3967): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x84, &(0x7f0000000f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.369775071s ago: executing program 7 (id=3971): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 3.932121675s ago: executing program 2 (id=3972): r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x100, 0x3, 0x277}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.911643338s ago: executing program 4 (id=3973): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0)={[{@user_xattr}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x57e, &(0x7f0000000d00)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000700000000000400030000000000100005000000000020"], 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.733857395s ago: executing program 7 (id=3975): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 3.617377737s ago: executing program 2 (id=3976): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.262314893s ago: executing program 2 (id=3978): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x2de9, r1}, 0x38) 3.101009669s ago: executing program 7 (id=3980): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.830066966s ago: executing program 6 (id=3981): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.608507459s ago: executing program 4 (id=3982): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xff, 0x7}, 0xff}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x4000110) 1.453476974s ago: executing program 6 (id=3983): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 1.219839738s ago: executing program 4 (id=3984): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x804818, &(0x7f0000001240)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f0000001340)="$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") r1 = open(&(0x7f00000018c0)='.\x00', 0x20000, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x101}}, 0x418080) 1.152743945s ago: executing program 6 (id=3985): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 704.54931ms ago: executing program 4 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 577.388703ms ago: executing program 6 (id=3987): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfd}, 0x0) 329.590837ms ago: executing program 4 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x34, r1, 0x1, 0x70bd24, 0x1, {0x25}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x22048040}, 0x10) 257.741364ms ago: executing program 6 (id=3989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x101100, 0x96) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x800c}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0xf048}, {0xffffffffffffffff, 0x4138}], 0x5, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 66.462414ms ago: executing program 4 (id=3990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close(0x3) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 0s ago: executing program 6 (id=3991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/171, 0xab}], 0x1, 0x400003, 0x1) kernel console output (not intermixed with test programs): 075][ T7678] BTRFS info (device loop6): setting nodatasum [ 233.921292][ T7678] BTRFS info (device loop6): force zlib compression, level 3 [ 233.946629][ T7678] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 233.974255][ T7693] loop3: detected capacity change from 0 to 1024 [ 233.979195][ T7678] BTRFS info (device loop6): use lzo compression, level 0 [ 234.027412][ T7678] BTRFS info (device loop6): turning on flush-on-commit [ 234.066469][ T7678] BTRFS info (device loop6): enabling auto defrag [ 234.103832][ T7678] BTRFS info (device loop6): max_inline at 4096 [ 234.121368][ T7678] BTRFS info (device loop6): using free space tree [ 234.147485][ T5321] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.191902][ T7693] hfsplus: xattr searching failed [ 234.233906][ T7704] hfsplus: xattr searching failed [ 234.241298][ T7704] hfsplus: xattr searching failed [ 234.309656][ T7678] BTRFS info (device loop6): enabling ssd optimizations [ 234.368956][ T5321] usb 5-1: Using ep0 maxpacket: 32 [ 234.376809][ T5321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.454557][ T5321] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 234.486005][ T5321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.515111][ T5321] usb 5-1: config 0 descriptor?? [ 234.531774][ T5321] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 234.571484][ T5321] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 234.585888][ T5503] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.846671][ T7725] loop3: detected capacity change from 0 to 2048 [ 234.939218][ T7725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.976264][ T7725] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.989276][ T4396] usb 5-1: USB disconnect, device number 11 [ 235.003691][ T4396] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 235.102118][ T7725] fs-verity: sha256 using implementation "sha256-avx2" [ 235.291426][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 235.858730][ T7745] netlink: 6664 bytes leftover after parsing attributes in process `syz.4.937'. [ 236.201360][ T7749] loop5: detected capacity change from 0 to 512 [ 236.414249][ T7749] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 236.447679][ T7749] System zones: 0-2, 18-18, 34-35 [ 236.505621][ T7749] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 236.597982][ T7749] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.837546][ T4345] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 237.060772][ T4345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 237.127292][ T4345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 237.201073][ T4345] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 237.231781][ T4345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.279686][ T7736] loop6: detected capacity change from 0 to 262144 [ 237.295067][ T7736] F2FS-fs (loop6): Invalid segment/section count (8388607 != 27 * 2) [ 237.304222][ T7736] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 237.313945][ T5432] EXT4-fs (loop5): unmounting filesystem. [ 237.323221][ T7736] F2FS-fs (loop6): invalid crc value [ 237.387056][ T7736] F2FS-fs (loop6): Found nat_bits in checkpoint [ 237.466191][ T7736] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 237.474624][ T7736] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 237.572333][ T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 237.769082][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.793697][ T26] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.814436][ T7787] IPVS: Scheduler module ip_vs_sip not found [ 237.834085][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.871793][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 237.897222][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 237.935931][ T26] usb 5-1: Product: syz [ 237.979216][ T26] usb 5-1: Manufacturer: syz [ 237.984860][ T26] usb 5-1: SerialNumber: syz [ 238.166194][ T7789] loop7: detected capacity change from 0 to 4096 [ 238.211386][ T7789] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 238.236133][ T26] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.331395][ T7789] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 238.346661][ T4345] pegasus: probe of 4-1:1.0 failed with error -71 [ 238.392339][ T7789] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 238.401568][ T4345] usb 4-1: USB disconnect, device number 14 [ 238.435189][ T7789] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 238.444360][ T7797] program syz.5.951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.541743][ T7798] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 238.835641][ T7804] loop6: detected capacity change from 0 to 4096 [ 238.902525][ T7810] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.526335][ T7830] loop5: detected capacity change from 0 to 1024 [ 239.603820][ T7830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.198703][ T3601] usb 5-1: USB disconnect, device number 12 [ 240.246508][ T3601] usblp0: removed [ 240.431644][ T7857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.767331][ T4460] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 240.967368][ T4460] usb 6-1: Using ep0 maxpacket: 16 [ 240.976162][ T4460] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.027962][ T4460] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.069529][ T4460] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.098876][ T7881] loop4: detected capacity change from 0 to 256 [ 241.126985][ T4460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.150005][ T4460] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 241.185426][ T4460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.227489][ T7881] syz.4.980: attempt to access beyond end of device [ 241.227489][ T7881] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 241.244443][ T4460] usb 6-1: config 0 descriptor?? [ 241.589172][ T7897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 241.682546][ T4460] input: HID 041e:2801 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:2801.000E/input/input23 [ 241.793274][ T4460] prodikeys 0003:041E:2801.000E: input,hidraw0: USB HID v0.00 Joystick [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 241.909081][ T4460] usb 6-1: USB disconnect, device number 8 [ 242.122819][ T7907] fido_id[7907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 242.179374][ T7915] loop7: detected capacity change from 0 to 1024 [ 242.216799][ T7915] EXT4-fs: Ignoring removed bh option [ 242.352616][ T7915] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 242.369413][ T7923] support for the xor transformation has been removed. [ 242.590832][ T6109] EXT4-fs (loop7): unmounting filesystem. [ 242.762162][ T5318] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 242.947180][ T3601] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 242.969030][ T5318] usb 5-1: Using ep0 maxpacket: 16 [ 242.986751][ T5318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.012299][ T7943] (syz.6.996,7943,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 243.027070][ T5318] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.050407][ T5318] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.082904][ T5318] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 243.119532][ T7912] loop3: detected capacity change from 0 to 40427 [ 243.142756][ T5318] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.150435][ T5318] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 243.157510][ T7912] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 243.168621][ T3601] usb 6-1: Using ep0 maxpacket: 8 [ 243.178941][ T3601] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 243.192346][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.209466][ T3601] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.221648][ T7912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.237852][ T7912] F2FS-fs (loop3): build fault injection attr: rate: 64, type: 0x3ffff [ 243.251103][ T3601] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.251477][ T5318] usb 5-1: config 0 descriptor?? [ 243.298815][ T7912] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x5 [ 243.313412][ T3601] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.339520][ T7912] F2FS-fs (loop3): invalid crc value [ 243.358603][ T3601] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.379068][ T7912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.430572][ T3601] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.477235][ T3601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.579801][ T7912] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 243.617424][ T7912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.709276][ T5318] logitech-djreceiver 0003:046D:C53A.000F: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 243.750071][ T3601] usb 6-1: usb_control_msg returned -32 [ 243.756268][ T3601] usbtmc 6-1:16.0: can't read capabilities [ 243.781037][ T7912] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 243.797432][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 243.809235][ T4284] CPU: 1 PID: 4284 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 243.817596][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.828699][ T4284] Workqueue: hci0 hci_rx_work [ 243.833909][ T4284] Call Trace: [ 243.837558][ T4284] [ 243.840828][ T4284] dump_stack_lvl+0x188/0x24e [ 243.846047][ T4284] ? show_regs_print_info+0x12/0x12 [ 243.851797][ T4284] ? load_image+0x410/0x410 [ 243.856799][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 243.860720][ T7912] overlayfs: upper fs does not support tmpfile. [ 243.862451][ T4284] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.875410][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 243.880610][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 243.886377][ T4284] kobject_add_internal+0x617/0xca0 [ 243.892147][ T4284] kobject_add+0x160/0x230 [ 243.897067][ T4284] ? kobject_init+0x1c0/0x1c0 [ 243.902265][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 243.908125][ T4284] ? klist_children_get+0x50/0x50 [ 243.913696][ T4284] ? get_device_parent+0x121/0x3e0 [ 243.919392][ T4284] device_add+0x470/0x1050 [ 243.924331][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 243.929818][ T4284] le_conn_complete_evt+0xf93/0x15c0 [ 243.935692][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 243.942615][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 243.948862][ T4284] ? mutex_unlock+0x10/0x10 [ 243.953870][ T4284] ? skb_pull_data+0xec/0x1f0 [ 243.959072][ T4284] hci_le_enh_conn_complete_evt+0x185/0x460 [ 243.965608][ T4284] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 243.972714][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 243.979424][ T4284] hci_event_packet+0x7b3/0x1290 [ 243.984902][ T4284] ? lock_chain_count+0x20/0x20 [ 243.990299][ T4284] ? bis_list+0x280/0x280 [ 243.995096][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 244.001634][ T4284] ? kcov_remote_start+0x50f/0x810 [ 244.007310][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 244.013076][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 244.018851][ T4284] hci_rx_work+0x3eb/0xd40 [ 244.023777][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 244.029190][ T4284] ? process_one_work+0x7b4/0x1160 [ 244.034851][ T4284] process_one_work+0x8ab/0x1160 [ 244.040344][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 244.046605][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 244.052176][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 244.058366][ T4284] ? wq_worker_running+0x97/0x190 [ 244.063946][ T4284] worker_thread+0xaf5/0x12a0 [ 244.069151][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 244.075690][ T4284] kthread+0x29d/0x330 [ 244.080216][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 244.085791][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 244.090874][ T4284] ret_from_fork+0x1f/0x30 [ 244.095800][ T4284] [ 244.104385][ T4284] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 244.119675][ T4284] Bluetooth: hci0: failed to register connection device [ 244.170911][ T5318] usb 5-1: USB disconnect, device number 13 [ 244.273056][ T4278] syz-executor: attempt to access beyond end of device [ 244.273056][ T4278] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 244.323605][ T4278] syz-executor: attempt to access beyond end of device [ 244.323605][ T4278] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 244.466845][ T7970] fido_id[7970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 244.581811][ T4359] kworker/u4:7: attempt to access beyond end of device [ 244.581811][ T4359] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 245.053455][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.229821][ T7975] loop6: detected capacity change from 0 to 32768 [ 245.254083][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.312459][ T7975] XFS (loop6): Mounting V5 Filesystem [ 245.440262][ T7975] XFS (loop6): Ending clean mount [ 245.491573][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.566817][ T5316] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 245.595121][ T5316] XFS (loop6): Unmount and run xfs_repair [ 245.609722][ T5316] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 245.632898][ T5316] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 245.699800][ T5316] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 245.714852][ T4396] usb 6-1: USB disconnect, device number 9 [ 245.730341][ T5316] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 245.790559][ T5316] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 245.805321][ T5316] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 245.816826][ T5316] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 245.826818][ T5316] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 245.836703][ T5316] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 245.848360][ T7975] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 245.903102][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.918166][ T7975] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 245.967664][ T7975] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 246.156364][ T5503] XFS (loop6): Unmounting Filesystem [ 246.473875][ T8013] ALSA: mixer_oss: invalid OSS volume 'AF_VSOCK' [ 246.554810][ T8015] loop4: detected capacity change from 0 to 256 [ 246.659532][ T8015] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 246.890884][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.924384][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.934257][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.944241][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.954998][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.964222][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.152799][ T8018] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.626323][ T8034] binder: 8033:8034 ioctl c0306201 200000001a80 returned -14 [ 247.850810][ T8055] loop4: detected capacity change from 0 to 16 [ 247.921934][ T8055] erofs: (device loop4): mounted with root inode @ nid 36. [ 247.971617][ T8018] chnl_net:caif_netlink_parms(): no params data found [ 248.399639][ T8077] loop5: detected capacity change from 0 to 1024 [ 248.580227][ T8079] hfsplus: bad catalog folder entry [ 248.654479][ T8084] loop4: detected capacity change from 0 to 1024 [ 248.751904][ T27] audit: type=1800 audit(1792744337.003:45): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1032" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 248.834788][ T4359] hfsplus: bad catalog folder entry [ 248.842405][ T4359] hfsplus: bad catalog file entry [ 248.862615][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.881196][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.924481][ T8018] device bridge_slave_0 entered promiscuous mode [ 248.972388][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.031266][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.072328][ T8018] device bridge_slave_1 entered promiscuous mode [ 249.080058][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 249.255572][ T31] device hsr_slave_0 left promiscuous mode [ 249.271304][ T31] device hsr_slave_1 left promiscuous mode [ 249.283878][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.294995][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.325841][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.342140][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.356686][ T31] device bridge_slave_1 left promiscuous mode [ 249.370935][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.395897][ T31] device bridge_slave_0 left promiscuous mode [ 249.424522][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.505069][ T31] device veth1_vlan left promiscuous mode [ 249.519673][ T31] device veth0_vlan left promiscuous mode [ 249.575678][ T8105] input: syz1 as /devices/virtual/input/input24 [ 249.597415][ T8105] input: failed to attach handler leds to device input24, error: -6 [ 249.796724][ T8111] loop6: detected capacity change from 0 to 128 [ 249.830416][ T8110] loop5: detected capacity change from 0 to 1024 [ 249.851856][ T8111] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 249.883112][ T8110] EXT4-fs: Ignoring removed bh option [ 249.990672][ T8113] loop7: detected capacity change from 0 to 2048 [ 250.027572][ T8110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 250.096186][ T4359] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 250.106424][ T8113] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 250.159295][ T8113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.359512][ T5432] EXT4-fs (loop5): unmounting filesystem. [ 251.150875][ T31] team0 (unregistering): Port device team_slave_1 removed [ 251.158517][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 251.214407][ T31] team0 (unregistering): Port device team_slave_0 removed [ 251.269294][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.325830][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.715154][ T31] bond0 (unregistering): Released all slaves [ 251.781498][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.850382][ T5321] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 251.866245][ T8127] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 251.898819][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.049863][ T8141] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1047'. [ 252.062216][ T8018] team0: Port device team_slave_0 added [ 252.119838][ T8018] team0: Port device team_slave_1 added [ 252.178547][ T8147] loop4: detected capacity change from 0 to 512 [ 252.228127][ T8147] EXT4-fs: Ignoring removed i_version option [ 252.255932][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.258117][ T8147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.297186][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.345469][ T5318] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 252.379323][ T8147] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1050: invalid indirect mapped block 4294967295 (level 1) [ 252.473592][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.497835][ T8147] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1050: invalid indirect mapped block 4294967295 (level 1) [ 252.539565][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.565814][ T8147] EXT4-fs (loop4): 2 truncates cleaned up [ 252.575591][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.610142][ T8147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.668276][ T8147] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1050: bg 0: block 5: invalid block bitmap [ 252.683583][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.845957][ T8164] loop7: detected capacity change from 0 to 512 [ 252.851449][ T8018] device hsr_slave_0 entered promiscuous mode [ 252.863483][ T8165] netlink: 656 bytes leftover after parsing attributes in process `syz.5.1055'. [ 252.913912][ T8018] device hsr_slave_1 entered promiscuous mode [ 252.930001][ T8164] EXT4-fs (loop7): invalid inodes per group: 462880 [ 252.930001][ T8164] [ 252.954918][ T5404] EXT4-fs (loop4): unmounting filesystem. [ 252.966741][ T8018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.997383][ T8018] Cannot create hsr debugfs directory [ 253.197471][ T8164] binder: 8162:8164 ioctl c0306201 200000000080 returned -14 [ 253.237329][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 253.552979][ T8185] tipc: Started in network mode [ 253.587239][ T8185] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 253.595379][ T8185] tipc: Enabled bearer , priority 0 [ 253.816060][ T8018] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 253.868142][ T8018] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 253.900247][ T8018] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 253.930923][ T8018] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 254.094244][ T8169] loop6: detected capacity change from 0 to 32768 [ 254.160439][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.186016][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.196863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.212038][ T8169] XFS (loop6): Mounting V5 Filesystem [ 254.221315][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.261201][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.322100][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.339523][ T8169] XFS (loop6): Ending clean mount [ 254.396052][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.404033][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.427859][ T8169] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 254.511929][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.545615][ T5503] XFS (loop6): Unmounting Filesystem [ 254.558649][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.578536][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.633875][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.641770][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.721349][ T5316] tipc: Node number set to 43690 [ 254.737035][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.779422][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.830904][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.861557][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.876749][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.937183][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1070'. [ 254.994198][ T8227] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 255.064508][ T8227] device bridge1 entered promiscuous mode [ 255.087625][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.127387][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.158156][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.185009][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.240794][ T8018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.283870][ T8018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.317649][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 255.352760][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.393985][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.464501][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.478882][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.506025][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.560929][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567968][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.585814][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.605635][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.676928][ T8243] loop6: detected capacity change from 0 to 512 [ 255.714768][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.748218][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.772213][ T8018] device veth0_vlan entered promiscuous mode [ 255.794882][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.815417][ T8243] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 255.859087][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.891572][ T8243] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1074: invalid indirect mapped block 256 (level 1) [ 255.949050][ T8018] device veth1_vlan entered promiscuous mode [ 256.019330][ T8243] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1074: invalid indirect mapped block 2683928664 (level 1) [ 256.055868][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.089202][ T8220] loop5: detected capacity change from 0 to 32768 [ 256.126514][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.129848][ T8243] EXT4-fs (loop6): 1 truncate cleaned up [ 256.167590][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.177269][ T8243] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 256.184625][ T8220] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.1069 (8220) [ 256.220750][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.256901][ T8018] device veth0_macvtap entered promiscuous mode [ 256.284916][ T8220] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 256.300774][ T8018] device veth1_macvtap entered promiscuous mode [ 256.309136][ T8243] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 256.329101][ T8257] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1078'. [ 256.335321][ T8220] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 256.358571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.397837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.417282][ T8220] BTRFS error (device loop5): superblock checksum mismatch [ 256.466999][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.482028][ T8220] BTRFS error (device loop5): open_ctree failed: -22 [ 256.498624][ T4268] udevd[4268]: incorrect btrfs checksum on /dev/loop5 [ 256.529947][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.575222][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.617176][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.649122][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.681697][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.717224][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.734435][ T4266] udevd[4266]: incorrect btrfs checksum on /dev/loop5 [ 256.760107][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.792423][ T5503] EXT4-fs (loop6): unmounting filesystem. [ 256.793709][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.859101][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.891774][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.963146][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.005828][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.047238][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.100179][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.139681][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.171639][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.211222][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.251325][ T8256] loop7: detected capacity change from 0 to 32768 [ 257.258614][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.299432][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.319599][ T8267] netlink: 'syz.6.1080': attribute type 1 has an invalid length. [ 257.345250][ T8256] JBD2: Ignoring recovery information on journal [ 257.351576][ T8267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.360307][ T8267] IPv6: NLM_F_CREATE should be set when creating new route [ 257.369132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.407699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.479290][ T8018] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.499530][ T8018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.523497][ T8018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.557318][ T8018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.571058][ T8256] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 257.637735][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 257.740258][ T8284] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 257.748727][ T27] audit: type=1800 audit(1792744345.993:46): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1077" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 257.839992][ T5557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.878556][ T5557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.895210][ T6109] ocfs2: Unmounting device (7,7) on (node local) [ 257.908233][ T5557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.957458][ T5321] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.003931][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.033682][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.071278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.089088][ T8292] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 258.181144][ T5321] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 258.207139][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.241332][ T5321] usb 5-1: Product: syz [ 258.246007][ T5321] usb 5-1: Manufacturer: syz [ 258.281495][ T5321] usb 5-1: SerialNumber: syz [ 258.316530][ T5321] usb 5-1: config 0 descriptor?? [ 258.339787][ T5321] hub 5-1:0.0: bad descriptor, ignoring hub [ 258.376803][ T5321] hub: probe of 5-1:0.0 failed with error -5 [ 258.457284][ T5316] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 258.550018][ T5321] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 258.595026][ T5321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.624376][ T8300] loop8: detected capacity change from 0 to 8192 [ 258.636425][ T5321] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 258.658914][ T5316] usb 7-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 258.680745][ T4457] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 258.681246][ T5316] usb 7-1: config 0 has no interfaces? [ 258.717239][ T5321] usb 5-1: media controller created [ 258.751981][ T8286] dib0700: tx buffer length is larger than 4. Not supported. [ 258.762386][ T5316] usb 7-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 258.817062][ T5316] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 258.826107][ T5316] usb 7-1: Product: syz [ 258.840596][ T5321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.877782][ T5316] usb 7-1: config 0 descriptor?? [ 258.900581][ T4457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.940951][ T4457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.958348][ T5321] DVB: Unable to find symbol dib7000p_attach() [ 258.979231][ T4457] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.995993][ T5321] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 259.005534][ T4457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.016026][ T4457] usb 6-1: config 0 descriptor?? [ 259.053937][ T8313] netlink: 'syz.8.1091': attribute type 1 has an invalid length. [ 259.062911][ T5321] rc_core: Couldn't load IR keymap rc-dib0700-rc5 [ 259.082986][ T5321] Registered IR keymap rc-empty [ 259.113842][ T5321] dvb-usb: could not initialize remote control. [ 259.133749][ T5321] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 259.207501][ T5321] usb 5-1: USB disconnect, device number 14 [ 259.274317][ T5316] usb 7-1: USB disconnect, device number 9 [ 259.414985][ T5321] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 259.513690][ T4457] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 259.579757][ T4457] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input26 [ 259.757900][ T4457] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 259.836507][ T4457] usb 6-1: USB disconnect, device number 10 [ 260.180751][ T8326] fido_id[8326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 260.240582][ T8331] device syzkaller1 entered promiscuous mode [ 260.657388][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 260.724773][ T8318] loop7: detected capacity change from 0 to 40427 [ 260.791553][ T8318] F2FS-fs (loop7): invalid crc value [ 260.840211][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1102'. [ 260.858177][ T8318] F2FS-fs (loop7): Found nat_bits in checkpoint [ 260.869688][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.901500][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.948298][ T7] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 260.997217][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.042985][ T8318] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 261.057483][ T7] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 261.104858][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.118070][ T8318] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 261.171548][ T7] opticon 7-1:1.0: opticon converter detected [ 261.209864][ T7] usb 7-1: opticon converter now attached to ttyUSB0 [ 261.285053][ T27] audit: type=1800 audit(1792744349.533:47): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1107" name="attr_allow_any_host" dev="configfs" ino=48374 res=0 errno=0 [ 261.447955][ T7] usb 7-1: USB disconnect, device number 10 [ 261.473325][ T6109] syz-executor: attempt to access beyond end of device [ 261.473325][ T6109] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.493397][ T7] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 261.522670][ T7] opticon 7-1:1.0: device disconnected [ 261.677491][ T5316] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 261.827415][ T4457] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 261.870108][ T5316] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 261.893975][ T5316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.027216][ T4457] usb 5-1: Using ep0 maxpacket: 8 [ 262.034896][ T4457] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 262.055766][ T4457] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.074262][ T4457] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.085551][ T4457] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.108406][ T4457] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.138849][ T4457] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.162626][ T4457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.352987][ T8392] loop8: detected capacity change from 0 to 7 [ 262.391470][ T8392] Dev loop8: unable to read RDB block 7 [ 262.403026][ T8392] loop8: AHDI p1 p2 [ 262.417655][ T8392] loop8: partition table partially beyond EOD, truncated [ 262.432948][ T4457] usb 5-1: usb_control_msg returned -32 [ 262.447875][ T8392] loop8: p1 start 1702000233 is beyond EOD, truncated [ 262.455482][ T4457] usbtmc 5-1:16.0: can't read capabilities [ 262.542970][ T5316] usb 6-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 262.742384][ C0] usb 6-1: NFC: Urb failure (status -71) [ 262.752905][ T5316] usb 6-1: NFC: Error on setting MAX_RETRIES config [ 262.760562][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 262.768080][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 262.785400][ T5316] pn533_usb: probe of 6-1:1.0 failed with error -71 [ 262.799691][ T5316] usb 6-1: USB disconnect, device number 11 [ 262.826431][ T8404] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 263.034280][ T5316] usb 5-1: USB disconnect, device number 15 [ 263.697297][ T4457] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 263.749335][ T8411] loop6: detected capacity change from 0 to 40427 [ 263.775240][ T8411] F2FS-fs (loop6): invalid crc value [ 263.809254][ T8411] F2FS-fs (loop6): Found nat_bits in checkpoint [ 263.905843][ T4457] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.926733][ T4457] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.968826][ T8411] F2FS-fs (loop6): Start checkpoint disabled! [ 263.984037][ T4457] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.012819][ T4457] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.043104][ T4457] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.062368][ T4457] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.072546][ T8411] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 264.087182][ T4457] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.106805][ T4457] usb 6-1: Product: syz [ 264.116940][ T4457] usb 6-1: Manufacturer: syz [ 264.146671][ T4457] cdc_wdm 6-1:1.0: skipping garbage [ 264.174820][ T4457] cdc_wdm 6-1:1.0: skipping garbage [ 264.214657][ T4457] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 264.238205][ T4457] cdc_wdm 6-1:1.0: Unknown control protocol [ 264.388220][ T11] kworker/u4:1: attempt to access beyond end of device [ 264.388220][ T11] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 264.433382][ T8445] loop4: detected capacity change from 0 to 1024 [ 264.567020][ T8445] hfsplus: xattr search failed [ 264.807712][ T4457] usb 6-1: USB disconnect, device number 12 [ 264.952847][ T8454] FAULT_INJECTION: forcing a failure. [ 264.952847][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 265.002857][ T8454] CPU: 0 PID: 8454 Comm: syz.8.1128 Not tainted syzkaller #0 [ 265.011052][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 265.022157][ T8454] Call Trace: [ 265.025820][ T8454] [ 265.029072][ T8454] dump_stack_lvl+0x188/0x24e [ 265.034274][ T8454] ? show_regs_print_info+0x12/0x12 [ 265.040036][ T8454] ? load_image+0x410/0x410 [ 265.045078][ T8454] ? __might_sleep+0xd0/0xd0 [ 265.050188][ T8454] ? __lock_acquire+0x7ea0/0x7ea0 [ 265.055771][ T8454] should_fail_ex+0x390/0x4c0 [ 265.060976][ T8454] should_failslab+0x5/0x20 [ 265.066022][ T8454] slab_pre_alloc_hook+0x59/0x300 [ 265.071636][ T8454] kmem_cache_alloc_lru+0x49/0x2e0 [ 265.077305][ T8454] ? sock_alloc_inode+0x24/0xc0 [ 265.082692][ T8454] sock_alloc_inode+0x24/0xc0 [ 265.087901][ T8454] ? sockfs_init_fs_context+0xa0/0xa0 [ 265.093877][ T8454] new_inode_pseudo+0x5f/0x1c0 [ 265.099177][ T8454] __sock_create+0x129/0x940 [ 265.104277][ T8454] ? memset+0x1e/0x40 [ 265.108706][ T8454] smc_create+0x186/0x290 [ 265.113535][ T8454] __sock_create+0x49a/0x940 [ 265.118638][ T8454] __sys_socket+0xc4/0x190 [ 265.123549][ T8454] __x64_sys_socket+0x76/0x80 [ 265.128753][ T8454] do_syscall_64+0x4c/0xa0 [ 265.133649][ T8454] ? clear_bhb_loop+0x60/0xb0 [ 265.138833][ T8454] ? clear_bhb_loop+0x60/0xb0 [ 265.144027][ T8454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.150566][ T8454] RIP: 0033:0x7f450e99f559 [ 265.155486][ T8454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.177094][ T8454] RSP: 002b:00007f450f92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 265.186381][ T8454] RAX: ffffffffffffffda RBX: 00007f450ec25fa0 RCX: 00007f450e99f559 [ 265.195199][ T8454] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 265.204014][ T8454] RBP: 00007f450ea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 265.212863][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.221673][ T8454] R13: 00007f450ec26038 R14: 00007f450ec25fa0 R15: 00007fff8ccf18f8 [ 265.230514][ T8454] [ 265.233881][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.313025][ T8454] socket: no more sockets [ 265.397689][ T5746] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.450670][ T8464] FAULT_INJECTION: forcing a failure. [ 265.450670][ T8464] name failslab, interval 1, probability 0, space 0, times 0 [ 265.505959][ T8464] CPU: 0 PID: 8464 Comm: syz.8.1130 Not tainted syzkaller #0 [ 265.514149][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 265.525253][ T8464] Call Trace: [ 265.528901][ T8464] [ 265.532165][ T8464] dump_stack_lvl+0x188/0x24e [ 265.537396][ T8464] ? show_regs_print_info+0x12/0x12 [ 265.543161][ T8464] ? load_image+0x410/0x410 [ 265.548191][ T8464] ? __might_sleep+0xd0/0xd0 [ 265.553287][ T8464] ? __lock_acquire+0x7ea0/0x7ea0 [ 265.558874][ T8464] should_fail_ex+0x390/0x4c0 [ 265.564085][ T8464] should_failslab+0x5/0x20 [ 265.569098][ T8464] slab_pre_alloc_hook+0x59/0x300 [ 265.574685][ T8464] kmem_cache_alloc_lru+0x49/0x2e0 [ 265.580363][ T8464] ? hugetlbfs_alloc_inode+0xef/0x140 [ 265.586347][ T8464] hugetlbfs_alloc_inode+0xef/0x140 [ 265.592110][ T8464] ? hugetlbfs_fill_super+0x910/0x910 [ 265.598064][ T8464] new_inode_pseudo+0x5f/0x1c0 [ 265.603348][ T8464] new_inode+0x25/0x1d0 [ 265.607952][ T8464] ? resv_map_alloc+0x1c0/0x2b0 [ 265.613343][ T8464] hugetlbfs_get_inode+0x78/0x510 [ 265.618901][ T8464] ? _raw_spin_unlock+0x24/0x40 [ 265.624266][ T8464] ? alloc_fd+0x590/0x640 [ 265.629074][ T8464] hugetlb_file_setup+0x211/0x610 [ 265.634635][ T8464] __se_sys_memfd_create+0x20a/0x340 [ 265.640483][ T8464] do_syscall_64+0x4c/0xa0 [ 265.645389][ T8464] ? clear_bhb_loop+0x60/0xb0 [ 265.650571][ T8464] ? clear_bhb_loop+0x60/0xb0 [ 265.655733][ T8464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.662263][ T8464] RIP: 0033:0x7f450e99f559 [ 265.667155][ T8464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.688847][ T8464] RSP: 002b:00007f450f92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 265.698122][ T8464] RAX: ffffffffffffffda RBX: 00007f450ec25fa0 RCX: 00007f450e99f559 [ 265.706905][ T8464] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000040 [ 265.715686][ T8464] RBP: 00007f450ea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 265.724470][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.733251][ T8464] R13: 00007f450ec26038 R14: 00007f450ec25fa0 R15: 00007fff8ccf18f8 [ 265.742059][ T8464] [ 265.745505][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.798889][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 265.816200][ T5746] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 265.863285][ T5746] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.907140][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.916193][ T5746] usb 5-1: Product: syz [ 265.943879][ T5746] usb 5-1: Manufacturer: syz [ 265.963124][ T5746] usb 5-1: SerialNumber: syz [ 265.982879][ T5746] usb 5-1: config 0 descriptor?? [ 266.001065][ T8451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.013174][ T5746] hub 5-1:0.0: bad descriptor, ignoring hub [ 266.030003][ T5746] hub: probe of 5-1:0.0 failed with error -5 [ 266.135632][ T8480] gfs2: gfs2 mount does not exist [ 266.256353][ T8482] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.597309][ T4457] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 266.727413][ T8451] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 266.781953][ T8507] FAULT_INJECTION: forcing a failure. [ 266.781953][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 266.796156][ T8507] CPU: 1 PID: 8507 Comm: syz.7.1143 Not tainted syzkaller #0 [ 266.800174][ T4457] usb 6-1: Using ep0 maxpacket: 8 [ 266.804286][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 266.804303][ T8507] Call Trace: [ 266.804310][ T8507] [ 266.804320][ T8507] dump_stack_lvl+0x188/0x24e [ 266.823930][ T4457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.824592][ T8507] ? show_regs_print_info+0x12/0x12 [ 266.834251][ T4457] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.844930][ T8507] ? load_image+0x410/0x410 [ 266.844972][ T8507] ? __might_sleep+0xd0/0xd0 [ 266.844996][ T8507] ? __lock_acquire+0x7ea0/0x7ea0 [ 266.845025][ T8507] ? futex_wake+0x426/0x4f0 [ 266.845054][ T8507] should_fail_ex+0x390/0x4c0 [ 266.886472][ T8507] should_failslab+0x5/0x20 [ 266.891457][ T8507] slab_pre_alloc_hook+0x59/0x300 [ 266.897029][ T8507] kmem_cache_alloc_lru+0x49/0x2e0 [ 266.902694][ T8507] ? __d_alloc+0x2e/0x6e0 [ 266.907494][ T8507] __d_alloc+0x2e/0x6e0 [ 266.912127][ T8507] ? d_alloc_pseudo+0xe/0x70 [ 266.917198][ T8507] d_alloc_pseudo+0x19/0x70 [ 266.922179][ T8507] alloc_file_pseudo+0xe0/0x200 [ 266.927563][ T8507] ? alloc_empty_file_noaccount+0x80/0x80 [ 266.933873][ T8507] ? do_raw_spin_unlock+0x11d/0x230 [ 266.939633][ T8507] ? _raw_spin_unlock+0x24/0x40 [ 266.944998][ T8507] anon_inode_getfile+0xc1/0x1a0 [ 266.950455][ T8507] do_epoll_create+0x27d/0x340 [ 266.955720][ T8507] __x64_sys_epoll_create1+0x33/0x40 [ 266.961565][ T8507] do_syscall_64+0x4c/0xa0 [ 266.966469][ T8507] ? clear_bhb_loop+0x60/0xb0 [ 266.971656][ T8507] ? clear_bhb_loop+0x60/0xb0 [ 266.976842][ T8507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.983380][ T8507] RIP: 0033:0x7f2f2e59f559 [ 266.988260][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.009854][ T8507] RSP: 002b:00007f2f2f382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 267.019133][ T8507] RAX: ffffffffffffffda RBX: 00007f2f2e825fa0 RCX: 00007f2f2e59f559 [ 267.027922][ T8507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.036707][ T8507] RBP: 00007f2f2e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 267.045498][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.054288][ T8507] R13: 00007f2f2e826038 R14: 00007f2f2e825fa0 R15: 00007ffe1a56ed48 [ 267.063092][ T8507] [ 267.073100][ T4457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.086695][ T4457] usb 6-1: config 0 descriptor?? [ 267.180345][ T8451] usb 5-1: device firmware changed [ 267.200001][ T5746] usb 5-1: USB disconnect, device number 16 [ 267.265849][ T8510] loop7: detected capacity change from 0 to 128 [ 267.309859][ T4457] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 267.355869][ T8510] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 267.377310][ T5746] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 267.386501][ T8510] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.536416][ T4457] usb 6-1: USB disconnect, device number 13 [ 267.567355][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 267.576622][ T5746] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 267.613924][ T6109] EXT4-fs (loop7): unmounting filesystem. [ 267.621051][ T5746] usb 5-1: string descriptor 0 read error: -22 [ 267.632381][ T5746] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.643151][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 267.663651][ T5746] usb 5-1: config 0 descriptor?? [ 267.671591][ T8489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.689012][ T5746] hub 5-1:0.0: bad descriptor, ignoring hub [ 267.705900][ T5746] hub: probe of 5-1:0.0 failed with error -5 [ 268.078527][ T4457] usb 5-1: USB disconnect, device number 17 [ 268.140256][ T8531] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 564.451578][T17104] printk: console [ttyS0] enabled [ 564.566204][T15766] ocfs2: Unmounting device (7,2) on (node local) [ 564.734268][T17108] FAULT_INJECTION: forcing a failure. [ 564.734268][T17108] name failslab, interval 1, probability 0, space 0, times 0 [ 564.780985][T17108] CPU: 0 PID: 17108 Comm: syz.2.3639 Not tainted syzkaller #0 [ 564.788542][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 564.798647][T17108] Call Trace: [ 564.801966][T17108] [ 564.804977][T17108] dump_stack_lvl+0x188/0x24e [ 564.809712][T17108] ? show_regs_print_info+0x12/0x12 [ 564.814984][T17108] ? load_image+0x410/0x410 [ 564.819548][T17108] ? __might_sleep+0xd0/0xd0 [ 564.824202][T17108] ? __lock_acquire+0x7ea0/0x7ea0 [ 564.829285][T17108] should_fail_ex+0x390/0x4c0 [ 564.834029][T17108] should_failslab+0x5/0x20 [ 564.838581][T17108] slab_pre_alloc_hook+0x59/0x300 [ 564.843668][T17108] ? subdev_open+0x88/0x3e0 [ 564.848319][T17108] __kmem_cache_alloc_node+0x4f/0x270 [ 564.853792][T17108] ? subdev_open+0x88/0x3e0 [ 564.858356][T17108] kmalloc_trace+0x26/0xe0 [ 564.862828][T17108] subdev_open+0x88/0x3e0 [ 564.867224][T17108] v4l2_open+0x201/0x340 [ 564.871618][T17108] chrdev_open+0x585/0x5f0 [ 564.876088][T17108] ? cd_forget+0x160/0x160 [ 564.880555][T17108] ? fsnotify_perm+0x39b/0x550 [ 564.885364][T17108] ? cd_forget+0x160/0x160 [ 564.889831][T17108] do_dentry_open+0x7dd/0x10b0 [ 564.894650][T17108] path_openat+0x2674/0x2f10 [ 564.899301][T17108] ? kasan_set_track+0x60/0x70 [ 564.904100][T17108] ? verify_lock_unused+0x140/0x140 [ 564.909337][T17108] ? do_sys_openat2+0xdd/0x4f0 [ 564.914149][T17108] ? do_filp_open+0x420/0x420 [ 564.918864][T17108] do_filp_open+0x1ee/0x420 [ 564.923398][T17108] ? vfs_tmpfile+0x470/0x470 [ 564.928046][T17108] ? _raw_spin_unlock+0x24/0x40 [ 564.932942][T17108] ? alloc_fd+0x590/0x640 [ 564.937379][T17108] do_sys_openat2+0x14b/0x4f0 [ 564.942096][T17108] ? do_sys_open+0xe0/0xe0 [ 564.946572][T17108] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 564.952598][T17108] ? lock_chain_count+0x20/0x20 [ 564.957492][T17108] __x64_sys_openat+0x135/0x160 [ 564.962406][T17108] do_syscall_64+0x4c/0xa0 [ 564.966848][T17108] ? clear_bhb_loop+0x60/0xb0 [ 564.971549][T17108] ? clear_bhb_loop+0x60/0xb0 [ 564.976256][T17108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.982187][T17108] RIP: 0033:0x7f049295fd8e [ 564.986631][T17108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.006260][T17108] RSP: 002b:00007f04937a9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.014702][T17108] RAX: ffffffffffffffda RBX: 00007f04937aa6c0 RCX: 00007f049295fd8e [ 565.022705][T17108] RDX: 0000000000100082 RSI: 00007f04937a9c00 RDI: ffffffffffffff9c [ 565.030695][T17108] RBP: 00007f04937a9c00 R08: 0000000000000000 R09: 0000000000000000 [ 565.038701][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 565.046695][T17108] R13: 00007f0492c26038 R14: 00007f0492c25fa0 R15: 00007ffc7a1b0458 [ 565.054704][T17108] [ 565.074962][ T3601] usb 6-1: USB disconnect, device number 42 [ 565.620744][ T3601] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 565.813065][ T3601] usb 5-1: unable to get BOS descriptor or descriptor too short [ 565.832492][ T3601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.860663][ T3601] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.887189][ T3601] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 565.920761][ T3601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.939542][ T3601] usb 5-1: Product: syz [ 565.949665][ T3601] usb 5-1: Manufacturer: syz [ 565.959796][ T3601] usb 5-1: SerialNumber: syz [ 565.983243][ T3601] usb 5-1: selecting invalid altsetting 1 [ 565.999667][ T3601] usb 5-1: unit 6 not found! [ 566.120643][ T14] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 566.311183][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 566.318773][ T14] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 566.359021][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 566.400963][ T14] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 566.434923][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 566.477180][ T14] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 566.510927][ T14] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.561197][ T14] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 566.590700][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.789121][ T3601] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 566.854974][ T14] usb 7-1: GET_CAPABILITIES returned 0 [ 566.860993][ T14] usbtmc 7-1:16.0: can't read capabilities [ 566.932072][ T3601] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 566.979917][ T3601] usb 5-1: USB disconnect, device number 31 [ 567.082507][ T14] usb 7-1: USB disconnect, device number 39 [ 567.222330][ T4422] udevd[4422]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.430455][T17187] loop4: detected capacity change from 0 to 7 [ 567.477569][T17187] Dev loop4: unable to read RDB block 7 [ 567.497894][T17187] loop4: unable to read partition table [ 567.516055][T17190] loop8: detected capacity change from 0 to 1024 [ 567.523026][T17187] loop4: partition table beyond EOD, truncated [ 567.544034][T17190] EXT4-fs: Ignoring removed bh option [ 567.550932][T17187] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.575587][T17194] Invalid argument reading file caps for ./file0 [ 567.667154][T17190] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 567.966350][T16670] EXT4-fs (loop8): unmounting filesystem. [ 568.900870][ T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 568.943167][T17241] FAULT_INJECTION: forcing a failure. [ 568.943167][T17241] name failslab, interval 1, probability 0, space 0, times 0 [ 568.993334][T17241] CPU: 0 PID: 17241 Comm: syz.4.3673 Not tainted syzkaller #0 [ 569.000914][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 569.011021][T17241] Call Trace: [ 569.014341][T17241] [ 569.017316][T17241] dump_stack_lvl+0x188/0x24e [ 569.022061][T17241] ? show_regs_print_info+0x12/0x12 [ 569.027309][T17241] ? load_image+0x410/0x410 [ 569.031885][T17241] ? __might_sleep+0xd0/0xd0 [ 569.036522][T17241] ? __lock_acquire+0x7ea0/0x7ea0 [ 569.041632][T17241] should_fail_ex+0x390/0x4c0 [ 569.046392][T17241] should_failslab+0x5/0x20 [ 569.050963][T17241] slab_pre_alloc_hook+0x59/0x300 [ 569.056051][T17241] ? io_ring_ctx_alloc+0x279/0xc85 [ 569.061245][T17241] __kmem_cache_alloc_node+0x4f/0x270 [ 569.066666][T17241] ? io_ring_ctx_alloc+0x279/0xc85 [ 569.071832][T17241] kmalloc_trace+0x26/0xe0 [ 569.076291][T17241] io_ring_ctx_alloc+0x279/0xc85 [ 569.081287][T17241] io_uring_create+0x29f/0xd6c [ 569.086131][T17241] ? __might_fault+0xc2/0x120 [ 569.090847][T17241] ? __might_fault+0xa6/0x120 [ 569.095588][T17241] __x64_sys_io_uring_setup+0x21b/0x230 [ 569.101253][T17241] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 569.106949][T17241] ? lockdep_hardirqs_on+0x94/0x140 [ 569.112206][T17241] do_syscall_64+0x4c/0xa0 [ 569.116653][T17241] ? clear_bhb_loop+0x60/0xb0 [ 569.121361][T17241] ? clear_bhb_loop+0x60/0xb0 [ 569.126065][T17241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.131999][T17241] RIP: 0033:0x7f3a3b59f559 [ 569.136442][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.156077][T17241] RSP: 002b:00007f3a3c412fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 569.164536][T17241] RAX: ffffffffffffffda RBX: 0000200000000380 RCX: 00007f3a3b59f559 [ 569.172551][T17241] RDX: 0000200000000440 RSI: 0000200000000380 RDI: 0000000000000020 [ 569.180584][T17241] RBP: 00007f3a3b636b20 R08: 0000000000000000 R09: 0000000000000000 [ 569.188609][T17241] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 569.196613][T17241] R13: 0000200000000480 R14: 0000200000000400 R15: 00007ffcb8e386b8 [ 569.204630][T17241] [ 569.253543][T17244] loop6: detected capacity change from 0 to 512 [ 569.281631][T17244] EXT4-fs: Ignoring removed nobh option [ 569.310832][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 569.317820][ T14] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 569.329365][T17244] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 569.359182][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.370077][T17244] EXT4-fs (loop6): 1 truncate cleaned up [ 569.387786][T17244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 569.415235][ T14] usb 3-1: config 0 descriptor?? [ 569.422642][T17246] loop8: detected capacity change from 0 to 4096 [ 569.468275][ T14] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 569.515284][T17244] fscrypt (loop6, inode 18): Can't use IV_INO_LBLK_32 policy on filesystem 'loop6' because it doesn't have stable inode numbers [ 569.601163][T17253] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.628168][ T14] usb 3-1: Detected FT232B [ 569.785715][ T5503] EXT4-fs (loop6): unmounting filesystem. [ 569.837280][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 569.854728][ T14] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 570.059114][ T7] usb 3-1: USB disconnect, device number 28 [ 570.078333][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 570.118818][ T7] ftdi_sio 3-1:0.0: device disconnected [ 570.338443][T17266] loop6: detected capacity change from 0 to 4096 [ 570.444945][T17266] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 570.484256][T17272] loop4: detected capacity change from 0 to 1024 [ 570.507240][T17272] EXT4-fs: Ignoring removed bh option [ 570.533467][T17272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.669726][ T5503] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 570.678361][ T7] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 570.687057][T17272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 570.773358][ T27] kauditd_printk_skb: 83 callbacks suppressed [ 570.773375][ T27] audit: type=1326 audit(37770385.073:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3b59f559 code=0x7ffc0000 [ 570.912643][ T7] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.940740][ T27] audit: type=1326 audit(37770385.113:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3a3b59f559 code=0x7ffc0000 [ 570.944162][ T7] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.045446][ T27] audit: type=1326 audit(37770385.143:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3b59f559 code=0x7ffc0000 [ 571.090279][ T7] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.128770][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.163502][T13908] EXT4-fs (loop4): unmounting filesystem. [ 571.386832][ T7] usb 9-1: GET_CAPABILITIES returned 0 [ 571.392815][ T7] usbtmc 9-1:16.0: can't read capabilities [ 571.440612][ T14] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 571.627105][ T3601] usb 9-1: USB disconnect, device number 4 [ 571.642467][ T14] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 8 [ 571.664210][ T14] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 571.703413][ T14] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 571.737543][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.774284][T17288] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 572.081142][T17295] loop4: detected capacity change from 0 to 32768 [ 572.114087][T17295] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop4 scanned by syz.4.3686 (17295) [ 572.193164][T17295] BTRFS info (device loop4): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 572.205466][ T14] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 572.223000][ T14] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input77 [ 572.249501][T17295] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 572.290961][ T14] usb 6-1: USB disconnect, device number 43 [ 572.296966][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 572.315551][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'. [ 572.328236][T17295] BTRFS info (device loop4): using free space tree [ 572.402949][T17317] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3691'. [ 572.530713][T17295] BTRFS info (device loop4): enabling ssd optimizations [ 572.663435][ T27] audit: type=1800 audit(37770386.963:721): pid=17295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3686" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 573.041848][ T27] audit: type=1326 audit(37770387.343:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17341 comm="syz.5.3693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd9f559 code=0x7ffc0000 [ 573.135262][ T27] audit: type=1326 audit(37770387.343:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17341 comm="syz.5.3693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd9f559 code=0x7ffc0000 [ 573.190186][T13908] BTRFS info (device loop4): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 573.253494][ T27] audit: type=1326 audit(37770387.343:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17341 comm="syz.5.3693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd9f559 code=0x7ffc0000 [ 573.327241][ T4422] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 10 /dev/loop4 scanned by udevd (4422) [ 573.388680][ T27] audit: type=1326 audit(37770387.373:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17341 comm="syz.5.3693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f525cd9f559 code=0x7ffc0000 [ 573.464863][T17345] loop2: detected capacity change from 0 to 8192 [ 573.542699][T17345] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 573.572137][ T27] audit: type=1326 audit(37770387.503:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17341 comm="syz.5.3693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd9f559 code=0x7ffc0000 [ 573.582383][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3699'. [ 573.615993][T17345] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 573.660318][T17345] REISERFS (device loop2): using ordered data mode [ 573.664062][ T27] audit: type=1326 audit(37770387.503:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17341 comm="syz.5.3693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f525cd9f2c2 code=0x7ffc0000 [ 573.710590][T17345] reiserfs: using flush barriers [ 573.753089][T17345] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 573.832823][T17345] REISERFS (device loop2): checking transaction log (loop2) [ 574.169680][T17345] REISERFS (device loop2): Using tea hash to sort names [ 574.191005][T17345] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 574.691000][ T14] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 574.883287][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 574.908400][ T14] usb 5-1: not running at top speed; connect to a high speed hub [ 574.938580][ T14] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 574.969378][ T7] smpboot: CPU 1 is now offline [ 574.990745][ T4464] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 575.039034][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 575.060235][T17388] x86: Booting SMP configuration: [ 575.088407][T17388] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 575.114153][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.181821][ T14] usb 5-1: Product: syz [ 575.192855][ T4464] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 8 [ 575.204440][T17393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3717'. [ 575.224410][ T14] usb 5-1: Manufacturer: syz [ 575.231299][ T4464] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 575.252970][ T14] usb 5-1: SerialNumber: syz [ 575.278170][ T4464] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 575.312155][ T4464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.343450][T17380] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 575.485943][ T14] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 575.694447][ T14] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 575.721044][ T14] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 575.780847][ T4464] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 575.813372][ T4464] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input78 [ 575.928304][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 575.936736][ T4464] usb 7-1: USB disconnect, device number 40 [ 576.097277][ T14] usb 5-1: invalid uac2 rates [ 576.110828][ T14] usb 5-1: invalid uac2 rates [ 576.121150][ T14] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 576.151328][ T14] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 576.297161][ T14] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 576.432444][ T14] usb 5-1: USB disconnect, device number 32 [ 576.723111][ T4422] udevd[4422]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.855920][T17438] rxe_eth0 speed is unknown, defaulting to 1000 [ 577.260606][ T14] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 577.460785][ T14] usb 9-1: Using ep0 maxpacket: 8 [ 577.467787][ T14] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 577.505099][ T14] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 577.567537][ T14] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 577.628573][ T14] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 577.694108][ T14] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 577.735282][ T14] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.783667][ T14] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.823833][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.086862][ T14] usb 9-1: GET_CAPABILITIES returned 0 [ 578.092683][ T14] usbtmc 9-1:16.0: can't read capabilities [ 578.331546][ T14] usb 9-1: USB disconnect, device number 5 [ 578.625296][T17479] netlink: 'syz.5.3729': attribute type 4 has an invalid length. [ 578.736080][T17460] loop6: detected capacity change from 0 to 32768 [ 578.812477][T17460] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 578.890678][T17460] JBD2: Ignoring recovery information on journal [ 579.145788][T17460] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 579.551893][ T5503] ocfs2: Unmounting device (7,6) on (node local) [ 579.608407][T17505] loop4: detected capacity change from 0 to 1024 [ 579.662690][T17509] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 580.021667][ T4359] hfsplus: b-tree write err: -5, ino 3 [ 580.043769][T13908] hfsplus: node 4:3 still has 1 user(s)! [ 580.333454][ T48] Bluetooth: hci6: Frame reassembly failed (-84) [ 580.936724][T17550] netlink: 'syz.5.3749': attribute type 6 has an invalid length. [ 581.188267][T17560] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 581.625093][T17573] device erspan0 entered promiscuous mode [ 581.700756][ T4464] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 581.900592][ T4464] usb 3-1: Using ep0 maxpacket: 8 [ 581.907615][ T4464] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 581.948398][ T4464] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 581.977651][ T4464] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 582.020873][ T4464] usb 3-1: config 250 has no interface number 0 [ 582.027206][ T4464] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 582.100221][ T4464] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 582.140857][ T4464] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.181872][ T4464] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 582.223433][ T4464] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 582.269392][ T4464] usb 3-1: config 250 interface 228 has no altsetting 0 [ 582.310026][ T4464] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 582.343847][ T4464] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 582.370664][ T4464] usb 3-1: Product: syz [ 582.380866][ T4464] usb 3-1: SerialNumber: syz [ 582.400974][ T4275] Bluetooth: hci6: command 0x1003 tx timeout [ 582.412016][ T4284] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 582.420886][ T4464] hub 3-1:250.228: bad descriptor, ignoring hub [ 582.483595][ T4464] hub: probe of 3-1:250.228 failed with error -5 [ 582.614947][ T4464] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 583.200802][ T4464] usb 3-1: USB disconnect, device number 29 [ 583.217619][ T4464] usblp0: removed [ 583.566081][T17628] mmap: syz.4.3761 (17628) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 583.943242][T17598] loop6: detected capacity change from 0 to 32768 [ 584.088269][T17598] XFS (loop6): Mounting V5 Filesystem [ 584.309361][T17598] XFS (loop6): Ending clean mount [ 584.364629][T17598] XFS (loop6): Quotacheck needed: Please wait. [ 584.520727][T17598] XFS (loop6): Quotacheck: Done. [ 584.564291][T17656] loop8: detected capacity change from 0 to 512 [ 584.626336][T17656] EXT4-fs (loop8): Test dummy encryption mode enabled [ 584.727788][T17656] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3769: inode #1: comm syz.8.3769: iget: illegal inode # [ 584.817496][T17656] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3769: error while reading EA inode 1 err=-117 [ 584.903350][T17656] EXT4-fs (loop8): 1 orphan inode deleted [ 584.909192][T17656] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 584.917892][ T5503] XFS (loop6): Unmounting Filesystem [ 585.043120][T17656] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #13: comm syz.8.3769: corrupted inode contents [ 585.113907][T17668] loop5: detected capacity change from 0 to 512 [ 585.219214][T17656] EXT4-fs error (device loop8): ext4_dirty_inode:6166: inode #13: comm syz.8.3769: mark_inode_dirty error [ 585.335668][T17656] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3769: invalid indirect mapped block 234881024 (level 0) [ 585.418231][T17656] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #13: comm syz.8.3769: corrupted inode contents [ 585.530771][T17656] EXT4-fs error (device loop8): ext4_truncate:4325: inode #13: comm syz.8.3769: mark_inode_dirty error [ 585.562471][T17668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 585.615671][T17656] EXT4-fs error (device loop8) in ext4_setattr:5695: Corrupt filesystem [ 585.857674][T16670] EXT4-fs (loop8): unmounting filesystem. [ 586.618063][ T5432] __quota_error: 87 callbacks suppressed [ 586.618082][ T5432] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 586.827875][T17722] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 586.836036][ T5432] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 586.904475][ T5432] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz-executor: Failed to acquire dquot type 0 [ 587.160667][ T4464] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 587.277010][T17739] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3786'. [ 587.350814][ T4464] usb 3-1: Using ep0 maxpacket: 8 [ 587.360879][ T4464] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 587.422077][ T4464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.430451][ T4464] usb 3-1: Product: syz [ 587.490696][ T4464] usb 3-1: Manufacturer: syz [ 587.495402][ T4464] usb 3-1: SerialNumber: syz [ 587.516072][T17749] loop8: detected capacity change from 0 to 256 [ 587.541470][ T4464] usb 3-1: config 0 descriptor?? [ 587.560799][T17749] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 587.590281][ T4464] gspca_main: sq930x-2.14.0 probing 2770:930c [ 587.678541][T17749] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.047449][T17611] EXT4-fs (loop5): unmounting filesystem. [ 588.649118][ T4356] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.650760][ T4464] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 588.814873][ T4356] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.930741][ T4464] gspca_sq930x: Sensor ov9630 not yet treated [ 588.939556][ T4464] sq930x: probe of 3-1:0.0 failed with error -22 [ 588.971027][ T14] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 588.979082][ T4464] usb 3-1: USB disconnect, device number 30 [ 589.003147][ T4356] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.069810][T17762] loop4: detected capacity change from 0 to 32768 [ 589.162651][ T14] usb 9-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 589.181985][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.213441][T17762] JBD2: Ignoring recovery information on journal [ 589.236162][ T14] usb-storage 9-1:1.0: USB Mass Storage device detected [ 589.296781][ T4356] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.362085][T17762] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 589.451031][ T14] scsi host1: usb-storage 9-1:1.0 [ 589.675321][ T14] usb 9-1: USB disconnect, device number 6 [ 589.748636][T17789] rxe_eth0 speed is unknown, defaulting to 1000 [ 589.759788][T13908] ocfs2: Unmounting device (7,4) on (node local) [ 590.140375][T17801] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3800'. [ 590.810865][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 590.830045][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 590.843542][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 590.851432][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 590.858993][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 590.873104][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 590.962658][T17799] loop4: detected capacity change from 0 to 32768 [ 591.055795][T17799] XFS (loop4): Mounting V5 Filesystem [ 591.102634][T17809] rxe_eth0 speed is unknown, defaulting to 1000 [ 591.188030][T17799] XFS (loop4): Ending clean mount [ 591.250221][T17799] XFS (loop4): Quotacheck needed: Please wait. [ 591.428167][T17799] XFS (loop4): Quotacheck: Done. [ 591.608177][T13908] XFS (loop4): Unmounting Filesystem [ 591.956045][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.051337][T17809] chnl_net:caif_netlink_parms(): no params data found [ 592.245153][ T7] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 592.301423][ T4356] IPVS: stopping backup sync thread 5930 ... [ 592.442831][ T7] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 592.478312][ T7] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 592.502503][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.536224][ T7] usb 9-1: Product: syz [ 592.557649][ T7] usb 9-1: Manufacturer: syz [ 592.563121][ T7] usb 9-1: SerialNumber: syz [ 592.571183][T17809] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.578334][T17809] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.603729][T17809] device bridge_slave_0 entered promiscuous mode [ 592.643131][T17809] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.669557][T17809] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.695622][T17809] device bridge_slave_1 entered promiscuous mode [ 592.936746][ T7] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 592.963983][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 593.009110][ T7] usb 9-1: clock source 0 is not valid, cannot use [ 593.037265][ T7] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 593.070669][ T7] usb 9-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 593.072621][T17809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.144634][T17809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.279332][ T7] usb 9-1: USB disconnect, device number 7 [ 593.424662][T17870] loop2: detected capacity change from 0 to 2048 [ 593.462898][T17809] team0: Port device team_slave_0 added [ 593.540522][ T4356] device hsr_slave_0 left promiscuous mode [ 593.739764][T17882] loop8: detected capacity change from 0 to 512 [ 593.764865][T17882] EXT4-fs: Ignoring removed oldalloc option [ 593.809990][T17882] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 593.824219][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.900703][T17882] EXT4-fs (loop8): 1 truncate cleaned up [ 593.909356][T17882] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 594.058768][ T4356] device hsr_slave_1 left promiscuous mode [ 594.078509][T17870] loop2: p2 < > p3 < p5 > p4 [ 594.087499][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.100898][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.112113][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.121888][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.137449][ T4356] device vlan0 left promiscuous mode [ 594.145201][ T4356] bridge0: port 3(vlan0) entered disabled state [ 594.157360][T17870] loop2: p4 start 458752 is beyond EOD, truncated [ 594.165762][ T4356] device bridge_slave_1 left promiscuous mode [ 594.180836][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.194208][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.203036][T17870] loop2: p5 start 458752 is beyond EOD, truncated [ 594.235614][T16670] EXT4-fs (loop8): unmounting filesystem. [ 594.341237][ T4356] device veth1_macvtap left promiscuous mode [ 594.347344][ T4356] device veth0_macvtap left promiscuous mode [ 594.363646][ T4356] device veth1_vlan left promiscuous mode [ 594.369580][ T4356] device veth0_vlan left promiscuous mode [ 594.411446][T17894] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 594.411446][T17894] [ 594.874359][ T4356] bond1 (unregistering): Released all slaves [ 595.030634][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 595.775080][ T4356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.840706][ T4356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.296230][ T4356] bond0 (unregistering): Released all slaves [ 596.386275][T17809] team0: Port device team_slave_1 added [ 596.454776][T17901] rxe_eth0 speed is unknown, defaulting to 1000 [ 596.586630][T17809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.620761][T17809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.659532][T17809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.716634][T17809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.729700][T17809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.756388][T17809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.839009][T17809] device hsr_slave_0 entered promiscuous mode [ 596.849337][T17809] device hsr_slave_1 entered promiscuous mode [ 596.871145][T17809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.888876][T17809] Cannot create hsr debugfs directory [ 597.110885][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 597.250677][ T4464] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 597.445688][ T4464] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.478366][ T4464] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.533106][ T4464] usb 9-1: config 0 interface 0 has no altsetting 0 [ 597.551815][ T4464] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 597.580577][ T4464] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.628201][ T4464] usb 9-1: config 0 descriptor?? [ 597.872436][T17915] loop4: detected capacity change from 0 to 32768 [ 598.086467][ T4464] hid-multitouch 0003:0EEF:72C4.002B: ignoring exceeding usage max [ 598.116514][ T4464] hid-multitouch 0003:0EEF:72C4.002B: unbalanced collection at end of report description [ 598.161256][ T4464] hid-multitouch: probe of 0003:0EEF:72C4.002B failed with error -22 [ 598.367444][T17910] loop8: detected capacity change from 0 to 1024 [ 598.398679][T17910] EXT4-fs: Invalid want_extra_isize 7 [ 598.437497][ T4459] usb 9-1: USB disconnect, device number 8 [ 598.946053][T17937] loop4: detected capacity change from 0 to 2048 [ 599.003362][T17937] loop4: p2 < > p3 < p5 > p4 [ 599.015251][T17937] loop4: p4 start 458752 is beyond EOD, truncated [ 599.032517][T17937] loop4: p5 start 458752 is beyond EOD, truncated [ 599.190693][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 599.222522][T17939] loop8: detected capacity change from 0 to 2048 [ 599.364661][T17939] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 599.670999][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 599.778304][T16670] EXT4-fs (loop8): unmounting filesystem. [ 600.263615][T17809] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 600.298032][T17809] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 600.321393][T17809] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 600.353683][T17809] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 600.573053][T17809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.610385][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.621373][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.653673][T17809] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.685532][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.721504][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.741432][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.748587][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.812566][T17968] FAULT_INJECTION: forcing a failure. [ 600.812566][T17968] name failslab, interval 1, probability 0, space 0, times 0 [ 600.820995][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.863304][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.879478][T17968] CPU: 0 PID: 17968 Comm: syz.4.3842 Not tainted syzkaller #0 [ 600.887024][T17968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 600.897108][T17968] Call Trace: [ 600.897150][T17968] [ 600.897162][T17968] dump_stack_lvl+0x188/0x24e [ 600.897195][T17968] ? show_regs_print_info+0x12/0x12 [ 600.899068][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.900938][T17968] ? load_image+0x410/0x410 [ 600.900978][T17968] ? __might_sleep+0xd0/0xd0 [ 600.931005][T17968] ? __lock_acquire+0x7ea0/0x7ea0 [ 600.936066][T17968] should_fail_ex+0x390/0x4c0 [ 600.940807][T17968] should_failslab+0x5/0x20 [ 600.942132][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.945329][T17968] slab_pre_alloc_hook+0x59/0x300 [ 600.952619][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.957415][T17968] ? vfs_set_acl_prepare+0x100/0x750 [ 600.969969][T17968] __kmem_cache_alloc_node+0x4f/0x270 [ 600.975403][T17968] ? vfs_set_acl_prepare+0x100/0x750 [ 600.980756][T17968] __kmalloc+0xa3/0x240 [ 600.984975][T17968] ? kasan_set_track+0x60/0x70 [ 600.989793][T17968] vfs_set_acl_prepare+0x100/0x750 [ 600.994965][T17968] ? posix_xattr_acl+0x98/0xb0 [ 600.999814][T17968] posix_acl_xattr_set+0x89/0x3f0 [ 601.004915][T17968] ? posix_acl_xattr_get+0x540/0x540 [ 601.010263][T17968] __vfs_setxattr+0x3d8/0x410 [ 601.015010][T17968] __vfs_setxattr_noperm+0x126/0x5e0 [ 601.020371][T17968] vfs_setxattr+0x167/0x2e0 [ 601.024940][T17968] ? xattr_permission+0x510/0x510 [ 601.030004][T17968] ? _copy_from_user+0x10b/0x170 [ 601.034973][T17968] ? setxattr+0x22b/0x330 [ 601.039334][T17968] setxattr+0x2a3/0x330 [ 601.043621][T17968] ? path_setxattr+0x290/0x290 [ 601.048453][T17968] ? __mnt_want_write+0x21f/0x2a0 [ 601.053516][T17968] path_setxattr+0x147/0x290 [ 601.058156][T17968] ? simple_xattr_list_add+0xf0/0xf0 [ 601.063473][T17968] ? lock_chain_count+0x20/0x20 [ 601.068448][T17968] __x64_sys_setxattr+0xb7/0xd0 [ 601.073339][T17968] do_syscall_64+0x4c/0xa0 [ 601.077778][T17968] ? clear_bhb_loop+0x60/0xb0 [ 601.082483][T17968] ? clear_bhb_loop+0x60/0xb0 [ 601.087192][T17968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.093121][T17968] RIP: 0033:0x7f3a3b59f559 [ 601.097560][T17968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.117201][T17968] RSP: 002b:00007f3a3c413028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 601.125640][T17968] RAX: ffffffffffffffda RBX: 00007f3a3b825fa0 RCX: 00007f3a3b59f559 [ 601.133641][T17968] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 00002000000003c0 [ 601.141641][T17968] RBP: 00007f3a3b636b20 R08: 0000000000000003 R09: 0000000000000000 [ 601.149632][T17968] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 601.157624][T17968] R13: 00007f3a3b826038 R14: 00007f3a3b825fa0 R15: 00007ffcb8e386b8 [ 601.165631][T17968] [ 601.181339][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.277507][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.302404][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.320347][T17978] loop8: detected capacity change from 0 to 1024 [ 601.371078][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.436851][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.472320][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.512503][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.553763][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.591835][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.657444][T17809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.699858][T17809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.718346][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.731450][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.960941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.968507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.996562][T17809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.054115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.078339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.121074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.138246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.149844][T17809] device veth0_vlan entered promiscuous mode [ 602.168451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.178715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.205469][T17809] device veth1_vlan entered promiscuous mode [ 602.264487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.281092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.289402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.307098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.324354][T17809] device veth0_macvtap entered promiscuous mode [ 602.362456][T17809] device veth1_macvtap entered promiscuous mode [ 602.420207][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.475347][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.491323][T17999] FAULT_INJECTION: forcing a failure. [ 602.491323][T17999] name failslab, interval 1, probability 0, space 0, times 0 [ 602.516994][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.554180][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.561223][T17999] CPU: 0 PID: 17999 Comm: syz.2.3857 Not tainted syzkaller #0 [ 602.571537][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 602.580637][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.581610][T17999] Call Trace: [ 602.581622][T17999] [ 602.598361][T17999] dump_stack_lvl+0x188/0x24e [ 602.603089][T17999] ? show_regs_print_info+0x12/0x12 [ 602.608332][T17999] ? load_image+0x410/0x410 [ 602.612885][T17999] ? __might_sleep+0xd0/0xd0 [ 602.617522][T17999] ? __lock_acquire+0x7ea0/0x7ea0 [ 602.622598][T17999] should_fail_ex+0x390/0x4c0 [ 602.624808][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.627318][T17999] should_failslab+0x5/0x20 [ 602.641696][T17999] slab_pre_alloc_hook+0x59/0x300 [ 602.646777][T17999] ? cgroup_init_fs_context+0x50/0x3c0 [ 602.652283][T17999] __kmem_cache_alloc_node+0x4f/0x270 [ 602.657707][T17999] ? cgroup_init_fs_context+0x50/0x3c0 [ 602.663216][T17999] kmalloc_trace+0x26/0xe0 [ 602.664641][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.667661][T17999] cgroup_init_fs_context+0x50/0x3c0 [ 602.683397][T17999] ? cgroup_do_get_tree+0x510/0x510 [ 602.688643][T17999] alloc_fs_context+0x628/0x7d0 [ 602.693608][T17999] __se_sys_fsopen+0xa0/0x2c0 [ 602.698325][T17999] do_syscall_64+0x4c/0xa0 [ 602.702770][T17999] ? clear_bhb_loop+0x60/0xb0 [ 602.707473][T17999] ? clear_bhb_loop+0x60/0xb0 [ 602.712183][T17999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.718111][T17999] RIP: 0033:0x7f049299f559 [ 602.722549][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.742182][T17999] RSP: 002b:00007f04937aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 602.750619][T17999] RAX: ffffffffffffffda RBX: 00007f0492c25fa0 RCX: 00007f049299f559 [ 602.758614][T17999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 602.766603][T17999] RBP: 00007f0492a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 602.774594][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.782586][T17999] R13: 00007f0492c26038 R14: 00007f0492c25fa0 R15: 00007ffc7a1b0458 [ 602.790592][T17999] [ 602.808838][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.825728][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.837712][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.856310][T17809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.869713][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.891516][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.900229][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.917289][T17990] loop8: detected capacity change from 0 to 32768 [ 602.937866][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.015014][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.066931][T17990] XFS (loop8): Mounting V5 Filesystem [ 603.080609][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.091776][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.102539][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.113539][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.124726][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.137880][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.152471][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.162737][T17809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.173563][T17809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.201284][T17990] XFS (loop8): Ending clean mount [ 603.225264][T17809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.254814][T18003] rxe_eth0 speed is unknown, defaulting to 1000 [ 603.262950][ T27] audit: type=1800 audit(37770417.563:815): pid=17990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3847" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 603.283950][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.311365][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.344615][T17809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.378179][T17809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.410681][T17809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.419442][T17809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.678831][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.690734][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.713142][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.734021][T16670] XFS (loop8): Unmounting Filesystem [ 603.892740][T18023] loop6: detected capacity change from 0 to 2048 [ 603.922660][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.961894][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.047663][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.150963][T18023] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 604.712156][T18033] loop7: detected capacity change from 0 to 8192 [ 604.756810][T18031] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 604.790984][T18033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 604.842377][T18033] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 604.918349][T18033] REISERFS (device loop7): using ordered data mode [ 604.980767][T18033] reiserfs: using flush barriers [ 604.987212][T18033] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 605.051927][T18031] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 605.086286][T18033] REISERFS (device loop7): checking transaction log (loop7) [ 605.308711][T18059] input: syz0 as /devices/virtual/input/input79 [ 605.323163][T18060] device-mapper: ioctl: Invalid ioctl structure: name tes, dev f803 [ 605.507451][T18033] REISERFS (device loop7): Using tea hash to sort names [ 605.571906][T18033] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 605.681494][T18066] binder: 18065:18066 ioctl c0306201 2000000006c0 returned -14 [ 605.716616][T18069] FAULT_INJECTION: forcing a failure. [ 605.716616][T18069] name failslab, interval 1, probability 0, space 0, times 0 [ 605.790636][T18069] CPU: 0 PID: 18069 Comm: syz.2.3861 Not tainted syzkaller #0 [ 605.798186][T18069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 605.808264][T18069] Call Trace: [ 605.811564][T18069] [ 605.814521][T18069] dump_stack_lvl+0x188/0x24e [ 605.819232][T18069] ? show_regs_print_info+0x12/0x12 [ 605.824466][T18069] ? load_image+0x410/0x410 [ 605.829004][T18069] ? __might_sleep+0xd0/0xd0 [ 605.833622][T18069] ? __lock_acquire+0x7ea0/0x7ea0 [ 605.838700][T18069] should_fail_ex+0x390/0x4c0 [ 605.843418][T18069] should_failslab+0x5/0x20 [ 605.847943][T18069] slab_pre_alloc_hook+0x59/0x300 [ 605.852999][T18069] kmem_cache_alloc+0x56/0x2f0 [ 605.857787][T18069] ? security_inode_alloc+0x30/0x110 [ 605.863091][T18069] security_inode_alloc+0x30/0x110 [ 605.868228][T18069] inode_init_always+0x910/0xc90 [ 605.873193][T18069] new_inode_pseudo+0x91/0x1c0 [ 605.877995][T18069] new_inode+0x25/0x1d0 [ 605.882178][T18069] shmem_get_inode+0x327/0xbc0 [ 605.886979][T18069] ? _raw_spin_unlock+0x24/0x40 [ 605.891862][T18069] __shmem_file_setup+0x10b/0x290 [ 605.896926][T18069] ? shmem_file_setup+0x13/0x30 [ 605.901813][T18069] __se_sys_memfd_create+0x1e1/0x340 [ 605.907123][T18069] do_syscall_64+0x4c/0xa0 [ 605.911555][T18069] ? clear_bhb_loop+0x60/0xb0 [ 605.916248][T18069] ? clear_bhb_loop+0x60/0xb0 [ 605.920937][T18069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.926867][T18069] RIP: 0033:0x7f049299f559 [ 605.931306][T18069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.951037][T18069] RSP: 002b:00007f04937a9e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 605.959470][T18069] RAX: ffffffffffffffda RBX: 00000000000105a0 RCX: 00007f049299f559 [ 605.967458][T18069] RDX: 00007f04937a9ee0 RSI: 0000000000000000 RDI: 00007f0492a36d00 [ 605.975442][T18069] RBP: 0000200000019940 R08: 00000000ffffffff R09: 0000000000000000 [ 605.983432][T18069] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 605.991428][T18069] R13: 00007f04937a9ee0 R14: 00007f04937a9ea0 R15: 0000200000000440 [ 605.999426][T18069] [ 606.193511][T18075] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3863'. [ 606.745072][T18086] loop4: detected capacity change from 0 to 8192 [ 606.858583][T18087] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.300438][T18103] loop2: detected capacity change from 0 to 256 [ 607.748918][T18114] loop2: detected capacity change from 0 to 1024 [ 607.763015][T18115] loop7: detected capacity change from 0 to 1024 [ 607.828061][T18114] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 607.841290][ T5503] EXT4-fs (loop6): unmounting filesystem. [ 607.880121][T18114] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 607.932483][T18114] JBD2: no valid journal superblock found [ 607.941285][T18114] EXT4-fs (loop2): error loading journal [ 609.345961][T18163] loop8: detected capacity change from 0 to 512 [ 609.400413][T18163] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.436645][T18163] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 609.491595][T18163] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 609.537781][T18163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 609.590463][T18163] System zones: 0-2, 18-18, 34-35 [ 609.643762][T18163] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 609.858110][T16670] EXT4-fs (loop8): unmounting filesystem. [ 609.910684][ T4275] Bluetooth: hci1: command 0x0401 tx timeout [ 610.288007][T18194] syz.7.3894 sent an empty control message without MSG_MORE. [ 610.723761][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'. [ 610.794733][T18210] block nbd0: Unsupported socket: should be TCP or UNIX. [ 610.912824][T18177] loop2: detected capacity change from 0 to 32768 [ 610.959112][T18219] loop7: detected capacity change from 0 to 512 [ 611.007867][T18219] EXT4-fs: Ignoring removed oldalloc option [ 611.017757][T18177] JBD2: Ignoring recovery information on journal [ 611.115421][T18219] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 611.179189][T18219] EXT4-fs (loop7): 1 truncate cleaned up [ 611.197600][T18177] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 611.219363][T18219] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 611.462289][T18177] OCFS2: ERROR (device loop2): int ocfs2_mark_extent_written(struct inode *, struct ocfs2_extent_tree *, handle_t *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *): Inode 17058 has unwritten extents that are being written to, but the feature bit is not set in the super block [ 611.492824][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.668467][T18177] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 611.708864][T17809] EXT4-fs (loop7): unmounting filesystem. [ 611.728259][T18177] OCFS2: File system is now read-only. [ 611.770661][T18177] (syz.2.3891,18177,0):ocfs2_dio_end_io_write:2372 ERROR: status = -30 [ 611.953538][T18177] syz.2.3891 (18177) used greatest stack depth: 18464 bytes left [ 612.132783][T15766] ocfs2: Unmounting device (7,2) on (node local) [ 613.010799][ T7] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 613.050736][ T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 613.202543][ T7] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.230572][ T7] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 613.241191][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 613.250174][ T14] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 613.290203][ T7] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 613.299955][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.338642][ T14] usb 3-1: Product: syz [ 613.343572][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.360612][ T14] usb 3-1: Manufacturer: syz [ 613.376401][ T14] usb 3-1: SerialNumber: syz [ 613.387452][ T7] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 613.411690][ T14] usb 3-1: config 0 descriptor?? [ 613.437419][ T7] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 613.450134][ T14] gspca_main: sq930x-2.14.0 probing 2770:930c [ 613.469920][T18262] loop4: detected capacity change from 0 to 32768 [ 613.520906][T18262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3911 (18262) [ 613.573997][T18262] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 613.639348][T18262] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 613.682182][T18262] BTRFS info (device loop4): using free space tree [ 613.800837][T18271] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 613.821170][T18271] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 613.851118][T18271] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 613.888420][T18266] loop7: detected capacity change from 0 to 40427 [ 613.936431][T18266] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x3ffff [ 613.967764][T18266] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x30e4 [ 614.007236][T18271] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 614.055330][ T7] usb 9-1: USB disconnect, device number 9 [ 614.074844][T18262] BTRFS info (device loop4): enabling ssd optimizations [ 614.084911][T18266] F2FS-fs (loop7): invalid crc value [ 614.102275][ T7] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 614.173456][T18266] F2FS-fs (loop7): Found nat_bits in checkpoint [ 614.181646][ T7] spcp8x5 9-1:1.0: device disconnected [ 614.353499][T18266] F2FS-fs (loop7) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 614.477317][T18266] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 614.510753][ T14] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 614.517218][ T14] sq930x: probe of 3-1:0.0 failed with error -71 [ 614.562602][ T14] usb 3-1: USB disconnect, device number 31 [ 614.605283][T18266] F2FS-fs (loop7) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 614.673792][T18266] F2FS-fs (loop7) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10a/0xfc0 [ 614.732296][T13908] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 615.663761][T17809] syz-executor: attempt to access beyond end of device [ 615.663761][T17809] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 616.416447][T18359] loop8: detected capacity change from 0 to 512 [ 616.491621][T18359] EXT4-fs (loop8): Test dummy encryption mode enabled [ 616.564077][T18359] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #11: comm syz.8.3924: casefold flag without casefold feature [ 616.607318][T18359] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.3924: couldn't read orphan inode 11 (err -117) [ 616.701515][T18359] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 616.801891][T18359] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.3924: bg 0: block 7: invalid block bitmap [ 617.083412][T16670] EXT4-fs (loop8): unmounting filesystem. [ 618.333166][T18410] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 618.919699][T18434] loop4: detected capacity change from 0 to 1024 [ 618.951676][T18434] EXT4-fs: Ignoring removed orlov option [ 619.040273][T18434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 619.189354][T18434] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 619.242370][T18434] EXT4-fs error (device loop4): __ext4_new_inode:1293: comm syz.4.3938: failed to insert inode 12: doubly allocated? [ 619.344118][T18447] loop2: detected capacity change from 0 to 256 [ 619.460706][T18447] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 619.536183][T13908] EXT4-fs (loop4): unmounting filesystem. [ 620.333861][T18473] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.620709][ T5746] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 620.643326][ T4464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.661497][ T4464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.691851][ T4275] Bluetooth: hci4: ISO packet too small [ 620.698666][ T4464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.731039][ T4464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.768998][ T4464] rtc rtc0: __rtc_set_alarm: err=-22 [ 620.810580][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 620.817778][ T5746] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 620.856564][ T5746] usb 5-1: config 0 has no interface number 0 [ 620.880573][ T5746] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.940579][ T5746] usb 5-1: config 0 interface 85 has no altsetting 0 [ 620.978412][ T5746] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 621.018355][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.050733][ T5746] usb 5-1: Product: syz [ 621.055004][ T5746] usb 5-1: Manufacturer: syz [ 621.080122][ T5746] usb 5-1: SerialNumber: syz [ 621.118847][ T5746] usb 5-1: config 0 descriptor?? [ 621.136986][ T5746] appletouch 5-1:0.85: Could not find int-in endpoint [ 621.230880][ T5746] appletouch: probe of 5-1:0.85 failed with error -5 [ 621.279387][ T5746] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 621.434131][ T5746] usb 5-1: USB disconnect, device number 33 [ 624.157161][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.163575][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.359849][T18572] Console: switching to colour VGA+ 80x25 [ 624.592808][T18573] Console: switching to colour frame buffer device 128x48 [ 625.250755][ T5746] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 625.503149][ T5746] usb 3-1: unable to get BOS descriptor or descriptor too short [ 625.551908][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.640536][ T5746] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 625.692699][ T5746] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 625.721948][ T5746] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 625.758331][ T5746] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 625.781525][ T5746] usb 3-1: config 1 interface 1 has no altsetting 0 [ 625.812089][ T5746] usb 3-1: string descriptor 0 read error: -22 [ 625.818391][ T5746] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 625.870664][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.398397][T18611] FAULT_INJECTION: forcing a failure. [ 626.398397][T18611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.457576][T18611] CPU: 0 PID: 18611 Comm: syz.4.3970 Not tainted syzkaller #0 [ 626.465127][T18611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 626.475285][T18611] Call Trace: [ 626.478609][T18611] [ 626.481581][T18611] dump_stack_lvl+0x188/0x24e [ 626.486308][T18611] ? show_regs_print_info+0x12/0x12 [ 626.491556][T18611] ? load_image+0x410/0x410 [ 626.496138][T18611] ? __lock_acquire+0x7ea0/0x7ea0 [ 626.501231][T18611] should_fail_ex+0x390/0x4c0 [ 626.505991][T18611] prepare_alloc_pages+0x1e1/0x5b0 [ 626.511197][T18611] __alloc_pages+0x130/0x4f0 [ 626.515836][T18611] ? mas_next_node+0x6af/0xb70 [ 626.520650][T18611] ? zone_statistics+0x170/0x170 [ 626.525662][T18611] __folio_alloc+0xe/0x30 [ 626.530054][T18611] vma_alloc_folio+0x499/0x900 [ 626.534901][T18611] new_page+0x530/0xc80 [ 626.539104][T18611] ? __lock_acquire+0x7ea0/0x7ea0 [ 626.544188][T18611] ? get_nodes+0x3b0/0x3b0 [ 626.548669][T18611] ? free_unref_page+0x19d/0x3f0 [ 626.553690][T18611] migrate_pages+0x2769/0x5920 [ 626.558616][T18611] ? get_nodes+0x3b0/0x3b0 [ 626.563084][T18611] ? folio_detach_private+0x3d0/0x3d0 [ 626.568489][T18611] ? remove_migration_ptes+0x140/0x140 [ 626.573981][T18611] ? mas_next_node+0x3f7/0xb70 [ 626.578795][T18611] ? mas_next_entry+0xe03/0xe90 [ 626.583692][T18611] __se_sys_mbind+0x64f/0x810 [ 626.588411][T18611] ? __ia32_sys_get_robust_list+0x100/0x100 [ 626.594337][T18611] ? __x64_sys_mbind+0xf0/0xf0 [ 626.599135][T18611] ? lock_chain_count+0x20/0x20 [ 626.604041][T18611] ? __x64_sys_mbind+0x1d/0xf0 [ 626.608842][T18611] do_syscall_64+0x4c/0xa0 [ 626.613290][T18611] ? clear_bhb_loop+0x60/0xb0 [ 626.617995][T18611] ? clear_bhb_loop+0x60/0xb0 [ 626.622699][T18611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.628641][T18611] RIP: 0033:0x7f3a3b59f559 [ 626.633080][T18611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.652719][T18611] RSP: 002b:00007f3a3c413028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 626.661164][T18611] RAX: ffffffffffffffda RBX: 00007f3a3b825fa0 RCX: 00007f3a3b59f559 [ 626.669159][T18611] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 626.677151][T18611] RBP: 00007f3a3b636b20 R08: 0000000000000000 R09: 0000000000000002 [ 626.685146][T18611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.693143][T18611] R13: 00007f3a3b826038 R14: 00007f3a3b825fa0 R15: 00007ffcb8e386b8 [ 626.701152][T18611] [ 626.704293][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.119425][ T5746] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 627.170352][ T5746] usb 3-1: USB disconnect, device number 32 [ 627.446794][ T4422] udevd[4422]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.927355][T18634] loop4: detected capacity change from 0 to 512 [ 628.094048][T18634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 628.160402][T18634] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.3973: corrupted inode contents [ 628.301215][T18634] EXT4-fs (loop4): Remounting filesystem read-only [ 628.307879][T18634] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.3973: mark_inode_dirty error [ 628.357563][T18652] loop6: detected capacity change from 0 to 1024 [ 628.400319][T18634] EXT4-fs (loop4): Remounting filesystem read-only [ 628.423818][T18652] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 628.434471][T18634] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.3973: corrupted inode contents [ 628.470859][T18652] EXT4-fs (loop6): invalid journal inode [ 628.476625][T18652] EXT4-fs (loop6): can't get journal size [ 628.511204][T18634] EXT4-fs (loop4): Remounting filesystem read-only [ 628.534265][T18650] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.3973: corrupted inode contents [ 628.549493][T18652] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 628.695022][T18650] EXT4-fs (loop4): Remounting filesystem read-only [ 628.752216][T18650] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.3973: mark_inode_dirty error [ 628.816963][T18650] EXT4-fs (loop4): Remounting filesystem read-only [ 628.858947][T18650] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.3973: corrupted inode contents [ 628.873545][ T5503] EXT4-fs (loop6): unmounting filesystem. [ 628.938249][T18650] EXT4-fs (loop4): Remounting filesystem read-only [ 628.951984][T18650] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3973: mark_inode_dirty error [ 629.019378][T18650] EXT4-fs (loop4): Remounting filesystem read-only [ 629.046080][T18650] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.3973: corrupted inode contents [ 629.158289][T18650] EXT4-fs (loop4): Remounting filesystem read-only [ 629.259308][T18650] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.3973: mark_inode_dirty error [ 629.390682][T18650] EXT4-fs (loop4): Remounting filesystem read-only [ 629.648159][T18634] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.3973: corrupted inode contents [ 630.686737][T18696] loop4: detected capacity change from 0 to 1024 [ 630.722589][T18696] EXT4-fs: Ignoring removed bh option [ 630.801485][T18696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 630.979537][T13908] EXT4-fs (loop4): unmounting filesystem. [ 631.178480][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 631.897791][T18722] loop4: detected capacity change from 0 to 2048 [ 631.908335][T18725] ================================================================== [ 631.916473][T18725] BUG: KASAN: use-after-free in string+0x204/0x290 [ 631.923065][T18725] Read of size 1 at addr ffff88814334ba00 by task syz.6.3991/18725 [ 631.931004][T18725] [ 631.933357][T18725] CPU: 0 PID: 18725 Comm: syz.6.3991 Not tainted syzkaller #0 [ 631.940860][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 631.950952][T18725] Call Trace: [ 631.954263][T18725] [ 631.957233][T18725] dump_stack_lvl+0x188/0x24e [ 631.961953][T18725] ? __lock_acquire+0x7ea0/0x7ea0 [ 631.967041][T18725] ? show_regs_print_info+0x12/0x12 [ 631.972265][T18725] ? load_image+0x410/0x410 [ 631.976800][T18725] ? __virt_addr_valid+0x467/0x540 [ 631.981949][T18725] ? string+0x204/0x290 [ 631.986133][T18725] print_report+0xa8/0x210 [ 631.990609][T18725] kasan_report+0x10b/0x140 [ 631.995168][T18725] ? string+0x204/0x290 [ 631.999350][T18725] string+0x204/0x290 [ 632.003373][T18725] vsnprintf+0x10db/0x1c20 [ 632.007830][T18725] seq_printf+0x185/0x280 [ 632.012194][T18725] ? seq_vprintf+0x180/0x180 [ 632.016813][T18725] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 632.022310][T18725] ? __kmem_cache_alloc_node+0x19d/0x270 [ 632.028054][T18725] ? _find_next_bit+0x11e/0x130 [ 632.032938][T18725] show_interrupts+0x956/0xaf0 [ 632.037803][T18725] ? show_interrupts+0x287/0xaf0 [ 632.042770][T18725] seq_read_iter+0x8af/0xc50 [ 632.047400][T18725] proc_reg_read_iter+0x1a9/0x270 [ 632.052452][T18725] vfs_read+0x471/0x960 [ 632.056646][T18725] ? kernel_read+0x1e0/0x1e0 [ 632.061267][T18725] ? __fget_files+0x3fc/0x460 [ 632.065975][T18725] ? __fdget_pos+0x2ae/0x360 [ 632.070594][T18725] ? ksys_read+0x70/0x260 [ 632.074956][T18725] ksys_read+0x14d/0x260 [ 632.079261][T18725] ? vfs_write+0x9a0/0x9a0 [ 632.083712][T18725] ? lockdep_hardirqs_on+0x94/0x140 [ 632.088944][T18725] do_syscall_64+0x4c/0xa0 [ 632.093393][T18725] ? clear_bhb_loop+0x60/0xb0 [ 632.098092][T18725] ? clear_bhb_loop+0x60/0xb0 [ 632.102789][T18725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.108724][T18725] RIP: 0033:0x7f25c1b9f559 [ 632.113166][T18725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.132795][T18725] RSP: 002b:00007f25c29f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.141239][T18725] RAX: ffffffffffffffda RBX: 00007f25c1e25fa0 RCX: 00007f25c1b9f559 [ 632.149232][T18725] RDX: 0000000000002020 RSI: 00002000000003c0 RDI: 0000000000000003 [ 632.157226][T18725] RBP: 00007f25c1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 632.165217][T18725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.173204][T18725] R13: 00007f25c1e26038 R14: 00007f25c1e25fa0 R15: 00007ffcff2d9d08 [ 632.181206][T18725] [ 632.184243][T18725] [ 632.186591][T18725] Allocated by task 18087: [ 632.191015][T18725] kasan_set_track+0x4b/0x70 [ 632.195630][T18725] __kasan_kmalloc+0x8e/0xa0 [ 632.200246][T18725] __kmalloc_node_track_caller+0xb0/0x240 [ 632.205989][T18725] kstrdup_const+0x56/0x90 [ 632.210432][T18725] __kernfs_new_node+0xa6/0x7f0 [ 632.215339][T18725] kernfs_new_node+0x148/0x250 [ 632.220124][T18725] __kernfs_create_file+0x47/0x2e0 [ 632.225262][T18725] sysfs_add_file_mode_ns+0x233/0x2f0 [ 632.230682][T18725] internal_create_group+0x490/0xce0 [ 632.236015][T18725] sysfs_create_groups+0x55/0x120 [ 632.241109][T18725] ib_setup_port_attrs+0x1630/0x2290 [ 632.246456][T18725] add_one_compat_dev+0x3d8/0x5c0 [ 632.251519][T18725] rdma_dev_init_net+0x1e2/0x270 [ 632.256494][T18725] ops_init+0x360/0x5e0 [ 632.260709][T18725] setup_net+0x4f2/0xbd0 [ 632.265014][T18725] copy_net_ns+0x33e/0x5b0 [ 632.269463][T18725] create_new_namespaces+0x3ce/0x700 [ 632.274774][T18725] copy_namespaces+0x3ae/0x410 [ 632.279568][T18725] copy_process+0x199b/0x4070 [ 632.284271][T18725] kernel_clone+0x24b/0x900 [ 632.288799][T18725] __x64_sys_clone+0x1a7/0x220 [ 632.293594][T18725] do_syscall_64+0x4c/0xa0 [ 632.298028][T18725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.303959][T18725] [ 632.306299][T18725] The buggy address belongs to the object at ffff88814334ba00 [ 632.306299][T18725] which belongs to the cache kmalloc-8 of size 8 [ 632.320030][T18725] The buggy address is located 0 bytes inside of [ 632.320030][T18725] 8-byte region [ffff88814334ba00, ffff88814334ba08) [ 632.332993][T18725] [ 632.335345][T18725] The buggy address belongs to the physical page: [ 632.341830][T18725] page:ffffea00050cd2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814334ba00 pfn:0x14334b [ 632.353429][T18725] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 632.361144][T18725] raw: 057ff00000000200 ffffea000517ce08 ffffea000519b8c8 ffff888018441280 [ 632.369790][T18725] raw: ffff88814334ba00 0000000000660063 00000001ffffffff 0000000000000000 [ 632.378404][T18725] page dumped because: kasan: bad access detected [ 632.384855][T18725] page_owner tracks the page as allocated [ 632.390591][T18725] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 8390348710, free_ts 0 [ 632.407246][T18725] post_alloc_hook+0x173/0x1a0 [ 632.412054][T18725] get_page_from_freelist+0x206b/0x2180 [ 632.417642][T18725] __alloc_pages+0x1ec/0x4f0 [ 632.422285][T18725] alloc_page_interleave+0x24/0x1e0 [ 632.427513][T18725] alloc_slab_page+0x5d/0x180 [ 632.432215][T18725] new_slab+0x87/0x2d0 [ 632.436311][T18725] ___slab_alloc+0xbc5/0x1240 [ 632.441018][T18725] __kmem_cache_alloc_node+0x126/0x270 [ 632.446504][T18725] __kmalloc_node_track_caller+0xa0/0x240 [ 632.452258][T18725] kstrdup_const+0x56/0x90 [ 632.456705][T18725] kobject_set_name_vargs+0x5d/0x110 [ 632.462033][T18725] dev_set_name+0xdf/0x130 [ 632.466593][T18725] tty_register_device_attr+0x3c7/0x9d0 [ 632.472217][T18725] tty_register_driver+0x5d4/0xb80 [ 632.477381][T18725] legacy_pty_init+0x3c1/0x5fd [ 632.482243][T18725] pty_init+0xa/0x12 [ 632.486194][T18725] page_owner free stack trace missing [ 632.491583][T18725] [ 632.493933][T18725] Memory state around the buggy address: [ 632.499574][T18725] ffff88814334b900: fc fc 06 fc fc fc fc 06 fc fc fc fc 00 fc fc fc [ 632.507662][T18725] ffff88814334b980: fc 00 fc fc fc fc 04 fc fc fc fc fb fc fc fc fc [ 632.515738][T18725] >ffff88814334ba00: fb fc fc fc fc 04 fc fc fc fc 04 fc fc fc fc 04 [ 632.523811][T18725] ^ [ 632.527894][T18725] ffff88814334ba80: fc fc fc fc 04 fc fc fc fc 04 fc fc fc fc 04 fc [ 632.535979][T18725] ffff88814334bb00: fc fc fc 04 fc fc fc fc 04 fc fc fc fc 06 fc fc [ 632.544149][T18725] ================================================================== [ 632.552252][T18725] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 632.559460][T18725] CPU: 0 PID: 18725 Comm: syz.6.3991 Not tainted syzkaller #0 [ 632.566939][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 632.577013][T18725] Call Trace: [ 632.580323][T18725] [ 632.583278][T18725] dump_stack_lvl+0x188/0x24e [ 632.588005][T18725] ? memcpy+0x3c/0x60 [ 632.592023][T18725] ? show_regs_print_info+0x12/0x12 [ 632.597236][T18725] ? load_image+0x410/0x410 [ 632.601767][T18725] panic+0x2d3/0x710 [ 632.605704][T18725] ? bpf_jit_dump+0xd0/0xd0 [ 632.610233][T18725] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 632.616156][T18725] ? _raw_spin_unlock+0x40/0x40 [ 632.621051][T18725] ? print_memory_metadata+0x314/0x400 [ 632.626536][T18725] check_panic_on_warn+0x80/0xa0 [ 632.631498][T18725] ? string+0x204/0x290 [ 632.635693][T18725] end_report+0x66/0x110 [ 632.639959][T18725] kasan_report+0x118/0x140 [ 632.644496][T18725] ? string+0x204/0x290 [ 632.648679][T18725] string+0x204/0x290 [ 632.652707][T18725] vsnprintf+0x10db/0x1c20 [ 632.657163][T18725] seq_printf+0x185/0x280 [ 632.661573][T18725] ? seq_vprintf+0x180/0x180 [ 632.666205][T18725] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 632.671697][T18725] ? __kmem_cache_alloc_node+0x19d/0x270 [ 632.677370][T18725] ? _find_next_bit+0x11e/0x130 [ 632.682241][T18725] show_interrupts+0x956/0xaf0 [ 632.687025][T18725] ? show_interrupts+0x287/0xaf0 [ 632.691981][T18725] seq_read_iter+0x8af/0xc50 [ 632.696596][T18725] proc_reg_read_iter+0x1a9/0x270 [ 632.701642][T18725] vfs_read+0x471/0x960 [ 632.705826][T18725] ? kernel_read+0x1e0/0x1e0 [ 632.710444][T18725] ? __fget_files+0x3fc/0x460 [ 632.715159][T18725] ? __fdget_pos+0x2ae/0x360 [ 632.719774][T18725] ? ksys_read+0x70/0x260 [ 632.724141][T18725] ksys_read+0x14d/0x260 [ 632.728441][T18725] ? vfs_write+0x9a0/0x9a0 [ 632.732888][T18725] ? lockdep_hardirqs_on+0x94/0x140 [ 632.738136][T18725] do_syscall_64+0x4c/0xa0 [ 632.742578][T18725] ? clear_bhb_loop+0x60/0xb0 [ 632.747270][T18725] ? clear_bhb_loop+0x60/0xb0 [ 632.751965][T18725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.757890][T18725] RIP: 0033:0x7f25c1b9f559 [ 632.762326][T18725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.781962][T18725] RSP: 002b:00007f25c29f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.790428][T18725] RAX: ffffffffffffffda RBX: 00007f25c1e25fa0 RCX: 00007f25c1b9f559 [ 632.798418][T18725] RDX: 0000000000002020 RSI: 00002000000003c0 RDI: 0000000000000003 [ 632.806423][T18725] RBP: 00007f25c1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 632.814415][T18725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.822423][T18725] R13: 00007f25c1e26038 R14: 00007f25c1e25fa0 R15: 00007ffcff2d9d08 [ 632.830433][T18725] [ 632.833619][T18725] Kernel Offset: disabled [ 632.837993][T18725] Rebooting in 86400 seconds..