last executing test programs: 54.195734754s ago: executing program 4 (id=650): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 53.928194023s ago: executing program 4 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800032c00f326635000800000f300f0f1c9a65660ff3b20618a420c90000672e660f38803d004000000f285473b83f018ec866b9800000c00f320f300f20e06635800000000f22e02b7aa60f154e2c", 0x51}], 0x1, 0x4, 0x0, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 53.735214276s ago: executing program 4 (id=662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 51.736376576s ago: executing program 4 (id=678): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlink(&(0x7f0000000080)='./file1\x00') 51.051474857s ago: executing program 4 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 client1\n', 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='client1 1 \\x00\\x00\\x00\\x01 2147483647 ./export\n', 0x2f) 50.31447025s ago: executing program 4 (id=688): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14, 0x3}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x3, 0xcc}, 0x10) 50.187776258s ago: executing program 32 (id=688): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14, 0x3}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x3, 0xcc}, 0x10) 41.735811651s ago: executing program 2 (id=752): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000840)=[{r0, 0x80a0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 40.708307087s ago: executing program 2 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03}]}) 40.567978808s ago: executing program 2 (id=761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x3c2}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 39.682649434s ago: executing program 2 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x4000, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 39.535558776s ago: executing program 2 (id=770): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x30000, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) 39.15447826s ago: executing program 2 (id=772): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d0000000006"], 0x0, 0x6a, 0x0, 0xffffffff, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 38.986745127s ago: executing program 33 (id=772): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d0000000006"], 0x0, 0x6a, 0x0, 0xffffffff, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 29.12732743s ago: executing program 5 (id=851): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000640)={0x40, 0x10, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) 25.420317997s ago: executing program 5 (id=886): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) 25.052520588s ago: executing program 5 (id=889): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xff81, 0x100, 0x0, 0x7fdf, 0x1, "db2d416fbecfb8635452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x6f) 24.779842688s ago: executing program 5 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 24.613992075s ago: executing program 5 (id=891): r0 = socket(0x10, 0x803, 0x0) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendto(r0, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 24.132357731s ago: executing program 5 (id=894): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0x8, 0x11, "6a5aa6fdc81d7b996e196234d92a78151b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340), 0x0}) 23.899087712s ago: executing program 34 (id=894): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0x8, 0x11, "6a5aa6fdc81d7b996e196234d92a78151b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340), 0x0}) 6.791055313s ago: executing program 3 (id=1032): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143040, 0x650ce4b086bd45cb) 5.904819419s ago: executing program 3 (id=1035): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1558}, @TCA_TBF_PRATE64={0xc, 0x5, 0x89831a08d99edb83}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b3f5080c7bc21a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x80, 0x5, 0x800, 0x80}, {0x6, 0x2, 0x0, 0x0, 0x8, 0xe}, 0x7, 0x4, 0x9da}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(r0, &(0x7f0000000180)="18fc8e78695cf5ec0100000000843bc79cf33be5177d9cd009ada298", 0x1c, 0x15, &(0x7f0000000380)={0x11, 0x3, r2}, 0x14) 5.30651128s ago: executing program 3 (id=1039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.762560151s ago: executing program 6 (id=1042): mkdirat(0xffffffffffffff9c, 0x0, 0x1b7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000100)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x0, 0x48f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240), 0x3, 0x56a, &(0x7f00000015c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28, 0x3, 0x7ff, 0x1, 0x9}) 4.595568967s ago: executing program 3 (id=1044): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 4.215751661s ago: executing program 7 (id=1046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x101, 0x2, 0x2}) 4.055646566s ago: executing program 6 (id=1047): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f00000000c0)=0xb, 0x8, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000001b00)={0x2020}, 0x173f) 3.886141913s ago: executing program 3 (id=1048): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.715627341s ago: executing program 7 (id=1049): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00033c0000005d03"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000380)={0x20, 0x21, 0x5, {0x5, 0x5, "854319"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x12, @string={0x12, 0x3, "563cefeedd64217331ad288039aa3c67"}}, 0x0, 0x0, 0x0}, 0x0) 2.871122017s ago: executing program 6 (id=1055): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) write(r2, &(0x7f0000000080)='4', 0x1) 1.81245365s ago: executing program 6 (id=1058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 1.628816391s ago: executing program 6 (id=1059): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) rmdir(&(0x7f0000000140)='./file0/file3\x00') 1.173334391s ago: executing program 3 (id=1064): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xfc}}}}}]}}]}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) 1.059741216s ago: executing program 6 (id=1065): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 898.118482ms ago: executing program 1 (id=1066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) request_key(&(0x7f0000000080)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff9) 763.795882ms ago: executing program 1 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='./file0\x00', 0x8) 687.828608ms ago: executing program 1 (id=1069): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)="5976e0f07b32111b6e3a61ac23a1f2a05753d2f83ad1007d5099f13a5312c7c7f64d2bc11dfeb1b4e3c2444d2aa0fe247366bc1e98c17cf0d7fa3408c7ed062a20823088e5c6831682dc6223bc516ca7ee1ec7c7f033f21d459a31958470fe86dff2f14d18edca7ce51f1c0ca0ddeb7c4d9d3b67e5f76b26f129ed13adf76747e4d1a2f850987eee28b02a00129f6b1b509fd59e444ac897e7935ab0d1e9d0246887ddd9fb", 0xa5}, {&(0x7f0000000700)="68cf650fb8fa30dad3a67a01538214bd6bd8819de9d05f38326ad72e028391b2e9057992e1a88f44dad1ec4106b2c217a481e1539780e71ec50d22b19ea74cce73716473c2459c0c647be39f0c7e74e9eb1406490835903855148a32f8fa91a6269e9c49eecf7553c108dde5924bad062d3895b512d0f1707e21cfbfa01587451c4b907985b4bf82b9c1b6045fc69df92dad56a05c09920bf6278982304a358839903ea5ebac234806ce665841e86204d1c1f5dc8a78d39c23b75fbf8554ccb3c94d00051bd7e5c8e0", 0xc9}, {&(0x7f0000001340)="4f72c5036ce1782c8bc2c3ceced852c84dcfe6033fc9f6e6a3ee19940c0397a40a52b07342bea0a3f0828c12e5c4a47ecfb447c8b5210c600f480013b691924388dd186e009f2a", 0x47}], 0x3}}], 0x4, 0x4000001) 661.036424ms ago: executing program 7 (id=1070): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)=ANY=[], 0xff, 0x234, &(0x7f0000000580)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0xd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) 519.718915ms ago: executing program 1 (id=1071): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), 0x2, r1, 0xcccccccc}) 510.502457ms ago: executing program 0 (id=1072): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffdf]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a12700", 0x3}) 447.047091ms ago: executing program 1 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 348.290103ms ago: executing program 0 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffcf7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 348.083843ms ago: executing program 7 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 346.501874ms ago: executing program 1 (id=1076): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000002040)='./file0\x00', 0x800800, &(0x7f0000000240)=ANY=[@ANYBLOB="63726561746f723d9065835000002c6e6f8465636f6d706f73652c0030521c64e54dd8a4937e4973f503cc815edaddcbb019183c9345ca2d07e85de34661390a665dc95b9efc9e2b801ed6a83e2a3096403636055ee1218e64927b062ab9f85a622d59972e04a6d10987a9976e4b0f37758cc9b1b90f61eb3b3f6f38d3e524a0721d5e90"], 0x1, 0x5e6, &(0x7f0000000c40)="$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") syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 231.965639ms ago: executing program 0 (id=1077): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x5, 0xb6}}, 0x28) splice(r1, 0x0, r0, 0x0, 0x28, 0x4) 136.2304ms ago: executing program 7 (id=1078): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 132.017751ms ago: executing program 0 (id=1079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000008680)=[{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)="1a24", 0x2}], 0x1, 0x0, 0x0, 0x40080}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/210, 0xd2}], 0x1}}], 0x1, 0x2000, 0x0) 55.220218ms ago: executing program 7 (id=1080): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 27.291094ms ago: executing program 0 (id=1081): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/72, 0x48}], 0x1}, 0x0) 0s ago: executing program 0 (id=1082): r0 = syz_open_dev$video4linux(&(0x7f0000000e40), 0x3f, 0x8200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc0405626, &(0x7f0000000040)={0x101, 0x0, 0x2001, 0x2, 0xff, 0xf, 0x10000a9f}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x4000090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): mpute Engine, BIOS Google 07/24/2026 [ 126.050046][ T6089] Call Trace: [ 126.053329][ T6089] [ 126.056267][ T6089] dump_stack_lvl+0x188/0x250 [ 126.060958][ T6089] ? show_regs_print_info+0x20/0x20 [ 126.066174][ T6089] ? load_image+0x410/0x410 [ 126.070695][ T6089] ? __lock_acquire+0x7b50/0x7b50 [ 126.075743][ T6089] should_fail+0x383/0x4b0 [ 126.080183][ T6089] prepare_alloc_pages+0x1e3/0x5b0 [ 126.085318][ T6089] __alloc_pages+0x11b/0x480 [ 126.089939][ T6089] ? zone_statistics+0x170/0x170 [ 126.094914][ T6089] bpf_ringbuf_alloc+0x10c/0x4d0 [ 126.099874][ T6089] ? bpf_map_init_from_attr+0x146/0x300 [ 126.100824][ T6093] loop2: detected capacity change from 0 to 128 [ 126.105436][ T6089] ringbuf_map_alloc+0x1d1/0x300 [ 126.105467][ T6089] map_create+0x481/0x2330 [ 126.121028][ T6089] ? bpf_lsm_bpf+0x5/0x10 [ 126.125463][ T6089] __sys_bpf+0x30a/0x6f0 [ 126.129720][ T6089] ? bpf_link_show_fdinfo+0x380/0x380 [ 126.135122][ T6089] __x64_sys_bpf+0x78/0x90 [ 126.139557][ T6089] do_syscall_64+0x4c/0xa0 [ 126.143988][ T6089] ? clear_bhb_loop+0x30/0x80 [ 126.148681][ T6089] ? clear_bhb_loop+0x30/0x80 [ 126.153367][ T6089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.159277][ T6089] RIP: 0033:0x7f670b69b159 [ 126.163704][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.183336][ T6089] RSP: 002b:00007f67098f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.191947][ T6089] RAX: ffffffffffffffda RBX: 00007f670b922fa0 RCX: 00007f670b69b159 [ 126.200033][ T6089] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 126.208017][ T6089] RBP: 00007f670b73206b R08: 0000000000000000 R09: 0000000000000000 [ 126.215997][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.223978][ T6089] R13: 00007f670b923038 R14: 00007f670b922fa0 R15: 00007ffe1258b468 [ 126.231970][ T6089] [ 126.302016][ T144] attempt to access beyond end of device [ 126.302016][ T144] loop2: rw=1, want=151, limit=128 [ 126.508770][ T6105] loop2: detected capacity change from 0 to 256 [ 126.578418][ T6105] exfat: Deprecated parameter 'namecase' [ 126.597336][ T6105] exfat: Deprecated parameter 'namecase' [ 126.657437][ T6105] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 126.673821][ T4244] attempt to access beyond end of device [ 126.673821][ T4244] loop4: rw=2049, want=40976, limit=40427 [ 126.921822][ T6118] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 126.963465][ T6118] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 127.063771][ T6128] loop0: detected capacity change from 0 to 16 [ 127.098182][ T6128] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.122503][ T6128] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.157809][ T4227] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.402672][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 127.572967][ T4227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.671191][ T4227] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 127.858017][ T4227] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 127.867113][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.907741][ T4227] usb 2-1: Product: syz [ 127.911946][ T4227] usb 2-1: Manufacturer: syz [ 127.916645][ T4227] usb 2-1: SerialNumber: syz [ 127.979825][ T6158] loop3: detected capacity change from 0 to 512 [ 128.022763][ T6158] EXT4-fs (loop3): Ignoring removed nobh option [ 128.060866][ T6158] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 128.097590][ T6158] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.623: attempt to clear invalid blocks 1 len 1 [ 128.124184][ T6158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 128.151413][ T6158] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.623: invalid indirect mapped block 1819239214 (level 0) [ 128.169901][ T6158] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.623: invalid indirect mapped block 1819239214 (level 1) [ 128.213041][ T6158] EXT4-fs (loop3): 1 truncate cleaned up [ 128.214983][ T4227] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 128.218922][ T6158] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 128.239119][ T4227] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 128.368874][ T6164] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.384619][ T6156] loop0: detected capacity change from 0 to 32768 [ 128.439972][ T6156] JBD2: Ignoring recovery information on journal [ 128.499307][ T6174] device syzkaller1 entered promiscuous mode [ 128.645911][ T6156] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.692785][ T6170] loop3: detected capacity change from 0 to 32768 [ 128.700458][ T4227] usb 2-1: 2:1 : bogus bTerminalLink 6 [ 128.746063][ T5044] Dev loop3 SGI disklabel: csum bad, label corrupted [ 128.774031][ T6170] Dev loop3 SGI disklabel: csum bad, label corrupted [ 128.815837][ T6178] loop4: detected capacity change from 0 to 8192 [ 128.817751][ T5085] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.865670][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 128.876892][ T6180] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 128.940013][ T6181] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 128.951863][ T4227] usb 2-1: USB disconnect, device number 9 [ 129.012554][ T6181] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.632'. [ 129.076639][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.117858][ T5085] usb 3-1: Using ep0 maxpacket: 32 [ 129.238103][ T5085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.255214][ T5085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.273605][ T5085] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.287606][ T5085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.318684][ T5085] usb 3-1: config 0 descriptor?? [ 129.359517][ T5085] hub 3-1:0.0: USB hub found [ 129.467820][ T5091] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.507897][ T5095] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.578090][ T5085] hub 3-1:0.0: 1 port detected [ 129.714711][ T5091] usb 4-1: Using ep0 maxpacket: 32 [ 129.747837][ T5095] usb 5-1: Using ep0 maxpacket: 16 [ 129.837912][ T5091] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.867929][ T5095] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 129.941298][ T6197] loop1: detected capacity change from 0 to 32768 [ 129.946389][ T6199] loop0: detected capacity change from 0 to 256 [ 129.963118][ T6199] exfat: Deprecated parameter 'utf8' [ 129.972021][ T6199] exfat: Deprecated parameter 'namecase' [ 129.978336][ T6199] exfat: Deprecated parameter 'namecase' [ 129.984146][ T6199] exfat: Deprecated parameter 'utf8' [ 129.999660][ T6199] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 130.012402][ T5091] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.037997][ T5095] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 130.048506][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.063918][ T5091] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 130.072932][ T5095] usb 5-1: Product: syz [ 130.077248][ T5095] usb 5-1: Manufacturer: syz [ 130.083648][ T6197] XFS (loop1): Mounting V5 Filesystem [ 130.100615][ T5091] usb 4-1: Product: syz [ 130.104935][ T5091] usb 4-1: Manufacturer: syz [ 130.114429][ T5095] usb 5-1: SerialNumber: syz [ 130.119407][ T5091] usb 4-1: SerialNumber: syz [ 130.127571][ T5091] usb 4-1: config 0 descriptor?? [ 130.145872][ T5095] r8152-cfgselector 5-1: config 0 descriptor?? [ 130.163117][ T6197] XFS (loop1): Ending clean mount [ 130.168203][ T6189] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.188790][ T5091] hub 4-1:0.0: bad descriptor, ignoring hub [ 130.206146][ T25] audit: type=1800 audit(1790803995.792:40): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.638" name="file1" dev="loop1" ino=7430 res=0 errno=0 [ 130.227389][ T5091] hub: probe of 4-1:0.0 failed with error -5 [ 130.252077][ T25] audit: type=1800 audit(1790803995.832:41): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.638" name="file1" dev="loop1" ino=7430 res=0 errno=0 [ 130.304719][ T5085] usb 3-1: USB disconnect, device number 10 [ 130.354378][ T4184] XFS (loop1): Unmounting Filesystem [ 130.548241][ T5083] usb 4-1: USB disconnect, device number 5 [ 130.641045][ T5095] r8152-cfgselector 5-1: Unknown version 0x0000 [ 130.659563][ T5095] r8152-cfgselector 5-1: bad CDC descriptors [ 130.687909][ T5095] r8152-cfgselector 5-1: Unknown version 0x0000 [ 130.696207][ T5095] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 130.759838][ T4265] kernel write not supported for file bpf-prog (pid: 4265 comm: kworker/0:11) [ 130.894385][ T6228] loop2: detected capacity change from 0 to 16 [ 130.967614][ T6228] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.989622][ T6228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.575588][ T6251] loop3: detected capacity change from 0 to 4096 [ 131.581932][ T6255] loop2: detected capacity change from 0 to 512 [ 131.630936][ T6251] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.662340][ T6255] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.659: iget: bad i_size value: 38620345925642 [ 131.703011][ T6251] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 131.715589][ T6251] System zones: 0-5 [ 131.727206][ T6251] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 131.734756][ T6255] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.659: couldn't read orphan inode 15 (err -117) [ 131.764623][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.804603][ T6255] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.659: bg 0: block 5: invalid block bitmap [ 131.840865][ T6251] EXT4-fs (loop3): shut down requested (0) [ 131.862215][ T6263] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 131.865690][ T6255] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 131.917815][ T4227] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.945724][ T6255] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.945724][ T6255] [ 131.976613][ T6255] EXT4-fs (loop2): Total free blocks count 0 [ 132.007017][ T6255] EXT4-fs (loop2): Free/Dirty block details [ 132.021903][ T6255] EXT4-fs (loop2): free_blocks=0 [ 132.027319][ T6255] EXT4-fs (loop2): dirty_blocks=65 [ 132.038944][ T6255] EXT4-fs (loop2): Block reservation details [ 132.045094][ T6255] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 132.088660][ T4244] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 132.287939][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.298944][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.309719][ T4227] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 132.318834][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.328845][ T4227] usb 5-1: config 0 descriptor?? [ 132.628266][ T6284] loop0: detected capacity change from 0 to 256 [ 132.697546][ T6284] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.716351][ T6284] ip_tables: iptables: counters copy to user failed while replacing table [ 132.739673][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.746122][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797857][ T5095] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 132.820534][ T4227] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x2 [ 132.829489][ T4227] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 132.866948][ T6286] loop0: detected capacity change from 0 to 256 [ 133.030864][ T4227] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 133.041524][ T4227] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 133.059617][ T4227] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -71 [ 133.102298][ T4227] usb 5-1: USB disconnect, device number 6 [ 133.170497][ T6294] fido_id[6294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.173072][ T5095] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 133.187075][ T6295] loop0: detected capacity change from 0 to 2048 [ 133.216394][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.236766][ T5095] usb 3-1: config 0 descriptor?? [ 133.284566][ T5095] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 133.322421][ T6295] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.336690][ T6295] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.487915][ T5095] gp8psk: usb in 128 operation failed. [ 133.611674][ T6299] loop0: detected capacity change from 0 to 512 [ 133.688589][ T6301] loop4: detected capacity change from 0 to 2048 [ 133.708162][ T6299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.740187][ T6299] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.747846][ T5095] gp8psk: usb in 146 operation failed. [ 133.756273][ T5095] gp8psk: failed to get FW version [ 133.797811][ T5095] gp8psk: usb in 149 operation failed. [ 133.805164][ T5095] gp8psk: failed to get FPGA version [ 133.860979][ T6301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.067881][ T5095] gp8psk: usb out operation failed. [ 134.073368][ T5095] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 134.091532][ T5095] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 134.105652][ T5095] usb 3-1: USB disconnect, device number 11 [ 134.306664][ T6313] loop0: detected capacity change from 0 to 512 [ 134.328275][ T4185] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 134.338712][ T4185] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 134.363292][ T6313] EXT4-fs (loop0): Ignoring removed orlov option [ 134.454256][ T6313] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,init_itable=0x0000000000000007,orlov,,errors=continue. Quota mode: writeback. [ 134.477419][ T6313] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.584841][ T25] audit: type=1800 audit(1790804000.172:42): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.691" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 134.681766][ T6320] loop2: detected capacity change from 0 to 256 [ 134.797786][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.277929][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.383065][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 135.497060][ T4244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.572572][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 135.586701][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.600149][ T7] usb 4-1: Product: syz [ 135.604402][ T7] usb 4-1: Manufacturer: syz [ 135.612142][ T7] usb 4-1: SerialNumber: syz [ 135.639630][ T4244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.712819][ T6337] netlink: 34 bytes leftover after parsing attributes in process `syz.0.692'. [ 135.744187][ T4244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.816972][ T6332] chnl_net:caif_netlink_parms(): no params data found [ 135.864205][ T4244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.920046][ T7] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 136.010362][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.031043][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.039454][ T6332] device bridge_slave_0 entered promiscuous mode [ 136.050384][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.057602][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.058893][ T6356] FAULT_INJECTION: forcing a failure. [ 136.058893][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 136.067114][ T6332] device bridge_slave_1 entered promiscuous mode [ 136.094960][ T6356] CPU: 0 PID: 6356 Comm: syz.0.700 Not tainted syzkaller #0 [ 136.102393][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.112462][ T6356] Call Trace: [ 136.115752][ T6356] [ 136.118695][ T6356] dump_stack_lvl+0x188/0x250 [ 136.123426][ T6356] ? show_regs_print_info+0x20/0x20 [ 136.128745][ T6356] ? load_image+0x410/0x410 [ 136.133250][ T6356] ? __might_sleep+0xf0/0xf0 [ 136.137845][ T6356] ? __lock_acquire+0x7b50/0x7b50 [ 136.142890][ T6356] should_fail+0x383/0x4b0 [ 136.147320][ T6356] should_failslab+0x5/0x20 [ 136.151924][ T6356] slab_pre_alloc_hook+0x51/0xc0 [ 136.156880][ T6356] __kmalloc+0x6b/0x340 [ 136.161037][ T6356] ? sk_prot_alloc+0xe7/0x210 [ 136.165728][ T6356] sk_prot_alloc+0xe7/0x210 [ 136.170238][ T6356] ? sk_alloc+0x1d/0x310 [ 136.174502][ T6356] sk_alloc+0x2f/0x310 [ 136.178591][ T6356] ? pppoe_create+0x12/0x2a0 [ 136.183198][ T6356] pppoe_create+0x2e/0x2a0 [ 136.187627][ T6356] pppox_create+0x127/0x1a0 [ 136.192139][ T6356] __sock_create+0x473/0x910 [ 136.196745][ T6356] __sys_socket+0xe2/0x170 [ 136.201167][ T6356] __x64_sys_socket+0x76/0x80 [ 136.205865][ T6356] do_syscall_64+0x4c/0xa0 [ 136.210310][ T6356] ? clear_bhb_loop+0x30/0x80 [ 136.214983][ T6356] ? clear_bhb_loop+0x30/0x80 [ 136.219664][ T6356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.225579][ T6356] RIP: 0033:0x7f735aeb7159 [ 136.230512][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.250401][ T6356] RSP: 002b:00007f735910f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 136.258816][ T6356] RAX: ffffffffffffffda RBX: 00007f735b13efa0 RCX: 00007f735aeb7159 [ 136.266805][ T6356] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 136.274778][ T6356] RBP: 00007f735af4e06b R08: 0000000000000000 R09: 0000000000000000 [ 136.282773][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.290868][ T6356] R13: 00007f735b13f038 R14: 00007f735b13efa0 R15: 00007fffc4a1ad68 [ 136.298989][ T6356] [ 136.361784][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.413464][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.483829][ T6332] team0: Port device team_slave_0 added [ 136.518467][ T6332] team0: Port device team_slave_1 added [ 136.564089][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.571182][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.597914][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.611385][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.618472][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.644605][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.725131][ T6332] device hsr_slave_0 entered promiscuous mode [ 136.733003][ T6332] device hsr_slave_1 entered promiscuous mode [ 136.745887][ T6332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.755531][ T6332] Cannot create hsr debugfs directory [ 136.944117][ T7] usb 4-1: failed to enable PITCH for EP 0x82 [ 136.974083][ T7] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 136.987713][ T7] usb 4-1: clock source 0 is not valid, cannot use [ 137.016582][ T6332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.023692][ T7] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 137.036444][ T6332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.045733][ T6332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.052605][ T7] usb 4-1: 2:1: cannot set freq 635496771 (v2/v3): err -71 [ 137.072464][ T6332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.159978][ T7] usb 4-1: USB disconnect, device number 6 [ 137.224360][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.299493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.315826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.328605][ T6332] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.357802][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.374040][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.384955][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.392158][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.435372][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.452672][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.461109][ T5095] Bluetooth: hci1: command 0x0409 tx timeout [ 137.474795][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.484098][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.491279][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.519097][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.528996][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.540270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.553143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.597556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.655313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.664187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.675362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.684721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.698094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.706502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.729426][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.878238][ T4244] device hsr_slave_0 left promiscuous mode [ 137.894021][ T4244] device hsr_slave_1 left promiscuous mode [ 137.907191][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.921093][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.942242][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.951836][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.964095][ T4244] device bridge_slave_1 left promiscuous mode [ 137.976193][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.006523][ T4244] device bridge_slave_0 left promiscuous mode [ 138.020688][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.067054][ T4244] device veth1_macvtap left promiscuous mode [ 138.074541][ T4244] device veth0_macvtap left promiscuous mode [ 138.080746][ T4244] device veth1_vlan left promiscuous mode [ 138.086830][ T4244] device veth0_vlan left promiscuous mode [ 138.206902][ T4244] bond1 (unregistering): (slave lo): Releasing backup interface [ 138.216024][ T4244] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 138.231259][ T4244] bond1 (unregistering): Released all slaves [ 138.333925][ T4244] team0 (unregistering): Port device team_slave_1 removed [ 138.353546][ T4244] team0 (unregistering): Port device team_slave_0 removed [ 138.365185][ T4244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.385271][ T4244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.449933][ T4244] bond0 (unregistering): Released all slaves [ 138.526599][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.538809][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.551676][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.843221][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.864624][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.887474][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.902842][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.914377][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.926612][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.941133][ T6332] device veth0_vlan entered promiscuous mode [ 138.975911][ T6332] device veth1_vlan entered promiscuous mode [ 139.041014][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.053007][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.065809][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.079076][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.097930][ T6332] device veth0_macvtap entered promiscuous mode [ 139.119687][ T6332] device veth1_macvtap entered promiscuous mode [ 139.136011][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.146879][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.157765][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.169108][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.180332][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.191460][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.201864][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.212989][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.226196][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.243019][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.251723][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.260266][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.274045][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.286902][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.303839][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.316688][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.333334][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.343779][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.360574][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.374137][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.388756][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.404788][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.415498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.432298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.447091][ T6332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.466242][ T6332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.487759][ T6332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.496964][ T6332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.538429][ T5083] Bluetooth: hci1: command 0x041b tx timeout [ 139.651333][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.674509][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.706432][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.725154][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.764447][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.780848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.854327][ T6440] netlink: 'syz.0.712': attribute type 11 has an invalid length. [ 140.135725][ T6457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.962641][ T6501] loop2: detected capacity change from 0 to 128 [ 141.289021][ T6517] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.727'. [ 141.356886][ T6515] loop0: detected capacity change from 0 to 4096 [ 141.371040][ T6521] loop1: detected capacity change from 0 to 2048 [ 141.537375][ T6531] loop2: detected capacity change from 0 to 512 [ 141.559850][ T6521] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.574469][ T6521] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.617924][ T5091] Bluetooth: hci1: command 0x040f tx timeout [ 141.682460][ T6515] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.704380][ T6531] EXT4-fs (loop2): Ignoring removed orlov option [ 141.739622][ T6538] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 141.817897][ T6531] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,init_itable=0x0000000000000007,orlov,,errors=continue. Quota mode: writeback. [ 141.835662][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.851642][ T6542] bond1: (slave geneve2): making interface the new active one [ 141.903157][ T6531] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.944826][ T6542] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.036830][ T25] audit: type=1800 audit(1790804007.622:43): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 142.038666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 142.200922][ T6542] syz.3.733 (6542) used greatest stack depth: 18112 bytes left [ 142.346678][ T6559] FAULT_INJECTION: forcing a failure. [ 142.346678][ T6559] name failslab, interval 1, probability 0, space 0, times 0 [ 142.372725][ T6559] CPU: 0 PID: 6559 Comm: syz.1.738 Not tainted syzkaller #0 [ 142.380068][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.390142][ T6559] Call Trace: [ 142.393435][ T6559] [ 142.396379][ T6559] dump_stack_lvl+0x188/0x250 [ 142.401072][ T6559] ? show_regs_print_info+0x20/0x20 [ 142.406289][ T6559] ? load_image+0x410/0x410 [ 142.410847][ T6559] ? __might_sleep+0xf0/0xf0 [ 142.415467][ T6559] ? __lock_acquire+0x7b50/0x7b50 [ 142.420552][ T6559] should_fail+0x383/0x4b0 [ 142.424995][ T6559] should_failslab+0x5/0x20 [ 142.429513][ T6559] slab_pre_alloc_hook+0x51/0xc0 [ 142.434463][ T6559] __kmalloc_node+0x6d/0x3a0 [ 142.439061][ T6559] ? blk_mq_alloc_tag_set+0x3b6/0xf30 [ 142.444716][ T6559] blk_mq_alloc_tag_set+0x3b6/0xf30 [ 142.449932][ T6559] loop_add+0x257/0x890 [ 142.454113][ T6559] loop_control_ioctl+0x124/0x550 [ 142.459153][ T6559] ? xor_init+0x60/0x60 [ 142.463328][ T6559] ? bpf_lsm_file_ioctl+0x5/0x10 [ 142.468278][ T6559] ? security_file_ioctl+0x7c/0xa0 [ 142.471744][ T6546] loop5: detected capacity change from 0 to 32768 [ 142.473431][ T6559] ? xor_init+0x60/0x60 [ 142.473459][ T6559] __se_sys_ioctl+0xfa/0x170 [ 142.489287][ T6559] do_syscall_64+0x4c/0xa0 [ 142.493731][ T6559] ? clear_bhb_loop+0x30/0x80 [ 142.498444][ T6559] ? clear_bhb_loop+0x30/0x80 [ 142.503317][ T6559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.509295][ T6559] RIP: 0033:0x7efe92bf4159 [ 142.513730][ T6559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.533357][ T6559] RSP: 002b:00007efe90e4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.541790][ T6559] RAX: ffffffffffffffda RBX: 00007efe92e7bfa0 RCX: 00007efe92bf4159 [ 142.549779][ T6559] RDX: 0000000087000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 142.557763][ T6559] RBP: 00007efe92c8b06b R08: 0000000000000000 R09: 0000000000000000 [ 142.565751][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.573742][ T6559] R13: 00007efe92e7c038 R14: 00007efe92e7bfa0 R15: 00007fff45e51248 [ 142.581744][ T6559] [ 142.623180][ T4190] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 142.766029][ T6572] loop2: detected capacity change from 0 to 1024 [ 142.772605][ T25] audit: type=1800 audit(1790804008.362:44): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.735" name="file2" dev="loop5" ino=5 res=0 errno=0 [ 142.861333][ T25] audit: type=1800 audit(1790804008.382:45): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.735" name="file2" dev="loop5" ino=5 res=0 errno=0 [ 142.954655][ T6572] hfsplus: catalog record size mismatch (type 1, got 20, expected 88) [ 142.983674][ T6572] hfsplus: b-tree write err: -5, ino 19 [ 143.279334][ T6593] loop1: detected capacity change from 0 to 256 [ 143.607905][ T4227] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.721211][ T5083] Bluetooth: hci1: command 0x0419 tx timeout [ 143.731507][ T6611] jffs2: notice: (6611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.032177][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.052027][ T4227] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.089995][ T4227] usb 1-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 144.115050][ T6622] loop5: detected capacity change from 0 to 1024 [ 144.130887][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.295270][ T6622] hfsplus: request for non-existent node 262144 in B*Tree [ 144.322215][ T6622] hfsplus: request for non-existent node 262144 in B*Tree [ 144.347543][ T6629] hfsplus: request for non-existent node 262144 in B*Tree [ 144.385196][ T6629] hfsplus: request for non-existent node 262144 in B*Tree [ 144.626570][ T6581] raw-gadget.0 gadget: fail, usb_ep_set_halt returned -11 [ 144.655506][ T4265] usb 1-1: USB disconnect, device number 8 [ 144.834784][ T6640] loop1: detected capacity change from 0 to 8192 [ 145.369965][ T6662] loop0: detected capacity change from 0 to 512 [ 146.273415][ T1214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.477302][ T1214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.595772][ T1214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.613537][ T6684] loop5: detected capacity change from 0 to 8192 [ 146.729598][ T1214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.040486][ T6567] Set syz1 is full, maxelem 65536 reached [ 147.086841][ T6697] loop1: detected capacity change from 0 to 1024 [ 147.379967][ T6688] chnl_net:caif_netlink_parms(): no params data found [ 147.616334][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.626281][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.635684][ T6688] device bridge_slave_0 entered promiscuous mode [ 147.635970][ T6727] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.696883][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.706861][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.719810][ T6688] device bridge_slave_1 entered promiscuous mode [ 147.777012][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.805144][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.929894][ T6688] team0: Port device team_slave_0 added [ 148.025251][ T6688] team0: Port device team_slave_1 added [ 148.104542][ T25] audit: type=1400 audit(1790804013.692:46): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=6742 comm="syz.3.787" offset=16 [ 148.107442][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.157799][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.208335][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.246830][ T6748] loop3: detected capacity change from 0 to 4096 [ 148.271068][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.294934][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.321762][ T5085] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.339184][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.365840][ T6748] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 148.488706][ T6688] device hsr_slave_0 entered promiscuous mode [ 148.513292][ T6688] device hsr_slave_1 entered promiscuous mode [ 148.598230][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 148.610846][ T6754] loop5: detected capacity change from 0 to 2048 [ 148.631926][ T1214] device hsr_slave_0 left promiscuous mode [ 148.639849][ T1214] device hsr_slave_1 left promiscuous mode [ 148.647577][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.656971][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.666575][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.692487][ T5085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.714663][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.723374][ T5085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.743984][ T5085] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.755410][ T6754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.771467][ T5085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.809138][ T5085] usb 2-1: config 0 descriptor?? [ 148.815114][ T1214] device bridge_slave_1 left promiscuous mode [ 148.824064][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.842803][ T5095] Bluetooth: hci2: command 0x0409 tx timeout [ 148.866983][ T1214] device bridge_slave_0 left promiscuous mode [ 148.885561][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.928052][ T1214] device veth1_macvtap left promiscuous mode [ 148.948528][ T1214] device veth0_macvtap left promiscuous mode [ 148.973723][ T1214] device veth1_vlan left promiscuous mode [ 148.995283][ T1214] device veth0_vlan left promiscuous mode [ 149.067875][ T5091] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.166663][ T6781] loop0: detected capacity change from 0 to 256 [ 149.198332][ T6781] exfat: Deprecated parameter 'namecase' [ 149.206830][ T4573] kernel write not supported for file /vcsa (pid: 4573 comm: kworker/0:16) [ 149.256161][ T6781] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 149.327947][ T5091] usb 4-1: Using ep0 maxpacket: 16 [ 149.349674][ T6786] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.450771][ T1214] team0 (unregistering): Port device team_slave_1 removed [ 149.453922][ T5091] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.479442][ T5091] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.485762][ T1214] team0 (unregistering): Port device team_slave_0 removed [ 149.486222][ T5091] usb 4-1: New USB device found, idVendor=0c16, idProduct=0008, bcdDevice= 0.00 [ 149.514375][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.520423][ T6794] FAULT_INJECTION: forcing a failure. [ 149.520423][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 149.543976][ T5085] usb 2-1: language id specifier not provided by device, defaulting to English [ 149.553049][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.557927][ T6794] CPU: 0 PID: 6794 Comm: syz.0.803 Not tainted syzkaller #0 [ 149.568573][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.570273][ T5091] usb 4-1: config 0 descriptor?? [ 149.578635][ T6794] Call Trace: [ 149.578649][ T6794] [ 149.578657][ T6794] dump_stack_lvl+0x188/0x250 [ 149.578683][ T6794] ? show_regs_print_info+0x20/0x20 [ 149.578700][ T6794] ? load_image+0x410/0x410 [ 149.578719][ T6794] ? __lock_acquire+0x7b50/0x7b50 [ 149.578742][ T6794] should_fail+0x383/0x4b0 [ 149.578764][ T6794] should_failslab+0x5/0x20 [ 149.578781][ T6794] slab_pre_alloc_hook+0x51/0xc0 [ 149.578799][ T6794] ? __d_alloc+0x27/0x6d0 [ 149.578818][ T6794] kmem_cache_alloc+0x3d/0x280 [ 149.578839][ T6794] __d_alloc+0x27/0x6d0 [ 149.578860][ T6794] d_alloc+0x46/0x250 [ 149.578880][ T6794] lookup_one_qstr_excl+0xc6/0x240 [ 149.578900][ T6794] do_rmdir+0x1c1/0x710 [ 149.649811][ T6794] ? d_delete_notify+0x150/0x150 [ 149.654770][ T6794] ? getname_flags+0x1f9/0x4f0 [ 149.659539][ T6794] __x64_sys_unlinkat+0xc0/0xe0 [ 149.664406][ T6794] do_syscall_64+0x4c/0xa0 [ 149.668816][ T6794] ? clear_bhb_loop+0x30/0x80 [ 149.673514][ T6794] ? clear_bhb_loop+0x30/0x80 [ 149.678191][ T6794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.684093][ T6794] RIP: 0033:0x7f735aeb7159 [ 149.688504][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.708241][ T6794] RSP: 002b:00007f735910f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 149.716669][ T6794] RAX: ffffffffffffffda RBX: 00007f735b13efa0 RCX: 00007f735aeb7159 [ 149.724724][ T6794] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 149.732687][ T6794] RBP: 00007f735af4e06b R08: 0000000000000000 R09: 0000000000000000 [ 149.740653][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.748636][ T6794] R13: 00007f735b13f038 R14: 00007f735b13efa0 R15: 00007fffc4a1ad68 [ 149.756631][ T6794] [ 149.764502][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.832369][ T1214] bond0 (unregistering): Released all slaves [ 149.971034][ T5085] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0007/input/input15 [ 150.013031][ T5085] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0007/input/input16 [ 150.061431][ T5085] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 150.077439][ T5091] input: HID 0c16:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C16:0008.0008/input/input17 [ 150.155892][ T6688] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.191181][ T5091] gyration 0003:0C16:0008.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0c16:0008] on usb-dummy_hcd.3-1/input0 [ 150.295628][ T5091] usb 2-1: USB disconnect, device number 10 [ 150.371122][ T6808] fido_id[6808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 150.396047][ T6688] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.450848][ T6688] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.589919][ T6688] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.718070][ T6823] ip_tables: iptables: counters copy to user failed while replacing table [ 150.798040][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.873178][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.898329][ T5091] Bluetooth: hci2: command 0x041b tx timeout [ 150.908602][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.929704][ T6802] loop0: detected capacity change from 0 to 40427 [ 150.959004][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.972198][ T6802] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 150.985081][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.985118][ T5095] usb 4-1: USB disconnect, device number 7 [ 151.008181][ T6802] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.030938][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.055176][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.062436][ T6834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.119194][ T6802] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.138228][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.167923][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.208904][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.223545][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.230681][ T6834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.250703][ T6802] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.258052][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.258942][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.302879][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.311125][ T6802] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.358214][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.376852][ T6688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.397804][ T6688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.426449][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.454685][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.475102][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.521718][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.561691][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.585864][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.605878][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.626637][ T6855] loop3: detected capacity change from 0 to 256 [ 151.659395][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.966441][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 152.067274][ T6834] attempt to access beyond end of device [ 152.067274][ T6834] loop0: rw=1, want=45104, limit=40427 [ 152.232608][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.278728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.286609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.179386][ T5095] Bluetooth: hci2: command 0x040f tx timeout [ 153.394166][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.424221][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.481072][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.514932][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.544773][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.576401][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.634249][ T6688] device veth0_vlan entered promiscuous mode [ 153.660933][ T6688] device veth1_vlan entered promiscuous mode [ 153.766537][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.776446][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.813703][ T6923] loop0: detected capacity change from 0 to 16 [ 153.820875][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.864238][ T6923] erofs: (device loop0): mounted with root inode @ nid 36. [ 153.884580][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36 [ 153.894974][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 153.904352][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36 [ 153.914684][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 153.923870][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36 [ 153.933926][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 153.943160][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36 [ 153.953350][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 153.962660][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36 [ 153.971486][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.972736][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 153.989823][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36 [ 153.999883][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 154.011118][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36 [ 154.021274][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 154.030492][ T6923] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36 [ 154.040547][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 154.049994][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 154.059284][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 154.068508][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 154.077720][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 154.086851][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 154.096102][ T6923] erofs: (device loop0): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 154.105751][ T6923] attempt to access beyond end of device [ 154.105751][ T6923] loop0: rw=524288, want=13478624064, limit=16 [ 154.110442][ T6688] device veth0_macvtap entered promiscuous mode [ 154.117816][ T6923] attempt to access beyond end of device [ 154.117816][ T6923] loop0: rw=524288, want=13478624072, limit=16 [ 154.135690][ T6923] attempt to access beyond end of device [ 154.135690][ T6923] loop0: rw=524288, want=14550774184, limit=16 [ 154.147500][ T6923] attempt to access beyond end of device [ 154.147500][ T6923] loop0: rw=524288, want=14550774192, limit=16 [ 154.159256][ T6923] attempt to access beyond end of device [ 154.159256][ T6923] loop0: rw=524288, want=13716630408, limit=16 [ 154.171054][ T6923] attempt to access beyond end of device [ 154.171054][ T6923] loop0: rw=524288, want=13716630416, limit=16 [ 154.182817][ T6923] attempt to access beyond end of device [ 154.182817][ T6923] loop0: rw=524288, want=790416, limit=16 [ 154.194176][ T6923] attempt to access beyond end of device [ 154.194176][ T6923] loop0: rw=524288, want=790424, limit=16 [ 154.205504][ T6923] attempt to access beyond end of device [ 154.205504][ T6923] loop0: rw=524288, want=104, limit=16 [ 154.229601][ T6688] device veth1_macvtap entered promiscuous mode [ 154.271993][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.292685][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.336608][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.357797][ T4173] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.404381][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.415685][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.467673][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.477521][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.519805][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.547913][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.568062][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.595701][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.614142][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.622846][ T4173] usb 6-1: Using ep0 maxpacket: 32 [ 154.660862][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.678812][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.701549][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.727517][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.753193][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.768110][ T4173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.785232][ T4173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.795593][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.812594][ T4173] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 154.823414][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.840396][ T4173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.847527][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.859383][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.861318][ T4173] usb 6-1: config 0 descriptor?? [ 154.890450][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.898170][ T5091] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.918557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.958713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.980727][ T6688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.010353][ T6688] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.021954][ T6688] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.031168][ T6688] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.198286][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.212123][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.225365][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 155.267909][ T5091] usb 2-1: config 1 has an invalid interface number: 208 but max is 0 [ 155.276125][ T5091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.293442][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.318952][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.325937][ T5091] usb 2-1: config 1 has no interface number 0 [ 155.335314][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.351946][ T5091] usb 2-1: too many endpoints for config 1 interface 208 altsetting 15: 33, using maximum allowed: 30 [ 155.366645][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.376237][ T4173] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 155.387070][ T5091] usb 2-1: config 1 interface 208 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 155.397384][ T4173] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 155.417891][ T5091] usb 2-1: config 1 interface 208 has no altsetting 0 [ 155.422800][ T4173] koneplus 0003:1E7D:2D51.0009: unexpected long global item [ 155.440881][ T4173] koneplus 0003:1E7D:2D51.0009: parse failed [ 155.464783][ T4173] koneplus: probe of 0003:1E7D:2D51.0009 failed with error -22 [ 155.578011][ T5091] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 155.601350][ T5091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.639628][ T5091] usb 2-1: Product: syz [ 155.667768][ T5091] usb 2-1: Manufacturer: syz [ 155.673571][ T4173] usb 6-1: USB disconnect, device number 2 [ 155.678072][ T5091] usb 2-1: SerialNumber: syz [ 155.978047][ T5091] snd-usb-6fire 2-1:1.208: can't set first interface. [ 155.990528][ T5091] snd-usb-6fire: probe of 2-1:1.208 failed with error -5 [ 156.198334][ T5091] usb 2-1: USB disconnect, device number 11 [ 156.844028][ T7057] loop3: detected capacity change from 0 to 1024 [ 156.923904][ T7057] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 156.937137][ T7055] loop1: detected capacity change from 0 to 8192 [ 156.966781][ T7055] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.967814][ T4227] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.018481][ T7057] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.045617][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.047855][ T5085] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.117458][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.147942][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.172245][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.181006][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.225139][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.234581][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.252726][ T7035] loop6: detected capacity change from 0 to 32768 [ 157.265171][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.287919][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.306728][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.313835][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.370562][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.377209][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.422825][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.443994][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.471489][ T5085] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.484099][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.492223][ T5085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.499841][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.525687][ T5085] usb 1-1: config 0 descriptor?? [ 157.534425][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.547826][ T4173] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 157.558766][ T4227] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.569081][ T5085] cp210x 1-1:0.0: cp210x converter detected [ 157.573903][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.583376][ T7056] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.861: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.601826][ T4227] usb 6-1: Product: syz [ 157.606015][ T4227] usb 6-1: Manufacturer: syz [ 157.621242][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 157.637284][ T4227] usb 6-1: SerialNumber: syz [ 157.659020][ T4227] usb 6-1: config 0 descriptor?? [ 157.810829][ T7091] input: syz0 as /devices/virtual/input/input18 [ 157.954067][ T7095] APIC base relocation is unsupported by KVM [ 157.968109][ T4173] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 157.989908][ T4173] usb 2-1: config 0 has no interface number 0 [ 158.178521][ T4227] usb 6-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 158.186565][ T4227] usb 6-1: Firmware version (0.0) predates our first public release. [ 158.205295][ T4227] usb 6-1: Please update to version 0.2 or newer [ 158.218200][ T4173] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 158.227304][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.228599][ T5085] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 158.250846][ T4173] usb 2-1: Product: syz [ 158.255050][ T4173] usb 2-1: Manufacturer: syz [ 158.264442][ T4173] usb 2-1: SerialNumber: syz [ 158.265146][ T5085] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 158.277970][ T4227] usb 6-1: Firmware: build [ 158.282532][ T4227] usb 6-1: atusb_probe: initialization failed, error = -32 [ 158.292441][ T4173] usb 2-1: config 0 descriptor?? [ 158.308269][ T4227] atusb: probe of 6-1:0.0 failed with error -32 [ 158.333661][ T5085] usb 1-1: cp210x converter now attached to ttyUSB0 [ 158.376351][ T5085] usb 1-1: USB disconnect, device number 9 [ 158.403304][ T5085] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.433132][ T5085] cp210x 1-1:0.0: device disconnected [ 158.521071][ T7130] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.546004][ T7130] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.568578][ T7124] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.576554][ T7124] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.715720][ T7143] loop6: detected capacity change from 0 to 512 [ 158.768001][ T4173] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.785517][ T7146] loop3: detected capacity change from 0 to 256 [ 158.792209][ T4173] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 158.815451][ T4173] asix: probe of 2-1:0.251 failed with error -5 [ 158.821403][ T7143] EXT4-fs (loop6): inline encryption not supported [ 158.858131][ T7143] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.870171][ T7149] loop0: detected capacity change from 0 to 512 [ 158.870439][ T4173] usb 2-1: USB disconnect, device number 12 [ 158.942126][ T7149] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.878: bg 0: block 5: invalid block bitmap [ 159.035891][ T7143] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 159.074860][ T7143] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.875: invalid indirect mapped block 2683928664 (level 1) [ 159.088796][ T7149] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 159.151431][ T7143] EXT4-fs (loop6): 1 truncate cleaned up [ 159.157131][ T7143] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nolazytime,nodiscard,inlinecrypt,usrjquota=.max_dir_size_kb=0x0000000000000008,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 159.202996][ T7149] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.878: invalid indirect mapped block 3 (level 2) [ 159.219674][ T7149] EXT4-fs (loop0): 1 orphan inode deleted [ 159.225574][ T7149] EXT4-fs (loop0): 1 truncate cleaned up [ 159.232915][ T7149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.332341][ T7143] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.875: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 159.669511][ T7154] loop3: detected capacity change from 0 to 32768 [ 159.672068][ T5091] usb 6-1: USB disconnect, device number 3 [ 159.714139][ T25] audit: type=1807 audit(1790804025.302:47): action=measure func=FILE_CHECK res=1 [ 159.726334][ T7174] ima: policy update completed [ 159.749064][ T25] audit: type=1802 audit(1790804025.332:48): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.6.882" res=1 errno=0 [ 159.801659][ T7154] JBD2: Ignoring recovery information on journal [ 159.901559][ T7154] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.927136][ T7185] loop5: detected capacity change from 0 to 16 [ 159.954116][ T25] audit: type=1800 audit(1790804025.542:49): pid=4177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 159.987768][ T5083] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.996312][ T7185] erofs: (device loop5): mounted with root inode @ nid 36. [ 160.009866][ T7166] loop1: detected capacity change from 0 to 32768 [ 160.035489][ T25] audit: type=1800 audit(1790804025.612:50): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35300 res=0 errno=0 [ 160.083083][ T7185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.097178][ T25] audit: type=1800 audit(1790804025.692:51): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35300 res=0 errno=0 [ 160.143737][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.887'. [ 160.208026][ T7166] XFS (loop1): Mounting V5 Filesystem [ 160.237474][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 160.327740][ T25] audit: type=1800 audit(1790804025.912:52): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 160.353655][ T5083] usb 1-1: config 0 has no interfaces? [ 160.398432][ T5083] usb 1-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 160.471799][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.509530][ T25] audit: type=1800 audit(1790804026.102:53): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152520 res=0 errno=0 [ 160.538631][ T5083] usb 1-1: config 0 descriptor?? [ 160.575729][ T7166] XFS (loop1): Ending clean mount [ 160.586610][ T25] audit: type=1800 audit(1790804026.122:54): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152560 res=0 errno=0 [ 160.700982][ T25] audit: type=1800 audit(1790804026.122:55): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152527 res=0 errno=0 [ 160.781377][ T25] audit: type=1800 audit(1790804026.132:56): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152528 res=0 errno=0 [ 160.792190][ T7176] udc-core: couldn't find an available UDC or it's busy [ 160.809190][ T4184] XFS (loop1): Unmounting Filesystem [ 160.818060][ T7176] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.896775][ T5085] usb 1-1: USB disconnect, device number 10 [ 161.062485][ T7225] loop6: detected capacity change from 0 to 8192 [ 161.215043][ T4233] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.342203][ T4233] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.430200][ T4233] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.487373][ T7240] FAULT_INJECTION: forcing a failure. [ 161.487373][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 161.500777][ T5085] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 161.538314][ T7240] CPU: 0 PID: 7240 Comm: syz.3.896 Not tainted syzkaller #0 [ 161.545649][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.555736][ T7240] Call Trace: [ 161.559025][ T7240] [ 161.561963][ T7240] dump_stack_lvl+0x188/0x250 [ 161.566741][ T7240] ? show_regs_print_info+0x20/0x20 [ 161.571944][ T7240] ? load_image+0x410/0x410 [ 161.576439][ T7240] ? __might_sleep+0xf0/0xf0 [ 161.581015][ T7240] ? __lock_acquire+0x7b50/0x7b50 [ 161.586027][ T7240] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 161.592262][ T7240] ? lockdep_hardirqs_on+0x94/0x140 [ 161.597460][ T7240] should_fail+0x383/0x4b0 [ 161.601913][ T7240] should_failslab+0x5/0x20 [ 161.606403][ T7240] slab_pre_alloc_hook+0x51/0xc0 [ 161.611327][ T7240] ? __d_alloc+0x27/0x6d0 [ 161.615780][ T7240] kmem_cache_alloc+0x3d/0x280 [ 161.620559][ T7240] __d_alloc+0x27/0x6d0 [ 161.624717][ T7240] ? d_alloc_pseudo+0xe/0x70 [ 161.629298][ T7240] d_alloc_pseudo+0x19/0x70 [ 161.633788][ T7240] alloc_file_pseudo+0xe0/0x200 [ 161.638633][ T7240] ? alloc_empty_file_noaccount+0x80/0x80 [ 161.644337][ T7240] ? tlb_flush_mmu_tlbonly+0x3f0/0x3f0 [ 161.649791][ T7240] hugetlb_file_setup+0x4ee/0x6f0 [ 161.654833][ T7240] ? __lock_acquire+0x7b50/0x7b50 [ 161.660046][ T7240] ksys_mmap_pgoff+0x229/0x790 [ 161.664823][ T7240] ? mmap_region+0x1730/0x1730 [ 161.669587][ T7240] ? lockdep_hardirqs_on+0x94/0x140 [ 161.674784][ T7240] do_syscall_64+0x4c/0xa0 [ 161.679208][ T7240] ? clear_bhb_loop+0x30/0x80 [ 161.683904][ T7240] ? clear_bhb_loop+0x30/0x80 [ 161.688569][ T7240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.694453][ T7240] RIP: 0033:0x7f670b69b159 [ 161.698857][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.718537][ T7240] RSP: 002b:00007f67098f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 161.726948][ T7240] RAX: ffffffffffffffda RBX: 00007f670b922fa0 RCX: 00007f670b69b159 [ 161.734908][ T7240] RDX: 000000000200000e RSI: 0000000000800000 RDI: 0000200000000000 [ 161.742863][ T7240] RBP: 00007f670b73206b R08: ffffffffffffffff R09: 0000000000000000 [ 161.750913][ T7240] R10: 000000000006c2f2 R11: 0000000000000246 R12: 0000000000000000 [ 161.758876][ T7240] R13: 00007f670b923038 R14: 00007f670b922fa0 R15: 00007ffe1258b468 [ 161.766848][ T7240] [ 161.794174][ T4233] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.007973][ T5085] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.027797][ T5085] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 162.050521][ T5085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.128485][ T5085] hub 1-1:1.0: bad descriptor, ignoring hub [ 162.134436][ T5085] hub: probe of 1-1:1.0 failed with error -5 [ 162.190215][ T5085] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 162.312200][ T7237] loop1: detected capacity change from 0 to 32768 [ 162.335013][ T7176] udc-core: couldn't find an available UDC or it's busy [ 162.349405][ T7176] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.474390][ T7237] XFS (loop1): Mounting V5 Filesystem [ 162.530517][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 162.577958][ T4227] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 162.633321][ T7237] XFS (loop1): Ending clean mount [ 162.682149][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.696095][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.705007][ T7243] device bridge_slave_0 entered promiscuous mode [ 162.720559][ T4184] XFS (loop1): Unmounting Filesystem [ 162.727385][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.736192][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.753251][ T7243] device bridge_slave_1 entered promiscuous mode [ 162.779481][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.798863][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.847908][ T4227] usb 7-1: Using ep0 maxpacket: 32 [ 162.934829][ T7243] team0: Port device team_slave_0 added [ 162.959449][ T7243] team0: Port device team_slave_1 added [ 162.967971][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.979196][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.989393][ T4227] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 163.037011][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.043662][ T4227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.066238][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.093694][ T4227] usb 7-1: config 0 descriptor?? [ 163.100843][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.127074][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.143944][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.177502][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.294245][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 163.351399][ T7243] device hsr_slave_0 entered promiscuous mode [ 163.356540][ T7302] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 163.375002][ T7243] device hsr_slave_1 entered promiscuous mode [ 163.396220][ T7243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.404689][ T7243] Cannot create hsr debugfs directory [ 163.538911][ T4233] device hsr_slave_0 left promiscuous mode [ 163.545447][ T4233] device hsr_slave_1 left promiscuous mode [ 163.558623][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.576383][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.601695][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.614202][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.631570][ T4233] device bridge_slave_1 left promiscuous mode [ 163.639295][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.650738][ T4233] device bridge_slave_0 left promiscuous mode [ 163.657019][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.681655][ T4227] savu 0003:1E7D:2D5A.000A: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 163.708052][ T4233] device veth1_macvtap left promiscuous mode [ 163.714231][ T4233] device veth0_macvtap left promiscuous mode [ 163.736395][ T5095] usb 1-1: USB disconnect, device number 11 [ 163.760801][ T5095] idmouse 1-1:1.0: disconnected [ 163.808007][ T4233] device veth1_vlan left promiscuous mode [ 163.813958][ T4233] device veth0_vlan left promiscuous mode [ 163.819966][ T5085] usb 7-1: USB disconnect, device number 2 [ 163.924089][ T7322] fido_id[7322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 163.939892][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 164.142936][ T7342] loop0: detected capacity change from 0 to 256 [ 164.211269][ T7342] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 164.243494][ T7345] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 164.482207][ T7352] gadgetfs: bound to dummy_udc driver [ 164.495107][ T7354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.567564][ T7356] loop1: detected capacity change from 0 to 512 [ 164.580336][ T7358] loop0: detected capacity change from 0 to 512 [ 164.621583][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 164.631856][ T4264] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 164.643888][ T7358] EXT4-fs (loop0): Ignoring removed oldalloc option [ 164.669630][ T7356] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.679636][ T7358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.703063][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 164.749066][ T7358] EXT4-fs (loop0): 1 truncate cleaned up [ 164.755221][ T7356] EXT4-fs (loop1): 1 truncate cleaned up [ 164.755692][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.761956][ T7356] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,jqfmt=vfsv0,grpjquota=,,errors=continue. Quota mode: none. [ 164.776774][ T7358] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 164.825899][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.994749][ T4233] bond0 (unregistering): Released all slaves [ 165.039348][ T7367] netlink: 68 bytes leftover after parsing attributes in process `syz.1.923'. [ 165.068019][ T4264] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 165.078705][ T25] kauditd_printk_skb: 54 callbacks suppressed [ 165.078722][ T25] audit: type=1800 audit(1790804030.662:111): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159543 res=0 errno=0 [ 165.083510][ T4264] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 165.092729][ T25] audit: type=1800 audit(1790804030.672:112): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=159547 res=0 errno=0 [ 165.105457][ T4264] usb 7-1: config 4 has no interface number 0 [ 165.227534][ T7380] loop1: detected capacity change from 0 to 16 [ 165.231812][ T25] audit: type=1800 audit(1790804030.712:113): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159626 res=0 errno=0 [ 165.260219][ T4264] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.267583][ T7379] loop3: detected capacity change from 0 to 1024 [ 165.296819][ T25] audit: type=1800 audit(1790804030.722:114): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=159630 res=0 errno=0 [ 165.331388][ T7243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.351519][ T7380] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.358909][ T7379] EXT4-fs (loop3): inline encryption not supported [ 165.368677][ T7379] EXT4-fs (loop3): inline encryption not supported [ 165.386627][ T7379] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 165.404879][ T7380] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.411148][ T7382] VIDIOC_TRY_EXT_CTRLS: error -25: which=0xa30000, count=3, error_idx=16, request_fd=-1, name=Tilt, Relative, id/size=0x9a0905/6, id/val=0x0/0x0, id/val=0x0/0x0 [ 165.438829][ T7243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.456526][ T25] audit: type=1800 audit(1790804030.802:115): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=44445 res=0 errno=0 [ 165.473541][ T7379] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.482641][ T25] audit: type=1800 audit(1790804030.802:116): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=44444 res=0 errno=0 [ 165.513126][ T7243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.522880][ T4264] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 165.538171][ T4264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.546471][ T4264] usb 7-1: Product: syz [ 165.551433][ T4264] usb 7-1: Manufacturer: syz [ 165.557418][ T4264] usb 7-1: SerialNumber: syz [ 165.565977][ T7379] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 165.596137][ T25] audit: type=1800 audit(1790804030.912:117): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160120 res=0 errno=0 [ 165.606607][ T7379] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.622382][ T25] audit: type=1800 audit(1790804030.932:118): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35300 res=0 errno=0 [ 165.655036][ T7243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.667062][ T25] audit: type=1800 audit(1790804030.942:119): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.928" name="dev_debug" dev="sysfs" ino=61647 res=0 errno=0 [ 165.669266][ T7379] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.925: lblock 0 mapped to illegal pblock 0 (length 1) [ 165.709160][ T25] audit: type=1800 audit(1790804030.992:120): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 165.710401][ T7379] EXT4-fs (loop3): Remounting filesystem read-only [ 165.901485][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.929655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.937513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.947183][ T4265] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 165.998637][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.036724][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.055317][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.073687][ T5083] Bluetooth: hci1: command 0x041b tx timeout [ 166.118522][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.125665][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.171021][ T4264] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 166.201227][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.214737][ T4264] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 166.229852][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.239126][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.246201][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.256383][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.268723][ T4264] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 166.275829][ T4264] usb 7-1: media controller created [ 166.290604][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.301713][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.368189][ T7392] loop1: detected capacity change from 0 to 32768 [ 166.376244][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.386738][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.410044][ T7392] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.930 (7392) [ 166.410173][ T4265] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.435685][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.441399][ T4264] DVB: Unable to find symbol dib7000p_attach() [ 166.450396][ T4264] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 166.469551][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.474456][ T4265] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.492117][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.503937][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.515022][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.524007][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.536696][ T4265] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.563215][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.571792][ T4264] rc_core: IR keymap rc-dib0700-rc5 not found [ 166.583089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.595848][ T4264] Registered IR keymap rc-empty [ 166.612842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.623119][ T4264] dvb-usb: could not initialize remote control. [ 166.637910][ T4264] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 166.656554][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.668360][ T7392] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 166.685101][ T7392] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.708495][ T4264] usb 7-1: USB disconnect, device number 3 [ 166.734416][ T7392] BTRFS info (device loop1): use zstd compression, level 3 [ 166.773529][ T7392] BTRFS info (device loop1): using free space tree [ 166.793810][ T7392] BTRFS info (device loop1): has skinny extents [ 166.830976][ T4264] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 166.877975][ T4265] usb 1-1: usb_control_msg returned -32 [ 166.883647][ T4265] usbtmc 1-1:16.0: can't read capabilities [ 166.994989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.023203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.080439][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.088277][ T7392] BTRFS info (device loop1): enabling ssd optimizations [ 167.111192][ T7444] tipc: Started in network mode [ 167.172494][ T7444] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.182501][ T7444] tipc: New replicast peer: 100.1.1.1 [ 167.189961][ T7444] tipc: Enabled bearer , priority 10 [ 167.409997][ T5046] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (5046) [ 167.688356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.725357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.785613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.811637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.876844][ T7243] device veth0_vlan entered promiscuous mode [ 167.902117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.931156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.050453][ T7243] device veth1_vlan entered promiscuous mode [ 168.098257][ T5083] Bluetooth: hci1: command 0x040f tx timeout [ 168.123802][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.144298][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.215196][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.256599][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.289526][ T7243] device veth0_macvtap entered promiscuous mode [ 168.315744][ T7454] loop6: detected capacity change from 0 to 32768 [ 168.316858][ T7467] tipc: Node number set to 2886997162 [ 168.346764][ T7243] device veth1_macvtap entered promiscuous mode [ 168.380076][ T7454] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.936 (7454) [ 168.398608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.406980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.426519][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.449851][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.457226][ T7454] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 168.481581][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.500563][ T7454] BTRFS info (device loop6): setting nodatasum [ 168.501206][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.528419][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.534740][ T7454] BTRFS info (device loop6): enabling auto defrag [ 168.565911][ T7454] BTRFS info (device loop6): disabling tree log [ 168.567773][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.597766][ T5083] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.607825][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.611948][ T7454] BTRFS info (device loop6): using free space tree [ 168.634419][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.642924][ T5091] usb 1-1: USB disconnect, device number 12 [ 168.644495][ T7454] BTRFS info (device loop6): has skinny extents [ 168.680539][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.699558][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.716465][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.743272][ T7495] loop0: detected capacity change from 0 to 512 [ 168.765915][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.814893][ T7495] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.847604][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.898023][ T7454] BTRFS info (device loop6): enabling ssd optimizations [ 168.905632][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.921885][ T7495] EXT4-fs (loop0): 1 truncate cleaned up [ 168.937287][ T7495] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 168.988566][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.997849][ T5083] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.014635][ T5083] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 169.024225][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.041139][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.084980][ T5083] as10x_usb: device has been detected [ 169.098112][ T5083] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 169.129176][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.136130][ T5083] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 169.160704][ T7495] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz.0.940: path /192/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 169.165727][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.210882][ T7516] loop1: detected capacity change from 0 to 512 [ 169.221345][ T7495] EXT4-fs (loop0): Remounting filesystem read-only [ 169.321251][ T7495] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 169.335156][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.341355][ T5083] as10x_usb: error during firmware upload part1 [ 169.353900][ T7516] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 169.355600][ T7495] CacheFiles: File cache on loop0 registered [ 169.386024][ T7516] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.406456][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.484791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.495507][ T7492] CacheFiles: File cache on loop0 unregistering [ 169.498508][ T5083] Registered device Abilis Systems DVB-Titan [ 169.502594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.502977][ T7492] FS-Cache: Withdrawing cache "CacheFiles" [ 169.567831][ T7243] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.606722][ T7243] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.625175][ T7243] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.647572][ T7243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.166817][ T25] kauditd_printk_skb: 113 callbacks suppressed [ 170.166834][ T25] audit: type=1800 audit(1790804035.752:234): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161823 res=0 errno=0 [ 170.183892][ T5083] Bluetooth: hci1: command 0x0419 tx timeout [ 170.272398][ T7466] usb 4-1: USB disconnect, device number 9 [ 170.380991][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.389216][ T25] audit: type=1800 audit(1790804035.972:235): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161994 res=0 errno=0 [ 170.415392][ T7466] Unregistered device Abilis Systems DVB-Titan [ 170.423811][ T7466] as10x_usb: device has been disconnected [ 170.436106][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.493240][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.554283][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.597043][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.616525][ T25] audit: type=1800 audit(1790804036.202:236): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.948" name="dev_debug" dev="sysfs" ino=61647 res=0 errno=0 [ 170.663321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.883339][ T25] audit: type=1800 audit(1790804036.472:237): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162165 res=0 errno=0 [ 170.957200][ T7566] capability: warning: `syz.6.954' uses 32-bit capabilities (legacy support in use) [ 171.019989][ T7563] loop3: detected capacity change from 0 to 4096 [ 171.086829][ T7573] loop6: detected capacity change from 0 to 512 [ 171.097232][ T25] audit: type=1800 audit(1790804036.692:238): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 171.129658][ T7563] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.145263][ T7563] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.182487][ T7563] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 171.242775][ T25] audit: type=1800 audit(1790804036.832:239): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 171.313450][ T7563] EXT4-fs (loop3): shut down requested (2) [ 171.807878][ T7466] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 171.845732][ T7618] loop1: detected capacity change from 0 to 128 [ 171.874973][ T7616] xt_hashlimit: size too large, truncated to 1048576 [ 171.910585][ T25] audit: type=1800 audit(1790804037.502:240): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35300 res=0 errno=0 [ 172.028023][ T5095] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 172.107780][ T7466] usb 7-1: Using ep0 maxpacket: 32 [ 172.164210][ T7629] loop1: detected capacity change from 0 to 512 [ 172.218435][ T7594] loop3: detected capacity change from 0 to 32768 [ 172.248029][ T25] audit: type=1800 audit(1790804037.842:241): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 172.258082][ T7466] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 172.321041][ T7594] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 172.341127][ T7629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.377905][ T5095] usb 1-1: not running at top speed; connect to a high speed hub [ 172.396260][ T7466] usb 7-1: config 0 has no interface number 0 [ 172.422308][ T7629] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.971: No space for directory leaf checksum. Please run e2fsck -D. [ 172.450796][ T7466] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 172.467834][ T5095] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 172.485363][ T7594] (syz.3.959,7594,0):ocfs2_double_lock:1195 ERROR: status = -2 [ 172.494624][ T5095] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 172.514485][ T5095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.526779][ T7629] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz.1.971: path /173/file2: directory fails checksum at offset 0 [ 172.548842][ T7609] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 172.561146][ T7594] (syz.3.959,7594,0):ocfs2_rename:1304 ERROR: status = -2 [ 172.568740][ T5095] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 172.572072][ T5095] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 172.611715][ T25] audit: type=1800 audit(1790804038.202:242): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162312 res=0 errno=0 [ 172.614452][ T7594] (syz.3.959,7594,0):ocfs2_rename:1694 ERROR: status = -2 [ 172.681373][ T25] audit: type=1800 audit(1790804038.202:243): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=162352 res=0 errno=0 [ 172.732886][ T7466] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 172.747767][ T7466] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.770292][ T7466] usb 7-1: Product: syz [ 172.775171][ T7466] usb 7-1: Manufacturer: syz [ 172.785685][ T7466] usb 7-1: SerialNumber: syz [ 172.811624][ T7466] usb 7-1: config 0 descriptor?? [ 172.820403][ T5095] usb 1-1: USB disconnect, device number 13 [ 172.832141][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 172.838076][ T7595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.854841][ T5095] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 172.882561][ T5095] cyberjack 1-1:1.0: device disconnected [ 173.074585][ T7595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.293161][ T7663] loop1: detected capacity change from 0 to 64 [ 173.691605][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 173.732301][ T7683] device bridge_slave_1 left promiscuous mode [ 173.746388][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.775120][ T7683] device bridge_slave_0 left promiscuous mode [ 173.796846][ T7466] asix 7-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 173.798632][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.951073][ T7691] netlink: 51 bytes leftover after parsing attributes in process `syz.3.983'. [ 174.007901][ T7466] asix 7-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 123 [ 174.078409][ T7702] netlink: 'syz.3.984': attribute type 29 has an invalid length. [ 174.098572][ T7702] netlink: 'syz.3.984': attribute type 29 has an invalid length. [ 174.129823][ T7704] loop1: detected capacity change from 0 to 64 [ 174.145687][ T7702] netlink: 'syz.3.984': attribute type 29 has an invalid length. [ 174.193604][ T7702] netlink: 'syz.3.984': attribute type 29 has an invalid length. [ 174.224959][ T7702] netlink: 'syz.3.984': attribute type 29 has an invalid length. [ 174.260267][ T7704] overlayfs: upper fs needs to support d_type. [ 174.287606][ T7529] usb 7-1: USB disconnect, device number 4 [ 174.321840][ T7704] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 174.398663][ T7704] overlayfs: failed to set xattr on upper [ 174.421860][ T7704] overlayfs: ...falling back to index=off,metacopy=off. [ 174.453082][ T7704] overlayfs: conflicting lowerdir path [ 174.689175][ T9] handle_bad_sector: 7 callbacks suppressed [ 174.689193][ T9] attempt to access beyond end of device [ 174.689193][ T9] loop1: rw=1, want=268435470, limit=64 [ 174.737420][ T9] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 174.932972][ T7730] sctp: [Deprecated]: syz.0.990 (pid 7730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.932972][ T7730] Use struct sctp_sack_info instead [ 175.076413][ T7743] loop1: detected capacity change from 0 to 64 [ 175.184498][ T7751] loop7: detected capacity change from 0 to 8 [ 175.271877][ T25] kauditd_printk_skb: 20 callbacks suppressed [ 175.271892][ T25] audit: type=1800 audit(1790804040.862:264): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35936 res=0 errno=0 [ 175.366802][ T25] audit: type=1800 audit(1790804040.952:265): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="file1" dev="overlay" ino=1 res=0 errno=0 [ 175.949686][ T7782] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 176.062676][ T7756] loop3: detected capacity change from 0 to 32768 [ 176.095501][ T25] audit: type=1800 audit(1790804041.682:266): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 176.132600][ T7791] bridge0: port 3(syz_tun) entered blocking state [ 176.148239][ T7791] bridge0: port 3(syz_tun) entered disabled state [ 176.167881][ T7791] device syz_tun entered promiscuous mode [ 176.195300][ T7756] JBD2: Ignoring recovery information on journal [ 176.206243][ T7791] bridge0: port 3(syz_tun) entered blocking state [ 176.213599][ T7791] bridge0: port 3(syz_tun) entered forwarding state [ 176.272817][ C0] Unknown status report in ack skb [ 176.297813][ T5038] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.324550][ T7756] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.343545][ T7799] loop1: detected capacity change from 0 to 512 [ 176.348722][ T9] (kworker/u4:0,9,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 176.422970][ T9] (kworker/u4:0,9,1):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 176.453720][ T9] (kworker/u4:0,9,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 176.560957][ T7756] (syz.3.998,7756,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 176.630595][ T7756] (syz.3.998,7756,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 176.693732][ T7756] (syz.3.998,7756,0):__ocfs2_prepare_orphan_dir:2175 ERROR: status = -2 [ 176.731464][ T7756] (syz.3.998,7756,1):ocfs2_prep_new_orphaned_file:2477 ERROR: status = -2 [ 176.748783][ T7756] (syz.3.998,7756,1):ocfs2_create_inode_in_orphan:2535 ERROR: status = -2 [ 176.752984][ T5038] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.760446][ T7756] (syz.3.998,7756,1):ocfs2_reflink:4310 ERROR: status = -2 [ 176.769277][ T7819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 176.786712][ T5038] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.801269][ T5038] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.818973][ T5038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.852417][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 176.863704][ T25] audit: type=1326 audit(1790804042.452:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe612514159 code=0x0 [ 176.929759][ T7819] overlayfs: failed to look up (tracing) for ino (-66) [ 176.967932][ T5038] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.978783][ T5038] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.987212][ T5038] usb 1-1: Product: syz [ 177.010877][ T5038] usb 1-1: Manufacturer: syz [ 177.051272][ T25] audit: type=1800 audit(1790804042.642:268): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50665 res=0 errno=0 [ 177.071560][ T5098] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 177.088725][ T5038] cdc_wdm 1-1:1.0: skipping garbage [ 177.093960][ T5038] cdc_wdm 1-1:1.0: skipping garbage [ 177.116498][ T5038] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 177.125940][ T5038] cdc_wdm 1-1:1.0: Unknown control protocol [ 177.140548][ T25] audit: type=1800 audit(1790804042.722:269): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162774 res=0 errno=0 [ 177.161697][ T25] audit: type=1800 audit(1790804042.722:270): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=162816 res=0 errno=0 [ 177.192109][ T25] audit: type=1800 audit(1790804042.732:271): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=162781 res=0 errno=0 [ 177.213661][ T25] audit: type=1800 audit(1790804042.732:272): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=162782 res=0 errno=0 [ 177.248208][ T25] audit: type=1800 audit(1790804042.732:273): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=162803 res=0 errno=0 [ 177.337790][ T7529] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.447871][ T5098] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.458511][ T5098] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 177.468903][ T5098] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 177.478849][ T5098] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 177.491834][ T5098] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 177.501008][ T5098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.530477][ T7823] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 177.541840][ T7823] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 177.568994][ T5098] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 177.577131][ T5098] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 177.588123][ T5098] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 177.597098][ T5098] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 177.606527][ T5098] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 177.614340][ T5098] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 177.623713][ T5098] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 177.708018][ T7529] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 177.721440][ T7529] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 177.888003][ T7529] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 177.913151][ T7529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.942760][ T7529] usb 2-1: Product: syz [ 177.946990][ T7529] usb 2-1: Manufacturer: syz [ 177.985762][ T7529] usb 2-1: SerialNumber: syz [ 178.012563][ T7529] usb 2-1: config 0 descriptor?? [ 178.047512][ T5091] usb 1-1: USB disconnect, device number 14 [ 178.060209][ T7835] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 178.067329][ T7835] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 178.133388][ T7466] usb 7-1: USB disconnect, device number 5 [ 178.159083][ T7466] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 178.175111][ T7466] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 178.193846][ T7466] keyspan 7-1:1.0: device disconnected [ 178.343752][ T7835] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 178.360039][ T7835] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 178.459326][ T5091] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 178.824049][ T5091] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 178.847984][ T7529] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 178.855968][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.904633][ T5091] usb 1-1: config 0 descriptor?? [ 178.949748][ T5091] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 179.067815][ T5098] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 179.081838][ T7862] loop3: detected capacity change from 0 to 32768 [ 179.169636][ T7862] XFS (loop3): Mounting V5 Filesystem [ 179.258000][ T7862] XFS (loop3): Ending clean mount [ 179.288940][ T7529] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 179.309724][ T5098] usb 7-1: Using ep0 maxpacket: 32 [ 179.341834][ T7529] usb 2-1: USB disconnect, device number 13 [ 179.387881][ T5091] gspca_sunplus: reg_w_riv err -71 [ 179.393431][ T5091] sunplus: probe of 1-1:0.0 failed with error -71 [ 179.414656][ T7873] loop7: detected capacity change from 0 to 32768 [ 179.428300][ T5098] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 179.444515][ T5091] usb 1-1: USB disconnect, device number 15 [ 179.456156][ T5098] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 179.485400][ T4193] XFS (loop3): Unmounting Filesystem [ 179.638013][ T5098] usb 7-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 179.657495][ T5098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.665708][ T5098] usb 7-1: Product: syz [ 179.670195][ T5098] usb 7-1: Manufacturer: syz [ 179.674850][ T5098] usb 7-1: SerialNumber: syz [ 179.904859][ T7893] loop1: detected capacity change from 0 to 256 [ 180.058971][ T7893] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc1ffa985, utbl_chksum : 0xe619d30d) [ 180.071735][ T5098] usb 7-1: Can't get UAC3 power state for id 10 [ 180.158734][ T5098] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 180.175202][ T5098] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 180.248017][ T5095] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 180.285518][ T25] kauditd_printk_skb: 45 callbacks suppressed [ 180.285533][ T25] audit: type=1800 audit(1790804045.872:319): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163551 res=0 errno=0 [ 180.320744][ T5098] usb 7-1: USB disconnect, device number 6 [ 180.416246][ T25] audit: type=1800 audit(1790804045.902:320): pid=4177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163530 res=0 errno=0 [ 180.521120][ T25] audit: type=1800 audit(1790804045.922:321): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163399 res=0 errno=0 [ 180.572864][ T25] audit: type=1800 audit(1790804045.922:322): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163423 res=0 errno=0 [ 180.611789][ T25] audit: type=1800 audit(1790804045.922:323): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163450 res=0 errno=0 [ 180.648053][ T5095] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 180.723838][ T5095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.753512][ T5095] usb 1-1: config 0 descriptor?? [ 180.762449][ T7915] loop6: detected capacity change from 0 to 512 [ 180.782193][ T25] audit: type=1800 audit(1790804045.922:324): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163463 res=0 errno=0 [ 180.857489][ T7915] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.895743][ T25] audit: type=1800 audit(1790804045.922:325): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163476 res=0 errno=0 [ 180.938757][ T25] audit: type=1800 audit(1790804045.932:326): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=163400 res=0 errno=0 [ 180.980041][ T7915] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.1042: inode has both inline data and extents flags [ 180.980350][ T7915] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1042: couldn't read orphan inode 15 (err -117) [ 181.010402][ T25] audit: type=1800 audit(1790804045.932:327): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=163403 res=0 errno=0 [ 181.031998][ T25] audit: type=1800 audit(1790804045.942:328): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163517 res=0 errno=0 [ 181.091533][ T7915] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: none. [ 181.149053][ T7929] loop7: detected capacity change from 0 to 512 [ 181.251087][ T7929] EXT4-fs (loop7): Ignoring removed nobh option [ 181.257464][ T7929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 181.346202][ T7929] EXT4-fs (loop7): 1 truncate cleaned up [ 181.389506][ T7929] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 181.707963][ T5095] usb 1-1: Cannot set autoneg [ 181.712990][ T5095] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 181.753598][ T5095] usb 1-1: USB disconnect, device number 16 [ 182.058993][ T4573] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 182.104398][ T7467] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.377737][ T7467] usb 4-1: Using ep0 maxpacket: 8 [ 182.509013][ T4573] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.532236][ T7965] loop0: detected capacity change from 0 to 2048 [ 182.558806][ T4573] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.578708][ T4573] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 182.598153][ T4573] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.622907][ T4573] usb 8-1: config 0 descriptor?? [ 182.644114][ T7965] loop0: p4 < > [ 182.796204][ T7968] EXT4-fs (loop0p4): unable to read superblock [ 182.804852][ T7467] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 182.837964][ T7467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.871403][ T7467] usb 4-1: Product: syz [ 182.875601][ T7467] usb 4-1: Manufacturer: syz [ 182.875618][ T7467] usb 4-1: SerialNumber: syz [ 182.928443][ T7467] usb 4-1: config 0 descriptor?? [ 183.152343][ T7976] loop0: detected capacity change from 0 to 512 [ 183.208675][ T7467] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.240068][ T7976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 183.282355][ T7976] System zones: 1-12 [ 183.317269][ T7976] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1057: missing EA_INODE flag [ 183.338070][ T4573] usb 8-1: language id specifier not provided by device, defaulting to English [ 183.414109][ T7976] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1057: error while reading EA inode 12 err=-117 [ 183.447327][ T7976] EXT4-fs (loop0): 1 orphan inode deleted [ 183.474528][ T7976] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 183.598162][ T7467] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 183.627509][ T7467] usb 4-1: USB disconnect, device number 10 [ 183.780673][ T7994] loop6: detected capacity change from 0 to 128 [ 183.797914][ T4573] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.000B/input/input20 [ 183.888574][ T7994] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.904556][ T4573] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.000B/input/input21 [ 183.990863][ T4573] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 184.010106][ T7994] FAT-fs (loop6): error, parent dir link count too low (2) [ 184.062792][ T4573] usb 8-1: USB disconnect, device number 2 [ 184.080134][ T7994] FAT-fs (loop6): Filesystem has been set read-only [ 184.243587][ T6688] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.312954][ T7999] fido_id[7999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 184.578438][ C0] net_ratelimit: 47 callbacks suppressed [ 184.707747][ T4572] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.758630][ T8018] loop7: detected capacity change from 0 to 64 [ 185.138041][ T4572] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.166653][ T4572] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.173392][ T4572] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 185.173413][ T4572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.221004][ T4572] usb 4-1: config 0 descriptor?? [ 185.333570][ T8039] ================================================================== [ 185.342851][ T8039] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290 [ 185.349745][ T8039] Read of size 1 at addr ffff888053dc0de9 by task syz.7.1080/8039 [ 185.357558][ T8039] [ 185.359896][ T8039] CPU: 0 PID: 8039 Comm: syz.7.1080 Not tainted syzkaller #0 [ 185.367357][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.377437][ T8039] Call Trace: [ 185.380727][ T8039] [ 185.383672][ T8039] dump_stack_lvl+0x188/0x250 [ 185.388369][ T8039] ? show_regs_print_info+0x20/0x20 [ 185.393577][ T8039] ? _printk+0xda/0x130 [ 185.397755][ T8039] ? load_image+0x410/0x410 [ 185.402265][ T8039] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 185.407741][ T8039] print_address_description+0x60/0x2d0 [ 185.413297][ T8039] ? string+0x204/0x290 [ 185.413363][ T8039] kasan_report+0xdf/0x130 [ 185.413386][ T8039] ? string+0x204/0x290 [ 185.413404][ T8039] string+0x204/0x290 [ 185.413426][ T8039] vsnprintf+0x10db/0x1c20 [ 185.427389][ T8039] pointer+0x7b2/0xc60 [ 185.427420][ T8039] ? verify_lock_unused+0x140/0x140 [ 185.427443][ T8039] ? string+0x290/0x290 [ 185.427462][ T8039] ? format_decode+0x8b1/0x1330 [ 185.427487][ T8039] vsnprintf+0xd7c/0x1c20 [ 185.437002][ T8039] vprintk_store+0x378/0x11b0 [ 185.446261][ T8039] ? rcu_lock_release+0x5/0x20 [ 185.455237][ T8039] ? printk_parse_prefix+0x310/0x310 [ 185.464471][ T8039] ? unwind_next_frame+0x11ec/0x1cf0 [ 185.474484][ T8039] ? verify_lock_unused+0x140/0x140 [ 185.484918][ T8039] ? 0xffffffffa002a000 [ 185.489069][ T8039] ? is_bpf_text_address+0x254/0x270 [ 185.489092][ T8039] ? __kernel_text_address+0x9a/0x100 [ 185.489127][ T8039] vprintk_emit+0x85/0x150 [ 185.499725][ T8039] _printk+0xda/0x130 [ 185.499750][ T8039] ? load_image+0x410/0x410 [ 185.508102][ T8039] ? __kasan_kmalloc+0xc6/0xe0 [ 185.508123][ T8039] ? kmemdup+0x22/0x50 [ 185.517357][ T8039] __dynamic_pr_debug+0x196/0x240 [ 185.517389][ T8039] ? collect_syscall+0x6a0/0x6a0 [ 185.517408][ T8039] ? mutex_lock_io_nested+0x60/0x60 [ 185.527529][ T8039] nfc_llcp_get_sdp_ssap+0x3c1/0x3f0 [ 185.527565][ T8039] llcp_sock_bind+0x3a2/0x770 [ 185.527592][ T8039] ? llcp_sock_recvmsg+0xca0/0xca0 [ 185.527622][ T8039] ? bpf_lsm_socket_bind+0x5/0x10 [ 185.538450][ T8039] ? security_socket_bind+0x7c/0xa0 [ 185.538483][ T8039] __sys_bind+0x2e9/0x3e0 [ 185.548415][ T8039] ? __ia32_sys_socketpair+0xb0/0xb0 [ 185.548458][ T8039] __x64_sys_bind+0x76/0x80 [ 185.548478][ T8039] do_syscall_64+0x4c/0xa0 [ 185.548500][ T8039] ? clear_bhb_loop+0x30/0x80 [ 185.569093][ T8039] ? clear_bhb_loop+0x30/0x80 [ 185.569123][ T8039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.579856][ T8039] RIP: 0033:0x7fe612514159 [ 185.579879][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.579893][ T8039] RSP: 002b:00007fe61076c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 185.579913][ T8039] RAX: ffffffffffffffda RBX: 00007fe61279bfa0 RCX: 00007fe612514159 [ 185.588955][ T8039] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 185.588969][ T8039] RBP: 00007fe6125ab06b R08: 0000000000000000 R09: 0000000000000000 [ 185.588980][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.588992][ T8039] R13: 00007fe61279c038 R14: 00007fe61279bfa0 R15: 00007ffd4d393f38 [ 185.623872][ T8039] [ 185.623882][ T8039] [ 185.623887][ T8039] Allocated by task 8039: [ 185.623895][ T8039] __kasan_kmalloc+0xaf/0xe0 [ 185.623915][ T8039] kmemdup+0x22/0x50 [ 185.623926][ T8039] llcp_sock_bind+0x360/0x770 [ 185.623942][ T8039] __sys_bind+0x2e9/0x3e0 [ 185.623956][ T8039] __x64_sys_bind+0x76/0x80 [ 185.623969][ T8039] do_syscall_64+0x4c/0xa0 [ 185.623983][ T8039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.624005][ T8039] [ 185.624009][ T8039] The buggy address belongs to the object at ffff888053dc0de8 [ 185.624009][ T8039] which belongs to the cache kmalloc-8 of size 8 [ 185.624020][ T8039] The buggy address is located 1 bytes inside of [ 185.624020][ T8039] 8-byte region [ffff888053dc0de8, ffff888053dc0df0) [ 185.641290][ T8039] The buggy address belongs to the page: [ 185.641301][ T8039] page:ffffea00014f7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53dc0 [ 185.641321][ T8039] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 185.641352][ T8039] raw: 00fff00000000200 0000000000000000 0000003100000001 ffff888016c41280 [ 185.658200][ T8039] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 185.658212][ T8039] page dumped because: kasan: bad access detected [ 185.658231][ T8039] page_owner tracks the page as allocated [ 185.658237][ T8039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6332, ts 136936641067, free_ts 136934939623 [ 185.674161][ T8039] get_page_from_freelist+0x24f6/0x2670 [ 185.674184][ T8039] __alloc_pages+0x1ee/0x480 [ 185.674199][ T8039] new_slab+0xc0/0x4b0 [ 185.674213][ T8039] ___slab_alloc+0x807/0xdd0 [ 185.679529][ T8039] __kmalloc_track_caller+0x11b/0x330 [ 185.679547][ T8039] kvasprintf+0xe3/0x1a0 [ 185.679561][ T8039] kobject_set_name_vargs+0x5d/0x110 [ 185.847146][ T8039] kobject_init_and_add+0xeb/0x190 [ 185.852250][ T8039] net_rx_queue_update_kobjects+0x1b9/0x4b0 [ 185.858129][ T8039] netdev_register_kobject+0x231/0x320 [ 185.863572][ T8039] register_netdevice+0x10e8/0x1720 [ 185.868759][ T8039] nsim_create+0x32d/0x3e0 [ 185.873189][ T8039] __nsim_dev_port_add+0x66e/0xa80 [ 185.878283][ T8039] nsim_dev_port_add_all+0x37/0x100 [ 185.883464][ T8039] nsim_dev_probe+0x75e/0x9d0 [ 185.888124][ T8039] really_probe+0x276/0xc70 [ 185.892615][ T8039] page last free stack trace: [ 185.897266][ T8039] free_unref_page_prepare+0x637/0x6c0 [ 185.902705][ T8039] free_unref_page+0x8f/0x2a0 [ 185.907362][ T8039] __dev_alloc_name+0x745/0x7c0 [ 185.912197][ T8039] dev_prep_valid_name+0x1cc/0x330 [ 185.917290][ T8039] register_netdevice+0x499/0x1720 [ 185.922384][ T8039] nsim_create+0x32d/0x3e0 [ 185.926784][ T8039] __nsim_dev_port_add+0x66e/0xa80 [ 185.931881][ T8039] nsim_dev_port_add_all+0x37/0x100 [ 185.937063][ T8039] nsim_dev_probe+0x75e/0x9d0 [ 185.941721][ T8039] really_probe+0x276/0xc70 [ 185.946208][ T8039] __driver_probe_device+0x1f5/0x390 [ 185.951475][ T8039] driver_probe_device+0x4f/0x420 [ 185.956481][ T8039] __device_attach_driver+0x2b0/0x500 [ 185.961853][ T8039] bus_for_each_drv+0x184/0x210 [ 185.966686][ T8039] __device_attach+0x2a7/0x480 [ 185.971430][ T8039] bus_probe_device+0xba/0x1d0 [ 185.976179][ T8039] [ 185.978489][ T8039] Memory state around the buggy address: [ 185.984097][ T8039] ffff888053dc0c80: 00 fc fc fc fc 06 fc fc fc fc 05 fc fc fc fc 07 [ 185.992137][ T8039] ffff888053dc0d00: fc fc fc fc 06 fc fc fc fc fa fc fc fc fc fa fc [ 186.000184][ T8039] >ffff888053dc0d80: fc fc fc 05 fc fc fc fc 05 fc fc fc fc 01 fc fc [ 186.008223][ T8039] ^ [ 186.015655][ T8039] ffff888053dc0e00: fc fc fa fc fc fc fc fa fc fc fc fc 05 fc fc fc [ 186.023729][ T8039] ffff888053dc0e80: fc 05 fc fc fc fc 05 fc fc fc fc 05 fc fc fc fc [ 186.031769][ T8039] ================================================================== [ 186.039804][ T8039] Disabling lock debugging due to kernel taint [ 186.045946][ T8039] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.053118][ T8039] CPU: 0 PID: 8039 Comm: syz.7.1080 Tainted: G B syzkaller #0 [ 186.061857][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.071910][ T8039] Call Trace: [ 186.075174][ T8039] [ 186.078092][ T8039] dump_stack_lvl+0x188/0x250 [ 186.082778][ T8039] ? show_regs_print_info+0x20/0x20 [ 186.087970][ T8039] ? load_image+0x410/0x410 [ 186.092464][ T8039] panic+0x2f8/0x850 [ 186.096344][ T8039] ? __lock_acquire+0x7b50/0x7b50 [ 186.101355][ T8039] ? bpf_jit_dump+0xd0/0xd0 [ 186.105843][ T8039] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 186.111721][ T8039] ? _raw_spin_unlock+0x40/0x40 [ 186.116552][ T8039] ? string+0x204/0x290 [ 186.120688][ T8039] check_panic_on_warn+0x80/0xa0 [ 186.125619][ T8039] ? string+0x204/0x290 [ 186.129757][ T8039] end_report+0x6d/0xf0 [ 186.133894][ T8039] kasan_report+0x102/0x130 [ 186.138396][ T8039] ? string+0x204/0x290 [ 186.142534][ T8039] string+0x204/0x290 [ 186.146518][ T8039] vsnprintf+0x10db/0x1c20 [ 186.150922][ T8039] pointer+0x7b2/0xc60 [ 186.154979][ T8039] ? verify_lock_unused+0x140/0x140 [ 186.160159][ T8039] ? string+0x290/0x290 [ 186.164313][ T8039] ? format_decode+0x8b1/0x1330 [ 186.169171][ T8039] vsnprintf+0xd7c/0x1c20 [ 186.173501][ T8039] vprintk_store+0x378/0x11b0 [ 186.178170][ T8039] ? rcu_lock_release+0x5/0x20 [ 186.182920][ T8039] ? printk_parse_prefix+0x310/0x310 [ 186.188276][ T8039] ? unwind_next_frame+0x11ec/0x1cf0 [ 186.193547][ T8039] ? verify_lock_unused+0x140/0x140 [ 186.198730][ T8039] ? 0xffffffffa002a000 [ 186.202865][ T8039] ? is_bpf_text_address+0x254/0x270 [ 186.208132][ T8039] ? __kernel_text_address+0x9a/0x100 [ 186.213492][ T8039] vprintk_emit+0x85/0x150 [ 186.217890][ T8039] _printk+0xda/0x130 [ 186.221855][ T8039] ? load_image+0x410/0x410 [ 186.226339][ T8039] ? __kasan_kmalloc+0xc6/0xe0 [ 186.231085][ T8039] ? kmemdup+0x22/0x50 [ 186.235138][ T8039] __dynamic_pr_debug+0x196/0x240 [ 186.240150][ T8039] ? collect_syscall+0x6a0/0x6a0 [ 186.245072][ T8039] ? mutex_lock_io_nested+0x60/0x60 [ 186.250268][ T8039] nfc_llcp_get_sdp_ssap+0x3c1/0x3f0 [ 186.255540][ T8039] llcp_sock_bind+0x3a2/0x770 [ 186.260208][ T8039] ? llcp_sock_recvmsg+0xca0/0xca0 [ 186.265310][ T8039] ? bpf_lsm_socket_bind+0x5/0x10 [ 186.270316][ T8039] ? security_socket_bind+0x7c/0xa0 [ 186.275501][ T8039] __sys_bind+0x2e9/0x3e0 [ 186.279815][ T8039] ? __ia32_sys_socketpair+0xb0/0xb0 [ 186.285092][ T8039] __x64_sys_bind+0x76/0x80 [ 186.289581][ T8039] do_syscall_64+0x4c/0xa0 [ 186.293981][ T8039] ? clear_bhb_loop+0x30/0x80 [ 186.298667][ T8039] ? clear_bhb_loop+0x30/0x80 [ 186.303325][ T8039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.309214][ T8039] RIP: 0033:0x7fe612514159 [ 186.313612][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.333448][ T8039] RSP: 002b:00007fe61076c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 186.341857][ T8039] RAX: ffffffffffffffda RBX: 00007fe61279bfa0 RCX: 00007fe612514159 [ 186.349814][ T8039] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 186.357777][ T8039] RBP: 00007fe6125ab06b R08: 0000000000000000 R09: 0000000000000000 [ 186.365744][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.373699][ T8039] R13: 00007fe61279c038 R14: 00007fe61279bfa0 R15: 00007ffd4d393f38 [ 186.381660][ T8039] [ 186.384897][ T8039] Kernel Offset: disabled [ 186.389226][ T8039] Rebooting in 86400 seconds..