last executing test programs: 4m27.013535702s ago: executing program 2 (id=288): pidfd_send_signal(0xffffffffffffffff, 0x4, 0x0, 0x7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x200601) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0x0, 0x4a8, &(0x7f0000002380)="$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") bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[@ANYRES8], 0x48) 4m25.850884754s ago: executing program 2 (id=293): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff070000080010000700020008000f"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x18, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r6, &(0x7f0000000080)=[@t={0x81, 0x5, 0x0, 0x0, @generic=0x6}, @t={0x81, 0x6, 0x0, 0x0, @generic=0xffff}], 0x10) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 4m22.002766898s ago: executing program 2 (id=305): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) 4m19.563566051s ago: executing program 2 (id=309): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x5, 0x0, 0x65, 0x0, 0x1}, {0x4, 0x0, 0x80000}, {}, 0x0, 0x0, 0xa, 0x4, 0xfd, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x4000000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x18, '\x00', @buffer={"010d1de90c6171360aaf4716fc8a633fda9a5d108500b9f70f72ad6cc5f48537", 0x20}, 0x7a7ce1c2}]}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x0, 0x0, 0x0, 0x8c4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], 0x0, 0x10, 0x501}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a00000000010902"], 0x0) 4m15.513385994s ago: executing program 2 (id=314): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$eJzsmb9rFEEUx7+zu/crhICNhY2FB0Y0e7t7KkFIEcFeiD+7HGYNMZtc2Fv1LiAm2NhYWgi2/gMWFqks7OxstdCAYGE67QIjM/eyO9ncHa4xWPg+kMl33s6bfTOz+z24A8Mw/y3bX35+fnZ5+to5AOOoo0Lxb3Y2xjLGf3px/+zzmSsvX3989W514tFWfr5KwfuPA3g7ayNBTfellNK8XtetcFQVdYpdh4UzSkxQgDLmYeEGhUII3CZ9z9DtGokodO+0o4W7S1HoqcZXTaCapnl/B8DOpsACgCrVJ4zrnd76ciuKwngDgBYUKcm9+8TpmD8Uo/ZP1zdrYYb6NTqvW0+fbKq+S3HP2D8fFnzSTQjMkZ5GBa7rZltirP+Eg/R87EHrzwlVxyGXTcLOR7q5MfPbw9KPTe2PlPEX6tl3MGLkJvyWKB0u/V8JgWX1SMSdXnXU4JsPotpRLbBED2LRdJGPqFNMI8d3tt4fzPpqROTjQTMLYCPu9H6s9YsatGOjX5kjE9q4cvakxYexLLJn3EVmLlPOwDGZPyn3Po3MPxw4qX80kpW1Rqe3PrW00loMF8PVIGhe9M573oWgoY2o3x7wvd3U/6ran8aM+UtDvLIsyui2kiT2u0AS+2k/6LfGiz33pv1d51ja/yxMnurPoQ5RL3vIB52gP0v/F7sSk/aQchiGYRiGYRiGYRiGYRiGYQpyEkJ/C0o/VMkcgLz0UEoZXNWjfwUAAP//bpBKqw==") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./cgroup/../file0\x00', 0x152000, &(0x7f0000000240)={[], [{@smackfshat={'smackfshat', 0x3d, './cgroup.cpu/syz1\x00'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname}, {@flag='rw'}]}, 0x4, 0x534, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e03, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 4m9.507453222s ago: executing program 2 (id=323): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x116e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000002000)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000d80)=@fd={0x9, 0xd, 0x4, 0x800, 0x9, {0x77359400}, {0x4, 0x0, 0x3, 0x7, 0x7, 0x2c, "db2e0a85"}, 0x401, 0x4, {}, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000010401010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) 3m50.886421078s ago: executing program 32 (id=323): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x116e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000002000)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000d80)=@fd={0x9, 0xd, 0x4, 0x800, 0x9, {0x77359400}, {0x4, 0x0, 0x3, 0x7, 0x7, 0x2c, "db2e0a85"}, 0x401, 0x4, {}, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000010401010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) 8.682646148s ago: executing program 4 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x14a}], 0x1}}], 0x1, 0x20048814) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x52, 0x3, 0x79, 0x20, 0x16e3, 0xf9e9, 0xb2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x5, 0xc0, 0x3, [{{0x9, 0x4, 0xbf, 0x5, 0x2, 0xf4, 0xce, 0x24, 0x1, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x40, 0x7}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0xb9, 0x5}}]}}]}}]}}, 0x0) 4.459458176s ago: executing program 4 (id=1006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 4.109976751s ago: executing program 4 (id=1007): r0 = eventfd2(0x2, 0x80000) write$eventfd(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x410003, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x0, 0x2, 0x2, 0x3, 0x7, 0xfffffffffffffff8, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0x1, 0xa, 0x6, 0x18, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r1, r1, r1, r1], &(0x7f0000000300)=[{0x4, 0x3, 0x4, 0x2}, {0x4, 0x2, 0x9}, {0x3, 0x2, 0xc}, {0x2, 0x3, 0x2, 0x8}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x2, 0x2, 0x8}, {0x3, 0x3, 0xd, 0x5}, {0x1, 0x4, 0x10, 0xb}], 0x10, 0x431}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116e0875a3c3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000000)) 4.104401554s ago: executing program 5 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 4.068349618s ago: executing program 0 (id=1009): r0 = eventfd2(0x2, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x4}) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x410003, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x0, 0x2, 0x2, 0x3, 0x7, 0xfffffffffffffff8, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0x1, 0xa, 0x6, 0x18, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r1, r1, r1, r1], &(0x7f0000000300)=[{0x4, 0x3, 0x4, 0x2}, {0x4, 0x2, 0x9}, {0x3, 0x2, 0xc}, {0x2, 0x3, 0x2, 0x8}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x2, 0x2, 0x8}, {0x3, 0x3, 0xd, 0x5}, {0x1, 0x4, 0x10, 0xb}], 0x10, 0x431}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116e0875a3c3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000000)) 3.581521875s ago: executing program 5 (id=1012): r0 = socket$kcm(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 3.574737442s ago: executing program 1 (id=1013): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) 3.21404119s ago: executing program 1 (id=1014): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x200012cd) 3.095438002s ago: executing program 0 (id=1016): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000c00050000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000890a337ccee6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20048090) 3.03645207s ago: executing program 4 (id=1017): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001780)=""/242, 0xf2}, {&(0x7f00000048c0)=""/4115, 0x1013}, {&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000001900)=""/108, 0x6c}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000500)=""/225, 0xe1}], 0x6}, 0x0) 2.75039723s ago: executing program 1 (id=1018): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(0x3) 2.706373771s ago: executing program 0 (id=1019): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 2.558501095s ago: executing program 3 (id=1020): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="d8cd10b706", 0x5}], 0x1, &(0x7f0000002a00)=[{0x58, 0x117, 0x4, "dae8109a48940483e33f1272a2ae83ab9b70c568d2f7ff4187243a268faacbd0d30fee323f288a68505297924eaa6060d3462716dd9d089211c6100175c68fec99"}, {0xc0, 0x10e, 0xd77, "7c9d218e66b41e6f6543083048fe451053cbdbf6b0cf41740a42c7251349d81d40db3389dc83e81fe9ac90f5cbe07f7b87eedd218f06e896b211af7719cac3e31c62e9967d7e8655f18ee15c9f6081ab1a0aa0ad2be069222404f2a026a2222e041c051e7b7d0701522ff1902ddaec810f9eeda1d64e1a871129515c234995015d3d85b0420b2cc6f74125c8dcab8b63a44be16ae7b2cef7d29770dd6995569c874abc0c8da47ff0d1"}, {0x110, 0x102, 0x7, "bd50ef47a93522a4383f513d780be70cba243474bb62e87959f8fc8779b688ed67496d6d29d0dbeb1dd231906b7d33f3bd2527ca03d59fccbc7706f89b885d86b1154d77b96c735f5b102e8865a32252219c76c1f25f19af9fd2a1263cff4dba8b274472592185af4bbf674ebd711ff5fc274a02828fe26f3609f6f4cbb507ad6d965459d114812ffa74dba11e025aab06c5ce000dd6dbfe07c8488f66ac76109bdcaaaef3517fc8c14381a372aefcd589d61ae8de00ac0b6f6ec896ab054dcf5bd3eab34e50b6726a2a333e629f290f4393f48c592e1b2a0c5ca5790e019d982a3f8a75029fe9a5c2ba42ea7766a303361bd1f94097b2fe45"}, {0x80, 0x11, 0x2, "5a1d461b56faf7601d5a28fbdda9e5853772ca1e09cb95c04b88bf4b43f64e7273bb62824193acaf8373721979952c985ebe8f668108612ad161491aa6f5d686f96d755d455770909a4e2aa85795a1bf954f42ba9dbb3630cb3f8b32ec6a317b45d69e2c22428025d1"}, {0xfd0, 0xa, 0x100, "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"}, {0xd90, 0x10a, 0x1, "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"}], 0x2008}, 0x840) 2.460983287s ago: executing program 4 (id=1021): socketpair(0xb, 0x6, 0x8, &(0x7f0000000280)) 2.338639614s ago: executing program 5 (id=1022): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 2.028513742s ago: executing program 4 (id=1023): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0xb}], 0x10}, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2.025896883s ago: executing program 1 (id=1024): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x3, @random="68dcc6ea0163", 'ip6gretap0\x00'}}, 0x80, &(0x7f0000001240)}, 0x4000000) 1.960127789s ago: executing program 0 (id=1025): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000002080)=""/4087, 0xff7}, {&(0x7f0000000c00)=""/4083, 0xff3}, {&(0x7f0000000180)=""/176, 0xb0}], 0x4}, 0x0) 1.862255281s ago: executing program 3 (id=1026): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031600160014000000002f88a8", 0xe}], 0x1}, 0x4) 1.793296946s ago: executing program 5 (id=1027): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab", 0xd1}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3", 0xc0}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf", 0x60}], 0x3}, 0x0) 1.504832234s ago: executing program 1 (id=1028): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100021500bf050005001201", 0x67}], 0x1}, 0x0) 1.385605509s ago: executing program 3 (id=1029): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/235, 0xeb}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4033, 0xfc1}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/249, 0xf9}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000bc0)=""/70, 0x46}, {&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f0000000fc0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x11}, 0x0) 1.295905382s ago: executing program 5 (id=1030): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e002f81007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 902.939706ms ago: executing program 0 (id=1031): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf7a}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x5}}], 0x18}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) 848.587644ms ago: executing program 1 (id=1032): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x4840) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 848.259452ms ago: executing program 3 (id=1033): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) 497.036102ms ago: executing program 0 (id=1034): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f00000000c0)={'virt_wifi0\x00', @random="bb87937771a2"}) 444.09523ms ago: executing program 3 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000040000000000000000000000850000008700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 86.369993ms ago: executing program 3 (id=1036): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4840) 0s ago: executing program 5 (id=1037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): . [ 313.160800][ T6885] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 313.272967][ T6885] FAT-fs (loop2): Filesystem has been set read-only [ 313.418417][ T6885] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 316.991294][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 317.282065][ T5835] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 318.154287][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 319.580370][ T5835] usb 3-1: config 0 has no interfaces? [ 319.666393][ T5835] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 319.720900][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.858540][ T5835] usb 3-1: config 0 descriptor?? [ 319.931996][ T5835] usb 3-1: can't set config #0, error -71 [ 320.054670][ T5835] usb 3-1: USB disconnect, device number 8 [ 321.096176][ T6951] loop2: detected capacity change from 0 to 16 [ 321.151503][ T6950] netlink: 'syz.4.315': attribute type 6 has an invalid length. [ 321.261186][ T6951] erofs (device loop2): invalid ishare xattr prefix id 0 [ 321.296833][ T6950] netlink: 'syz.4.315': attribute type 6 has an invalid length. [ 321.587595][ T6951] loop2: detected capacity change from 0 to 512 [ 321.632925][ T6954] loop4: detected capacity change from 0 to 1024 [ 324.641144][ T6954] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 325.436487][ T6962] FAULT_INJECTION: forcing a failure. [ 325.436487][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 325.502741][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(full) [ 325.502875][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.502952][ T6962] Call Trace: [ 325.502998][ T6962] [ 325.503044][ T6962] __dump_stack+0x26/0x30 [ 325.503195][ T6962] dump_stack_lvl+0x14c/0x1c0 [ 325.503347][ T6962] dump_stack+0x1e/0x25 [ 325.503487][ T6962] should_fail_ex+0x7e2/0x8c0 [ 325.503644][ T6962] should_failslab+0x158/0x200 [ 325.503820][ T6962] __kmalloc_cache_noprof+0x125/0x1260 [ 325.503952][ T6962] ? drm_atomic_state_alloc+0xde/0x210 [ 325.504128][ T6962] ? kmsan_get_metadata+0xf1/0x160 [ 325.504309][ T6962] drm_atomic_state_alloc+0xde/0x210 [ 325.504479][ T6962] ? drm_modeset_acquire_init+0x14a/0x190 [ 325.504654][ T6962] drm_client_modeset_commit_atomic+0x85/0xb30 [ 325.504808][ T6962] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 325.504974][ T6962] ? kmsan_get_metadata+0xf1/0x160 [ 325.505139][ T6962] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.505320][ T6962] drm_client_modeset_commit_locked+0x11c/0x8c0 [ 325.505479][ T6962] ? drm_master_internal_acquire+0x85/0xb0 [ 325.505637][ T6962] drm_client_modeset_commit+0x6f/0x100 [ 325.505780][ T6962] __drm_fb_helper_restore_fbdev_mode_unlocked+0xed/0x200 [ 325.505972][ T6962] drm_fb_helper_restore_fbdev_mode_unlocked+0x34/0x40 [ 325.506151][ T6962] drm_fbdev_client_restore+0x34/0x60 [ 325.506301][ T6962] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 325.506465][ T6962] drm_client_dev_restore+0x1c6/0x480 [ 325.506617][ T6962] drm_release+0x45f/0x840 [ 325.506806][ T6962] ? __pfx_drm_release+0x10/0x10 [ 325.506967][ T6962] __fput+0x60e/0x1030 [ 325.507118][ T6962] ? __pfx_____fput+0x10/0x10 [ 325.507246][ T6962] ____fput+0x25/0x30 [ 325.507361][ T6962] task_work_run+0x208/0x2b0 [ 325.507545][ T6962] exit_to_user_mode_loop+0x306/0x1b60 [ 325.507746][ T6962] ? __x64_sys_close_range+0x97/0xe0 [ 325.507936][ T6962] do_syscall_64+0x24d/0xf80 [ 325.508106][ T6962] ? clear_bhb_loop+0x50/0xa0 [ 325.508235][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.508378][ T6962] RIP: 0033:0x7f5d3b39c799 [ 325.508481][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.508586][ T6962] RSP: 002b:00007f5d395f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 325.508706][ T6962] RAX: 0000000000000000 RBX: 00007f5d3b615fa0 RCX: 00007f5d3b39c799 [ 325.508791][ T6962] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 325.508872][ T6962] RBP: 00007f5d395f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.508952][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.509027][ T6962] R13: 00007f5d3b616038 R14: 00007f5d3b615fa0 R15: 00007ffc58f98d08 [ 325.509153][ T6962] [ 326.882656][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.889878][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.175575][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 327.449386][ T6982] loop4: detected capacity change from 0 to 764 [ 328.131042][ T6986] loop1: detected capacity change from 0 to 1024 [ 328.286147][ T6986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.352187][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.674281][ T7000] loop3: detected capacity change from 0 to 16 [ 330.891320][ T7000] erofs (device loop3): invalid ishare xattr prefix id 0 [ 331.083604][ T7000] loop3: detected capacity change from 0 to 512 [ 334.657332][ T7018] loop3: detected capacity change from 0 to 16 [ 334.717479][ T7018] erofs (device loop3): invalid ishare xattr prefix id 0 [ 334.889147][ T7018] loop3: detected capacity change from 0 to 512 [ 334.915901][ T7020] loop1: detected capacity change from 0 to 128 [ 335.272031][ T7020] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.431279][ T7020] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.190394][ T7029] loop4: detected capacity change from 0 to 32768 [ 337.243821][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.050179][ T7036] loop1: detected capacity change from 0 to 512 [ 338.252744][ T7036] EXT4-fs error (device loop1): ext4_quota_enable:7192: comm syz.1.344: inode #65536: comm syz.1.344: iget: illegal inode # [ 338.289297][ T7036] loop1: lost filesystem error report for type 5 error -117 [ 338.290734][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 338.299800][ T7029] (syz.4.343,7029,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 338.305175][ C0] EXT4-fs (loop1): initial error at time 1772137555: ext4_quota_enable:7192 [ 338.305290][ C0] EXT4-fs (loop1): last error at time 1772137555: ext4_quota_enable:7192 [ 338.305593][ T7036] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.344: Bad quota inode: 65536, type: 2 [ 338.305711][ T7036] loop1: lost filesystem error report for type 5 error -117 [ 338.331387][ T7029] (syz.4.343,7029,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 338.458635][ T7036] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=65536). Please run e2fsck to fix. [ 338.566480][ T7036] EXT4-fs (loop1): mount failed [ 338.773260][ T7029] (syz.4.343,7029,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 338.783951][ T7029] (syz.4.343,7029,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 339.711475][ T7051] loop4: detected capacity change from 0 to 16 [ 339.791357][ T7051] erofs (device loop4): invalid ishare xattr prefix id 0 [ 339.963711][ T7051] loop4: detected capacity change from 0 to 512 [ 340.793198][ T5070] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 340.801838][ T5070] Bluetooth: hci4: Injecting HCI hardware error event [ 340.809264][ T49] Bluetooth: hci4: hardware error 0x00 [ 344.212160][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 348.061538][ T5070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.118185][ T5070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.183906][ T5070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.210822][ T5835] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 348.221067][ T5070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.235289][ T5070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.498280][ T5835] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 348.536855][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 348.606600][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 348.695064][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.741216][ T5835] usb 4-1: New USB device found, idVendor=0003, idProduct=0304, bcdDevice= 0.00 [ 348.800997][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.847906][ T5835] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 348.899826][ T5835] usb 4-1: no configuration chosen from 1 choice [ 350.351218][ T49] Bluetooth: hci5: command tx timeout [ 352.381160][ T49] Bluetooth: hci5: command tx timeout [ 352.409417][ T5901] usb 4-1: USB disconnect, device number 6 [ 352.462705][ T7103] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 354.035208][ T7103] bond1: entered promiscuous mode [ 354.091869][ T7103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.298963][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 354.461282][ T49] Bluetooth: hci5: command tx timeout [ 355.234567][ T7128] loop1: detected capacity change from 0 to 16 [ 355.277789][ T7128] erofs (device loop1): invalid ishare xattr prefix id 0 [ 356.302016][ T7128] loop1: detected capacity change from 0 to 512 [ 356.540931][ T49] Bluetooth: hci5: command tx timeout [ 356.962874][ T7132] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 360.325409][ T7132] bond1: entered promiscuous mode [ 360.362159][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.727068][ T759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.822100][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.829581][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.848420][ T7080] bridge_slave_0: entered allmulticast mode [ 361.874331][ T7154] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 361.889856][ T7080] bridge_slave_0: entered promiscuous mode [ 361.974414][ T759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.291803][ T7154] bond2: entered promiscuous mode [ 362.327216][ T7154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.356478][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.366145][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.399121][ T7080] bridge_slave_1: entered allmulticast mode [ 362.439775][ T7080] bridge_slave_1: entered promiscuous mode [ 362.625309][ T759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.466589][ T759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.648697][ T7176] loop1: detected capacity change from 0 to 16 [ 364.018327][ T7176] erofs (device loop1): invalid ishare xattr prefix id 0 [ 364.047615][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.116037][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.698340][ T7080] team0: Port device team_slave_0 added [ 369.413148][ T7080] team0: Port device team_slave_1 added [ 369.802259][ T7197] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 370.134573][ T7197] bond3: entered promiscuous mode [ 370.179996][ T7197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.199390][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.206990][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.239868][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.290477][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.410705][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.463792][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.220383][ T759] bridge_slave_1: left allmulticast mode [ 371.263485][ T759] bridge_slave_1: left promiscuous mode [ 371.269807][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.781484][ T759] bridge_slave_0: left allmulticast mode [ 371.801079][ T759] bridge_slave_0: left promiscuous mode [ 371.822199][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.028151][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.072918][ T7213] loop1: detected capacity change from 0 to 8192 [ 373.082188][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.112034][ T7213] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 373.152168][ T759] bond0 (unregistering): Released all slaves [ 373.268796][ T7080] hsr_slave_0: entered promiscuous mode [ 373.310052][ T7080] hsr_slave_1: entered promiscuous mode [ 373.368346][ T7080] debugfs: 'hsr0' already exists in 'hsr' [ 373.399446][ T7080] Cannot create hsr debugfs directory [ 373.676645][ T7229] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 373.789074][ T795] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 373.960936][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 373.988904][ T7235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 374.009238][ T795] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 374.021355][ T795] usb 5-1: config 0 has no interface number 0 [ 374.027628][ T795] usb 5-1: config 0 interface 237 has no altsetting 0 [ 374.047343][ T795] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 374.058056][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.075518][ T795] usb 5-1: Product: syz [ 374.081363][ T795] usb 5-1: Manufacturer: syz [ 374.086149][ T795] usb 5-1: SerialNumber: syz [ 374.106401][ T795] usb 5-1: config 0 descriptor?? [ 374.216172][ T795] snd_usb_podhd 5-1:0.237: Line 6 POD HD300 found [ 374.235316][ T7229] bond4: entered promiscuous mode [ 374.269436][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 374.274899][ T7229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 374.476380][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.577998][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.679379][ T795] snd_usb_podhd 5-1:0.237: cannot get proper max packet size [ 374.715044][ T795] snd_usb_podhd 5-1:0.237: Line 6 POD HD300 now disconnected [ 374.767569][ T795] snd_usb_podhd 5-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 375.075757][ T7234] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 375.891039][ T759] hsr_slave_0: left promiscuous mode [ 376.333092][ T759] hsr_slave_1: left promiscuous mode [ 376.422959][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.430520][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.470099][ T795] usb 5-1: USB disconnect, device number 8 [ 376.497374][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.518388][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.671367][ T759] veth1_macvtap: left promiscuous mode [ 376.677069][ T759] veth0_macvtap: left promiscuous mode [ 376.702827][ T759] veth1_vlan: left promiscuous mode [ 376.723200][ T759] veth0_vlan: left promiscuous mode [ 376.831438][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 377.011735][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 377.046051][ T5901] usb 2-1: config 0 has no interfaces? [ 377.065536][ T5901] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 377.079452][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.137751][ T5901] usb 2-1: config 0 descriptor?? [ 377.367778][ T5901] usb 2-1: USB disconnect, device number 5 [ 377.552063][ T795] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 377.725498][ T795] usb 4-1: Using ep0 maxpacket: 16 [ 377.766330][ T795] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 377.785592][ T795] usb 4-1: config 0 has no interface number 0 [ 377.804948][ T795] usb 4-1: config 0 interface 237 has no altsetting 0 [ 377.847039][ T795] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 377.863086][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.893037][ T795] usb 4-1: Product: syz [ 377.918701][ T795] usb 4-1: Manufacturer: syz [ 377.929034][ T795] usb 4-1: SerialNumber: syz [ 377.975627][ T795] usb 4-1: config 0 descriptor?? [ 378.161845][ T795] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 378.250422][ T759] team0 (unregistering): Port device team_slave_1 removed [ 378.335042][ T795] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 378.352814][ T759] team0 (unregistering): Port device team_slave_0 removed [ 378.371043][ T795] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 378.414544][ T795] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 378.766563][ T7280] loop4: detected capacity change from 0 to 2048 [ 378.880172][ T7280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.908266][ T29] audit: type=1800 audit(1772137596.455:5): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.431" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 379.093138][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.095611][ T5901] usb 4-1: USB disconnect, device number 7 [ 379.629465][ T7287] loop1: detected capacity change from 0 to 512 [ 379.721528][ T7287] EXT4-fs: Ignoring removed i_version option [ 379.727814][ T7287] ext4: Unknown parameter 'fowner>00000000000000000000' [ 379.753912][ T7290] netlink: 72 bytes leftover after parsing attributes in process `syz.0.435'. [ 380.096103][ T795] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 380.311393][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 380.368826][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.406295][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.482869][ T795] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.521266][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.538913][ T7304] fuse: Bad value for 'fd' [ 380.548767][ T7080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.592732][ T795] usb 2-1: config 0 descriptor?? [ 380.633092][ T795] hub 2-1:0.0: USB hub found [ 380.727576][ T7080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.811234][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 380.863539][ T795] hub 2-1:0.0: 1 port detected [ 380.908064][ T7080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.014307][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 381.038878][ T7080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.063363][ T5901] usb 4-1: config 0 has no interfaces? [ 381.081144][ T5901] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 381.120879][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.168321][ T5901] usb 4-1: config 0 descriptor?? [ 381.440519][ T5901] usb 4-1: USB disconnect, device number 8 [ 381.909408][ T795] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 381.924992][ T795] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 381.997924][ T795] usbhid 2-1:0.0: can't add hid device: -32 [ 382.012166][ T795] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 382.051505][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 382.167914][ T7287] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 382.236219][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 382.256398][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.276921][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.326082][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.360859][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.382082][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.411209][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.416020][ T795] usb 2-1: USB disconnect, device number 6 [ 382.473042][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.505993][ T30] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.524012][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.560772][ T30] usb 5-1: Manufacturer: syz [ 382.608983][ T30] usb 5-1: config 0 descriptor?? [ 382.623197][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.630877][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.747062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.754742][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.790873][ T5830] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 382.992571][ T7319] loop4: detected capacity change from 0 to 128 [ 383.040897][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 383.073453][ T5830] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 383.103134][ T7319] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.129011][ T5830] usb 4-1: config 0 has no interface number 0 [ 383.171349][ T5830] usb 4-1: config 0 interface 237 has no altsetting 0 [ 383.290384][ T5830] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 383.299915][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.309974][ T7319] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.414803][ T5830] usb 4-1: Product: syz [ 383.419158][ T5830] usb 4-1: Manufacturer: syz [ 383.473458][ T5830] usb 4-1: SerialNumber: syz [ 383.494765][ T5830] usb 4-1: config 0 descriptor?? [ 383.586571][ T5830] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 383.791184][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.845943][ T7339] loop1: detected capacity change from 0 to 512 [ 383.890143][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.127180][ T5830] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 384.150915][ T5830] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 384.177519][ T5830] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 384.201897][ T7339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.302817][ T7339] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 384.586516][ T7339] QAT: failed to copy from user. [ 384.739679][ T7339] EXT4-fs error (device loop1): ext4_get_first_dir_block:3527: inode #12: comm syz.1.446: Attempting to read directory block (0) that is past i_size (3) [ 384.875282][ T7339] EXT4-fs (loop1): Remounting filesystem read-only [ 384.882307][ T5835] usb 4-1: USB disconnect, device number 9 [ 385.114363][ T5774] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.340108][ T30] rc_core: IR keymap rc-hauppauge not found [ 385.376607][ T30] Registered IR keymap rc-empty [ 385.384342][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'. [ 385.396450][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.421198][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 385.422848][ T759] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.479160][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 385.487298][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.504169][ T759] Quota error (device loop1): write_blk: dquota write failed [ 385.560919][ T759] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 385.585542][ T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 385.666644][ T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 385.802100][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 385.858849][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 385.911310][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 385.982586][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.011220][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.071987][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.141239][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.172717][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.212511][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.276383][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 386.347222][ T30] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 386.379048][ T30] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 386.440909][ T30] usb 5-1: USB disconnect, device number 9 [ 386.924719][ T7384] loop3: detected capacity change from 0 to 512 [ 387.024983][ T7384] EXT4-fs: Ignoring removed i_version option [ 387.109924][ T7384] ext4: Unknown parameter 'fowner>00000000000000000000' [ 387.421119][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 387.620766][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 387.673612][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.673765][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.673939][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 387.674069][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.714464][ T30] usb 4-1: config 0 descriptor?? [ 387.737857][ T30] hub 4-1:0.0: USB hub found [ 387.938358][ T30] hub 4-1:0.0: 1 port detected [ 388.147170][ T30] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 388.147287][ T30] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 388.200272][ T30] usbhid 4-1:0.0: can't add hid device: -71 [ 388.200939][ T30] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 388.235096][ T30] usb 4-1: USB disconnect, device number 10 [ 388.320093][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.320326][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.406245][ T7399] loop1: detected capacity change from 0 to 4096 [ 388.444341][ T7080] veth0_vlan: entered promiscuous mode [ 388.583682][ T7080] veth1_vlan: entered promiscuous mode [ 388.644679][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.194048][ T7405] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 389.408481][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.489685][ T7080] veth0_macvtap: entered promiscuous mode [ 389.561644][ T7080] veth1_macvtap: entered promiscuous mode [ 389.759317][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.895792][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.946381][ T7413] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 390.052281][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.053082][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.054583][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.056670][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.111001][ T795] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 390.260965][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 390.269928][ T795] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 390.270077][ T795] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.270198][ T795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.270329][ T795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.270458][ T795] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.270905][ T795] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.271038][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.707278][ T30] usb 2-1: USB disconnect, device number 7 [ 394.820895][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 395.079678][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 395.131066][ T30] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 395.237800][ T30] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.371274][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.492630][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.581104][ T30] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.963603][ T30] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.056000][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.574652][ T7487] loop4: detected capacity change from 0 to 32768 [ 396.610166][ T7487] (syz.4.483,7487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 396.663391][ T7487] (syz.4.483,7487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 396.737026][ T7487] JBD2: Ignoring recovery information on journal [ 396.918006][ T7487] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 397.191830][ T30] usb 2-1: usb_control_msg returned -71 [ 397.214063][ T30] usbtmc 2-1:16.0: can't read capabilities [ 397.386512][ T30] usb 2-1: USB disconnect, device number 8 [ 397.450219][ T5774] ocfs2: Unmounting device (7,4) on (node local) [ 397.891556][ T7502] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 398.356080][ T7502] bond1: entered promiscuous mode [ 398.385021][ T7502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.247282][ T7510] loop1: detected capacity change from 0 to 32768 [ 399.637774][ T7510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 399.651510][ T7510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 400.236074][ T7510] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 3ms [ 400.292745][ T5901] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 400.413925][ T5901] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 401.248431][ T7523] loop4: detected capacity change from 0 to 764 [ 402.149587][ T5901] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1735ms [ 402.158474][ T5901] gfs2: fsid=syz:syz.0: jid=0: Done [ 402.165304][ T7510] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 402.223104][ T7510] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 403.455386][ T7537] loop1: detected capacity change from 0 to 32768 [ 403.508270][ T7537] (syz.1.496,7537,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 403.523684][ T7537] (syz.1.496,7537,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 403.670288][ T7537] JBD2: Ignoring recovery information on journal [ 403.824023][ T7537] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 404.123894][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 404.135239][ T7554] netlink: 'syz.0.499': attribute type 3 has an invalid length. [ 404.233272][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.293610][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.693306][ T6936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.739206][ T6936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.833492][ T7567] loop4: detected capacity change from 0 to 764 [ 407.280081][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.291881][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.301283][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.319403][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.337785][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.840884][ T5901] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 409.023968][ T5901] usb 4-1: device descriptor read/64, error -71 [ 409.266072][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 409.428209][ T49] Bluetooth: hci0: command tx timeout [ 409.445201][ T5901] usb 4-1: device descriptor read/64, error -71 [ 409.572141][ T5901] usb usb4-port1: attempt power cycle [ 409.604635][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 409.783637][ T5830] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 409.960831][ T5901] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 410.016628][ T5901] usb 4-1: device descriptor read/8, error -71 [ 410.025144][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.146385][ T5830] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 410.194066][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.216202][ T5830] usb 5-1: Product: syz [ 410.227987][ T5830] usb 5-1: Manufacturer: syz [ 410.241679][ T5830] usb 5-1: SerialNumber: syz [ 410.282150][ T5830] usb 5-1: config 0 descriptor?? [ 410.331688][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 410.360433][ T5830] ims_pcu 5-1:0.0: Zero length descriptor [ 410.373086][ T5830] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 410.389341][ T5901] usb 4-1: device descriptor read/8, error -71 [ 410.405984][ T3470] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.522267][ T5901] usb usb4-port1: unable to enumerate USB device [ 410.529019][ T795] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 410.563620][ T3470] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.620928][ T5833] usb 5-1: USB disconnect, device number 10 [ 410.711174][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 410.757775][ T795] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 410.775781][ T795] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.782669][ T3470] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.788341][ T795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.816481][ T795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.828432][ T795] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.844514][ T795] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.860027][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.059560][ T3470] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.090763][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.098595][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.117091][ T7586] bridge_slave_0: entered allmulticast mode [ 411.163976][ T7586] bridge_slave_0: entered promiscuous mode [ 411.213225][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.241079][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.248812][ T7586] bridge_slave_1: entered allmulticast mode [ 411.270222][ T7586] bridge_slave_1: entered promiscuous mode [ 411.348966][ T5901] usb 2-1: USB disconnect, device number 9 [ 411.511812][ T49] Bluetooth: hci0: command tx timeout [ 411.647751][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.688230][ T7643] loop4: detected capacity change from 0 to 256 [ 411.779328][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.412289][ T7586] team0: Port device team_slave_0 added [ 412.478019][ T7586] team0: Port device team_slave_1 added [ 412.803628][ T7657] loop1: detected capacity change from 0 to 512 [ 412.835031][ T7657] EXT4-fs: Ignoring removed i_version option [ 412.841677][ T3470] bridge_slave_1: left allmulticast mode [ 412.889971][ T3470] bridge_slave_1: left promiscuous mode [ 412.891149][ T7657] ext4: Unknown parameter 'fowner>00000000000000000000' [ 412.905430][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.061413][ T3470] bridge_slave_0: left allmulticast mode [ 413.067255][ T3470] bridge_slave_0: left promiscuous mode [ 413.117246][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.231518][ T5901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 413.347123][ T7664] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 413.373122][ T7664] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 413.422093][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 413.443521][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.493248][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.498747][ T7665] loop3: detected capacity change from 0 to 764 [ 413.529876][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.585601][ T49] Bluetooth: hci0: command tx timeout [ 413.600783][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.666109][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 413.687541][ T5901] usb 2-1: config 0 descriptor?? [ 413.735532][ T5901] hub 2-1:0.0: USB hub found [ 413.762600][ T7670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.938907][ T5901] hub 2-1:0.0: 1 port detected [ 414.752557][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.850818][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.897589][ T3470] bond0 (unregistering): Released all slaves [ 415.039943][ T5901] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 415.070919][ T5901] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 415.143010][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.143147][ T5901] usbhid 2-1:0.0: can't add hid device: -32 [ 415.150086][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.150208][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.193697][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 415.212937][ T7678] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 415.336178][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 415.535455][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.551053][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.638678][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.652790][ T5901] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 415.663514][ T49] Bluetooth: hci0: command tx timeout [ 415.830788][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 415.876207][ T5901] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 415.899357][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.943691][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.973948][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.030933][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.077854][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.104376][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.230882][ T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 416.380755][ T3470] hsr_slave_0: left promiscuous mode [ 416.390439][ T3470] hsr_slave_1: left promiscuous mode [ 416.431443][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.453004][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.456079][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 416.479753][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.496608][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.509453][ T30] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 416.529443][ T30] usb 4-1: config 0 has no interface number 0 [ 416.551369][ T30] usb 4-1: config 0 interface 216 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 416.579998][ T3470] veth1_macvtap: left promiscuous mode [ 416.597835][ T3470] veth0_macvtap: left promiscuous mode [ 416.601059][ T30] usb 4-1: config 0 interface 216 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 416.608366][ T3470] veth1_vlan: left promiscuous mode [ 416.637830][ T5901] usb 5-1: USB disconnect, device number 11 [ 416.660927][ T30] usb 4-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 416.663939][ T3470] veth0_vlan: left promiscuous mode [ 416.713244][ T30] usb 4-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 416.736028][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.776711][ T30] usb 4-1: Product: syz [ 416.797332][ T30] usb 4-1: Manufacturer: syz [ 416.819396][ T30] usb 4-1: SerialNumber: syz [ 416.878224][ T30] usb 4-1: config 0 descriptor?? [ 416.903600][ T7688] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 416.928628][ T30] usb-storage 4-1:0.216: USB Mass Storage device detected [ 417.166351][ T30] usb 4-1: USB disconnect, device number 15 [ 419.663687][ T7707] loop3: detected capacity change from 0 to 16 [ 419.801005][ T7707] erofs (device loop3): invalid ishare xattr prefix id 0 [ 419.909645][ T7707] loop3: detected capacity change from 0 to 512 [ 422.569476][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 422.664416][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 422.716362][ T7725] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 422.818750][ T7716] loop1: detected capacity change from 0 to 4096 [ 423.743529][ T7725] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 423.842976][ T7586] hsr_slave_0: entered promiscuous mode [ 423.894271][ T7586] hsr_slave_1: entered promiscuous mode [ 423.953370][ T7586] debugfs: 'hsr0' already exists in 'hsr' [ 423.977810][ T7586] Cannot create hsr debugfs directory [ 427.547582][ T7771] loop3: detected capacity change from 0 to 1024 [ 427.580045][ T7771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 427.663060][ T7771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.325624][ T7769] loop1: detected capacity change from 0 to 32768 [ 428.345486][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.347189][ T7769] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 428.363431][ T7769] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 428.417724][ T7769] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 428.441354][ T30] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 428.451716][ T30] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 428.839172][ T30] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 387ms [ 428.895099][ T30] gfs2: fsid=syz:syz.0: jid=0: Done [ 428.915227][ T7769] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 429.212038][ T7769] gfs2: fsid=syz:syz.0: found 1 quota changes [ 429.691336][ T7586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.870501][ T7586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.187297][ T7586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 430.711089][ T5784] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 430.766640][ T7586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.793914][ T5784] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 430.868397][ T5784] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5784 [syz-executor] gfs2_quota_sync+0x68e/0xb00 [ 430.920787][ T5784] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 430.946827][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 430.946925][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.946976][ T5784] Call Trace: [ 430.947006][ T5784] [ 430.947036][ T5784] __dump_stack+0x26/0x30 [ 430.947135][ T5784] dump_stack_lvl+0x14c/0x1c0 [ 430.947231][ T5784] dump_stack+0x1e/0x25 [ 430.947315][ T5784] gfs2_withdraw+0xd5/0x270 [ 430.947407][ T5784] gfs2_consist_inode_i+0x1a9/0x240 [ 430.947514][ T5784] inode_go_instantiate+0x13bf/0x1ea0 [ 430.947638][ T5784] ? __pfx_inode_go_instantiate+0x10/0x10 [ 430.947745][ T5784] gfs2_instantiate+0x24f/0x4b0 [ 430.947854][ T5784] gfs2_glock_wait+0x26a/0x3b0 [ 430.947967][ T5784] gfs2_glock_nq+0x152f/0x2d40 [ 430.948064][ T5784] ? kmsan_get_metadata+0xf1/0x160 [ 430.948201][ T5784] do_sync+0x6c4/0x1610 [ 430.948277][ T5784] ? gfs2_quota_sync+0x68e/0xb00 [ 430.948376][ T5784] ? kmsan_get_metadata+0xf1/0x160 [ 430.948478][ T5784] ? gfs2_quota_sync+0x68e/0xb00 [ 430.948565][ T5784] gfs2_quota_sync+0x68e/0xb00 [ 430.948655][ T5784] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 430.948770][ T5784] gfs2_sync_fs+0x57/0x100 [ 430.948875][ T5784] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 430.948978][ T5784] sync_filesystem+0x131/0x3c0 [ 430.949086][ T5784] ? shrink_dcache_for_umount+0xf9/0x210 [ 430.949183][ T5784] generic_shutdown_super+0x95/0x4c0 [ 430.949281][ T5784] kill_block_super+0x42/0xd0 [ 430.949377][ T5784] gfs2_kill_sb+0x4a9/0x580 [ 430.949478][ T5784] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 430.949566][ T5784] deactivate_locked_super+0xcb/0x3c0 [ 430.949666][ T5784] deactivate_super+0x12f/0x140 [ 430.949756][ T5784] cleanup_mnt+0x7eb/0x870 [ 430.949847][ T5784] ? __pfx___cleanup_mnt+0x10/0x10 [ 430.949937][ T5784] __cleanup_mnt+0x22/0x30 [ 430.950015][ T5784] task_work_run+0x208/0x2b0 [ 430.950127][ T5784] exit_to_user_mode_loop+0x306/0x1b60 [ 430.950241][ T5784] ? user_path_at+0x1fc/0x330 [ 430.950339][ T5784] ? __x64_sys_umount+0x1dc/0x250 [ 430.950451][ T5784] do_syscall_64+0x24d/0xf80 [ 430.950583][ T5784] ? clear_bhb_loop+0x50/0xa0 [ 430.950698][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.950785][ T5784] RIP: 0033:0x7f5b7739d9d7 [ 430.950848][ T5784] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 430.950925][ T5784] RSP: 002b:00007ffe198e58a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 430.951007][ T5784] RAX: 0000000000000000 RBX: 00007f5b77431f90 RCX: 00007f5b7739d9d7 [ 430.951061][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe198e5960 [ 430.951113][ T5784] RBP: 00007ffe198e5960 R08: 00007ffe198e6960 R09: 00000000ffffffff [ 430.951172][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe198e69f0 [ 430.951225][ T5784] R13: 00007f5b77431f90 R14: 0000000000068d9e R15: 00007ffe198e6a30 [ 430.951303][ T5784] [ 431.385409][ T5784] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 431.786891][ T7815] loop4: detected capacity change from 0 to 1024 [ 432.033059][ T7815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.210124][ T7824] loop3: detected capacity change from 0 to 16 [ 432.278338][ T7824] erofs (device loop3): invalid ishare xattr prefix id 0 [ 432.517934][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.555088][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.568145][ T7824] loop3: detected capacity change from 0 to 512 [ 433.189448][ T7831] loop4: detected capacity change from 0 to 512 [ 433.258904][ T7831] EXT4-fs: Ignoring removed i_version option [ 433.301244][ T7831] ext4: Unknown parameter 'fowner>00000000000000000000' [ 433.719204][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.986337][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.994093][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.077321][ T5833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 434.178323][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.186206][ T6936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.320936][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 434.442066][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.514697][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.613491][ T5833] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 434.719967][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.753323][ T5833] usb 5-1: config 0 descriptor?? [ 434.778145][ T5833] hub 5-1:0.0: USB hub found [ 435.023835][ T5833] hub 5-1:0.0: 1 port detected [ 436.161516][ T5833] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 436.168156][ T5833] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 436.300131][ T5833] usbhid 5-1:0.0: can't add hid device: -32 [ 436.342701][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 436.465848][ T5784] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 436.515626][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 436.515765][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.515839][ T5784] Call Trace: [ 436.515884][ T5784] [ 436.515930][ T5784] __dump_stack+0x26/0x30 [ 436.516083][ T5784] dump_stack_lvl+0x14c/0x1c0 [ 436.516243][ T5784] dump_stack+0x1e/0x25 [ 436.516384][ T5784] gfs2_assert_warn_i+0x2d8/0x470 [ 436.516562][ T5784] gfs2_make_fs_ro+0x4f9/0x500 [ 436.516723][ T5784] ? __pfx_autoremove_wake_function+0x10/0x10 [ 436.516899][ T5784] gfs2_put_super+0x3bc/0x1090 [ 436.517067][ T5784] ? kmsan_get_metadata+0xf1/0x160 [ 436.517233][ T5784] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 436.517432][ T5784] ? __pfx_gfs2_put_super+0x10/0x10 [ 436.517595][ T5784] generic_shutdown_super+0x1b8/0x4c0 [ 436.517760][ T5784] kill_block_super+0x42/0xd0 [ 436.517915][ T5784] gfs2_kill_sb+0x4a9/0x580 [ 436.518082][ T5784] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 436.518233][ T5784] deactivate_locked_super+0xcb/0x3c0 [ 436.518402][ T5784] deactivate_super+0x12f/0x140 [ 436.518546][ T5784] cleanup_mnt+0x7eb/0x870 [ 436.518696][ T5784] ? __pfx___cleanup_mnt+0x10/0x10 [ 436.518829][ T5784] __cleanup_mnt+0x22/0x30 [ 436.518956][ T5784] task_work_run+0x208/0x2b0 [ 436.519137][ T5784] exit_to_user_mode_loop+0x306/0x1b60 [ 436.519326][ T5784] ? user_path_at+0x1fc/0x330 [ 436.519483][ T5784] ? __x64_sys_umount+0x1dc/0x250 [ 436.519662][ T5784] do_syscall_64+0x24d/0xf80 [ 436.519831][ T5784] ? clear_bhb_loop+0x50/0xa0 [ 436.519974][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.520112][ T5784] RIP: 0033:0x7f5b7739d9d7 [ 436.520210][ T5784] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 436.520328][ T5784] RSP: 002b:00007ffe198e58a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 436.520452][ T5784] RAX: 0000000000000000 RBX: 00007f5b77431f90 RCX: 00007f5b7739d9d7 [ 436.520540][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe198e5960 [ 436.520616][ T5784] RBP: 00007ffe198e5960 R08: 00007ffe198e6960 R09: 00000000ffffffff [ 436.520710][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe198e69f0 [ 436.520784][ T5784] R13: 00007f5b77431f90 R14: 0000000000068d9e R15: 00007ffe198e6a30 [ 436.520897][ T5784] [ 436.952680][ T5901] usb 5-1: USB disconnect, device number 12 [ 437.299600][ T7586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.829375][ T7872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 438.018464][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 438.680074][ T7887] loop3: detected capacity change from 0 to 16 [ 438.728118][ T7887] erofs (device loop3): invalid ishare xattr prefix id 0 [ 438.954386][ T7887] loop3: detected capacity change from 0 to 512 [ 442.722480][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'. [ 442.910659][ T7911] loop4: detected capacity change from 0 to 512 [ 442.996390][ T7911] EXT4-fs: Ignoring removed i_version option [ 443.052101][ T7911] ext4: Unknown parameter 'fowner>00000000000000000000' [ 443.240394][ T7586] veth0_vlan: entered promiscuous mode [ 443.361264][ T795] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 443.489301][ T7586] veth1_vlan: entered promiscuous mode [ 443.571189][ T795] usb 5-1: Using ep0 maxpacket: 32 [ 443.608277][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.658106][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.724702][ T795] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 443.758067][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.846183][ T795] usb 5-1: config 0 descriptor?? [ 443.928661][ T795] hub 5-1:0.0: USB hub found [ 443.949175][ T7586] veth0_macvtap: entered promiscuous mode [ 444.105212][ T795] hub 5-1:0.0: 1 port detected [ 444.132285][ T7586] veth1_macvtap: entered promiscuous mode [ 444.408138][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.416120][ T7927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 444.511880][ T5833] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 444.625202][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.655503][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'. [ 444.661280][ T5833] usb 4-1: device descriptor read/64, error -71 [ 444.920665][ T147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.929659][ T147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.943579][ T5833] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 445.017745][ T147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.072739][ T147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.114505][ T5833] usb 4-1: device descriptor read/64, error -71 [ 445.187173][ T795] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 445.214333][ T795] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 445.293536][ T5833] usb usb4-port1: attempt power cycle [ 445.354103][ T7942] loop1: detected capacity change from 0 to 16 [ 445.356362][ T795] usbhid 5-1:0.0: can't add hid device: -32 [ 445.411646][ T795] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 445.412894][ T7942] erofs (device loop1): invalid ishare xattr prefix id 0 [ 445.603540][ T7942] loop1: detected capacity change from 0 to 512 [ 446.311588][ T5833] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 446.352657][ T5833] usb 4-1: device descriptor read/8, error -71 [ 446.801510][ T5833] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 447.575247][ T7952] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 447.602227][ T30] usb 5-1: USB disconnect, device number 13 [ 448.218990][ T5833] usb 4-1: device descriptor read/8, error -71 [ 448.375756][ T7952] bond2: entered promiscuous mode [ 448.391198][ T5833] usb usb4-port1: unable to enumerate USB device [ 448.447534][ T7952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.055380][ T7966] loop1: detected capacity change from 0 to 16 [ 449.135717][ T7966] erofs (device loop1): invalid ishare xattr prefix id 0 [ 449.278378][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.622'. [ 449.315032][ T7966] loop1: detected capacity change from 0 to 512 [ 449.322068][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 449.763108][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.770020][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.558808][ T7988] loop3: detected capacity change from 0 to 512 [ 451.684645][ T7988] EXT4-fs: Ignoring removed i_version option [ 451.780477][ T7988] ext4: Unknown parameter 'fowner>00000000000000000000' [ 452.310919][ T5833] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 452.531644][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 452.574193][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.644287][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.701274][ T5833] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.749839][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.824270][ T5833] usb 4-1: config 0 descriptor?? [ 452.866383][ T7998] loop1: detected capacity change from 0 to 16 [ 452.889387][ T5833] hub 4-1:0.0: USB hub found [ 452.974343][ T7998] erofs (device loop1): invalid ishare xattr prefix id 0 [ 453.041468][ T5833] hub 4-1:0.0: 1 port detected [ 453.187272][ T7998] loop1: detected capacity change from 0 to 512 [ 453.309389][ T8004] FAULT_INJECTION: forcing a failure. [ 453.309389][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 453.415610][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.4.632 Not tainted syzkaller #0 PREEMPT(full) [ 453.415756][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.415832][ T8004] Call Trace: [ 453.415877][ T8004] [ 453.415923][ T8004] __dump_stack+0x26/0x30 [ 453.416075][ T8004] dump_stack_lvl+0x14c/0x1c0 [ 453.416224][ T8004] dump_stack+0x1e/0x25 [ 453.416356][ T8004] should_fail_ex+0x7e2/0x8c0 [ 453.416510][ T8004] should_fail+0x2a/0x40 [ 453.416634][ T8004] should_fail_usercopy+0x2e/0x40 [ 453.416773][ T8004] _copy_to_user+0x35/0x120 [ 453.416902][ T8004] simple_read_from_buffer+0x1b2/0x340 [ 453.417091][ T8004] proc_fail_nth_read+0x1e0/0x2d0 [ 453.417230][ T8004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.417359][ T8004] vfs_read+0x27c/0xf90 [ 453.417496][ T8004] ? stack_depot_save_flags+0x35/0x790 [ 453.417678][ T8004] ? kmsan_get_metadata+0xf1/0x160 [ 453.417845][ T8004] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 453.418021][ T8004] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.418204][ T8004] ksys_read+0x1d9/0x470 [ 453.418367][ T8004] __x64_sys_read+0x97/0xf0 [ 453.418525][ T8004] x64_sys_call+0x311c/0x3ea0 [ 453.418687][ T8004] do_syscall_64+0x134/0xf80 [ 453.418855][ T8004] ? clear_bhb_loop+0x50/0xa0 [ 453.418993][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.419129][ T8004] RIP: 0033:0x7f0f0ff5cfce [ 453.419226][ T8004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.419338][ T8004] RSP: 002b:00007f0f10d81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.419459][ T8004] RAX: ffffffffffffffda RBX: 00007f0f10d826c0 RCX: 00007f0f0ff5cfce [ 453.419553][ T8004] RDX: 000000000000000f RSI: 00007f0f10d820a0 RDI: 0000000000000004 [ 453.419642][ T8004] RBP: 00007f0f10d82090 R08: 0000000000000000 R09: 0000000000000000 [ 453.419724][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.419802][ T8004] R13: 00007f0f10216038 R14: 00007f0f10215fa0 R15: 00007fffd87b8638 [ 453.419928][ T8004] [ 454.240915][ T5833] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 454.266696][ T5833] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 455.881063][ T5833] usbhid 4-1:0.0: can't add hid device: -32 [ 455.961291][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 456.054029][ T8013] loop4: detected capacity change from 0 to 64 [ 456.295461][ T8015] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.634'. [ 457.208139][ T5833] usb 4-1: USB disconnect, device number 20 [ 460.057714][ T8049] loop4: detected capacity change from 0 to 32768 [ 460.135988][ T8056] loop3: detected capacity change from 0 to 512 [ 460.267319][ T8049] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 460.276313][ T8049] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 460.428297][ T8056] EXT4-fs: Ignoring removed i_version option [ 460.523666][ T8056] ext4: Unknown parameter 'fowner>00000000000000000000' [ 460.583904][ T8049] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 460.595529][ T5901] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 460.602808][ T5901] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 460.970786][ T795] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 461.017932][ T5901] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 415ms [ 461.064295][ T5901] gfs2: fsid=syz:syz.0: jid=0: Done [ 461.069782][ T8049] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 461.229761][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 461.252293][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.281040][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.292770][ T795] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 461.306538][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.339765][ T795] usb 4-1: config 0 descriptor?? [ 461.483806][ T8049] gfs2: fsid=syz:syz.0: found 1 quota changes [ 461.579116][ T795] hub 4-1:0.0: USB hub found [ 461.660899][ T795] hub 4-1:0.0: 1 port detected [ 461.678765][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.717212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.041826][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.110001][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.186410][ T5774] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 462.249376][ T5774] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 462.298595][ T5774] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5774 [syz-executor] gfs2_quota_sync+0x68e/0xb00 [ 462.374268][ T5774] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 462.441129][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 462.441261][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.441333][ T5774] Call Trace: [ 462.441377][ T5774] [ 462.441420][ T5774] __dump_stack+0x26/0x30 [ 462.441569][ T5774] dump_stack_lvl+0x14c/0x1c0 [ 462.441716][ T5774] dump_stack+0x1e/0x25 [ 462.441847][ T5774] gfs2_withdraw+0xd5/0x270 [ 462.441990][ T5774] gfs2_consist_inode_i+0x1a9/0x240 [ 462.442158][ T5774] inode_go_instantiate+0x13bf/0x1ea0 [ 462.442356][ T5774] ? __pfx_inode_go_instantiate+0x10/0x10 [ 462.442504][ T5774] gfs2_instantiate+0x24f/0x4b0 [ 462.442680][ T5774] gfs2_glock_wait+0x26a/0x3b0 [ 462.442846][ T5774] gfs2_glock_nq+0x152f/0x2d40 [ 462.442999][ T5774] ? kmsan_get_metadata+0xf1/0x160 [ 462.443213][ T5774] do_sync+0x6c4/0x1610 [ 462.443326][ T5774] ? gfs2_quota_sync+0x68e/0xb00 [ 462.443485][ T5774] ? kmsan_get_metadata+0xf1/0x160 [ 462.443645][ T5774] ? gfs2_quota_sync+0x68e/0xb00 [ 462.443782][ T5774] gfs2_quota_sync+0x68e/0xb00 [ 462.443931][ T5774] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.444120][ T5774] gfs2_sync_fs+0x57/0x100 [ 462.444276][ T5774] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 462.444448][ T5774] sync_filesystem+0x131/0x3c0 [ 462.444638][ T5774] ? shrink_dcache_for_umount+0xf9/0x210 [ 462.444786][ T5774] generic_shutdown_super+0x95/0x4c0 [ 462.444928][ T5774] kill_block_super+0x42/0xd0 [ 462.445090][ T5774] gfs2_kill_sb+0x4a9/0x580 [ 462.445242][ T5774] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 462.445380][ T5774] deactivate_locked_super+0xcb/0x3c0 [ 462.445534][ T5774] deactivate_super+0x12f/0x140 [ 462.445674][ T5774] cleanup_mnt+0x7eb/0x870 [ 462.445825][ T5774] ? __pfx___cleanup_mnt+0x10/0x10 [ 462.445952][ T5774] __cleanup_mnt+0x22/0x30 [ 462.446105][ T5774] task_work_run+0x208/0x2b0 [ 462.446320][ T5774] exit_to_user_mode_loop+0x306/0x1b60 [ 462.446510][ T5774] ? user_path_at+0x1fc/0x330 [ 462.446658][ T5774] ? __x64_sys_umount+0x1dc/0x250 [ 462.446835][ T5774] do_syscall_64+0x24d/0xf80 [ 462.447027][ T5774] ? clear_bhb_loop+0x50/0xa0 [ 462.447179][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.447340][ T5774] RIP: 0033:0x7f0f0ff9d9d7 [ 462.447448][ T5774] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 462.447556][ T5774] RSP: 002b:00007fffd87b78a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 462.447671][ T5774] RAX: 0000000000000000 RBX: 00007f0f10031f90 RCX: 00007f0f0ff9d9d7 [ 462.447753][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd87b7960 [ 462.447830][ T5774] RBP: 00007fffd87b7960 R08: 00007fffd87b8960 R09: 00000000ffffffff [ 462.447914][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd87b89f0 [ 462.447994][ T5774] R13: 00007f0f10031f90 R14: 0000000000070adb R15: 00007fffd87b8a30 [ 462.448120][ T5774] [ 462.778455][ T5774] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 462.992976][ T795] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 462.999522][ T795] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 463.068834][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 463.077314][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 463.101683][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 463.116551][ T795] usbhid 4-1:0.0: can't add hid device: -71 [ 463.201477][ T795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 463.321610][ T795] usb 4-1: USB disconnect, device number 21 [ 463.522798][ T8090] loop1: detected capacity change from 0 to 16 [ 463.617180][ T8090] erofs (device loop1): invalid ishare xattr prefix id 0 [ 463.781488][ T8090] loop1: detected capacity change from 0 to 512 [ 465.408331][ T8098] loop3: detected capacity change from 0 to 1024 [ 465.572657][ T8098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.811143][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 465.894213][ T8098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.016169][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 466.081586][ T5833] usb 6-1: config 0 has no interfaces? [ 466.176237][ T5833] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 466.277416][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.439456][ T5833] usb 6-1: config 0 descriptor?? [ 466.767472][ T5833] usb 6-1: USB disconnect, device number 2 [ 466.990479][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.630294][ T8116] netlink: 224 bytes leftover after parsing attributes in process `syz.1.660'. [ 467.656368][ T8115] batadv1: entered promiscuous mode [ 468.637412][ T8117] loop4: detected capacity change from 0 to 4096 [ 468.701526][ T8117] ntfs3: Unknown parameter '·' [ 469.070910][ T795] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 469.202037][ T8135] loop5: detected capacity change from 0 to 64 [ 469.280736][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 469.342394][ T795] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.398275][ T795] usb 5-1: config 0 interface 0 has no altsetting 0 [ 469.424050][ T795] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 469.511798][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.590853][ T795] usb 5-1: config 0 descriptor?? [ 470.027951][ T7586] hfs: node 4:3 still has 1 user(s)! [ 470.053663][ T795] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 470.132877][ T795] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 470.148421][ T795] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 470.157255][ T795] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 470.168118][ T795] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 470.331785][ T8115] sd 0:0:1:0: PR command failed: 1026 [ 470.337492][ T8115] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 470.366269][ T795] konepure 0003:1E7D:2DBE.0002: hidraw0: USB HID v0.02 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 470.404891][ T8115] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 470.526267][ T8150] loop5: detected capacity change from 0 to 256 [ 470.541977][ T795] usb 5-1: USB disconnect, device number 14 [ 470.595623][ T8150] exfat: Deprecated parameter 'utf8' [ 470.613990][ T8150] exfat: Deprecated parameter 'namecase' [ 470.620266][ T8150] exfat: Deprecated parameter 'namecase' [ 470.691912][ T8150] exfat: Deprecated parameter 'utf8' [ 470.767282][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 470.852200][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 470.882115][ T8150] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 470.927810][ T8158] loop1: detected capacity change from 0 to 128 [ 470.962081][ T8150] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 471.045244][ T8158] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 471.160961][ T5833] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 471.393412][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 471.405303][ T5833] usb 4-1: config 0 has no interfaces? [ 471.422671][ T5833] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 471.545642][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.618983][ T5833] usb 4-1: config 0 descriptor?? [ 471.673328][ T8160] fido_id[8160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 471.905002][ T795] usb 4-1: USB disconnect, device number 22 [ 472.793740][ T8174] loop5: detected capacity change from 0 to 2048 [ 472.873497][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.941846][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.033692][ T8174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.961317][ T8184] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 475.301141][ T795] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 475.511108][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 475.576788][ T795] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 475.613643][ T795] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.657244][ T795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.733028][ T795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.780430][ T795] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.896776][ T795] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.001779][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.427500][ T7586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.551875][ T795] usb 4-1: USB disconnect, device number 23 [ 476.620378][ T8213] loop1: detected capacity change from 0 to 1024 [ 476.710002][ T8213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 476.750921][ T8213] EXT4-fs (loop1): inodes count not valid: 1 vs 32 [ 477.720915][ T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 477.920836][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 477.955615][ T30] usb 5-1: config 0 has no interfaces? [ 477.955759][ T30] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 477.955885][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.970422][ T30] usb 5-1: config 0 descriptor?? [ 478.019193][ T5901] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 478.054522][ T5901] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.207265][ T30] usb 5-1: USB disconnect, device number 15 [ 480.921027][ T8263] loop5: detected capacity change from 0 to 1024 [ 480.958450][ T8263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.023349][ T8266] netlink: 'syz.0.710': attribute type 39 has an invalid length. [ 481.032800][ T8265] netlink: 'syz.0.710': attribute type 39 has an invalid length. [ 481.163190][ T8263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.431114][ T30] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 481.514123][ T7586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.645842][ T5833] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 481.672356][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 481.709859][ T30] usb 5-1: config 0 has no interfaces? [ 481.720095][ T30] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 481.743008][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.794006][ T30] usb 5-1: config 0 descriptor?? [ 481.846883][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.902471][ T5833] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 481.939076][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.957224][ T5833] usb 4-1: Product: syz [ 481.962750][ T5833] usb 4-1: Manufacturer: syz [ 481.967580][ T5833] usb 4-1: SerialNumber: syz [ 482.012637][ T5833] usb 4-1: config 0 descriptor?? [ 482.029221][ T30] usb 5-1: USB disconnect, device number 16 [ 482.157617][ T5833] ims_pcu 4-1:0.0: Zero length descriptor [ 482.239356][ T5833] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 482.596692][ T8280] loop5: detected capacity change from 0 to 32768 [ 482.618397][ T8280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.713 (8280) [ 482.665990][ T30] usb 4-1: USB disconnect, device number 24 [ 482.707763][ T8280] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.718521][ T8280] BTRFS info (device loop5): using sha256 checksum algorithm [ 482.891677][ T8280] BTRFS info (device loop5): enabling ssd optimizations [ 482.900786][ T8280] BTRFS info (device loop5): turning on async discard [ 482.907743][ T8280] BTRFS info (device loop5): enabling free space tree [ 483.289635][ T8280] openvswitch: netlink: Actions may not be safe on all matching packets [ 483.443706][ T7586] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.507172][ T8307] loop1: detected capacity change from 0 to 512 [ 483.618872][ T8307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 483.727262][ T8307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 483.916876][ T8307] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 484.267544][ T8307] EXT4-fs (loop1): group descriptors corrupted! [ 484.601570][ T8315] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 484.601570][ T8315] The task syz.1.718 (8315) triggered the difference, watch for misbehavior. [ 485.444038][ T8329] FAULT_INJECTION: forcing a failure. [ 485.444038][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.444186][ T8329] CPU: 0 UID: 0 PID: 8329 Comm: syz.1.725 Not tainted syzkaller #0 PREEMPT(full) [ 485.444312][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.444394][ T8329] Call Trace: [ 485.444437][ T8329] [ 485.444480][ T8329] __dump_stack+0x26/0x30 [ 485.444628][ T8329] dump_stack_lvl+0x14c/0x1c0 [ 485.444780][ T8329] dump_stack+0x1e/0x25 [ 485.444911][ T8329] should_fail_ex+0x7e2/0x8c0 [ 485.445057][ T8329] should_fail+0x2a/0x40 [ 485.445172][ T8329] should_fail_usercopy+0x2e/0x40 [ 485.445302][ T8329] _copy_from_user+0x33/0x100 [ 485.445429][ T8329] ucma_write+0x155/0x5c0 [ 485.445589][ T8329] ? kmsan_get_metadata+0xf1/0x160 [ 485.445757][ T8329] ? __pfx_ucma_write+0x10/0x10 [ 485.445918][ T8329] vfs_writev+0xb34/0x1500 [ 485.446042][ T8329] ? __pfx_ucma_write+0x10/0x10 [ 485.446231][ T8329] ? kmsan_get_metadata+0xf1/0x160 [ 485.446389][ T8329] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.446563][ T8329] do_writev+0x235/0x5d0 [ 485.446693][ T8329] __x64_sys_writev+0x99/0xf0 [ 485.446860][ T8329] x64_sys_call+0x2182/0x3ea0 [ 485.447008][ T8329] do_syscall_64+0x134/0xf80 [ 485.447169][ T8329] ? clear_bhb_loop+0x50/0xa0 [ 485.447300][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.447428][ T8329] RIP: 0033:0x7f5b7739c799 [ 485.447522][ T8329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.447627][ T8329] RSP: 002b:00007f5b782b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 485.447751][ T8329] RAX: ffffffffffffffda RBX: 00007f5b77615fa0 RCX: 00007f5b7739c799 [ 485.447839][ T8329] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 485.447916][ T8329] RBP: 00007f5b782b6090 R08: 0000000000000000 R09: 0000000000000000 [ 485.447994][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.448067][ T8329] R13: 00007f5b77616038 R14: 00007f5b77615fa0 R15: 00007ffe198e6638 [ 485.448187][ T8329] [ 485.533084][ T5901] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 485.690738][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 485.696978][ T5901] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 485.697101][ T5901] usb 5-1: config 0 has no interface number 0 [ 485.697211][ T5901] usb 5-1: config 0 interface 237 has no altsetting 0 [ 485.712282][ T5901] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 485.712428][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.712551][ T5901] usb 5-1: Product: syz [ 485.712651][ T5901] usb 5-1: Manufacturer: syz [ 485.712742][ T5901] usb 5-1: SerialNumber: syz [ 485.775161][ T5901] usb 5-1: config 0 descriptor?? [ 485.808961][ T5901] snd_usb_podhd 5-1:0.237: Line 6 POD HD300 found [ 485.955199][ T8334] loop3: detected capacity change from 0 to 16 [ 486.012042][ T8334] erofs (device loop3): invalid ishare xattr prefix id 0 [ 486.052449][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.054307][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.159996][ T5901] snd_usb_podhd 5-1:0.237: cannot get proper max packet size [ 486.160248][ T5901] snd_usb_podhd 5-1:0.237: Line 6 POD HD300 now disconnected [ 486.204685][ T8334] loop3: detected capacity change from 0 to 512 [ 486.436894][ T5901] snd_usb_podhd 5-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 487.375079][ T8342] loop1: detected capacity change from 0 to 512 [ 487.377259][ T795] usb 5-1: USB disconnect, device number 17 [ 487.783951][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 488.050906][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 488.194438][ T30] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 488.271124][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.284497][ T8342] EXT4-fs (loop1): 1 truncate cleaned up [ 488.341765][ T30] usb 6-1: Product: syz [ 488.375658][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.457770][ T30] usb 6-1: Manufacturer: syz [ 488.520736][ T30] usb 6-1: SerialNumber: syz [ 488.600251][ T30] usb 6-1: config 0 descriptor?? [ 488.972513][ T30] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 489.555234][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.781365][ T5833] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 489.989527][ T30] gspca_sonixj: reg_r err -110 [ 490.001960][ T8343] loop5: detected capacity change from 0 to 1024 [ 490.011943][ T30] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 490.080792][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 490.143869][ T5833] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 490.178842][ T5833] usb 5-1: config 0 has no interface number 0 [ 490.198916][ T5833] usb 5-1: config 0 interface 89 has no altsetting 0 [ 490.256230][ T5833] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 490.273873][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.289578][ T5833] usb 5-1: Product: syz [ 490.301605][ T5833] usb 5-1: Manufacturer: syz [ 490.305424][ T8343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.306364][ T5833] usb 5-1: SerialNumber: syz [ 490.336425][ T5833] usb 5-1: config 0 descriptor?? [ 490.407833][ T5833] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 490.556102][ T5901] usb 6-1: USB disconnect, device number 3 [ 491.249577][ T5833] em28xx 5-1:0.89: Video interface 89 found: bulk [ 491.687088][ T7586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.744302][ T5833] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 492.163495][ T8379] loop5: detected capacity change from 0 to 16 [ 492.192271][ T8379] erofs (device loop5): invalid ishare xattr prefix id 0 [ 492.406473][ T8379] loop5: detected capacity change from 0 to 512 [ 492.798728][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'. [ 492.867546][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'. [ 493.093693][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.135236][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.259733][ T5833] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 493.300408][ T5833] em28xx 5-1:0.89: board has no eeprom [ 493.386384][ T5833] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 493.979432][ T5833] em28xx 5-1:0.89: analog set to bulk mode. [ 494.000884][ T30] em28xx 5-1:0.89: Registering V4L2 extension [ 494.064804][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.128027][ T5833] usb 5-1: USB disconnect, device number 18 [ 494.137381][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.198412][ T5833] em28xx 5-1:0.89: Disconnecting em28xx [ 495.323884][ T8401] loop3: detected capacity change from 0 to 512 [ 495.578787][ T8401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.618650][ T30] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 495.627691][ T30] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 495.646916][ T30] em28xx 5-1:0.89: No AC97 audio processor [ 495.657287][ T30] usb 5-1: Decoder not found [ 495.663113][ T30] em28xx 5-1:0.89: failed to create media graph [ 495.669617][ T30] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 495.774019][ T30] em28xx 5-1:0.89: Registering snapshot button... [ 495.817185][ T30] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input17 [ 495.900191][ T30] em28xx 5-1:0.89: Remote control support is not available for this card. [ 495.992244][ T5833] em28xx 5-1:0.89: Closing input extension [ 495.998335][ T5833] em28xx 5-1:0.89: Deregistering snapshot button [ 496.013996][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.144586][ T5833] em28xx 5-1:0.89: Freeing device [ 496.522556][ T5833] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 496.691573][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.691739][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.691864][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.692063][ T5833] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.692193][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.716145][ T5833] usb 5-1: config 0 descriptor?? [ 496.736797][ T8415] loop3: detected capacity change from 0 to 2048 [ 496.839571][ T5957] Dev loop3: RDB in block 1 has bad checksum [ 496.856081][ T8415] Dev loop3: RDB in block 1 has bad checksum [ 496.956829][ T8414] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 497.267335][ T5833] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 497.472429][ T8411] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 498.650814][ T30] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 501.896959][ T8441] loop5: detected capacity change from 0 to 32768 [ 501.968787][ T8441] (syz.5.758,8441,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 501.969600][ T8441] (syz.5.758,8441,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 501.985712][ T8441] (syz.5.758,8441,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x3c8d1ba1, computed 0xbb82cb57. Applying ECC. [ 501.985861][ T8441] (syz.5.758,8441,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x3c8d1ba1, computed 0xbb82cb57 [ 501.985967][ T8441] (syz.5.758,8441,1):ocfs2_validate_inode_block:1441 ERROR: Checksum failed for dinode 24 [ 501.986052][ T8441] (syz.5.758,8441,1):ocfs2_read_locked_inode:599 ERROR: status = -5 [ 501.986290][ T8441] (syz.5.758,8441,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 501.987054][ T8441] (syz.5.758,8441,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 501.987137][ T8441] (syz.5.758,8441,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 5, possibly corrupt fs? [ 501.987253][ T8441] (syz.5.758,8441,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 501.987373][ T8441] (syz.5.758,8441,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 501.987711][ T8441] (syz.5.758,8441,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 502.776460][ T5833] usb 5-1: USB disconnect, device number 19 [ 504.740011][ T8460] loop4: detected capacity change from 0 to 512 [ 504.748494][ T8460] EXT4-fs: Ignoring removed i_version option [ 504.748676][ T8460] ext4: Unknown parameter 'fowner>00000000000000000000' [ 505.030959][ T5833] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 505.190817][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 505.204549][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.204708][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.204893][ T5833] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.205024][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.261761][ T5833] usb 5-1: config 0 descriptor?? [ 505.283036][ T5833] hub 5-1:0.0: USB hub found [ 505.453239][ T8472] capability: warning: `syz.0.768' uses deprecated v2 capabilities in a way that may be insecure [ 505.510426][ T5833] hub 5-1:0.0: 1 port detected [ 506.070154][ T8463] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 506.557210][ T5833] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 506.557324][ T5833] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 506.587953][ T5833] usbhid 5-1:0.0: can't add hid device: -32 [ 506.588767][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 506.689646][ T8477] loop3: detected capacity change from 0 to 4096 [ 506.896944][ T8477] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 507.794161][ T8477] ntfs3(loop3): ino=9, mi_enum_attr [ 507.794286][ T8477] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 507.797420][ T8477] ntfs3(loop3): ino=9, mi_enum_attr [ 507.797532][ T8477] ntfs3(loop3): $Secure::$SII is corrupted. [ 507.797781][ T8477] ntfs3(loop3): Failed to initialize $Secure (-22). [ 508.729815][ T8496] loop4: detected capacity change from 0 to 512 [ 508.746771][ T8496] ext4: Unknown parameter 'hash' [ 508.945174][ T8496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.990893][ T8496] loop4: detected capacity change from 0 to 64 [ 509.148558][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.159238][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.535397][ T8508] loop1: detected capacity change from 0 to 2048 [ 509.610818][ T8508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.775516][ T8511] loop5: detected capacity change from 0 to 512 [ 509.896924][ T8511] EXT4-fs (loop5): 1 truncate cleaned up [ 509.955369][ T8515] loop3: detected capacity change from 0 to 512 [ 509.959306][ T8511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.119993][ T8515] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 510.396130][ T8511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.649133][ T8521] loop1: detected capacity change from 0 to 512 [ 510.714056][ T8521] EXT4-fs: Ignoring removed i_version option [ 510.764826][ T8521] ext4: Unknown parameter 'fowner>00000000000000000000' [ 510.811559][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.885821][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.277140][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.297316][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.872293][ T5833] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 514.052128][ T5833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.100113][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.121430][ T5833] usb 6-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 514.196744][ T5833] usb 6-1: config 1 interface 0 has no altsetting 0 [ 514.213837][ T5833] usb 6-1: config 1 interface 0 has no altsetting 1 [ 514.274236][ T5833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 514.311017][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.342429][ T5833] usb 6-1: Product: syz [ 514.346856][ T5833] usb 6-1: Manufacturer: syz [ 514.372052][ T5833] usb 6-1: SerialNumber: syz [ 514.659253][ T8549] loop4: detected capacity change from 0 to 128 [ 514.721892][ T5833] usb 6-1: USB disconnect, device number 4 [ 514.731526][ T8549] EXT4-fs: Ignoring removed nobh option [ 514.877968][ T8549] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.922170][ T8548] lo speed is unknown, defaulting to 1000 [ 514.955834][ T8548] lo speed is unknown, defaulting to 1000 [ 514.978053][ T8549] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 515.007604][ T8548] lo speed is unknown, defaulting to 1000 [ 515.135372][ T8548] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 515.184028][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.796'. [ 515.192163][ T8554] bond_slave_0: entered promiscuous mode [ 515.198960][ T8554] bond_slave_1: entered promiscuous mode [ 515.358662][ T8554] macvtap1: entered promiscuous mode [ 515.392012][ T8554] bond0: entered promiscuous mode [ 515.455366][ T8548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 515.475959][ T8554] macvtap1: entered allmulticast mode [ 515.538495][ T8554] bond0: entered allmulticast mode [ 515.555996][ T8554] bond_slave_0: entered allmulticast mode [ 515.661534][ T8554] bond_slave_1: entered allmulticast mode [ 515.735620][ T8554] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 515.776253][ T5774] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.851276][ T5826] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 515.876162][ T8554] bond0: left allmulticast mode [ 515.886722][ T8554] bond_slave_0: left allmulticast mode [ 515.895831][ T8554] bond_slave_1: left allmulticast mode [ 515.903054][ T8554] bond0: left promiscuous mode [ 515.916852][ T8554] bond_slave_0: left promiscuous mode [ 515.922639][ T8554] bond_slave_1: left promiscuous mode [ 516.259314][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 516.424007][ T5826] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 516.565910][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.715685][ T5826] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 517.630963][ T5826] usb 6-1: New USB device found, idVendor=79fd, idProduct=010c, bcdDevice=2d.16 [ 517.730701][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.738912][ T5826] usb 6-1: Product: syz [ 517.765432][ T5826] usb 6-1: Manufacturer: syz [ 517.770136][ T5826] usb 6-1: SerialNumber: syz [ 517.835294][ T5826] usb 6-1: config 0 descriptor?? [ 517.891252][ T8548] lo speed is unknown, defaulting to 1000 [ 517.899820][ T8548] lo speed is unknown, defaulting to 1000 [ 517.913653][ T8548] lo speed is unknown, defaulting to 1000 [ 517.973531][ T8548] lo speed is unknown, defaulting to 1000 [ 518.033673][ T8548] lo speed is unknown, defaulting to 1000 [ 518.827429][ T5826] usb 6-1: USB disconnect, device number 5 [ 519.727344][ T8595] 9p: Bad value for 'rfdno' [ 519.958276][ T8598] tmpfs: Unknown parameter 'N«¨K‚ã/š61ܲ' [ 519.979284][ T8598] fuse: Bad value for 'rootmode' [ 519.989791][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.815'. [ 520.094235][ T8598] loop3: detected capacity change from 0 to 512 [ 520.257408][ T8598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.271261][ T8598] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.581304][ T795] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 520.621283][ T8598] tipc: Started in network mode [ 520.621367][ T8598] tipc: Node identity 4, cluster identity 4711 [ 520.621433][ T8598] tipc: Node number set to 4 [ 520.798728][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 520.887600][ T795] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 520.934091][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.976299][ T795] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 521.037376][ T795] usb 6-1: New USB device found, idVendor=79fd, idProduct=010c, bcdDevice=2d.16 [ 521.069156][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.109357][ T795] usb 6-1: Product: syz [ 521.119997][ T795] usb 6-1: Manufacturer: syz [ 521.151267][ T795] usb 6-1: SerialNumber: syz [ 521.166996][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.186869][ T795] usb 6-1: config 0 descriptor?? [ 521.960196][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.003498][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.200935][ T5901] usb 6-1: USB disconnect, device number 6 [ 522.438979][ T8632] loop5: detected capacity change from 0 to 16 [ 522.478902][ T8632] erofs (device loop5): invalid ishare xattr prefix id 0 [ 525.255857][ T8641] loop4: detected capacity change from 0 to 16 [ 525.301716][ T8641] erofs: Unknown parameter 'ýÿÿÿÿÿÿÿ' [ 525.901812][ T8653] loop3: detected capacity change from 0 to 512 [ 526.045268][ T8653] EXT4-fs (loop3): 1 truncate cleaned up [ 526.077093][ T8653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.266956][ T8653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.487787][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.572195][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.971192][ T5826] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 529.223072][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.274019][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.582698][ T8703] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 529.906381][ T8703] bond3: entered promiscuous mode [ 529.940461][ T8703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.167867][ T8714] loop8: detected capacity change from 0 to 7 [ 530.245191][ T8714] Dev loop8: unable to read RDB block 7 [ 530.253788][ T8714] loop8: unable to read partition table [ 530.261412][ T8714] loop8: partition table beyond EOD, truncated [ 530.270839][ T8714] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.961252][ T795] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 532.175734][ T795] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 532.220888][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.245329][ T795] usb 4-1: Product: syz [ 532.264075][ T795] usb 4-1: Manufacturer: syz [ 532.283876][ T795] usb 4-1: SerialNumber: syz [ 532.385787][ T795] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 532.519104][ T5901] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 532.554161][ T8737] loop1: detected capacity change from 0 to 16 [ 532.609926][ T8737] cramfs: Unknown parameter '' [ 533.065966][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.154520][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.156718][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 533.312179][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.370291][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.489975][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 533.611651][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.721216][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.742470][ T5901] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 533.763290][ T5901] ath9k_htc: Failed to initialize the device [ 533.900394][ T8744] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 533.909179][ T5901] usb 4-1: ath9k_htc: USB layer deinitialized [ 533.942740][ T8745] FAULT_INJECTION: forcing a failure. [ 533.942740][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 533.981023][ T8745] CPU: 1 UID: 0 PID: 8745 Comm: syz.5.873 Not tainted syzkaller #0 PREEMPT(full) [ 533.981151][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.981225][ T8745] Call Trace: [ 533.981267][ T8745] [ 533.981312][ T8745] __dump_stack+0x26/0x30 [ 533.981459][ T8745] dump_stack_lvl+0x14c/0x1c0 [ 533.981610][ T8745] dump_stack+0x1e/0x25 [ 533.981744][ T8745] should_fail_ex+0x7e2/0x8c0 [ 533.981900][ T8745] should_failslab+0x158/0x200 [ 533.982113][ T8745] kmem_cache_alloc_noprof+0x146/0x1270 [ 533.982280][ T8745] ? kmsan_get_metadata+0xf1/0x160 [ 533.982444][ T8745] ? io_submit_one+0x1bf/0x32e0 [ 533.982624][ T8745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.982796][ T8745] io_submit_one+0x1bf/0x32e0 [ 533.982970][ T8745] ? stack_depot_save_flags+0x35/0x790 [ 533.983161][ T8745] ? kmsan_get_metadata+0xf1/0x160 [ 533.983327][ T8745] ? kmsan_get_metadata+0xf1/0x160 [ 533.983497][ T8745] ? kmsan_get_metadata+0xf1/0x160 [ 533.983660][ T8745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.983841][ T8745] __se_sys_io_submit+0x26f/0x690 [ 533.984001][ T8745] ? fput+0x113/0x160 [ 533.984160][ T8745] __x64_sys_io_submit+0x97/0xe0 [ 533.984326][ T8745] x64_sys_call+0x1ec2/0x3ea0 [ 533.984475][ T8745] do_syscall_64+0x134/0xf80 [ 533.984643][ T8745] ? clear_bhb_loop+0x50/0xa0 [ 533.984783][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.984917][ T8745] RIP: 0033:0x7fbfe339c799 [ 533.985021][ T8745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.985132][ T8745] RSP: 002b:00007fbfe430a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 533.985253][ T8745] RAX: ffffffffffffffda RBX: 00007fbfe3615fa0 RCX: 00007fbfe339c799 [ 533.985349][ T8745] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 00007fbfe42d9000 [ 533.985435][ T8745] RBP: 00007fbfe430a090 R08: 0000000000000000 R09: 0000000000000000 [ 533.985518][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.985595][ T8745] R13: 00007fbfe3616038 R14: 00007fbfe3615fa0 R15: 00007ffea3431cf8 [ 533.985727][ T8745] [ 534.877491][ T8728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.910436][ T8728] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 535.582044][ T8728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 535.588500][ T8728] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 535.639873][ T8747] loop1: detected capacity change from 0 to 2048 [ 535.717069][ T8747] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 535.770239][ T8728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.798948][ T8728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 535.809182][ T8747] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 535.820952][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 535.883310][ T8728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 535.889646][ T8728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 535.894032][ T8747] UDF-fs: Scanning with blocksize 512 failed [ 536.007599][ T8747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.026610][ T8728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 536.424626][ T8761] loop5: detected capacity change from 0 to 8 [ 536.480879][ T5826] usb 4-1: USB disconnect, device number 26 [ 536.600332][ T8761] SQUASHFS error: lzo decompression failed, data probably corrupt [ 536.632904][ T8761] SQUASHFS error: Failed to read block 0x91: -5 [ 536.639320][ T8761] SQUASHFS error: Unable to read metadata cache entry [8f] [ 536.752677][ T8761] SQUASHFS error: Unable to read inode 0x11f [ 537.435276][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.542016][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.685197][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 537.820835][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 537.901453][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 537.907653][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 538.020779][ T5826] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 538.208076][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 538.277358][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.309073][ T5826] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 538.336125][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.405759][ T5826] usb 6-1: config 0 descriptor?? [ 539.254632][ T8802] loop4: detected capacity change from 0 to 512 [ 539.377449][ T8802] EXT4-fs error (device loop4): ext4_quota_enable:7192: comm syz.4.890: inode #65536: comm syz.4.890: iget: illegal inode # [ 539.395895][ T8802] loop4: lost filesystem error report for type 5 error -117 [ 539.396569][ T8802] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.890: Bad quota inode: 65536, type: 2 [ 539.404612][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 539.404699][ C0] EXT4-fs (loop4): initial error at time 1772137756: ext4_quota_enable:7192 [ 539.404810][ C0] EXT4-fs (loop4): last error at time 1772137756: ext4_quota_enable:7192 [ 539.443781][ T8802] loop4: lost filesystem error report for type 5 error -117 [ 539.447406][ T8802] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=65536). Please run e2fsck to fix. [ 539.494561][ T8802] EXT4-fs (loop4): mount failed [ 539.741805][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 539.902079][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 539.980955][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.584325][ T5826] usbhid 6-1:0.0: can't add hid device: -71 [ 540.597249][ T5826] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 540.683296][ T5826] usb 6-1: USB disconnect, device number 7 [ 541.460840][ T795] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 541.667533][ T795] usb 6-1: unable to get BOS descriptor or descriptor too short [ 541.690849][ T795] usb 6-1: not running at top speed; connect to a high speed hub [ 541.731185][ T5826] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 541.732711][ T795] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 541.767584][ T795] usb 6-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 541.814398][ T795] usb 6-1: config 253 interface 0 has no altsetting 0 [ 541.851857][ T795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.890763][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.909638][ T795] usb 6-1: Product: syz [ 541.920823][ T795] usb 6-1: Manufacturer: syz [ 541.930190][ T795] usb 6-1: SerialNumber: syz [ 541.954362][ T5826] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 541.974808][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.026724][ T5826] usb 4-1: Product: syz [ 542.041087][ T5826] usb 4-1: Manufacturer: syz [ 542.061046][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.070207][ T5826] usb 4-1: SerialNumber: syz [ 542.119568][ T5826] usb 4-1: config 0 descriptor?? [ 542.261527][ T795] cdc_ether 6-1:253.0: skipping garbage [ 542.267298][ T795] usb 6-1: bad CDC descriptors [ 542.339915][ T795] usb 6-1: USB disconnect, device number 8 [ 542.398670][ T5826] hso 4-1:0.0: Failed to find BULK IN ep [ 542.456450][ T5826] usb-storage 4-1:0.0: USB Mass Storage device detected [ 542.846345][ T795] usb 4-1: USB disconnect, device number 27 [ 544.868472][ T8855] sch_fq: defrate 4294967295 ignored. [ 548.217766][ T8876] Bluetooth: MGMT ver 1.23 [ 548.241907][ T8879] vivid-002: disconnect [ 548.248812][ T8878] loop3: detected capacity change from 0 to 256 [ 548.345893][ T29] audit: type=1800 audit(1772137765.885:6): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.921" name="file1" dev="loop3" ino=1048617 res=0 errno=0 [ 548.786753][ T8883] loop5: detected capacity change from 0 to 8 [ 548.806353][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'. [ 548.834627][ T8883] SQUASHFS error: lzo decompression failed, data probably corrupt [ 548.834755][ T8883] SQUASHFS error: Failed to read block 0x91: -5 [ 548.834820][ T8883] SQUASHFS error: Unable to read metadata cache entry [8f] [ 548.834886][ T8883] SQUASHFS error: Unable to read inode 0x11f [ 548.964701][ T8877] vivid-002: reconnect [ 549.604024][ T8895] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 550.381704][ T795] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 550.515160][ T795] usb 6-1: device descriptor read/64, error -71 [ 550.760938][ T795] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 550.892366][ T795] usb 6-1: device descriptor read/64, error -71 [ 551.002314][ T795] usb usb6-port1: attempt power cycle [ 551.072048][ T8919] loop3: detected capacity change from 0 to 8 [ 551.132834][ T8919] SQUASHFS error: lzo decompression failed, data probably corrupt [ 551.132959][ T8919] SQUASHFS error: Failed to read block 0x91: -5 [ 551.133026][ T8919] SQUASHFS error: Unable to read metadata cache entry [8f] [ 551.133093][ T8919] SQUASHFS error: Unable to read inode 0x11f [ 551.341206][ T795] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 551.362796][ T795] usb 6-1: device descriptor read/8, error -71 [ 551.602083][ T795] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 551.644824][ T795] usb 6-1: device descriptor read/8, error -71 [ 551.761888][ T795] usb usb6-port1: unable to enumerate USB device [ 551.842763][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.940'. [ 552.218533][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 552.270232][ T8934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.942'. [ 552.359654][ T8941] FAULT_INJECTION: forcing a failure. [ 552.359654][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 552.373195][ T8935] vlan2: entered allmulticast mode [ 552.379093][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.1.944 Not tainted syzkaller #0 PREEMPT(full) [ 552.379225][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.379310][ T8941] Call Trace: [ 552.379359][ T8941] [ 552.379405][ T8941] __dump_stack+0x26/0x30 [ 552.379553][ T8941] dump_stack_lvl+0x14c/0x1c0 [ 552.379707][ T8941] dump_stack+0x1e/0x25 [ 552.379839][ T8941] should_fail_ex+0x7e2/0x8c0 [ 552.379994][ T8941] should_failslab+0x158/0x200 [ 552.380174][ T8941] __kmalloc_cache_noprof+0x125/0x1260 [ 552.380343][ T8941] ? __se_sys_mount+0x21f/0x7f0 [ 552.380508][ T8941] ? vfs_write+0x13df/0x15c0 [ 552.380643][ T8941] ? kmsan_get_metadata+0xf1/0x160 [ 552.380802][ T8941] ? kmsan_get_metadata+0xf1/0x160 [ 552.380981][ T8941] __se_sys_mount+0x21f/0x7f0 [ 552.381150][ T8941] ? fput+0x113/0x160 [ 552.381286][ T8941] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.381466][ T8941] __x64_sys_mount+0xe4/0x150 [ 552.381651][ T8941] x64_sys_call+0x39f0/0x3ea0 [ 552.381806][ T8941] do_syscall_64+0x134/0xf80 [ 552.381970][ T8941] ? clear_bhb_loop+0x50/0xa0 [ 552.382108][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.382252][ T8941] RIP: 0033:0x7f5b7739c799 [ 552.382348][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.382475][ T8941] RSP: 002b:00007f5b782b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 552.382599][ T8941] RAX: ffffffffffffffda RBX: 00007f5b77615fa0 RCX: 00007f5b7739c799 [ 552.382694][ T8941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.382771][ T8941] RBP: 00007f5b782b6090 R08: 0000000000000022 R09: 0000000000000000 [ 552.382853][ T8941] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 552.382946][ T8941] R13: 00007f5b77616038 R14: 00007f5b77615fa0 R15: 00007ffe198e6638 [ 552.383074][ T8941] [ 552.391174][ T8935] vlan1: entered allmulticast mode [ 552.665483][ T8935] veth0_vlan: entered allmulticast mode [ 553.716670][ T8958] loop5: detected capacity change from 0 to 256 [ 553.842645][ T8958] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4711949a, utbl_chksum : 0xe619d30d) [ 553.990189][ T29] audit: type=1800 audit(1772137771.535:7): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.950" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 554.079173][ T29] audit: type=1800 audit(1772137771.625:8): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.950" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 554.306295][ T8962] loop4: detected capacity change from 0 to 2048 [ 554.468822][ T8962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.721148][ T8970] loop1: detected capacity change from 0 to 16 [ 554.766850][ T8970] erofs (device loop1): invalid ishare xattr prefix id 0 [ 555.011499][ T8970] loop1: detected capacity change from 0 to 512 [ 555.018861][ T8972] loop5: detected capacity change from 0 to 1024 [ 557.977210][ T8978] loop4: detected capacity change from 0 to 512 [ 558.225460][ T8978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.398445][ T8978] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.886447][ T8981] loop1: detected capacity change from 0 to 40427 [ 559.041226][ T8981] F2FS-fs (loop1): invalid crc value [ 559.319873][ T8981] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 559.350797][ T8981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 559.686152][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.980058][ T8998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.042186][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.173161][ T8997] loop3: detected capacity change from 0 to 1024 [ 560.281305][ T9002] loop5: detected capacity change from 0 to 256 [ 560.333570][ T9002] exfat: Deprecated parameter 'namecase' [ 560.364161][ T8997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.434502][ T9002] exfat: Deprecated parameter 'utf8' [ 560.590295][ T9002] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 560.866316][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.397498][ T9014] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 561.433003][ T9016] FAULT_INJECTION: forcing a failure. [ 561.433003][ T9016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.433583][ T9011] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 561.536200][ T9016] CPU: 1 UID: 0 PID: 9016 Comm: syz.3.967 Not tainted syzkaller #0 PREEMPT(full) [ 561.536339][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.536415][ T9016] Call Trace: [ 561.536461][ T9016] [ 561.536506][ T9016] __dump_stack+0x26/0x30 [ 561.536660][ T9016] dump_stack_lvl+0x14c/0x1c0 [ 561.536813][ T9016] dump_stack+0x1e/0x25 [ 561.536945][ T9016] should_fail_ex+0x7e2/0x8c0 [ 561.537100][ T9016] should_fail+0x2a/0x40 [ 561.537221][ T9016] should_fail_usercopy+0x2e/0x40 [ 561.537364][ T9016] _copy_to_user+0x35/0x120 [ 561.537498][ T9016] simple_read_from_buffer+0x1b2/0x340 [ 561.537687][ T9016] proc_fail_nth_read+0x1e0/0x2d0 [ 561.537827][ T9016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.537954][ T9016] vfs_read+0x27c/0xf90 [ 561.538095][ T9016] ? stack_depot_save_flags+0x35/0x790 [ 561.538266][ T9016] ? kmsan_get_metadata+0xf1/0x160 [ 561.538440][ T9016] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 561.538615][ T9016] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.538797][ T9016] ksys_read+0x1d9/0x470 [ 561.538954][ T9016] __x64_sys_read+0x97/0xf0 [ 561.539112][ T9016] x64_sys_call+0x311c/0x3ea0 [ 561.539269][ T9016] do_syscall_64+0x134/0xf80 [ 561.539451][ T9016] ? clear_bhb_loop+0x50/0xa0 [ 561.539592][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.539724][ T9016] RIP: 0033:0x7f5d3b35cfce [ 561.539822][ T9016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.539922][ T9016] RSP: 002b:00007f5d395f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.540042][ T9016] RAX: ffffffffffffffda RBX: 00007f5d395f66c0 RCX: 00007f5d3b35cfce [ 561.540129][ T9016] RDX: 000000000000000f RSI: 00007f5d395f60a0 RDI: 0000000000000003 [ 561.540206][ T9016] RBP: 00007f5d395f6090 R08: 0000000000000000 R09: 0000000000000000 [ 561.540284][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.540371][ T9016] R13: 00007f5d3b616038 R14: 00007f5d3b615fa0 R15: 00007ffc58f98d08 [ 561.540495][ T9016] [ 562.244550][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.319705][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.428484][ T9028] loop3: detected capacity change from 0 to 1024 [ 562.826521][ T9036] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 563.560997][ T5833] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 563.751680][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 563.862629][ T5833] usb 6-1: config 0 has no interfaces? [ 563.862782][ T5833] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 563.862914][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.888960][ T5833] usb 6-1: config 0 descriptor?? [ 564.120737][ T5833] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 564.277355][ T795] usb 6-1: USB disconnect, device number 13 [ 564.340249][ T5833] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 564.340400][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.340802][ T5833] usb 4-1: Product: syz [ 564.340893][ T5833] usb 4-1: Manufacturer: syz [ 564.340984][ T5833] usb 4-1: SerialNumber: syz [ 564.362069][ T5833] usb 4-1: config 0 descriptor?? [ 564.583516][ T5833] hso 4-1:0.0: Failed to find BULK IN ep [ 564.624812][ T5833] usb-storage 4-1:0.0: USB Mass Storage device detected [ 565.136977][ T5833] usb 4-1: USB disconnect, device number 28 [ 565.273017][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 565.554326][ T9103] loop5: detected capacity change from 0 to 512 [ 565.696999][ T9103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.873950][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.883169][ T9103] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.970884][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.994017][ T9104] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.985: iget: bad i_size value: 2533274857506816 [ 566.029275][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.987'. [ 566.319533][ T7586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.322895][ T9127] loop3: detected capacity change from 0 to 512 [ 566.459669][ T9127] EXT4-fs (loop3): 1 truncate cleaned up [ 566.519353][ T9127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.686721][ T9127] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.326346][ T9158] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 568.763650][ T9158] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 568.885158][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 569.196554][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.272220][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.912502][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.913724][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.145980][ C1] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 571.180749][ C1] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 572.169483][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.217162][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.645905][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.652914][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.161209][ T9238] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1015'. [ 573.245410][ T9242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'. [ 573.277003][ T9242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'. [ 574.388650][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1025'. [ 574.869299][ T9263] syzkaller0: entered promiscuous mode [ 574.879480][ T9263] syzkaller0: entered allmulticast mode [ 574.904269][ T9274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1025'. [ 574.925212][ T9282] netlink: 'syz.3.1029': attribute type 29 has an invalid length. [ 574.938414][ T9283] netlink: 'syz.3.1029': attribute type 29 has an invalid length. [ 575.401113][ T9294] netlink: 'syz.1.1032': attribute type 33 has an invalid length. [ 575.409161][ T9294] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1032'. [ 576.322559][ T9307] ===================================================== [ 576.329778][ T9307] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 576.337224][ T9307] eth_type_trans+0x6a2/0x9b0 [ 576.342185][ T9307] __dev_forward_skb2+0x4b1/0x940 [ 576.347370][ T9307] dev_forward_skb_nomtu+0x3b/0xe0 [ 576.352748][ T9307] __bpf_redirect+0x14d7/0x1760 [ 576.357790][ T9307] bpf_clone_redirect+0x4a6/0x6c0 [ 576.363112][ T9307] ___bpf_prog_run+0x12af/0xeb60 [ 576.368199][ T9307] __bpf_prog_run512+0xc5/0x100 [ 576.373296][ T9307] bpf_test_run+0x493/0xdf0 [ 576.377992][ T9307] bpf_prog_test_run_skb+0x22a5/0x3050 [ 576.383731][ T9307] bpf_prog_test_run+0x5bb/0x9f0 [ 576.388848][ T9307] __sys_bpf+0x925/0xee0 [ 576.393327][ T9307] __x64_sys_bpf+0xa4/0xf0 [ 576.397900][ T9307] x64_sys_call+0x13d0/0x3ea0 [ 576.402851][ T9307] do_syscall_64+0x134/0xf80 [ 576.407699][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.413874][ T9307] [ 576.416264][ T9307] Uninit was created at: [ 576.420837][ T9307] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 576.427019][ T9307] pskb_expand_head+0x2ef/0x1fb0 [ 576.432239][ T9307] skb_ensure_writable+0x44e/0x510 [ 576.437520][ T9307] bpf_clone_redirect+0x301/0x6c0 [ 576.442847][ T9307] ___bpf_prog_run+0x12af/0xeb60 [ 576.447934][ T9307] __bpf_prog_run512+0xc5/0x100 [ 576.453043][ T9307] bpf_test_run+0x493/0xdf0 [ 576.457720][ T9307] bpf_prog_test_run_skb+0x22a5/0x3050 [ 576.463463][ T9307] bpf_prog_test_run+0x5bb/0x9f0 [ 576.468580][ T9307] __sys_bpf+0x925/0xee0 [ 576.473075][ T9307] __x64_sys_bpf+0xa4/0xf0 [ 576.477637][ T9307] x64_sys_call+0x13d0/0x3ea0 [ 576.482593][ T9307] do_syscall_64+0x134/0xf80 [ 576.487378][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.493547][ T9307] [ 576.495962][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.5.1037 Not tainted syzkaller #0 PREEMPT(full) [ 576.505506][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.515795][ T9307] ===================================================== [ 576.522913][ T9307] Disabling lock debugging due to kernel taint [ 576.529177][ T9307] Kernel panic - not syncing: kmsan.panic set ... [ 576.535707][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.5.1037 Tainted: G B syzkaller #0 PREEMPT(full) [ 576.546727][ T9307] Tainted: [B]=BAD_PAGE [ 576.550950][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.561100][ T9307] Call Trace: [ 576.564447][ T9307] [ 576.567448][ T9307] __dump_stack+0x26/0x30 [ 576.571937][ T9307] dump_stack_lvl+0x50/0x1c0 [ 576.576664][ T9307] ? dump_stack+0x12/0x25 [ 576.581132][ T9307] dump_stack+0x1e/0x25 [ 576.585419][ T9307] vpanic+0x7b4/0x1430 [ 576.589656][ T9307] panic+0x15d/0x160 [ 576.593743][ T9307] kmsan_report+0x31a/0x320 [ 576.598416][ T9307] ? __bpf_prog_run512+0xc5/0x100 [ 576.603591][ T9307] ? __msan_warning+0x1b/0x30 [ 576.608416][ T9307] ? eth_type_trans+0x6a2/0x9b0 [ 576.613457][ T9307] ? __dev_forward_skb2+0x4b1/0x940 [ 576.618803][ T9307] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 576.624229][ T9307] ? __bpf_redirect+0x14d7/0x1760 [ 576.629430][ T9307] ? bpf_clone_redirect+0x4a6/0x6c0 [ 576.634817][ T9307] ? ___bpf_prog_run+0x12af/0xeb60 [ 576.640074][ T9307] ? __bpf_prog_run512+0xc5/0x100 [ 576.645239][ T9307] ? bpf_test_run+0x493/0xdf0 [ 576.650088][ T9307] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 576.655919][ T9307] ? bpf_prog_test_run+0x5bb/0x9f0 [ 576.661184][ T9307] ? __sys_bpf+0x925/0xee0 [ 576.665720][ T9307] ? __x64_sys_bpf+0xa4/0xf0 [ 576.670420][ T9307] ? x64_sys_call+0x13d0/0x3ea0 [ 576.675421][ T9307] ? do_syscall_64+0x134/0xf80 [ 576.680355][ T9307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.686572][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.692577][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.697860][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.703875][ T9307] ? should_fail_ex+0x45/0x8c0 [ 576.708779][ T9307] ? stack_depot_save_flags+0x35/0x790 [ 576.714430][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.719716][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.724992][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.730266][ T9307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 576.736757][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.742046][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.748027][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.753311][ T9307] __msan_warning+0x1b/0x30 [ 576.758063][ T9307] eth_type_trans+0x6a2/0x9b0 [ 576.762956][ T9307] __dev_forward_skb2+0x4b1/0x940 [ 576.768139][ T9307] dev_forward_skb_nomtu+0x3b/0xe0 [ 576.773399][ T9307] __bpf_redirect+0x14d7/0x1760 [ 576.778438][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.783730][ T9307] bpf_clone_redirect+0x4a6/0x6c0 [ 576.788955][ T9307] ___bpf_prog_run+0x12af/0xeb60 [ 576.794079][ T9307] __bpf_prog_run512+0xc5/0x100 [ 576.799091][ T9307] ? kmsan_internal_poison_memory+0x78/0x90 [ 576.805155][ T9307] ? kmsan_internal_poison_memory+0x4a/0x90 [ 576.811208][ T9307] ? kmsan_slab_alloc+0xdc/0x160 [ 576.816301][ T9307] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 576.822197][ T9307] ? slab_build_skb+0x5c/0x5b0 [ 576.827105][ T9307] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 576.832815][ T9307] ? bpf_prog_test_run+0x5bb/0x9f0 [ 576.838072][ T9307] ? __sys_bpf+0x925/0xee0 [ 576.842612][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.847900][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.853886][ T9307] ? bpf_test_run+0x81/0xdf0 [ 576.858629][ T9307] ? filter_irq_stacks+0x49/0x190 [ 576.863825][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.869106][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.874407][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.879681][ T9307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 576.886166][ T9307] ? kmsan_get_metadata+0x146/0x160 [ 576.891527][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.897509][ T9307] ? __pfx___bpf_prog_run512+0x10/0x10 [ 576.903114][ T9307] ? __pfx___bpf_prog_run512+0x10/0x10 [ 576.908736][ T9307] bpf_test_run+0x493/0xdf0 [ 576.913446][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.919432][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.924722][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.930742][ T9307] ? bpf_test_run+0x2f4/0xdf0 [ 576.935774][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.941113][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.947136][ T9307] bpf_prog_test_run_skb+0x22a5/0x3050 [ 576.952811][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 576.958179][ T9307] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 576.964188][ T9307] bpf_prog_test_run+0x5bb/0x9f0 [ 576.969300][ T9307] __sys_bpf+0x925/0xee0 [ 576.973727][ T9307] __x64_sys_bpf+0xa4/0xf0 [ 576.978285][ T9307] x64_sys_call+0x13d0/0x3ea0 [ 576.983125][ T9307] do_syscall_64+0x134/0xf80 [ 576.987900][ T9307] ? clear_bhb_loop+0x50/0xa0 [ 576.992720][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.998755][ T9307] RIP: 0033:0x7fbfe339c799 [ 577.003275][ T9307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.023031][ T9307] RSP: 002b:00007fbfe430a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.031589][ T9307] RAX: ffffffffffffffda RBX: 00007fbfe3615fa0 RCX: 00007fbfe339c799 [ 577.039678][ T9307] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 577.047758][ T9307] RBP: 00007fbfe3432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 577.055841][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.063907][ T9307] R13: 00007fbfe3616038 R14: 00007fbfe3615fa0 R15: 00007ffea3431cf8 [ 577.072039][ T9307] [ 577.075480][ T9307] Kernel Offset: disabled [ 577.079883][ T9307] Rebooting in 86400 seconds..