last executing test programs: 6.318129425s ago: executing program 4 (id=1011): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) 5.913045371s ago: executing program 4 (id=1013): r0 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xdafb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 5.312505467s ago: executing program 1 (id=1022): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4.849847638s ago: executing program 3 (id=1023): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.833216998s ago: executing program 1 (id=1024): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.527279567s ago: executing program 4 (id=1027): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda8d) accept$inet(r0, 0x0, 0x0) 4.30185066s ago: executing program 1 (id=1029): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) setuid(0xee00) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) 3.813906057s ago: executing program 2 (id=1033): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x240441c6) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 3.629455317s ago: executing program 0 (id=1034): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x0, 0xd, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x788, 0x20, 0x3, 0xffffffcb}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 3.566037246s ago: executing program 2 (id=1035): r0 = memfd_create(&(0x7f00000002c0)='\xe9`\x06\x00\x00\x00\x91\x00\x00\x00\x00\x00\x00\x00j\x00\x00\x00\x00\x00n', 0x3) r1 = memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0) r2 = fanotify_init(0x0, 0x1) fanotify_mark(r2, 0x1, 0x1b, r1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), 0x0, 0x0, 0x1) 3.358687211s ago: executing program 2 (id=1036): mmap$IORING_OFF_SQ_RING(0x0, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) poll(&(0x7f0000000140)=[{r0, 0xa010}], 0x1, 0x7ff) ioctl$TIOCSETD(r0, 0x5423, 0x0) 3.356609307s ago: executing program 4 (id=1037): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x99f, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x10}}}, &(0x7f0000000000)=0x0) r1 = memfd_create(0x0, 0x4) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, 0x0, 0x0) 3.178036878s ago: executing program 3 (id=1038): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1008088, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8001}}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) 3.175473245s ago: executing program 1 (id=1039): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000ff03000065d300000100000000000400", @ANYRES32, @ANYBLOB="0400000000000000000000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02"], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.130742801s ago: executing program 5 (id=1040): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x1, 0x45a, &(0x7f0000001040)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 2.981318105s ago: executing program 0 (id=1041): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c6, &(0x7f00000000c0)="$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") syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x409}}, {0x2, &(0x7f00000008c0)=@string={0x2}}, {0x2, &(0x7f0000000980)=@string={0x2}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/27, 0x1b) 2.942333585s ago: executing program 4 (id=1042): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c36000001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)={0x0, 0x0, 0x40, '\x00'/64}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 2.588282395s ago: executing program 3 (id=1043): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000bc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 2.583993867s ago: executing program 1 (id=1044): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 2.458182519s ago: executing program 5 (id=1045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x2161, 0x0, 0x0) 2.288738157s ago: executing program 2 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) close(r2) 2.165058254s ago: executing program 3 (id=1047): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.023586192s ago: executing program 0 (id=1048): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@bh}, {@noblock_validity}, {@grpquota}, {@inlinecrypt}, {@delalloc}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r0, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x10) 1.977444881s ago: executing program 5 (id=1049): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffd, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000079c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40}) 1.825375631s ago: executing program 2 (id=1050): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "29624e40c6e6d79b1911f4834b435dd2518f63061278f30c5371048e8e0b180f", "73e1acf1dea2d14aface79d29d1c09f7", {"6bc6cfc3555269e081b5c52d82dc7563", "83337f41945f3a2ae6928d0ba0bfa400"}}}}}}}}, 0x0) 1.724547982s ago: executing program 5 (id=1051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) 1.502360182s ago: executing program 3 (id=1052): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 1.342344926s ago: executing program 2 (id=1053): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.213452266s ago: executing program 0 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001fd85aec1983ff140000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b80140001800c000100636f756e74657200040002802c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a00ffff0900020073797a08130000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 968.099724ms ago: executing program 0 (id=1055): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 753.70733ms ago: executing program 4 (id=1056): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000ff03000065d300000100000000000400", @ANYRES32, @ANYBLOB="0400000000000000000000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02"], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 731.148738ms ago: executing program 1 (id=1057): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0xc7, 0xf, 0x2, 0xc5, 0x4, 0x0, 0x9d}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) 730.860693ms ago: executing program 3 (id=1058): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1500, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') getdents64(r0, 0x0, 0x0) 730.606094ms ago: executing program 5 (id=1059): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 303.702608ms ago: executing program 0 (id=1060): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x220c3, 0x40) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 5 (id=1061): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200), 0x8) listen(r0, 0x1) socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f0000000180)={0x5, 0x7, 0x3, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x1000000000000000, 0x3}, 0x0, 0x0) kernel console output (not intermixed with test programs): srso_alias_return_thunk+0x5/0xfbef5 [ 168.253200][ T7207] ? xfd_validate_state+0x129/0x190 [ 168.253274][ T7207] ? __x64_sys_bpf+0xce/0x140 [ 168.253328][ T7207] __x64_sys_bpf+0xce/0x140 [ 168.253386][ T7207] ? do_syscall_64+0xae/0x790 [ 168.253451][ T7207] do_syscall_64+0x123/0x790 [ 168.253517][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.253558][ T7207] RIP: 0033:0x7f1fdcb9e159 [ 168.253589][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.253627][ T7207] RSP: 002b:00007f1fdadf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.253666][ T7207] RAX: ffffffffffffffda RBX: 00007f1fdce25fa0 RCX: 00007f1fdcb9e159 [ 168.253693][ T7207] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0200000000000000 [ 168.253719][ T7207] RBP: 00007f1fdcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 168.253743][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.253767][ T7207] R13: 00007f1fdce26038 R14: 00007f1fdce25fa0 R15: 00007ffeca86abf8 [ 168.253821][ T7207] [ 168.593338][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 168.620970][ T973] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 168.637240][ T973] usb 5-1: USB disconnect, device number 4 [ 168.930708][ T7213] loop1: detected capacity change from 0 to 256 [ 168.994374][ T7210] fido_id[7210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.996293][ T7213] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 169.014663][ T7172] loop5: detected capacity change from 0 to 32768 [ 169.092253][ T7172] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.215135][ T973] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.353840][ T7172] XFS (loop5): Ending clean mount [ 169.371187][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 169.377824][ T973] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 169.380994][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 169.400178][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.400216][ T973] usb 3-1: Product: syz [ 169.400243][ T973] usb 3-1: Manufacturer: syz [ 169.400269][ T973] usb 3-1: SerialNumber: syz [ 169.441033][ T973] usb 3-1: config 0 descriptor?? [ 169.455584][ T973] hub 3-1:0.0: bad descriptor, ignoring hub [ 169.455620][ T973] hub 3-1:0.0: probe with driver hub failed with error -5 [ 169.592515][ T973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.626694][ T5768] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 169.669799][ T5768] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.854339][ T5615] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.518324][ T973] usb 3-1: USB disconnect, device number 5 [ 170.658680][ T7254] FAULT_INJECTION: forcing a failure. [ 170.658680][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 170.658732][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.5.471 Not tainted syzkaller #0 PREEMPT(full) [ 170.658779][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 170.658803][ T7254] Call Trace: [ 170.658815][ T7254] [ 170.658830][ T7254] dump_stack_lvl+0x100/0x190 [ 170.658890][ T7254] should_fail_ex.cold+0x5/0xa [ 170.658936][ T7254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.658991][ T7254] should_failslab+0xc2/0x120 [ 170.659031][ T7254] __kvmalloc_node_noprof+0x113/0x9b0 [ 170.659110][ T7254] ? do_getxattr+0xbb/0x3c0 [ 170.659160][ T7254] do_getxattr+0xbb/0x3c0 [ 170.659205][ T7254] filename_getxattr+0xee/0x1a0 [ 170.659254][ T7254] ? __pfx_filename_getxattr+0x10/0x10 [ 170.659309][ T7254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.659358][ T7254] ? do_getname+0x191/0x390 [ 170.659411][ T7254] path_getxattrat+0x20d/0x430 [ 170.659460][ T7254] ? __pfx_path_getxattrat+0x10/0x10 [ 170.659508][ T7254] ? find_held_lock+0x2b/0x80 [ 170.659560][ T7254] ? ksys_write+0x190/0x250 [ 170.659622][ T7254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.659669][ T7254] ? do_futex+0x190/0x440 [ 170.659760][ T7254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.659816][ T7254] do_syscall_64+0x123/0x790 [ 170.659883][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.659924][ T7254] RIP: 0033:0x7fc07db9e159 [ 170.659954][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.659992][ T7254] RSP: 002b:00007fc07e9f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 170.660029][ T7254] RAX: ffffffffffffffda RBX: 00007fc07de25fa0 RCX: 00007fc07db9e159 [ 170.660062][ T7254] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000200000000040 [ 170.660088][ T7254] RBP: 00007fc07dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 170.660112][ T7254] R10: 00000000000000c7 R11: 0000000000000246 R12: 0000000000000000 [ 170.660136][ T7254] R13: 00007fc07de26038 R14: 00007fc07de25fa0 R15: 00007ffe098c4948 [ 170.660188][ T7254] [ 171.303922][ T7268] loop5: detected capacity change from 0 to 512 [ 171.316835][ T7268] EXT4-fs: Ignoring removed bh option [ 171.340889][ T7268] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 171.396596][ T5768] psmouse serio2: Failed to reset mouse on : -5 [ 171.491751][ T7268] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.475: bad orphan inode 15 [ 171.491799][ T7268] loop5: lost filesystem error report for type 5 error -117 [ 171.514653][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 171.514685][ C0] EXT4-fs (loop5): initial error at time 1789170461: ext4_orphan_get:1429 [ 171.514722][ C0] EXT4-fs (loop5): last error at time 1789170461: ext4_orphan_get:1429 [ 171.524287][ T7268] ext4_test_bit(bit=14, block=4) = 1 [ 171.524313][ T7268] is_bad_inode(inode)=0 [ 171.524332][ T7268] NEXT_ORPHAN(inode)=100663296 [ 171.524346][ T7268] max_ino=32 [ 171.524360][ T7268] i_nlink=1 [ 171.562374][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.602711][ T7268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.869815][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.284593][ T5739] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.394535][ T973] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 172.434490][ T5739] usb 5-1: Using ep0 maxpacket: 16 [ 172.435396][ T5739] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 172.436881][ T5739] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 172.436921][ T5739] usb 5-1: config 1 has no interface number 0 [ 172.436976][ T5739] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.437021][ T5739] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.437072][ T5739] usb 5-1: config 1 interface 105 has no altsetting 0 [ 172.442540][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 172.442579][ T5739] usb 5-1: Product: syz [ 172.442606][ T5739] usb 5-1: Manufacturer: syz [ 172.442633][ T5739] usb 5-1: SerialNumber: syz [ 172.540113][ T7276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.540295][ T7276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.544601][ T973] usb 6-1: Using ep0 maxpacket: 8 [ 172.547026][ T973] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.563170][ T973] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 172.563221][ T973] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.563279][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.563327][ T973] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.563371][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.563417][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.563464][ T973] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.563513][ T973] usb 6-1: config 168 interface 0 has no altsetting 0 [ 172.575485][ T973] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 172.575534][ T973] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.575591][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.575639][ T973] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.575683][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.575733][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.575781][ T973] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.575830][ T973] usb 6-1: config 168 interface 0 has no altsetting 0 [ 172.580301][ T973] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 172.580349][ T973] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.580437][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.580485][ T973] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.580530][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.580578][ T973] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.580656][ T973] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.580705][ T973] usb 6-1: config 168 interface 0 has no altsetting 0 [ 172.596027][ T973] usb 6-1: string descriptor 0 read error: -22 [ 172.596189][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.630646][ T7278] loop0: detected capacity change from 0 to 32768 [ 172.666736][ T973] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 172.739726][ T7278] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.987308][ T5739] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 172.987840][ T5739] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 173.010049][ T7278] XFS (loop0): Ending clean mount [ 173.070519][ T5739] usb 5-1: USB disconnect, device number 5 [ 173.146078][ T25] usb 6-1: USB disconnect, device number 6 [ 173.348058][ T5611] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.534793][ T5739] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.684536][ T5739] usb 2-1: Using ep0 maxpacket: 8 [ 173.686562][ T5739] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.687898][ T5739] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.687942][ T5739] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.687986][ T5739] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.688029][ T5739] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.688101][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.704550][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.855164][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 173.856020][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.857367][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.857434][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.872280][ T25] usb 4-1: config 0 descriptor?? [ 174.001566][ T5739] usb 2-1: GET_CAPABILITIES returned 0 [ 174.001630][ T5739] usbtmc 2-1:16.0: can't read capabilities [ 174.156440][ T25] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 174.233966][ T5739] usb 2-1: USB disconnect, device number 4 [ 174.429681][ T7326] loop4: detected capacity change from 0 to 512 [ 174.431227][ T7326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.467311][ T7326] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 174.467438][ T7326] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.495: corrupted in-inode xattr: e_value size too large [ 174.467682][ T7326] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.470642][ T7326] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.495: couldn't read orphan inode 15 (err -117) [ 174.470692][ T7326] loop4: lost filesystem error report for type 5 error -117 [ 174.520340][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.597992][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.121858][ T7340] jffs2: notice: (7340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 175.204947][ T5768] misc userio: Buffer overflowed, userio client isn't keeping up [ 175.225220][ T5739] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.386376][ T5739] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 175.388422][ T5739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.388485][ T5739] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.388533][ T5739] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.388597][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.858387][ T1553] usb 2-1: USB disconnect, device number 5 [ 175.893723][ T7345] loop4: detected capacity change from 0 to 32768 [ 175.938205][ T7345] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.093454][ T7345] XFS (loop4): Ending clean mount [ 176.270396][ T5768] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 176.323028][ T5613] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.565060][ T5768] psmouse serio2: Failed to enable mouse on [ 176.633918][ T5739] usb 4-1: USB disconnect, device number 8 [ 176.653691][ T7349] loop0: detected capacity change from 0 to 32768 [ 176.742773][ T31] audit: type=1800 audit(1789170467.151:17): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 177.057990][ T7368] Invalid ELF header magic: != ELF [ 177.464735][ T5739] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 177.621539][ T5739] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.637688][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.637742][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.637785][ T5739] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.637852][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.720474][ T5739] usb 6-1: config 0 descriptor?? [ 177.921321][ T7385] jffs2: notice: (7385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.096425][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 178.096455][ T7391] netlink: 468 bytes leftover after parsing attributes in process `syz.4.517'. [ 178.096512][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 178.185685][ T5739] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 178.225066][ T5739] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 178.573064][ T30] usb 6-1: USB disconnect, device number 7 [ 178.761273][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 178.988130][ T7409] FAULT_INJECTION: forcing a failure. [ 178.988130][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 178.988187][ T7409] CPU: 0 UID: 0 PID: 7409 Comm: syz.3.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.988242][ T7409] Tainted: [L]=SOFTLOCKUP [ 178.988256][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 178.988279][ T7409] Call Trace: [ 178.988292][ T7409] [ 178.988307][ T7409] dump_stack_lvl+0x100/0x190 [ 178.988366][ T7409] should_fail_ex.cold+0x5/0xa [ 178.988410][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.988464][ T7409] should_failslab+0xc2/0x120 [ 178.988503][ T7409] __kmalloc_cache_noprof+0x91/0x6d0 [ 178.988557][ T7409] ? sctp_auth_shkey_create+0x9e/0x210 [ 178.988609][ T7409] sctp_auth_shkey_create+0x9e/0x210 [ 178.988653][ T7409] sctp_endpoint_new+0x589/0xb20 [ 178.988701][ T7409] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 178.988745][ T7409] ? lock_acquire+0x1d1/0x380 [ 178.988785][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.988834][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.988881][ T7409] ? lockdep_init_map_type+0x5c/0x250 [ 178.988928][ T7409] sctp_init_sock+0xe2b/0x1300 [ 178.988967][ T7409] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 178.989009][ T7409] sctp_v6_init_sock+0x16/0x70 [ 178.989050][ T7409] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 178.989096][ T7409] inet6_create+0xb1a/0x12b0 [ 178.989143][ T7409] ? inet6_create+0x7f/0x12b0 [ 178.989191][ T7409] __sock_create+0x339/0x860 [ 178.989240][ T7409] __sys_socket+0x14d/0x260 [ 178.989283][ T7409] ? __pfx___sys_socket+0x10/0x10 [ 178.989340][ T7409] __x64_sys_socket+0x72/0xb0 [ 178.989380][ T7409] ? lockdep_hardirqs_on+0x7d/0x110 [ 178.989441][ T7409] do_syscall_64+0x123/0x790 [ 178.989506][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.989547][ T7409] RIP: 0033:0x7f0ea7d9e159 [ 178.989577][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.989615][ T7409] RSP: 002b:00007f0ea8bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 178.989653][ T7409] RAX: ffffffffffffffda RBX: 00007f0ea8025fa0 RCX: 00007f0ea7d9e159 [ 178.989680][ T7409] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 178.989704][ T7409] RBP: 00007f0ea7e3503b R08: 0000000000000000 R09: 0000000000000000 [ 178.989729][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.989753][ T7409] R13: 00007f0ea8026038 R14: 00007f0ea8025fa0 R15: 00007ffd6c1ee918 [ 178.989805][ T7409] [ 179.054929][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.215963][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 179.219479][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.223655][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.223720][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.263442][ T25] usb 2-1: config 0 descriptor?? [ 179.315580][ T7411] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 179.327217][ T7411] team0: Device vxcan0 is of different type [ 179.540178][ T25] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 179.934921][ T1553] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 180.061469][ T25] usb 2-1: USB disconnect, device number 6 [ 180.094497][ T1553] usb 6-1: Using ep0 maxpacket: 16 [ 180.095353][ T1553] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 180.098315][ T1553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.098368][ T1553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.098417][ T1553] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.098483][ T1553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.168108][ T1553] usb 6-1: config 0 descriptor?? [ 180.425151][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.576863][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 180.580189][ T30] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.582689][ T30] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.582738][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.582785][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.598811][ T30] usb 3-1: config 0 descriptor?? [ 180.679369][ T1553] nintendo 0003:057E:2019.0007: unknown main item tag 0x0 [ 180.679413][ T1553] nintendo 0003:057E:2019.0007: unknown main item tag 0x0 [ 180.679449][ T1553] nintendo 0003:057E:2019.0007: unknown main item tag 0x0 [ 180.679484][ T1553] nintendo 0003:057E:2019.0007: unknown main item tag 0x0 [ 180.679519][ T1553] nintendo 0003:057E:2019.0007: unknown main item tag 0x0 [ 180.753115][ T1553] nintendo 0003:057E:2019.0007: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 180.884135][ T1553] nintendo 0003:057E:2019.0007: Failed to get joycon info; ret=-71 [ 180.884174][ T1553] nintendo 0003:057E:2019.0007: Failed to retrieve controller info; ret=-71 [ 180.884208][ T1553] nintendo 0003:057E:2019.0007: Failed to initialize controller; ret=-71 [ 180.939324][ T1553] nintendo 0003:057E:2019.0007: probe - fail = -71 [ 180.939503][ T1553] nintendo 0003:057E:2019.0007: probe with driver nintendo failed with error -71 [ 180.964158][ T1553] usb 6-1: USB disconnect, device number 8 [ 181.319850][ T7450] fido_id[7450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 181.522948][ T30] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 181.676283][ T30] corsair-cpro 0003:1B1C:0C10.0008: probe with driver corsair-cpro failed with error -71 [ 181.725437][ T7466] loop1: detected capacity change from 0 to 1024 [ 181.756770][ T7468] netlink: 68 bytes leftover after parsing attributes in process `syz.4.543'. [ 181.759000][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 181.815803][ T7466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.919611][ T7466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.542'. [ 181.929827][ T25] usb 3-1: USB disconnect, device number 6 [ 182.156453][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.436759][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 182.752203][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 182.752245][ T7488] nbd: device at index 64 is going down [ 182.938769][ T7493] FAULT_INJECTION: forcing a failure. [ 182.938769][ T7493] name failslab, interval 1, probability 0, space 0, times 0 [ 182.938828][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.2.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.938889][ T7493] Tainted: [L]=SOFTLOCKUP [ 182.938904][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 182.938927][ T7493] Call Trace: [ 182.938941][ T7493] [ 182.938956][ T7493] dump_stack_lvl+0x100/0x190 [ 182.939018][ T7493] should_fail_ex.cold+0x5/0xa [ 182.939070][ T7493] should_failslab+0xc2/0x120 [ 182.939115][ T7493] kmem_cache_alloc_noprof+0x92/0x6a0 [ 182.939176][ T7493] ? __send_signal_locked+0x155/0x12d0 [ 182.939245][ T7493] __send_signal_locked+0x155/0x12d0 [ 182.939307][ T7493] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.939363][ T7493] send_signal_locked+0x15e/0xa00 [ 182.939479][ T7493] ? __pfx_send_signal_locked+0x10/0x10 [ 182.939542][ T7493] ? do_raw_spin_lock+0x128/0x260 [ 182.939635][ T7493] ? _raw_spin_lock_irqsave+0x52/0x60 [ 182.939701][ T7493] force_sig_info_to_task+0x450/0x660 [ 182.939785][ T7493] force_sig_fault+0xc3/0x100 [ 182.939822][ T7493] ? __pfx_force_sig_fault+0x10/0x10 [ 182.939870][ T7493] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.939918][ T7493] ? fixup_vdso_exception+0x2d1/0x370 [ 182.939970][ T7493] __bad_area_nosemaphore+0x31b/0x3f0 [ 182.940020][ T7493] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.940068][ T7493] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 182.940120][ T7493] do_user_addr_fault+0x8ca/0x12f0 [ 182.940177][ T7493] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.940232][ T7493] exc_page_fault+0x6f/0xd0 [ 182.940291][ T7493] asm_exc_page_fault+0x26/0x30 [ 182.940330][ T7493] RIP: 0033:0x7f1fdcb86e1f [ 182.940360][ T7493] Code: 0f 1f 84 00 00 00 00 00 0f 1f 00 48 ff ca 0f 8c 02 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 f9 03 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 68 [ 182.940399][ T7493] RSP: 002b:00007f1fdadf5bd8 EFLAGS: 00010283 [ 182.940431][ T7493] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 182.940456][ T7493] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f1fdadf5c00 [ 182.940481][ T7493] RBP: 00007f1fdadf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 182.940506][ T7493] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 182.940531][ T7493] R13: 00007f1fdce26038 R14: 00007f1fdce25fa0 R15: 00007ffeca86abf8 [ 182.940584][ T7493] [ 183.240754][ T7497] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 183.364267][ T7479] loop5: detected capacity change from 0 to 32768 [ 183.418143][ T7479] [ 183.418143][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.418143][ T7479] [ 183.495861][ T31] audit: type=1800 audit(1789170473.901:18): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.551" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 183.558196][ T7479] [ 183.558196][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.558196][ T7479] [ 183.558226][ T7479] [ 183.558226][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.558226][ T7479] [ 183.580037][ T6064] udevd[6064]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 183.616757][ T7479] [ 183.616757][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.616757][ T7479] [ 183.629167][ T7479] [ 183.629167][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.629167][ T7479] [ 183.629192][ T7479] [ 183.629192][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.629192][ T7479] [ 183.629211][ T7479] [ 183.629211][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.629211][ T7479] [ 183.640485][ T7479] JFS: metapage_get_blocks failed [ 183.640895][ T7479] [ 183.640895][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.640895][ T7479] [ 183.648553][ T7479] [ 183.648553][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.648553][ T7479] [ 183.648578][ T7479] [ 183.648578][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.648578][ T7479] [ 183.648599][ T7479] [ 183.648599][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.648599][ T7479] [ 183.671492][ T6064] udevd[6064]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 183.698914][ T7479] [ 183.698914][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.698914][ T7479] [ 183.699211][ T7506] ERROR: (device loop5): diWrite: ixpxd invalid [ 183.699211][ T7506] [ 183.704191][ T7479] [ 183.704191][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.704191][ T7479] [ 183.704215][ T7479] [ 183.704215][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.704215][ T7479] [ 183.704233][ T7479] [ 183.704233][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.704233][ T7479] [ 183.711777][ T7506] ERROR: (device loop5): remounting filesystem as read-only [ 183.711803][ T7506] ERROR: (device loop5): txAbort: [ 183.711803][ T7506] [ 183.711929][ T7506] ERROR: (device loop5): diFree: invalid inoext [ 183.711929][ T7506] [ 183.739846][ T7479] [ 183.739846][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.739846][ T7479] [ 183.755844][ T7479] [ 183.755844][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.755844][ T7479] [ 183.755872][ T7479] [ 183.755872][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.755872][ T7479] [ 183.755890][ T7479] [ 183.755890][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.755890][ T7479] [ 183.759788][ T7479] [ 183.759788][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.759788][ T7479] [ 183.779694][ T7479] [ 183.779694][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.779694][ T7479] [ 183.779719][ T7479] [ 183.779719][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.779719][ T7479] [ 183.779737][ T7479] [ 183.779737][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.779737][ T7479] [ 183.807032][ T7479] [ 183.807032][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.807032][ T7479] [ 183.809828][ T7479] [ 183.809828][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.809828][ T7479] [ 183.809852][ T7479] [ 183.809852][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.809852][ T7479] [ 183.809871][ T7479] [ 183.809871][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.809871][ T7479] [ 183.906270][ T7479] [ 183.906270][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.906270][ T7479] [ 183.930760][ T7479] [ 183.930760][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.930760][ T7479] [ 183.930788][ T7479] [ 183.930788][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.930788][ T7479] [ 183.930807][ T7479] [ 183.930807][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.930807][ T7479] [ 183.938284][ T7479] [ 183.938284][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.938284][ T7479] [ 183.962704][ T7479] [ 183.962704][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.962704][ T7479] [ 183.962730][ T7479] [ 183.962730][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.962730][ T7479] [ 183.962749][ T7479] [ 183.962749][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.962749][ T7479] [ 183.971277][ T7479] [ 183.971277][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.971277][ T7479] [ 183.979660][ T7479] [ 183.979660][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.979660][ T7479] [ 183.979683][ T7479] [ 183.979683][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.979683][ T7479] [ 183.979702][ T7479] [ 183.979702][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.979702][ T7479] [ 183.989944][ T7479] [ 183.989944][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.989944][ T7479] [ 184.272523][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 184.303488][ T7513] loop0: detected capacity change from 0 to 512 [ 184.343007][ T7513] EXT4-fs error (device loop0): ext4_iget_extra_inode:5209: inode #15: comm syz.0.560: corrupted in-inode xattr: invalid ea_ino [ 184.343068][ T7513] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.344212][ T7513] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.560: couldn't read orphan inode 15 (err -117) [ 184.344261][ T7513] loop0: lost filesystem error report for type 5 error -117 [ 184.358121][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 184.386271][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.445762][ T7519] jffs2: notice: (7519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.633386][ T7513] IPv6: addrconf: prefix option has invalid lifetime [ 184.729113][ T7524] loop1: detected capacity change from 0 to 256 [ 184.744109][ T7524] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.775746][ T7524] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.976432][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.302703][ T7531] bonding: unable to delete non-existent bo [ 185.676779][ T7542] FAULT_INJECTION: forcing a failure. [ 185.676779][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 185.676837][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.1.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.676895][ T7542] Tainted: [L]=SOFTLOCKUP [ 185.676909][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 185.676932][ T7542] Call Trace: [ 185.676943][ T7542] [ 185.676958][ T7542] dump_stack_lvl+0x100/0x190 [ 185.677017][ T7542] should_fail_ex.cold+0x5/0xa [ 185.677061][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.677116][ T7542] should_failslab+0xc2/0x120 [ 185.677156][ T7542] __kmalloc_cache_noprof+0x91/0x6d0 [ 185.677204][ T7542] ? net_generic+0xea/0x2a0 [ 185.677239][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.677288][ T7542] ? nexthop_net_init+0x73/0x140 [ 185.677340][ T7542] ? __pfx_nexthop_net_init+0x10/0x10 [ 185.677391][ T7542] nexthop_net_init+0x73/0x140 [ 185.677435][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.677484][ T7542] ops_init+0x1e2/0x5f0 [ 185.677549][ T7542] setup_net+0x118/0x3a0 [ 185.677615][ T7542] ? __pfx_setup_net+0x10/0x10 [ 185.677676][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.677733][ T7542] copy_net_ns+0x345/0x7a0 [ 185.677800][ T7542] create_new_namespaces+0x3ea/0xac0 [ 185.677856][ T7542] unshare_nsproxy_namespaces+0xf2/0x220 [ 185.677904][ T7542] ksys_unshare+0x4a2/0xa70 [ 185.677949][ T7542] ? __pfx_ksys_unshare+0x10/0x10 [ 185.677991][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.678060][ T7542] __x64_sys_unshare+0x31/0x40 [ 185.678103][ T7542] do_syscall_64+0x123/0x790 [ 185.678171][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.678212][ T7542] RIP: 0033:0x7fa935f9e159 [ 185.678242][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.678281][ T7542] RSP: 002b:00007fa936ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 185.678319][ T7542] RAX: ffffffffffffffda RBX: 00007fa936225fa0 RCX: 00007fa935f9e159 [ 185.678346][ T7542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 185.678371][ T7542] RBP: 00007fa93603503b R08: 0000000000000000 R09: 0000000000000000 [ 185.678396][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.678420][ T7542] R13: 00007fa936226038 R14: 00007fa936225fa0 R15: 00007ffd8d382488 [ 185.678472][ T7542] [ 186.568949][ T7564] geneve2: entered promiscuous mode [ 186.584759][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 53076 - 0 [ 186.584826][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 53076 - 0 [ 186.585588][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 53076 - 0 [ 186.585651][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 53076 - 0 [ 187.047757][ T7570] loop4: detected capacity change from 0 to 4096 [ 187.064709][ T5768] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.215641][ T5768] usb 4-1: Using ep0 maxpacket: 16 [ 187.218891][ T7572] loop0: detected capacity change from 0 to 512 [ 187.219110][ T5768] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 187.222371][ T5768] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.222422][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.271347][ T7572] EXT4-fs (loop0): Test dummy encryption mode enabled [ 187.278551][ T5768] usb 4-1: config 0 descriptor?? [ 187.289825][ T7572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 187.289971][ T7572] System zones: 1-12 [ 187.311207][ T7572] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.713416][ T5611] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 187.741260][ T7579] jffs2: notice: (7579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 187.790461][ T5768] wacom 0003:056A:0028.0009: unknown main item tag 0x6 [ 187.790547][ T5768] wacom 0003:056A:0028.0009: ignoring exceeding usage max [ 187.822177][ T5768] wacom 0003:056A:0028.0009: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 187.913921][ T5768] wacom 0003:056A:0028.0009: hidraw0: USB HID v0.08 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 187.987527][ T5768] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.0009/input/input11 [ 188.000551][ T7582] FAULT_INJECTION: forcing a failure. [ 188.000551][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 188.000621][ T7582] CPU: 0 UID: 0 PID: 7582 Comm: syz.5.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.000674][ T7582] Tainted: [L]=SOFTLOCKUP [ 188.000688][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 188.000712][ T7582] Call Trace: [ 188.000725][ T7582] [ 188.000739][ T7582] dump_stack_lvl+0x100/0x190 [ 188.000798][ T7582] should_fail_ex.cold+0x5/0xa [ 188.000841][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.000896][ T7582] should_failslab+0xc2/0x120 [ 188.000936][ T7582] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 188.000998][ T7582] ? start_dirop+0x79/0xb0 [ 188.001055][ T7582] ? alloc_inode+0x68/0x250 [ 188.001116][ T7582] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 188.001164][ T7582] alloc_inode+0x68/0x250 [ 188.001215][ T7582] new_inode+0x22/0x1c0 [ 188.001269][ T7582] debugfs_create_symlink+0xb4/0x1f0 [ 188.001320][ T7582] ref_tracker_dir_symlink+0x257/0x3b0 [ 188.001384][ T7582] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 188.001488][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.001535][ T7582] ? rcu_is_watching+0x13/0xc0 [ 188.001582][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.001628][ T7582] ? kfree+0x1e5/0x6d0 [ 188.001670][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.001715][ T7582] ? xas_nomem+0x189/0x2c0 [ 188.001788][ T7582] ? __pfx_net_ns_net_init+0x10/0x10 [ 188.001846][ T7582] net_ns_net_init+0xd2/0x120 [ 188.001901][ T7582] ops_init+0x1e2/0x5f0 [ 188.001965][ T7582] setup_net+0x118/0x3a0 [ 188.002022][ T7582] ? __pfx_setup_net+0x10/0x10 [ 188.002086][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.002143][ T7582] copy_net_ns+0x345/0x7a0 [ 188.002209][ T7582] create_new_namespaces+0x3ea/0xac0 [ 188.002262][ T7582] unshare_nsproxy_namespaces+0xf2/0x220 [ 188.002309][ T7582] ksys_unshare+0x4a2/0xa70 [ 188.002353][ T7582] ? __pfx_ksys_unshare+0x10/0x10 [ 188.002393][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.002460][ T7582] __x64_sys_unshare+0x31/0x40 [ 188.002502][ T7582] do_syscall_64+0x123/0x790 [ 188.002564][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.002605][ T7582] RIP: 0033:0x7fc07db9e159 [ 188.002635][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.002672][ T7582] RSP: 002b:00007fc07e9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.002710][ T7582] RAX: ffffffffffffffda RBX: 00007fc07de25fa0 RCX: 00007fc07db9e159 [ 188.002736][ T7582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 188.002760][ T7582] RBP: 00007fc07dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 188.002785][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.002809][ T7582] R13: 00007fc07de26038 R14: 00007fc07de25fa0 R15: 00007ffe098c4948 [ 188.002862][ T7582] [ 188.060218][ T7582] debugfs: out of free dentries, can not create symlink 'netns-58-4026534149-notrefcnt' [ 188.396054][ T5768] usb 4-1: USB disconnect, device number 9 [ 188.905449][ T7597] loop2: detected capacity change from 0 to 32768 [ 188.995576][ T7597] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 189.077293][ T31] audit: type=1800 audit(1789170479.491:19): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.590" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 189.852213][ T5614] ocfs2: Unmounting device (7,2) on (node local) [ 190.406887][ T7607] loop3: detected capacity change from 0 to 131072 [ 190.412076][ T7607] F2FS-fs (loop3): invalid crc value [ 190.528077][ T7607] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 190.550568][ T7607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 190.977624][ T7630] FAULT_INJECTION: forcing a failure. [ 190.977624][ T7630] name failslab, interval 1, probability 0, space 0, times 0 [ 190.977683][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.2.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.977741][ T7630] Tainted: [L]=SOFTLOCKUP [ 190.977755][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 190.977780][ T7630] Call Trace: [ 190.977794][ T7630] [ 190.977809][ T7630] dump_stack_lvl+0x100/0x190 [ 190.977871][ T7630] should_fail_ex.cold+0x5/0xa [ 190.977916][ T7630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.977974][ T7630] should_failslab+0xc2/0x120 [ 190.978014][ T7630] __kmalloc_cache_noprof+0x91/0x6d0 [ 190.978064][ T7630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.978112][ T7630] ? kasan_save_track+0x14/0x30 [ 190.978175][ T7630] ? nfs_init_fs_context+0x4f/0x1510 [ 190.978236][ T7630] nfs_init_fs_context+0x4f/0x1510 [ 190.978287][ T7630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.978344][ T7630] alloc_fs_context+0x60c/0xf40 [ 190.978405][ T7630] __x64_sys_fsopen+0xed/0x220 [ 190.978465][ T7630] do_syscall_64+0x123/0x790 [ 190.978535][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.978585][ T7630] RIP: 0033:0x7f1fdcb9e159 [ 190.978616][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.978656][ T7630] RSP: 002b:00007f1fdadf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 190.978696][ T7630] RAX: ffffffffffffffda RBX: 00007f1fdce25fa0 RCX: 00007f1fdcb9e159 [ 190.978723][ T7630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 190.978750][ T7630] RBP: 00007f1fdcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 190.978776][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.978801][ T7630] R13: 00007f1fdce26038 R14: 00007f1fdce25fa0 R15: 00007ffeca86abf8 [ 190.978855][ T7630] [ 191.574834][ T5739] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.745814][ T5739] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 191.752358][ T5739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.752426][ T5739] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.752468][ T5739] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 191.752534][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.841419][ T5739] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 191.841719][ T5739] keyspan 1-1:1.0: unsupported endpoint type 0 [ 191.841805][ T5739] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 191.871506][ T5739] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 191.871623][ T5739] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 191.873699][ T5739] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 191.901318][ T5739] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 191.901418][ T5739] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 191.941708][ T5739] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 192.075594][ T5768] usb 1-1: USB disconnect, device number 5 [ 192.163942][ T5768] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 192.212648][ T5768] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 192.227989][ T5768] keyspan 1-1:1.0: device disconnected [ 193.200369][ T31] audit: type=1326 audit(1789170483.611:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.206864][ T31] audit: type=1326 audit(1789170483.621:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.233761][ T31] audit: type=1326 audit(1789170483.641:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.236452][ T31] audit: type=1326 audit(1789170483.651:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.239062][ T31] audit: type=1326 audit(1789170483.651:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.239138][ T31] audit: type=1326 audit(1789170483.651:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.239210][ T31] audit: type=1326 audit(1789170483.651:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.247351][ T31] audit: type=1326 audit(1789170483.661:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.247446][ T31] audit: type=1326 audit(1789170483.661:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcb9e159 code=0x7ffc0000 [ 193.339158][ T7663] loop2: detected capacity change from 0 to 512 [ 193.444798][ T5768] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.570273][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 193.596641][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'. [ 193.615890][ T5768] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 193.633762][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.658644][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.658730][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.659327][ T1307] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 193.844970][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 194.099545][ T7677] FAULT_INJECTION: forcing a failure. [ 194.099545][ T7677] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 194.099614][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.2.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.099673][ T7677] Tainted: [L]=SOFTLOCKUP [ 194.099688][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 194.099713][ T7677] Call Trace: [ 194.099726][ T7677] [ 194.099745][ T7677] dump_stack_lvl+0x100/0x190 [ 194.099808][ T7677] should_fail_ex.cold+0x5/0xa [ 194.099863][ T7677] core_sys_select+0x9b9/0xbb0 [ 194.099941][ T7677] ? __pfx_core_sys_select+0x10/0x10 [ 194.099994][ T7677] ? futex_wake+0x4ea/0x5e0 [ 194.100056][ T7677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.100137][ T7677] ? __pfx_set_user_sigmask+0x10/0x10 [ 194.100206][ T7677] ? __pfx_do_futex+0x10/0x10 [ 194.100263][ T7677] do_pselect.constprop.0+0x238/0x270 [ 194.100337][ T7677] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 194.100403][ T7677] ? __x64_sys_futex+0x358/0x4d0 [ 194.100457][ T7677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.100511][ T7677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.100560][ T7677] ? xfd_validate_state+0x129/0x190 [ 194.100646][ T7677] __x64_sys_pselect6+0x149/0x1c0 [ 194.100720][ T7677] do_syscall_64+0x123/0x790 [ 194.100790][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.100833][ T7677] RIP: 0033:0x7f1fdcb9e159 [ 194.100864][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.100904][ T7677] RSP: 002b:00007f1fdadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 194.100943][ T7677] RAX: ffffffffffffffda RBX: 00007f1fdce25fa0 RCX: 00007f1fdcb9e159 [ 194.100969][ T7677] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 194.100996][ T7677] RBP: 00007f1fdcc3503b R08: 0000200000000280 R09: 0000000000000000 [ 194.101023][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.101048][ T7677] R13: 00007f1fdce26038 R14: 00007f1fdce25fa0 R15: 00007ffeca86abf8 [ 194.101101][ T7677] [ 194.421866][ T5768] usb 5-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 194.629172][ C1] usb 5-1: NFC: Urb failure (status -71) [ 194.650815][ T5768] usb 5-1: NFC: Error on setting MAX_RETRIES config [ 194.651124][ T5768] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -71 [ 194.689692][ T5768] usb 5-1: USB disconnect, device number 6 [ 194.835968][ T7684] FAULT_INJECTION: forcing a failure. [ 194.835968][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 194.836026][ T7684] CPU: 0 UID: 0 PID: 7684 Comm: syz.5.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.836090][ T7684] Tainted: [L]=SOFTLOCKUP [ 194.836104][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 194.836127][ T7684] Call Trace: [ 194.836140][ T7684] [ 194.836155][ T7684] dump_stack_lvl+0x100/0x190 [ 194.836214][ T7684] should_fail_ex.cold+0x5/0xa [ 194.836262][ T7684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.836318][ T7684] should_failslab+0xc2/0x120 [ 194.836358][ T7684] __kmalloc_cache_noprof+0x91/0x6d0 [ 194.836411][ T7684] ? percpu_ref_init+0xec/0x3f0 [ 194.836480][ T7684] ? __pfx_free_ioctx_users+0x10/0x10 [ 194.836529][ T7684] percpu_ref_init+0xec/0x3f0 [ 194.836589][ T7684] ? __init_waitqueue_head+0xca/0x150 [ 194.836637][ T7684] ioctx_alloc+0x2f0/0x21a0 [ 194.836680][ T7684] ? irqentry_exit+0x24d/0xa10 [ 194.836739][ T7684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.836788][ T7684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.836834][ T7684] ? irqentry_exit+0x24d/0xa10 [ 194.836908][ T7684] ? __pfx_ioctx_alloc+0x10/0x10 [ 194.836959][ T7684] ? __might_fault+0x111/0x140 [ 194.837014][ T7684] __x64_sys_io_setup+0xc9/0x220 [ 194.837075][ T7684] do_syscall_64+0x123/0x790 [ 194.837140][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.837181][ T7684] RIP: 0033:0x7fc07db9e159 [ 194.837211][ T7684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.837250][ T7684] RSP: 002b:00007fc07e9f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 194.837288][ T7684] RAX: ffffffffffffffda RBX: 00007fc07de25fa0 RCX: 00007fc07db9e159 [ 194.837313][ T7684] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 00000000000004c6 [ 194.837338][ T7684] RBP: 00007fc07dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 194.837363][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.837387][ T7684] R13: 00007fc07de26038 R14: 00007fc07de25fa0 R15: 00007ffe098c4948 [ 194.837439][ T7684] [ 195.198673][ T7686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.623'. [ 195.198711][ T7686] netlink: 43 bytes leftover after parsing attributes in process `syz.2.623'. [ 195.198738][ T7686] netlink: 'syz.2.623': attribute type 6 has an invalid length. [ 195.198761][ T7686] netlink: 'syz.2.623': attribute type 5 has an invalid length. [ 195.198784][ T7686] netlink: 43 bytes leftover after parsing attributes in process `syz.2.623'. [ 195.749597][ T13] IPVS: starting estimator thread 0... [ 195.759379][ T7693] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.835508][ T7696] IPVS: using max 21 ests per chain, 50400 per kthread [ 195.934558][ T5902] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.086242][ T5902] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.088284][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.088337][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.088378][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.088445][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.154468][ T5902] usb 4-1: config 0 descriptor?? [ 196.428203][ T7709] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 196.428238][ T7709] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 196.613283][ T5902] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 196.642454][ T5902] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 196.956371][ T5902] usb 4-1: USB disconnect, device number 10 [ 197.070218][ T7716] fido_id[7716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.219114][ T7721] netlink: 'syz.1.636': attribute type 2 has an invalid length. [ 197.219150][ T7721] netlink: 'syz.1.636': attribute type 2 has an invalid length. [ 197.761531][ T7729] loop1: detected capacity change from 0 to 2048 [ 197.857989][ T7729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.045055][ T7729] EXT4-fs error (device loop1): ext4_readdir:278: inode #2: block 16: comm syz.1.637: path /110/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 198.312719][ T7739] loop4: detected capacity change from 0 to 2048 [ 198.347846][ T7739] loop4: p1 p2 p3 p4 [ 198.347846][ T7739] p1: [ 198.348096][ T7739] loop4: p1 size 67110656 extends beyond EOD, truncated [ 198.363885][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.434494][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.435131][ T7739] loop4: p3 size 134217728 extends beyond EOD, truncated [ 198.537627][ T7739] loop4: p4 size 4278190080 extends beyond EOD, truncated [ 198.559996][ T7739] loop4: p5 size 67110656 extends beyond EOD, truncated [ 198.584550][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 198.585360][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.586680][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.586724][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.586769][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.586814][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.586879][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.611203][ T7739] loop4: p6 size 134217728 extends beyond EOD, truncated [ 198.815489][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 198.815550][ T25] usbtmc 3-1:16.0: can't read capabilities [ 199.058971][ T25] usb 3-1: USB disconnect, device number 7 [ 199.270090][ T7226] udevd[7226]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 199.282098][ T5635] udevd[5635]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 199.291127][ T6064] udevd[6064]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 199.460696][ T6064] udevd[6064]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 199.574874][ T7226] udevd[7226]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 199.581414][ T7763] dlm: non-version read from control device 4096 [ 199.582251][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 199.692890][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 199.761948][ T7226] udevd[7226]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 199.775387][ T7766] FAULT_INJECTION: forcing a failure. [ 199.775387][ T7766] name failslab, interval 1, probability 0, space 0, times 0 [ 199.775439][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.3.656 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.775494][ T7766] Tainted: [L]=SOFTLOCKUP [ 199.775508][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 199.775532][ T7766] Call Trace: [ 199.775544][ T7766] [ 199.775559][ T7766] dump_stack_lvl+0x100/0x190 [ 199.775617][ T7766] should_fail_ex.cold+0x5/0xa [ 199.775660][ T7766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.775715][ T7766] should_failslab+0xc2/0x120 [ 199.775753][ T7766] __kmalloc_cache_noprof+0x91/0x6d0 [ 199.775802][ T7766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.775851][ T7766] ? proc_thread_self_get_link+0x111/0x210 [ 199.775906][ T7766] proc_thread_self_get_link+0x111/0x210 [ 199.775958][ T7766] pick_link+0xd17/0x13c0 [ 199.776012][ T7766] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 199.776064][ T7766] step_into_slowpath+0x9ba/0xf90 [ 199.776125][ T7766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.776183][ T7766] ? __pfx_step_into_slowpath+0x10/0x10 [ 199.776246][ T7766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.776293][ T7766] ? lookup_fast+0x2da/0x600 [ 199.776342][ T7766] ? inode_permission+0x374/0x620 [ 199.776396][ T7766] link_path_walk+0xf28/0x1cc0 [ 199.776470][ T7766] path_openat+0x1ac/0x2440 [ 199.776514][ T7766] ? __pfx_path_openat+0x10/0x10 [ 199.776566][ T7766] do_file_open+0x20e/0x430 [ 199.776607][ T7766] ? __pfx_do_file_open+0x10/0x10 [ 199.776678][ T7766] ? _raw_spin_unlock+0x28/0x50 [ 199.776730][ T7766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.776777][ T7766] ? alloc_fd+0x471/0x7a0 [ 199.776829][ T7766] do_sys_openat2+0x10f/0x1e0 [ 199.776872][ T7766] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.776917][ T7766] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.776995][ T7766] __x64_sys_openat+0x12d/0x210 [ 199.777039][ T7766] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.777098][ T7766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.777152][ T7766] do_syscall_64+0x123/0x790 [ 199.777218][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.777257][ T7766] RIP: 0033:0x7f0ea7d5e98e [ 199.777288][ T7766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.777327][ T7766] RSP: 002b:00007f0ea8bd6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.777365][ T7766] RAX: ffffffffffffffda RBX: 00007f0ea8bd76c0 RCX: 00007f0ea7d5e98e [ 199.777392][ T7766] RDX: 0000000000000002 RSI: 00007f0ea8bd6f90 RDI: ffffffffffffff9c [ 199.777417][ T7766] RBP: 00007f0ea7e3503b R08: 0000000000000000 R09: 0000000000000000 [ 199.777442][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.777466][ T7766] R13: 00007f0ea8026038 R14: 00007f0ea8025fa0 R15: 00007ffd6c1ee918 [ 199.777518][ T7766] [ 199.817373][ T5641] udevd[5641]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 199.837094][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 200.413154][ T7773] loop2: detected capacity change from 0 to 256 [ 200.471142][ T7773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 200.599543][ T7773] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 201.063986][ T7761] loop4: detected capacity change from 0 to 32768 [ 201.073638][ T7761] BTRFS warning: excessive commit interval 3581, use with care [ 201.092904][ T7761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.650 (7761) [ 201.169124][ T7761] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.169195][ T7761] BTRFS info (device loop4): using crc32c checksum algorithm [ 201.359550][ T7761] BTRFS info (device loop4): enabling ssd optimizations [ 201.359592][ T7761] BTRFS info (device loop4): turning on flush-on-commit [ 201.359631][ T7761] BTRFS info (device loop4): enabling free space tree [ 201.359662][ T7761] BTRFS info (device loop4): force zlib compression, level 3 [ 201.359701][ T7761] BTRFS info (device loop4): max_inline set to 4096 [ 201.498461][ T7761] BTRFS critical (device loop4 state E): emergency shutdown [ 201.658522][ T5613] BTRFS info (device loop4 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.571325][ T973] logitech-hidpp-device 0005:046D:B012.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 203.189376][ T7824] loop3: detected capacity change from 0 to 32768 [ 203.200585][ T7820] fido_id[7820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.221343][ T7824] (syz.3.671,7824,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.221730][ T7824] (syz.3.671,7824,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.287269][ T7824] JBD2: Ignoring recovery information on journal [ 203.351649][ T7824] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 203.804360][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 204.644482][ T5618] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.686482][ T5624] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 204.796765][ T5618] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 204.798097][ T5618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.798160][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.798208][ T5618] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.798272][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.857997][ T5624] usb 3-1: Using ep0 maxpacket: 16 [ 204.859346][ T5624] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 204.876272][ T5624] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 204.876314][ T5624] usb 3-1: config 0 has no interface number 0 [ 204.876367][ T5624] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 204.876412][ T5624] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 204.909847][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.909889][ T5624] usb 3-1: Product: syz [ 204.909915][ T5624] usb 3-1: Manufacturer: syz [ 204.909942][ T5624] usb 3-1: SerialNumber: syz [ 204.956395][ T5624] usb 3-1: config 0 descriptor?? [ 204.957751][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 204.957901][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.189719][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.189874][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.295586][ T7858] FAULT_INJECTION: forcing a failure. [ 205.295586][ T7858] name failslab, interval 1, probability 0, space 0, times 0 [ 205.295647][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.5.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.295704][ T7858] Tainted: [L]=SOFTLOCKUP [ 205.295718][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 205.295742][ T7858] Call Trace: [ 205.295755][ T7858] [ 205.295770][ T7858] dump_stack_lvl+0x100/0x190 [ 205.295830][ T7858] should_fail_ex.cold+0x5/0xa [ 205.295874][ T7858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.295930][ T7858] should_failslab+0xc2/0x120 [ 205.295969][ T7858] __kmalloc_cache_noprof+0x91/0x6d0 [ 205.296017][ T7858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.296066][ T7858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.296115][ T7858] ? __do_sys_memfd_secret+0x130/0x570 [ 205.296168][ T7858] __do_sys_memfd_secret+0x130/0x570 [ 205.296215][ T7858] do_syscall_64+0x123/0x790 [ 205.296283][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.296323][ T7858] RIP: 0033:0x7fc07db9e159 [ 205.296355][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.296394][ T7858] RSP: 002b:00007fc07e9f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 205.296432][ T7858] RAX: ffffffffffffffda RBX: 00007fc07de25fa0 RCX: 00007fc07db9e159 [ 205.296459][ T7858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.296484][ T7858] RBP: 00007fc07dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 205.296509][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.296534][ T7858] R13: 00007fc07de26038 R14: 00007fc07de25fa0 R15: 00007ffe098c4948 [ 205.296592][ T7858] [ 205.435807][ T5618] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.439654][ T5739] usb 4-1: USB disconnect, device number 11 [ 205.598364][ T5618] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 205.613825][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.613870][ T5618] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 205.643008][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.643050][ T5618] usb 2-1: Product: syz [ 205.643083][ T5618] usb 2-1: Manufacturer: syz [ 205.643141][ T5618] usb 2-1: SerialNumber: syz [ 205.708864][ T5618] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 205.727617][ T5618] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 205.727617][ T5618] Please send a copy of this message to and [ 206.048053][ T5624] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 206.048142][ T5624] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 206.065825][ T5624] asix 3-1:0.34: probe with driver asix failed with error -71 [ 206.106492][ T5624] usb 3-1: USB disconnect, device number 8 [ 206.274359][ T7870] loop4: detected capacity change from 0 to 512 [ 206.361835][ T7870] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.686: corrupted in-inode xattr: invalid ea_ino [ 206.361892][ T7870] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.364003][ T7870] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.686: couldn't read orphan inode 15 (err -117) [ 206.364055][ T7870] loop4: lost filesystem error report for type 5 error -117 [ 206.364515][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 206.364546][ C0] EXT4-fs (loop4): initial error at time 1789170496: ext4_iget_extra_inode:5209: inode 15 [ 206.364595][ C0] EXT4-fs (loop4): last error at time 1789170496: ext4_orphan_get:1406 [ 206.383775][ T7870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.802997][ T5618] scsi host1: usb-storage 2-1:1.0 [ 206.847033][ T5618] usb 2-1: USB disconnect, device number 7 [ 206.945193][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.096704][ T7884] FAULT_INJECTION: forcing a failure. [ 207.096704][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 207.096760][ T7884] CPU: 1 UID: 0 PID: 7884 Comm: syz.3.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.096817][ T7884] Tainted: [L]=SOFTLOCKUP [ 207.096832][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 207.096856][ T7884] Call Trace: [ 207.096869][ T7884] [ 207.096883][ T7884] dump_stack_lvl+0x100/0x190 [ 207.096943][ T7884] should_fail_ex.cold+0x5/0xa [ 207.096995][ T7884] should_failslab+0xc2/0x120 [ 207.097034][ T7884] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.097092][ T7884] ? pcpu_alloc_noprof+0xa8a/0x1e50 [ 207.097140][ T7884] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 207.097207][ T7884] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 207.097271][ T7884] idr_get_free+0x52e/0xa00 [ 207.097346][ T7884] idr_alloc_u32+0x1ac/0x320 [ 207.097414][ T7884] ? __pfx_idr_alloc_u32+0x10/0x10 [ 207.097480][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.097528][ T7884] ? lock_acquire+0x1d1/0x380 [ 207.097566][ T7884] ? __radix_tree_preload+0x7c/0x820 [ 207.097634][ T7884] idr_alloc_cyclic+0x10b/0x230 [ 207.097700][ T7884] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 207.097760][ T7884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.097807][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.097864][ T7884] map_create+0x1698/0x30d0 [ 207.097932][ T7884] ? __pfx_map_create+0x10/0x10 [ 207.097987][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098033][ T7884] ? lock_acquire+0x1d1/0x380 [ 207.098068][ T7884] ? __might_fault+0xc5/0x140 [ 207.098117][ T7884] ? __might_fault+0xc5/0x140 [ 207.098183][ T7884] __sys_bpf+0x12a0/0x4a30 [ 207.098249][ T7884] ? __pfx___sys_bpf+0x10/0x10 [ 207.098299][ T7884] ? find_held_lock+0x2b/0x80 [ 207.098349][ T7884] ? futex_wake+0x4ea/0x5e0 [ 207.098408][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098457][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098530][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098581][ T7884] ? rcu_read_lock_any_held+0x6a/0x90 [ 207.098634][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098681][ T7884] ? find_held_lock+0x2b/0x80 [ 207.098732][ T7884] ? ksys_write+0x190/0x250 [ 207.098787][ T7884] ? ksys_write+0x190/0x250 [ 207.098846][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098916][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.098964][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.099012][ T7884] ? __x64_sys_futex+0x358/0x4d0 [ 207.099064][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.099113][ T7884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.099160][ T7884] ? xfd_validate_state+0x129/0x190 [ 207.099233][ T7884] ? __x64_sys_bpf+0xce/0x140 [ 207.099286][ T7884] __x64_sys_bpf+0xce/0x140 [ 207.099344][ T7884] ? do_syscall_64+0xae/0x790 [ 207.099405][ T7884] do_syscall_64+0x123/0x790 [ 207.099469][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.099510][ T7884] RIP: 0033:0x7f0ea7d9e159 [ 207.099540][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.099587][ T7884] RSP: 002b:00007f0ea8bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.099626][ T7884] RAX: ffffffffffffffda RBX: 00007f0ea8025fa0 RCX: 00007f0ea7d9e159 [ 207.099654][ T7884] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 207.099679][ T7884] RBP: 00007f0ea7e3503b R08: 0000000000000000 R09: 0000000000000000 [ 207.099704][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.099728][ T7884] R13: 00007f0ea8026038 R14: 00007f0ea8025fa0 R15: 00007ffd6c1ee918 [ 207.099783][ T7884] [ 207.532650][ T7883] loop2: detected capacity change from 0 to 32768 [ 207.566228][ T7883] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 207.566260][ T7883] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 207.684628][ T7883] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 207.691217][ T5624] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 207.691240][ T5624] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 207.775634][ T7889] loop4: detected capacity change from 0 to 512 [ 207.867792][ T7889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 207.867944][ T7889] System zones: 1-12 [ 207.869146][ T7889] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.694: missing EA_INODE flag [ 207.869194][ T7889] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 207.964458][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 207.964494][ C1] EXT4-fs (loop4): initial error at time 1789170498: ext4_xattr_inode_iget:437: inode 12 [ 207.964544][ C1] EXT4-fs (loop4): last error at time 1789170498: ext4_xattr_inode_iget:437: inode 12 [ 208.026083][ T7889] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.694: error while reading EA inode 12 err=-117 [ 208.026147][ T7889] loop4: lost filesystem error report for type 5 error -117 [ 208.029464][ T7889] EXT4-fs (loop4): 1 orphan inode deleted [ 208.056928][ T7889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.169950][ T5624] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 478ms [ 208.170947][ T5624] gfs2: fsid=syz:syz.0: jid=0: Done [ 208.172481][ T7883] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 208.505817][ T7899] loop1: detected capacity change from 0 to 1024 [ 208.611390][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.709996][ T7902] loop4: detected capacity change from 0 to 256 [ 208.712275][ T7902] exfat: Deprecated parameter 'utf8' [ 208.712357][ T7902] exfat: Deprecated parameter 'namecase' [ 208.712435][ T7902] exfat: Deprecated parameter 'namecase' [ 208.863051][ T7902] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 210.004285][ T7894] loop3: detected capacity change from 0 to 32768 [ 210.114091][ T7894] [ 210.114091][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.114091][ T7894] [ 210.196689][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 210.196717][ T31] audit: type=1800 audit(1789170500.611:56): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.696" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 210.201451][ T7894] [ 210.201451][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.201451][ T7894] [ 210.201476][ T7894] [ 210.201476][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.201476][ T7894] [ 210.204887][ T7894] [ 210.204887][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.204887][ T7894] [ 210.274675][ T7894] [ 210.274675][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.274675][ T7894] [ 210.274704][ T7894] [ 210.274704][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.274704][ T7894] [ 210.274721][ T7894] [ 210.274721][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.274721][ T7894] [ 210.279612][ T7894] [ 210.279612][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.279612][ T7894] [ 210.281560][ T7894] [ 210.281560][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.281560][ T7894] [ 210.281584][ T7894] [ 210.281584][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.281584][ T7894] [ 210.281602][ T7894] [ 210.281602][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.281602][ T7894] [ 210.332067][ T7894] [ 210.332067][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.332067][ T7894] [ 210.341237][ T7894] [ 210.341237][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.341237][ T7894] [ 210.341263][ T7894] [ 210.341263][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.341263][ T7894] [ 210.341281][ T7894] [ 210.341281][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.341281][ T7894] [ 210.341892][ T7894] [ 210.341892][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.341892][ T7894] [ 210.361807][ T7894] [ 210.361807][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.361807][ T7894] [ 210.361835][ T7894] [ 210.361835][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.361835][ T7894] [ 210.361854][ T7894] [ 210.361854][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.361854][ T7894] [ 210.431015][ T7894] JFS: metapage_get_blocks failed [ 210.432070][ T7894] [ 210.432070][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.432070][ T7894] [ 210.459072][ T7894] [ 210.459072][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.459072][ T7894] [ 210.459101][ T7894] [ 210.459101][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.459101][ T7894] [ 210.459119][ T7894] [ 210.459119][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.459119][ T7894] [ 210.475033][ T7894] [ 210.475033][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.475033][ T7894] [ 210.475622][ T7928] ERROR: (device loop3): diWrite: ixpxd invalid [ 210.475622][ T7928] [ 210.480489][ T7894] [ 210.480489][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.480489][ T7894] [ 210.480514][ T7894] [ 210.480514][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.480514][ T7894] [ 210.480533][ T7894] [ 210.480533][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.480533][ T7894] [ 210.482694][ T7928] ERROR: (device loop3): remounting filesystem as read-only [ 210.482721][ T7928] ERROR: (device loop3): txAbort: [ 210.482721][ T7928] [ 210.482811][ T7928] ERROR: (device loop3): diFree: invalid inoext [ 210.482811][ T7928] [ 210.487447][ T7894] [ 210.487447][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.487447][ T7894] [ 210.502889][ T7894] [ 210.502889][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.502889][ T7894] [ 210.502920][ T7894] [ 210.502920][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.502920][ T7894] [ 210.502938][ T7894] [ 210.502938][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.502938][ T7894] [ 210.509934][ T7894] [ 210.509934][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.509934][ T7894] [ 210.517095][ T7894] [ 210.517095][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.517095][ T7894] [ 210.517120][ T7894] [ 210.517120][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.517120][ T7894] [ 210.517138][ T7894] [ 210.517138][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.517138][ T7894] [ 210.523874][ T7894] [ 210.523874][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.523874][ T7894] [ 210.532129][ T7894] [ 210.532129][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.532129][ T7894] [ 210.532155][ T7894] [ 210.532155][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.532155][ T7894] [ 210.532190][ T7894] [ 210.532190][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.532190][ T7894] [ 210.535197][ T7894] [ 210.535197][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.535197][ T7894] [ 210.540128][ T7894] [ 210.540128][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.540128][ T7894] [ 210.540152][ T7894] [ 210.540152][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.540152][ T7894] [ 210.540170][ T7894] [ 210.540170][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.540170][ T7894] [ 210.543438][ T7894] [ 210.543438][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.543438][ T7894] [ 210.547074][ T7894] [ 210.547074][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.547074][ T7894] [ 210.547097][ T7894] [ 210.547097][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.547097][ T7894] [ 210.555037][ T7894] [ 210.555037][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.555037][ T7894] [ 210.558952][ T7894] [ 210.558952][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.558952][ T7894] [ 210.564123][ T7894] [ 210.564123][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.564123][ T7894] [ 210.564148][ T7894] [ 210.564148][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.564148][ T7894] [ 210.564166][ T7894] [ 210.564166][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.564166][ T7894] [ 210.570024][ T7894] [ 210.570024][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.570024][ T7894] [ 210.578701][ T7894] [ 210.578701][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.578701][ T7894] [ 210.578726][ T7894] [ 210.578726][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.578726][ T7894] [ 210.578744][ T7894] [ 210.578744][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.578744][ T7894] [ 210.583460][ T7894] [ 210.583460][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.583460][ T7894] [ 210.603191][ T7894] [ 210.603191][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.603191][ T7894] [ 210.603222][ T7894] [ 210.603222][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.603222][ T7894] [ 210.603239][ T7894] [ 210.603239][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.603239][ T7894] [ 210.603903][ T7894] [ 210.603903][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.603903][ T7894] [ 210.610706][ T7894] [ 210.610706][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.610706][ T7894] [ 210.610733][ T7894] [ 210.610733][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.610733][ T7894] [ 210.610751][ T7894] [ 210.610751][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.610751][ T7894] [ 210.612584][ T7894] [ 210.612584][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.612584][ T7894] [ 210.613308][ T7894] [ 210.613308][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.613308][ T7894] [ 210.613331][ T7894] [ 210.613331][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.613331][ T7894] [ 210.613349][ T7894] [ 210.613349][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.613349][ T7894] [ 210.669564][ T7894] [ 210.669564][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.669564][ T7894] [ 210.686713][ T7894] [ 210.686713][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.686713][ T7894] [ 210.686743][ T7894] [ 210.686743][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.686743][ T7894] [ 210.686761][ T7894] [ 210.686761][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.686761][ T7894] [ 210.691547][ T7894] [ 210.691547][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.691547][ T7894] [ 210.706347][ T7894] [ 210.706347][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.706347][ T7894] [ 210.706376][ T7894] [ 210.706376][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.706376][ T7894] [ 210.706394][ T7894] [ 210.706394][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.706394][ T7894] [ 210.710726][ T7894] [ 210.710726][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.710726][ T7894] [ 210.719685][ T7894] [ 210.719685][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.719685][ T7894] [ 210.719711][ T7894] [ 210.719711][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.719711][ T7894] [ 210.719728][ T7894] [ 210.719728][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.719728][ T7894] [ 210.763502][ T7894] [ 210.763502][ T7894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.763502][ T7894] [ 211.011918][ T7931] loop2: detected capacity change from 0 to 512 [ 211.026860][ T7931] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 211.442440][ T7933] loop5: detected capacity change from 0 to 32768 [ 211.455814][ T7933] (syz.5.712,7933,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 211.457460][ T7933] (syz.5.712,7933,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 211.537250][ T7933] JBD2: Ignoring recovery information on journal [ 211.669554][ T7933] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 211.717701][ T7944] gtp0: entered promiscuous mode [ 211.717733][ T7944] gtp0: entered allmulticast mode [ 212.455737][ T5615] ocfs2: Unmounting device (7,5) on (node local) from 0 to 256 [ 213.869423][ T7976] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 214.606431][ T7990] Bluetooth: MGMT ver 1.23 [ 214.606481][ T7990] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 214.634480][ T5618] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 214.785476][ T5618] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 214.787996][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.788047][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.790077][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 214.790125][ T5618] usb 4-1: Product: syz [ 214.790152][ T5618] usb 4-1: Manufacturer: syz [ 214.848936][ T5618] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 215.934016][ T5618] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 215.940110][ T5618] usb 4-1: USB disconnect, device number 12 [ 215.956638][ T5618] mos7840 4-1:1.0: device disconnected [ 215.987291][ T8009] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.739'. [ 218.506533][ T8037] loop4: detected capacity change from 0 to 32768 [ 218.521367][ T8037] (syz.4.752,8037,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.523478][ T8037] (syz.4.752,8037,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.594726][ T8037] JBD2: Ignoring recovery information on journal [ 218.662702][ T8037] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 218.856809][ T8047] pim6reg: entered allmulticast mode [ 218.890984][ T8052] pim6reg: left allmulticast mode [ 218.985751][ T8050] loop2: detected capacity change from 0 to 2048 [ 219.037203][ T8050] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 219.195269][ T8056] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.371119][ T5613] ocfs2: Unmounting device (7,4) on (node local) [ 219.603048][ T8060] loop1: detected capacity change from 0 to 2048 [ 219.781452][ T8060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.348377][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.698544][ T8087] loop3: detected capacity change from 0 to 1024 [ 220.739093][ T8080] IPVS: Scheduler module ip_vs_sip not found [ 220.783762][ T8087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.783893][ T8087] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.877261][ T31] audit: type=1800 audit(1789170511.291:57): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.768" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 220.904534][ T31] audit: type=1800 audit(1789170511.311:58): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.768" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 220.951302][ T8087] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.768: lblock 0 mapped to illegal pblock 0 (length 1) [ 221.077797][ T8087] EXT4-fs (loop3): Remounting filesystem read-only [ 221.174339][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.207994][ T31] audit: type=1800 audit(1789170511.621:59): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.770" name="file1" dev="tmpfs" ino=640 res=0 errno=0 [ 222.681221][ T8104] loop2: detected capacity change from 0 to 131072 [ 222.692703][ T8104] F2FS-fs (loop2): invalid crc value [ 222.821543][ T8104] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.835718][ T8104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 223.965164][ T1553] kernel read not supported for file /trace_pipe (pid: 1553 comm: kworker/0:2) [ 224.660466][ T8157] device-mapper: ioctl: Unable to rename non-existent device, to DUfwˆ™ª»ÌÝîÿ> [ 224.937665][ T5622] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 225.044275][ T8168] loop9: detected capacity change from 0 to 7 [ 225.053347][ T8168] Dev loop9: unable to read RDB block 7 [ 225.053389][ T8168] loop9: unable to read partition table [ 225.053635][ T8168] loop9: partition table beyond EOD, truncated [ 225.053677][ T8168] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.989423][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 226.829931][ T8191] loop1: detected capacity change from 0 to 32768 [ 226.842520][ T8191] (syz.1.807,8191,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.856061][ T8191] (syz.1.807,8191,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.916544][ T8191] JBD2: Ignoring recovery information on journal [ 227.011865][ T8191] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.475617][ T5612] ocfs2: Unmounting device (7,1) on (node local) [ 227.664593][ T8216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.204833][ T8250] loop2: detected capacity change from 0 to 32768 [ 229.213712][ T8250] (syz.2.828,8250,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.214015][ T8250] (syz.2.828,8250,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.263141][ T8250] JBD2: Ignoring recovery information on journal [ 229.333656][ T8250] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 229.640958][ T5614] ocfs2: Unmounting device (7,2) on (node local) [ 229.875735][ T5739] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.000452][ T8269] loop2: detected capacity change from 0 to 512 [ 230.010907][ T8269] EXT4-fs: Ignoring removed orlov option [ 230.010957][ T8269] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.037301][ T5739] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 230.066572][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 230.066625][ T5739] usb 1-1: Product: syz [ 230.070489][ T5739] usb 1-1: config 0 descriptor?? [ 230.071591][ T8269] EXT4-fs (loop2): #blocks per group too big: 204800 [ 230.119875][ T5739] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 230.139763][ T5739] usb 1-1: Detected FT232H [ 230.284126][ T5739] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 230.699176][ T8284] jffs2: notice: (8284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.771605][ T5739] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.988794][ T5624] usb 1-1: USB disconnect, device number 6 [ 232.053895][ T8290] loop1: detected capacity change from 0 to 131072 [ 232.068814][ T5624] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 232.069470][ T5624] ftdi_sio 1-1:0.0: device disconnected [ 232.197292][ T8290] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 232.200809][ T8290] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.406648][ T8306] loop3: detected capacity change from 0 to 256 [ 232.485438][ T8306] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 232.768711][ T8311] loop0: detected capacity change from 0 to 32768 [ 232.772715][ T8311] (syz.0.848,8311,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.774742][ T8311] (syz.0.848,8311,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.820050][ T8311] JBD2: Ignoring recovery information on journal [ 232.888423][ T8311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 233.378791][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 234.756383][ T8347] device-mapper: ioctl: Empty message received. [ 237.167284][ T8388] loop3: detected capacity change from 0 to 2048 [ 237.259322][ T8388] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 237.283936][ T8388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.081905][ T8402] loop0: detected capacity change from 0 to 131072 [ 239.093774][ T8402] F2FS-fs (loop0): invalid crc value [ 239.203016][ T8402] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 239.214663][ T8402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 239.635676][ T5759] kernel read not supported for file /audio (pid: 5759 comm: kworker/1:6) [ 240.383011][ T8446] loop5: detected capacity change from 0 to 512 [ 240.440114][ T8446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.440247][ T8446] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.508148][ T8446] EXT4-fs (loop5): shut down requested (2) [ 240.617092][ T8446] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.906: No space for directory leaf checksum. Please run e2fsck -D. [ 240.865792][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.521681][ T8475] FAULT_INJECTION: forcing a failure. [ 241.521681][ T8475] name failslab, interval 1, probability 0, space 0, times 0 [ 241.521738][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.3.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.521794][ T8475] Tainted: [L]=SOFTLOCKUP [ 241.521808][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 241.521832][ T8475] Call Trace: [ 241.521844][ T8475] [ 241.521859][ T8475] dump_stack_lvl+0x100/0x190 [ 241.521919][ T8475] should_fail_ex.cold+0x5/0xa [ 241.521962][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.522019][ T8475] should_failslab+0xc2/0x120 [ 241.522058][ T8475] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 241.522118][ T8475] ? do_syscall_64+0x123/0x790 [ 241.522178][ T8475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.522220][ T8475] ? __d_alloc+0x35/0xa50 [ 241.522272][ T8475] __d_alloc+0x35/0xa50 [ 241.522321][ T8475] d_alloc_parallel+0x105/0x14c0 [ 241.522387][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.522434][ T8475] ? lock_acquire+0x1d1/0x380 [ 241.522471][ T8475] ? __d_lookup+0x73/0x4a0 [ 241.522526][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.522576][ T8475] ? __pfx_d_alloc_parallel+0x10/0x10 [ 241.522638][ T8475] ? __d_lookup+0x25c/0x4a0 [ 241.522691][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.522747][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.522795][ T8475] ? __d_lookup+0x266/0x4a0 [ 241.522863][ T8475] lookup_open+0x6bb/0x1990 [ 241.522937][ T8475] path_openat+0xa2c/0x2440 [ 241.522982][ T8475] ? __pfx_path_openat+0x10/0x10 [ 241.523038][ T8475] do_file_open+0x20e/0x430 [ 241.523081][ T8475] ? __pfx_do_file_open+0x10/0x10 [ 241.523155][ T8475] ? _raw_spin_unlock+0x28/0x50 [ 241.523208][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.523255][ T8475] ? alloc_fd+0x471/0x7a0 [ 241.523308][ T8475] do_sys_openat2+0x10f/0x1e0 [ 241.523352][ T8475] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.523398][ T8475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.523476][ T8475] __x64_sys_openat+0x12d/0x210 [ 241.523522][ T8475] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.523575][ T8475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.523639][ T8475] do_syscall_64+0x123/0x790 [ 241.523706][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.523747][ T8475] RIP: 0033:0x7f0ea7d9e159 [ 241.523777][ T8475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.523817][ T8475] RSP: 002b:00007f0ea8bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.523855][ T8475] RAX: ffffffffffffffda RBX: 00007f0ea8025fa0 RCX: 00007f0ea7d9e159 [ 241.523883][ T8475] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 241.523908][ T8475] RBP: 00007f0ea7e3503b R08: 0000000000000000 R09: 0000000000000000 [ 241.523933][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.523958][ T8475] R13: 00007f0ea8026038 R14: 00007f0ea8025fa0 R15: 00007ffd6c1ee918 [ 241.524010][ T8475] [ 241.872264][ T8479] loop1: detected capacity change from 0 to 4096 [ 242.034576][ T8479] ntfs3(loop1): Failed to load $Extend (-22). [ 242.034613][ T8479] ntfs3(loop1): Failed to initialize $Extend. [ 242.264793][ T8487] loop5: detected capacity change from 0 to 2048 [ 242.319399][ T8487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.400092][ T31] audit: type=1800 audit(1789170532.811:60): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.920" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 242.431324][ T8493] loop4: detected capacity change from 0 to 512 [ 242.456775][ T8493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 242.456804][ T8493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.520282][ T8493] EXT4-fs (loop4): 1 truncate cleaned up [ 242.547716][ T8493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.555321][ T8495] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 242.609265][ T8495] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 56 with error 28 [ 242.609320][ T8495] EXT4-fs (loop5): This should not happen!! Data will be lost [ 242.609320][ T8495] [ 242.609347][ T8495] EXT4-fs (loop5): Total free blocks count 0 [ 242.609372][ T8495] EXT4-fs (loop5): Free/Dirty block details [ 242.609418][ T8495] EXT4-fs (loop5): free_blocks=2415919504 [ 242.609476][ T8495] EXT4-fs (loop5): dirty_blocks=64 [ 242.609501][ T8495] EXT4-fs (loop5): Block reservation details [ 242.609524][ T8495] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 242.676522][ T8495] EXT4-fs error (device loop5) in ext4_setattr:6247: error 28 [ 243.003207][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.070003][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.530216][ T8486] loop3: detected capacity change from 0 to 32768 [ 243.534991][ T8486] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.919 (8486) [ 243.572881][ T8486] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 243.572930][ T8486] BTRFS info (device loop3): using blake2b checksum algorithm [ 243.729562][ T8486] BTRFS info (device loop3): enabling ssd optimizations [ 243.729603][ T8486] BTRFS info (device loop3): turning on async discard [ 243.729642][ T8486] BTRFS info (device loop3): enabling free space tree [ 244.193813][ T5616] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 244.215820][ T8534] FAULT_INJECTION: forcing a failure. [ 244.215820][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 244.215874][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.0.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.215930][ T8534] Tainted: [L]=SOFTLOCKUP [ 244.215944][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 244.215968][ T8534] Call Trace: [ 244.215981][ T8534] [ 244.215994][ T8534] dump_stack_lvl+0x100/0x190 [ 244.216054][ T8534] should_fail_ex.cold+0x5/0xa [ 244.216099][ T8534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.216153][ T8534] should_failslab+0xc2/0x120 [ 244.216199][ T8534] kmem_cache_alloc_noprof+0x92/0x6a0 [ 244.216260][ T8534] ? key_alloc+0x3c5/0x1310 [ 244.216328][ T8534] key_alloc+0x3c5/0x1310 [ 244.216404][ T8534] ? __pfx_key_alloc+0x10/0x10 [ 244.216459][ T8534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.216506][ T8534] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.216552][ T8534] ? find_keyring_by_name+0x484/0x5c0 [ 244.216605][ T8534] keyring_alloc+0x44/0xc0 [ 244.216648][ T8534] join_session_keyring+0x2d7/0x350 [ 244.216712][ T8534] __do_sys_keyctl+0x54d/0x5a0 [ 244.216767][ T8534] do_syscall_64+0x123/0x790 [ 244.216834][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.216875][ T8534] RIP: 0033:0x7fbe0939e159 [ 244.216906][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.216945][ T8534] RSP: 002b:00007fbe0a200028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 244.216982][ T8534] RAX: ffffffffffffffda RBX: 00007fbe09625fa0 RCX: 00007fbe0939e159 [ 244.217008][ T8534] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000001 [ 244.217033][ T8534] RBP: 00007fbe0943503b R08: 0000000000000000 R09: 0000000000000000 [ 244.217058][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.217083][ T8534] R13: 00007fbe09626038 R14: 00007fbe09625fa0 R15: 00007ffd1792eef8 [ 244.217135][ T8534] [ 244.505430][ T8510] loop4: detected capacity change from 0 to 32768 [ 244.541512][ T8510] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 244.737872][ T8510] XFS (loop4): Ending clean mount [ 244.822981][ T31] audit: type=1800 audit(1789170535.231:61): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.929" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 244.925666][ T8557] loop1: detected capacity change from 0 to 64 [ 244.988975][ T8557] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 245.347369][ T5613] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.984312][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 247.187385][ T8569] loop2: detected capacity change from 0 to 131072 [ 247.192827][ T8569] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 247.192865][ T8569] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 247.192904][ T8569] F2FS-fs (loop2): Test dummy encryption mode enabled [ 247.223996][ T8569] F2FS-fs (loop2): invalid crc value [ 247.302504][ T8569] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 247.303609][ T8569] loop2: lost filesystem error report for type 5 error -117 [ 247.325984][ T8569] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 247.329500][ T8569] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 247.329536][ T8569] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 247.329603][ T8569] F2FS-fs (loop2): Start checkpoint disabled! [ 247.376749][ T8569] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 247.394267][ T8569] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 247.394305][ T8569] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 247.433050][ T8589] FAULT_INJECTION: forcing a failure. [ 247.433050][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 247.433106][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.5.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.433173][ T8589] Tainted: [L]=SOFTLOCKUP [ 247.433188][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 247.433211][ T8589] Call Trace: [ 247.433224][ T8589] [ 247.433238][ T8589] dump_stack_lvl+0x100/0x190 [ 247.433301][ T8589] should_fail_ex.cold+0x5/0xa [ 247.433344][ T8589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.433399][ T8589] should_failslab+0xc2/0x120 [ 247.433438][ T8589] kmem_cache_alloc_noprof+0x92/0x6a0 [ 247.433498][ T8589] ? do_timer_create+0x209/0x1460 [ 247.433561][ T8589] do_timer_create+0x209/0x1460 [ 247.433617][ T8589] ? do_futex+0x190/0x440 [ 247.433667][ T8589] ? __pfx_do_timer_create+0x10/0x10 [ 247.433719][ T8589] ? __pfx_do_futex+0x10/0x10 [ 247.433771][ T8589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.433845][ T8589] __x64_sys_timer_create+0x199/0x1d0 [ 247.433901][ T8589] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 247.433958][ T8589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.434005][ T8589] ? xfd_validate_state+0x129/0x190 [ 247.434080][ T8589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.434145][ T8589] do_syscall_64+0x123/0x790 [ 247.434211][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.434252][ T8589] RIP: 0033:0x7fc07db9e159 [ 247.434281][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.434320][ T8589] RSP: 002b:00007fc07e9f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 247.434358][ T8589] RAX: ffffffffffffffda RBX: 00007fc07de25fa0 RCX: 00007fc07db9e159 [ 247.434384][ T8589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 98e63d26ce15b27f [ 247.434410][ T8589] RBP: 00007fc07dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 247.434434][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.434457][ T8589] R13: 00007fc07de26038 R14: 00007fc07de25fa0 R15: 00007ffe098c4948 [ 247.434508][ T8589] [ 248.040481][ T8601] 9pnet: p9_errstr2errno: server reported unknown error [ 248.136585][ T1553] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 248.206353][ T8608] loop5: detected capacity change from 0 to 512 [ 248.208038][ T8608] ext4: Unknown parameter 'seclabel' [ 248.284481][ T1553] usb 2-1: Using ep0 maxpacket: 32 [ 248.285377][ T1553] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.287324][ T1553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.287393][ T1553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.292969][ T1553] usb 2-1: config 0 descriptor?? [ 248.351964][ T1553] hub 2-1:0.0: USB hub found [ 248.570530][ T1553] hub 2-1:0.0: 1 port detected [ 248.734533][ T5902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 248.801912][ T8625] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 248.801960][ T8625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.904465][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 248.908805][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.908863][ T5902] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 248.910254][ T5902] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 248.910294][ T5902] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 248.910363][ T5902] usb 1-1: config 14 has no interface number 0 [ 248.910393][ T5902] usb 1-1: config 14 has no interface number 1 [ 248.910476][ T5902] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 248.910549][ T5902] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 248.910597][ T5902] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 248.910654][ T5902] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 248.910734][ T5902] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 248.910784][ T5902] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.910834][ T5902] usb 1-1: config 14 interface 57 has no altsetting 0 [ 248.910899][ T5902] usb 1-1: config 14 interface 228 has no altsetting 0 [ 248.914022][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.914090][ T5902] usb 1-1: Product: syz [ 248.914117][ T5902] usb 1-1: Manufacturer: syz [ 248.914145][ T5902] usb 1-1: SerialNumber: syz [ 249.080368][ T1553] usb 2-1: USB disconnect, device number 8 [ 249.557888][ T5902] legousbtower 1-1:14.57: interrupt endpoints not found [ 249.958903][ T5902] legousbtower 1-1:14.228: get version request failed: -121 [ 249.959112][ T5902] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 250.034203][ T8642] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 250.037540][ T8644] ip_tables: iptables: counters copy to user failed while replacing table [ 250.207490][ T1553] usb 1-1: USB disconnect, device number 7 [ 250.743274][ T8653] loop3: detected capacity change from 0 to 32768 [ 250.770441][ T8653] JBD2: Ignoring recovery information on journal [ 250.812517][ T8654] input: syz1 as /devices/virtual/input/input15 [ 250.832711][ T8653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 251.042989][ T8653] OCFS2: ERROR (device loop3): ocfs2_reserve_local_alloc_bits: local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 251.043043][ T8653] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 251.043062][ T8653] OCFS2: File system is now read-only. [ 251.043077][ T8653] (syz.3.973,8653,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 251.043120][ T8653] (syz.3.973,8653,1):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30 [ 251.043189][ T8653] (syz.3.973,8653,1):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30 [ 251.043233][ T8653] (syz.3.973,8653,1):ocfs2_lock_allocators:3123 ERROR: status = -30 [ 251.043275][ T8653] (syz.3.973,8653,1):ocfs2_write_begin_nolock:1724 ERROR: status = -30 [ 251.043333][ T8653] (syz.3.973,8653,1):ocfs2_write_begin:1888 ERROR: status = -30 [ 251.227470][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 251.389670][ T25] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 251.396049][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 251.396092][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 251.396153][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.557441][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 251.593281][ T8666] xt_hashlimit: size too large, truncated to 1048576 [ 251.769978][ T1553] usb 3-1: USB disconnect, device number 9 [ 252.022155][ T8646] loop5: detected capacity change from 0 to 32768 [ 252.064862][ T8646] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 252.257187][ T8646] XFS (loop5): Ending clean mount [ 252.358179][ T8690] jffs2: notice: (8690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.661715][ T5615] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.042287][ T59] IPVS: starting estimator thread 0... [ 253.079963][ T8707] IPVS: rr: FWM 3 0x00000003 - no destination available [ 253.128760][ T8708] IPVS: using max 22 ests per chain, 52800 per kthread [ 253.799354][ T8733] batman_adv: batadv0: Adding interface: vlan2 [ 253.799380][ T8733] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.799429][ T8733] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 253.900914][ T8735] jffs2: notice: (8735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.433884][ T8750] input: syz0 as /devices/virtual/input/input16 [ 254.547820][ T1553] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 254.667532][ T8755] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 254.714453][ T1553] usb 3-1: Using ep0 maxpacket: 16 [ 254.730998][ T1553] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 254.744341][ T1553] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.744467][ T1553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.744517][ T1553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.744558][ T1553] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 254.744600][ T1553] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.746856][ T1553] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.746895][ T1553] usb 3-1: Manufacturer: syz [ 254.753369][ T1553] usb 3-1: config 0 descriptor?? [ 255.099771][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.099850][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.101036][ T1307] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 255.254991][ T8770] input: syz0 as /devices/virtual/input/input18 [ 255.309083][ T1553] rc_core: IR keymap rc-hauppauge not found [ 255.309109][ T1553] Registered IR keymap rc-empty [ 255.309578][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.333901][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.346467][ T1553] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 255.375943][ T1553] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 255.414731][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.434703][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.454803][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.474758][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.477876][ T8775] loop3: detected capacity change from 0 to 64 [ 255.500560][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.516102][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.535184][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.566754][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.586758][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.606459][ T1553] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.633807][ T1553] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 255.633881][ T1553] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 255.728394][ T5759] usb 3-1: USB disconnect, device number 10 [ 255.819264][ T1553] kernel write not supported for file /sg0 (pid: 1553 comm: kworker/0:2) [ 256.086765][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 256.086814][ T8790] netlink: 'syz.1.1022': attribute type 20 has an invalid length. [ 256.086839][ T8790] netlink: 'syz.1.1022': attribute type 21 has an invalid length. [ 256.787824][ T8799] tipc: Started in network mode [ 256.787870][ T8799] tipc: Node identity 0010000000000000002, cluster identity 1 [ 258.263016][ T8835] loop5: detected capacity change from 0 to 512 [ 258.268209][ T8835] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 258.340390][ T8835] EXT4-fs (loop5): 1 truncate cleaned up [ 258.367964][ T8835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.481802][ T8840] loop0: detected capacity change from 0 to 256 [ 258.483159][ T8840] vfat: Unknown parameter 'uni^xlate' [ 258.781411][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.811705][ T1553] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 258.977118][ T1553] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice= 1.00 [ 258.983379][ T1553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.983420][ T1553] usb 5-1: Product: syz [ 258.983447][ T1553] usb 5-1: Manufacturer: syz [ 258.983475][ T1553] usb 5-1: SerialNumber: syz [ 259.056541][ T1553] em28xx 5-1:1.0: New device syz syz @ 480 Mbps (0ccd:0036, interface 0, class 0) [ 259.056600][ T1553] em28xx 5-1:1.0: Video interface 0 found: bulk [ 259.329312][ T8855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.488187][ T8858] loop0: detected capacity change from 0 to 1024 [ 259.491412][ T8858] EXT4-fs: Ignoring removed bh option [ 259.491502][ T8858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.569051][ T8858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.569214][ T8858] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.739668][ T31] audit: type=1804 audit(1789170550.151:62): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1048" name="/newroot/176/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 259.769060][ T1553] em28xx 5-1:1.0: unknown em28xx chip ID (0) [ 259.881414][ T1553] em28xx 5-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 259.881487][ T1553] em28xx 5-1:1.0: board has no eeprom [ 259.936134][ T1553] em28xx 5-1:1.0: Identified as Terratec Cinergy 250 USB (card=2) [ 259.936180][ T1553] em28xx 5-1:1.0: analog set to bulk mode. [ 259.941849][ T5768] em28xx 5-1:1.0: Registering V4L2 extension [ 260.029986][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.085825][ T1553] usb 5-1: USB disconnect, device number 7 [ 260.103543][ T1553] em28xx 5-1:1.0: Disconnecting em28xx [ 260.721695][ T8887] loop3: detected capacity change from 0 to 256 [ 260.768336][ T8886] loop1: detected capacity change from 0 to 512 [ 260.769297][ T8887] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 260.840402][ T5768] em28xx 5-1:1.0: Config register raw data: 0xffffffed [ 260.840442][ T5768] em28xx 5-1:1.0: AC97 chip type couldn't be determined [ 260.840468][ T5768] em28xx 5-1:1.0: No AC97 audio processor [ 260.857123][ T8886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.857244][ T8886] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.952179][ T8887] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 260.963908][ T5768] usb 5-1: Decoder not found [ 260.966231][ T5768] em28xx 5-1:1.0: failed to create media graph [ 260.966277][ T5768] em28xx 5-1:1.0: V4L2 device video103 deregistered [ 261.017285][ T5768] INFO: trying to register non-static key. [ 261.023177][ T5768] The code is fine but needs lockdep annotation, or maybe [ 261.030292][ T5768] you didn't initialize this object before use? [ 261.036537][ T5768] turning off the locking correctness validator. [ 261.042871][ T5768] CPU: 0 UID: 0 PID: 5768 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.053845][ T5768] Tainted: [L]=SOFTLOCKUP [ 261.058176][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 261.068254][ T5768] Workqueue: events request_module_async [ 261.073932][ T5768] Call Trace: [ 261.077214][ T5768] [ 261.080153][ T5768] dump_stack_lvl+0x100/0x190 [ 261.084872][ T5768] register_lock_class+0x79b/0x7b0 [ 261.090018][ T5768] __lock_acquire+0x25d/0x1f40 [ 261.094806][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.100471][ T5768] ? lock_acquire+0x1d1/0x380 [ 261.105171][ T5768] ? vb2_video_unregister_device+0x12b/0x2e0 [ 261.111183][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.116844][ T5768] lock_acquire+0x1d1/0x380 [ 261.121361][ T5768] ? __wake_up+0x1c/0x60 [ 261.125636][ T5768] ? vb2_video_unregister_device+0x12b/0x2e0 [ 261.131640][ T5768] ? kobject_put+0xb9/0x640 [ 261.136155][ T5768] ? _raw_spin_lock_irqsave+0x52/0x60 [ 261.141554][ T5768] _raw_spin_lock_irqsave+0x3a/0x60 [ 261.146777][ T5768] ? __wake_up+0x1c/0x60 [ 261.151046][ T5768] __wake_up+0x1c/0x60 [ 261.155138][ T5768] __vb2_queue_cancel+0x348/0xe90 [ 261.160181][ T5768] ? __pfx_device_del+0x10/0x10 [ 261.165051][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.170702][ T5768] ? kobject_put+0xb9/0x640 [ 261.175222][ T5768] vb2_core_queue_release+0x27/0x190 [ 261.180531][ T5768] vb2_video_unregister_device+0x152/0x2e0 [ 261.186358][ T5768] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 261.191764][ T5768] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 261.197161][ T5768] em28xx_init_extension+0x13a/0x200 [ 261.202467][ T5768] request_module_async+0x1e/0x30 [ 261.207511][ T5768] process_one_work+0xac7/0x1b10 [ 261.212486][ T5768] ? __pfx_process_one_work+0x10/0x10 [ 261.217884][ T5768] ? lock_acquire+0x1d1/0x380 [ 261.222576][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.228236][ T5768] worker_thread+0x5ef/0xe50 [ 261.232858][ T5768] ? __pfx_worker_thread+0x10/0x10 [ 261.238000][ T5768] ? kthread+0x13a/0x450 [ 261.242261][ T5768] ? __pfx_worker_thread+0x10/0x10 [ 261.247396][ T5768] kthread+0x373/0x450 [ 261.251487][ T5768] ? __pfx_kthread+0x10/0x10 [ 261.256101][ T5768] ret_from_fork+0x730/0xd60 [ 261.260705][ T5768] ? __pfx_ret_from_fork+0x10/0x10 [ 261.265823][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.271472][ T5768] ? rcu_is_watching+0x13/0xc0 [ 261.276255][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.281906][ T5768] ? __switch_to+0x800/0x10f0 [ 261.286689][ T5768] ? __switch_to_asm+0x39/0x70 [ 261.291460][ T5768] ? __pfx_kthread+0x10/0x10 [ 261.296071][ T5768] ret_from_fork_asm+0x1a/0x30 [ 261.300855][ T5768] [ 261.303905][ T5768] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 261.315975][ T5768] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 261.324482][ T5768] CPU: 0 UID: 0 PID: 5768 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.335522][ T5768] Tainted: [L]=SOFTLOCKUP [ 261.339839][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 261.349904][ T5768] Workqueue: events request_module_async [ 261.355562][ T5768] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 261.361145][ T5768] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 261.380765][ T5768] RSP: 0018:ffffc9000408f9a0 EFLAGS: 00010056 [ 261.386841][ T5768] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 261.394819][ T5768] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888054e85790 [ 261.402891][ T5768] RBP: ffff888054e85790 R08: 0000000000000000 R09: fffff52000811f2b [ 261.410864][ T5768] R10: 0000000000000003 R11: 0000000036373554 R12: 0000000000000003 [ 261.418843][ T5768] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888054e857d0 [ 261.426820][ T5768] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 261.435756][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.442342][ T5768] CR2: 000000110c39e40c CR3: 0000000034684000 CR4: 0000000000350ef0 [ 261.450318][ T5768] Call Trace: [ 261.453592][ T5768] [ 261.456538][ T5768] __wake_up+0x31/0x60 [ 261.460642][ T5768] __vb2_queue_cancel+0x348/0xe90 [ 261.465686][ T5768] ? __pfx_device_del+0x10/0x10 [ 261.470564][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.476216][ T5768] ? kobject_put+0xb9/0x640 [ 261.480739][ T5768] vb2_core_queue_release+0x27/0x190 [ 261.486045][ T5768] vb2_video_unregister_device+0x152/0x2e0 [ 261.491870][ T5768] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 261.497282][ T5768] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 261.502682][ T5768] em28xx_init_extension+0x13a/0x200 [ 261.507985][ T5768] request_module_async+0x1e/0x30 [ 261.513032][ T5768] process_one_work+0xac7/0x1b10 [ 261.518007][ T5768] ? __pfx_process_one_work+0x10/0x10 [ 261.523404][ T5768] ? lock_acquire+0x1d1/0x380 [ 261.528092][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.533746][ T5768] worker_thread+0x5ef/0xe50 [ 261.538457][ T5768] ? __pfx_worker_thread+0x10/0x10 [ 261.543593][ T5768] ? kthread+0x13a/0x450 [ 261.547859][ T5768] ? __pfx_worker_thread+0x10/0x10 [ 261.553080][ T5768] kthread+0x373/0x450 [ 261.557176][ T5768] ? __pfx_kthread+0x10/0x10 [ 261.561787][ T5768] ret_from_fork+0x730/0xd60 [ 261.566389][ T5768] ? __pfx_ret_from_fork+0x10/0x10 [ 261.571518][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.577167][ T5768] ? rcu_is_watching+0x13/0xc0 [ 261.581988][ T5768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.587641][ T5768] ? __switch_to+0x800/0x10f0 [ 261.592342][ T5768] ? __switch_to_asm+0x39/0x70 [ 261.597110][ T5768] ? __pfx_kthread+0x10/0x10 [ 261.601721][ T5768] ret_from_fork_asm+0x1a/0x30 [ 261.606503][ T5768] [ 261.609519][ T5768] Modules linked in: [ 261.613413][ T5768] ---[ end trace 0000000000000000 ]--- [ 261.618949][ T5768] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 261.619007][ T5768] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 261.619041][ T5768] RSP: 0018:ffffc9000408f9a0 EFLAGS: 00010056 [ 261.619068][ T5768] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 261.619090][ T5768] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888054e85790 [ 261.619113][ T5768] RBP: ffff888054e85790 R08: 0000000000000000 R09: fffff52000811f2b [ 261.619136][ T5768] R10: 0000000000000003 R11: 0000000036373554 R12: 0000000000000003 [ 261.619157][ T5768] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888054e857d0 [ 261.619181][ T5768] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 261.619211][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.619234][ T5768] CR2: 000000110c39e40c CR3: 0000000034684000 CR4: 0000000000350ef0 [ 261.619259][ T5768] Kernel panic - not syncing: Fatal exception [ 261.719910][ T5768] Kernel Offset: disabled [ 261.724226][ T5768] Rebooting in 86400 seconds..