last executing test programs: 11m26.715418487s ago: executing program 2 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) write$evdev(r3, &(0x7f00000003c0)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) 11m24.999999853s ago: executing program 2 (id=152): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)='=', 0x1}], 0x1}}], 0x1, 0x4000801) 11m13.39139763s ago: executing program 2 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2020001, &(0x7f0000019a40)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x8}}, {@posixacl}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019740)=0x7) r3 = socket(0x2, 0x3, 0x6) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 11m11.425257882s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) write$evdev(r3, &(0x7f00000003c0)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) 11m3.507807213s ago: executing program 2 (id=182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000019280)='/proc/self/clear_refs\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x4000, 0x80) 10m56.20908953s ago: executing program 2 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000640)="05", 0x1, 0x20000005, &(0x7f0000000680)={0x11, 0x806, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 10m40.742173895s ago: executing program 32 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000640)="05", 0x1, 0x20000005, &(0x7f0000000680)={0x11, 0x806, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 31.322327581s ago: executing program 0 (id=2251): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002800)={r1, &(0x7f0000000100)="970e414d85eb0b1fa47a1eb0a049fa766cc377", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000027c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002840)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000003380)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000033c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000003440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000034c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000003500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003540)=0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000003580)='net/netlink\x00') preadv(r5, &(0x7f00000035c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x162, 0xb) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40002162, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) unshare(0x400) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000002780)=0x3) ioctl$TCSETSW2(r7, 0x5408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x80) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fd/3\x00') read$FUSE(r8, &(0x7f0000000700)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x200000ab, &(0x7f0000000280)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r6}, 0x8) 30.25830381s ago: executing program 0 (id=2253): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000740)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.485573089s ago: executing program 0 (id=2257): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 28.527422627s ago: executing program 0 (id=2260): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000008540bd28330900000000000109022400010000a0110904e90802030003000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 25.418751286s ago: executing program 0 (id=2270): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5", 0x94}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x77c}], 0x1) 25.069255312s ago: executing program 0 (id=2272): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000340)="$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") setxattr$trusted_overlay_upper(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000000940)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0), &(0x7f0000000a00)=ANY=[], 0x835, 0x0) 9.604800966s ago: executing program 1 (id=2309): setxattr$trusted_overlay_upper(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0), &(0x7f0000000a00)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x800, &(0x7f0000000c80), 0x1, 0x517, &(0x7f0000000cc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x0) 9.604574876s ago: executing program 4 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x700, 0x9}, @void, @eth={@random="77e8e9a87b48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1b, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x26}}, "733aaca7cad080"}}}}}, 0x31) 9.603955276s ago: executing program 3 (id=2311): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x0) 7.91064517s ago: executing program 1 (id=2312): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000b40)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)='./file0\x00') 7.90979059s ago: executing program 4 (id=2313): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002800)={r1, &(0x7f0000000100)="970e414d85eb0b1fa47a1eb0a049fa766cc377", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000027c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002840)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000003380)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000033c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000003440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000034c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000003500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003540)=0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000003580)='net/netlink\x00') preadv(r5, &(0x7f00000035c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x162, 0xb) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40002162, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) unshare(0x400) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000002780)=0x3) ioctl$TCSETSW2(r7, 0x5408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x80) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fd/3\x00') read$FUSE(r8, &(0x7f0000000700)={0x2020}, 0x2020) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000a000000080000000200000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) 7.909583899s ago: executing program 3 (id=2314): r0 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) 6.084401196s ago: executing program 1 (id=2315): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r0, r0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 6.083824626s ago: executing program 4 (id=2316): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x525, &(0x7f00000002c0)="$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") creat(0x0, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x109142, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xb49, 0x8ffff) fallocate(r0, 0x8, 0x4000, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f00000001c0)='2', 0x1, 0x3) 6.075486827s ago: executing program 3 (id=2317): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@ifindex=r2, 0xd, 0x1, 0x9, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400000098000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x48) 4.149879795s ago: executing program 1 (id=2318): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x200802, &(0x7f0000000180)=ANY=[], 0x1, 0x212, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000500)="$eJzs2s9rXFUUB/DzaiUxNZ2Iv2hBvOhC3TyauHXRIC2IAUUboQrSV/OiQ54zIW8IjIidlW79E1yLS3eCdOkmG/8CF+4CkmUF8YmZMc0MI6H4Y0L7+WzmMOd+Z87lzgx3MfuvfPnx1madbxa9OJNlkV2OQdzJYinOxF8G8dIL13945u3r776+urZ25a2Urq5eW15JKZ1/9vv3Pv3mudu9c+98e/67udhben//YOXnvaf2Luz/fu2jdp3adep0e6lIN7vdXnGzKtNGu97KU3qzKou6TO1OXe6M9Ter7vZ2PxWdjcWF7Z2yrlPR6aetsp963dTb6afiw6LdSXmep8WF4J9Y//pO08RB8/CNaJrmka/i3O1Y/ClakT2WsscvZ0/eyJ4eZBcOmqY161H5Tzj/B9uxH/X5iOqL3fXd9eHjsL+6Ge2oooxL0Yrf4s+Pyciwvvra2pVL6dBSfF7dGuVv7a4/NJ5fjlYsTc8vD/NpPD8XC8fzK9GKJyIbjT2WX5man48Xnz+Wz6MVP34Q3ahi4/AF7uY/W07p1TfWJvIXD9cBANxv8nRk6v0tz/+uP8zfw/1w4n51Ni6ene3eiaj7n2wVVVXunFTMx8lrFIqTivmIOAVjHBW/jL4IE625f+MtYhBx9MzLj56WLU8UvzZNM214HgB3D33WkwAAAAAAAAAAAHAv/o8/GM56jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn2RwAAAP//lu3JvA==") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_create_resource$futex(0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) syz_mount_image$vfat(&(0x7f0000000a00), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000b40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x40, 0x14e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x4003012, r4, 0x7000) 4.135500836s ago: executing program 4 (id=2319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) r3 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x10200, 0x2, 0x26000, 0x1000, &(0x7f00003b2000/0x1000)=nil, 0x0, r3}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0xc7e9, 0x0, 0x6, 0x6, 0x200000000001, 0x8, 0x5]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.134362126s ago: executing program 3 (id=2320): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') fchdir(r0) close(0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 2.191893745s ago: executing program 1 (id=2321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x700, 0x9}, @void, @eth={@random="77e8e9a87b48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1b, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x26}}, "733aaca7cad080"}}}}}, 0x31) 2.187324726s ago: executing program 4 (id=2322): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0x4, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x6, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x6, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001140)=""/4091, 0xffb}, {&(0x7f0000002240)=""/175, 0xaf}], 0x2}, 0x20000}, {{0x0, 0x0, 0x0}, 0x4741}], 0x2, 0x22120, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.186974186s ago: executing program 3 (id=2323): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000340)="$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") setxattr$trusted_overlay_upper(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000000940)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0), &(0x7f0000000a00)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000a40)='./file0/file0\x00', 0x20) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x800, &(0x7f0000000c80), 0x1, 0x517, &(0x7f0000000cc0)="$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") pipe2(0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x0) 13.975758ms ago: executing program 1 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000b40)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)='./file0\x00') 5.288409ms ago: executing program 4 (id=2325): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000480)=[{0x20, 0x2a, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x63552b78}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = fsopen(&(0x7f0000001300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) openat$cgroup_procs(r5, &(0x7f0000001340)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001400)='cgroup.max.depth\x00', 0x2, 0x0) r6 = memfd_create(&(0x7f0000001480)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xce\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.304253][T11521] RSP: 002b:00007fa0975f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 748.312704][T11521] RAX: ffffffffffffffda RBX: 00007fa099625fa0 RCX: 00007fa09939fb19 [ 748.320797][T11521] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 748.328796][T11521] RBP: 00007fa099437af8 R08: 0000000000000000 R09: 0000000000000000 [ 748.336797][T11521] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 748.344889][T11521] R13: 00007fa099626038 R14: 00007fa099625fa0 R15: 00007ffda32a3468 [ 748.352931][T11521] [ 748.428263][T11521] proc_fill_super: can't allocate /proc/self [ 748.666815][T11540] FAULT_INJECTION: forcing a failure. [ 748.666815][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 748.679944][T11540] CPU: 0 PID: 11540 Comm: syz.3.1791 Not tainted syzkaller #0 [ 748.685296][ T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 748.687438][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 748.705185][T11540] Call Trace: [ 748.708512][T11540] [ 748.711479][T11540] dump_stack_lvl+0x18c/0x250 [ 748.716200][T11540] ? show_regs_print_info+0x20/0x20 [ 748.721465][T11540] ? load_image+0x420/0x420 [ 748.726023][T11540] ? __might_sleep+0xe0/0xe0 [ 748.730657][T11540] ? __lock_acquire+0x7eb0/0x7eb0 [ 748.735718][T11540] should_fail_ex+0x394/0x4c0 [ 748.740434][T11540] should_failslab+0x9/0x20 [ 748.744963][T11540] slab_pre_alloc_hook+0x59/0x300 [ 748.750015][T11540] ? __lock_acquire+0x7eb0/0x7eb0 [ 748.755069][T11540] ? copy_cgroup_ns+0x2c6/0x610 [ 748.759982][T11540] __kmem_cache_alloc_node+0x53/0x260 [ 748.765382][T11540] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 748.771564][T11540] ? copy_cgroup_ns+0x2c6/0x610 [ 748.776452][T11540] kmalloc_trace+0x2a/0xe0 [ 748.780906][T11540] copy_cgroup_ns+0x2c6/0x610 [ 748.785624][T11540] create_new_namespaces+0x335/0x700 [ 748.790955][T11540] unshare_nsproxy_namespaces+0x11a/0x160 [ 748.796709][T11540] ksys_unshare+0x4fa/0x8f0 [ 748.801250][T11540] ? sighand_ctor+0x50/0x50 [ 748.805813][T11540] ? lock_chain_count+0x20/0x20 [ 748.810696][T11540] ? syscall_enter_from_user_mode+0x25/0x80 [ 748.816642][T11540] __x64_sys_unshare+0x38/0x40 [ 748.821441][T11540] do_syscall_64+0x55/0xb0 [ 748.825897][T11540] ? clear_bhb_loop+0x40/0x90 [ 748.830651][T11540] ? clear_bhb_loop+0x40/0x90 [ 748.835364][T11540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.841289][T11540] RIP: 0033:0x7f666579fb19 [ 748.845731][T11540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.865361][T11540] RSP: 002b:00007f666663a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 748.873799][T11540] RAX: ffffffffffffffda RBX: 00007f6665a25fa0 RCX: 00007f666579fb19 [ 748.881803][T11540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 748.889801][T11540] RBP: 00007f6665837af8 R08: 0000000000000000 R09: 0000000000000000 [ 748.897823][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.905822][T11540] R13: 00007f6665a26038 R14: 00007f6665a25fa0 R15: 00007ffc1c8af0f8 [ 748.913834][T11540] [ 749.075007][ T9729] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 749.095763][ T23] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 749.104081][ T23] usb 2-1: config 0 has no interface number 0 [ 749.110341][ T23] usb 2-1: config 0 interface 233 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.122257][ T23] usb 2-1: config 0 interface 233 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.137141][ T23] usb 2-1: config 0 interface 233 has no altsetting 0 [ 749.150166][ T23] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 749.160000][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.171193][ T23] usb 2-1: config 0 descriptor?? [ 749.289469][ T9729] usb 5-1: Using ep0 maxpacket: 16 [ 749.299808][ T9729] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 749.321234][ T9729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.335212][ T9729] usb 5-1: Product: syz [ 749.339450][ T9729] usb 5-1: Manufacturer: syz [ 749.347777][ T9729] usb 5-1: SerialNumber: syz [ 749.355271][ T9729] usb 5-1: config 0 descriptor?? [ 749.376883][ T9729] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 749.583890][T11558] syzkaller1: entered promiscuous mode [ 749.589506][T11558] syzkaller1: entered allmulticast mode [ 749.594851][ T5851] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 749.623339][ T23] uclogic 0003:28BD:0933.0008: interface is invalid, ignoring [ 749.802312][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 749.813642][ T5851] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 749.834734][ T5851] usb 4-1: config 0 has no interface number 0 [ 749.840913][ T5851] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.858824][ T5851] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.868707][ T5851] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 749.877981][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.896491][ T5851] usb 4-1: config 0 descriptor?? [ 749.905807][ T9] usb 2-1: USB disconnect, device number 28 [ 750.213684][ T9729] ssu100: probe of 5-1:0.0 failed with error -71 [ 750.247892][ T9729] usb 5-1: USB disconnect, device number 34 [ 750.534980][ T5851] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0009/input/input32 [ 750.651905][ T5851] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0009/input/input33 [ 750.689397][ T5851] uclogic 0003:28BD:0071.0009: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 750.747178][ T5851] usb 4-1: USB disconnect, device number 27 [ 750.897825][T11581] fido_id[11581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 751.584796][ T5796] Bluetooth: hci1: unexpected event for opcode 0x001c [ 751.698223][T11618] fuse: Bad value for 'rootmode' [ 753.259425][T11673] fuse: Bad value for 'rootmode' [ 753.368372][T11679] FAULT_INJECTION: forcing a failure. [ 753.368372][T11679] name failslab, interval 1, probability 0, space 0, times 0 [ 753.381902][T11679] CPU: 1 PID: 11679 Comm: syz.0.1846 Not tainted syzkaller #0 [ 753.389425][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 753.399514][T11679] Call Trace: [ 753.402830][T11679] [ 753.405818][T11679] dump_stack_lvl+0x18c/0x250 [ 753.410633][T11679] ? show_regs_print_info+0x20/0x20 [ 753.415855][T11679] ? load_image+0x420/0x420 [ 753.420397][T11679] ? __lock_acquire+0x7eb0/0x7eb0 [ 753.425482][T11679] should_fail_ex+0x394/0x4c0 [ 753.430224][T11679] should_failslab+0x9/0x20 [ 753.434790][T11679] slab_pre_alloc_hook+0x59/0x300 [ 753.439873][T11679] ? alloc_pipe_info+0x1f9/0x4b0 [ 753.444896][T11679] ? alloc_pipe_info+0x1f9/0x4b0 [ 753.449896][T11679] __kmem_cache_alloc_node+0x53/0x260 [ 753.455327][T11679] ? alloc_pipe_info+0x1f9/0x4b0 [ 753.460360][T11679] __kmalloc+0xa7/0x240 [ 753.464590][T11679] alloc_pipe_info+0x1f9/0x4b0 [ 753.469484][T11679] create_pipe_files+0x87/0x700 [ 753.474390][T11679] ? __ia32_sys_get_robust_list+0x110/0x110 [ 753.480344][T11679] __do_pipe_flags+0x4c/0x2c0 [ 753.485090][T11679] do_pipe2+0xab/0x190 [ 753.489214][T11679] ? _compound_head+0x120/0x120 [ 753.494186][T11679] ? lock_chain_count+0x20/0x20 [ 753.499096][T11679] ? syscall_enter_from_user_mode+0x25/0x80 [ 753.505028][T11679] __x64_sys_pipe+0x3a/0x40 [ 753.509570][T11679] do_syscall_64+0x55/0xb0 [ 753.514025][T11679] ? clear_bhb_loop+0x40/0x90 [ 753.518733][T11679] ? clear_bhb_loop+0x40/0x90 [ 753.523444][T11679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.529371][T11679] RIP: 0033:0x7eff2699fb19 [ 753.533821][T11679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.553548][T11679] RSP: 002b:00007eff2779e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 753.561988][T11679] RAX: ffffffffffffffda RBX: 00007eff26c25fa0 RCX: 00007eff2699fb19 [ 753.570012][T11679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.578040][T11679] RBP: 00007eff26a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 753.586066][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.594083][T11679] R13: 00007eff26c26038 R14: 00007eff26c25fa0 R15: 00007ffc7e859728 [ 753.602114][T11679] [ 754.174538][T11689] FAULT_INJECTION: forcing a failure. [ 754.174538][T11689] name failslab, interval 1, probability 0, space 0, times 0 [ 754.203949][T11689] CPU: 0 PID: 11689 Comm: syz.1.1850 Not tainted syzkaller #0 [ 754.211495][T11689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 754.221600][T11689] Call Trace: [ 754.224934][T11689] [ 754.227910][T11689] dump_stack_lvl+0x18c/0x250 [ 754.232659][T11689] ? show_regs_print_info+0x20/0x20 [ 754.237915][T11689] ? load_image+0x420/0x420 [ 754.242467][T11689] ? __might_sleep+0xe0/0xe0 [ 754.247098][T11689] ? __lock_acquire+0x7eb0/0x7eb0 [ 754.252160][T11689] ? percpu_ref_put+0x12/0x100 [ 754.256963][T11689] should_fail_ex+0x394/0x4c0 [ 754.261679][T11689] should_failslab+0x9/0x20 [ 754.266216][T11689] slab_pre_alloc_hook+0x59/0x300 [ 754.271275][T11689] kmem_cache_alloc+0x5a/0x2d0 [ 754.276066][T11689] ? __kvm_mmu_topup_memory_cache+0x1a4/0x4b0 [ 754.282209][T11689] __kvm_mmu_topup_memory_cache+0x1a4/0x4b0 [ 754.288147][T11689] kvm_mmu_load+0xa2/0x21e0 [ 754.292740][T11689] ? kvm_lapic_sync_to_vapic+0x2b1/0x890 [ 754.298422][T11689] ? find_highest_vector+0x46/0x2e0 [ 754.303680][T11689] ? kvm_lapic_sync_from_vapic+0x630/0x630 [ 754.309522][T11689] ? vmx_update_cr8_intercept+0x98/0x230 [ 754.315274][T11689] vcpu_run+0x4c47/0x7640 [ 754.319718][T11689] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 754.325732][T11689] ? signal_pending+0xf0/0xf0 [ 754.330466][T11689] ? read_lock_is_recursive+0x20/0x20 [ 754.335874][T11689] ? rcu_is_watching+0x15/0xb0 [ 754.340684][T11689] kvm_arch_vcpu_ioctl_run+0x1005/0x18b0 [ 754.346363][T11689] ? kvm_arch_vcpu_ioctl_run+0x1c2/0x18b0 [ 754.352118][T11689] ? kvm_arch_guest_memory_reclaimed+0x20/0x20 [ 754.358324][T11689] ? __mutex_trylock_common+0x160/0x270 [ 754.363931][T11689] ? trace_raw_output_contention_end+0xd0/0xd0 [ 754.370162][T11689] ? tomoyo_path_number_perm+0x217/0x5e0 [ 754.375889][T11689] ? get_task_pid+0x22/0x300 [ 754.380525][T11689] ? __lock_acquire+0x7eb0/0x7eb0 [ 754.385586][T11689] ? mutex_lock_nested+0x20/0x20 [ 754.390563][T11689] ? get_task_pid+0x22/0x300 [ 754.395192][T11689] ? get_task_pid+0x22/0x300 [ 754.399823][T11689] kvm_vcpu_ioctl+0x98a/0xd00 [ 754.404546][T11689] ? xa_release+0x50/0x50 [ 754.409030][T11689] ? __fget_files+0x28/0x460 [ 754.413684][T11689] ? bpf_lsm_file_ioctl+0x9/0x10 [ 754.418697][T11689] ? security_file_ioctl+0x80/0xa0 [ 754.423858][T11689] ? xa_release+0x50/0x50 [ 754.428260][T11689] __se_sys_ioctl+0xfd/0x170 [ 754.432917][T11689] do_syscall_64+0x55/0xb0 [ 754.437385][T11689] ? clear_bhb_loop+0x40/0x90 [ 754.442107][T11689] ? clear_bhb_loop+0x40/0x90 [ 754.446822][T11689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.452843][T11689] RIP: 0033:0x7f722919fb19 [ 754.457307][T11689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.477042][T11689] RSP: 002b:00007f7229f9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.485500][T11689] RAX: ffffffffffffffda RBX: 00007f7229425fa0 RCX: 00007f722919fb19 [ 754.493500][T11689] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 754.501492][T11689] RBP: 00007f7229237af8 R08: 0000000000000000 R09: 0000000000000000 [ 754.509487][T11689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.517482][T11689] R13: 00007f7229426038 R14: 00007f7229425fa0 R15: 00007ffd1ce4b558 [ 754.525497][T11689] [ 754.920757][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 754.954018][ T1211] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 755.084496][ T5851] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 755.098653][T11734] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1869'. [ 755.145980][ T1211] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 755.158378][ T1211] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.171648][ T1211] usb 1-1: config 0 interface 0 has no altsetting 0 [ 755.184500][ T1211] usb 1-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 755.193600][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.215914][ T1211] usb 1-1: config 0 descriptor?? [ 755.221688][T11717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.284000][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 755.329994][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 755.347263][ T5851] usb 2-1: no configurations [ 755.351972][ T5851] usb 2-1: can't read configurations, error -22 [ 755.673244][ T1211] input: HID 05ac:1440 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:1440.000A/input/input34 [ 755.793028][T11754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 755.824764][T11754] overlayfs: failed to set xattr on upper [ 755.830565][T11754] overlayfs: ...falling back to redirect_dir=nofollow. [ 755.838306][ T1211] appleir 0003:05AC:1440.000A: input,hiddev0,hidraw0: USB HID v0.04 Joystick [HID 05ac:1440] on usb-dummy_hcd.0-1/input0 [ 755.864141][T11754] overlayfs: ...falling back to index=off. [ 755.893857][T11754] overlayfs: ...falling back to uuid=null. [ 755.899796][T11754] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 756.037676][ T9] usb 1-1: USB disconnect, device number 25 [ 756.075602][T11757] fido_id[11757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 757.205478][T11814] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1904'. [ 757.268060][ T28] audit: type=1804 audit(1793640189.463:145): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1905" name="bus" dev="ramfs" ino=31293 res=1 errno=0 [ 757.289947][ T28] audit: type=1804 audit(1793640189.483:146): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1905" name="bus" dev="ramfs" ino=31293 res=1 errno=0 [ 757.463948][ T23] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 757.660253][ T23] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 757.684331][ T23] usb 5-1: config 1 has no interface number 0 [ 757.690515][ T23] usb 5-1: config 1 interface 105 has no altsetting 0 [ 757.746440][ T23] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 757.755795][ T23] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 757.774801][ T23] usb 5-1: Product: syz [ 757.784044][ T23] usb 5-1: Manufacturer: syz [ 757.788901][ T23] usb 5-1: SerialNumber: syz [ 758.563554][T11839] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1913'. [ 760.874464][ T23] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 760.904810][ T23] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 760.950892][ T23] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:93:be:9c:35:a6 [ 760.997686][ T23] usb 5-1: USB disconnect, device number 35 [ 761.017003][ T23] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 761.076333][T11850] FAULT_INJECTION: forcing a failure. [ 761.076333][T11850] name failslab, interval 1, probability 0, space 0, times 0 [ 761.093112][T11850] CPU: 0 PID: 11850 Comm: syz.0.1918 Not tainted syzkaller #0 [ 761.100656][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 761.110785][T11850] Call Trace: [ 761.114117][T11850] [ 761.117099][T11850] dump_stack_lvl+0x18c/0x250 [ 761.121852][T11850] ? show_regs_print_info+0x20/0x20 [ 761.127137][T11850] ? load_image+0x420/0x420 [ 761.131703][T11850] ? __might_sleep+0xe0/0xe0 [ 761.136358][T11850] ? __lock_acquire+0x7eb0/0x7eb0 [ 761.141455][T11850] should_fail_ex+0x394/0x4c0 [ 761.146213][T11850] should_failslab+0x9/0x20 [ 761.150779][T11850] slab_pre_alloc_hook+0x59/0x300 [ 761.155869][T11850] ? __kernfs_new_node+0xaa/0x7f0 [ 761.160956][T11850] ? rcu_is_watching+0x15/0xb0 [ 761.165789][T11850] kmem_cache_alloc+0x5a/0x2d0 [ 761.170601][T11850] ? __kernfs_new_node+0xe5/0x7f0 [ 761.175689][T11850] __kernfs_new_node+0xe5/0x7f0 [ 761.180608][T11850] ? kernfs_add_one+0x23b/0x6b0 [ 761.185518][T11850] ? __lock_acquire+0x7eb0/0x7eb0 [ 761.190604][T11850] ? down_write+0x16e/0x200 [ 761.195157][T11850] ? kernfs_new_node+0x260/0x260 [ 761.200151][T11850] ? down_write+0x16e/0x200 [ 761.204712][T11850] kernfs_new_node+0x14c/0x260 [ 761.209539][T11850] __kernfs_create_file+0x4b/0x2e0 [ 761.214699][T11850] cgroup_addrm_files+0x810/0xd60 [ 761.219808][T11850] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 761.226028][T11850] ? mark_lock+0x94/0x320 [ 761.230460][T11850] ? css_next_descendant_pre+0x17d/0x260 [ 761.236158][T11850] css_populate_dir+0x2ad/0x380 [ 761.241071][T11850] cgroup_mkdir+0xc65/0xe70 [ 761.245651][T11850] ? css_task_iter_end+0x2c0/0x2c0 [ 761.250852][T11850] ? kernfs_iop_permission+0x2c4/0x3b0 [ 761.256376][T11850] ? css_task_iter_end+0x2c0/0x2c0 [ 761.261548][T11850] kernfs_iop_mkdir+0x241/0x3e0 [ 761.266456][T11850] vfs_mkdir+0x2a5/0x470 [ 761.270765][T11850] do_mkdirat+0x1dc/0x450 [ 761.275155][T11850] ? vfs_mkdir+0x470/0x470 [ 761.279629][T11850] ? getname_flags+0x20a/0x500 [ 761.284459][T11850] __x64_sys_mkdir+0x6e/0x80 [ 761.289101][T11850] do_syscall_64+0x55/0xb0 [ 761.293565][T11850] ? clear_bhb_loop+0x40/0x90 [ 761.298298][T11850] ? clear_bhb_loop+0x40/0x90 [ 761.303039][T11850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.308995][T11850] RIP: 0033:0x7eff2699fb19 [ 761.313455][T11850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.333126][T11850] RSP: 002b:00007eff2779e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 761.341609][T11850] RAX: ffffffffffffffda RBX: 00007eff26c25fa0 RCX: 00007eff2699fb19 [ 761.349655][T11850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 761.357676][T11850] RBP: 00007eff26a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 761.365701][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.373722][T11850] R13: 00007eff26c26038 R14: 00007eff26c25fa0 R15: 00007ffc7e859728 [ 761.381780][T11850] [ 761.414364][ T23] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 761.437374][T11850] cgroup: cgroup_addrm_files: failed to add cgroup.subtree_control, err=-12 [ 761.440810][ T23] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 761.469003][ T23] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 761.494496][T11853] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 761.513910][T11853] overlayfs: failed to set xattr on upper [ 761.530437][T11853] overlayfs: ...falling back to redirect_dir=nofollow. [ 761.539482][T11853] overlayfs: ...falling back to index=off. [ 761.574655][T11853] overlayfs: ...falling back to uuid=null. [ 761.874108][ T23] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 763.563491][T11864] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1922'. [ 763.590670][T11868] fuse: Unknown parameter 'use00000000000000000000' [ 763.613860][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 763.664255][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 763.692471][ T23] usb 5-1: no configurations [ 763.697227][ T23] usb 5-1: can't read configurations, error -22 [ 763.886182][T11872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 764.239529][T11875] rxe_eth0 speed is unknown, defaulting to 1000 [ 764.344111][T11878] FAULT_INJECTION: forcing a failure. [ 764.344111][T11878] name failslab, interval 1, probability 0, space 0, times 0 [ 764.371975][T11878] CPU: 0 PID: 11878 Comm: syz.4.1927 Not tainted syzkaller #0 [ 764.379526][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 764.389634][T11878] Call Trace: [ 764.392961][T11878] [ 764.395923][T11878] dump_stack_lvl+0x18c/0x250 [ 764.400645][T11878] ? show_regs_print_info+0x20/0x20 [ 764.405878][T11878] ? load_image+0x420/0x420 [ 764.410418][T11878] ? __might_sleep+0xe0/0xe0 [ 764.415043][T11878] ? __lock_acquire+0x7eb0/0x7eb0 [ 764.420130][T11878] should_fail_ex+0x394/0x4c0 [ 764.424850][T11878] should_failslab+0x9/0x20 [ 764.429384][T11878] slab_pre_alloc_hook+0x59/0x300 [ 764.434561][T11878] ? __lock_acquire+0x7eb0/0x7eb0 [ 764.439623][T11878] ? copy_cgroup_ns+0x2c6/0x610 [ 764.444517][T11878] __kmem_cache_alloc_node+0x53/0x260 [ 764.449922][T11878] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 764.456108][T11878] ? copy_cgroup_ns+0x2c6/0x610 [ 764.461012][T11878] kmalloc_trace+0x2a/0xe0 [ 764.465475][T11878] copy_cgroup_ns+0x2c6/0x610 [ 764.470198][T11878] create_new_namespaces+0x335/0x700 [ 764.475556][T11878] unshare_nsproxy_namespaces+0x11a/0x160 [ 764.481315][T11878] ksys_unshare+0x4fa/0x8f0 [ 764.485860][T11878] ? sighand_ctor+0x50/0x50 [ 764.490396][T11878] ? lock_chain_count+0x20/0x20 [ 764.495285][T11878] ? syscall_enter_from_user_mode+0x25/0x80 [ 764.501212][T11878] __x64_sys_unshare+0x38/0x40 [ 764.506011][T11878] do_syscall_64+0x55/0xb0 [ 764.510470][T11878] ? clear_bhb_loop+0x40/0x90 [ 764.515182][T11878] ? clear_bhb_loop+0x40/0x90 [ 764.519902][T11878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.525833][T11878] RIP: 0033:0x7fa09939fb19 [ 764.530281][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.549923][T11878] RSP: 002b:00007fa0975f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 764.558374][T11878] RAX: ffffffffffffffda RBX: 00007fa099625fa0 RCX: 00007fa09939fb19 [ 764.566748][T11878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 764.574748][T11878] RBP: 00007fa099437af8 R08: 0000000000000000 R09: 0000000000000000 [ 764.582746][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.590830][T11878] R13: 00007fa099626038 R14: 00007fa099625fa0 R15: 00007ffda32a3468 [ 764.598842][T11878] [ 764.781806][T11882] binder: 11881:11882 ioctl c0306201 2000000008c0 returned -14 [ 764.792411][T11882] binder: 11881:11882 ioctl c0306201 2000000009c0 returned -14 [ 764.872921][T11884] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 764.891092][T11884] overlayfs: failed to set xattr on upper [ 764.901238][T11884] overlayfs: ...falling back to redirect_dir=nofollow. [ 764.921497][T11884] overlayfs: ...falling back to index=off. [ 764.933886][T11884] overlayfs: ...falling back to uuid=null. [ 764.953880][ T5791] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 765.124679][ T5791] usb 2-1: device descriptor read/64, error -71 [ 766.876229][ T5791] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 767.043964][ T5791] usb 2-1: device descriptor read/64, error -71 [ 767.174251][ T5791] usb usb2-port1: attempt power cycle [ 767.392807][T11905] FAULT_INJECTION: forcing a failure. [ 767.392807][T11905] name failslab, interval 1, probability 0, space 0, times 0 [ 767.435298][T11905] CPU: 0 PID: 11905 Comm: syz.4.1937 Not tainted syzkaller #0 [ 767.442866][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 767.452974][T11905] Call Trace: [ 767.456296][T11905] [ 767.459265][T11905] dump_stack_lvl+0x18c/0x250 [ 767.464003][T11905] ? show_regs_print_info+0x20/0x20 [ 767.469282][T11905] ? load_image+0x420/0x420 [ 767.473848][T11905] ? __might_sleep+0xe0/0xe0 [ 767.478500][T11905] ? __lock_acquire+0x7eb0/0x7eb0 [ 767.483589][T11905] should_fail_ex+0x394/0x4c0 [ 767.488323][T11905] should_failslab+0x9/0x20 [ 767.492883][T11905] slab_pre_alloc_hook+0x59/0x300 [ 767.497960][T11905] ? _raw_spin_unlock_irq+0x2e/0x50 [ 767.503222][T11905] ? copy_time_ns+0x127/0x440 [ 767.507956][T11905] __kmem_cache_alloc_node+0x53/0x260 [ 767.513382][T11905] ? copy_time_ns+0x127/0x440 [ 767.518456][T11905] kmalloc_trace+0x2a/0xe0 [ 767.522934][T11905] copy_time_ns+0x127/0x440 [ 767.527490][T11905] create_new_namespaces+0x467/0x700 [ 767.532850][T11905] unshare_nsproxy_namespaces+0x11a/0x160 [ 767.538625][T11905] ksys_unshare+0x4fa/0x8f0 [ 767.543197][T11905] ? sighand_ctor+0x50/0x50 [ 767.547759][T11905] ? lock_chain_count+0x20/0x20 [ 767.552785][T11905] ? syscall_enter_from_user_mode+0x25/0x80 [ 767.558723][T11905] __x64_sys_unshare+0x38/0x40 [ 767.563538][T11905] do_syscall_64+0x55/0xb0 [ 767.567992][T11905] ? clear_bhb_loop+0x40/0x90 [ 767.572714][T11905] ? clear_bhb_loop+0x40/0x90 [ 767.577446][T11905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.583386][T11905] RIP: 0033:0x7fa09939fb19 [ 767.587835][T11905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.607498][T11905] RSP: 002b:00007fa0975f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.615953][T11905] RAX: ffffffffffffffda RBX: 00007fa099625fa0 RCX: 00007fa09939fb19 [ 767.623959][T11905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 767.631960][T11905] RBP: 00007fa099437af8 R08: 0000000000000000 R09: 0000000000000000 [ 767.639958][T11905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.647967][T11905] R13: 00007fa099626038 R14: 00007fa099625fa0 R15: 00007ffda32a3468 [ 767.655983][T11905] [ 767.724354][ T5791] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 767.774093][ T5791] usb 2-1: device descriptor read/8, error -71 [ 767.838235][T11912] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 767.856172][T11912] overlayfs: failed to set xattr on upper [ 767.862340][T11912] overlayfs: ...falling back to redirect_dir=nofollow. [ 767.893974][T11912] overlayfs: ...falling back to index=off. [ 767.904112][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 767.943892][T11912] overlayfs: ...falling back to uuid=null. [ 769.850536][T11927] FAULT_INJECTION: forcing a failure. [ 769.850536][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 769.871011][T11927] CPU: 0 PID: 11927 Comm: syz.1.1945 Not tainted syzkaller #0 [ 769.878554][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 769.888672][T11927] Call Trace: [ 769.891993][T11927] [ 769.894962][T11927] dump_stack_lvl+0x18c/0x250 [ 769.899698][T11927] ? show_regs_print_info+0x20/0x20 [ 769.904956][T11927] ? load_image+0x420/0x420 [ 769.909518][T11927] ? __lock_acquire+0x7eb0/0x7eb0 [ 769.914601][T11927] should_fail_ex+0x394/0x4c0 [ 769.919349][T11927] should_failslab+0x9/0x20 [ 769.923916][T11927] slab_pre_alloc_hook+0x59/0x300 [ 769.928994][T11927] ? key_alloc+0x34a/0x1030 [ 769.933546][T11927] ? key_alloc+0x34a/0x1030 [ 769.938092][T11927] __kmem_cache_alloc_node+0x53/0x260 [ 769.943517][T11927] ? slab_post_alloc_hook+0x86/0x4d0 [ 769.948868][T11927] ? key_alloc+0x34a/0x1030 [ 769.953440][T11927] __kmalloc_node_track_caller+0xa4/0x230 [ 769.959232][T11927] kmemdup+0x2b/0x70 [ 769.963191][T11927] key_alloc+0x34a/0x1030 [ 769.967584][T11927] keyring_alloc+0x45/0xb0 [ 769.972082][T11927] lookup_user_key+0x4b1/0x1150 [ 769.976999][T11927] ? lookup_user_key_possessed+0x40/0x40 [ 769.982784][T11927] ? search_process_keyrings_rcu+0x360/0x360 [ 769.988831][T11927] ? __check_object_size+0x8a/0xa40 [ 769.994083][T11927] ? strncpy_from_user+0x21/0x2f0 [ 769.999167][T11927] ? strncpy_from_user+0x1a1/0x2f0 [ 770.004345][T11927] __se_sys_add_key+0x315/0x410 [ 770.009271][T11927] ? __x64_sys_add_key+0xc0/0xc0 [ 770.014280][T11927] ? lockdep_hardirqs_on+0x98/0x150 [ 770.019536][T11927] ? __x64_sys_add_key+0x20/0xc0 [ 770.024571][T11927] do_syscall_64+0x55/0xb0 [ 770.029049][T11927] ? clear_bhb_loop+0x40/0x90 [ 770.033783][T11927] ? clear_bhb_loop+0x40/0x90 [ 770.038580][T11927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.044533][T11927] RIP: 0033:0x7f722919fb19 [ 770.049000][T11927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.068679][T11927] RSP: 002b:00007f7229f9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 770.077158][T11927] RAX: ffffffffffffffda RBX: 00007f7229425fa0 RCX: 00007f722919fb19 [ 770.085188][T11927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000007c0 [ 770.093228][T11927] RBP: 00007f7229237af8 R08: fffffffffffffffe R09: 0000000000000000 [ 770.101336][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.109356][T11927] R13: 00007f7229426038 R14: 00007f7229425fa0 R15: 00007ffd1ce4b558 [ 770.117398][T11927] [ 770.513986][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 772.273984][ T9] usb 1-1: device descriptor read/64, error -71 [ 772.554104][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 772.734239][ T9] usb 1-1: device descriptor read/64, error -71 [ 772.867731][ T9] usb usb1-port1: attempt power cycle [ 773.254227][ T5791] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 773.305486][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 773.464132][ T5791] usb 4-1: Using ep0 maxpacket: 32 [ 773.476438][ T5791] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 773.490550][ T5791] usb 4-1: config 0 has no interface number 0 [ 773.501671][ T5791] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 773.518432][ T5791] usb 4-1: config 0 interface 196 has no altsetting 0 [ 773.526937][ T9] usb 1-1: device not accepting address 28, error -71 [ 773.540270][ T5791] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 773.551256][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.559799][ T5791] usb 4-1: Product: syz [ 773.568552][ T5791] usb 4-1: Manufacturer: syz [ 773.573376][ T5791] usb 4-1: SerialNumber: syz [ 773.587996][ T5791] usb 4-1: config 0 descriptor?? [ 773.596048][T11967] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 773.828679][T11990] fuse: Bad value for 'group_id' [ 774.534222][ T5791] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 774.558969][ T5791] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 774.693994][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 774.734840][ T9] usb 1-1: device descriptor read/8, error -71 [ 774.864344][ T9] usb usb1-port1: unable to enumerate USB device [ 776.580269][T12061] FAULT_INJECTION: forcing a failure. [ 776.580269][T12061] name failslab, interval 1, probability 0, space 0, times 0 [ 776.593130][T12061] CPU: 0 PID: 12061 Comm: syz.1.1984 Not tainted syzkaller #0 [ 776.600671][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 776.610763][T12061] Call Trace: [ 776.614189][T12061] [ 776.617185][T12061] dump_stack_lvl+0x18c/0x250 [ 776.621932][T12061] ? show_regs_print_info+0x20/0x20 [ 776.627298][T12061] ? load_image+0x420/0x420 [ 776.631869][T12061] ? __might_sleep+0xe0/0xe0 [ 776.636533][T12061] ? __lock_acquire+0x7eb0/0x7eb0 [ 776.641619][T12061] should_fail_ex+0x394/0x4c0 [ 776.646370][T12061] should_failslab+0x9/0x20 [ 776.650930][T12061] slab_pre_alloc_hook+0x59/0x300 [ 776.656000][T12061] ? __lock_acquire+0x7eb0/0x7eb0 [ 776.661079][T12061] ? copy_cgroup_ns+0x2c6/0x610 [ 776.666078][T12061] __kmem_cache_alloc_node+0x53/0x260 [ 776.671498][T12061] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 776.677713][T12061] ? copy_cgroup_ns+0x2c6/0x610 [ 776.682656][T12061] kmalloc_trace+0x2a/0xe0 [ 776.687141][T12061] copy_cgroup_ns+0x2c6/0x610 [ 776.691878][T12061] create_new_namespaces+0x335/0x700 [ 776.697229][T12061] unshare_nsproxy_namespaces+0x11a/0x160 [ 776.703006][T12061] ksys_unshare+0x4fa/0x8f0 [ 776.707584][T12061] ? sighand_ctor+0x50/0x50 [ 776.712168][T12061] ? lock_chain_count+0x20/0x20 [ 776.717416][T12061] ? syscall_enter_from_user_mode+0x25/0x80 [ 776.723371][T12061] __x64_sys_unshare+0x38/0x40 [ 776.728189][T12061] do_syscall_64+0x55/0xb0 [ 776.732657][T12061] ? clear_bhb_loop+0x40/0x90 [ 776.737395][T12061] ? clear_bhb_loop+0x40/0x90 [ 776.742131][T12061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.748079][T12061] RIP: 0033:0x7f722919fb19 [ 776.752541][T12061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.772387][T12061] RSP: 002b:00007f7229f9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 776.780855][T12061] RAX: ffffffffffffffda RBX: 00007f7229425fa0 RCX: 00007f722919fb19 [ 776.788877][T12061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 776.796894][T12061] RBP: 00007f7229237af8 R08: 0000000000000000 R09: 0000000000000000 [ 776.804961][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.812980][T12061] R13: 00007f7229426038 R14: 00007f7229425fa0 R15: 00007ffd1ce4b558 [ 776.821023][T12061] [ 776.868050][ T9] usb 4-1: USB disconnect, device number 28 [ 777.128563][ T9] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 777.671822][T12095] FAULT_INJECTION: forcing a failure. [ 777.671822][T12095] name failslab, interval 1, probability 0, space 0, times 0 [ 777.684995][T12095] CPU: 1 PID: 12095 Comm: syz.1.1994 Not tainted syzkaller #0 [ 777.692522][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 777.702632][T12095] Call Trace: [ 777.705954][T12095] [ 777.708916][T12095] dump_stack_lvl+0x18c/0x250 [ 777.713647][T12095] ? show_regs_print_info+0x20/0x20 [ 777.718907][T12095] ? load_image+0x420/0x420 [ 777.723464][T12095] ? __might_sleep+0xe0/0xe0 [ 777.728096][T12095] ? __lock_acquire+0x7eb0/0x7eb0 [ 777.733159][T12095] should_fail_ex+0x394/0x4c0 [ 777.737881][T12095] should_failslab+0x9/0x20 [ 777.742452][T12095] slab_pre_alloc_hook+0x59/0x300 [ 777.747523][T12095] ? __lock_acquire+0x7eb0/0x7eb0 [ 777.752596][T12095] ? copy_cgroup_ns+0x2c6/0x610 [ 777.757503][T12095] __kmem_cache_alloc_node+0x53/0x260 [ 777.762910][T12095] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 777.769198][T12095] ? copy_cgroup_ns+0x2c6/0x610 [ 777.774104][T12095] kmalloc_trace+0x2a/0xe0 [ 777.778572][T12095] copy_cgroup_ns+0x2c6/0x610 [ 777.783310][T12095] create_new_namespaces+0x335/0x700 [ 777.788650][T12095] unshare_nsproxy_namespaces+0x11a/0x160 [ 777.794429][T12095] ksys_unshare+0x4fa/0x8f0 [ 777.798989][T12095] ? sighand_ctor+0x50/0x50 [ 777.803545][T12095] ? lock_chain_count+0x20/0x20 [ 777.808478][T12095] ? syscall_enter_from_user_mode+0x25/0x80 [ 777.814431][T12095] __x64_sys_unshare+0x38/0x40 [ 777.819253][T12095] do_syscall_64+0x55/0xb0 [ 777.823723][T12095] ? clear_bhb_loop+0x40/0x90 [ 777.828488][T12095] ? clear_bhb_loop+0x40/0x90 [ 777.833219][T12095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.839169][T12095] RIP: 0033:0x7f722919fb19 [ 777.843626][T12095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.863274][T12095] RSP: 002b:00007f7229f9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 777.871740][T12095] RAX: ffffffffffffffda RBX: 00007f7229425fa0 RCX: 00007f722919fb19 [ 777.879767][T12095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 777.887780][T12095] RBP: 00007f7229237af8 R08: 0000000000000000 R09: 0000000000000000 [ 777.895798][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.903815][T12095] R13: 00007f7229426038 R14: 00007f7229425fa0 R15: 00007ffd1ce4b558 [ 777.911848][T12095] [ 778.361672][T12087] device-mapper: table: 248:2: crypt: Device lookup failed (-ENOENT) [ 778.404562][T12087] device-mapper: ioctl: error adding target to table [ 778.893979][ T5791] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 779.064283][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 779.084291][ T5791] usb 5-1: device descriptor read/64, error -71 [ 779.286075][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 779.299221][ T9] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 779.321931][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 779.332086][ T9] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 779.351366][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.365947][ T9] usb 4-1: config 0 descriptor?? [ 779.374091][ T5791] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 779.554164][ T5791] usb 5-1: device descriptor read/64, error -71 [ 779.674340][ T5791] usb usb5-port1: attempt power cycle [ 779.797758][ T9] hid_parser_main: 563 callbacks suppressed [ 779.797782][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x6 [ 779.813423][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.830884][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x7 [ 779.851823][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.860493][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.871757][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.878840][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.889594][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.896863][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.915492][ T9] betop 0003:11C2:2208.000B: unknown main item tag 0x0 [ 779.927457][ T9] betop 0003:11C2:2208.000B: hidraw0: USB HID v0.81 Device [HID 11c2:2208] on usb-dummy_hcd.3-1/input0 [ 779.952855][ T9] betop 0003:11C2:2208.000B: no inputs found [ 780.037337][ T9] usb 4-1: USB disconnect, device number 29 [ 780.093935][ T5791] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 780.134742][ T5791] usb 5-1: device descriptor read/8, error -71 [ 780.371525][T12182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 780.378776][T12182] overlayfs: failed to set xattr on upper [ 780.384883][T12182] overlayfs: ...falling back to redirect_dir=nofollow. [ 780.392230][T12182] overlayfs: ...falling back to index=off. [ 780.400687][T12182] overlayfs: ...falling back to uuid=null. [ 780.424176][ T5791] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 780.465009][ T5791] usb 5-1: device descriptor read/8, error -71 [ 780.589854][ T5791] usb usb5-port1: unable to enumerate USB device [ 781.021372][T12204] fuse: Bad value for 'fd' [ 781.440765][T12219] FAULT_INJECTION: forcing a failure. [ 781.440765][T12219] name failslab, interval 1, probability 0, space 0, times 0 [ 781.453699][T12219] CPU: 0 PID: 12219 Comm: syz.0.2030 Not tainted syzkaller #0 [ 781.461323][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 781.471419][T12219] Call Trace: [ 781.474742][T12219] [ 781.477734][T12219] dump_stack_lvl+0x18c/0x250 [ 781.482478][T12219] ? show_regs_print_info+0x20/0x20 [ 781.487783][T12219] ? load_image+0x420/0x420 [ 781.492344][T12219] ? __might_sleep+0xe0/0xe0 [ 781.496984][T12219] ? __lock_acquire+0x7eb0/0x7eb0 [ 781.502074][T12219] should_fail_ex+0x394/0x4c0 [ 781.506814][T12219] should_failslab+0x9/0x20 [ 781.511349][T12219] slab_pre_alloc_hook+0x59/0x300 [ 781.516532][T12219] ? __lock_acquire+0x7eb0/0x7eb0 [ 781.521609][T12219] ? copy_cgroup_ns+0x2c6/0x610 [ 781.526501][T12219] __kmem_cache_alloc_node+0x53/0x260 [ 781.531908][T12219] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 781.538104][T12219] ? copy_cgroup_ns+0x2c6/0x610 [ 781.542999][T12219] kmalloc_trace+0x2a/0xe0 [ 781.547457][T12219] copy_cgroup_ns+0x2c6/0x610 [ 781.552173][T12219] create_new_namespaces+0x335/0x700 [ 781.557508][T12219] unshare_nsproxy_namespaces+0x11a/0x160 [ 781.563282][T12219] ksys_unshare+0x4fa/0x8f0 [ 781.567829][T12219] ? sighand_ctor+0x50/0x50 [ 781.572364][T12219] ? lock_chain_count+0x20/0x20 [ 781.577261][T12219] ? syscall_enter_from_user_mode+0x25/0x80 [ 781.583277][T12219] __x64_sys_unshare+0x38/0x40 [ 781.588078][T12219] do_syscall_64+0x55/0xb0 [ 781.592526][T12219] ? clear_bhb_loop+0x40/0x90 [ 781.597240][T12219] ? clear_bhb_loop+0x40/0x90 [ 781.601956][T12219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.607879][T12219] RIP: 0033:0x7eff2699fb19 [ 781.612324][T12219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.632054][T12219] RSP: 002b:00007eff2779e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 781.640507][T12219] RAX: ffffffffffffffda RBX: 00007eff26c25fa0 RCX: 00007eff2699fb19 [ 781.648505][T12219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 781.656512][T12219] RBP: 00007eff26a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 781.664513][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.672511][T12219] R13: 00007eff26c26038 R14: 00007eff26c25fa0 R15: 00007ffc7e859728 [ 781.680525][T12219] [ 782.433979][ T5791] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 782.616841][ T5791] usb 4-1: device descriptor read/64, error -71 [ 782.774057][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 782.883923][ T5791] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 782.985761][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 782.996736][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.009656][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.016383][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 783.025600][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.037012][ T9] usb 1-1: config 0 descriptor?? [ 783.042857][T12257] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 783.053181][ T5791] usb 4-1: device descriptor read/64, error -71 [ 783.140836][T12271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2053'. [ 783.173162][T12271] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 783.184592][ T5791] usb usb4-port1: attempt power cycle [ 783.473478][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 783.483274][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 783.502202][ T9] usb 1-1: USB disconnect, device number 30 [ 783.604198][ T5791] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 783.648262][ T5791] usb 4-1: device descriptor read/8, error -71 [ 783.934197][ T5791] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 783.990264][ T5791] usb 4-1: device descriptor read/8, error -71 [ 784.126178][ T5791] usb usb4-port1: unable to enumerate USB device [ 784.136417][T12304] fuse: Bad value for 'fd' [ 784.333930][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 784.483937][ T9] usb 1-1: device descriptor read/64, error -71 [ 784.757353][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 784.934034][ T9] usb 1-1: device descriptor read/64, error -71 [ 785.039340][T12318] loop1: detected capacity change from 0 to 512 [ 785.058030][ T9] usb usb1-port1: attempt power cycle [ 785.078807][T12318] EXT4-fs error (device loop1): __ext4_iget:5117: inode #2: block 131072: comm syz.1.2072: invalid block [ 785.109382][T12318] EXT4-fs (loop1): get root inode failed [ 785.126140][T12318] EXT4-fs (loop1): mount failed [ 785.386379][T12326] loop1: detected capacity change from 0 to 2048 [ 785.529464][T12326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.542321][T12326] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.043609][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.094122][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 786.136053][ T9] usb 1-1: device descriptor read/8, error -71 [ 786.185438][ T5791] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 786.283906][ T1211] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 786.299324][T12337] loop1: detected capacity change from 0 to 4096 [ 786.307600][T12337] EXT4-fs: Ignoring removed orlov option [ 786.330813][T12337] EXT4-fs (loop1): Test dummy encryption mode enabled [ 786.354606][T12337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.379541][ T5791] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 786.390803][ T5791] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.404426][ T5791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 786.411208][ T5791] usb 5-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 786.420520][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 786.428854][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.440255][ T5791] usb 5-1: config 0 descriptor?? [ 786.446524][T12322] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 786.475141][ T9] usb 1-1: device descriptor read/8, error -71 [ 786.485110][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 786.506425][ T1211] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 786.533935][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0 [ 786.540702][ T1211] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 786.578055][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.596852][ T9] usb usb1-port1: unable to enumerate USB device [ 786.619545][ T1211] usb 4-1: config 0 descriptor?? [ 786.859735][T12337] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 786.884794][ T5791] usbhid 5-1:0.0: can't add hid device: -71 [ 786.895868][ T5791] usbhid: probe of 5-1:0.0 failed with error -71 [ 786.916893][ T5791] usb 5-1: USB disconnect, device number 42 [ 787.054357][ T1211] usbhid 4-1:0.0: can't add hid device: -71 [ 787.060477][ T1211] usbhid: probe of 4-1:0.0 failed with error -71 [ 787.094271][ T1211] usb 4-1: USB disconnect, device number 34 [ 787.452156][T12348] fuse: Unknown parameter '0x0000000000000003' [ 787.573979][ T23] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 787.638610][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.757624][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.774738][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 787.784259][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 787.793538][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.815349][ T23] usb 1-1: config 0 descriptor?? [ 788.273263][ T23] usb 1-1: USB disconnect, device number 35 [ 788.936018][T12364] loop4: detected capacity change from 0 to 2048 [ 788.991116][T12364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 789.063126][T12370] loop1: detected capacity change from 0 to 512 [ 789.162287][T12370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.175254][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 789.183884][T12370] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.360031][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.377839][ T9] usb 1-1: device descriptor read/64, error -71 [ 789.384258][ T5791] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 789.564139][ T5791] usb 4-1: Using ep0 maxpacket: 32 [ 789.581584][ T5791] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 789.610407][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 789.627659][ T5791] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 789.653893][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.664200][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 789.695496][ T5791] usb 4-1: config 0 descriptor?? [ 789.856023][T12388] xt_TCPMSS: Only works on TCP SYN packets [ 789.911655][ T9] usb 1-1: device descriptor read/64, error -71 [ 790.175622][ T9] usb usb1-port1: attempt power cycle [ 790.370297][ T5791] usbhid 4-1:0.0: can't add hid device: -71 [ 790.382992][ T5791] usbhid: probe of 4-1:0.0 failed with error -71 [ 790.398148][ T5791] usb 4-1: USB disconnect, device number 35 [ 790.653948][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 790.699160][ T9] usb 1-1: device descriptor read/8, error -71 [ 790.843935][ T23] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 790.974067][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 791.015845][ T9] usb 1-1: device descriptor read/8, error -71 [ 791.029720][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.040126][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 791.049228][ T23] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 791.058635][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.068856][ T23] usb 5-1: config 0 descriptor?? [ 791.145820][ T9] usb usb1-port1: unable to enumerate USB device [ 791.236698][T12401] loop3: detected capacity change from 0 to 1024 [ 791.255167][T12401] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 791.295292][ T9] usb 5-1: USB disconnect, device number 43 [ 791.296985][T12401] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.2099: lblock 2 mapped to illegal pblock 2 (length 1) [ 791.327455][T12401] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 791.337885][T12401] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.2099: lblock 0 mapped to illegal pblock 48 (length 1) [ 791.353848][T12401] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 791.366620][T12401] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.2099: Failed to acquire dquot type 0 [ 791.379141][T12401] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 791.394581][T12401] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2099: mark_inode_dirty error [ 791.406390][T12401] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 791.417232][T12401] EXT4-fs (loop3): 1 orphan inode deleted [ 791.431185][T12401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.454241][ T5949] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 791.471361][ T5949] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 791.481961][ T5949] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0 [ 791.518179][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.527623][ T5949] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 791.545966][ T5949] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 791.554604][ T5949] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0 [ 791.570175][ T5785] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 791.588404][ T5785] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 791.598478][ T5785] EXT4-fs error (device loop3): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error [ 792.215547][T12416] loop0: detected capacity change from 0 to 1164 [ 792.990017][T10508] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 793.251680][T12423] netlink: 'syz.4.2106': attribute type 2 has an invalid length. [ 793.261460][T12423] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 793.477080][T12429] fuse: Unknown parameter '0x0000000000000003' [ 794.313285][T12444] loop3: detected capacity change from 0 to 256 [ 794.322103][T12445] loop0: detected capacity change from 0 to 512 [ 794.383320][T12444] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 794.418544][T12445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.431082][ T28] audit: type=1800 audit(1793640226.613:147): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2114" name="file1" dev="loop3" ino=1048633 res=0 errno=0 [ 794.455774][ T9] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 794.459647][T12445] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.524008][ T5864] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 794.571522][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.664120][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.682919][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 794.692944][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 794.706449][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.734700][ T9] usb 5-1: config 0 descriptor?? [ 794.745580][ T5864] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 794.759518][ T5864] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 794.773395][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 794.788978][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 794.798700][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 794.811975][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.826645][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 794.840005][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 794.848356][ T9] usb 5-1: media controller created [ 794.855252][ T5864] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 794.872053][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.880691][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 794.892112][ T5864] usb 2-1: Product: syz [ 794.903829][ T5864] usb 2-1: Manufacturer: syz [ 794.910753][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 794.926713][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 794.935000][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 794.940268][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 794.946682][ T5864] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 794.976556][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 795.016196][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 795.023300][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 795.055792][ T9] usb 5-1: USB disconnect, device number 44 [ 795.091859][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 795.150896][ T5864] usb 2-1: USB disconnect, device number 35 [ 796.014079][T12469] hub 5-0:1.0: USB hub found [ 796.024085][T12469] hub 5-0:1.0: 1 port detected [ 796.667586][T12473] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 796.726560][T12473] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 796.756751][T12476] loop4: detected capacity change from 0 to 512 [ 796.840931][T12475] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.2123: Invalid inode table block 0 in block_group 0 [ 796.849170][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 796.870897][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 796.882090][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 796.888581][T12476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.906452][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 796.919537][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 796.929090][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 796.941376][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 796.954561][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 796.964355][T12475] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 796.994510][T12476] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.225539][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.644275][ T23] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 797.673954][ T1211] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 797.826892][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.837174][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 797.846255][ T23] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 797.856235][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.866903][ T1211] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.876344][ T23] usb 5-1: config 0 descriptor?? [ 797.881657][ T1211] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 797.892629][ T5851] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 797.900975][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.913198][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 797.920316][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 797.926778][ T1211] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.944151][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 797.952759][ T1211] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 797.962154][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 797.970953][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 797.978325][ T23] usb 5-1: media controller created [ 797.984162][ T1211] usb 2-1: Product: syz [ 797.988389][ T1211] usb 2-1: Manufacturer: syz [ 798.006672][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.027602][ T1211] cdc_wdm 2-1:1.0: skipping garbage [ 798.035844][ T1211] cdc_wdm 2-1:1.0: skipping garbage [ 798.041144][ T1211] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 798.049666][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 798.063384][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 798.084436][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 798.114257][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 798.131942][ T5851] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 798.144520][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 798.158524][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0 [ 798.165626][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 798.173871][ T5851] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 798.183168][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.196484][ T23] usb 5-1: USB disconnect, device number 45 [ 798.208842][ T5851] usb 4-1: config 0 descriptor?? [ 798.271763][ T1211] usb 2-1: USB disconnect, device number 36 [ 798.288070][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 798.381064][T12508] overlayfs: failed to resolve './file1': -2 [ 798.454545][T12510] loop0: detected capacity change from 0 to 512 [ 798.496840][T12510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.514398][T12510] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.611002][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.632368][ T5851] usbhid 4-1:0.0: can't add hid device: -71 [ 798.648769][ T5851] usbhid: probe of 4-1:0.0 failed with error -71 [ 798.674219][ T5851] usb 4-1: USB disconnect, device number 36 [ 798.874721][T12518] loop4: detected capacity change from 0 to 4096 [ 798.882489][T12518] EXT4-fs: Ignoring removed orlov option [ 798.899629][T12518] EXT4-fs (loop4): Test dummy encryption mode enabled [ 798.916054][T12518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.995914][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 799.165921][ T9] usb 1-1: device descriptor read/64, error -71 [ 799.195887][T12528] loop3: detected capacity change from 0 to 256 [ 799.218577][T12528] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 799.240558][ T28] audit: type=1800 audit(1793640231.433:148): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2143" name="file1" dev="loop3" ino=1048634 res=0 errno=0 [ 799.463964][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 799.623956][ T9] usb 1-1: device descriptor read/64, error -71 [ 799.647922][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.754992][ T9] usb usb1-port1: attempt power cycle [ 799.786945][ T5851] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 800.029248][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.073178][ T5851] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 800.121945][ T5851] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 800.168962][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.351759][ T5851] usb 4-1: config 0 descriptor?? [ 800.496248][ T5851] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 800.576641][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 800.779145][ T5851] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 800.818000][ T5851] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 800.844203][ T5851] usb 4-1: media controller created [ 800.850933][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.879717][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 800.894087][ T5864] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 800.899889][ T5851] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 800.913561][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 800.954394][ T5851] dvb-usb: schedule remote query interval to 150 msecs. [ 800.961501][ T5851] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 800.991372][ T5851] usb 4-1: USB disconnect, device number 37 [ 801.035133][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 801.103903][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 801.125849][ T5864] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 801.134948][ T5864] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 801.145527][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 801.154877][ T9] usb 1-1: device descriptor read/8, error -71 [ 801.161400][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.176285][ T5864] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 801.185848][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 801.194000][ T5864] usb 2-1: Product: syz [ 801.198340][ T5864] usb 2-1: Manufacturer: syz [ 801.210955][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 801.216790][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 801.222257][ T5864] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 801.425069][ T5851] usb 2-1: USB disconnect, device number 37 [ 801.434630][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 801.477619][ T9] usb 1-1: device descriptor read/8, error -71 [ 801.616195][ T9] usb usb1-port1: unable to enumerate USB device [ 801.850117][T12562] EXT4-fs error: 302 callbacks suppressed [ 801.850159][T12562] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2158: Invalid inode table block 0 in block_group 0 [ 801.869348][T12562] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 801.878828][T12562] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2158: mark_inode_dirty error [ 801.891083][T12562] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2158: Invalid inode table block 0 in block_group 0 [ 801.903843][T12562] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 801.913222][T12562] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2158: mark_inode_dirty error [ 801.926146][T12562] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2158: Invalid inode table block 0 in block_group 0 [ 801.938844][T12562] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 801.948314][T12562] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2158: mark_inode_dirty error [ 801.966811][T12562] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2158: Invalid inode table block 0 in block_group 0 [ 802.074275][ T5851] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 802.374276][ T5851] usb 4-1: device descriptor read/64, error -71 [ 803.133946][ T5851] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 803.286252][T12581] loop4: detected capacity change from 0 to 128 [ 803.345807][T12581] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 803.873824][ T23] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 803.944943][ T5851] usb 4-1: device descriptor read/64, error -71 [ 803.963098][T12583] loop0: detected capacity change from 0 to 256 [ 803.976723][T12583] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.153382][ T5851] usb usb4-port1: attempt power cycle [ 804.162375][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.172943][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 804.181998][ T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 804.191391][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.205558][ T23] usb 2-1: config 0 descriptor?? [ 804.236361][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 804.243175][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 804.264392][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 804.280999][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 804.290495][ T23] usb 2-1: media controller created [ 804.304277][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.324602][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 804.330482][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 804.347850][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 804.374634][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 804.381689][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 804.434232][ T23] usb 2-1: USB disconnect, device number 38 [ 804.461474][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 804.594036][ T5851] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 804.624789][ T5851] usb 4-1: device descriptor read/8, error -71 [ 805.187961][T12597] hub 5-0:1.0: USB hub found [ 805.193876][T12597] hub 5-0:1.0: 1 port detected [ 805.566652][ T23] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 805.943868][ T23] usb 5-1: device descriptor read/64, error -71 [ 806.216717][ T23] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 806.384140][ T23] usb 5-1: device descriptor read/64, error -71 [ 806.496168][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 806.504130][ T23] usb usb5-port1: attempt power cycle [ 806.593892][ T5851] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 806.664044][ T9] usb 4-1: device descriptor read/64, error -71 [ 806.778922][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.789478][ T5851] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 806.798763][ T5851] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 806.808091][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.818769][ T5851] usb 2-1: config 0 descriptor?? [ 806.827880][ T5851] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 806.834628][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 806.844185][ T5851] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 806.853545][ T5851] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 806.866400][ T5851] usb 2-1: media controller created [ 806.874190][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 806.887973][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 806.901340][ T5851] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 806.911063][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 806.922599][ T23] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 806.934300][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 806.949144][ T5851] dvb-usb: schedule remote query interval to 150 msecs. [ 806.956385][ T5851] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 806.966337][ T23] usb 5-1: device descriptor read/8, error -71 [ 807.028793][T12613] EXT4-fs error: 201 callbacks suppressed [ 807.028808][T12613] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.1.2178: Invalid inode table block 0 in block_group 0 [ 807.048307][T12613] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 807.058157][T12613] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2030: comm syz.1.2178: mark_inode_dirty error [ 807.076511][ T5791] usb 2-1: USB disconnect, device number 39 [ 807.093977][ T9] usb 4-1: device descriptor read/64, error -71 [ 807.108925][ T5791] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 807.224269][ T9] usb usb4-port1: attempt power cycle [ 807.236512][ T23] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 807.289879][ T23] usb 5-1: device descriptor read/8, error -71 [ 807.325866][T12615] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2179: Invalid inode table block 0 in block_group 0 [ 807.341842][T12615] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 807.352589][T12615] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2179: mark_inode_dirty error [ 807.368322][T12615] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2179: Invalid inode table block 0 in block_group 0 [ 807.382115][T12615] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 807.391857][T12615] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2179: mark_inode_dirty error [ 807.414093][ T23] usb usb5-port1: unable to enumerate USB device [ 807.505666][T12615] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2179: Invalid inode table block 0 in block_group 0 [ 807.653994][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 807.678024][T12622] loop1: detected capacity change from 0 to 512 [ 807.698313][ T9] usb 4-1: device descriptor read/8, error -71 [ 807.715190][T12622] EXT4-fs error (device loop1): __ext4_iget:5117: inode #2: block 131072: comm syz.1.2182: invalid block [ 807.745052][T12622] EXT4-fs (loop1): get root inode failed [ 807.750908][T12622] EXT4-fs (loop1): mount failed [ 807.827656][ T2888] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 995 with max blocks 8 with error 117 [ 807.841226][ T2888] EXT4-fs (sda1): This should not happen!! Data will be lost [ 807.841226][ T2888] [ 807.997221][T12628] loop1: detected capacity change from 0 to 2048 [ 808.241061][T12628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.253898][T12628] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.665628][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.726961][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 808.785993][ T9] usb 4-1: device descriptor read/8, error -71 [ 808.868468][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.874905][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.954131][ T9] usb usb4-port1: unable to enumerate USB device [ 809.989042][T12659] loop3: detected capacity change from 0 to 512 [ 809.997065][T12661] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 810.006051][T12659] EXT4-fs error (device loop3): __ext4_iget:5117: inode #2: block 131072: comm syz.3.2195: invalid block [ 810.018169][T12659] EXT4-fs (loop3): get root inode failed [ 810.024525][T12659] EXT4-fs (loop3): mount failed [ 810.056248][T12661] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 810.074235][ T23] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 810.256201][T12664] loop3: detected capacity change from 0 to 2048 [ 810.390149][T12664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.402797][T12664] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.942860][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.983682][T12671] netlink: 'syz.0.2197': attribute type 1 has an invalid length. [ 811.046035][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.062497][T12671] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 811.071262][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 811.080882][ T23] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 811.090089][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.101477][ T23] usb 5-1: config 0 descriptor?? [ 811.112520][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 811.119678][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 811.131761][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 811.141989][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 811.160643][ T23] usb 5-1: media controller created [ 811.172890][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 811.202471][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 811.222337][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 811.236383][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 811.265263][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 811.272423][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 811.367701][ T23] usb 5-1: USB disconnect, device number 50 [ 812.015744][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 812.164599][T12677] EXT4-fs error: 227 callbacks suppressed [ 812.164619][T12677] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.2200: Invalid inode table block 0 in block_group 0 [ 812.183123][T12677] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 812.192571][T12677] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2035: comm syz.3.2200: mark_inode_dirty error [ 812.205524][T12677] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.2200: Invalid inode table block 0 in block_group 0 [ 812.218364][T12677] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 812.227755][T12677] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2035: comm syz.3.2200: mark_inode_dirty error [ 812.312678][T12684] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.2202: Invalid inode table block 0 in block_group 0 [ 812.334383][T12684] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 812.344059][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 812.352218][T12684] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.2202: mark_inode_dirty error [ 812.376634][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 812.392756][ T9] usb 2-1: no configurations [ 812.397896][ T9] usb 2-1: can't read configurations, error -22 [ 812.426607][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 812.482251][T12689] loop3: detected capacity change from 0 to 1024 [ 812.494736][T12689] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.516436][T12689] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 812.563267][T12689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.585982][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 812.665350][T12695] fuse: Bad value for 'fd' [ 812.773865][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 812.804812][ T9] usb 2-1: no configurations [ 812.809503][ T9] usb 2-1: can't read configurations, error -22 [ 812.844040][ T3465] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 996 with max blocks 9 with error 117 [ 813.041268][ T3465] EXT4-fs (sda1): This should not happen!! Data will be lost [ 813.041268][ T3465] [ 813.242184][ T3465] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 995 with max blocks 8 with error 117 [ 813.530045][ T3465] EXT4-fs (sda1): This should not happen!! Data will be lost [ 813.530045][ T3465] [ 813.675802][ T9] usb usb2-port1: attempt power cycle [ 813.708793][ T3465] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1475 with max blocks 22 with error 117 [ 813.722925][ T3465] EXT4-fs (sda1): This should not happen!! Data will be lost [ 813.722925][ T3465] [ 813.882950][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.983959][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 814.089109][T12714] loop0: detected capacity change from 0 to 512 [ 814.115778][T12714] EXT4-fs (loop0): orphan cleanup on readonly fs [ 814.126640][T12714] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2212: ea_inode with extended attributes [ 814.142171][T12714] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2212: error while reading EA inode 11 err=-117 [ 814.157015][T12714] EXT4-fs (loop0): 1 orphan inode deleted [ 814.164752][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 814.168361][T12714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 814.195417][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 814.201462][ T9] usb 2-1: no configurations [ 814.210189][ T9] usb 2-1: can't read configurations, error -22 [ 814.232226][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.263911][ T9729] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 814.314203][ T5864] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 814.357745][T12719] fuse: Invalid rootmode [ 814.373997][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 814.409124][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 814.415367][ T9] usb 2-1: no configurations [ 814.420224][ T9] usb 2-1: can't read configurations, error -22 [ 814.427267][ T9] usb usb2-port1: unable to enumerate USB device [ 814.456642][ T9729] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 814.474239][ T9729] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.488023][ T9729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 814.495318][ T9729] usb 4-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 814.504709][ T9729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.517344][ T9729] usb 4-1: config 0 descriptor?? [ 814.523242][T12708] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 814.538054][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.558979][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 814.570379][T12723] loop0: detected capacity change from 0 to 512 [ 814.594135][ T5864] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 814.609732][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.619998][T12723] EXT4-fs error (device loop0): __ext4_iget:5117: inode #2: block 131072: comm syz.0.2216: invalid block [ 814.633611][ T5864] usb 5-1: config 0 descriptor?? [ 814.645610][ T5864] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 814.652970][ T5864] dvb-usb: bulk message failed: -22 (3/0) [ 814.677467][ T5864] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 814.687608][ T5864] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 814.695650][ T5864] usb 5-1: media controller created [ 814.707521][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.729460][T12723] EXT4-fs (loop0): get root inode failed [ 814.731295][ T5864] dvb-usb: bulk message failed: -22 (6/0) [ 814.751894][ T5864] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 814.773246][T12723] EXT4-fs (loop0): mount failed [ 814.790422][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 814.833253][ T5864] dvb-usb: schedule remote query interval to 150 msecs. [ 814.864692][ T5864] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 815.142466][ T9729] usbhid 4-1:0.0: can't add hid device: -71 [ 815.167925][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 815.196871][ T9729] usbhid: probe of 4-1:0.0 failed with error -71 [ 815.247916][ T9] dvb-usb: error while querying for an remote control event. [ 815.315099][ T5864] usb 5-1: USB disconnect, device number 51 [ 815.415246][ T9729] usb 4-1: USB disconnect, device number 46 [ 815.653288][ T5864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 815.901802][T12741] loop4: detected capacity change from 0 to 512 [ 815.938894][T12741] EXT4-fs error (device loop4): __ext4_iget:5117: inode #2: block 131072: comm syz.4.2221: invalid block [ 815.997624][T12741] EXT4-fs (loop4): get root inode failed [ 816.003404][T12741] EXT4-fs (loop4): mount failed [ 816.253406][T12747] loop4: detected capacity change from 0 to 2048 [ 816.375345][T12747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.388027][T12747] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.931483][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.074087][T12752] fuse: Invalid rootmode [ 817.178684][T12753] EXT4-fs error: 413 callbacks suppressed [ 817.178702][T12753] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.2224: Invalid inode table block 0 in block_group 0 [ 817.200649][T12753] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 817.222691][T12753] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.2224: mark_inode_dirty error [ 817.238511][T12753] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.2224: Invalid inode table block 0 in block_group 0 [ 817.250657][T12756] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2226: Invalid inode table block 0 in block_group 0 [ 817.253596][T12753] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 817.274097][T12753] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.2224: mark_inode_dirty error [ 817.284157][T12756] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 817.299847][T12756] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2226: mark_inode_dirty error [ 817.317024][T12756] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2226: Invalid inode table block 0 in block_group 0 [ 817.653941][T12762] xt_TCPMSS: Only works on TCP SYN packets [ 818.744688][ T5864] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 819.157202][T12777] loop4: detected capacity change from 0 to 128 [ 819.722156][T12777] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 819.893938][ T5851] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 820.043868][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 820.050028][ T5864] usb 4-1: no configurations [ 820.055046][ T5864] usb 4-1: can't read configurations, error -22 [ 820.106262][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.119913][ T5851] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 820.129987][ T5851] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 820.141935][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.164525][ T5851] usb 1-1: config 0 descriptor?? [ 820.204105][ T5864] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 820.304958][ T5851] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 820.312049][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 820.322721][ T5851] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 820.332070][ T5851] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 820.342125][ T5851] usb 1-1: media controller created [ 820.362684][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 820.387053][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 820.401988][ T5851] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 820.420071][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 820.458733][ T5851] dvb-usb: schedule remote query interval to 150 msecs. [ 820.479054][T12785] fuse: Invalid rootmode [ 820.483498][ T5851] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 820.526249][ T5851] usb 1-1: USB disconnect, device number 44 [ 820.573144][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 821.984210][ T1211] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 822.234394][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 822.281595][ T1211] usb 1-1: no configurations [ 822.344447][ T1211] usb 1-1: can't read configurations, error -22 [ 822.602345][T12807] EXT4-fs error: 157 callbacks suppressed [ 822.602357][T12807] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.1.2242: Invalid inode table block 0 in block_group 0 [ 822.634198][ T1211] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 822.635161][T12807] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 822.655352][T12807] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2030: comm syz.1.2242: mark_inode_dirty error [ 822.667692][ T5864] usb 4-1: device descriptor read/64, error -71 [ 822.684602][T12809] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2243: Invalid inode table block 0 in block_group 0 [ 822.684626][T12808] loop1: detected capacity change from 0 to 512 [ 822.703988][T12809] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 822.734095][T12809] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2243: mark_inode_dirty error [ 822.751740][T12809] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2243: Invalid inode table block 0 in block_group 0 [ 822.769478][T12809] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 822.782820][T12809] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2243: mark_inode_dirty error [ 822.796351][T12808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.813442][ T5864] usb usb4-port1: attempt power cycle [ 822.833878][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 822.839433][T12808] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.841500][ T1211] usb 1-1: no configurations [ 822.875956][T12807] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.1.2242: Invalid inode table block 0 in block_group 0 [ 823.027567][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.074100][ T1211] usb 1-1: can't read configurations, error -22 [ 823.081348][ T1211] usb usb1-port1: attempt power cycle [ 823.264031][ T5864] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 823.323813][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 823.397464][ T5864] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 823.508202][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 823.603946][ T5864] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 823.629917][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.646384][ T5864] usb 4-1: config 0 descriptor?? [ 824.144146][ T1211] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 824.237976][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 824.327276][ T1211] usb 1-1: no configurations [ 824.369168][ T1211] usb 1-1: can't read configurations, error -22 [ 824.584091][ T1211] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 824.698699][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 824.887874][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 824.894225][ T5864] usbhid: probe of 4-1:0.0 failed with error -71 [ 824.904330][ T5864] usb 4-1: USB disconnect, device number 49 [ 825.033840][ T9729] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 825.043417][ T1211] usb 1-1: device descriptor read/all, error -71 [ 825.072563][ T1211] usb usb1-port1: unable to enumerate USB device [ 825.109980][T12831] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.2249' sets config #-1 [ 825.136448][T12831] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.2249' sets config #1 [ 826.106024][ T9729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.116438][ T9729] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 826.125860][ T9729] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 826.135310][ T9729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.158916][ T9729] usb 2-1: config 0 descriptor?? [ 826.181036][ T9729] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 826.198547][T12840] loop4: detected capacity change from 0 to 512 [ 826.212069][ T9729] dvb-usb: bulk message failed: -22 (3/0) [ 826.243600][ T9729] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 826.273952][ T9729] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 826.281186][ T9729] usb 2-1: media controller created [ 826.301589][T12840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.343417][ T9729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.364861][T12840] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.419298][ T9729] dvb-usb: bulk message failed: -22 (6/0) [ 826.440207][ T9729] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 826.487775][ T9729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 826.521314][ T9729] dvb-usb: schedule remote query interval to 150 msecs. [ 826.544620][ T9729] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 826.583620][ T9729] usb 2-1: USB disconnect, device number 44 [ 827.587986][ T9729] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 827.604539][T12853] EXT4-fs error: 134 callbacks suppressed [ 827.604553][T12853] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.2257: Invalid inode table block 0 in block_group 0 [ 827.623650][T12853] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 827.633589][T12853] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.2257: mark_inode_dirty error [ 827.675519][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.692961][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 827.728945][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 827.759366][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz-executor: mark_inode_dirty error [ 827.775458][T12855] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.2258: Invalid inode table block 0 in block_group 0 [ 827.779303][T12856] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.1.2259: Invalid inode table block 0 in block_group 0 [ 827.794571][T12855] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 827.839726][T12856] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 827.926421][T12862] FAULT_INJECTION: forcing a failure. [ 827.926421][T12862] name fail_futex, interval 1, probability 0, space 0, times 1 [ 827.939545][T12862] CPU: 0 PID: 12862 Comm: syz.4.2256 Not tainted syzkaller #0 [ 827.947150][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 827.957278][T12862] Call Trace: [ 827.960577][T12862] [ 827.963543][T12862] dump_stack_lvl+0x18c/0x250 [ 827.968274][T12862] ? show_regs_print_info+0x20/0x20 [ 827.973547][T12862] ? load_image+0x420/0x420 [ 827.978095][T12862] ? __might_fault+0xaa/0x120 [ 827.982850][T12862] should_fail_ex+0x394/0x4c0 [ 827.987621][T12862] get_futex_key+0x134/0xf40 [ 827.992272][T12862] ? futex_setup_timer+0xc0/0xc0 [ 827.997262][T12862] futex_wake+0x127/0x4f0 [ 828.001617][T12862] ? futex_wake_mark+0x150/0x150 [ 828.006588][T12862] ? __lock_acquire+0x7eb0/0x7eb0 [ 828.011701][T12862] ? file_end_write+0x159/0x250 [ 828.016603][T12862] ? vfs_write+0x5de/0x9a0 [ 828.021047][T12862] do_futex+0x35d/0x3e0 [ 828.025249][T12862] ? __ia32_sys_get_robust_list+0x110/0x110 [ 828.031204][T12862] __se_sys_futex+0x3a9/0x440 [ 828.035938][T12862] ? __x64_sys_futex+0xf0/0xf0 [ 828.040758][T12862] ? __x64_sys_futex+0x21/0xf0 [ 828.045573][T12862] do_syscall_64+0x55/0xb0 [ 828.050043][T12862] ? clear_bhb_loop+0x40/0x90 [ 828.054791][T12862] ? clear_bhb_loop+0x40/0x90 [ 828.059555][T12862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.065571][T12862] RIP: 0033:0x7fa09939fb19 [ 828.070041][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.089806][T12862] RSP: 002b:00007fa0975f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 828.098309][T12862] RAX: ffffffffffffffda RBX: 00007fa099625fa8 RCX: 00007fa09939fb19 [ 828.106334][T12862] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa099625fac [ 828.114353][T12862] RBP: 00007fa099625fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 828.122445][T12862] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 828.130463][T12862] R13: 00007fa099626038 R14: 00007ffda32a3380 R15: 00007ffda32a3468 [ 828.138518][T12862] [ 828.294584][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 829.083667][ T9729] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 829.130496][ T5864] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 829.313994][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 829.319334][ T9729] usb 4-1: Using ep0 maxpacket: 32 [ 829.331007][ T5864] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 829.341728][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.353340][ T9729] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 829.365554][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.375845][ T9729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 829.382515][ T9729] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 829.392039][ T5864] usb 1-1: config 0 has no interface number 0 [ 829.398483][ T9] usb 2-1: config 0 has no interfaces? [ 829.404569][ T5864] usb 1-1: config 0 interface 233 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 829.418087][ T9729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.428906][ T5864] usb 1-1: config 0 interface 233 has no altsetting 0 [ 829.437939][ T5864] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 829.449245][ T9729] usb 4-1: config 0 descriptor?? [ 829.454443][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 829.463544][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.472796][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.482467][ T9] usb 2-1: Product: syz [ 829.493239][ T5864] usb 1-1: config 0 descriptor?? [ 829.498584][ T9] usb 2-1: Manufacturer: syz [ 829.503315][ T9] usb 2-1: SerialNumber: syz [ 829.522675][ T9] usb 2-1: config 0 descriptor?? [ 829.530995][ T5864] usbhid 1-1:0.233: couldn't find an input interrupt endpoint [ 829.891634][ T9729] usbhid 4-1:0.0: can't add hid device: -71 [ 829.899359][ T9729] usbhid: probe of 4-1:0.0 failed with error -71 [ 830.805023][ T9729] usb 4-1: USB disconnect, device number 50 [ 830.856626][ T23] usb 2-1: USB disconnect, device number 45 [ 830.929194][ T5851] usb 1-1: USB disconnect, device number 49 [ 830.976408][T12890] FAULT_INJECTION: forcing a failure. [ 830.976408][T12890] name fail_futex, interval 1, probability 0, space 0, times 0 [ 830.990055][T12890] CPU: 0 PID: 12890 Comm: syz.1.2269 Not tainted syzkaller #0 [ 830.997577][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 831.007672][T12890] Call Trace: [ 831.010989][T12890] [ 831.013958][T12890] dump_stack_lvl+0x18c/0x250 [ 831.018690][T12890] ? show_regs_print_info+0x20/0x20 [ 831.023936][T12890] ? load_image+0x420/0x420 [ 831.028525][T12890] ? __might_fault+0xaa/0x120 [ 831.033248][T12890] should_fail_ex+0x394/0x4c0 [ 831.037986][T12890] get_futex_key+0x134/0xf40 [ 831.042619][T12890] ? futex_setup_timer+0xc0/0xc0 [ 831.047639][T12890] futex_wake+0x127/0x4f0 [ 831.052012][T12890] ? futex_wake_mark+0x150/0x150 [ 831.056991][T12890] ? __lock_acquire+0x7eb0/0x7eb0 [ 831.062048][T12890] ? file_end_write+0x159/0x250 [ 831.066944][T12890] ? vfs_write+0x5de/0x9a0 [ 831.071413][T12890] do_futex+0x35d/0x3e0 [ 831.075606][T12890] ? __ia32_sys_get_robust_list+0x110/0x110 [ 831.081535][T12890] __se_sys_futex+0x3a9/0x440 [ 831.086264][T12890] ? __x64_sys_futex+0xf0/0xf0 [ 831.091080][T12890] ? __x64_sys_futex+0x21/0xf0 [ 831.095886][T12890] do_syscall_64+0x55/0xb0 [ 831.100361][T12890] ? clear_bhb_loop+0x40/0x90 [ 831.105090][T12890] ? clear_bhb_loop+0x40/0x90 [ 831.109812][T12890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.115762][T12890] RIP: 0033:0x7f722919fb19 [ 831.120230][T12890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.139882][T12890] RSP: 002b:00007f7229f9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 831.148352][T12890] RAX: ffffffffffffffda RBX: 00007f7229425fa8 RCX: 00007f722919fb19 [ 831.156361][T12890] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7229425fac [ 831.164361][T12890] RBP: 00007f7229425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 831.172354][T12890] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 831.180376][T12890] R13: 00007f7229426038 R14: 00007ffd1ce4b470 R15: 00007ffd1ce4b558 [ 831.188433][T12890] [ 831.391959][T12897] loop0: detected capacity change from 0 to 1024 [ 831.426047][T12897] EXT4-fs: Ignoring removed mblk_io_submit option [ 831.433713][T12897] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 831.460585][T12897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.502289][ T3465] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1451 with max blocks 25 with error 117 [ 831.506696][ T9729] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 831.516535][ T3465] EXT4-fs (sda1): This should not happen!! Data will be lost [ 831.516535][ T3465] [ 831.606733][ T3465] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 991 with max blocks 11 with error 117 [ 831.660553][ T3465] EXT4-fs (sda1): This should not happen!! Data will be lost [ 831.660553][ T3465] [ 831.719522][ T9729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.730019][ T9729] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 831.742829][ T9729] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 831.752805][ T9729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.779900][ T9729] usb 4-1: config 0 descriptor?? [ 831.798508][ T9729] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 831.811687][ T9729] dvb-usb: bulk message failed: -22 (3/0) [ 831.848891][ T9729] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 831.870799][ T9729] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 831.894870][ T9729] usb 4-1: media controller created [ 831.912515][ T9729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.938521][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.978800][ T9729] dvb-usb: bulk message failed: -22 (6/0) [ 831.993515][ T9729] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 832.031245][ T9729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 832.100469][ T9729] dvb-usb: schedule remote query interval to 150 msecs. [ 832.110345][ T9729] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 832.661559][T12914] loop4: detected capacity change from 0 to 512 [ 832.954083][ T5773] EXT4-fs error: 208 callbacks suppressed [ 832.954102][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 832.977892][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 832.983695][ T9] dvb-usb: error while querying for an remote control event. [ 832.995834][ T9729] usb 4-1: USB disconnect, device number 51 [ 833.010407][T12914] EXT4-fs error (device loop4): __ext4_iget:5117: inode #2: block 131072: comm syz.4.2278: invalid block [ 833.044539][T12914] EXT4-fs (loop4): get root inode failed [ 833.050259][T12914] EXT4-fs (loop4): mount failed [ 833.071523][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 833.096353][ T9729] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 833.108929][T12913] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2278: Invalid inode table block 0 in block_group 0 [ 833.124827][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2035: comm syz-executor: mark_inode_dirty error [ 833.139537][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 833.158452][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 833.168864][T12913] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 833.194452][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2035: comm syz-executor: mark_inode_dirty error [ 833.215733][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 833.216583][T12913] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2278: mark_inode_dirty error [ 833.344938][T12922] FAULT_INJECTION: forcing a failure. [ 833.344938][T12922] name fail_futex, interval 1, probability 0, space 0, times 0 [ 833.373930][T12922] CPU: 0 PID: 12922 Comm: syz.3.2279 Not tainted syzkaller #0 [ 833.381478][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 833.391587][T12922] Call Trace: [ 833.394917][T12922] [ 833.397935][T12922] dump_stack_lvl+0x18c/0x250 [ 833.402679][T12922] ? show_regs_print_info+0x20/0x20 [ 833.407971][T12922] ? load_image+0x420/0x420 [ 833.412545][T12922] ? __might_fault+0xaa/0x120 [ 833.417299][T12922] should_fail_ex+0x394/0x4c0 [ 833.422042][T12922] get_futex_key+0x134/0xf40 [ 833.426687][T12922] ? futex_setup_timer+0xc0/0xc0 [ 833.431680][T12922] futex_wake+0x127/0x4f0 [ 833.436080][T12922] ? futex_wake_mark+0x150/0x150 [ 833.441084][T12922] ? __lock_acquire+0x7eb0/0x7eb0 [ 833.446160][T12922] ? file_end_write+0x159/0x250 [ 833.451084][T12922] ? vfs_write+0x5de/0x9a0 [ 833.455561][T12922] do_futex+0x35d/0x3e0 [ 833.459800][T12922] ? __ia32_sys_get_robust_list+0x110/0x110 [ 833.465753][T12922] __se_sys_futex+0x3a9/0x440 [ 833.470508][T12922] ? __x64_sys_futex+0xf0/0xf0 [ 833.475319][T12922] ? __x64_sys_futex+0x21/0xf0 [ 833.480121][T12922] do_syscall_64+0x55/0xb0 [ 833.484624][T12922] ? clear_bhb_loop+0x40/0x90 [ 833.489344][T12922] ? clear_bhb_loop+0x40/0x90 [ 833.494068][T12922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.499998][T12922] RIP: 0033:0x7f666579fb19 [ 833.504447][T12922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.524081][T12922] RSP: 002b:00007f666663a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 833.532523][T12922] RAX: ffffffffffffffda RBX: 00007f6665a25fa8 RCX: 00007f666579fb19 [ 833.540533][T12922] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6665a25fac [ 833.548533][T12922] RBP: 00007f6665a25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 833.556535][T12922] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 833.564531][T12922] R13: 00007f6665a26038 R14: 00007ffc1c8af010 R15: 00007ffc1c8af0f8 [ 833.572572][T12922] [ 833.715552][T12926] loop4: detected capacity change from 0 to 2048 [ 834.517528][T12926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.531336][T12926] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.706688][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.217769][T12953] loop3: detected capacity change from 0 to 128 [ 836.219974][T12950] loop1: detected capacity change from 0 to 2048 [ 836.227945][T12953] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 836.243475][T12953] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 836.257515][T12950] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 836.284670][T12950] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 836.292448][T12950] UDF-fs: Scanning with blocksize 512 failed [ 836.323182][T12950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.464728][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 836.668074][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.688761][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 836.714435][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 836.727642][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.748233][ T9] usb 5-1: config 0 descriptor?? [ 836.766492][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 836.779219][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 836.805417][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 836.835080][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 836.847189][ T9] usb 5-1: media controller created [ 836.855417][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.880924][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 836.889849][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 836.906214][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 836.933481][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 836.954357][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 836.990398][ T9] usb 5-1: USB disconnect, device number 52 [ 837.040771][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 837.159730][ T63] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 837.908188][T12968] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 838.807214][ T5773] EXT4-fs error: 217 callbacks suppressed [ 838.807233][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 838.851505][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 838.861490][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 838.874367][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 838.892045][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 838.902060][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 838.919487][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 838.932594][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 838.942403][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 838.955663][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 839.012224][T12974] loop4: detected capacity change from 0 to 512 [ 839.047112][T12974] EXT4-fs error (device loop4): __ext4_iget:5117: inode #2: block 131072: comm syz.4.2293: invalid block [ 839.064167][T12974] EXT4-fs (loop4): get root inode failed [ 839.070451][T12974] EXT4-fs (loop4): mount failed [ 842.452340][T13002] loop3: detected capacity change from 0 to 512 [ 842.556663][T13002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.569889][T13002] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.632920][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.814908][T13008] EXT4-fs error: 141 callbacks suppressed [ 843.814926][T13008] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.1.2303: Invalid inode table block 0 in block_group 0 [ 843.821788][T13009] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2304: Invalid inode table block 0 in block_group 0 [ 843.836795][T13008] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 843.849336][T13010] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.2305: Invalid inode table block 0 in block_group 0 [ 843.858176][T13008] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2030: comm syz.1.2303: mark_inode_dirty error [ 843.880812][T13009] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 843.880841][T13009] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2033: comm syz.4.2304: mark_inode_dirty error [ 843.902617][T13010] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 843.916756][T13009] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2304: Invalid inode table block 0 in block_group 0 [ 843.925151][T13010] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2035: comm syz.3.2305: mark_inode_dirty error [ 845.269682][T13020] netlink: 'syz.1.2306': attribute type 1 has an invalid length. [ 845.291270][T13020] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 846.790661][T13027] loop1: detected capacity change from 0 to 512 [ 846.847241][T13027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.894045][T13027] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.977520][T13027] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.2309: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 847.070871][T13027] EXT4-fs error (device loop1): ext4_evict_inode:265: comm syz.1.2309: couldn't truncate inode 15 (err -117) [ 847.126678][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.537100][T13044] overlayfs: missing 'lowerdir' [ 850.234265][ T5773] EXT4-fs error: 98 callbacks suppressed [ 850.234282][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 850.253420][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 850.263128][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 850.284352][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 850.330723][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 850.342484][T13051] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.2316: Invalid inode table block 0 in block_group 0 [ 850.358184][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 850.360899][T13050] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.2317: Invalid inode table block 0 in block_group 0 [ 850.383107][T13051] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 850.392892][T13050] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 850.421215][T13054] loop4: detected capacity change from 0 to 512 [ 850.434858][T13053] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 850.474743][T13053] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 850.516339][T13054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.531989][T13054] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.599431][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.281988][T13065] loop1: detected capacity change from 0 to 8 [ 852.680725][T13070] SQUASHFS error: Unable to read directory block [631:26] [ 852.699276][T13070] SQUASHFS error: Unable to read directory block [631:26] [ 852.730891][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.742057][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.769640][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.777033][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.784817][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.791788][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.798840][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.805921][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.812992][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.820366][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.827445][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.840165][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.847224][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.854351][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.861373][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.868824][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.875927][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.883162][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.890223][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.897458][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.904533][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.911745][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.919251][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.926602][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.933613][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.940903][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.948189][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.955447][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.969810][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 852.976964][T13070] SQUASHFS error: Failed to read block 0x4de: -5 [ 853.213841][ T28] audit: type=1800 audit(1793640284.943:149): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2318" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 854.251084][T13077] loop3: detected capacity change from 0 to 1024 [ 854.258648][T13077] EXT4-fs: Ignoring removed mblk_io_submit option [ 854.282369][T13077] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 854.341487][T13077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.395909][ T11] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1495 with max blocks 7 with error 117 [ 854.423885][ T11] EXT4-fs (sda1): This should not happen!! Data will be lost [ 854.423885][ T11] [ 854.556295][ T11] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 992 with max blocks 13 with error 117 [ 854.585051][ T11] EXT4-fs (sda1): This should not happen!! Data will be lost [ 854.585051][ T11] [ 854.619211][ T11] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 997 with max blocks 5 with error 117 [ 854.632095][ T11] EXT4-fs (sda1): This should not happen!! Data will be lost [ 854.632095][ T11] [ 854.712505][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.212011][ T5773] EXT4-fs error: 131 callbacks suppressed [ 856.212030][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 856.231352][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 856.241274][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 856.253511][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 856.266906][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 856.278183][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 856.291814][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=0 req=2277 state=1 status=67 (errno 9: Bad file descriptor) [ 856.305361][ T5773] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 856.318380][ T5773] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 856.330720][ T5773] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 856.400708][T13087] overlayfs: missing 'lowerdir' [ 856.452263][T13091] loop3: detected capacity change from 0 to 512 [ 856.817836][T13091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.075738][ T5773] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 857.101228][T13091] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.288338][ T5773] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 857.824558][T10674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.911865][ T5781] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 857.962418][ T5781] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 858.142514][T13089] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 858.184364][T13089] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 858.377180][T10674] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 858.392571][T10674] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 858.436421][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.449350][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.521271][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.531778][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.624507][T10674] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 858.638803][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.650424][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.718952][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.729421][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.445735][ T60] dvmrp6 (unregistering): left allmulticast mode [ 859.515780][ T60] IPVS: stopping backup sync thread 9984 ... [ 859.786464][ T60] hsr_slave_0: left promiscuous mode [ 859.793082][ T60] hsr_slave_1: left promiscuous mode [ 859.818579][ T60] veth1_macvtap: left promiscuous mode [ 859.824769][ T60] veth0_macvtap: left promiscuous mode [ 859.830425][ T60] veth1_vlan: left promiscuous mode [ 859.836618][ T60] veth0_vlan: left promiscuous mode [ 860.941151][ T60] bond0 (unregistering): Released all slaves [ 861.282566][ T60] IPVS: stop unused estimator thread 0...