last executing test programs: 1m30.02482941s ago: executing program 4 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0xdddd0000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x9000, 0x2000, &(0x7f0000d44000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1m29.856839582s ago: executing program 4 (id=360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 1m29.550627241s ago: executing program 4 (id=364): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28f01, 0x0) unlink(&(0x7f0000000100)='./file1\x00') 1m27.668014353s ago: executing program 4 (id=371): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"/473, @ANYRES16], 0xfd, 0x554b, &(0x7f0000009440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m25.12743335s ago: executing program 4 (id=393): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x80140, 0xea757e1739bf98c7) 1m23.903566195s ago: executing program 4 (id=401): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000003700)=[@in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1, 0x7ff}, 0x8) 1m23.800089205s ago: executing program 32 (id=401): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000003700)=[@in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1, 0x7ff}, 0x8) 36.816745663s ago: executing program 3 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) fstat(r0, &(0x7f0000004c00)) 36.612056282s ago: executing program 3 (id=936): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r2, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 36.356426472s ago: executing program 3 (id=948): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10) dup3(r1, r0, 0x0) io_setup(0x91, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 36.083142984s ago: executing program 3 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x4000, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 35.795346979s ago: executing program 3 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 35.123429798s ago: executing program 3 (id=951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x7a75, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x15, 0x0, 0x0) 34.987211824s ago: executing program 33 (id=951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x7a75, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x15, 0x0, 0x0) 6.799200384s ago: executing program 5 (id=1262): mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 5.912574245s ago: executing program 5 (id=1270): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000600)={0x2b, 0x2b, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x79, 0x7, [0x8, 0x96e9]}}, @pad1, @generic={0xa1, 0x5c, "59cb7288795557ea9b476f3cdb080e63b0687cfaadbe599ac45d6d9071575e05df28a3621a9e375e5d18423e41aafd04bd5c9a63b238058141a021516617cb0bdd08f1e49a8a23412561a9421553c62b7720908b23437f9ca7c3365f"}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x51, 0xf, [0xfe]}}, @generic={0x6, 0xbd, "9a01485ecac729407a0390fc142e75498f5b3f81a83039a4a1bfaef9e1731bc1400d7af38b66731fc290724a29b93a088fca4ca0fa6e7ca5d52789b8fc1b4288ecac3bdc903f17cc4fc2c7908070b70034f6f8ddfaf7a78eb482c76d46b874faef2ecc3119da102289d7777570b235deb851b9201c076c91eb874b616201d00f0681dfb294ec0eadd345c8491f26a46378cfc17002e44813d5bda592273f6e3b49d00b699c2dff3ee87c32e9558db6949aa2a470b1df73e21ffc780407"}]}, 0x160) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108) 5.705631535s ago: executing program 5 (id=1274): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") timer_gettime(r1, &(0x7f00000000c0)) 5.256621021s ago: executing program 6 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "b156"}, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x5}, 0x0}) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 5.179369175s ago: executing program 5 (id=1280): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000300)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@space_cache}, {@autodefrag}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fsync(r0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) 4.332880698s ago: executing program 6 (id=1287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.183039317s ago: executing program 6 (id=1291): socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x167) write(r0, &(0x7f0000000000)='3', 0x1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) 3.218748072s ago: executing program 6 (id=1295): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001bc0)={0x44, &(0x7f0000001980)={0x40, 0x3, 0x4, "b04c3ee4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.692210083s ago: executing program 5 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x210852, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x9, 0x444d, &(0x7f0000004480)="$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") open(0x0, 0x146142, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x20, 0x0) 2.23744165s ago: executing program 1 (id=1303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0xa9}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000010"], 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.1377803s ago: executing program 1 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x8000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x80, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x8}}, 0x1c}}, 0x0) 1.849521905s ago: executing program 0 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x8094) close(0x3) 1.654466683s ago: executing program 2 (id=1308): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x87000000) 1.515183139s ago: executing program 1 (id=1309): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x19, 0x1, "86"}, 0x9) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000100000020000000"], 0x0) 1.223912975s ago: executing program 0 (id=1310): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uac2.usb0/c_ssize\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='2', 0x1) 1.172700075s ago: executing program 0 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0xa0802, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.162519217s ago: executing program 1 (id=1312): symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount(0x0, 0x0, 0x0, 0x0, 0x0) 731.35748ms ago: executing program 2 (id=1313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x14, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x0, 0x2, 0x8}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 731.184289ms ago: executing program 1 (id=1314): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 626.2433ms ago: executing program 1 (id=1315): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) 615.416831ms ago: executing program 2 (id=1316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000240)={0x9b0000, 0x9, 0xffffffff, r0, 0x0, &(0x7f0000000200)={0x9909de, 0x7, '\x00', @ptr=0x5}}) 519.36455ms ago: executing program 2 (id=1317): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 485.224707ms ago: executing program 0 (id=1318): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="0201022e002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 405.788902ms ago: executing program 2 (id=1319): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 295.335683ms ago: executing program 0 (id=1320): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000040)={0x6000, 0x4000}) 295.189573ms ago: executing program 2 (id=1321): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 233.750985ms ago: executing program 6 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r2, 0x1}, 0xc) 158.31243ms ago: executing program 6 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.47037ms ago: executing program 5 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000040)=0x84) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) kernel console output (not intermixed with test programs): nfig 4 has no interface number 0 [ 111.306269][ T5483] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 111.326707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.341638][ T5487] device syzkaller1 entered promiscuous mode [ 111.492073][ T4265] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 111.519384][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.581573][ T4265] usb 4-1: Product: syz [ 111.593667][ T4265] usb 4-1: Manufacturer: syz [ 111.598436][ T4265] usb 4-1: SerialNumber: syz [ 111.739249][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.755704][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.780738][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.942297][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 112.111955][ T4265] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 112.118565][ T4265] usb 4-1: No valid video chain found. [ 112.164792][ T4265] usb 4-1: USB disconnect, device number 4 [ 112.366635][ T5537] loop0: detected capacity change from 0 to 64 [ 112.468039][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.520028][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.548324][ T5537] attempt to access beyond end of device [ 112.548324][ T5537] loop0: rw=2049, want=162, limit=64 [ 112.609235][ T5544] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 112.621671][ T5537] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 112.630356][ T5537] attempt to access beyond end of device [ 112.630356][ T5537] loop0: rw=2049, want=163, limit=64 [ 112.642405][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.662364][ T5506] loop2: detected capacity change from 0 to 32768 [ 112.671124][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.697472][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.705804][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.739062][ T26] audit: type=1800 audit(1790759131.191:15): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.467" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 112.772466][ T5298] device veth0_vlan entered promiscuous mode [ 112.819554][ T5298] device veth1_vlan entered promiscuous mode [ 112.832667][ T5537] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 112.876283][ T5537] attempt to access beyond end of device [ 112.876283][ T5537] loop0: rw=2049, want=164, limit=64 [ 112.931737][ T5537] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 112.968729][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.978449][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.988524][ T5537] attempt to access beyond end of device [ 112.988524][ T5537] loop0: rw=2049, want=168, limit=64 [ 113.020172][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.052093][ T5537] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 113.060725][ T5537] attempt to access beyond end of device [ 113.060725][ T5537] loop0: rw=2049, want=170, limit=64 [ 113.072772][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.099703][ T5298] device veth0_macvtap entered promiscuous mode [ 113.141591][ T5537] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 113.154497][ T5298] device veth1_macvtap entered promiscuous mode [ 113.181017][ T5537] attempt to access beyond end of device [ 113.181017][ T5537] loop0: rw=2049, want=172, limit=64 [ 113.224585][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.261630][ T5537] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 113.270261][ T5537] attempt to access beyond end of device [ 113.270261][ T5537] loop0: rw=2049, want=173, limit=64 [ 113.320595][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.358738][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.370545][ T5537] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 113.393773][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.424988][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.467231][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.504777][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.525110][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.576995][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.650248][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.680400][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.698907][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.717765][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.728366][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.747623][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.758091][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.774574][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.789080][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.813565][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.825287][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.844983][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.866288][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.885808][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.909243][ T5556] loop3: detected capacity change from 0 to 32768 [ 113.919459][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.949567][ T5298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.983442][ T5298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.010532][ T5298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.022032][ T4175] Bluetooth: hci2: command 0x0419 tx timeout [ 114.030517][ T5298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.151679][ T5556] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.482 (5556) [ 114.256682][ T5556] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.282614][ T5556] BTRFS error (device loop3): unrecognized mount option 'fsuuid=dccd4f2d-13e5-821c-3' [ 114.363830][ T5556] BTRFS error (device loop3): open_ctree failed: -22 [ 114.384406][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.400276][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.426509][ T4555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4555) [ 114.436301][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.464089][ T5584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.485123][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.495489][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.540722][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.627069][ T5590] tipc: Started in network mode [ 114.654638][ T5590] tipc: Node identity ac14142f, cluster identity 4711 [ 114.705206][ T5590] tipc: New replicast peer: 172.20.20.170 [ 114.711343][ T5590] tipc: Enabled bearer , priority 10 [ 114.771686][ T5593] tipc: New replicast peer: 0.0.0.0 [ 114.807024][ T5595] loop2: detected capacity change from 0 to 2048 [ 114.918579][ T5600] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.964032][ T5603] Mass Storage Function, version: 2009/09/11 [ 114.999384][ T5603] LUN: removable file: (no medium) [ 115.356079][ T5621] loop5: detected capacity change from 0 to 256 [ 115.658241][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 115.689023][ T5635] tipc: New replicast peer: 172.20.20.170 [ 115.697173][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 115.708753][ T5635] tipc: Enabled bearer , priority 10 [ 115.718334][ T5635] tipc: New replicast peer: 0.0.0.0 [ 115.821703][ T23] tipc: Node number set to 2886997039 [ 115.991883][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 116.035605][ T5613] loop3: detected capacity change from 0 to 32768 [ 116.123888][ T5613] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 116.169870][ T5613] JBD2: Ignoring recovery information on journal [ 116.282670][ T5613] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.496606][ T5613] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 116.528110][ T5613] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 116.538906][ T5613] OCFS2: File system is now read-only. [ 116.560125][ T5613] (syz.3.498,5613,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 116.620020][ T5613] (syz.3.498,5613,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 116.649818][ T5671] loop2: detected capacity change from 0 to 1024 [ 116.660717][ T5613] (syz.3.498,5613,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 116.690114][ T5613] (syz.3.498,5613,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 116.705850][ T5613] (syz.3.498,5613,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 116.721253][ T5613] (syz.3.498,5613,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 116.738626][ T5613] (syz.3.498,5613,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 116.759133][ T5613] (syz.3.498,5613,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 116.823144][ T23] tipc: Node number set to 1494569365 [ 116.833837][ T5613] (syz.3.498,5613,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 116.862744][ T5613] (syz.3.498,5613,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 116.906505][ T5613] (syz.3.498,5613,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 116.943594][ T5613] (syz.3.498,5613,0):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 116.980858][ T5061] hfsplus: b-tree write err: -5, ino 25 [ 116.985607][ T5613] (syz.3.498,5613,0):ocfs2_write_begin_nolock:1747 ERROR: status = -30 [ 117.030225][ T5061] hfsplus: b-tree write err: -5, ino 4 [ 117.031817][ T5613] (syz.3.498,5613,0):ocfs2_dio_wr_get_block:2245 ERROR: status = -30 [ 117.045046][ T5061] hfsplus: b-tree write err: -5, ino 2 [ 117.068822][ T5061] hfsplus: b-tree write err: -5, ino 26 [ 117.081876][ T5613] (syz.3.498,5613,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 117.182697][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 117.222018][ T5652] loop0: detected capacity change from 0 to 40427 [ 117.316781][ T5652] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 117.334781][ T5652] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.397823][ T5652] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.540029][ T5652] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.552617][ T5652] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.774127][ T5681] loop5: detected capacity change from 0 to 32768 [ 117.846855][ T26] audit: type=1800 audit(1790759136.301:16): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.521" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 118.371661][ T4265] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 118.397430][ T5719] loop0: detected capacity change from 0 to 2048 [ 118.487267][ T5722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.771824][ T4265] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 118.801571][ T4265] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 118.831553][ T4265] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 118.865166][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.091816][ T4265] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 119.101006][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.121755][ T4265] usb 3-1: Product: syz [ 119.126001][ T4265] usb 3-1: Manufacturer: syz [ 119.139267][ T4265] usb 3-1: SerialNumber: syz [ 119.168337][ T4265] usb 3-1: config 0 descriptor?? [ 119.202018][ T5710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.283163][ T5745] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 119.300174][ T5745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 119.309518][ T4234] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.436702][ T5710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.465605][ T4265] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 119.699144][ T5769] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 119.712617][ T4234] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.731855][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.763463][ T23] usb 3-1: USB disconnect, device number 5 [ 119.773178][ T4234] usb 1-1: config 0 descriptor?? [ 119.824976][ T4234] cp210x 1-1:0.0: cp210x converter detected [ 119.859523][ T26] audit: type=1326 audit(1790759138.311:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.5.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb992a22159 code=0x0 [ 119.942284][ T5780] netlink: 56 bytes leftover after parsing attributes in process `syz.3.547'. [ 120.251675][ T4234] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 120.296915][ T4234] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 120.308660][ T4234] usb 1-1: cp210x converter now attached to ttyUSB0 [ 120.449450][ T5801] loop3: detected capacity change from 0 to 256 [ 120.506541][ T5805] loop2: detected capacity change from 0 to 256 [ 120.529698][ T4230] usb 1-1: USB disconnect, device number 6 [ 120.561010][ T4230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.577264][ T4230] cp210x 1-1:0.0: device disconnected [ 120.705920][ T5813] loop3: detected capacity change from 0 to 512 [ 120.773107][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.559: corrupted inode contents [ 120.807366][ T5813] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 120.818633][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.559: corrupted inode contents [ 120.843675][ T5813] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.559: mark_inode_dirty error [ 120.872040][ T5813] EXT4-fs (loop3): 1 orphan inode deleted [ 120.879519][ T5813] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,sb=0x0000000000000007,,errors=continue. Quota mode: none. [ 121.173148][ T5839] loop2: detected capacity change from 0 to 4096 [ 121.219836][ T5846] loop0: detected capacity change from 0 to 4096 [ 121.319902][ T5849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.320983][ T5846] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 121.361928][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.377832][ T5846] NILFS (loop0): mounting fs with errors [ 121.421603][ T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.624029][ T5857] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 121.632747][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 121.672619][ T4234] usb 6-1: Using ep0 maxpacket: 8 [ 121.790229][ T23] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.808281][ T23] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 121.821335][ T23] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 121.837917][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.861739][ T4234] usb 6-1: unable to get BOS descriptor or descriptor too short [ 121.953002][ T4234] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 121.961342][ T4234] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 122.001498][ T4234] usb 6-1: config 4 has no interface number 0 [ 122.002266][ T23] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 122.044135][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.072892][ T23] usb 4-1: Product: syz [ 122.077469][ T23] usb 4-1: Manufacturer: syz [ 122.097682][ T23] usb 4-1: SerialNumber: syz [ 122.112805][ T23] usb 4-1: config 0 descriptor?? [ 122.141984][ T5840] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.173991][ T4234] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 122.193966][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.215337][ T4234] usb 6-1: Product: syz [ 122.219557][ T4234] usb 6-1: Manufacturer: syz [ 122.236077][ T4234] usb 6-1: SerialNumber: syz [ 122.297731][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 122.341089][ T5874] loop0: detected capacity change from 0 to 128 [ 122.367020][ T5840] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.379889][ T5874] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.393348][ T23] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 122.528707][ T5061] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.611547][ T4175] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.655492][ T4230] usb 4-1: USB disconnect, device number 5 [ 122.691782][ T4234] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 122.706759][ T4234] uvcvideo 6-1:4.147: Entity type for entity Output 251 was not initialized! [ 122.725160][ T4234] usb 6-1: Failed to create links for entity 251 [ 122.738662][ T5883] loop0: detected capacity change from 0 to 1024 [ 122.739498][ T4234] usb 6-1: Failed to register entities (-22). [ 122.768229][ T4234] usb 6-1: USB disconnect, device number 2 [ 122.786595][ T5883] EXT4-fs (loop0): Ignoring removed bh option [ 122.836181][ T5883] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,commit=0x0000000000000005,noquota,grpid,resgid=0x0000000000000000,grpid,bh,,errors=continue. Quota mode: none. [ 122.859364][ T5883] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.982190][ T4175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.008714][ T4175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.034960][ T4175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.049749][ T4175] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.066815][ T4175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.098433][ T4175] usb 3-1: config 0 descriptor?? [ 123.291690][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.511566][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.593587][ T4175] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 123.612277][ T4175] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 123.633315][ T4175] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 123.759241][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.776383][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.872720][ T2856] usb 3-1: USB disconnect, device number 6 [ 123.881949][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.917215][ T4230] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.991664][ T13] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 124.000860][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.029385][ T13] usb 1-1: Product: syz [ 124.040636][ T13] usb 1-1: Manufacturer: syz [ 124.045416][ T13] usb 1-1: SerialNumber: syz [ 124.061887][ T4230] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 124.074630][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 124.083363][ T4230] usb 4-1: Product: syz [ 124.094428][ T4230] usb 4-1: Manufacturer: syz [ 124.101287][ T13] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 124.142987][ T13] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 124.142987][ T13] Please send a copy of this message to and [ 124.165710][ T4230] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 124.199395][ T4230] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 124.799551][ T13] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 124.958894][ T13] usb 1-1: USB disconnect, device number 7 [ 125.129645][ T5968] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.618'. [ 125.471876][ T5902] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 125.490417][ T2856] usb 4-1: USB disconnect, device number 6 [ 125.529840][ T2856] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 125.569127][ T2856] iuu_phoenix 4-1:1.0: device disconnected [ 126.102873][ T5992] netlink: 'syz.2.626': attribute type 4 has an invalid length. [ 126.159804][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 126.320535][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 126.367760][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'. [ 126.531614][ T2301] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 126.546640][ T6024] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.638'. [ 126.687729][ T6022] loop0: detected capacity change from 0 to 8192 [ 126.774689][ T6022] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 126.858617][ T6022] REISERFS (device loop0): using ordered data mode [ 126.917094][ T6022] reiserfs: using flush barriers [ 126.951332][ T6022] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.991891][ T2301] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.017064][ T6022] REISERFS (device loop0): checking transaction log (loop0) [ 127.021752][ T2301] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.077033][ T2301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.095511][ T2301] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 127.125168][ T2301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.142032][ T4230] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.168048][ T2301] usb 4-1: config 0 descriptor?? [ 127.298649][ T6022] REISERFS (device loop0): Using tea hash to sort names [ 127.328537][ T6022] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 127.364461][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 127.376096][ T6022] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 127.458042][ T26] audit: type=1800 audit(1790759145.911:18): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.637" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 127.522940][ T6065] device veth0 entered promiscuous mode [ 127.567346][ T6064] device veth0 left promiscuous mode [ 127.601898][ T4230] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 127.621364][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 127.645696][ T4230] usb 3-1: Product: syz [ 127.674280][ T4230] usb 3-1: config 0 descriptor?? [ 127.708338][ T2301] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 127.716055][ T4230] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 127.717482][ T4230] usb 3-1: Detected FT232H [ 127.906915][ T6075] netlink: 'syz.5.658': attribute type 4 has an invalid length. [ 127.935440][ T4230] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 127.960773][ T4175] usb 4-1: USB disconnect, device number 7 [ 128.059385][ T6079] loop5: detected capacity change from 0 to 64 [ 128.141669][ T6080] Core dump to core aborted: cannot preserve file permissions [ 128.193845][ T6082] loop0: detected capacity change from 0 to 512 [ 128.241658][ T6082] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.254063][ T6082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.284426][ T6082] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.660: Invalid block bitmap block 0 in block_group 0 [ 128.304568][ T6082] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 128.315608][ T6082] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.660: attempt to clear invalid blocks 983261 len 1 [ 128.330154][ T6082] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.660: Invalid inode table block 0 in block_group 0 [ 128.361427][ T6082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 128.383398][ T6082] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 128.392617][ T6082] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.660: Invalid inode table block 0 in block_group 0 [ 128.406541][ T6082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 128.416895][ T6082] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.660: mark_inode_dirty error [ 128.430804][ T6082] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 128.443174][ T4230] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.453948][ T6082] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.660: Invalid inode table block 0 in block_group 0 [ 128.486593][ T6082] EXT4-fs (loop0): 1 truncate cleaned up [ 128.519720][ T6082] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 128.587123][ T6092] overlayfs: workdir and upperdir must be separate subtrees [ 128.644361][ T4230] usb 3-1: USB disconnect, device number 7 [ 128.718035][ T4230] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.737906][ T4230] ftdi_sio 3-1:0.0: device disconnected [ 128.785352][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 128.804995][ T2856] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 128.929125][ T6116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.019081][ T6119] loop0: detected capacity change from 0 to 256 [ 129.057591][ T6119] exfat: Deprecated parameter 'utf8' [ 129.071769][ T6119] exfat: Deprecated parameter 'namecase' [ 129.077623][ T6119] exfat: Deprecated parameter 'utf8' [ 129.096316][ T6119] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 129.181799][ T2856] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.200895][ T2856] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.221088][ T2856] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.241505][ T2856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.302178][ T6086] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.327708][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 129.569132][ T4234] usb 6-1: USB disconnect, device number 3 [ 129.602849][ T6140] loop0: detected capacity change from 0 to 1024 [ 129.698958][ T6140] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 129.742994][ T6140] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.801177][ T6140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 129.828613][ T6140] System zones: 0-1, 3-36 [ 129.839236][ T6140] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 130.024031][ T6161] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 130.052457][ T6161] /dev/nullb0: Can't open blockdev [ 130.144926][ T6163] loop2: detected capacity change from 0 to 4096 [ 130.239382][ T6163] ntfs3: loop2: failed to convert "0080" to cp852 [ 130.255939][ T6163] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 130.279875][ T6163] ntfs3: loop2: failed to convert name for inode 1e. [ 131.166526][ T6183] overlayfs: workdir and upperdir must be separate subtrees [ 131.231616][ T4230] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.420639][ T6191] FAULT_INJECTION: forcing a failure. [ 131.420639][ T6191] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 131.494854][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 131.510573][ T6191] CPU: 1 PID: 6191 Comm: syz.5.708 Not tainted syzkaller #0 [ 131.517915][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.528003][ T6191] Call Trace: [ 131.531309][ T6191] [ 131.534261][ T6191] dump_stack_lvl+0x188/0x250 [ 131.538982][ T6191] ? show_regs_print_info+0x20/0x20 [ 131.544222][ T6191] ? load_image+0x410/0x410 [ 131.548772][ T6191] should_fail+0x383/0x4b0 [ 131.553223][ T6191] prepare_alloc_pages+0x1e3/0x5b0 [ 131.558378][ T6191] __alloc_pages+0x11b/0x480 [ 131.563018][ T6191] ? zone_statistics+0x170/0x170 [ 131.568043][ T6191] ? alloc_pages+0x452/0x560 [ 131.572672][ T6191] skb_page_frag_refill+0x225/0x4c0 [ 131.577900][ T6191] tun_get_user+0x1907/0x3b10 [ 131.582633][ T6191] ? tun_ring_recv+0xc90/0xc90 [ 131.587438][ T6191] ? rcu_lock_release+0x5/0x20 [ 131.592233][ T6191] ? __lock_acquire+0x7b50/0x7b50 [ 131.597334][ T6191] tun_chr_write_iter+0x112/0x1e0 [ 131.602428][ T6191] vfs_write+0x748/0xd70 [ 131.606726][ T6191] ? file_end_write+0x250/0x250 [ 131.611613][ T6191] ? __fget_files+0x402/0x470 [ 131.616342][ T6191] ? __fdget_pos+0x1e2/0x370 [ 131.620969][ T6191] ? ksys_write+0x70/0x260 [ 131.625416][ T6191] ksys_write+0x153/0x260 [ 131.629812][ T6191] ? __ia32_sys_read+0x80/0x80 [ 131.634614][ T6191] ? lockdep_hardirqs_on+0x94/0x140 [ 131.639855][ T6191] do_syscall_64+0x4c/0xa0 [ 131.644312][ T6191] ? clear_bhb_loop+0x30/0x80 [ 131.649041][ T6191] ? clear_bhb_loop+0x30/0x80 [ 131.653789][ T6191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.659715][ T6191] RIP: 0033:0x7fb9929e298e [ 131.664161][ T6191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.683800][ T6191] RSP: 002b:00007fb990c79fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.692247][ T6191] RAX: ffffffffffffffda RBX: 00007fb990c7a6c0 RCX: 00007fb9929e298e [ 131.700246][ T6191] RDX: 000000000000004a RSI: 0000200000000500 RDI: 00000000000000c8 [ 131.708250][ T6191] RBP: 00007fb992ab906b R08: 0000000000000000 R09: 0000000000000000 [ 131.716259][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.724268][ T6191] R13: 00007fb992caa038 R14: 00007fb992ca9fa0 R15: 00007ffe54a93248 [ 131.732296][ T6191] [ 131.735417][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.847094][ T4230] usb 1-1: config index 0 descriptor too short (expected 68, got 36) [ 131.867039][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.894598][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 131.931573][ T4230] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00 [ 131.945462][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.706'. [ 131.951729][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.971000][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 131.978628][ T4230] usb 1-1: config 0 descriptor?? [ 132.006671][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 132.037022][ T4230] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 132.140553][ T6222] input: syz1 as /devices/virtual/input/input12 [ 132.175236][ T6228] overlayfs: failed to clone upperpath [ 132.251910][ T3543] bcm5974 1-1:0.0: could not read from device [ 132.272890][ T4230] usb 1-1: USB disconnect, device number 8 [ 132.371883][ T6240] loop5: detected capacity change from 0 to 128 [ 132.433740][ T6240] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.480320][ T6240] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.658045][ T6257] syz.3.721 uses obsolete (PF_INET,SOCK_PACKET) [ 132.678927][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.685313][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.871734][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.893677][ T6273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.284081][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.298100][ T13] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.371839][ T4234] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.391839][ T2301] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 133.485244][ T13] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 133.496481][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.510164][ T13] usb 3-1: Product: syz [ 133.514768][ T13] usb 3-1: Manufacturer: syz [ 133.519477][ T13] usb 3-1: SerialNumber: syz [ 133.583083][ T13] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 133.602163][ T13] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 133.602163][ T13] Please send a copy of this message to and [ 133.661645][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 133.812970][ T4234] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.822529][ T4234] usb 4-1: config 179 has no interface number 0 [ 133.832666][ T2301] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.849690][ T2301] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.864375][ T4202] block nbd5: Receive control failed (result -32) [ 133.865698][ T6287] block nbd5: shutting down sockets [ 133.891599][ T4234] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.919176][ T4234] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.936887][ T2301] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.967916][ T2301] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 133.980933][ T4234] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.001785][ T2301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.022867][ T4234] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 134.041273][ T2301] usb 1-1: config 0 descriptor?? [ 134.067248][ T4234] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.105193][ T4234] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.121820][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.181953][ T6291] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 134.290775][ T13] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 134.350100][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 134.493920][ T4234] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 134.513691][ T4175] usb 3-1: USB disconnect, device number 8 [ 134.515405][ T6355] team0 (unregistering): Port device team_slave_0 removed [ 134.530458][ T2301] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 134.671317][ T6355] team0 (unregistering): Port device team_slave_1 removed [ 134.747400][ T4234] usb 1-1: USB disconnect, device number 9 [ 134.834127][ T6369] loop5: detected capacity change from 0 to 4096 [ 134.856333][ T13] usb 4-1: USB disconnect, device number 8 [ 134.862457][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.862557][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.986371][ T6369] ntfs3: loop5: failed to convert "0080" to cp852 [ 135.001247][ T6369] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 135.009693][ T6369] ntfs3: loop5: failed to convert name for inode 1e. [ 135.486109][ T6383] loop5: detected capacity change from 0 to 8192 [ 135.538950][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'. [ 135.590364][ T6383] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 135.620712][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 135.639613][ T6383] REISERFS (device loop5): using ordered data mode [ 135.665904][ T6383] reiserfs: using flush barriers [ 135.691827][ T6383] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.782354][ T6383] REISERFS (device loop5): checking transaction log (loop5) [ 135.922275][ T6377] loop2: detected capacity change from 0 to 131072 [ 135.989224][ T6377] F2FS-fs (loop2): invalid crc value [ 136.051843][ T6377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.098484][ T6377] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 136.129221][ T6383] REISERFS (device loop5): Using tea hash to sort names [ 136.139836][ T6383] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 136.158579][ T6377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 136.179792][ T6383] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 136.189648][ T6402] loop3: detected capacity change from 0 to 4096 [ 136.370229][ T6402] ntfs3: loop3: failed to convert "0080" to cp852 [ 136.396946][ T6402] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 136.447938][ T6402] ntfs3: loop3: failed to convert name for inode 1e. [ 136.465624][ T26] audit: type=1800 audit(1790759154.921:19): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.746" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 137.471159][ T6445] loop2: detected capacity change from 0 to 2048 [ 137.547332][ T6445] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.615564][ T6445] fscrypt (loop2, inode 18): Unsupported encryption flags (0x08) [ 138.066042][ T2856] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 138.122580][ T2856] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.742643][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 138.901175][ T6467] loop3: detected capacity change from 0 to 40427 [ 138.956535][ T6496] team0 (unregistering): Port device team_slave_0 removed [ 138.992656][ T6467] F2FS-fs (loop3): invalid crc value [ 139.040814][ T6467] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.116958][ T6496] team0 (unregistering): Port device team_slave_1 removed [ 139.179420][ T6487] loop5: detected capacity change from 0 to 131072 [ 139.258813][ T6467] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 139.288680][ T6487] F2FS-fs (loop5): invalid crc value [ 139.332526][ T6487] F2FS-fs (loop5): Found nat_bits in checkpoint [ 139.369785][ T6487] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 139.391120][ T6467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 139.430530][ T6487] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 139.642764][ T6520] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 139.676302][ T4197] attempt to access beyond end of device [ 139.676302][ T4197] loop3: rw=2049, want=45104, limit=40427 [ 139.841526][ T6524] FAULT_INJECTION: forcing a failure. [ 139.841526][ T6524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.891784][ T6524] CPU: 0 PID: 6524 Comm: syz.2.805 Not tainted syzkaller #0 [ 139.899140][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.909224][ T6524] Call Trace: [ 139.912533][ T6524] [ 139.915490][ T6524] dump_stack_lvl+0x188/0x250 [ 139.920201][ T6524] ? show_regs_print_info+0x20/0x20 [ 139.925438][ T6524] ? load_image+0x410/0x410 [ 139.929981][ T6524] ? rcu_is_watching+0x11/0xa0 [ 139.934774][ T6524] should_fail+0x383/0x4b0 [ 139.939233][ T6524] prepare_alloc_pages+0x1e3/0x5b0 [ 139.944386][ T6524] __alloc_pages+0x11b/0x480 [ 139.949015][ T6524] ? zone_statistics+0x170/0x170 [ 139.954007][ T6524] ? alloc_pages+0x452/0x560 [ 139.958629][ T6524] skb_page_frag_refill+0x225/0x4c0 [ 139.963850][ T6524] tun_get_user+0x1907/0x3b10 [ 139.968579][ T6524] ? tun_ring_recv+0xc90/0xc90 [ 139.973385][ T6524] ? rcu_lock_release+0x5/0x20 [ 139.978183][ T6524] ? __lock_acquire+0x7b50/0x7b50 [ 139.983291][ T6524] tun_chr_write_iter+0x112/0x1e0 [ 139.988345][ T6524] vfs_write+0x748/0xd70 [ 139.992650][ T6524] ? file_end_write+0x250/0x250 [ 139.997537][ T6524] ? __fget_files+0x402/0x470 [ 140.002257][ T6524] ? __fdget_pos+0x1e2/0x370 [ 140.006865][ T6524] ? ksys_write+0x70/0x260 [ 140.011310][ T6524] ksys_write+0x153/0x260 [ 140.015671][ T6524] ? __ia32_sys_read+0x80/0x80 [ 140.020469][ T6524] ? lockdep_hardirqs_on+0x94/0x140 [ 140.025711][ T6524] do_syscall_64+0x4c/0xa0 [ 140.030178][ T6524] ? clear_bhb_loop+0x30/0x80 [ 140.034921][ T6524] ? clear_bhb_loop+0x30/0x80 [ 140.039637][ T6524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.045553][ T6524] RIP: 0033:0x7fba15a1798e [ 140.049993][ T6524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.069621][ T6524] RSP: 002b:00007fba13caefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.078102][ T6524] RAX: ffffffffffffffda RBX: 00007fba13caf6c0 RCX: 00007fba15a1798e [ 140.086100][ T6524] RDX: 000000000000004a RSI: 0000200000000500 RDI: 00000000000000c8 [ 140.094096][ T6524] RBP: 00007fba15aee06b R08: 0000000000000000 R09: 0000000000000000 [ 140.102108][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.110111][ T6524] R13: 00007fba15cdf038 R14: 00007fba15cdefa0 R15: 00007ffd2a460bc8 [ 140.118131][ T6524] [ 140.121238][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.348439][ T6518] loop0: detected capacity change from 0 to 32768 [ 140.445296][ T6518] XFS (loop0): Mounting V5 Filesystem [ 140.537262][ T6518] XFS (loop0): Ending clean mount [ 140.571656][ T4175] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.689785][ T4188] XFS (loop0): Unmounting Filesystem [ 140.811570][ T4175] usb 3-1: Using ep0 maxpacket: 8 [ 140.921755][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'. [ 140.932715][ T6551] bond0: ARP target 8.4.0.0 is already present [ 140.939625][ T6551] bond0: option arp_ip_target: invalid value (1032) [ 141.095721][ T4175] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 141.108918][ T6560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.121360][ T4175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.136745][ T4175] usb 3-1: Product: syz [ 141.141394][ T4175] usb 3-1: Manufacturer: syz [ 141.161369][ T4175] usb 3-1: SerialNumber: syz [ 141.174356][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 141.186787][ T4175] usb 3-1: config 0 descriptor?? [ 141.248030][ T4175] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 141.265964][ T4175] pctv452e: pctv452e_power_ctrl: 1 [ 141.265964][ T4175] [ 141.280649][ T4175] usb 3-1: selecting invalid altsetting 3 [ 141.299808][ T4175] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 141.299808][ T4175] [ 141.327786][ T6568] loop3: detected capacity change from 0 to 128 [ 141.339104][ T4175] dvb-usb: bulk message failed: -22 (5/0) [ 141.365755][ T6562] team0 (unregistering): Port device team_slave_0 removed [ 141.386103][ T4234] kernel write not supported for file /vcsa (pid: 4234 comm: kworker/0:4) [ 141.399461][ T6562] team0 (unregistering): Port device team_slave_1 removed [ 141.408087][ T4175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.455102][ T4175] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 141.497180][ T6528] pctv452e: I2C error -22; AA 01 00 00 F5 -> 00 00 00 00 00 00 00 [ 141.517327][ T4175] usb 3-1: media controller created [ 141.531016][ T4175] dvb-usb: bulk message failed: -22 (8/0) [ 141.558827][ T4175] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 141.577685][ T4175] dvb-usb: MAC address reading failed. [ 141.608022][ T4175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.757445][ T4175] DVB: Unable to find symbol stb0899_attach() [ 141.772579][ T4175] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 141.817897][ T6581] loop5: detected capacity change from 0 to 1024 [ 141.922741][ T4175] rc_core: IR keymap rc-tt-1500 not found [ 141.928667][ T4175] Registered IR keymap rc-empty [ 141.970674][ T4175] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 141.982440][ T6581] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.037614][ T6581] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 142.071804][ T4175] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 142.160950][ T4175] dvb-usb: schedule remote query interval to 100 msecs. [ 142.183036][ T6594] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: none. [ 142.207155][ T4175] pctv452e: pctv452e_power_ctrl: 0 [ 142.207155][ T4175] [ 142.230958][ T4175] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 142.293877][ T4175] usb 3-1: USB disconnect, device number 9 [ 142.418419][ T4175] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 142.617857][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'. [ 142.798875][ T6615] team0 (unregistering): Port device team_slave_0 removed [ 142.848649][ T6615] team0 (unregistering): Port device team_slave_1 removed [ 142.868348][ T6626] [drm] DisplayID checksum invalid, remainder is 107 [ 143.201556][ T4234] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.461595][ T4234] usb 1-1: Using ep0 maxpacket: 8 [ 143.481253][ T6641] loop5: detected capacity change from 0 to 32768 [ 143.549414][ T6639] loop3: detected capacity change from 0 to 40427 [ 143.614980][ T6641] XFS (loop5): Mounting V5 Filesystem [ 143.649007][ T6639] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 143.667570][ T6639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.684724][ T6639] F2FS-fs (loop3): invalid crc value [ 143.733368][ T6639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.751516][ T6641] XFS (loop5): Ending clean mount [ 143.771802][ T4234] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 143.829715][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.882011][ T4234] usb 1-1: Product: syz [ 143.886263][ T4234] usb 1-1: Manufacturer: syz [ 143.937379][ T4234] usb 1-1: SerialNumber: syz [ 143.962523][ T4234] usb 1-1: config 0 descriptor?? [ 144.030665][ T6639] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.040075][ T4234] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 144.061641][ T6639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.071990][ T4234] pctv452e: pctv452e_power_ctrl: 1 [ 144.071990][ T4234] [ 144.091640][ T4234] usb 1-1: selecting invalid altsetting 3 [ 144.097427][ T4234] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 144.097427][ T4234] [ 144.145534][ T4234] dvb-usb: bulk message failed: -22 (5/0) [ 144.165203][ T4234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.192126][ T5298] XFS (loop5): Unmounting Filesystem [ 144.202441][ T4234] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 144.226535][ T4234] usb 1-1: media controller created [ 144.235227][ T26] audit: type=1804 audit(1790759164.697:20): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.844" name="/newroot/150/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 144.272823][ T4234] dvb-usb: bulk message failed: -22 (8/0) [ 144.292759][ T4234] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 144.308009][ T4234] dvb-usb: MAC address reading failed. [ 144.308447][ T6629] pctv452e: I2C error -22; AA 02 00 00 F5 -> 00 00 00 00 00 00 00 [ 144.361955][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.461544][ T4234] DVB: Unable to find symbol stb0899_attach() [ 144.470200][ T4234] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 144.600329][ T4197] attempt to access beyond end of device [ 144.600329][ T4197] loop3: rw=2049, want=45104, limit=40427 [ 144.691682][ T4234] rc_core: IR keymap rc-tt-1500 not found [ 144.697494][ T4234] Registered IR keymap rc-empty [ 144.732664][ T4234] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 144.763239][ T4234] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input15 [ 144.812348][ T4234] dvb-usb: schedule remote query interval to 100 msecs. [ 144.831609][ T4234] pctv452e: pctv452e_power_ctrl: 0 [ 144.831609][ T4234] [ 144.838955][ T4234] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 144.891905][ T4234] usb 1-1: USB disconnect, device number 10 [ 144.980041][ T4234] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 145.319211][ T6689] loop2: detected capacity change from 0 to 512 [ 145.432998][ T6689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.457353][ T6689] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.156608][ T6681] loop5: detected capacity change from 0 to 40427 [ 146.266183][ T6681] F2FS-fs (loop5): invalid crc value [ 146.318634][ T6681] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.495163][ T6681] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 146.548999][ T6681] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 146.598633][ T5061] tipc: Subscription rejected, illegal request [ 146.757235][ T6739] loop2: detected capacity change from 0 to 1024 [ 146.817246][ T5298] attempt to access beyond end of device [ 146.817246][ T5298] loop5: rw=2049, want=45104, limit=40427 [ 146.951179][ T6739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.077703][ T6739] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 147.330058][ T6749] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 147.782958][ T6776] tmpfs: Unknown parameter 'no' [ 147.844094][ T6782] loop3: detected capacity change from 0 to 64 [ 148.636578][ T6819] loop2: detected capacity change from 0 to 64 [ 148.824024][ T6778] loop5: detected capacity change from 0 to 40427 [ 148.854959][ T6778] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 148.894867][ T6778] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 148.994559][ T6778] F2FS-fs (loop5): invalid crc value [ 149.046128][ T6778] F2FS-fs (loop5): Found nat_bits in checkpoint [ 149.247797][ T6778] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 149.275895][ T6778] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.453796][ T26] audit: type=1804 audit(1790759169.917:21): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.883" name="/newroot/70/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 149.641481][ T6815] loop3: detected capacity change from 0 to 32768 [ 149.849036][ T5298] attempt to access beyond end of device [ 149.849036][ T5298] loop5: rw=2049, want=45104, limit=40427 [ 149.872537][ T6815] XFS (loop3): Mounting V5 Filesystem [ 150.065934][ T6815] XFS (loop3): Ending clean mount [ 150.192021][ T26] audit: type=1800 audit(1790759170.657:22): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.909" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 150.355659][ T4197] XFS (loop3): Unmounting Filesystem [ 150.404794][ T6838] loop2: detected capacity change from 0 to 32768 [ 150.512455][ T6838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 150.849670][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 151.189754][ T6864] loop3: detected capacity change from 0 to 128 [ 151.291290][ T6864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 151.330582][ T6864] System zones: 1-3, 19-19, 35-36 [ 151.389900][ T6864] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 151.427255][ T6864] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.502452][ T6864] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full [ 151.600193][ T6840] loop0: detected capacity change from 0 to 40427 [ 151.718470][ T6840] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 151.810611][ T6840] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.858521][ T6880] netlink: 'syz.5.932': attribute type 1 has an invalid length. [ 151.883427][ T6840] F2FS-fs (loop0): invalid crc value [ 151.960607][ T6880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.097136][ T6888] bond1: (slave gretap1): making interface the new active one [ 152.106844][ T6840] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.121944][ T4175] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 152.133720][ T6888] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.179466][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 152.476871][ T6840] F2FS-fs (loop0): Start checkpoint disabled! [ 152.482126][ T4175] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 152.513045][ T4175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.558900][ T4175] usb 3-1: config 0 descriptor?? [ 152.613576][ T4175] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 152.693636][ T6903] loop3: detected capacity change from 0 to 128 [ 152.759451][ T26] audit: type=1800 audit(1790759173.217:23): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.948" name="file1" dev="loop3" ino=1048624 res=0 errno=0 [ 152.831759][ T4175] gp8psk: usb in 128 operation failed. [ 153.057892][ T6908] netlink: 716 bytes leftover after parsing attributes in process `syz.5.942'. [ 153.091664][ T4175] gp8psk: usb in 146 operation failed. [ 153.097302][ T4175] gp8psk: failed to get FW version [ 153.151639][ T4175] gp8psk: usb in 149 operation failed. [ 153.157196][ T4175] gp8psk: failed to get FPGA version [ 153.305536][ T6916] tmpfs: Unknown parameter 'no' [ 153.451602][ T4175] gp8psk: usb out operation failed. [ 153.457013][ T4175] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 153.478146][ T4175] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 153.521794][ T4175] usb 3-1: USB disconnect, device number 10 [ 153.554139][ T6921] FAULT_INJECTION: forcing a failure. [ 153.554139][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 153.577171][ T6921] CPU: 0 PID: 6921 Comm: syz.5.947 Not tainted syzkaller #0 [ 153.584524][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.594620][ T6921] Call Trace: [ 153.597929][ T6921] [ 153.600890][ T6921] dump_stack_lvl+0x188/0x250 [ 153.605616][ T6921] ? show_regs_print_info+0x20/0x20 [ 153.610856][ T6921] ? load_image+0x410/0x410 [ 153.615392][ T6921] ? __lock_acquire+0x7b50/0x7b50 [ 153.620461][ T6921] should_fail+0x383/0x4b0 [ 153.624943][ T6921] should_failslab+0x5/0x20 [ 153.629489][ T6921] slab_pre_alloc_hook+0x51/0xc0 [ 153.634501][ T6921] kmem_cache_alloc_trace+0x47/0x290 [ 153.639831][ T6921] ? btf_new_fd+0x1a0/0x910 [ 153.644370][ T6921] btf_new_fd+0x1a0/0x910 [ 153.648740][ T6921] __sys_bpf+0x58c/0x6f0 [ 153.653029][ T6921] ? bpf_link_show_fdinfo+0x380/0x380 [ 153.658603][ T6921] __x64_sys_bpf+0x78/0x90 [ 153.663061][ T6921] do_syscall_64+0x4c/0xa0 [ 153.667513][ T6921] ? clear_bhb_loop+0x30/0x80 [ 153.672228][ T6921] ? clear_bhb_loop+0x30/0x80 [ 153.676944][ T6921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.682899][ T6921] RIP: 0033:0x7fb992a22159 [ 153.687349][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.706987][ T6921] RSP: 002b:00007fb990c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.715438][ T6921] RAX: ffffffffffffffda RBX: 00007fb992ca9fa0 RCX: 00007fb992a22159 [ 153.723444][ T6921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 153.731440][ T6921] RBP: 00007fb992ab906b R08: 0000000000000000 R09: 0000000000000000 [ 153.739441][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.747450][ T6921] R13: 00007fb992caa038 R14: 00007fb992ca9fa0 R15: 00007ffe54a93248 [ 153.755471][ T6921] [ 154.374055][ T6947] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.469624][ T6950] gadgetfs: bound to dummy_udc driver [ 154.931636][ T6959] FAULT_INJECTION: forcing a failure. [ 154.931636][ T6959] name fail_futex, interval 1, probability 0, space 0, times 1 [ 154.935190][ T6948] chnl_net:caif_netlink_parms(): no params data found [ 154.972385][ T6959] CPU: 1 PID: 6959 Comm: syz.2.963 Not tainted syzkaller #0 [ 154.979740][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.989836][ T6959] Call Trace: [ 154.993144][ T6959] [ 154.996116][ T6959] dump_stack_lvl+0x188/0x250 [ 155.000835][ T6959] ? show_regs_print_info+0x20/0x20 [ 155.006068][ T6959] ? load_image+0x410/0x410 [ 155.010603][ T6959] ? stack_trace_save+0xf0/0xf0 [ 155.015484][ T6959] ? kfree+0xef/0x2a0 [ 155.019497][ T6959] should_fail+0x383/0x4b0 [ 155.023959][ T6959] get_futex_key+0x1a1/0x12d0 [ 155.028673][ T6959] ? futex_wait_restart+0x250/0x250 [ 155.033905][ T6959] ? __lock_acquire+0x13dc/0x7b50 [ 155.039012][ T6959] futex_wake+0x101/0x540 [ 155.043388][ T6959] ? futex_wait+0x680/0x680 [ 155.047925][ T6959] ? verify_lock_unused+0x140/0x140 [ 155.053168][ T6959] ? verify_lock_unused+0x140/0x140 [ 155.058409][ T6959] ? lockdep_hardirqs_on+0x94/0x140 [ 155.063643][ T6959] do_futex+0xd83/0x12b0 [ 155.067925][ T6959] ? slab_free_freelist_hook+0xec/0x170 [ 155.073528][ T6959] ? btf_new_fd+0x58e/0x910 [ 155.078068][ T6959] ? kfree+0xef/0x2a0 [ 155.082087][ T6959] ? futex_exit_release+0x1c0/0x1c0 [ 155.087328][ T6959] ? __context_tracking_exit+0x4c/0x80 [ 155.092828][ T6959] __se_sys_futex+0x389/0x420 [ 155.097551][ T6959] ? __x64_sys_futex+0xf0/0xf0 [ 155.102354][ T6959] ? __x64_sys_futex+0x1d/0xf0 [ 155.107156][ T6959] do_syscall_64+0x4c/0xa0 [ 155.111601][ T6959] ? clear_bhb_loop+0x30/0x80 [ 155.116315][ T6959] ? clear_bhb_loop+0x30/0x80 [ 155.121028][ T6959] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.126957][ T6959] RIP: 0033:0x7fba15a57159 [ 155.131425][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.151061][ T6959] RSP: 002b:00007fba13caf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.159509][ T6959] RAX: ffffffffffffffda RBX: 00007fba15cdefa8 RCX: 00007fba15a57159 [ 155.167537][ T6959] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fba15cdefac [ 155.175546][ T6959] RBP: 00007fba15cdefa0 R08: 0034e6c27dd36798 R09: 0000000000000000 [ 155.183548][ T6959] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 155.191550][ T6959] R13: 00007fba15cdf038 R14: 00007ffd2a460ae0 R15: 00007ffd2a460bc8 [ 155.199567][ T6959] [ 155.269584][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.290817][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.352687][ T6948] device bridge_slave_0 entered promiscuous mode [ 155.394805][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.439249][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.472827][ T6948] device bridge_slave_1 entered promiscuous mode [ 155.553023][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.600460][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.645130][ T6974] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.968'. [ 155.725241][ T6948] team0: Port device team_slave_0 added [ 155.777256][ T6948] team0: Port device team_slave_1 added [ 155.869959][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.888123][ T6954] loop5: detected capacity change from 0 to 40427 [ 155.901621][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.939509][ T6954] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 155.968662][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.986069][ T6954] F2FS-fs (loop5): invalid crc value [ 156.007183][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.024866][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.063187][ T6954] F2FS-fs (loop5): Found nat_bits in checkpoint [ 156.113098][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.171584][ T6954] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 156.287530][ T6948] device hsr_slave_0 entered promiscuous mode [ 156.312078][ T6948] device hsr_slave_1 entered promiscuous mode [ 156.373756][ T5298] attempt to access beyond end of device [ 156.373756][ T5298] loop5: rw=2049, want=45104, limit=40427 [ 156.389369][ T6994] gadgetfs: bound to dummy_udc driver [ 156.501688][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 156.800733][ T6948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.823575][ T6948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.840669][ T6948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.857981][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 156.875955][ T6948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.033719][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.101994][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.139019][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.155064][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.205406][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.248014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.274164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.299981][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.307151][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.327546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.348570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.365381][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.372638][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.413860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.423237][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.441498][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.452615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.472606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.481153][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.522421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.530665][ T1108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.557496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.565550][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.594078][ T1108] usb 1-1: config 0 descriptor?? [ 157.605900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.622666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.642975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.660602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.686798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.709692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.732544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.765214][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.853907][ T7007] loop2: detected capacity change from 0 to 40427 [ 157.884152][ T7007] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 157.910592][ T7007] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.968201][ T7007] F2FS-fs (loop2): invalid crc value [ 158.023323][ T7007] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.090025][ T1108] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 158.109619][ T1108] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 158.140881][ T1108] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 158.162831][ T7007] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.170090][ T7007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.226113][ T4240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.279528][ T7027] loop5: detected capacity change from 0 to 1024 [ 158.292976][ T26] audit: type=1804 audit(1790759178.757:24): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.980" name="/newroot/208/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 158.307282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.322835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.339317][ T6948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.364989][ T4240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.379000][ T4175] usb 1-1: USB disconnect, device number 11 [ 158.458039][ T7028] fido_id[7028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 158.497597][ T7027] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.533454][ T4240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.592334][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 158.637075][ T7027] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001e,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 158.678860][ T7027] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.723452][ T4195] attempt to access beyond end of device [ 158.723452][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 158.752486][ T4240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.074382][ T7039] loop0: detected capacity change from 0 to 2048 [ 159.170542][ T7039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.334743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.382710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.442023][ T4240] tipc: Disabling bearer [ 159.471663][ T4240] tipc: Left network mode [ 159.530846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.592586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.603180][ T6948] device veth0_vlan entered promiscuous mode [ 159.612674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.638264][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 159.649040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.757374][ T6948] device veth1_vlan entered promiscuous mode [ 159.871397][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.902283][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.927103][ T7063] loop2: detected capacity change from 0 to 2048 [ 159.952095][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.982410][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.022910][ T6948] device veth0_macvtap entered promiscuous mode [ 160.055340][ T7071] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.114639][ T6948] device veth1_macvtap entered promiscuous mode [ 160.126838][ T26] audit: type=1800 audit(1790759180.587:25): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.985" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 160.208782][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.244362][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.280244][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.303960][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.325378][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.342870][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.358867][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.377394][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.389703][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.407435][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.438466][ T7051] loop5: detected capacity change from 0 to 32768 [ 160.438874][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.469396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.481884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.521711][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.544957][ T7051] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 160.566656][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.576810][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.587687][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.598108][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.608770][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.619079][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.629743][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.639657][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.656589][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.668837][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.673055][ T6757] Bluetooth: hci4: command 0x040f tx timeout [ 160.707553][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.726935][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.759236][ T6948] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.789286][ T6948] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.839252][ T6948] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.866002][ T6948] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.922921][ T5298] ocfs2: Unmounting device (7,5) on (node local) [ 161.174368][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.192482][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.248299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.300177][ T7113] loop5: detected capacity change from 0 to 512 [ 161.328470][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.365645][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.434447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.529462][ T7113] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.541397][ T7128] loop6: detected capacity change from 0 to 128 [ 161.555134][ T7113] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.600527][ T26] audit: type=1800 audit(1790759182.057:26): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.952" name="file1" dev="loop6" ino=1048628 res=0 errno=0 [ 161.691668][ T2856] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 161.866714][ T7138] Set syz1 is full, maxelem 2 reached [ 161.884396][ T4240] device hsr_slave_0 left promiscuous mode [ 161.910871][ T4240] device hsr_slave_1 left promiscuous mode [ 161.922582][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.950618][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.977315][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.025030][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.044995][ T7147] loop2: detected capacity change from 0 to 128 [ 162.052208][ T4240] device bridge_slave_1 left promiscuous mode [ 162.069738][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.091809][ T2856] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.100775][ T2856] usb 1-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 162.126318][ T7147] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 162.156161][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.185911][ T7145] loop5: detected capacity change from 0 to 4096 [ 162.197603][ T7147] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.216702][ T2856] usb 1-1: config 0 descriptor?? [ 162.230496][ T4240] device bridge_slave_0 left promiscuous mode [ 162.244198][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.269536][ T7147] ext2 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.283428][ T2856] pwc: Samsung MPC-C30 USB webcam detected. [ 162.293634][ T7152] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.311351][ T4240] device veth1_macvtap left promiscuous mode [ 162.317802][ T4240] device veth0_macvtap left promiscuous mode [ 162.323997][ T4240] device veth1_vlan left promiscuous mode [ 162.330102][ T4240] device veth0_vlan left promiscuous mode [ 162.541824][ T2856] pwc: send_video_command error -71 [ 162.548839][ T2856] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 162.568272][ T2856] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 162.611372][ T2856] usb 1-1: USB disconnect, device number 12 [ 162.653291][ T7159] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 162.770776][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 162.959932][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 162.978790][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 162.998250][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.026674][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.256643][ T7185] loop2: detected capacity change from 0 to 8192 [ 163.285104][ T4240] bond0 (unregistering): Released all slaves [ 163.369733][ T7185] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 163.391687][ T7185] REISERFS (device loop2): using ordered data mode [ 163.407362][ T7185] reiserfs: using flush barriers [ 163.436185][ T7185] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.475988][ T7185] REISERFS (device loop2): checking transaction log (loop2) [ 163.650545][ T7185] REISERFS (device loop2): Using tea hash to sort names [ 163.703528][ T7185] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 163.734983][ T7185] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 163.753264][ T7200] device-mapper: table: 248:0: multipath: invalid number of path selector args [ 163.772978][ T7200] device-mapper: ioctl: error adding target to table [ 163.845593][ T26] audit: type=1800 audit(1790759184.307:27): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1026" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 164.123181][ T7212] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1034'. [ 164.212050][ T7216] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1034'. [ 164.330341][ T7218] loop6: detected capacity change from 0 to 2048 [ 164.334745][ T7223] loop5: detected capacity change from 0 to 128 [ 164.440025][ T7218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.500360][ T7223] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 164.572869][ T7223] hpfs: filesystem error: improperly stopped [ 164.578947][ T7223] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 164.617501][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 164.627244][ T7223] hpfs: You really don't want any checks? You are crazy... [ 164.636066][ T7223] hpfs: hpfs_map_sector(): read error [ 164.683671][ T7223] hpfs: code page support is disabled [ 164.690359][ T7223] hpfs: hpfs_map_4sectors(): unaligned read [ 164.769526][ T7236] loop2: detected capacity change from 0 to 512 [ 164.776208][ T7223] hpfs: hpfs_map_4sectors(): unaligned read [ 164.804998][ T7236] EXT4-fs (loop2): Ignoring removed orlov option [ 164.811703][ T7223] hpfs: filesystem error: unable to find root dir [ 164.935619][ T7236] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,init_itable=0x0000000000000007,orlov,,errors=continue. Quota mode: writeback. [ 165.011663][ T7236] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.036728][ T7249] overlayfs: failed to clone lowerpath [ 165.100106][ T26] audit: type=1800 audit(1790759185.557:28): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1044" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 165.431226][ T7273] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 166.040476][ T7264] loop5: detected capacity change from 0 to 32768 [ 166.135470][ T7264] JBD2: Ignoring recovery information on journal [ 166.164983][ T7303] loop6: detected capacity change from 0 to 128 [ 166.235966][ T7264] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 166.294714][ T7303] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.330260][ T7303] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.836766][ T7325] input: syz1 as /devices/virtual/input/input17 [ 167.008901][ T5298] ocfs2: Unmounting device (7,5) on (node local) [ 167.229572][ T7333] loop2: detected capacity change from 0 to 512 [ 167.298313][ T7333] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 167.393850][ T7336] loop6: detected capacity change from 0 to 1024 [ 167.399466][ T7333] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1071: corrupted in-inode xattr [ 167.453607][ T7333] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1071: couldn't read orphan inode 15 (err -117) [ 167.546771][ T7333] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 167.547896][ T7336] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 167.601661][ T7336] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.644118][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.679906][ T7319] loop0: detected capacity change from 0 to 32768 [ 167.711177][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 167.729068][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.773833][ T7347] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1073'. [ 167.804014][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 167.831306][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.921075][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 167.939087][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.974791][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 167.983528][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.019488][ T7319] UFO tlock:0xffffc90002812168 [ 168.032872][ T7338] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 168.082506][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 168.106152][ T7338] EXT4-fs (loop6): Remounting filesystem read-only [ 168.112799][ T7359] non-latin1 character 0x637c found in JFS file name [ 168.121240][ T7359] mount with iocharset=utf8 to access [ 168.142002][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.206648][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 168.221380][ T7364] Illegal XDP return value 4294967274, expect packet loss! [ 168.228809][ T6757] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 168.252569][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.338406][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 168.361388][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.484188][ T7371] loop2: detected capacity change from 0 to 164 [ 168.491305][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 168.501803][ T6757] usb 6-1: Using ep0 maxpacket: 8 [ 168.512000][ T7334] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1072: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.617033][ T7334] EXT4-fs (loop6): Remounting filesystem read-only [ 168.624318][ T6757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.701890][ T6757] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.783726][ T6757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.832747][ T7374] loop0: detected capacity change from 0 to 1024 [ 168.880511][ T6757] usb 6-1: config 0 descriptor?? [ 168.940804][ T7374] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000010000,noquota,noquota,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 168.973585][ T7374] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.060418][ T7374] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.1079: lblock 0 mapped to illegal pblock 0 (length 4) [ 169.109093][ T7374] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 169.206262][ T6757] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 169.221627][ T7374] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.221627][ T7374] [ 169.243549][ T7387] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.1079: lblock 0 mapped to illegal pblock 0 (length 1) [ 169.305268][ T7387] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.1079: lblock 0 mapped to illegal pblock 0 (length 1) [ 169.358573][ T7398] "syz.6.1086" (7398) uses obsolete ecb(arc4) skcipher [ 169.379068][ T7387] EXT4-fs error (device loop0): ext4_ext_remove_space:2944: inode #15: comm syz.0.1079: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 169.423055][ T6757] usb 6-1: USB disconnect, device number 4 [ 169.491055][ T9] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 4: comm kworker/u4:0: lblock 4 mapped to illegal pblock 4 (length 2) [ 169.519806][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 169.538405][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.538405][ T9] [ 169.558340][ T9] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 169.579067][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 169.597339][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.597339][ T9] [ 170.029049][ T7430] FAULT_INJECTION: forcing a failure. [ 170.029049][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 170.042355][ T7430] CPU: 1 PID: 7430 Comm: syz.2.1093 Not tainted syzkaller #0 [ 170.049769][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.059855][ T7430] Call Trace: [ 170.063173][ T7430] [ 170.066136][ T7430] dump_stack_lvl+0x188/0x250 [ 170.070848][ T7430] ? show_regs_print_info+0x20/0x20 [ 170.076081][ T7430] ? load_image+0x410/0x410 [ 170.080633][ T7430] ? __might_sleep+0xf0/0xf0 [ 170.085445][ T7430] ? __lock_acquire+0x7b50/0x7b50 [ 170.090518][ T7430] should_fail+0x383/0x4b0 [ 170.094972][ T7430] should_failslab+0x5/0x20 [ 170.099513][ T7430] slab_pre_alloc_hook+0x51/0xc0 [ 170.104487][ T7430] ? getname_flags+0xb7/0x4f0 [ 170.109201][ T7430] kmem_cache_alloc+0x3d/0x280 [ 170.113999][ T7430] getname_flags+0xb7/0x4f0 [ 170.118559][ T7430] user_path_at_empty+0x2a/0x190 [ 170.123546][ T7430] __se_sys_mount+0x2a4/0x3d0 [ 170.128268][ T7430] ? __x64_sys_mount+0xc0/0xc0 [ 170.133130][ T7430] ? lockdep_hardirqs_on+0x94/0x140 [ 170.138374][ T7430] ? __x64_sys_mount+0x1c/0xc0 [ 170.143178][ T7430] do_syscall_64+0x4c/0xa0 [ 170.147626][ T7430] ? clear_bhb_loop+0x30/0x80 [ 170.152362][ T7430] ? clear_bhb_loop+0x30/0x80 [ 170.157074][ T7430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.163006][ T7430] RIP: 0033:0x7fba15a57159 [ 170.167453][ T7430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.187097][ T7430] RSP: 002b:00007fba13caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.195549][ T7430] RAX: ffffffffffffffda RBX: 00007fba15cdefa0 RCX: 00007fba15a57159 [ 170.203586][ T7430] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 00002000000001c0 [ 170.211592][ T7430] RBP: 00007fba15aee06b R08: 0000000000000000 R09: 0000000000000000 [ 170.219593][ T7430] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 170.227582][ T7430] R13: 00007fba15cdf038 R14: 00007fba15cdefa0 R15: 00007ffd2a460bc8 [ 170.235585][ T7430] [ 170.358198][ T7436] syz.6.1094 (7436) used obsolete PPPIOCDETACH ioctl [ 170.473717][ T4232] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 170.500985][ T4232] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.733807][ T7427] loop5: detected capacity change from 0 to 32768 [ 170.803836][ T7427] JBD2: Ignoring recovery information on journal [ 170.886544][ T7427] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 171.071625][ T7443] hid-generic 0000:0000:0000.000C: pid 7443 passed too large report [ 171.094392][ T5298] ocfs2: Unmounting device (7,5) on (node local) [ 171.186773][ T7466] netlink: 'syz.6.1102': attribute type 1 has an invalid length. [ 171.651730][ T6757] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 171.866540][ T7517] loop2: detected capacity change from 0 to 128 [ 171.941603][ T6757] usb 7-1: Using ep0 maxpacket: 8 [ 172.023245][ T7520] loop2: detected capacity change from 0 to 2048 [ 172.091763][ T6757] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 172.103483][ T6757] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.120981][ T6757] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.133845][ T6757] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.151082][ T6757] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.172158][ T6757] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.190624][ T7520] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.201958][ T6757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.210642][ T7520] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.411901][ T7530] loop2: detected capacity change from 0 to 1024 [ 172.456468][ T7530] EXT4-fs (loop2): Ignoring removed oldalloc option [ 172.480104][ T7530] EXT4-fs (loop2): Ignoring removed oldalloc option [ 172.501757][ T6757] usb 7-1: usb_control_msg returned -32 [ 172.507658][ T6757] usbtmc 7-1:16.0: can't read capabilities [ 172.519136][ T7530] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.580985][ T7530] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 173.162422][ T7545] loop5: detected capacity change from 0 to 32768 [ 174.026838][ T7596] loop2: detected capacity change from 0 to 4096 [ 174.050382][ T7596] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 174.078694][ T7598] binder: 7597:7598 ioctl 4018620d 0 returned -22 [ 174.093161][ T7598] binder: BC_ACQUIRE_RESULT not supported [ 174.099226][ T7598] binder: 7597:7598 ioctl c0306201 2000000007c0 returned -22 [ 174.405688][ T7] usb 7-1: USB disconnect, device number 2 [ 174.540752][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1152'. [ 174.549943][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1152'. [ 174.563228][ T7620] device geneve2 entered promiscuous mode [ 174.881090][ T7635] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 174.892199][ T7635] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 175.147153][ T4232] Bluetooth: hci1: command 0x0c24 tx timeout [ 175.154526][ T4232] Bluetooth: hci0: command 0x0c24 tx timeout [ 175.471145][ T7656] Trying to write to read-only block-device nullb0 [ 175.698403][ T7667] loop6: detected capacity change from 0 to 16 [ 175.745136][ T7667] erofs: (device loop6): mounted with root inode @ nid 36. [ 175.773227][ T7667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.985114][ T7679] loop5: detected capacity change from 0 to 512 [ 176.043879][ T7679] EXT4-fs (loop5): Ignoring removed nobh option [ 176.124213][ T7683] FAULT_INJECTION: forcing a failure. [ 176.124213][ T7683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.140708][ T7679] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 176.156228][ T7683] CPU: 1 PID: 7683 Comm: syz.6.1177 Not tainted syzkaller #0 [ 176.163649][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.173737][ T7683] Call Trace: [ 176.177042][ T7683] [ 176.180002][ T7683] dump_stack_lvl+0x188/0x250 [ 176.184724][ T7683] ? show_regs_print_info+0x20/0x20 [ 176.189953][ T7683] ? load_image+0x410/0x410 [ 176.194486][ T7683] ? __lock_acquire+0x7b50/0x7b50 [ 176.199554][ T7683] ? __up_read+0x2b4/0x6b0 [ 176.204010][ T7683] should_fail+0x383/0x4b0 [ 176.208469][ T7683] _copy_to_user+0x2e/0x130 [ 176.213014][ T7683] pagemap_read+0x432/0x600 [ 176.217562][ T7683] ? clear_refs_write+0x650/0x650 [ 176.222618][ T7683] ? end_current_label_crit_section+0x14b/0x170 [ 176.228901][ T7683] ? common_file_perm+0x171/0x1c0 [ 176.233970][ T7683] ? fsnotify_perm+0x254/0x560 [ 176.238777][ T7683] ? clear_refs_write+0x650/0x650 [ 176.243831][ T7683] vfs_read+0x2ff/0xd50 [ 176.248023][ T7683] ? __lock_acquire+0x7b50/0x7b50 [ 176.253086][ T7683] ? kernel_read+0x1e0/0x1e0 [ 176.257716][ T7683] ? __fget_files+0x402/0x470 [ 176.262439][ T7683] ? __fdget+0x18b/0x210 [ 176.266721][ T7683] ? __x64_sys_pread64+0xf3/0x220 [ 176.271788][ T7683] __x64_sys_pread64+0x197/0x220 [ 176.276778][ T7683] ? ksys_pread64+0x1c0/0x1c0 [ 176.281501][ T7683] ? lockdep_hardirqs_on+0x94/0x140 [ 176.286741][ T7683] do_syscall_64+0x4c/0xa0 [ 176.291220][ T7683] ? clear_bhb_loop+0x30/0x80 [ 176.295951][ T7683] ? clear_bhb_loop+0x30/0x80 [ 176.300693][ T7683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.306780][ T7683] RIP: 0033:0x7f38208e8159 [ 176.311243][ T7683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.330892][ T7683] RSP: 002b:00007f381eb40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 176.339352][ T7683] RAX: ffffffffffffffda RBX: 00007f3820b6ffa0 RCX: 00007f38208e8159 [ 176.347367][ T7683] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 176.355392][ T7683] RBP: 00007f382097f06b R08: 0000000000000000 R09: 0000000000000000 [ 176.363583][ T7683] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 176.371594][ T7683] R13: 00007f3820b70038 R14: 00007f3820b6ffa0 R15: 00007ffd11129498 [ 176.379620][ T7683] [ 176.410248][ T7679] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.435853][ T7679] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1176: corrupted inode contents [ 176.490551][ T7679] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1176: mark_inode_dirty error [ 176.521379][ T7679] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1176: corrupted inode contents [ 176.547461][ T7679] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1176: mark_inode_dirty error [ 176.579544][ T7693] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1176: corrupted inode contents [ 176.604565][ T7693] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1176: mark_inode_dirty error [ 176.634007][ T7693] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1176: corrupted inode contents [ 176.665946][ T7696] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1176: corrupted inode contents [ 176.719181][ T7696] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.1176: mark_inode_dirty error [ 176.758080][ T7696] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 176.824484][ T7695] loop6: detected capacity change from 0 to 32768 [ 176.900184][ T7695] XFS (loop6): Mounting V5 Filesystem [ 176.982209][ T7695] XFS (loop6): Ending clean mount [ 176.998470][ T7695] XFS (loop6): Quotacheck needed: Please wait. [ 177.032731][ T7718] loop2: detected capacity change from 0 to 512 [ 177.096585][ T7695] XFS (loop6): Quotacheck: Done. [ 177.198362][ T6948] XFS (loop6): Unmounting Filesystem [ 177.245518][ T7718] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1188: inode #1: comm syz.2.1188: iget: illegal inode # [ 177.263549][ T7718] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1188: error while reading EA inode 1 err=-117 [ 177.379839][ T7728] fuse: Bad value for 'fd' [ 177.388400][ T7718] EXT4-fs (loop2): 1 orphan inode deleted [ 177.418263][ T7718] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,resgid=0x0000000000000000,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 177.846759][ T7751] loop2: detected capacity change from 0 to 512 [ 177.987035][ T7751] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 178.010949][ T7751] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.365705][ T7763] IPVS: Scheduler module ip_vs_ not found [ 178.398480][ T26] audit: type=1800 audit(1790759198.857:29): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1207" name="zone_nr_conv" dev="configfs" ino=44859 res=0 errno=0 [ 178.696003][ T7777] loop5: detected capacity change from 0 to 4096 [ 178.804046][ T7779] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.889784][ T7782] loop2: detected capacity change from 0 to 2048 [ 179.147701][ T7789] loop2: detected capacity change from 0 to 512 [ 179.159220][ T7791] fuse: Bad value for 'fd' [ 179.251567][ T4231] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 179.264548][ T7789] EXT4-fs (loop2): journaled quota format not specified [ 179.310727][ T7789] FAULT_INJECTION: forcing a failure. [ 179.310727][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 179.331771][ T7789] CPU: 0 PID: 7789 Comm: syz.2.1214 Not tainted syzkaller #0 [ 179.339210][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.349318][ T7789] Call Trace: [ 179.352633][ T7789] [ 179.355598][ T7789] dump_stack_lvl+0x188/0x250 [ 179.360315][ T7789] ? show_regs_print_info+0x20/0x20 [ 179.365548][ T7789] ? load_image+0x410/0x410 [ 179.370096][ T7789] ? __might_sleep+0xf0/0xf0 [ 179.374725][ T7789] ? __lock_acquire+0x7b50/0x7b50 [ 179.379824][ T7789] ? do_futex+0xdc2/0x12b0 [ 179.384287][ T7789] should_fail+0x383/0x4b0 [ 179.388744][ T7789] should_failslab+0x5/0x20 [ 179.393281][ T7789] slab_pre_alloc_hook+0x51/0xc0 [ 179.398266][ T7789] ? copy_fs_struct+0x4b/0x270 [ 179.403066][ T7789] kmem_cache_alloc+0x3d/0x280 [ 179.407875][ T7789] copy_fs_struct+0x4b/0x270 [ 179.412512][ T7789] ksys_unshare+0x397/0x8e0 [ 179.417066][ T7789] ? __lock_acquire+0x7b50/0x7b50 [ 179.422174][ T7789] ? sighand_ctor+0x40/0x40 [ 179.426717][ T7789] ? lock_chain_count+0x20/0x20 [ 179.431615][ T7789] ? syscall_enter_from_user_mode+0x21/0x70 [ 179.437559][ T7789] __x64_sys_unshare+0x34/0x40 [ 179.442363][ T7789] do_syscall_64+0x4c/0xa0 [ 179.446814][ T7789] ? clear_bhb_loop+0x30/0x80 [ 179.451533][ T7789] ? clear_bhb_loop+0x30/0x80 [ 179.456253][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.462188][ T7789] RIP: 0033:0x7fba15a57159 [ 179.466647][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.486307][ T7789] RSP: 002b:00007fba13caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 179.494768][ T7789] RAX: ffffffffffffffda RBX: 00007fba15cdefa0 RCX: 00007fba15a57159 [ 179.502778][ T7789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020600 [ 179.510794][ T7789] RBP: 00007fba15aee06b R08: 0000000000000000 R09: 0000000000000000 [ 179.518800][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.526808][ T7789] R13: 00007fba15cdf038 R14: 00007fba15cdefa0 R15: 00007ffd2a460bc8 [ 179.534829][ T7789] [ 179.631856][ T4231] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.648479][ T7784] loop5: detected capacity change from 0 to 32768 [ 179.655513][ T4231] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.684328][ T4231] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.715163][ T4231] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.735466][ T4555] loop5: p1 p3 < > [ 179.735969][ T4231] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 179.756180][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.823203][ T4231] spcp8x5 7-1:1.0: required endpoints missing [ 179.851673][ T7784] loop5: p1 p3 < > [ 180.130264][ T4175] usb 7-1: USB disconnect, device number 3 [ 180.321309][ T4557] udevd[4557]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 180.321761][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 180.386015][ T4557] udevd[4557]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 180.394732][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 180.582531][ T7814] loop5: detected capacity change from 0 to 32768 [ 180.610344][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 180.620382][ T7843] device bridge_slave_1 left promiscuous mode [ 180.671384][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.695057][ T7843] device bridge_slave_0 left promiscuous mode [ 180.701862][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.719536][ T7844] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 180.719536][ T7844] [ 180.735856][ T7844] ERROR: (device loop5): remounting filesystem as read-only [ 180.824506][ T7848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.900352][ T7851] loop6: detected capacity change from 0 to 512 [ 180.985921][ T7851] EXT4-fs (loop6): Ignoring removed bh option [ 181.008622][ T7851] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.109870][ T7856] loop2: detected capacity change from 0 to 256 [ 181.147061][ T7851] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000007,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 181.167040][ T7851] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.632475][ T7891] loop2: detected capacity change from 0 to 64 [ 181.704706][ T7891] hfs: invalid catalog max_key_len 7 [ 181.710492][ T7891] hfs: unable to open catalog tree [ 181.747410][ T7898] loop6: detected capacity change from 0 to 64 [ 182.065622][ T7918] fuse: Bad value for 'fd' [ 182.257491][ T7930] loop2: detected capacity change from 0 to 1024 [ 182.695859][ T7954] loop2: detected capacity change from 0 to 164 [ 182.735197][ T7911] Trying to write to read-only block-device nullb0 [ 182.808760][ T7954] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 182.942122][ T7961] loop0: detected capacity change from 0 to 128 [ 183.017599][ T7961] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 183.048108][ T7961] hpfs: filesystem error: improperly stopped [ 183.102519][ T7961] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 183.132872][ T7961] hpfs: You really don't want any checks? You are crazy... [ 183.140145][ T7961] hpfs: Code page index out of array [ 183.180815][ T7961] hpfs: code page support is disabled [ 183.209806][ T7961] hpfs: hpfs_map_4sectors(): unaligned read [ 183.233548][ T7961] hpfs: hpfs_map_4sectors(): unaligned read [ 183.239531][ T7961] hpfs: filesystem error: unable to find root dir [ 183.457652][ T7983] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.1274: bad orphan inode 15 [ 183.508646][ T7983] ext4_test_bit(bit=14, block=18) = 1 [ 183.534635][ T7983] is_bad_inode(inode)=0 [ 183.538860][ T7983] NEXT_ORPHAN(inode)=1023 [ 183.567147][ T7983] max_ino=32 [ 183.570426][ T7983] i_nlink=0 [ 183.609957][ T7983] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2928: inode #15: comm syz.5.1274: corrupted xattr block 19 [ 183.657794][ T7983] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 183.686942][ T7983] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.728573][ T7983] ext4 filesystem being mounted at /138/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 183.998577][ T8002] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.042383][ T8002] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 184.137442][ T8002] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 184.733614][ T8045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.834692][ T8011] set_capacity_and_notify: 2 callbacks suppressed [ 184.834709][ T8011] loop5: detected capacity change from 0 to 32768 [ 184.901168][ T8055] FAULT_INJECTION: forcing a failure. [ 184.901168][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 184.924251][ T8055] CPU: 1 PID: 8055 Comm: syz.6.1291 Not tainted syzkaller #0 [ 184.931689][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.941772][ T8055] Call Trace: [ 184.945076][ T8055] [ 184.948033][ T8055] dump_stack_lvl+0x188/0x250 [ 184.952748][ T8055] ? show_regs_print_info+0x20/0x20 [ 184.957968][ T8055] ? load_image+0x410/0x410 [ 184.962503][ T8055] ? __lock_acquire+0x7b50/0x7b50 [ 184.967593][ T8055] should_fail+0x383/0x4b0 [ 184.972049][ T8055] should_failslab+0x5/0x20 [ 184.976583][ T8055] slab_pre_alloc_hook+0x51/0xc0 [ 184.981561][ T8055] __kmalloc_node_track_caller+0x68/0x3a0 [ 184.987302][ T8055] ? vhci_write+0xbd/0x440 [ 184.991752][ T8055] ? __alloc_skb+0xf4/0x750 [ 184.996287][ T8055] ? vhci_write+0xbd/0x440 [ 185.000724][ T8055] __alloc_skb+0x22c/0x750 [ 185.005168][ T8055] vhci_write+0xbd/0x440 [ 185.009438][ T8055] vfs_write+0x748/0xd70 [ 185.013726][ T8055] ? file_end_write+0x250/0x250 [ 185.018601][ T8055] ? __fget_files+0x402/0x470 [ 185.023301][ T8055] ? __fdget_pos+0x1e2/0x370 [ 185.027911][ T8055] ? ksys_write+0x70/0x260 [ 185.032347][ T8055] ksys_write+0x153/0x260 [ 185.036696][ T8055] ? __ia32_sys_read+0x80/0x80 [ 185.041487][ T8055] ? lockdep_hardirqs_on+0x94/0x140 [ 185.046716][ T8055] do_syscall_64+0x4c/0xa0 [ 185.051150][ T8055] ? clear_bhb_loop+0x30/0x80 [ 185.055840][ T8055] ? clear_bhb_loop+0x30/0x80 [ 185.060557][ T8055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.066471][ T8055] RIP: 0033:0x7f38208a898e [ 185.070914][ T8055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.090566][ T8055] RSP: 002b:00007f381eb3ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.099010][ T8055] RAX: ffffffffffffffda RBX: 00007f381eb406c0 RCX: 00007f38208a898e [ 185.107005][ T8055] RDX: 0000000000000009 RSI: 00002000000000c0 RDI: 00000000000000ca [ 185.114996][ T8055] RBP: 00007f382097f06b R08: 0000000000000000 R09: 0000000000000000 [ 185.122983][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.130967][ T8055] R13: 00007f3820b70038 R14: 00007f3820b6ffa0 R15: 00007ffd11129498 [ 185.139039][ T8055] [ 185.151586][ T2856] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.163572][ T8011] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1280 (8011) [ 185.210784][ T8011] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 185.226087][ T8011] BTRFS info (device loop5): setting nodatacow, compression disabled [ 185.234672][ T8011] BTRFS info (device loop5): setting datasum, datacow enabled [ 185.246871][ T8011] BTRFS info (device loop5): force clearing of disk cache [ 185.256470][ T8011] BTRFS info (device loop5): enabling ssd optimizations [ 185.263822][ T8011] BTRFS info (device loop5): using spread ssd allocation scheme [ 185.272500][ T8011] BTRFS info (device loop5): turning on sync discard [ 185.279529][ T8011] BTRFS info (device loop5): turning off barriers [ 185.286768][ T8011] BTRFS info (device loop5): enabling disk space caching [ 185.294069][ T8011] BTRFS info (device loop5): enabling auto defrag [ 185.300537][ T8011] BTRFS info (device loop5): not using ssd optimizations [ 185.307897][ T8011] BTRFS info (device loop5): not using spread ssd allocation scheme [ 185.316068][ T8011] BTRFS info (device loop5): disk space caching is enabled [ 185.337155][ T8011] BTRFS info (device loop5): has skinny extents [ 185.391614][ T2856] usb 1-1: Using ep0 maxpacket: 16 [ 185.480223][ T8068] loop2: detected capacity change from 0 to 4096 [ 185.504307][ T8068] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 185.512544][ T2856] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.600784][ T8068] ntfs: volume version 3.1. [ 185.616749][ T8011] BTRFS info (device loop5): clearing free space tree [ 185.620510][ T2856] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.645486][ T8011] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.694881][ T2856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.702357][ T8011] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.727961][ T2856] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 185.757646][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.788227][ T2856] usb 1-1: config 0 descriptor?? [ 185.941612][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 185.950956][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 185.991829][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 186.127924][ T8101] loop2: detected capacity change from 0 to 128 [ 186.161790][ T6757] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 186.245330][ T8101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 186.254350][ T8101] System zones: 1-3, 19-19, 35-36 [ 186.265919][ T2856] hid-multitouch 0003:0EEF:72C4.000D: No inputs registered, leaving [ 186.292940][ T8101] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 186.309667][ T2856] hid-multitouch 0003:0EEF:72C4.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 186.340976][ T8101] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.406498][ T8101] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 186.441844][ T6757] usb 7-1: Using ep0 maxpacket: 32 [ 186.570821][ T7] usb 1-1: USB disconnect, device number 13 [ 186.591890][ T6757] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 186.600161][ T6757] usb 7-1: config 0 has no interface number 0 [ 186.648342][ T8116] fido_id[8116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 186.678332][ T6757] usb 7-1: config 0 interface 184 has no altsetting 0 [ 186.697488][ T8118] input: syz0 as /devices/virtual/input/input19 [ 186.881827][ T6757] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 186.890950][ T6757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.929537][ T6757] usb 7-1: Product: syz [ 186.937950][ T6757] usb 7-1: Manufacturer: syz [ 186.979355][ T6757] usb 7-1: SerialNumber: syz [ 187.019526][ T6757] usb 7-1: config 0 descriptor?? [ 187.026277][ T8135] loop2: detected capacity change from 0 to 256 [ 187.092818][ T6757] smsc75xx v1.0.0 [ 187.530005][ T8154] FAULT_INJECTION: forcing a failure. [ 187.530005][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 187.565263][ T8154] CPU: 1 PID: 8154 Comm: syz.2.1308 Not tainted syzkaller #0 [ 187.572731][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.582823][ T8154] Call Trace: [ 187.586140][ T8154] [ 187.589098][ T8154] dump_stack_lvl+0x188/0x250 [ 187.593824][ T8154] ? show_regs_print_info+0x20/0x20 [ 187.599066][ T8154] ? load_image+0x410/0x410 [ 187.603619][ T8154] ? __might_sleep+0xf0/0xf0 [ 187.608248][ T8154] ? __lock_acquire+0x7b50/0x7b50 [ 187.613333][ T8154] should_fail+0x383/0x4b0 [ 187.617807][ T8154] should_failslab+0x5/0x20 [ 187.622376][ T8154] slab_pre_alloc_hook+0x51/0xc0 [ 187.627360][ T8154] __kmalloc_node+0x6d/0x3a0 [ 187.631993][ T8154] ? blk_mq_alloc_tag_set+0x4d9/0xf30 [ 187.637413][ T8154] blk_mq_alloc_tag_set+0x4d9/0xf30 [ 187.642742][ T8154] loop_add+0x257/0x890 [ 187.646937][ T8154] loop_control_ioctl+0x124/0x550 [ 187.652013][ T8154] ? xor_init+0x60/0x60 [ 187.656207][ T8154] ? bpf_lsm_file_ioctl+0x5/0x10 [ 187.661183][ T8154] ? security_file_ioctl+0x7c/0xa0 [ 187.666333][ T8154] ? xor_init+0x60/0x60 [ 187.670528][ T8154] __se_sys_ioctl+0xfa/0x170 [ 187.675165][ T8154] do_syscall_64+0x4c/0xa0 [ 187.679641][ T8154] ? clear_bhb_loop+0x30/0x80 [ 187.684356][ T8154] ? clear_bhb_loop+0x30/0x80 [ 187.689067][ T8154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.694992][ T8154] RIP: 0033:0x7fba15a57159 [ 187.699456][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.719140][ T8154] RSP: 002b:00007fba13caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.727610][ T8154] RAX: ffffffffffffffda RBX: 00007fba15cdefa0 RCX: 00007fba15a57159 [ 187.735740][ T8154] RDX: 0000000087000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 187.743760][ T8154] RBP: 00007fba15aee06b R08: 0000000000000000 R09: 0000000000000000 [ 187.751772][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.759790][ T8154] R13: 00007fba15cdf038 R14: 00007fba15cdefa0 R15: 00007ffd2a460bc8 [ 187.767928][ T8154] [ 187.771748][ T6757] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 187.806919][ T6757] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.894273][ T8167] FAULT_INJECTION: forcing a failure. [ 187.894273][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 187.919901][ T8167] CPU: 0 PID: 8167 Comm: syz.0.1311 Not tainted syzkaller #0 [ 187.927437][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.937531][ T8167] Call Trace: [ 187.940854][ T8167] [ 187.943822][ T8167] dump_stack_lvl+0x188/0x250 [ 187.948548][ T8167] ? show_regs_print_info+0x20/0x20 [ 187.953793][ T8167] ? load_image+0x410/0x410 [ 187.958335][ T8167] ? __lock_acquire+0x7b50/0x7b50 [ 187.963394][ T8167] ? memset+0x1e/0x40 [ 187.967411][ T8167] ? lockdep_init_map_type+0x98/0x900 [ 187.972827][ T8167] should_fail+0x383/0x4b0 [ 187.977289][ T8167] should_failslab+0x5/0x20 [ 187.981827][ T8167] slab_pre_alloc_hook+0x51/0xc0 [ 187.986800][ T8167] ? security_inode_alloc+0x30/0x110 [ 187.992121][ T8167] kmem_cache_alloc+0x3d/0x280 [ 187.996935][ T8167] security_inode_alloc+0x30/0x110 [ 188.002089][ T8167] inode_init_always+0x8e5/0xc90 [ 188.007073][ T8167] new_inode_pseudo+0x8e/0x210 [ 188.011876][ T8167] new_inode+0x25/0x1d0 [ 188.016071][ T8167] shmem_get_inode+0x304/0xa40 [ 188.020888][ T8167] __shmem_file_setup+0x10b/0x290 [ 188.026100][ T8167] shmem_zero_setup+0x8e/0x1c0 [ 188.030916][ T8167] mmap_region+0x135d/0x1730 [ 188.035571][ T8167] do_mmap+0x801/0xe30 [ 188.039686][ T8167] ? vm_mmap_pgoff+0x16c/0x2d0 [ 188.044489][ T8167] vm_mmap_pgoff+0x1c1/0x2d0 [ 188.049121][ T8167] ? account_locked_vm+0xe0/0xe0 [ 188.054088][ T8167] ? __context_tracking_exit+0x4c/0x80 [ 188.059597][ T8167] ? __lock_acquire+0x7b50/0x7b50 [ 188.064679][ T8167] ksys_mmap_pgoff+0x140/0x790 [ 188.069578][ T8167] ? mmap_region+0x1730/0x1730 [ 188.074386][ T8167] ? lockdep_hardirqs_on+0x94/0x140 [ 188.079631][ T8167] do_syscall_64+0x4c/0xa0 [ 188.084083][ T8167] ? clear_bhb_loop+0x30/0x80 [ 188.088795][ T8167] ? clear_bhb_loop+0x30/0x80 [ 188.093515][ T8167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.099447][ T8167] RIP: 0033:0x7f2191854159 [ 188.103899][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.123540][ T8167] RSP: 002b:00007f218faac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 188.131999][ T8167] RAX: ffffffffffffffda RBX: 00007f2191adbfa0 RCX: 00007f2191854159 [ 188.140006][ T8167] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 0000000000000000 [ 188.148020][ T8167] RBP: 00007f21918eb06b R08: ffffffffffffffff R09: 0000000000000000 [ 188.156032][ T8167] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 188.164037][ T8167] R13: 00007f2191adc038 R14: 00007f2191adbfa0 R15: 00007ffcce7ddfa8 [ 188.172067][ T8167] [ 188.177808][ T8168] overlayfs: failed to clone upperpath [ 188.192366][ T6757] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 188.223722][ T6757] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 188.242826][ T6757] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 188.258527][ T6757] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 188.274731][ T6757] usb 7-1: USB disconnect, device number 4 [ 188.360512][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 188.612255][ T8160] loop5: detected capacity change from 0 to 32768 [ 188.828493][ T8160] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 188.927990][ T8160] VFS: Lookup of '' in ocfs2 loop5 would have caused loop [ 189.128636][ T5298] ocfs2: Unmounting device (7,5) on (node local) [ 189.135415][ T5298] VFS: Busy inodes after unmount of loop5. Self-destruct in 5 seconds. Have a nice day... [ 194.104522][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.110874][ T1420] ieee802154 phy1 wpan1: encryption failed: -22