last executing test programs: 2m28.308998849s ago: executing program 2 (id=449): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x17) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, 0x0, 0x0) 2m27.262838973s ago: executing program 2 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000620afcff11000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, &(0x7f0000000440)="000000000000000002", 0x0}, 0x50) unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000480)=""/4096, 0x1000) r3 = open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x81901) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x896c, 0x1}) fchdir(r3) close(r3) prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000001500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f000001a740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000001580), 0x0, 0x0) read$msr(r7, &(0x7f00000015c0)=""/102392, 0x18ff8) unlink(0x0) r8 = add_key$keyring(&(0x7f000001a5c0), &(0x7f000001a600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f000001a640), &(0x7f000001a680)={'syz', 0x3}, 0x0, 0x0, r8) add_key$keyring(&(0x7f000001a6c0), &(0x7f000001a700)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_MOVE(0x1e, r9, r9, r8, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m25.59819271s ago: executing program 2 (id=455): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10000016}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4f, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e6baa86bc100007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000020000008000", [0x6, 0xffffffff9673e35d]}}) 2m23.690356338s ago: executing program 2 (id=467): r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3004000, &(0x7f0000000080), 0x2, 0x7ba, &(0x7f0000000300)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001100)={0x2020}, 0x2020) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x350, 0x10000) ptrace$pokeuser(0x6, r1, 0x388, 0xffff7fffffffff7f) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000bc0)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x42, 0x40) fallocate(r2, 0x0, 0x8e14, 0xe229) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000d00)={&(0x7f0000000d40)=""/120, 0x78}) 2m22.846442159s ago: executing program 2 (id=471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x30, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1008020}, 0xc, &(0x7f0000000540)={0x0, 0x38}}, 0x804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m20.173307822s ago: executing program 2 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000300)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) 2m19.430617887s ago: executing program 32 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000300)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) 1m9.030430887s ago: executing program 4 (id=735): socket$packet(0x11, 0x3, 0x300) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000bc0)) 1m8.690472203s ago: executing program 4 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000195c0)=0x80000000000003) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x202}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000580)=@name={0x1e, 0x2, 0x2, {{0x42, 0xfffe}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc051}, 0x4000) 1m6.921653927s ago: executing program 4 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sec\x00', &(0x7f0000000380)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/tomoyo/exception_policy\x00', 0x2, 0x63) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040600030003"], 0x140) 1m4.627217369s ago: executing program 4 (id=756): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='dmask=00000000000000000000006,umask=00000000000000000000005,namecase=1,dmask=00000000000000000006366,errors=remount-ro,errors=remount-ro,fmask=00000000000000000000002,keep_last_dots,iocharset=iso8859-13,allow_utime=00000000000000000147057,fsname=,smackfsdef=cp737,euid>', @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c636f88746578747d73797361646d5f752c666f776e65723e", @ANYRES64=0x0, @ANYBLOB=',\x00'], 0x1, 0x152b, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001b80)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) 1m4.223858531s ago: executing program 4 (id=758): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet_sctp(0x2, 0x1, 0x84) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m3.750027974s ago: executing program 4 (id=761): setrlimit(0x954a6228eba3d3bd, &(0x7f0000000c00)={0x7, 0xc}) 1m2.768638196s ago: executing program 33 (id=761): setrlimit(0x954a6228eba3d3bd, &(0x7f0000000c00)={0x7, 0xc}) 6.261389635s ago: executing program 0 (id=991): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000580), 0x6, 0x89b84452f97f1246) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000001c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r2, &(0x7f0000000900), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r3, &(0x7f0000000a00)='+b%', 0x3) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="1d", 0x41, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0204000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000400"/28], 0x50) 4.729957342s ago: executing program 0 (id=997): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}]}]}], {0x14}}, 0xf0}}, 0x0) 4.671294835s ago: executing program 6 (id=998): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2f, &(0x7f0000000800), &(0x7f0000000840)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4.399756066s ago: executing program 0 (id=1001): syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000009c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a00)={&(0x7f0000000280)=[{0x0, 0x0, 0x1, &(0x7f0000000000)='3'}, {0x8, 0x800, 0x0, 0x0}], 0x2}) 3.84237445s ago: executing program 5 (id=1002): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001b40)={@ifindex, 0xffffffffffffffff, 0x2f, 0x8}, 0x20) 3.720694027s ago: executing program 6 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x162) write(r0, &(0x7f0000000280)='27', 0x2) mount$overlay(0x0, 0x0, 0x0, 0x800010, &(0x7f0000000980)) socket$inet6(0xa, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000b40)={0x0, 0x9002}, 0x4) 3.586135425s ago: executing program 3 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3.535416821s ago: executing program 5 (id=1007): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000580), 0x6, 0x89b84452f97f1246) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000001c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r2, &(0x7f0000000900), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r3, &(0x7f0000000a00)='+b%', 0x3) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="1d", 0x41, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0204000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000400"/28], 0x50) 3.511773468s ago: executing program 6 (id=1008): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.100007626s ago: executing program 3 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xee) mkdir(&(0x7f0000000700)='./bus\x00', 0x49) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x8, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x59) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x8000036, r0, 0x0) 2.01779081s ago: executing program 6 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.015899756s ago: executing program 5 (id=1012): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="adcd1a9abf961ed00fe41b0cd695608d6f2e2afe08e414abbef3bc2a1d6cb7e3e99456e87340abf1c75f48c7fec1ccf8429d04c165307c011a61111209", 0x3d) 1.833931438s ago: executing program 3 (id=1014): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x54, &(0x7f0000000080)='wg2\x00', 0x4) 1.794595568s ago: executing program 6 (id=1015): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2f, &(0x7f0000000800), &(0x7f0000000840)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.691303923s ago: executing program 5 (id=1016): capset(0x0, &(0x7f0000001a00)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x800, 0x0, 0x3, 0x0, 0xfff9, 0x1}, 0x20) 1.575515222s ago: executing program 3 (id=1018): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x200000, &(0x7f0000000740)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000780)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000001340)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20020400) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi3\x00', 0x400, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000001380)='/dev/comedi1\x00', 0x111101, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'8255\x00', [0x2000, 0x0, 0x4, 0x8000, 0x9a86, 0x2, 0xc6b9, 0x6, 0x54c6cff3, 0xfa, 0xffffffff, 0x9, 0xfbfffff7, 0x400001, 0x10000006, 0x400, 0x0, 0x7f, 0x0, 0x40000003, 0x20408d, 0x9, 0x80000000, 0x20001e5b, 0x80003, 0xe69, 0xfff7ffff, 0x7, 0x4003, 0x8a, 0x5]}) 1.329315546s ago: executing program 5 (id=1019): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.148143142s ago: executing program 5 (id=1021): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.104095432s ago: executing program 0 (id=1022): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008004) 1.05370914s ago: executing program 1 (id=1023): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, 0x10000, 0xfffffefc) 1.030742462s ago: executing program 3 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xee) mkdir(&(0x7f0000000700)='./bus\x00', 0x49) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x8, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x59) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x8000036, r0, 0x0) 843.09823ms ago: executing program 6 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 775.485965ms ago: executing program 1 (id=1026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="adcd1a9abf961ed00fe41b0cd695608d6f2e2afe08e414abbef3bc2a1d6cb7e3e99456e87340abf1c75f48c7fec1ccf8429d04c165307c011a61111209", 0x3d) 723.667555ms ago: executing program 0 (id=1027): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000600)="34000000070000000000000006", 0xd) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x1008000, &(0x7f00000005c0)=ANY=[], 0x4, 0x5f2, &(0x7f0000000740)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) truncate(&(0x7f0000000d40)='./file1\x00', 0x1000700) lsetxattr$trusted_overlay_opaque(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000240)='GPL\x00', 0x8000, 0xd0, &(0x7f0000000400)=""/208, 0x40f00, 0x7a, '\x00', 0x0, @fallback=0x23, r3, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x4, &(0x7f0000000540)=[r3, r3, r3], &(0x7f0000000580)=[{0x1, 0x1, 0x10, 0xa}, {0x5, 0x2, 0x9}, {0x3, 0x4, 0x200b, 0x9}, {0x3, 0x5, 0xc, 0xb}], 0x10, 0x7000}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x964, 0x89f8}, 0x8) 711.949255ms ago: executing program 3 (id=1028): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') fcntl$notify(r0, 0x402, 0x11) exit(0x100000000000035) getdents64(r0, 0x0, 0x0) 676.769865ms ago: executing program 1 (id=1029): unshare(0x10000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000040)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000004c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000025c0)="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", 0x2000, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r0, &(0x7f0000004700)=""/134, 0x86) getdents(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000067c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) timer_create(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000069c0)='/sys/power/mem_sleep', 0x20001, 0x18b) r1 = syz_open_dev$sndctrl(&(0x7f0000006a00), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000007a80)=""/4119) 432.105549ms ago: executing program 1 (id=1030): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x21) 282.39588ms ago: executing program 1 (id=1031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x74f, 0x8000, 0x6, 0xa, 0x1}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0x80000800, 0xfffffffe, 0x80000001}, 0x10) 51.671359ms ago: executing program 1 (id=1032): syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000009c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a00)={&(0x7f0000000280)=[{0x0, 0x0, 0x1, &(0x7f0000000000)='3'}, {0x8, 0x800, 0x0, 0x0}], 0x2}) 0s ago: executing program 0 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): 10/0x10 [ 176.392569][ T7204] ? do_user_addr_fault+0xd3f/0x1480 [ 176.392585][ T7204] __x64_sys_openat+0x138/0x170 [ 176.392600][ T7204] do_syscall_64+0x166/0x520 [ 176.392614][ T7204] ? trace_irq_disable+0x3b/0x140 [ 176.392629][ T7204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.392640][ T7204] ? clear_bhb_loop+0x70/0xc0 [ 176.392653][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.392664][ T7204] RIP: 0033:0x7f376735fd8e [ 176.392676][ T7204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.392685][ T7204] RSP: 002b:00007f37681b7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.392705][ T7204] RAX: ffffffffffffffda RBX: 00007f37681b86c0 RCX: 00007f376735fd8e [ 176.392713][ T7204] RDX: 0000000000143102 RSI: 00007f37681b7c00 RDI: ffffffffffffff9c [ 176.392720][ T7204] RBP: 00007f37681b7c00 R08: 0000000000000000 R09: 0000000000000000 [ 176.392727][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 176.392734][ T7204] R13: 00007f3767626038 R14: 00007f3767625fa0 R15: 00007ffdc94bb388 [ 176.392751][ T7204] [ 176.969069][ T7209] loop2: detected capacity change from 0 to 7 [ 176.987063][ T7209] Dev loop2: unable to read RDB block 7 [ 176.987094][ T7209] loop2: unable to read partition table [ 176.987220][ T7209] loop2: partition table beyond EOD, truncated [ 176.987232][ T7209] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.231012][ T7215] loop2: detected capacity change from 0 to 2048 [ 177.285301][ T7215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.390963][ T5769] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.541920][ T5769] usb 1-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 177.542738][ T5769] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.542753][ T5769] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.544378][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.544392][ T5769] usb 1-1: Product: syz [ 177.544400][ T5769] usb 1-1: Manufacturer: syz [ 177.544407][ T5769] usb 1-1: SerialNumber: syz [ 177.728111][ T7224] loop1: detected capacity change from 0 to 1024 [ 177.762954][ T5769] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 178.139049][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.203761][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.227202][ T5645] EXT4-fs error (device loop2): empty_inline_dir:1796: inode #12: block 9: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 178.296120][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.297019][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.337017][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.361959][ T5645] EXT4-fs error (device loop2): empty_inline_dir:1796: inode #12: block 9: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 178.383191][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.384072][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.423840][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.448234][ T5645] EXT4-fs error (device loop2): empty_inline_dir:1796: inode #12: block 9: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 178.486250][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.487155][ T5645] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 9: comm syz-executor: path /98/bus/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=65556, size=60 fake=0 [ 178.549198][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.568420][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.596886][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.617157][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.664399][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.689440][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.709722][ T5645] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 178.798941][ T7230] ip_tables: iptables: counters copy to user failed while replacing table [ 178.838860][ T53] IPVS: starting estimator thread 0... [ 178.855416][ T7231] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 178.930778][ T7232] IPVS: using max 52 ests per chain, 124800 per kthread [ 179.003095][ T7234] fuse: Unknown parameter '0x0000000000000004' [ 180.218805][ T5761] usb 1-1: USB disconnect, device number 5 [ 180.250286][ T5761] usblp0: removed [ 180.486949][ T5645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.565002][ T7248] db_root: cannot open: % [ 180.671191][ T5761] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.832205][ T5761] usb 1-1: Using ep0 maxpacket: 8 [ 180.832664][ T5761] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.856872][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.856890][ T5761] usb 1-1: Product: syz [ 180.856898][ T5761] usb 1-1: Manufacturer: syz [ 180.856905][ T5761] usb 1-1: SerialNumber: syz [ 180.859400][ T5761] usb 1-1: config 0 descriptor?? [ 180.928230][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.087122][ T5761] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.279998][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.472905][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.530982][ T7257] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 181.734906][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.771984][ T7261] fuse: Unknown parameter '0x0000000000000004' [ 181.828434][ T5650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.840298][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.849337][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.861361][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.864223][ T5650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.521468][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.573232][ T5761] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 182.603854][ T5761] usb 1-1: USB disconnect, device number 6 [ 182.681081][ T10] usb 2-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 182.683370][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.683386][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.719768][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.719783][ T10] usb 2-1: Product: syz [ 182.719791][ T10] usb 2-1: Manufacturer: syz [ 182.719799][ T10] usb 2-1: SerialNumber: syz [ 182.970969][ T10] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 183.379112][ T7289] loop2: detected capacity change from 0 to 7 [ 183.379752][ T7289] Dev loop2: unable to read RDB block 7 [ 183.379778][ T7289] loop2: unable to read partition table [ 183.379885][ T7289] loop2: partition table beyond EOD, truncated [ 183.379894][ T7289] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.448470][ T10] usb 2-1: USB disconnect, device number 5 [ 183.468628][ T10] usblp0: removed [ 183.901068][ T5650] Bluetooth: hci4: command tx timeout [ 183.953742][ T65] bridge_slave_1: left allmulticast mode [ 183.953781][ T65] bridge_slave_1: left promiscuous mode [ 183.955451][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.034818][ T65] bridge_slave_0: left allmulticast mode [ 184.034838][ T65] bridge_slave_0: left promiscuous mode [ 184.034981][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.236257][ T7300] loop1: detected capacity change from 0 to 64 [ 184.406455][ T33] audit: type=1800 audit(1793473373.117:12): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.492" name="bus" dev="loop1" ino=9 res=0 errno=-22 [ 184.584196][ T7303] Need at least one configuration in g1. [ 184.584471][ T7303] udc dummy_udc.0: failed to start g1: -22 [ 184.584485][ T7303] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 184.674004][ T7305] loop1: detected capacity change from 0 to 512 [ 184.736975][ T7305] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.736989][ T7305] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 184.736995][ T7305] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.737001][ T7305] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.787078][ T7305] EXT4-fs (loop1): 1 truncate cleaned up [ 184.808079][ T7305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.874352][ T7303] UDC core: g1: couldn't find an available UDC or it's busy [ 184.948184][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.293410][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.297405][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.298696][ T7313] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 185.311576][ T65] bond0 (unregistering): Released all slaves [ 185.378083][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.471541][ T7262] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.616715][ T7317] fuse: Unknown parameter '0x0000000000000004' [ 186.468249][ T5650] Bluetooth: hci4: command tx timeout [ 188.496347][ T7344] ip_tables: iptables: counters copy to user failed while replacing table [ 188.542193][ T5650] Bluetooth: hci4: command tx timeout [ 189.068662][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 189.332952][ T7359] fuse: Unknown parameter '0x0000000000000004' [ 189.415663][ T65] hsr_slave_0: left promiscuous mode [ 189.429587][ T65] hsr_slave_1: left promiscuous mode [ 189.439404][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.439450][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.461610][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.461625][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.542267][ T5641] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.564250][ T65] veth1_macvtap: left promiscuous mode [ 189.564289][ T65] veth0_macvtap: left promiscuous mode [ 189.564349][ T65] veth1_vlan: left promiscuous mode [ 189.564399][ T65] veth0_vlan: left promiscuous mode [ 189.653165][ T7363] loop4: detected capacity change from 0 to 512 [ 189.692962][ T5641] usb 1-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 189.695963][ T5641] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.696037][ T5641] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 189.698084][ T5641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.698100][ T5641] usb 1-1: Product: syz [ 189.698108][ T5641] usb 1-1: Manufacturer: syz [ 189.698115][ T5641] usb 1-1: SerialNumber: syz [ 189.776062][ T7363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.776143][ T7363] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.578674][ T7363] fs-verity (loop4, inode 15): Verity descriptor has invalid size (0 bytes) [ 190.597013][ T5641] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 190.621083][ T5650] Bluetooth: hci4: command tx timeout [ 190.717342][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.956717][ T7378] loop4: detected capacity change from 0 to 1024 [ 190.987868][ T7378] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 190.990334][ T7378] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 191.035293][ T10] usb 1-1: USB disconnect, device number 7 [ 191.052307][ T7378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.056008][ T10] usblp0: removed [ 191.163379][ T7378] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.237939][ T7384] loop1: detected capacity change from 0 to 256 [ 191.278699][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.734338][ T7395] ip_tables: iptables: counters copy to user failed while replacing table [ 191.799485][ T65] team0 (unregistering): Port device team_slave_1 removed [ 191.862592][ T65] team0 (unregistering): Port device team_slave_0 removed [ 192.072269][ T7400] Need at least one configuration in g1. [ 192.072342][ T7400] udc dummy_udc.0: failed to start g1: -22 [ 192.072355][ T7400] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 192.072809][ T7400] UDC core: g1: couldn't find an available UDC or it's busy [ 192.265535][ T7404] fuse: Unknown parameter '0x0000000000000004' [ 193.534424][ T7407] loop1: detected capacity change from 0 to 1024 [ 193.536335][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 194.005042][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.006612][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.006729][ T7262] bridge_slave_0: entered allmulticast mode [ 194.045196][ T7262] bridge_slave_0: entered promiscuous mode [ 194.061324][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.061392][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.061519][ T7262] bridge_slave_1: entered allmulticast mode [ 194.093581][ T7262] bridge_slave_1: entered promiscuous mode [ 194.136016][ T7421] FAULT_INJECTION: forcing a failure. [ 194.136016][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 194.136039][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.0.523 Not tainted syzkaller #0 PREEMPT(full) [ 194.136063][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.136075][ T7421] Call Trace: [ 194.136084][ T7421] [ 194.136093][ T7421] dump_stack_lvl+0xe8/0x150 [ 194.136120][ T7421] should_fail_ex+0x3eb/0x540 [ 194.136137][ T7421] should_failslab+0xa8/0x100 [ 194.136156][ T7421] __kmalloc_cache_noprof+0x9e/0x600 [ 194.136171][ T7421] ? bpf_prog_stream_init+0x9f/0x4a0 [ 194.136185][ T7421] ? bpf_prog_stream_init+0x9f/0x4a0 [ 194.136201][ T7421] bpf_prog_stream_init+0x9f/0x4a0 [ 194.136217][ T7421] bpf_prog_load+0xcb8/0x1c60 [ 194.136234][ T7421] ? __pfx_bpf_prog_load+0x10/0x10 [ 194.136257][ T7421] ? __might_fault+0xaf/0x130 [ 194.136272][ T7421] __sys_bpf+0xd86/0xe00 [ 194.136286][ T7421] ? __pfx___sys_bpf+0x10/0x10 [ 194.136298][ T7421] ? do_futex+0x3e7/0x4e0 [ 194.136324][ T7421] ? rcu_is_watching+0x16/0xb0 [ 194.136343][ T7421] __x64_sys_bpf+0xba/0xd0 [ 194.136360][ T7421] do_syscall_64+0x166/0x520 [ 194.136373][ T7421] ? trace_irq_disable+0x3b/0x140 [ 194.136388][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.136399][ T7421] ? clear_bhb_loop+0x70/0xc0 [ 194.136412][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.136423][ T7421] RIP: 0033:0x7f185299f559 [ 194.136435][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.136444][ T7421] RSP: 002b:00007f18538af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.136457][ T7421] RAX: ffffffffffffffda RBX: 00007f1852c25fa0 RCX: 00007f185299f559 [ 194.136464][ T7421] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 194.136471][ T7421] RBP: 00007f1852a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 194.136485][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.136492][ T7421] R13: 00007f1852c26038 R14: 00007f1852c25fa0 R15: 00007fffa8d1fda8 [ 194.136509][ T7421] [ 194.438824][ T7262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.469087][ T7262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.619741][ T7262] team0: Port device team_slave_0 added [ 194.636204][ T7262] team0: Port device team_slave_1 added [ 194.651623][ T5761] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 194.698355][ T65] IPVS: stop unused estimator thread 0... [ 194.804644][ T5761] usb 2-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 194.807015][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 194.807031][ T5761] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.810502][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.810517][ T5761] usb 2-1: Product: syz [ 194.810525][ T5761] usb 2-1: Manufacturer: syz [ 194.810532][ T5761] usb 2-1: SerialNumber: syz [ 194.889520][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.889533][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.889547][ T7262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.968919][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.968931][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.968945][ T7262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.068361][ T7432] ip_tables: iptables: counters copy to user failed while replacing table [ 195.096302][ T5761] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 195.116921][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.116955][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.309429][ T7434] Need at least one configuration in g1. [ 195.309503][ T7434] udc dummy_udc.0: failed to start g1: -22 [ 195.309515][ T7434] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 195.309963][ T7434] UDC core: g1: couldn't find an available UDC or it's busy [ 195.458655][ T7262] hsr_slave_0: entered promiscuous mode [ 195.459262][ T7262] hsr_slave_1: entered promiscuous mode [ 195.478693][ T7262] debugfs: 'hsr0' already exists in 'hsr' [ 195.478719][ T7262] Cannot create hsr debugfs directory [ 196.204809][ T7438] fuse: Unknown parameter 'fd0x0000000000000004' [ 196.206731][ T10] usb 2-1: USB disconnect, device number 6 [ 196.297592][ T10] usblp0: removed                                                                                                        syzkaller syzkaller login: [ 199.641059][ T7484] loop1: detected capacity change from 0 to 32768 [ 199.685508][ T7484] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 199.685522][ T7484] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 199.729495][ T7484] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 199.739427][ T5641] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 199.739439][ T5641] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 199.998213][ T5641] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 258ms [ 199.998336][ T5641] gfs2: fsid=syz:syz.0: jid=0: Done [ 199.998368][ T7484] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 200.041621][ T5761] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.197573][ T5761] usb 5-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 200.459492][ T5761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.459511][ T5761] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.497599][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.497619][ T5761] usb 5-1: Product: syz [ 200.497627][ T5761] usb 5-1: Manufacturer: syz [ 200.497634][ T5761] usb 5-1: SerialNumber: syz [ 200.594829][ T33] audit: type=1800 audit(1793473389.307:13): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.540" name="file1" dev="loop1" ino=9378 res=0 errno=-22 [ 200.712939][ T7509] loop3: detected capacity change from 0 to 512 [ 200.864893][ T7509] FAT-fs (loop3): Directory bread(block 2080) failed [ 200.864915][ T7509] FAT-fs (loop3): Directory bread(block 2081) failed [ 200.864931][ T7509] FAT-fs (loop3): Directory bread(block 2082) failed [ 200.864942][ T7509] FAT-fs (loop3): Directory bread(block 2083) failed [ 200.864953][ T7509] FAT-fs (loop3): Directory bread(block 2084) failed [ 200.864964][ T7509] FAT-fs (loop3): Directory bread(block 2085) failed [ 200.864991][ T7509] FAT-fs (loop3): Directory bread(block 2086) failed [ 200.865002][ T7509] FAT-fs (loop3): Directory bread(block 2087) failed [ 200.974053][ T5761] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 201.021015][ T5761] usb 5-1: USB disconnect, device number 4 [ 201.043427][ T5761] usblp0: removed [ 201.542551][ T7262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.710077][ T7525] fuse: Unknown parameter 'fd0x0000000000000004' [ 202.652512][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 202.652545][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 202.652562][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 202.652578][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 202.907117][ T7541] program syz.0.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.008187][ T7544] loop3: detected capacity change from 0 to 512 [ 203.067481][ T7544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.067557][ T7544] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.128251][ T7544] fs-verity (loop3, inode 15): Verity descriptor has invalid size (0 bytes) [ 203.207512][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.351267][ T5761] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.354770][ T7262] veth0_vlan: entered promiscuous mode [ 203.389933][ T7262] veth1_vlan: entered promiscuous mode [ 203.464968][ T7262] veth0_macvtap: entered promiscuous mode [ 203.486312][ T7262] veth1_macvtap: entered promiscuous mode [ 203.503845][ T5761] usb 2-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 203.514550][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.514565][ T5761] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 203.517220][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.517235][ T5761] usb 2-1: Product: syz [ 203.517243][ T5761] usb 2-1: Manufacturer: syz [ 203.517251][ T5761] usb 2-1: SerialNumber: syz [ 203.569608][ T7555] loop0: detected capacity change from 0 to 4096 [ 203.619085][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.633824][ T7555] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 203.646616][ T5762] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 203.676340][ T7555] ntfs3(loop0): Failed to load $Extend (-22). [ 203.676374][ T7555] ntfs3(loop0): Failed to initialize $Extend. [ 203.679131][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.762088][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.762116][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.762135][ T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.762152][ T34] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.819435][ T5762] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 203.845528][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.845563][ T5762] usb 4-1: Product: syz [ 203.845571][ T5762] usb 4-1: Manufacturer: syz [ 203.845579][ T5762] usb 4-1: SerialNumber: syz [ 203.881913][ T5762] usb 4-1: config 0 descriptor?? [ 204.008304][ T5761] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 204.034003][ T33] audit: type=1800 audit(1793473392.747:14): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.560" name="file1" dev="loop0" ino=30 res=0 errno=-22 [ 204.112584][ T5761] usb 2-1: USB disconnect, device number 7 [ 204.137860][ T5761] usblp0: removed [ 204.223597][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.223626][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.273732][ T5762] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 008 [ 204.424718][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.424733][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.757266][ T7559] usb 4-1: USB disconnect, device number 8 [ 206.462799][ T7586] Need at least one configuration in g1. [ 206.462882][ T7586] udc dummy_udc.0: failed to start g1: -22 [ 206.462895][ T7586] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 206.463377][ T7586] UDC core: g1: couldn't find an available UDC or it's busy [ 206.872526][ T7591] loop5: detected capacity change from 0 to 512 [ 207.075551][ T7591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.075632][ T7591] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.152433][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 207.250049][ T7262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.417132][ T7599] loop3: detected capacity change from 0 to 1024 [ 207.790723][ T5761] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 208.595874][ T5761] usb 6-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 208.598382][ T5761] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.598399][ T5761] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.634651][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.634671][ T5761] usb 6-1: Product: syz [ 208.634679][ T5761] usb 6-1: Manufacturer: syz [ 208.634687][ T5761] usb 6-1: SerialNumber: syz [ 210.399349][ T5761] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 210.444970][ T5761] usb 6-1: USB disconnect, device number 2 [ 210.497612][ T5761] usblp0: removed [ 210.894431][ T7631] loop1: detected capacity change from 0 to 4096 [ 210.934767][ T7631] NILFS (loop1): invalid segment: Checksum error in segment payload [ 210.934786][ T7631] NILFS (loop1): trying rollback from an earlier position [ 211.004829][ T7631] NILFS (loop1): recovery complete [ 211.014122][ T7634] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.555682][ T7645] loop5: detected capacity change from 0 to 128 [ 211.739581][ T7645] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 211.739928][ T7645] hpfs: filesystem error: improperly stopped [ 211.739938][ T7645] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 211.739946][ T7645] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 211.739956][ T7645] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 212.372732][ T7656] netlink: 'syz.5.588': attribute type 1 has an invalid length. [ 215.173800][ T7688] netlink: 'syz.3.593': attribute type 2 has an invalid length. [ 215.302068][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 215.349787][ T7688] !: entered promiscuous mode [ 215.376897][ T7690] !: left promiscuous mode [ 215.465347][ T7693] loop5: detected capacity change from 0 to 2048 [ 215.992223][ T7693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.137187][ T7703] FAULT_INJECTION: forcing a failure. [ 216.137187][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 216.137208][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.1.596 Not tainted syzkaller #0 PREEMPT(full) [ 216.137222][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.137230][ T7703] Call Trace: [ 216.137235][ T7703] [ 216.137240][ T7703] dump_stack_lvl+0xe8/0x150 [ 216.137263][ T7703] should_fail_ex+0x3eb/0x540 [ 216.137279][ T7703] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 216.137292][ T7703] should_failslab+0xa8/0x100 [ 216.137311][ T7703] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 216.137321][ T7703] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 216.137337][ T7703] ? ovl_alloc_inode+0x2c/0xa0 [ 216.137347][ T7703] ? ovl_alloc_inode+0x2c/0xa0 [ 216.137361][ T7703] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 216.137372][ T7703] ovl_alloc_inode+0x2c/0xa0 [ 216.137387][ T7703] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 216.137398][ T7703] alloc_inode+0x6a/0x1b0 [ 216.137410][ T7703] ? __pfx_ovl_inode_test+0x10/0x10 [ 216.137422][ T7703] ? __pfx_ovl_inode_set+0x10/0x10 [ 216.137434][ T7703] iget5_locked+0x4a/0xa0 [ 216.137450][ T7703] ovl_get_trap_inode+0x89/0x1c0 [ 216.137464][ T7703] ovl_get_workdir+0x243/0x1980 [ 216.137475][ T7703] ? __lock_acquire+0x747/0x2de0 [ 216.137493][ T7703] ? __pfx_ovl_get_workdir+0x10/0x10 [ 216.137507][ T7703] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 216.137524][ T7703] ? pcpu_alloc_noprof+0x100f/0x1900 [ 216.137544][ T7703] ? rcu_is_watching+0x16/0xb0 [ 216.137571][ T7703] ? do_raw_spin_lock+0x12b/0x2f0 [ 216.137587][ T7703] ? do_raw_spin_unlock+0xf5/0x200 [ 216.137601][ T7703] ? _raw_spin_unlock+0x28/0x50 [ 216.137614][ T7703] ? ovl_inuse_trylock+0x177/0x230 [ 216.137627][ T7703] ovl_fill_super+0x1767/0x4570 [ 216.137646][ T7703] ? __mutex_unlock_slowpath+0x731/0x900 [ 216.137668][ T7703] ? __raw_spin_lock_init+0x45/0x100 [ 216.137683][ T7703] ? __pfx_ovl_fill_super+0x10/0x10 [ 216.137694][ T7703] ? shrinker_register+0x158/0x210 [ 216.137707][ T7703] ? sget_fc+0x1b47/0x1ce0 [ 216.137732][ T7703] ? __pfx_ovl_next_opt+0x10/0x10 [ 216.137749][ T7703] ? __pfx_ovl_fill_super+0x10/0x10 [ 216.137760][ T7703] get_tree_nodev+0xbe/0x150 [ 216.137776][ T7703] vfs_get_tree+0x92/0x2a0 [ 216.137793][ T7703] do_new_mount+0x325/0xb00 [ 216.137809][ T7703] ? __pfx_do_new_mount+0x10/0x10 [ 216.137823][ T7703] ? ns_capable+0x84/0xe0 [ 216.137840][ T7703] ? path_mount+0x647/0x1050 [ 216.137854][ T7703] ? user_path_at+0xd4/0x160 [ 216.137870][ T7703] __se_sys_mount+0x31d/0x420 [ 216.137886][ T7703] ? __pfx___se_sys_mount+0x10/0x10 [ 216.137903][ T7703] ? __x64_sys_mount+0x20/0xc0 [ 216.137917][ T7703] do_syscall_64+0x166/0x520 [ 216.137931][ T7703] ? trace_irq_disable+0x3b/0x140 [ 216.137946][ T7703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.137957][ T7703] ? clear_bhb_loop+0x70/0xc0 [ 216.137970][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.137981][ T7703] RIP: 0033:0x7f1a10d9f559 [ 216.137993][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.138003][ T7703] RSP: 002b:00007f1a11b95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.138015][ T7703] RAX: ffffffffffffffda RBX: 00007f1a11025fa0 RCX: 00007f1a10d9f559 [ 216.138023][ T7703] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 216.138031][ T7703] RBP: 00007f1a10e36b50 R08: 00002000000004c0 R09: 0000000000000000 [ 216.138038][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.138045][ T7703] R13: 00007f1a11026038 R14: 00007f1a11025fa0 R15: 00007fff3b7b20e8 [ 216.138063][ T7703] [ 216.595009][ T33] audit: type=1800 audit(1793473405.317:15): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.595" name="file2" dev="loop5" ino=1347 res=0 errno=-4 [ 216.928354][ T7709] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 217.054624][ T7720] netlink: 'syz.5.598': attribute type 12 has an invalid length. [ 217.054640][ T7720] netlink: 'syz.5.598': attribute type 29 has an invalid length. [ 217.054647][ T7720] netlink: 148 bytes leftover after parsing attributes in process `syz.5.598'. [ 218.553655][ T7730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.488621][ T7735] loop0: detected capacity change from 0 to 512 [ 219.556283][ T7735] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.604: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 219.556314][ T7735] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.576446][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 219.576464][ C0] EXT4-fs (loop0): initial error at time 1793473408: ext4_ext_check_inode:521: inode 11 [ 219.576481][ C0] EXT4-fs (loop0): last error at time 1793473408: ext4_ext_check_inode:521: inode 11 [ 219.626906][ T7743] netlink: 76 bytes leftover after parsing attributes in process `syz.1.605'. [ 219.630468][ T7735] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.604: couldn't read orphan inode 11 (err -117) [ 219.630491][ T7735] loop0: lost filesystem error report for type 5 error -117 [ 219.660693][ T7735] EXT4-fs (loop0): 1 truncate cleaned up [ 219.661595][ T7735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.878269][ T7747] Need at least one configuration in g1. [ 219.878342][ T7747] udc dummy_udc.0: failed to start g1: -22 [ 219.878355][ T7747] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 219.878808][ T7747] UDC core: g1: couldn't find an available UDC or it's busy [ 220.034983][ T5637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.280395][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 220.611580][ T5761] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.765562][ T5761] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 220.781465][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.781486][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.781498][ T5761] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.781521][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.832900][ T5761] usb 1-1: config 0 descriptor?? [ 220.914014][ T7769] loop4: detected capacity change from 0 to 512 [ 221.095120][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 221.299407][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299435][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299451][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299466][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299481][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299496][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299511][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299525][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299540][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.299563][ T5761] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 221.570323][ T5761] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 221.643402][ T5761] usb 1-1: USB disconnect, device number 8 [ 221.913382][ T7778] fido_id[7778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 223.668571][ T7793] loop3: detected capacity change from 0 to 4096 [ 223.724639][ T7773] loop1: detected capacity change from 0 to 32768 [ 223.739300][ T7793] NILFS (loop3): invalid segment: Checksum error in segment payload [ 223.739318][ T7793] NILFS (loop3): trying rollback from an earlier position [ 224.630944][ T7793] NILFS (loop3): recovery complete [ 224.655266][ T7802] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.932572][ T7803] loop0: detected capacity change from 0 to 1024 [ 226.012983][ T7818] loop5: detected capacity change from 0 to 512 [ 226.039408][ T7820] Need at least one configuration in g1. [ 226.039491][ T7820] udc dummy_udc.0: failed to start g1: -22 [ 226.039504][ T7820] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 226.039928][ T7820] UDC core: g1: couldn't find an available UDC or it's busy [ 226.275514][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.624'. [ 228.312305][ T7834] loop4: detected capacity change from 0 to 1024 [ 228.779661][ T7824] loop5: detected capacity change from 0 to 32768 [ 228.818511][ T7824] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.890483][ T7824] XFS (loop5): Ending clean mount [ 229.069245][ T7262] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.217063][ T7862] syz_tun: entered allmulticast mode [ 231.254942][ T7862] geneve0: entered allmulticast mode [ 231.412791][ T7861] syz_tun: left allmulticast mode [ 231.477676][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 231.852869][ T7875] program syz.4.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.964231][ T7858] loop1: detected capacity change from 0 to 32768 [ 231.980701][ T7858] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.634 (7858) [ 232.017902][ T7858] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 232.017925][ T7858] BTRFS info (device loop1): using sha256 checksum algorithm [ 232.121403][ T7858] BTRFS info (device loop1): turning off barriers [ 232.121422][ T7858] BTRFS info (device loop1): enabling free space tree [ 232.153096][ T7881] loop4: detected capacity change from 0 to 4096 [ 232.170732][ T5769] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 232.253757][ T5636] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 232.294395][ T7881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.337147][ T5769] usb 6-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 232.351182][ T5769] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.359314][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.359331][ T5769] usb 6-1: Product: syz [ 232.359339][ T5769] usb 6-1: Manufacturer: syz [ 232.359346][ T5769] usb 6-1: SerialNumber: syz [ 232.455588][ T5769] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 233.059884][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.041860][ T5769] gspca_mr97310a: reg read [21] error -110 [ 234.041920][ T5769] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -110 [ 234.284043][ T7908] loop3: detected capacity change from 0 to 1024 [ 234.506387][ T7911] FAULT_INJECTION: forcing a failure. [ 234.506387][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 234.506410][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.1.651 Not tainted syzkaller #0 PREEMPT(full) [ 234.506424][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 234.506433][ T7911] Call Trace: [ 234.506437][ T7911] [ 234.506443][ T7911] dump_stack_lvl+0xe8/0x150 [ 234.506467][ T7911] should_fail_ex+0x3eb/0x540 [ 234.506484][ T7911] should_failslab+0xa8/0x100 [ 234.506504][ T7911] __kmalloc_noprof+0xf9/0x710 [ 234.506517][ T7911] ? rcu_is_watching+0x16/0xb0 [ 234.506534][ T7911] ? tomoyo_realpath_from_path+0xf2/0x640 [ 234.506545][ T7911] ? tomoyo_realpath_from_path+0xf2/0x640 [ 234.506560][ T7911] tomoyo_realpath_from_path+0xf2/0x640 [ 234.506577][ T7911] ? tomoyo_path_number_perm+0x219/0x5f0 [ 234.506594][ T7911] tomoyo_path_number_perm+0x246/0x5f0 [ 234.506612][ T7911] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.506626][ T7911] ? __lock_acquire+0x747/0x2de0 [ 234.506649][ T7911] ? do_futex+0x3e7/0x4e0 [ 234.506670][ T7911] ? __fget_files+0x2a/0x420 [ 234.506685][ T7911] ? __fget_files+0x2a/0x420 [ 234.506698][ T7911] ? __fget_files+0x2a/0x420 [ 234.506714][ T7911] security_file_ioctl+0xc3/0x2a0 [ 234.506730][ T7911] __se_sys_ioctl+0x47/0x170 [ 234.506748][ T7911] do_syscall_64+0x166/0x520 [ 234.506762][ T7911] ? trace_irq_disable+0x3b/0x140 [ 234.506777][ T7911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.506789][ T7911] ? clear_bhb_loop+0x70/0xc0 [ 234.506804][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.506816][ T7911] RIP: 0033:0x7f1a10d9f559 [ 234.506829][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.506838][ T7911] RSP: 002b:00007f1a11b95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.506850][ T7911] RAX: ffffffffffffffda RBX: 00007f1a11025fa0 RCX: 00007f1a10d9f559 [ 234.506858][ T7911] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 234.506865][ T7911] RBP: 00007f1a10e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 234.506871][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.506878][ T7911] R13: 00007f1a11026038 R14: 00007f1a11025fa0 R15: 00007fff3b7b20e8 [ 234.506895][ T7911] [ 234.506899][ T7911] ERROR: Out of memory at tomoyo_realpath_from_path. [ 234.831825][ T7913] loop4: detected capacity change from 0 to 1024 [ 235.171107][ T7921] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.237396][ T7925] ip_tables: iptables: counters copy to user failed while replacing table [ 235.429502][ T7931] loop0: detected capacity change from 0 to 4096 [ 235.498913][ T7935] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.823875][ T5762] usb 6-1: USB disconnect, device number 3 [ 235.901831][ T7941] loop0: detected capacity change from 0 to 1024 [ 236.619087][ T7966] syz.0.674 uses obsolete (PF_INET,SOCK_PACKET) [ 237.045411][ T7982] Need at least one configuration in g1. [ 237.045483][ T7982] udc dummy_udc.0: failed to start g1: -22 [ 237.045495][ T7982] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 237.045935][ T7982] UDC core: g1: couldn't find an available UDC or it's busy [ 237.284335][ T7989] loop0: detected capacity change from 0 to 256 [ 237.445978][ T7991] loop4: detected capacity change from 0 to 2048 [ 237.507541][ T7991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.727621][ T7991] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.683: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 237.859382][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.937128][ T8001] loop5: detected capacity change from 0 to 128 [ 238.686698][ T8001] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 238.686736][ T8001] hpfs: filesystem error: improperly stopped [ 238.686745][ T8001] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 238.686752][ T8001] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 238.686759][ T8001] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 239.854822][ T8012] loop4: detected capacity change from 0 to 32768 [ 239.958626][ T8012] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 239.958643][ T8012] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.130244][ T8026] loop3: detected capacity change from 0 to 512 [ 240.268510][ T8012] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 240.307756][ T5762] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 240.307770][ T5762] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 240.408808][ T8030] loop0: detected capacity change from 0 to 2048 [ 240.452989][ T8030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.546738][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 240.570339][ T5762] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 262ms [ 240.570472][ T5762] gfs2: fsid=syz:syz.0: jid=0: Done [ 240.570502][ T8012] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 240.645825][ T5637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.755544][ T8041] netlink: 'syz.1.698': attribute type 12 has an invalid length. [ 240.755560][ T8041] netlink: 'syz.1.698': attribute type 29 has an invalid length. [ 240.755567][ T8041] netlink: 148 bytes leftover after parsing attributes in process `syz.1.698'. [ 241.988594][ T8012] gfs2: fsid=syz:syz.0: found 1 quota changes [ 242.062077][ T8055] loop5: detected capacity change from 0 to 256 [ 242.073428][ T8055] exfat: Deprecated parameter 'namecase' [ 242.177628][ T8055] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 242.599028][ T8066] netlink: 'syz.5.711': attribute type 12 has an invalid length. [ 242.599044][ T8066] netlink: 'syz.5.711': attribute type 29 has an invalid length. [ 242.599051][ T8066] netlink: 148 bytes leftover after parsing attributes in process `syz.5.711'. [ 242.721110][ T5769] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 242.892254][ T8070] ip_tables: iptables: counters copy to user failed while replacing table [ 243.893711][ T5769] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 243.894917][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.898011][ T5769] usb 1-1: config 0 descriptor?? [ 244.165870][ T5769] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 245.375169][ T5769] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 245.375187][ T5769] [drm] Initialized udl on minor 1 [ 245.414881][ T8089] loop5: detected capacity change from 0 to 256 [ 245.415500][ T8089] exfat: Deprecated parameter 'namecase' [ 245.473987][ T8089] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 245.703210][ T8091] loop1: detected capacity change from 0 to 512 [ 245.719483][ T8091] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.737457][ T8091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.787088][ T8091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.787155][ T8091] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.826687][ T8096] loop5: detected capacity change from 0 to 512 [ 245.889652][ T8096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.889741][ T8096] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.925493][ T8091] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.703: corrupted xattr block 33: invalid header [ 245.974901][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 246.059211][ T8104] ipvlan2: entered allmulticast mode [ 246.059229][ T8104] syz_tun: entered allmulticast mode [ 246.105745][ T8091] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 246.201550][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 246.205016][ T7262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.352064][ T10] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 246.357650][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.357667][ T10] usb 5-1: Product: syz [ 246.357675][ T10] usb 5-1: Manufacturer: syz [ 246.357683][ T10] usb 5-1: SerialNumber: syz [ 246.613288][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.724225][ T8107] netlink: 'syz.5.722': attribute type 12 has an invalid length. [ 246.724241][ T8107] netlink: 'syz.5.722': attribute type 29 has an invalid length. [ 246.724249][ T8107] netlink: 148 bytes leftover after parsing attributes in process `syz.5.722'. [ 247.051366][ T7559] usb 5-1: USB disconnect, device number 5 [ 247.096045][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.256870][ T8111] pimreg: entered allmulticast mode [ 247.281385][ T8111] pimreg: left allmulticast mode [ 248.414295][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 248.414473][ T10] ath9k_htc: Failed to initialize the device [ 248.435602][ T7559] usb 5-1: ath9k_htc: USB layer deinitialized [ 250.543197][ T5769] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 250.618158][ T5769] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 250.946538][ T5769] usb 1-1: USB disconnect, device number 9 [ 251.188977][ T8137] loop0: detected capacity change from 0 to 256 [ 251.189623][ T8137] exfat: Deprecated parameter 'namecase' [ 251.287355][ T8137] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 251.638545][ T8149] netlink: 'syz.0.733': attribute type 12 has an invalid length. [ 251.638561][ T8149] netlink: 'syz.0.733': attribute type 29 has an invalid length. [ 251.638568][ T8149] netlink: 148 bytes leftover after parsing attributes in process `syz.0.733'. [ 251.757772][ T8151] device-mapper: ioctl: The device has no table. [ 251.797481][ T8151] loop1: detected capacity change from 0 to 512 [ 251.827410][ T8151] EXT4-fs (loop1): Test dummy encryption mode enabled [ 251.827425][ T8151] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 251.827431][ T8151] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.872966][ T8151] EXT4-fs (loop1): 1 truncate cleaned up [ 251.873872][ T8151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.009478][ T8151] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 252.035030][ T8151] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 252.317080][ T5762] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 253.003718][ T5762] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 253.008366][ T5762] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.008385][ T5762] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.008395][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.008418][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 253.008432][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 253.083550][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.083566][ T5762] usb 1-1: Product: syz [ 253.083574][ T5762] usb 1-1: Manufacturer: syz [ 253.086959][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.134259][ T5762] cdc_wdm 1-1:1.0: skipping garbage [ 253.134274][ T5762] cdc_wdm 1-1:1.0: skipping garbage [ 253.205391][ T5762] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 253.205420][ T5762] cdc_wdm 1-1:1.0: Unknown control protocol [ 253.732918][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 253.732992][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 253.733275][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 253.733287][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 253.733425][ T7559] usb 1-1: USB disconnect, device number 10 [ 253.733466][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 253.733477][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 253.733485][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 254.011549][ T8181] loop3: detected capacity change from 0 to 256 [ 254.012190][ T8181] exfat: Deprecated parameter 'namecase' [ 254.083541][ T8181] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 254.333513][ T8183] loop1: detected capacity change from 0 to 4096 [ 254.347920][ T8183] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 254.423970][ T8183] ntfs3(loop1): Failed to load $Extend (-2). [ 254.423990][ T8183] ntfs3(loop1): Failed to initialize $Extend. [ 254.602737][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.745'. [ 254.861826][ T8192] loop0: detected capacity change from 0 to 2048 [ 254.901586][ T8192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.074949][ T5637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.211898][ T8213] loop4: detected capacity change from 0 to 256 [ 256.233811][ T8213] exfat: Deprecated parameter 'namecase' [ 256.249645][ T8214] loop3: detected capacity change from 0 to 512 [ 256.260724][ T5769] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 256.314925][ T8213] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 256.388548][ T8214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.388632][ T8214] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.441285][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 256.448633][ T5769] usb 2-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.463762][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.463778][ T5769] usb 2-1: Product: syz [ 256.463786][ T5769] usb 2-1: Manufacturer: syz [ 256.463793][ T5769] usb 2-1: SerialNumber: syz [ 256.496069][ T5769] usb 2-1: config 0 descriptor?? [ 256.542240][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.542277][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.921097][ T5769] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 256.956001][ T5769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.974418][ T5769] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 256.974469][ T5769] usb 2-1: media controller created [ 257.121513][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.143452][ T8206] dtv5100: wlen = 0, aborting. [ 257.147704][ T5769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.399697][ T5769] zl10353_read_register: readreg error (reg=127, ret==0) [ 257.399737][ T5769] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 257.399759][ T5769] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 257.440136][ T5769] usb 2-1: USB disconnect, device number 8 [ 257.484056][ T5659] udevd[5659]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 257.484128][ T5659] udevd[5659]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 257.582411][ T5769] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 257.606187][ T7614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.781630][ T8223] loop3: detected capacity change from 0 to 2048 [ 257.857639][ T8223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.089950][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.157306][ T7614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.222537][ T5651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.227165][ T5651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.229849][ T5651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.260117][ T7614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.273746][ T5651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.274130][ T5651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.544436][ T7614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.580087][ T8251] netlink: 224 bytes leftover after parsing attributes in process `syz.1.770'. [ 260.084039][ T8255] loop0: detected capacity change from 0 to 32768 [ 260.091188][ T8255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.771 (8255) [ 260.137924][ T8255] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.137948][ T8255] BTRFS info (device loop0): using crc32c checksum algorithm [ 260.283635][ T8255] BTRFS info (device loop0): enabling ssd optimizations [ 260.283655][ T8255] BTRFS info (device loop0): turning on flush-on-commit [ 260.283665][ T8255] BTRFS info (device loop0): enabling free space tree [ 260.283673][ T8255] BTRFS info (device loop0): enabling auto defrag [ 260.283683][ T8255] BTRFS info (device loop0): use lzo compression, level 1 [ 260.283693][ T8255] BTRFS info (device loop0): max_inline set to 4096 [ 260.393748][ T33] audit: type=1800 audit(1793473449.107:16): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.771" name="file1" dev="loop0" ino=260 res=0 errno=-22 [ 260.597316][ T8276] loop1: detected capacity change from 0 to 2048 [ 260.730367][ T8276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.782135][ T5762] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 260.893914][ T7614] bridge_slave_1: left allmulticast mode [ 260.893935][ T7614] bridge_slave_1: left promiscuous mode [ 260.919067][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.952702][ T5762] usb 4-1: Using ep0 maxpacket: 16 [ 260.965169][ T5762] usb 4-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 260.998134][ T7614] bridge_slave_0: left allmulticast mode [ 260.998153][ T7614] bridge_slave_0: left promiscuous mode [ 260.998305][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.036566][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.036584][ T5762] usb 4-1: Product: syz [ 261.036592][ T5762] usb 4-1: Manufacturer: syz [ 261.036599][ T5762] usb 4-1: SerialNumber: syz [ 261.055657][ T5762] usb 4-1: config 0 descriptor?? [ 261.135899][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.340918][ T4952] Bluetooth: hci3: command tx timeout [ 261.648933][ T5762] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 261.676623][ T5762] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.706888][ T5762] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 261.706925][ T5762] usb 4-1: media controller created [ 261.843747][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.875300][ T8278] dtv5100: wlen = 0, aborting. [ 262.137854][ T5762] zl10353_read_register: readreg error (reg=127, ret==0) [ 262.137921][ T5762] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 262.137931][ T5762] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 262.177062][ T5762] usb 4-1: USB disconnect, device number 9 [ 262.205445][ T8292] loop1: detected capacity change from 0 to 4096 [ 262.329523][ T8292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.452636][ T5762] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.946900][ T7614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.985248][ T7614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.017712][ T5637] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.035133][ T7614] bond0 (unregistering): Released all slaves [ 263.406844][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.422549][ T4952] Bluetooth: hci3: command tx timeout [ 264.664289][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 264.679700][ T8242] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.762083][ T8326] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 264.868343][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.884994][ T8326] team0: Port device netdevsim1 added [ 265.352226][ T8339] program syz.5.787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.502845][ T4952] Bluetooth: hci3: command tx timeout [ 265.714669][ T8346] program syz.3.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.935873][ T8351] loop5: detected capacity change from 0 to 2048 [ 266.034991][ T8351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.215626][ T7262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.417729][ T7614] hsr_slave_0: left promiscuous mode [ 266.431299][ T7614] hsr_slave_1: left promiscuous mode [ 266.431923][ T7614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.431937][ T7614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.459360][ T7614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.459379][ T7614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.485863][ T7614] veth1_macvtap: left promiscuous mode [ 266.485890][ T7614] veth0_macvtap: left promiscuous mode [ 266.485947][ T7614] veth1_vlan: left promiscuous mode [ 266.485986][ T7614] veth0_vlan: left promiscuous mode [ 267.630120][ T4952] Bluetooth: hci3: command tx timeout [ 268.607812][ T8375] program syz.1.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.016218][ T8384] loop1: detected capacity change from 0 to 2048 [ 269.063141][ T8384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.213226][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.266906][ T7614] team0 (unregistering): Port device team_slave_1 removed [ 270.106727][ T7614] team0 (unregistering): Port device team_slave_0 removed [ 270.543365][ T8393] FAULT_INJECTION: forcing a failure. [ 270.543365][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 270.543387][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.3.794 Not tainted syzkaller #0 PREEMPT(full) [ 270.543401][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 270.543408][ T8393] Call Trace: [ 270.543413][ T8393] [ 270.543418][ T8393] dump_stack_lvl+0xe8/0x150 [ 270.543442][ T8393] should_fail_ex+0x3eb/0x540 [ 270.543458][ T8393] should_failslab+0xa8/0x100 [ 270.543477][ T8393] ? __kernfs_new_node+0xe6/0x980 [ 270.543489][ T8393] kmem_cache_alloc_noprof+0x9c/0x600 [ 270.543504][ T8393] ? kstrdup+0x81/0x100 [ 270.543515][ T8393] ? __kernfs_new_node+0xe6/0x980 [ 270.543530][ T8393] __kernfs_new_node+0xe6/0x980 [ 270.543546][ T8393] ? __pfx___kernfs_new_node+0x10/0x10 [ 270.543557][ T8393] ? kernfs_root+0x1c/0x230 [ 270.543571][ T8393] ? kernfs_root+0x1c/0x230 [ 270.543581][ T8393] ? kernfs_root+0x1c/0x230 [ 270.543591][ T8393] ? kernfs_root+0x1c/0x230 [ 270.543604][ T8393] kernfs_create_dir_ns+0xf7/0x220 [ 270.543620][ T8393] sysfs_create_dir_ns+0x12f/0x2a0 [ 270.543640][ T8393] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 270.543659][ T8393] ? do_raw_spin_unlock+0xf5/0x200 [ 270.543672][ T8393] kobject_add_internal+0x622/0xcd0 [ 270.543687][ T8393] kobject_init_and_add+0x12b/0x1a0 [ 270.543699][ T8393] ? rcu_is_watching+0x16/0xb0 [ 270.543716][ T8393] ? __pfx_kobject_init_and_add+0x10/0x10 [ 270.543725][ T8393] ? __kasan_kmalloc+0x93/0xb0 [ 270.543749][ T8393] bus_add_driver+0x28b/0x6e0 [ 270.543770][ T8393] driver_register+0x23a/0x320 [ 270.543785][ T8393] usb_gadget_register_driver_owner+0xf9/0x270 [ 270.543804][ T8393] raw_ioctl+0x1541/0x41c0 [ 270.543829][ T8393] ? tomoyo_path_number_perm+0x219/0x5f0 [ 270.543851][ T8393] ? do_vfs_ioctl+0x116f/0x1530 [ 270.543870][ T8393] ? __pfx_raw_ioctl+0x10/0x10 [ 270.543898][ T8393] ? __fget_files+0x2a/0x420 [ 270.543915][ T8393] ? __fget_files+0x2a/0x420 [ 270.543928][ T8393] ? __fget_files+0x2a/0x420 [ 270.543945][ T8393] ? bpf_lsm_file_ioctl+0x9/0x20 [ 270.543960][ T8393] ? __pfx_raw_ioctl+0x10/0x10 [ 270.543971][ T8393] __se_sys_ioctl+0xfc/0x170 [ 270.543989][ T8393] do_syscall_64+0x166/0x520 [ 270.544002][ T8393] ? trace_irq_disable+0x3b/0x140 [ 270.544017][ T8393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.544028][ T8393] ? clear_bhb_loop+0x70/0xc0 [ 270.544041][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.544052][ T8393] RIP: 0033:0x7f66bd19f1eb [ 270.544063][ T8393] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 270.544073][ T8393] RSP: 002b:00007f66be041f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.544085][ T8393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f66bd19f1eb [ 270.544093][ T8393] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 270.544100][ T8393] RBP: 00007f66be042fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 270.544107][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.544113][ T8393] R13: 0000200000000800 R14: 0000000000000003 R15: 0000000000000000 [ 270.544129][ T8393] [ 270.674625][ T8393] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 270.674658][ T8393] UDC core: USB Raw Gadget: driver registration failed: -12 [ 270.674669][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 270.933716][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6 [ 271.265647][ T7614] IPVS: stop unused estimator thread 0... [ 271.609320][ T8408] program syz.3.808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.794934][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.809798][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.809921][ T8242] bridge_slave_0: entered allmulticast mode [ 271.827211][ T8242] bridge_slave_0: entered promiscuous mode [ 271.839627][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.839685][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.864016][ T8242] bridge_slave_1: entered allmulticast mode [ 271.876542][ T8242] bridge_slave_1: entered promiscuous mode [ 271.917080][ T8415] ip_tables: iptables: counters copy to user failed while replacing table [ 271.987892][ T8420] loop1: detected capacity change from 0 to 1024 [ 272.014951][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.037244][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.059373][ T8420] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 272.084638][ T8420] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 272.085624][ T8420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.173392][ T8420] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.257319][ T8242] team0: Port device team_slave_0 added [ 272.279330][ T8242] team0: Port device team_slave_1 added [ 273.099091][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.222501][ T8435] loop5: detected capacity change from 0 to 1024 [ 273.256368][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.256380][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.256395][ T8242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.334727][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.334739][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.334753][ T8242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.698120][ T8436] loop1: detected capacity change from 0 to 65536 [ 273.751801][ T8431] loop3: detected capacity change from 0 to 4096 [ 273.756986][ T8436] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 273.827239][ T8436] XFS (loop1): Ending clean mount [ 273.977326][ T8242] hsr_slave_0: entered promiscuous mode [ 273.997707][ T8242] hsr_slave_1: entered promiscuous mode [ 273.998112][ T8242] debugfs: 'hsr0' already exists in 'hsr' [ 273.998121][ T8242] Cannot create hsr debugfs directory [ 274.038780][ T8431] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 274.059551][ T8431] ntfs3(loop3): Failed to load $Extend (-22). [ 274.059569][ T8431] ntfs3(loop3): Failed to initialize $Extend. [ 274.091911][ T5636] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 274.272333][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 274.444931][ T10] usb 6-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 274.448037][ T10] usb 6-1: config index 0 descriptor too short (expected 4257, got 161) [ 274.448083][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.448105][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.704953][ T5635] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 274.782703][ T10] usb 6-1: string descriptor 0 read error: -71 [ 274.804741][ T10] uvcvideo 6-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 274.804838][ T10] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 274.804887][ T10] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 274.939260][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7 [ 274.982210][ T10] usb 6-1: USB disconnect, device number 4 [ 275.530784][ T5769] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.681002][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 275.682241][ T5769] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.699659][ T5769] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.699678][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.738061][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.738084][ T5769] usb 4-1: Product: syz [ 275.738093][ T5769] usb 4-1: Manufacturer: syz [ 275.738101][ T5769] usb 4-1: SerialNumber: syz [ 275.801070][ T8242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.803559][ T5769] usb 4-1: config 0 descriptor?? [ 275.826090][ T5769] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.829165][ T8242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.829725][ T8242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.862915][ T5769] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 275.889617][ T8242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.890262][ T8242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.920341][ T8242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.937883][ T8242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.966577][ T8242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.027310][ T8467] FAULT_INJECTION: forcing a failure. [ 276.027310][ T8467] name , interval 1, probability 0, space 0, times 1 [ 276.027332][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.5.823 Not tainted syzkaller #0 PREEMPT(full) [ 276.027346][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 276.027354][ T8467] Call Trace: [ 276.027359][ T8467] [ 276.027365][ T8467] dump_stack_lvl+0xe8/0x150 [ 276.027390][ T8467] should_fail_ex+0x3eb/0x540 [ 276.027409][ T8467] null_queue_rq+0x334/0xe70 [ 276.027435][ T8467] blk_mq_dispatch_rq_list+0x499/0x1990 [ 276.027462][ T8467] ? sbitmap_get+0x229/0x390 [ 276.027475][ T8467] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 276.027499][ T8467] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 276.027521][ T8467] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 276.027545][ T8467] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 276.027558][ T8467] ? lock_acquire+0x115/0x350 [ 276.027576][ T8467] ? lock_acquire+0x115/0x350 [ 276.027597][ T8467] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 276.027610][ T8467] ? blk_mq_run_hw_queue+0x236/0x4e0 [ 276.027626][ T8467] blk_mq_run_hw_queue+0x3fc/0x4e0 [ 276.027643][ T8467] blk_mq_dispatch_list+0xd0c/0xe10 [ 276.027657][ T8467] ? blk_mq_dispatch_list+0x230/0xe10 [ 276.027670][ T8467] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 276.027681][ T8467] ? __asan_memset+0x22/0x50 [ 276.027696][ T8467] ? bfq_prepare_request+0x73/0x80 [ 276.027712][ T8467] ? __pfx_bfq_prepare_request+0x10/0x10 [ 276.027729][ T8467] blk_mq_flush_plug_list+0x45f/0x540 [ 276.027744][ T8467] ? update_io_ticks+0x22d/0x280 [ 276.027760][ T8467] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 276.027771][ T8467] ? __pfx_update_io_ticks+0x10/0x10 [ 276.027793][ T8467] blk_add_rq_to_plug+0x17c/0x550 [ 276.027809][ T8467] ? blk_account_io_start+0x57c/0x8c0 [ 276.027828][ T8467] blk_mq_submit_bio+0x1c65/0x2c40 [ 276.027841][ T8467] ? blk_mq_submit_bio+0x490/0x2c40 [ 276.027852][ T8467] ? iov_iter_advance+0x8b/0x1e0 [ 276.027867][ T8467] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 276.027876][ T8467] ? blk_cgroup_bio_start+0x5d7/0x670 [ 276.027891][ T8467] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 276.027906][ T8467] ? __submit_bio+0x7e/0x340 [ 276.027918][ T8467] submit_bio_noacct_nocheck+0x358/0xb10 [ 276.027938][ T8467] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 276.027965][ T8467] __blkdev_direct_IO+0xa05/0x1100 [ 276.027987][ T8467] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 276.028003][ T8467] ? filemap_write_and_wait_range+0x1e9/0x3f0 [ 276.028021][ T8467] blkdev_direct_IO+0x770/0x1840 [ 276.028038][ T8467] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 276.028050][ T8467] ? inode_set_ctime_current+0x287/0xb60 [ 276.028073][ T8467] ? irqentry_exit+0x2a0/0x9b0 [ 276.028087][ T8467] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.028101][ T8467] ? irqentry_exit+0x2a0/0x9b0 [ 276.028121][ T8467] ? trace_irq_disable+0x3b/0x140 [ 276.028145][ T8467] ? kiocb_invalidate_pages+0xfb/0x140 [ 276.028163][ T8467] blkdev_direct_write+0x7c/0x140 [ 276.028178][ T8467] blkdev_write_iter+0x584/0x820 [ 276.028196][ T8467] vfs_write+0x612/0xba0 [ 276.028217][ T8467] ? __pfx_vfs_write+0x10/0x10 [ 276.028235][ T8467] ? __fget_files+0x3a2/0x420 [ 276.028249][ T8467] ? __fget_files+0x2a/0x420 [ 276.028264][ T8467] ? fdget+0x1ac/0x250 [ 276.028281][ T8467] ksys_write+0x150/0x270 [ 276.028297][ T8467] ? __pfx_ksys_write+0x10/0x10 [ 276.028318][ T8467] do_syscall_64+0x166/0x520 [ 276.028331][ T8467] ? trace_irq_disable+0x3b/0x140 [ 276.028346][ T8467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.028357][ T8467] ? clear_bhb_loop+0x70/0xc0 [ 276.028370][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.028381][ T8467] RIP: 0033:0x7fb05d59f559 [ 276.028397][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.028408][ T8467] RSP: 002b:00007fb05e3d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.028421][ T8467] RAX: ffffffffffffffda RBX: 00007fb05d825fa0 RCX: 00007fb05d59f559 [ 276.028430][ T8467] RDX: 00000000fffffe38 RSI: 000020000002f900 RDI: 0000000000000005 [ 276.028438][ T8467] RBP: 00007fb05d636b50 R08: 0000000000000000 R09: 0000000000000000 [ 276.028445][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.028453][ T8467] R13: 00007fb05d826038 R14: 00007fb05d825fa0 R15: 00007ffdb9518cf8 [ 276.028472][ T8467] [ 276.625983][ T8477] loop0: detected capacity change from 0 to 1024 [ 276.762981][ T5769] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 276.764972][ T5769] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 276.766211][ T5769] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 276.766240][ T5769] em28xx 4-1:0.0: No AC97 audio processor [ 276.827959][ T5769] usb 4-1: USB disconnect, device number 10 [ 276.854727][ T5769] em28xx 4-1:0.0: Disconnecting em28xx [ 276.933915][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.012267][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.016659][ T5769] em28xx: Freeing device [ 277.062400][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.062475][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.089272][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.089333][ T7671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.232028][ T8483] netlink: 'syz.5.824': attribute type 1 has an invalid length. [ 278.178818][ T8486] bond1: (slave veth0_to_bond): making interface the new active one [ 278.222416][ T8486] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 278.675820][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8 [ 278.690840][ T8504] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 280.314968][ T8513] vivid-002: ================= START STATUS ================= [ 280.315005][ T8513] vivid-002: Radio HW Seek Mode: Bounded [ 280.315023][ T8513] vivid-002: Radio Programmable HW Seek: false [ 280.315034][ T8513] vivid-002: RDS Rx I/O Mode: Block I/O [ 280.315044][ T8513] vivid-002: Generate RBDS Instead of RDS: false [ 280.315054][ T8513] vivid-002: RDS Reception: true [ 280.315064][ T8513] vivid-002: RDS Program Type: 0 inactive [ 280.315077][ T8513] vivid-002: RDS PS Name: inactive [ 280.315089][ T8513] vivid-002: RDS Radio Text: inactive [ 280.315101][ T8513] vivid-002: RDS Traffic Announcement: false inactive [ 280.315114][ T8513] vivid-002: RDS Traffic Program: false inactive [ 280.315125][ T8513] vivid-002: RDS Music: false inactive [ 280.315138][ T8513] vivid-002: ================== END STATUS ================== [ 281.979917][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.010280][ T8546] loop1: detected capacity change from 0 to 512 [ 282.027400][ T8546] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.027428][ T8546] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 282.027451][ T8546] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 282.065830][ T8548] loop0: detected capacity change from 0 to 1024 [ 282.107896][ T8546] EXT4-fs (loop1): 1 truncate cleaned up [ 282.120477][ T8546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.267296][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.663855][ T8554] loop1: detected capacity change from 0 to 32768 [ 282.707764][ T8554] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 282.707778][ T8554] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 282.752094][ T8554] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 282.761331][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 282.761345][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 283.042973][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 281ms [ 283.043114][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done [ 283.043145][ T8554] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 283.253515][ T33] audit: type=1800 audit(1793473471.967:17): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.840" name="file1" dev="loop1" ino=9378 res=0 errno=-22 [ 283.700281][ T8242] veth0_vlan: entered promiscuous mode [ 283.745606][ T8242] veth1_vlan: entered promiscuous mode [ 283.843386][ T8242] veth0_macvtap: entered promiscuous mode [ 283.867547][ T8242] veth1_macvtap: entered promiscuous mode [ 283.878158][ T8573] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 283.903412][ T8576] loop0: detected capacity change from 0 to 1024 [ 283.904103][ T8576] EXT4-fs: Ignoring removed bh option [ 283.931486][ T8576] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 283.971864][ T8576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.024406][ T8576] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.846: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 284.111635][ T8579] bond5: (slave veth0_to_bond): making interface the new active one [ 284.125968][ T8576] EXT4-fs (loop0): Remounting filesystem read-only [ 284.129623][ T8579] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 284.193194][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.198917][ T8571] FAULT_INJECTION: forcing a failure. [ 284.198917][ T8571] name failslab, interval 1, probability 0, space 0, times 0 [ 284.198939][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.5.845 Not tainted syzkaller #0 PREEMPT(full) [ 284.198953][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 284.198960][ T8571] Call Trace: [ 284.198965][ T8571] [ 284.198970][ T8571] dump_stack_lvl+0xe8/0x150 [ 284.198993][ T8571] should_fail_ex+0x3eb/0x540 [ 284.199011][ T8571] should_failslab+0xa8/0x100 [ 284.199030][ T8571] __kmalloc_noprof+0xf9/0x710 [ 284.199044][ T8571] ? __kmalloc_cache_noprof+0x148/0x600 [ 284.199060][ T8571] ? slhc_init+0xab/0x750 [ 284.199072][ T8571] ? slhc_init+0xab/0x750 [ 284.199089][ T8571] slhc_init+0xab/0x750 [ 284.199104][ T8571] slip_open+0x744/0xe60 [ 284.199130][ T8571] ? __pfx_slip_open+0x10/0x10 [ 284.199145][ T8571] ? up_write+0x19d/0x4a0 [ 284.199159][ T8571] tty_ldisc_open+0xa1/0x100 [ 284.199175][ T8571] tty_set_ldisc+0x365/0x540 [ 284.199190][ T8571] tty_ioctl+0xc30/0xde0 [ 284.199205][ T8571] ? __pfx_tty_ioctl+0x10/0x10 [ 284.199218][ T8571] __se_sys_ioctl+0xfc/0x170 [ 284.199238][ T8571] do_syscall_64+0x166/0x520 [ 284.199252][ T8571] ? trace_irq_disable+0x3b/0x140 [ 284.199267][ T8571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.199278][ T8571] ? clear_bhb_loop+0x70/0xc0 [ 284.199292][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.199303][ T8571] RIP: 0033:0x7fb05d59f559 [ 284.199316][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.199326][ T8571] RSP: 002b:00007fb05e3d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.199338][ T8571] RAX: ffffffffffffffda RBX: 00007fb05d825fa0 RCX: 00007fb05d59f559 [ 284.199346][ T8571] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 284.199354][ T8571] RBP: 00007fb05d636b50 R08: 0000000000000000 R09: 0000000000000000 [ 284.199360][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.199367][ T8571] R13: 00007fb05d826038 R14: 00007fb05d825fa0 R15: 00007ffdb9518cf8 [ 284.199385][ T8571] [ 284.370698][ T8576] random: crng reseeded on system resumption [ 284.509666][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.601973][ T5989] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.602002][ T5989] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.602021][ T5989] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.602039][ T5989] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.877290][ T7790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.877304][ T7790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.907823][ T5637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.016352][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.016368][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.179685][ T8602] batman_adv: batadv0: Adding interface: veth0 [ 285.179698][ T8602] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.179715][ T8602] batman_adv: batadv0: Interface activated: veth0 [ 285.241609][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.241628][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.246488][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.246505][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.286927][ T8602] batman_adv: batadv0: Interface deactivated: veth0 [ 285.286943][ T8602] batman_adv: batadv0: Removing interface: veth0 [ 286.423062][ T8614] loop3: detected capacity change from 0 to 64 [ 286.515353][ T33] audit: type=1800 audit(1793473475.227:18): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.855" name="file1" dev="loop3" ino=5 res=0 errno=-22 [ 286.749655][ T8613] loop5: detected capacity change from 0 to 32768 [ 286.799009][ T8613] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 286.799022][ T8613] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 286.846008][ T8613] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 286.858573][ T5641] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 286.858585][ T5641] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 286.972992][ T8621] Bluetooth: MGMT ver 1.23 [ 287.070490][ T8624] loop0: detected capacity change from 0 to 1024 [ 287.071534][ T8621] loop1: detected capacity change from 0 to 1024 [ 287.233227][ T5641] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 374ms [ 287.455913][ T8626] loop3: detected capacity change from 0 to 32768 [ 287.510277][ T5641] gfs2: fsid=syz:syz.0: jid=0: Done [ 287.510305][ T8613] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 287.520399][ T8626] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 287.520417][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.3.859 Not tainted syzkaller #0 PREEMPT(full) [ 287.520432][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 287.520439][ T8626] Call Trace: [ 287.520444][ T8626] [ 287.520449][ T8626] dump_stack_lvl+0xe8/0x150 [ 287.520473][ T8626] sysfs_create_dir_ns+0x271/0x2a0 [ 287.520495][ T8626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 287.520514][ T8626] ? do_raw_spin_unlock+0xf5/0x200 [ 287.520532][ T8626] kobject_add_internal+0x622/0xcd0 [ 287.520549][ T8626] kobject_init_and_add+0x12b/0x1a0 [ 287.520568][ T8626] ? __pfx_kobject_init_and_add+0x10/0x10 [ 287.520581][ T8626] ? __raw_spin_lock_init+0x45/0x100 [ 287.520593][ T8626] ? __init_swait_queue_head+0xa8/0x150 [ 287.520612][ T8626] gfs2_sys_fs_add+0x257/0x480 [ 287.520628][ T8626] ? is_dynamic_key+0x1aa/0x1c0 [ 287.520643][ T8626] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 287.520688][ T8626] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 287.520710][ T8626] gfs2_fill_super+0x1333/0x20b0 [ 287.520731][ T8626] ? __pfx_gfs2_fill_super+0x10/0x10 [ 287.520748][ T8626] ? sb_set_blocksize+0x155/0x240 [ 287.520765][ T8626] ? setup_bdev_super+0x58b/0x680 [ 287.520783][ T8626] get_tree_bdev_flags+0x436/0x500 [ 287.520799][ T8626] ? __pfx_gfs2_fill_super+0x10/0x10 [ 287.520813][ T8626] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 287.520834][ T8626] gfs2_get_tree+0x51/0x1e0 [ 287.520849][ T8626] vfs_get_tree+0x92/0x2a0 [ 287.520865][ T8626] do_new_mount+0x325/0xb00 [ 287.520882][ T8626] ? __pfx_do_new_mount+0x10/0x10 [ 287.520896][ T8626] ? ns_capable+0x84/0xe0 [ 287.520911][ T8626] ? path_mount+0x647/0x1050 [ 287.520926][ T8626] ? user_path_at+0xd4/0x160 [ 287.520942][ T8626] __se_sys_mount+0x31d/0x420 [ 287.520958][ T8626] ? __pfx___se_sys_mount+0x10/0x10 [ 287.520975][ T8626] ? __x64_sys_mount+0x20/0xc0 [ 287.520989][ T8626] do_syscall_64+0x166/0x520 [ 287.521002][ T8626] ? trace_irq_disable+0x3b/0x140 [ 287.521017][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.521028][ T8626] ? clear_bhb_loop+0x70/0xc0 [ 287.521041][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.521052][ T8626] RIP: 0033:0x7f66bd1a07ca [ 287.521063][ T8626] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.521073][ T8626] RSP: 002b:00007f66be043e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.521086][ T8626] RAX: ffffffffffffffda RBX: 00007f66be043ee0 RCX: 00007f66bd1a07ca [ 287.521094][ T8626] RDX: 00002000000004c0 RSI: 0000200000000500 RDI: 00007f66be043ea0 [ 287.521102][ T8626] RBP: 00002000000004c0 R08: 00007f66be043ee0 R09: 0000000001010084 [ 287.521109][ T8626] R10: 0000000001010084 R11: 0000000000000246 R12: 0000200000000500 [ 287.521116][ T8626] R13: 00007f66be043ea0 R14: 0000000000037f92 R15: 0000200000000600 [ 287.521133][ T8626] [ 287.521227][ T8626] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 287.521237][ T8626] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 288.140049][ T33] audit: type=1800 audit(1793473476.847:19): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.854" name="file1" dev="loop5" ino=9378 res=0 errno=-22 [ 288.990803][ T7559] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 289.150094][ T7559] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 289.162630][ T7559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.181509][ T7559] usb 4-1: config 0 descriptor?? [ 289.300724][ T8646] mmap: syz.1.865 (8646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 289.401109][ T7559] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 290.475518][ T7559] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 290.475536][ T7559] [drm] Initialized udl on minor 1 [ 290.600275][ T7559] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 290.600862][ T7559] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 290.637787][ T7559] usb 4-1: USB disconnect, device number 11 [ 290.662611][ T5641] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 291.780638][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 291.932593][ T10] usb 7-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 291.945155][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.945173][ T10] usb 7-1: config 0 has no interface number 0 [ 291.964633][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.964649][ T10] usb 7-1: Product: syz [ 291.964657][ T10] usb 7-1: Manufacturer: syz [ 291.964665][ T10] usb 7-1: SerialNumber: syz [ 291.991486][ T10] usb 7-1: config 0 descriptor?? [ 292.038837][ T10] usb 7-1: selecting invalid altsetting 1 [ 292.039580][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 292.039592][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 292.097653][ T8667] loop3: detected capacity change from 0 to 512 [ 292.535965][ T10] DVB: Unable to find symbol stv0299_attach() [ 292.694231][ T10] DVB: Unable to find symbol tda8083_attach() [ 292.694242][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 292.716535][ T10] usb 7-1: USB disconnect, device number 2 [ 293.254142][ T8693] overlayfs: overlapping lowerdir path [ 294.750875][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 294.962901][ T10] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 294.968197][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.998348][ T10] usb 4-1: config 0 descriptor?? [ 295.094048][ T33] audit: type=1326 audit(1793473483.807:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.6.887" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e1d9f559 code=0x0 [ 295.151258][ T8723] batman_adv: batadv0: Adding interface: veth0 [ 295.151272][ T8723] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.151289][ T8723] batman_adv: batadv0: Interface activated: veth0 [ 295.219187][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 295.575701][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 295.575719][ T10] [drm] Initialized udl on minor 1 [ 295.664135][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.664412][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.701597][ T7559] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.708983][ T10] usb 4-1: USB disconnect, device number 12 [ 295.783152][ T7559] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.898301][ T8741] loop1: detected capacity change from 0 to 16 [ 295.929945][ T8741] erofs (device loop1): mounted with root inode @ nid 36. [ 295.998584][ T8741] syz.1.893: attempt to access beyond end of device [ 295.998584][ T8741] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 295.998743][ T8741] erofs (device loop1): read error -5 @ 0 of nid 36 [ 296.055883][ T8741] syz.1.893: attempt to access beyond end of device [ 296.055883][ T8741] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 296.056032][ T8741] erofs (device loop1): read error -5 @ 0 of nid 36 [ 296.295982][ T8751] loop5: detected capacity change from 0 to 512 [ 296.438296][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.895'. [ 296.704337][ T33] audit: type=1326 audit(1793473485.417:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.3.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66bd19f559 code=0x0 [ 296.957645][ T8766] loop5: detected capacity change from 0 to 128 [ 296.984891][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.902'. [ 296.986302][ T8766] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 296.986336][ T8766] hpfs: filesystem error: improperly stopped [ 296.986345][ T8766] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 296.986353][ T8766] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 296.986359][ T8766] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 297.204413][ T8734] loop0: detected capacity change from 0 to 32768 [ 297.318306][ T8734] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 297.318321][ T8734] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 297.363798][ T8776] batman_adv: batadv0: Adding interface: veth0 [ 297.363811][ T8776] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.363829][ T8776] batman_adv: batadv0: Interface activated: veth0 [ 297.497203][ T8734] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 297.534684][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 297.534699][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 297.793127][ T8786] loop3: detected capacity change from 0 to 16 [ 297.857762][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 323ms [ 297.857877][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 297.858114][ T8734] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 297.859844][ T8786] erofs (device loop3): mounted with root inode @ nid 36. [ 297.938302][ T8786] syz.3.908: attempt to access beyond end of device [ 297.938302][ T8786] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 297.938469][ T8786] erofs (device loop3): read error -5 @ 0 of nid 36 [ 298.006599][ T8786] syz.3.908: attempt to access beyond end of device [ 298.006599][ T8786] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 298.006755][ T8786] erofs (device loop3): read error -5 @ 0 of nid 36 [ 298.429839][ T8804] loop1: detected capacity change from 0 to 512 [ 298.543981][ T8734] gfs2: fsid=syz:syz.0: found 1 quota changes [ 298.605807][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 298.911573][ T8783] loop6: detected capacity change from 0 to 32768 [ 298.946271][ T8783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.906 (8783) [ 299.990129][ T8783] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.990153][ T8783] BTRFS info (device loop6): using crc32c checksum algorithm [ 300.110103][ T8814] loop3: detected capacity change from 0 to 1024 [ 300.428553][ T8783] BTRFS info (device loop6): enabling ssd optimizations [ 300.428571][ T8783] BTRFS info (device loop6): turning on flush-on-commit [ 300.428581][ T8783] BTRFS info (device loop6): enabling free space tree [ 300.428590][ T8783] BTRFS info (device loop6): enabling auto defrag [ 300.428599][ T8783] BTRFS info (device loop6): use lzo compression, level 1 [ 300.428610][ T8783] BTRFS info (device loop6): max_inline set to 7 [ 300.665891][ T8242] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.067289][ T8849] netlink: 17 bytes leftover after parsing attributes in process `syz.5.923'. [ 301.087655][ T8845] loop3: detected capacity change from 0 to 16 [ 301.109967][ T8845] erofs (device loop3): mounted with root inode @ nid 36. [ 301.156984][ T8845] syz.3.922: attempt to access beyond end of device [ 301.156984][ T8845] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 301.157138][ T8845] erofs (device loop3): read error -5 @ 0 of nid 36 [ 301.274002][ T8845] syz.3.922: attempt to access beyond end of device [ 301.274002][ T8845] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 301.274167][ T8845] erofs (device loop3): read error -5 @ 0 of nid 36 [ 301.320252][ T8842] FAULT_INJECTION: forcing a failure. [ 301.320252][ T8842] name failslab, interval 1, probability 0, space 0, times 0 [ 301.320288][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.0.915 Not tainted syzkaller #0 PREEMPT(full) [ 301.320302][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.320313][ T8842] Call Trace: [ 301.320318][ T8842] [ 301.320323][ T8842] dump_stack_lvl+0xe8/0x150 [ 301.320346][ T8842] should_fail_ex+0x3eb/0x540 [ 301.320363][ T8842] should_failslab+0xa8/0x100 [ 301.320381][ T8842] ? __kernfs_new_node+0xe6/0x980 [ 301.320394][ T8842] kmem_cache_alloc_noprof+0x9c/0x600 [ 301.320410][ T8842] ? __kernfs_new_node+0xe6/0x980 [ 301.320424][ T8842] ? kernfs_add_one+0xfc/0x510 [ 301.320438][ T8842] __kernfs_new_node+0xe6/0x980 [ 301.320448][ T8842] ? up_write+0x19d/0x4a0 [ 301.320458][ T8842] ? kernfs_activate_one+0x22d/0x340 [ 301.320473][ T8842] ? __pfx___kernfs_new_node+0x10/0x10 [ 301.320483][ T8842] ? lock_acquire+0x115/0x350 [ 301.320496][ T8842] ? kernfs_root+0x1c/0x230 [ 301.320511][ T8842] ? kernfs_root+0x1c/0x230 [ 301.320520][ T8842] ? kernfs_root+0x1c/0x230 [ 301.320530][ T8842] ? kernfs_root+0x1c/0x230 [ 301.320543][ T8842] kernfs_new_node+0xeb/0x140 [ 301.320557][ T8842] __kernfs_create_file+0x4b/0x2e0 [ 301.320573][ T8842] sysfs_add_file_mode_ns+0x237/0x300 [ 301.320593][ T8842] sysfs_create_file_ns+0x12b/0x1b0 [ 301.320610][ T8842] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 301.320626][ T8842] ? __dev_fwnode+0x50/0x80 [ 301.320638][ T8842] ? device_create_file+0xf4/0x1b0 [ 301.320650][ T8842] device_add+0x432/0xb80 [ 301.320663][ T8842] netdev_register_kobject+0x197/0x350 [ 301.320684][ T8842] register_netdevice+0x17be/0x2280 [ 301.320708][ T8842] ? __pfx_register_netdevice+0x10/0x10 [ 301.320725][ T8842] ? rcu_is_watching+0x16/0xb0 [ 301.320741][ T8842] ? kfree+0x4d/0x650 [ 301.320752][ T8842] ? __local_bh_enable_ip+0xd6/0x140 [ 301.320773][ T8842] slip_open+0xbbb/0xe60 [ 301.320793][ T8842] ? __pfx_slip_open+0x10/0x10 [ 301.320806][ T8842] ? up_write+0x19d/0x4a0 [ 301.320819][ T8842] tty_ldisc_open+0xa1/0x100 [ 301.320834][ T8842] tty_set_ldisc+0x365/0x540 [ 301.320849][ T8842] tty_ioctl+0xc30/0xde0 [ 301.320864][ T8842] ? __pfx_tty_ioctl+0x10/0x10 [ 301.320877][ T8842] __se_sys_ioctl+0xfc/0x170 [ 301.320895][ T8842] do_syscall_64+0x166/0x520 [ 301.320909][ T8842] ? trace_irq_disable+0x3b/0x140 [ 301.320924][ T8842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.320936][ T8842] ? clear_bhb_loop+0x70/0xc0 [ 301.320949][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.320960][ T8842] RIP: 0033:0x7f185299f559 [ 301.320972][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.320981][ T8842] RSP: 002b:00007f18538af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.320994][ T8842] RAX: ffffffffffffffda RBX: 00007f1852c25fa0 RCX: 00007f185299f559 [ 301.321009][ T8842] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 301.321017][ T8842] RBP: 00007f1852a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 301.321024][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.321030][ T8842] R13: 00007f1852c26038 R14: 00007f1852c25fa0 R15: 00007fffa8d1fda8 [ 301.321049][ T8842] [ 302.070657][ T7559] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 302.113534][ T8863] FAULT_INJECTION: forcing a failure. [ 302.113534][ T8863] name failslab, interval 1, probability 0, space 0, times 0 [ 302.113554][ T8863] CPU: 0 UID: 0 PID: 8863 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT(full) [ 302.113568][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.113576][ T8863] Call Trace: [ 302.113580][ T8863] [ 302.113586][ T8863] dump_stack_lvl+0xe8/0x150 [ 302.113609][ T8863] should_fail_ex+0x3eb/0x540 [ 302.113627][ T8863] should_failslab+0xa8/0x100 [ 302.113647][ T8863] __kmalloc_cache_noprof+0x9e/0x600 [ 302.113663][ T8863] ? bus_add_driver+0x19d/0x6e0 [ 302.113679][ T8863] ? bus_add_driver+0x19d/0x6e0 [ 302.113697][ T8863] bus_add_driver+0x19d/0x6e0 [ 302.113718][ T8863] driver_register+0x23a/0x320 [ 302.113733][ T8863] usb_gadget_register_driver_owner+0xf9/0x270 [ 302.113752][ T8863] raw_ioctl+0x1541/0x41c0 [ 302.113768][ T8863] ? tomoyo_path_number_perm+0x219/0x5f0 [ 302.113788][ T8863] ? do_vfs_ioctl+0x116f/0x1530 [ 302.113806][ T8863] ? __pfx_raw_ioctl+0x10/0x10 [ 302.113835][ T8863] ? __fget_files+0x2a/0x420 [ 302.113857][ T8863] ? __fget_files+0x2a/0x420 [ 302.113871][ T8863] ? __fget_files+0x2a/0x420 [ 302.113887][ T8863] ? bpf_lsm_file_ioctl+0x9/0x20 [ 302.113904][ T8863] ? __pfx_raw_ioctl+0x10/0x10 [ 302.113915][ T8863] __se_sys_ioctl+0xfc/0x170 [ 302.113933][ T8863] do_syscall_64+0x166/0x520 [ 302.113947][ T8863] ? trace_irq_disable+0x3b/0x140 [ 302.113962][ T8863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.113973][ T8863] ? clear_bhb_loop+0x70/0xc0 [ 302.113986][ T8863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.113997][ T8863] RIP: 0033:0x7f185299f1eb [ 302.114008][ T8863] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 302.114018][ T8863] RSP: 002b:00007f18538acf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.114030][ T8863] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f185299f1eb [ 302.114038][ T8863] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 302.114044][ T8863] RBP: 00007f18538adfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 302.114051][ T8863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.114058][ T8863] R13: 0000200000000800 R14: 0000000000000003 R15: 0000000000000000 [ 302.114074][ T8863] [ 302.114078][ T8863] UDC core: USB Raw Gadget: driver registration failed: -12 [ 302.114089][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 302.283547][ T7559] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 302.396947][ T7559] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 302.396965][ T7559] usb 6-1: config 1 has no interface number 0 [ 302.452825][ T7559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.452844][ T7559] usb 6-1: Product: syz [ 302.452851][ T7559] usb 6-1: Manufacturer: syz [ 302.452859][ T7559] usb 6-1: SerialNumber: syz [ 302.516903][ T7559] usb 6-1: 3:0 : does not exist [ 302.516920][ T7559] usb 6-1: 3:0 : does not exist [ 302.660411][ T8865] loop3: detected capacity change from 0 to 512 [ 302.846641][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 302.891646][ T7559] usb 6-1: USB disconnect, device number 5 [ 302.997941][ T8875] FAULT_INJECTION: forcing a failure. [ 302.997941][ T8875] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 302.997963][ T8875] CPU: 0 UID: 0 PID: 8875 Comm: syz.6.931 Not tainted syzkaller #0 PREEMPT(full) [ 302.997977][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.997985][ T8875] Call Trace: [ 302.997989][ T8875] [ 302.997995][ T8875] dump_stack_lvl+0xe8/0x150 [ 302.998018][ T8875] should_fail_ex+0x3eb/0x540 [ 302.998035][ T8875] _copy_from_user+0x2d/0xb0 [ 302.998050][ T8875] copy_from_sockptr+0x5e/0x90 [ 302.998068][ T8875] packet_setsockopt+0xbeb/0x1510 [ 302.998084][ T8875] ? __pfx_packet_setsockopt+0x10/0x10 [ 302.998105][ T8875] ? aa_sk_perm+0x6ff/0x8f0 [ 302.998126][ T8875] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.998143][ T8875] ? aa_sock_opt_perm+0x142/0x1e0 [ 302.998163][ T8875] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 302.998177][ T8875] ? __pfx_packet_setsockopt+0x10/0x10 [ 302.998192][ T8875] do_sock_setsockopt+0x17c/0x1b0 [ 302.998207][ T8875] __x64_sys_setsockopt+0x13d/0x1b0 [ 302.998222][ T8875] do_syscall_64+0x166/0x520 [ 302.998243][ T8875] ? trace_irq_disable+0x3b/0x140 [ 302.998258][ T8875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.998270][ T8875] ? clear_bhb_loop+0x70/0xc0 [ 302.998283][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.998295][ T8875] RIP: 0033:0x7f35e1d9f559 [ 302.998306][ T8875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.998315][ T8875] RSP: 002b:00007f35e2beb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.998327][ T8875] RAX: ffffffffffffffda RBX: 00007f35e2025fa0 RCX: 00007f35e1d9f559 [ 302.998336][ T8875] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 302.998342][ T8875] RBP: 00007f35e1e36b50 R08: 0000000000000004 R09: 0000000000000000 [ 302.998349][ T8875] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 302.998356][ T8875] R13: 00007f35e2026038 R14: 00007f35e2025fa0 R15: 00007ffe02fd6818 [ 302.998372][ T8875] [ 303.327304][ T8561] udevd[8561]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 303.990052][ T8899] loop3: detected capacity change from 0 to 1024 [ 304.024405][ T8899] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 304.042000][ T8899] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 304.042896][ T8899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.108671][ T8899] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.233314][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.674770][ T8920] loop3: detected capacity change from 0 to 1024 [ 304.690597][ T8920] EXT4-fs: Ignoring removed bh option [ 304.700646][ T4952] Bluetooth: hci4: command 0x0406 tx timeout [ 304.719888][ T8920] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 304.775362][ T8920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.820806][ T8920] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #12: block 7: comm syz.3.947: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 304.843677][ T8920] EXT4-fs (loop3): Remounting filesystem read-only [ 304.968365][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.392927][ T8938] loop3: detected capacity change from 0 to 1024 [ 308.286333][ T8961] loop0: detected capacity change from 0 to 1024 [ 308.652388][ T8968] loop1: detected capacity change from 0 to 1024 [ 308.674658][ T8968] EXT4-fs: Ignoring removed bh option [ 308.686209][ T8968] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 308.732833][ T8968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.803198][ T7559] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 308.928575][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.970402][ T7559] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 308.985296][ T7559] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.985314][ T7559] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.985324][ T7559] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.985349][ T7559] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 308.985362][ T7559] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 308.989935][ T7559] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.989962][ T7559] usb 7-1: Product: syz [ 308.989970][ T7559] usb 7-1: Manufacturer: syz [ 309.086404][ T7559] cdc_wdm 7-1:1.0: skipping garbage [ 309.086437][ T7559] cdc_wdm 7-1:1.0: skipping garbage [ 309.106461][ T7559] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 309.106476][ T7559] cdc_wdm 7-1:1.0: Unknown control protocol [ 310.265844][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.265863][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.266042][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.266053][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.266223][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.266233][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.266402][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.266412][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.266591][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.266601][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.266768][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.266779][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.266953][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.266964][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.267135][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.267146][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.267314][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.267324][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.267531][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.267541][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.269882][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 310.269904][ T5769] usb 7-1: USB disconnect, device number 3 [ 310.284985][ T7559] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 310.591302][ T8990] loop1: detected capacity change from 0 to 1024 [ 310.721652][ T7559] usb 1-1: device descriptor read/64, error -71 [ 311.000736][ T7559] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.131358][ T7559] usb 1-1: device descriptor read/64, error -71 [ 311.244159][ T7559] usb usb1-port1: attempt power cycle [ 311.759651][ T7559] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 311.785262][ T7559] usb 1-1: device descriptor read/8, error -71 [ 312.020789][ T7559] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 312.029280][ T9021] loop3: detected capacity change from 0 to 16 [ 312.046443][ T7559] usb 1-1: device descriptor read/8, error -71 [ 312.064890][ T9021] erofs (device loop3): mounted with root inode @ nid 36. [ 312.090910][ T9021] syz.3.972: attempt to access beyond end of device [ 312.090910][ T9021] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 312.091071][ T9021] erofs (device loop3): read error -5 @ 0 of nid 36 [ 312.151367][ T7559] usb usb1-port1: unable to enumerate USB device [ 312.161261][ T9021] syz.3.972: attempt to access beyond end of device [ 312.161261][ T9021] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 312.161432][ T9021] erofs (device loop3): read error -5 @ 0 of nid 36 [ 312.362966][ T8994] infiniband syz2: set down [ 312.362982][ T8994] infiniband syz2: added syzkaller0 [ 312.369907][ T5641] infiniband syz2: ib_query_port failed (-19) [ 312.435486][ T8994] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 312.435510][ T8994] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 312.435532][ T8994] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 312.624110][ T8994] RDS/IB: syz2: added [ 312.624145][ T8994] smc: adding ib device syz2 with port count 1 [ 312.624157][ T8994] smc: ib device syz2 port 1 has no pnetid [ 312.775822][ T8994] smc: removing ib device syz2 [ 312.873058][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 313.213200][ T8994] smbdirect: ib_dev[syz2] removed [ 314.018673][ T9070] loop6: detected capacity change from 0 to 16 [ 314.124613][ T9070] erofs (device loop6): mounted with root inode @ nid 36. [ 314.163989][ T9070] syz.6.986: attempt to access beyond end of device [ 314.163989][ T9070] loop6: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 314.173434][ T9070] erofs (device loop6): read error -5 @ 0 of nid 36 [ 314.232704][ T9070] syz.6.986: attempt to access beyond end of device [ 314.232704][ T9070] loop6: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 314.232878][ T9070] erofs (device loop6): read error -5 @ 0 of nid 36 [ 314.555669][ T8994] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 315.871783][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 315.903972][ T9083] bonding: b% is being created... [ 315.904252][ T9083] bonding: b% creation failed [ 316.599123][ T9115] loop1: detected capacity change from 0 to 16 [ 316.633343][ T9115] erofs (device loop1): mounted with root inode @ nid 36. [ 316.672828][ T9115] syz.1.999: attempt to access beyond end of device [ 316.672828][ T9115] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 316.672981][ T9115] erofs (device loop1): read error -5 @ 0 of nid 36 [ 316.754461][ T9115] syz.1.999: attempt to access beyond end of device [ 316.754461][ T9115] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 316.754634][ T9115] erofs (device loop1): read error -5 @ 0 of nid 36 [ 316.800845][ T5769] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 316.930771][ T5769] usb 1-1: device descriptor read/64, error -71 [ 317.170838][ T5769] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 317.285172][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 317.300680][ T5769] usb 1-1: device descriptor read/64, error -71 [ 317.434622][ T5769] usb usb1-port1: attempt power cycle [ 317.984002][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.984037][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.168670][ T5769] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 318.499528][ T5769] usb 1-1: device descriptor read/8, error -71 [ 318.627188][ T9133] bonding: b% is being created... [ 318.627498][ T9133] bonding: b% creation failed [ 318.734797][ T5769] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 318.751657][ T5769] usb 1-1: device descriptor read/8, error -71 [ 318.788629][ T9144] overlayfs: failed to resolve './file1': -2 [ 318.806254][ T9144] overlayfs: overlapping lowerdir path [ 318.864924][ T5769] usb usb1-port1: unable to enumerate USB device [ 319.490370][ T9164] loop3: detected capacity change from 0 to 4096 [ 319.532826][ T9164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.734597][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.954633][ T9179] overlayfs: failed to resolve './file1': -2 [ 319.956130][ T9179] overlayfs: overlapping lowerdir path [ 319.963951][ T5769] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.121307][ T5769] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 320.122128][ T5769] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.122144][ T5769] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.122154][ T5769] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.122179][ T5769] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 320.122192][ T5769] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 320.123540][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.123562][ T5769] usb 6-1: Product: syz [ 320.123571][ T5769] usb 6-1: Manufacturer: syz [ 320.124988][ T9187] loop0: detected capacity change from 0 to 1024 [ 320.152502][ T5769] cdc_wdm 6-1:1.0: skipping garbage [ 320.152514][ T5769] cdc_wdm 6-1:1.0: skipping garbage [ 320.240320][ T5769] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 320.240335][ T5769] cdc_wdm 6-1:1.0: Unknown control protocol [ 320.323490][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 320.473478][ T10] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 320.476445][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.476461][ T10] usb 7-1: Product: syz [ 320.476469][ T10] usb 7-1: Manufacturer: syz [ 320.476477][ T10] usb 7-1: SerialNumber: syz [ 320.569395][ T5769] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.101878][ T5769] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 325.102001][ T5769] ath9k_htc: Failed to initialize the device [ 326.207024][ C0] sched: DL replenish lagged too much [ 380.698287][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.300193][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 429.890794][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 429.897794][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5641/1:b..l.. P9180/1:b..l.. [ 429.908504][ C0] rcu: (detected by 0, t=10502 jiffies, g=64489, q=682 ncpus=1) [ 429.916233][ C0] task:syz.6.1025 state:R running task stack:25608 pid:9180 tgid:9180 ppid:8242 task_flags:0x400040 flags:0x00080002 [ 429.929772][ C0] Call Trace: [ 429.933045][ C0] [ 429.935965][ C0] __schedule+0x17dd/0x5830 [ 429.940467][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 429.945570][ C0] ? __pfx___schedule+0x10/0x10 [ 429.950413][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 429.955507][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 429.960870][ C0] preempt_schedule_common+0x7f/0xd0 [ 429.966162][ C0] preempt_schedule_thunk+0x16/0x40 [ 429.971371][ C0] _raw_spin_unlock_irqrestore+0x76/0x80 [ 429.977004][ C0] __wake_up_common_lock+0x195/0x1f0 [ 429.982283][ C0] sock_def_readable+0x1eb/0x550 [ 429.987220][ C0] ? sock_def_readable+0xae/0x550 [ 429.992247][ C0] netlink_broadcast_filtered+0xca5/0x1070 [ 429.998073][ C0] netlink_broadcast+0x37/0x50 [ 430.002958][ C0] kobject_uevent_net_broadcast+0x378/0x560 [ 430.008857][ C0] kobject_uevent_env+0x566/0x9e0 [ 430.013874][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 430.019585][ C0] device_release_driver_internal+0x42b/0x7d0 [ 430.025649][ C0] driver_detach+0x1f3/0x2d0 [ 430.030257][ C0] bus_remove_driver+0x226/0x320 [ 430.035187][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 430.040934][ C0] raw_release+0xd7/0x260 [ 430.045250][ C0] ? __pfx_raw_release+0x10/0x10 [ 430.050170][ C0] __fput+0x408/0xa40 [ 430.054139][ C0] fput_close_sync+0x11f/0x240 [ 430.058887][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 430.064162][ C0] filp_close_sync+0x6e/0xa0 [ 430.068742][ C0] __se_sys_close_range+0xa77/0xef0 [ 430.073966][ C0] ? __pfx___se_sys_close_range+0x10/0x10 [ 430.079678][ C0] do_syscall_64+0x166/0x520 [ 430.084272][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.090338][ C0] ? clear_bhb_loop+0x70/0xc0 [ 430.095011][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.100972][ C0] RIP: 0033:0x7f35e1d9f559 [ 430.105412][ C0] RSP: 002b:00007ffe02fd6978 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 430.113812][ C0] RAX: ffffffffffffffda RBX: 00007ffe02fd6a60 RCX: 00007f35e1d9f559 [ 430.121778][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 430.129734][ C0] RBP: 000000000004e1ae R08: 0000000000000001 R09: 0000000000000000 [ 430.137690][ C0] R10: 0000001b2e220000 R11: 0000000000000246 R12: 00007ffe02fd6aa0 [ 430.145667][ C0] R13: 00007f35e2025fac R14: 000000000004edbb R15: 00007f35e2025fa0 [ 430.153642][ C0] [ 430.156651][ C0] task:kworker/0:3 state:R running task stack:22664 pid:5641 tgid:5641 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 430.170213][ C0] Workqueue: usb_hub_wq hub_event [ 430.175230][ C0] Call Trace: [ 430.178493][ C0] [ 430.181433][ C0] __schedule+0x17dd/0x5830 [ 430.185935][ C0] ? __lock_acquire+0x747/0x2de0 [ 430.190857][ C0] ? __lock_acquire+0x747/0x2de0 [ 430.195782][ C0] ? __pfx___schedule+0x10/0x10 [ 430.200624][ C0] preempt_schedule_irq+0x4b/0x90 [ 430.205651][ C0] irqentry_exit+0x14f/0x9b0 [ 430.210259][ C0] ? trace_irq_disable+0x3b/0x140 [ 430.215277][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.221246][ C0] RIP: 0010:unwind_next_frame+0xcff/0x2550 [ 430.227046][ C0] Code: 20 00 49 8d 5e 38 4c 8b 6c 24 18 74 08 48 89 df e8 96 af c7 00 48 8b 04 24 48 89 03 ba 10 00 00 00 49 8d 5e 50 48 89 df 31 f6 5c b1 c7 00 48 8b 54 24 08 e9 c7 04 00 00 48 89 5c 24 48 49 8d [ 430.246638][ C0] RSP: 0018:ffffc90003b4efc0 EFLAGS: 00000246 [ 430.252718][ C0] RAX: ffffc90003b4fcf8 RBX: ffffc90003b4f0b8 RCX: 1ffff92000769e01 [ 430.260674][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003b4f0b8 [ 430.268633][ C0] RBP: 1ffffffff24b0e8f R08: ffffc90003b4fcf8 R09: 0000000000000000 [ 430.276594][ C0] R10: ffffc90003b4f0b8 R11: ffffffff81b3a670 R12: dffffc0000000000 [ 430.284550][ C0] R13: ffffffff92587474 R14: ffffc90003b4f068 R15: ffffc90003b4f0b0 [ 430.292512][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.298672][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 430.304381][ C0] ? unwind_next_frame+0x8f/0x2550 [ 430.309489][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.315634][ C0] arch_stack_walk+0x11b/0x150 [ 430.320391][ C0] ? worker_thread+0xa47/0xfb0 [ 430.325142][ C0] stack_trace_save+0xa9/0x100 [ 430.329899][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 430.335278][ C0] save_stack+0x122/0x230 [ 430.339604][ C0] ? __lock_acquire+0x747/0x2de0 [ 430.344527][ C0] ? __pfx_save_stack+0x10/0x10 [ 430.349365][ C0] ? __free_frozen_pages+0xc97/0xd90 [ 430.354632][ C0] ? __slab_free+0x269/0x2c0 [ 430.359211][ C0] ? qlist_free_all+0x99/0x100 [ 430.363966][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 430.369580][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 430.374589][ C0] ? __kmalloc_node_track_caller_noprof+0x446/0x720 [ 430.381164][ C0] ? kvasprintf+0xeb/0x1a0 [ 430.385570][ C0] ? kobject_set_name_vargs+0x61/0x110 [ 430.391040][ C0] ? dev_set_name+0xe2/0x140 [ 430.395617][ C0] ? usb_alloc_dev+0x568/0xf10 [ 430.400363][ C0] ? hub_event+0x20fb/0x4d30 [ 430.404933][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 430.410644][ C0] ? page_ext_put+0x97/0xc0 [ 430.415140][ C0] __reset_page_owner+0x73/0x2a0 [ 430.420093][ C0] __free_frozen_pages+0xc97/0xd90 [ 430.425227][ C0] __slab_free+0x269/0x2c0 [ 430.429641][ C0] qlist_free_all+0x99/0x100 [ 430.434220][ C0] kasan_quarantine_reduce+0x148/0x160 [ 430.439664][ C0] __kasan_slab_alloc+0x22/0x80 [ 430.444510][ C0] __kmalloc_node_track_caller_noprof+0x446/0x720 [ 430.450917][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 430.457490][ C0] ? kobject_set_name_vargs+0x61/0x110 [ 430.462939][ C0] ? kobject_set_name_vargs+0x61/0x110 [ 430.468408][ C0] kvasprintf+0xeb/0x1a0 [ 430.472661][ C0] ? __pfx_kvasprintf+0x10/0x10 [ 430.477516][ C0] ? kvasprintf_const+0xe8/0x240 [ 430.482443][ C0] kobject_set_name_vargs+0x61/0x110 [ 430.487721][ C0] dev_set_name+0xe2/0x140 [ 430.492129][ C0] ? __pfx_dev_set_name+0x10/0x10 [ 430.497143][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 430.502419][ C0] ? __init_waitqueue_head+0xa8/0x150 [ 430.507788][ C0] ? usb_enable_endpoint+0x104/0x1b0 [ 430.513064][ C0] usb_alloc_dev+0x568/0xf10 [ 430.517647][ C0] hub_event+0x20fb/0x4d30 [ 430.522055][ C0] ? register_lock_class+0x31/0x2e0 [ 430.527272][ C0] ? __pfx_hub_event+0x10/0x10 [ 430.532061][ C0] ? rcu_is_watching+0x16/0xb0 [ 430.536815][ C0] ? process_scheduled_works+0x97a/0x1630 [ 430.542527][ C0] process_scheduled_works+0xc3d/0x1630 [ 430.548077][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.554050][ C0] ? assign_work+0x3cf/0x5d0 [ 430.558630][ C0] worker_thread+0xa47/0xfb0 [ 430.563210][ C0] ? __kthread_parkme+0x71/0x1f0 [ 430.568134][ C0] kthread+0x38b/0x480 [ 430.572196][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.577293][ C0] ? __pfx_kthread+0x10/0x10 [ 430.581870][ C0] ret_from_fork+0x514/0xb70 [ 430.586449][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 430.591548][ C0] ? __switch_to+0xc78/0x1410 [ 430.596215][ C0] ? __pfx_kthread+0x10/0x10 [ 430.600787][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.605569][ C0] [ 439.750873][ T10] usb 7-1: USB disconnect, device number 4