last executing test programs: 22m20.077091912s ago: executing program 32 (id=1507): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x80, 0xff, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x3], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xfffc, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x81, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 21m51.096339114s ago: executing program 33 (id=1704): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) 20m2.739792592s ago: executing program 7 (id=2358): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0)=0x2000, &(0x7f00000001c0)}, 0x20) 20m2.473097447s ago: executing program 7 (id=2433): openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 20m2.084584829s ago: executing program 7 (id=2437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, r2, 0x1, 0x70bf2c}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 20m1.628542368s ago: executing program 7 (id=2441): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000002c0)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYRES8], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 20m1.044717687s ago: executing program 7 (id=2448): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 20m0.401967369s ago: executing program 7 (id=2452): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0xfffffffffffffeda, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 19m59.588142536s ago: executing program 34 (id=2452): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0xfffffffffffffeda, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 9m59.620994681s ago: executing program 2 (id=6303): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) 9m59.07511247s ago: executing program 2 (id=6306): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 9m58.884062614s ago: executing program 2 (id=6307): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f00000001c0)=r1) 9m57.852166878s ago: executing program 2 (id=6315): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4ef, 0xfffffe01, 0x7fff, 0xb1, "fe6735f4050000000000002000", 0x6, 0x10}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 9m57.703231703s ago: executing program 2 (id=6318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@bridge_dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x2}]}}]}]}, 0x34}}, 0x8000) 9m57.086561466s ago: executing program 2 (id=6323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x17) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002700)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, 0x270, 0x80000000) 9m41.842403284s ago: executing program 35 (id=6323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x17) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002700)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, 0x270, 0x80000000) 9m32.550814288s ago: executing program 8 (id=6471): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) 9m31.951051826s ago: executing program 8 (id=6473): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x1}}) 9m31.428527817s ago: executing program 8 (id=6475): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="2dc3864b5a685a3b01920ed55065aef827447dd83db4b5bee0c2", 0x1a}], 0x1) 9m30.366428814s ago: executing program 8 (id=6480): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x486, &(0x7f0000000780)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag8eVBREKgp6qHiKybaEbhtJothSbCpSL4IU9CweRf8Cb6KIehK86sWTFIr20tZTZGZn8rLNprbZZGLz+cBmn2fn2Z3vd+ftmefZBLBh9WV/kohtEfFrRPQ0qosb9DWerl4+M3rt8pnRJGZnX/0zydtduXxmtGxavm9rUelPI9IPkmIli02dOn18pF6vTRb1wekTbw1OnTr92DsnRo7VjtVODh86dPDA0JNPDD/eljyzvK7seW9i7+4XXr/w0uiRC2/++FUW77Zi+cI82qUvS/yv2VzzsofbvbKKbV9QTjorDISb0hER2ebqyo//nuiI+Y3XE8+/X2lwwKrKrk2bWi+emQVuY0lUHQFQjfJCn93/lo816nqsC5eeadwAZXlfLR6NJZ2RFm26mu5v26kvIo7M/P1Z9ohVGocAAFjoo9FPD3dHzPZc+/LFrO/RM7ckjbvy59/zvzuKOZTeiPh/ROyMiDsiYldE3BmRt707Iu5ZYTzX93/Siyv8yGVl/b+nirmtxf2/svcXvR1FbXuef1dydLxe2198J/3RtSmrDy2zjm+e++XjVssW9v+yR7b+si9YxHGxs2mAbmxkeiTvlLbBpXMRezqXyj+ZmwlIImJ3ROy5uY/eURbGH/lib6tGN85/GW2YZ5r9PEtvJst/JpryLyUL5yfHr5ufHNwc9dr+wXKvuN5PP59/pdX6V5R/G1yqNZ4XbP/mJr3J/JdRm5y6+XWc/+3Dlvc0t7j/p93Ja/k8c3fx2rsj09OTQxHdyeG8vuj14fn3lvWyfbb/9+9b+vjfWbwnS/7eiMh24vsi4v6nIx4oYn8wIh6KiH3L5P/Ds62XlflHWtH2PxcxtuT5b27/z7b//Hz9LRQ6jn//dav1/7vtfzAv9Rev5Oe/G1gqnOx00RzgSr47AAAA+K9I89/AJ+nAXDlNBwYav+HfFf9L6xNT048enXj75Fjjt/K90ZWWI109xXhofbxeG0pmik9sjI8OF2PF5XjpgWLc+JOOLXl9YHSiPlZx7rDRbW1x/Gf+6Kg6OmCVbVny1eHuNQ8EqEDzPHq6uHr25XAygNuV/9eGjesGx3+6VnEAa+9Wr/9vtDkOYO0tdfyfbaqbC4Dbk/t/2Lgc/7BBpd9WHQFQIdd/2JBW8n/9q1jYPDn13fqOcBUL6zrliLKQrot4FFapUPGJCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE3+CQAA//8ry+RJ") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9901) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 9m29.519087744s ago: executing program 8 (id=6484): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write$char_usb(r0, &(0x7f0000001480)="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", 0x1000) 9m28.548965844s ago: executing program 8 (id=6491): r0 = syz_open_dev$media(&(0x7f0000000040), 0x1059, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 9m27.27576658s ago: executing program 36 (id=6491): r0 = syz_open_dev$media(&(0x7f0000000040), 0x1059, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 2m31.80695672s ago: executing program 1 (id=8323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000100)) 2m31.02036317s ago: executing program 1 (id=8327): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c811}, 0xc840) 2m30.351652399s ago: executing program 1 (id=8331): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m29.778586836s ago: executing program 1 (id=8334): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@noinit_itable}, {@orlov}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x484, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m27.591171621s ago: executing program 1 (id=8340): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x408a, 0x4) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) 2m26.211036198s ago: executing program 1 (id=8346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1fc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/1\x00', 0x200) 2m24.343035118s ago: executing program 37 (id=8346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1fc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/1\x00', 0x200) 14.446045795s ago: executing program 6 (id=8869): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x3, {0x2, 0xfb}, 0x58, 0xfffffffffffff}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x3, {0x2, 0xfb}, 0x58, 0xea}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) 12.094797585s ago: executing program 6 (id=8883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000e00)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, 'E', "dcd654", 0x201, "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"}}}}}, 0x0) 11.237286796s ago: executing program 6 (id=8886): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 8.985298397s ago: executing program 5 (id=8893): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) 8.134215135s ago: executing program 5 (id=8898): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000340)={0x0, 0x7, 0x6, "62e47d56e2db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x19, 0x2, "db17"}, 0x0, 0x0, 0x0, 0x0}) 7.752654944s ago: executing program 3 (id=8899): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.618552039s ago: executing program 6 (id=8900): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x130, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 6.983988768s ago: executing program 9 (id=8903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x70, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x6, 0x1, @void, @void, @val={0x3, 0x1, 0x64}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xd, 0x80}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9}}, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 5.944856042s ago: executing program 4 (id=8906): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.942818004s ago: executing program 6 (id=8907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x10, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x40000) 5.662456832s ago: executing program 9 (id=8908): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000004, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB], 0x5, 0x224, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000100)='./file1\x00', 0x24842, 0x21) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x5a00, 0x3, 0x3) 5.661807135s ago: executing program 3 (id=8909): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="b2", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="14"], 0x18, 0x4}}], 0x1, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r1, &(0x7f00000009c0), 0x40000000000007c, 0x100c0, 0x0) 5.254682534s ago: executing program 4 (id=8910): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x22, 0x10020, 0x1, 0x75, 0x400000000000fffd, 0x0, 0x0, 0x4}, 0x0) 5.083324412s ago: executing program 6 (id=8912): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x2) 4.516345833s ago: executing program 0 (id=8913): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@grpid}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe2$watch_queue(&(0x7f0000005900), 0x80) 4.516079968s ago: executing program 9 (id=8914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) ppoll(&(0x7f0000000040)=[{r0, 0x140}], 0x1, 0x0, 0x0, 0x0) 4.5159427s ago: executing program 3 (id=8915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x20048005}, 0x40000) 4.515669433s ago: executing program 5 (id=8916): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'pim6reg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "01c019", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 4.065251951s ago: executing program 9 (id=8917): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x113d1, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) 4.065050051s ago: executing program 4 (id=8918): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 3.990975396s ago: executing program 3 (id=8919): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x192) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\x00', 0x1, 0x4fed0) fallocate(r0, 0x8, 0x14000, 0x10000) 3.722547432s ago: executing program 0 (id=8920): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) 3.400366029s ago: executing program 4 (id=8921): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x0) 3.179133714s ago: executing program 9 (id=8922): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x9b) 2.938010942s ago: executing program 0 (id=8923): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000280)={0x9, 0x100, 0x0, {0xa, 0x3, 0x7, 0x1}}) 2.707463561s ago: executing program 4 (id=8924): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000004) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xd895, 0x20000000, 0x3, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.544654986s ago: executing program 9 (id=8925): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.445667823s ago: executing program 3 (id=8926): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) 2.297720871s ago: executing program 0 (id=8927): r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r0, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) 2.117674161s ago: executing program 5 (id=8928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x104, 0x0) getdents64(r0, &(0x7f0000000b00)=""/26, 0x1a) 1.873405047s ago: executing program 4 (id=8929): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff040140861246200001010203010902200001010080fa0904000002ff04010007058102000200070501020002"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x1c, r2, 0x1, 0x70bd25, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 1.522063402s ago: executing program 0 (id=8930): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\x00'], 0x8) 1.354071686s ago: executing program 5 (id=8931): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) 1.279171134s ago: executing program 3 (id=8932): r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) 62.8892ms ago: executing program 5 (id=8933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x55174, 0x5a1b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x40000) 0s ago: executing program 0 (id=8934): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): sum. Please run e2fsck -D. [ 1509.820281][T28341] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1510.184016][ T8718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.184042][ T8718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.235752][T28351] profile_transition: unconfined exec no attachment [ 1510.414053][ T8229] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1510.567958][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.567986][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.577317][T28351] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1510.577362][T28351] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1510.577712][T28351] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1510.577748][T28351] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1510.656071][ T8229] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1510.670818][ T8229] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.670868][ T8229] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1510.670898][ T8229] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1510.670930][ T8229] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1510.670978][ T8229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.776139][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1510.776162][ T31] audit: type=1800 audit(1790292151.318:8119): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=280965 res=0 errno=0 [ 1510.818695][ T31] audit: type=1800 audit(1790292151.358:8120): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=280966 res=0 errno=0 [ 1510.845545][ T31] audit: type=1800 audit(1790292151.388:8121): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=280967 res=0 errno=0 [ 1510.903997][ T31] audit: type=1800 audit(1790292151.448:8122): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281007 res=0 errno=0 [ 1511.074441][ T31] audit: type=1800 audit(1790292151.618:8123): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1511.220416][T28360] profile_transition: unconfined exec no attachment [ 1511.254259][ T8229] gud 10-1:1.0: probe with driver gud failed with error -121 [ 1511.328078][ T31] audit: type=1800 audit(1790292151.868:8124): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1511.453239][ T31] audit: type=1800 audit(1790292151.988:8125): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1511.552085][T23129] usb 10-1: USB disconnect, device number 17 [ 1511.573671][ T31] audit: type=1800 audit(1790292152.118:8126): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1511.669704][T28360] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1511.685703][T28360] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1511.686047][T28360] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1511.686084][T28360] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1511.950886][ T31] audit: type=1800 audit(1790292152.488:8127): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1512.079454][ T31] audit: type=1800 audit(1790292152.618:8128): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1512.459019][T28381] profile_transition: unconfined exec no attachment [ 1512.494475][T28380] xt_hashlimit: size too large, truncated to 1048576 [ 1512.814174][T28389] profile_transition: unconfined exec no attachment [ 1512.994461][T28392] profile_transition: unconfined exec no attachment [ 1513.151132][T28387] netlink: 7 bytes leftover after parsing attributes in process `syz.9.8495'. [ 1513.847202][T28401] profile_transition: unconfined exec no attachment [ 1514.301725][T28404] ifb0: entered promiscuous mode [ 1514.301836][T28404] macvlan0: entered allmulticast mode [ 1514.301855][T28404] ifb0: entered allmulticast mode [ 1514.619264][T28404] ifb0: left allmulticast mode [ 1514.619295][T28404] ifb0: left promiscuous mode [ 1515.984349][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1515.984371][ T31] audit: type=1800 audit(1790292156.528:8155): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1516.146038][ T31] audit: type=1800 audit(1790292156.688:8156): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.8512" name="resource0" dev="sysfs" ino=2974 res=0 errno=0 [ 1516.213468][ T31] audit: type=1800 audit(1790292156.758:8157): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1516.339815][ T31] audit: type=1800 audit(1790292156.878:8158): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1516.454928][ T31] audit: type=1800 audit(1790292156.998:8159): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1517.039320][ T31] audit: type=1800 audit(1790292157.588:8160): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1517.140075][ T31] audit: type=1800 audit(1790292157.678:8161): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1517.224471][ T31] audit: type=1800 audit(1790292157.768:8162): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1517.255669][T23129] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1517.406390][T23129] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1517.421112][T23129] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1517.421152][T23129] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1517.421195][T23129] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.507327][ T31] audit: type=1800 audit(1790292158.058:8163): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281248 res=0 errno=0 [ 1517.548317][T28451] FAULT_INJECTION: forcing a failure. [ 1517.548317][T28451] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.548363][T28451] CPU: 0 UID: 0 PID: 28451 Comm: syz.0.8521 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1517.548409][T28451] Tainted: [L]=SOFTLOCKUP [ 1517.548420][T28451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1517.548439][T28451] Call Trace: [ 1517.548451][T28451] [ 1517.548463][T28451] dump_stack_lvl+0x100/0x190 [ 1517.548509][T28451] should_fail_ex.cold+0x5/0xa [ 1517.548543][T28451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.548586][T28451] should_failslab+0xc2/0x120 [ 1517.548618][T28451] __kmalloc_cache_noprof+0x91/0x6d0 [ 1517.548661][T28451] ? watch_queue_init+0x45/0x170 [ 1517.548702][T28451] watch_queue_init+0x45/0x170 [ 1517.548736][T28451] create_pipe_files+0x672/0x970 [ 1517.548781][T28451] do_pipe2+0xbd/0x1e0 [ 1517.548811][T28451] ? __pfx_do_pipe2+0x10/0x10 [ 1517.548846][T28451] ? xfd_validate_state+0x129/0x190 [ 1517.548888][T28451] __x64_sys_pipe2+0x54/0x80 [ 1517.548921][T28451] do_syscall_64+0x123/0x790 [ 1517.548957][T28451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.548989][T28451] RIP: 0033:0x7f1c75f9e159 [ 1517.549015][T28451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.549044][T28451] RSP: 002b:00007f1c76e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1517.549073][T28451] RAX: ffffffffffffffda RBX: 00007f1c76225fa0 RCX: 00007f1c75f9e159 [ 1517.549093][T28451] RDX: 0000000000000000 RSI: 0000000000084080 RDI: 0000000000000000 [ 1517.549112][T28451] RBP: 00007f1c7603506b R08: 0000000000000000 R09: 0000000000000000 [ 1517.549131][T28451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.549150][T28451] R13: 00007f1c76226038 R14: 00007f1c76225fa0 R15: 00007ffcfd243248 [ 1517.549190][T28451] [ 1517.884951][ T31] audit: type=1800 audit(1790292158.438:8164): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1518.758830][T28464] profile_transition: unconfined exec no attachment [ 1518.972550][T23129] pegasus 10-1:1.0: probe with driver pegasus failed with error -71 [ 1519.049018][T23129] usb 10-1: USB disconnect, device number 18 [ 1519.142043][T28470] ip_tables: iptables: counters copy to user failed while replacing table [ 1519.197654][T28472] profile_transition: unconfined exec no attachment [ 1519.960413][T28478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1520.137864][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8534'. [ 1521.130066][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1521.130089][ T31] audit: type=1800 audit(1790292161.668:8190): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1521.363744][ T31] audit: type=1800 audit(1790292161.908:8191): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1521.693728][ T31] audit: type=1800 audit(1790292162.238:8192): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1521.754053][T28498] loop5: detected capacity change from 0 to 1024 [ 1521.849211][ T31] audit: type=1800 audit(1790292162.388:8193): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1521.996737][ T31] audit: type=1800 audit(1790292162.538:8194): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1522.134585][ T31] audit: type=1800 audit(1790292162.678:8195): pid=28498 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.8541" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1522.215770][ T31] audit: type=1800 audit(1790292162.758:8196): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1522.508641][ T31] audit: type=1800 audit(1790292163.058:8197): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1522.701994][ T31] audit: type=1800 audit(1790292163.248:8198): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1522.875574][ T31] audit: type=1800 audit(1790292163.418:8199): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1523.067950][T28511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8546'. [ 1523.236199][T28511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8546'. [ 1524.389190][T28533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8555'. [ 1524.476711][T28536] profile_transition: unconfined exec no attachment [ 1524.685804][T28539] xt_hashlimit: size too large, truncated to 1048576 [ 1525.059632][T28542] loop5: detected capacity change from 0 to 2048 [ 1525.169356][T28546] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1525.263766][T28549] profile_transition: unconfined exec no attachment [ 1525.266206][T28544] loop9: detected capacity change from 0 to 764 [ 1525.567584][T28544] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 1525.567675][T28551] overlayfs: statfs failed on './file0' [ 1526.070852][T28546] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1526.070890][T28546] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1526.108302][T28546] Remounting filesystem read-only [ 1526.117623][ T5618] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1526.159196][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1526.159218][ T31] audit: type=1800 audit(1790292166.698:8219): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1526.299846][ T31] audit: type=1800 audit(1790292166.838:8220): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1526.681331][ T31] audit: type=1800 audit(1790292167.218:8221): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1526.766506][T28561] FAULT_INJECTION: forcing a failure. [ 1526.766506][T28561] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.766587][T28561] CPU: 0 UID: 0 PID: 28561 Comm: syz.5.8566 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1526.766630][T28561] Tainted: [L]=SOFTLOCKUP [ 1526.766642][T28561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1526.766661][T28561] Call Trace: [ 1526.766672][T28561] [ 1526.766684][T28561] dump_stack_lvl+0x100/0x190 [ 1526.766731][T28561] should_fail_ex.cold+0x5/0xa [ 1526.766766][T28561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.766807][T28561] should_failslab+0xc2/0x120 [ 1526.766845][T28561] __kmalloc_cache_noprof+0x91/0x6d0 [ 1526.766886][T28561] ? alloc_ucounts+0x13d/0x5c0 [ 1526.766933][T28561] alloc_ucounts+0x13d/0x5c0 [ 1526.766974][T28561] ? __pfx_alloc_ucounts+0x10/0x10 [ 1526.767018][T28561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.767060][T28561] set_cred_ucounts+0xcd/0x200 [ 1526.767113][T28561] __sys_setreuid+0x4a0/0xb00 [ 1526.767151][T28561] do_syscall_64+0x123/0x790 [ 1526.767187][T28561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.767218][T28561] RIP: 0033:0x7f378c99e159 [ 1526.767243][T28561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1526.767272][T28561] RSP: 002b:00007f378d91e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1526.767301][T28561] RAX: ffffffffffffffda RBX: 00007f378cc25fa0 RCX: 00007f378c99e159 [ 1526.767322][T28561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 1526.767341][T28561] RBP: 00007f378ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 1526.767360][T28561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1526.767379][T28561] R13: 00007f378cc26038 R14: 00007f378cc25fa0 R15: 00007fff49a82238 [ 1526.767419][T28561] [ 1526.959950][ T31] audit: type=1800 audit(1790292167.488:8222): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1527.237055][ T31] audit: type=1800 audit(1790292167.778:8223): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1527.289306][ T31] audit: type=1800 audit(1790292167.828:8224): pid=28565 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.6.8568" name="UDC" dev="configfs" ino=83632 res=0 errno=0 [ 1527.369256][ T31] audit: type=1800 audit(1790292167.898:8225): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1527.548083][ T31] audit: type=1800 audit(1790292168.088:8226): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1527.742575][T28572] loop5: detected capacity change from 0 to 2048 [ 1527.746215][ T31] audit: type=1800 audit(1790292168.288:8227): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1527.857134][ T31] audit: type=1800 audit(1790292168.398:8228): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1527.925871][T28572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1528.266972][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.427155][T28565] Need at least one configuration in g1. [ 1528.427617][T28565] udc dummy_udc.0: failed to start g1: -22 [ 1528.427646][T28565] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1528.879370][T28590] netlink: 13 bytes leftover after parsing attributes in process `syz.9.8577'. [ 1528.963883][T28593] profile_transition: unconfined exec no attachment [ 1529.121295][T28565] UDC core: g1: couldn't find an available UDC or it's busy [ 1530.092434][T28349] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1530.243076][T28349] usb 4-1: Using ep0 maxpacket: 32 [ 1530.243890][T28349] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1530.263710][T28349] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1530.263743][T28349] usb 4-1: config 0 has no interface number 0 [ 1530.263804][T28349] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1530.263841][T28349] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1530.325484][T28349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.325519][T28349] usb 4-1: Product: syz [ 1530.325541][T28349] usb 4-1: Manufacturer: syz [ 1530.325562][T28349] usb 4-1: SerialNumber: syz [ 1530.367661][T28349] usb 4-1: config 0 descriptor?? [ 1531.038515][T28349] appletouch 4-1:0.85: Geyser mode initialized. [ 1531.064965][T28349] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input104 [ 1531.266813][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1531.266836][ T31] audit: type=1800 audit(1790292171.808:8247): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=281787 res=0 errno=0 [ 1531.269683][ T31] audit: type=1800 audit(1790292171.808:8248): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=281766 res=0 errno=0 [ 1531.334751][ T31] audit: type=1800 audit(1790292171.878:8249): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=281788 res=0 errno=0 [ 1531.367726][ T31] audit: type=1800 audit(1790292171.908:8250): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1531.403278][ T31] audit: type=1800 audit(1790292171.948:8251): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281809 res=0 errno=0 [ 1531.458655][ T31] audit: type=1800 audit(1790292171.998:8252): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281828 res=0 errno=0 [ 1531.482065][T28349] usb 4-1: USB disconnect, device number 51 [ 1531.518750][ T31] audit: type=1800 audit(1790292172.058:8253): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=281844 res=0 errno=0 [ 1531.559690][ T31] audit: type=1800 audit(1790292172.098:8254): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=281847 res=0 errno=0 [ 1531.586507][T28631] profile_transition: unconfined exec no attachment [ 1531.594194][ T31] audit: type=1800 audit(1790292172.138:8255): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=281846 res=0 errno=0 [ 1531.599501][T28349] appletouch 4-1:0.85: input: appletouch disconnected [ 1531.672604][T28630] loop6: detected capacity change from 0 to 512 [ 1531.699670][T28630] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1531.726903][T28630] EXT4-fs (loop6): 1 truncate cleaned up [ 1531.748955][T28630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.796978][ T31] audit: type=1800 audit(1790292172.338:8256): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1532.086047][T28637] profile_transition: unconfined exec no attachment [ 1532.287398][ T9603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.263715][T28349] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1534.417830][T28349] usb 4-1: not running at top speed; connect to a high speed hub [ 1534.417873][T28349] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1534.446151][T28349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.446218][T28349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.502832][ T5728] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1534.544211][T28349] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 1534.664002][ T5728] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1534.664050][ T5728] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1534.666867][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.666918][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.666979][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.671939][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.672015][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.672052][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.727931][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.728014][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.728050][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.762812][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.762899][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.762936][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.776640][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.776693][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.776729][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.785665][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.785715][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.785751][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.799387][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.799438][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.799499][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.813228][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1534.813280][ T5728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1534.813316][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.957918][ T5728] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1534.957953][ T5728] usb 1-1: Product: syz [ 1534.957999][ T5728] usb 1-1: Manufacturer: syz [ 1534.958020][ T5728] usb 1-1: SerialNumber: syz [ 1535.079684][ T5728] usb 1-1: config 0 descriptor?? [ 1535.132279][ T5728] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1535.234101][T28349] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1535.236399][T28349] uvcvideo 4-1:1.1: No frame descriptor found for the default format. [ 1535.236423][T28349] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 1535.237009][T28349] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -22 [ 1535.498369][ T5728] usb 1-1: USB disconnect, device number 7 [ 1535.501089][ T5728] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1535.580170][T28349] usb 4-1: USB disconnect, device number 52 [ 1536.242187][ T5728] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1536.333000][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 1536.333024][ T31] audit: type=1800 audit(1790292176.868:8298): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1536.394666][ T5728] usb 6-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 1536.399890][ T5728] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1536.399932][ T5728] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1536.399970][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.447997][ T5728] usb 6-1: config 0 descriptor?? [ 1536.466363][ T31] audit: type=1800 audit(1790292177.008:8299): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282227 res=0 errno=0 [ 1536.503582][ T31] audit: type=1800 audit(1790292177.048:8300): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=282256 res=0 errno=0 [ 1536.543199][ T31] audit: type=1800 audit(1790292177.088:8301): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=282234 res=0 errno=0 [ 1536.581814][ T31] audit: type=1800 audit(1790292177.088:8302): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=282235 res=0 errno=0 [ 1536.581878][ T31] audit: type=1800 audit(1790292177.128:8303): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=282236 res=0 errno=0 [ 1536.709694][ T31] audit: type=1800 audit(1790292177.248:8304): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282285 res=0 errno=0 [ 1536.825416][T28702] jffs2: notice: (28702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1536.854633][ T31] audit: type=1800 audit(1790292177.398:8305): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1537.038395][ T31] audit: type=1800 audit(1790292177.578:8306): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1537.068468][ T5728] input: HID 046d:c09b as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C09B.005A/input/input105 [ 1537.073468][ T31] audit: type=1800 audit(1790292177.618:8307): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282303 res=0 errno=0 [ 1537.364531][ T5728] logitech-hidpp-device 0003:046D:C09B.005A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.5-1/input0 [ 1537.407194][T28707] gtp0: entered promiscuous mode [ 1537.407221][T28707] gtp0: entered allmulticast mode [ 1537.423827][ T5728] usb 6-1: USB disconnect, device number 47 [ 1537.671651][T28713] profile_transition: unconfined exec no attachment [ 1537.826338][T28714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8626'. [ 1538.076850][T28713] fido_id[28713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1538.462031][ T5728] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1538.615196][ T5728] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1538.627305][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.627357][ T5728] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1538.627390][ T5728] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1538.643281][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1538.643314][ T5728] usb 1-1: Product: syz [ 1538.643335][ T5728] usb 1-1: Manufacturer: syz [ 1538.707263][T28717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1538.739347][ T5728] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 1538.804395][ T5728] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1539.120747][ T8229] usb 1-1: USB disconnect, device number 8 [ 1539.243199][ T8229] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1539.304544][ T8229] garmin_gps 1-1:1.0: device disconnected [ 1539.907592][T28734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8634'. [ 1539.907627][T28734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8634'. [ 1541.281966][T28349] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1541.434828][T28349] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1541.437307][T28349] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1541.437339][T28349] usb 6-1: config 0 has no interface number 0 [ 1541.437382][T28349] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1541.442731][T28349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.443116][T28349] usb 6-1: Product: syz [ 1541.443138][T28349] usb 6-1: Manufacturer: syz [ 1541.443159][T28349] usb 6-1: SerialNumber: syz [ 1541.484865][T28349] usb 6-1: config 0 descriptor?? [ 1541.538995][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 1541.539018][ T31] audit: type=1800 audit(1790292182.078:8354): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1541.592575][T28349] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1541.628776][ T31] audit: type=1800 audit(1790292182.168:8355): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282667 res=0 errno=0 [ 1541.696823][ T31] audit: type=1800 audit(1790292182.238:8356): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=282699 res=0 errno=0 [ 1541.696890][ T31] audit: type=1800 audit(1790292182.238:8357): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=282674 res=0 errno=0 [ 1541.758604][ T31] audit: type=1800 audit(1790292182.298:8358): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=282675 res=0 errno=0 [ 1541.797258][ T31] audit: type=1800 audit(1790292182.298:8359): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=282696 res=0 errno=0 [ 1541.797320][ T31] audit: type=1800 audit(1790292182.338:8360): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=282697 res=0 errno=0 [ 1541.845468][ T31] audit: type=1800 audit(1790292182.398:8361): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=282676 res=0 errno=0 [ 1541.876710][ T31] audit: type=1800 audit(1790292182.418:8362): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1541.900645][ T31] audit: type=1800 audit(1790292182.448:8363): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=282698 res=0 errno=0 [ 1542.055743][T28349] usb 6-1: USB disconnect, device number 48 [ 1542.127968][T28349] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1543.213163][ T8718] IPVS: starting estimator thread 0... [ 1543.302464][T28788] IPVS: using max 29 ests per chain, 69600 per kthread [ 1543.940729][T28797] netlink: 'syz.0.8658': attribute type 22 has an invalid length. [ 1543.940754][T28797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8658'. [ 1543.940782][T28797] bond0: option ad_select: unable to set because the bond device is up [ 1543.999443][T28798] loop4: detected capacity change from 0 to 512 [ 1544.000224][T28798] EXT4-fs: Ignoring removed orlov option [ 1544.000259][T28798] EXT4-fs: Ignoring removed mblk_io_submit option [ 1544.042942][T28798] EXT4-fs (loop4): #blocks per group too big: 204800 [ 1544.809968][T28812] FAULT_INJECTION: forcing a failure. [ 1544.809968][T28812] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.810014][T28812] CPU: 0 UID: 0 PID: 28812 Comm: syz.4.8665 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1544.810057][T28812] Tainted: [L]=SOFTLOCKUP [ 1544.810069][T28812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1544.810088][T28812] Call Trace: [ 1544.810098][T28812] [ 1544.810111][T28812] dump_stack_lvl+0x100/0x190 [ 1544.810158][T28812] should_fail_ex.cold+0x5/0xa [ 1544.810192][T28812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.810235][T28812] should_failslab+0xc2/0x120 [ 1544.810267][T28812] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1544.810313][T28812] ? __fget_files+0x215/0x3d0 [ 1544.810341][T28812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.810378][T28812] ? create_new_namespaces+0x30/0xac0 [ 1544.810419][T28812] create_new_namespaces+0x30/0xac0 [ 1544.810461][T28812] __do_sys_setns+0x213/0x1f30 [ 1544.810496][T28812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.810536][T28812] ? __pfx___do_sys_setns+0x10/0x10 [ 1544.810576][T28812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.810620][T28812] do_syscall_64+0x123/0x790 [ 1544.810657][T28812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.810689][T28812] RIP: 0033:0x7f4e2fb9e159 [ 1544.810713][T28812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.810742][T28812] RSP: 002b:00007f4e30a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1544.810772][T28812] RAX: ffffffffffffffda RBX: 00007f4e2fe25fa0 RCX: 00007f4e2fb9e159 [ 1544.810792][T28812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 1544.810811][T28812] RBP: 00007f4e2fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1544.810830][T28812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.810850][T28812] R13: 00007f4e2fe26038 R14: 00007f4e2fe25fa0 R15: 00007ffdcd8eb6b8 [ 1544.810896][T28812] [ 1545.784411][T28824] GUP no longer grows the stack in syz.0.8668 (28824): 200000003000-200000200000 (200000002000) [ 1545.784455][T28824] CPU: 0 UID: 0 PID: 28824 Comm: syz.0.8668 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1545.784497][T28824] Tainted: [L]=SOFTLOCKUP [ 1545.784509][T28824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1545.784529][T28824] Call Trace: [ 1545.784540][T28824] [ 1545.784552][T28824] dump_stack_lvl+0x100/0x190 [ 1545.784600][T28824] gup_vma_lookup.cold+0x83/0x96 [ 1545.784651][T28824] __get_user_pages+0x252/0x2c30 [ 1545.784711][T28824] ? kasan_save_stack+0x30/0x50 [ 1545.784761][T28824] ? __pfx___get_user_pages+0x10/0x10 [ 1545.784807][T28824] ? __x64_sys_process_vm_writev+0xe2/0x1c0 [ 1545.784853][T28824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.784897][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.784941][T28824] __gup_longterm_locked+0x87d/0x16f0 [ 1545.784988][T28824] ? __entry_text_end+0x102035/0x102039 [ 1545.785023][T28824] ? __lock_acquire+0x5c0/0x1f40 [ 1545.785061][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785099][T28824] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1545.785153][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785190][T28824] ? lock_acquire+0x1d1/0x380 [ 1545.785218][T28824] ? process_vm_rw_core.constprop.0+0x3e6/0x950 [ 1545.785265][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785304][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785346][T28824] pin_user_pages_remote+0xed/0x140 [ 1545.785398][T28824] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1545.785448][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785493][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785536][T28824] process_vm_rw_core.constprop.0+0x412/0x950 [ 1545.785589][T28824] ? copy_iovec_from_user+0xcf/0x140 [ 1545.785634][T28824] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1545.785685][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785741][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785778][T28824] ? iovec_from_user+0xda/0x140 [ 1545.785822][T28824] process_vm_rw+0x309/0x370 [ 1545.785863][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.785909][T28824] ? __pfx_process_vm_rw+0x10/0x10 [ 1545.785963][T28824] ? madvise_unlock+0xa9/0x220 [ 1545.786028][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.786064][T28824] ? xfd_validate_state+0x129/0x190 [ 1545.786102][T28824] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 1545.786149][T28824] ? do_syscall_64+0xae/0x790 [ 1545.786180][T28824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.786216][T28824] ? lockdep_hardirqs_on+0x7d/0x110 [ 1545.786248][T28824] do_syscall_64+0x123/0x790 [ 1545.786283][T28824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.786315][T28824] RIP: 0033:0x7f1c75f9e159 [ 1545.786339][T28824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.786368][T28824] RSP: 002b:00007f1c76e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1545.786398][T28824] RAX: ffffffffffffffda RBX: 00007f1c76225fa0 RCX: 00007f1c75f9e159 [ 1545.786418][T28824] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000046 [ 1545.786438][T28824] RBP: 00007f1c7603506b R08: 0000000000000001 R09: 0000000000000000 [ 1545.786457][T28824] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1545.786477][T28824] R13: 00007f1c76226038 R14: 00007f1c76225fa0 R15: 00007ffcfd243248 [ 1545.786518][T28824] [ 1546.512072][T28830] loop9: detected capacity change from 0 to 7 [ 1546.567773][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1546.567795][ T31] audit: type=1800 audit(1790292187.108:8390): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1546.666623][ T31] audit: type=1800 audit(1790292187.208:8391): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1546.696452][ C0] blk_print_req_error: 64 callbacks suppressed [ 1546.696475][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.696548][ C0] buffer_io_error: 138 callbacks suppressed [ 1546.696564][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.770513][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.770598][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.793594][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.793706][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.797725][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.797804][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.799029][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.799098][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.822579][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.822661][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.898762][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.898861][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.899942][T28830] ldm_validate_partition_table(): Disk read failed. [ 1546.900082][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.900167][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.912373][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.912442][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.967882][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1546.967966][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1546.996462][T28830] Dev loop9: unable to read RDB block 0 [ 1546.998568][T28830] loop9: unable to read partition table [ 1546.998754][T28830] loop9: partition table beyond EOD, truncated [ 1546.998787][T28830] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1547.084606][T28838] IPv6: NLM_F_CREATE should be specified when creating new route [ 1547.153868][T28838] loop4: detected capacity change from 0 to 1024 [ 1547.202888][T28841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8675'. [ 1547.236422][T28838] hfsplus: failed to load extents file [ 1547.274254][ T31] audit: type=1800 audit(1790292187.818:8392): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1547.422814][ T31] audit: type=1800 audit(1790292187.968:8393): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1547.659425][ T31] audit: type=1800 audit(1790292188.198:8394): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1547.774413][ T31] audit: type=1800 audit(1790292188.318:8395): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1548.194126][ T31] audit: type=1800 audit(1790292188.738:8396): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1548.287170][ T31] audit: type=1800 audit(1790292188.828:8397): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1548.411717][ T31] audit: type=1800 audit(1790292188.948:8398): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1548.529980][ T31] audit: type=1800 audit(1790292189.058:8399): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1548.553636][T28858] loop5: detected capacity change from 0 to 256 [ 1548.646320][T28858] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 1549.293195][T28872] loop4: detected capacity change from 0 to 512 [ 1549.365314][T28859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1549.365490][T28859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1549.365627][T28859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1549.365762][T28859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1549.365827][T28859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1549.412940][T28873] loop9: detected capacity change from 0 to 512 [ 1549.414760][T28872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1549.414861][T28872] ext4 filesystem being mounted at /1403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1549.416201][T28859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1549.484995][T28873] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1549.485021][T28873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1549.485243][T28873] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1549.485636][T28873] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #13: comm syz.9.8691: iget: bad i_size value: 12154761577498 [ 1549.485674][T28873] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1549.491417][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1549.491448][ C0] EXT4-fs (loop9): initial error at time 1790292190: ext4_orphan_get:1403: inode 13 [ 1549.491488][ C0] EXT4-fs (loop9): last error at time 1790292190: ext4_orphan_get:1403: inode 13 [ 1549.509762][T28873] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.8691: couldn't read orphan inode 13 (err -117) [ 1549.509824][T28873] loop9: lost filesystem error report for type 5 error -117 [ 1549.644294][T28873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1549.711607][ T8229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1549.793446][T28873] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1549.793473][T28873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1549.866242][ T8229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1549.881898][ T8229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.881942][ T8229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.881976][ T8229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1549.882030][ T8229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.952904][ T8229] usb 1-1: config 0 descriptor?? [ 1550.340878][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.507431][ T8229] hid_parser_main: 222 callbacks suppressed [ 1550.507459][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507489][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507516][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507542][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507569][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507595][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507622][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507648][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507674][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.507701][ T8229] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1550.509553][T28883] loop6: detected capacity change from 0 to 764 [ 1550.646634][ T8229] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1550.801807][T15716] Bluetooth: hci3: command 0x0406 tx timeout [ 1550.871151][T22892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.917889][ T8229] usb 1-1: USB disconnect, device number 9 [ 1551.087042][T28888] profile_transition: unconfined exec no attachment [ 1551.198360][T28890] profile_transition: unconfined exec no attachment [ 1551.441768][T15716] Bluetooth: hci0: command 0x0c1a tx timeout [ 1551.441876][T15716] Bluetooth: hci1: command 0x0406 tx timeout [ 1551.441909][T15716] Bluetooth: hci4: command 0x0406 tx timeout [ 1551.571224][T28897] tipc: Started in network mode [ 1551.571260][T28897] tipc: Node identity 7f000001, cluster identity 4711 [ 1551.571729][T28897] tipc: New replicast peer: 127.0.0.1 [ 1551.572232][T28897] tipc: Enabled bearer , priority 10 [ 1551.616089][T28888] fido_id[28888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1551.687671][T28899] profile_transition: unconfined exec no attachment [ 1551.778331][T28900] profile_transition: unconfined exec no attachment [ 1551.984956][T28898] bond0: option mode: unable to set because the bond device is up [ 1552.083437][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1552.083460][ T31] audit: type=1800 audit(1790292192.628:8426): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1552.173786][T28887] zswap: compressor _ not available [ 1552.211208][ T31] audit: type=1800 audit(1790292192.748:8427): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1552.390963][ T31] audit: type=1800 audit(1790292192.928:8428): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1552.540826][ T31] audit: type=1800 audit(1790292193.078:8429): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1552.650546][ T31] audit: type=1800 audit(1790292193.188:8430): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1552.701538][T23129] tipc: Node number set to 2130706433 [ 1552.723737][T28909] loop3: detected capacity change from 0 to 1024 [ 1552.724440][T28909] EXT4-fs: Ignoring removed bh option [ 1552.811840][T28909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1552.811953][T28909] ext4 filesystem being mounted at /1523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.872011][ T31] audit: type=1800 audit(1790292193.408:8431): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1552.993313][T28909] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 3) [ 1553.016990][T28909] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1553.017029][T28909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1553.017029][T28909] [ 1553.100705][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.128828][ T31] audit: type=1800 audit(1790292193.668:8432): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1553.199764][ T31] audit: type=1800 audit(1790292193.738:8433): pid=28917 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.8702" name="enable" dev="sysfs" ino=2735 res=0 errno=0 [ 1553.248259][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.248764][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.267979][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.330691][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.352763][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.353321][T28909] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: block 3: comm syz.3.8700: lblock 3 mapped to illegal pblock 3 (length 1) [ 1553.482465][ T31] audit: type=1800 audit(1790292194.028:8434): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35569 res=0 errno=0 [ 1553.522080][T20087] Bluetooth: hci0: command 0x0c1a tx timeout [ 1553.652295][ T31] audit: type=1800 audit(1790292194.198:8435): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1553.887702][ T36] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 1553.914801][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1553.914837][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1553.914837][ T36] [ 1554.016803][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1554.017001][T28923] loop6: detected capacity change from 0 to 128 [ 1554.017714][T28923] msdos: Bad value for 'gid' [ 1554.017734][T28923] msdos: Bad value for 'gid' [ 1554.272524][T28923] type: 2229836882 invalid [ 1554.566922][T28930] loop5: detected capacity change from 0 to 512 [ 1554.650673][T28930] EXT4-fs (loop5): 1 truncate cleaned up [ 1554.667438][T28932] xt_hashlimit: size too large, truncated to 1048576 [ 1554.684958][T28930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1554.935679][T28939] profile_transition: unconfined exec no attachment [ 1555.256225][T28946] profile_transition: unconfined exec no attachment [ 1555.275397][T28947] profile_transition: unconfined exec no attachment [ 1555.358345][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1555.601493][T20087] Bluetooth: hci0: command 0x0c1a tx timeout [ 1556.031120][T28951] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1556.856233][T28953] loop9: detected capacity change from 0 to 131072 [ 1556.914084][T28953] F2FS-fs (loop9): Segment count (31) mismatch with total segments from devices (0) [ 1556.914119][T28953] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1556.921107][T28953] F2FS-fs (loop9): invalid crc value [ 1557.038772][T28953] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1557.058425][T28953] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1557.058457][T28953] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 1557.110417][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1557.110440][ T31] audit: type=1800 audit(1790292197.648:8450): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1557.167369][T28949] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 1557.167404][T28949] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1557.167439][T28949] raw: 00fff00000000000 ffffea00013f8048 ffffea00013f7fc8 0000000000000000 [ 1557.167467][T28949] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1557.167485][T28949] page dumped because: unmovable page [ 1557.167500][T28949] page_owner tracks the page as allocated [ 1557.167511][T28949] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 6307, tgid 6304 (iou-sqp-6306), ts 127282489007 [ 1557.167555][T28949] post_alloc_hook+0xfd/0x120 [ 1557.167595][T28949] get_page_from_freelist+0x110d/0x35d0 [ 1557.167634][T28949] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1557.167675][T28949] alloc_pages_mpol+0x201/0x550 [ 1557.167705][T28949] alloc_pages_noprof+0x1a/0x160 [ 1557.167739][T28949] __vmalloc_node_range_noprof+0x833/0x1420 [ 1557.167772][T28949] __vmalloc_node_noprof+0xad/0xf0 [ 1557.167801][T28949] kcov_remote_start+0x518/0x6d0 [ 1557.167832][T28949] io_sq_thread+0x522/0x1460 [ 1557.167861][T28949] ret_from_fork+0x730/0xd60 [ 1557.167897][T28949] ret_from_fork_asm+0x1a/0x30 [ 1557.167925][T28949] page last free pid 1 tgid 1 ts 22605976890 stack trace: [ 1557.167946][T28949] free_pages_prepare+0x586/0xe00 [ 1557.167979][T28949] __free_contig_range_common+0x14f/0x250 [ 1557.168015][T28949] destroy_args+0xa8/0x7a0 [ 1557.168047][T28949] debug_vm_pgtable+0x1d69/0x3490 [ 1557.168080][T28949] do_one_initcall+0x11c/0x6f0 [ 1557.168106][T28949] kernel_init_freeable+0x6ea/0x7b0 [ 1557.168137][T28949] kernel_init+0x21/0x1e0 [ 1557.424792][T28959] input: syz0 as /devices/virtual/input/input106 [ 1557.439341][ T31] audit: type=1800 audit(1790292197.978:8451): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283346 res=0 errno=0 [ 1557.490338][ T31] audit: type=1800 audit(1790292198.018:8452): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=283361 res=0 errno=0 [ 1557.490427][ T31] audit: type=1800 audit(1790292198.028:8453): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=283364 res=0 errno=0 [ 1557.548746][ T31] audit: type=1800 audit(1790292198.028:8454): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=283363 res=0 errno=0 [ 1557.548806][ T31] audit: type=1800 audit(1790292198.088:8455): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=283362 res=0 errno=0 [ 1557.612443][ T31] audit: type=1800 audit(1790292198.148:8456): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=283353 res=0 errno=0 [ 1557.612502][ T31] audit: type=1800 audit(1790292198.148:8457): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=283356 res=0 errno=0 [ 1557.620092][ T31] audit: type=1800 audit(1790292198.158:8458): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=283349 res=0 errno=0 [ 1557.698970][T28949] ret_from_fork+0x730/0xd60 [ 1557.699008][T28949] ret_from_fork_asm+0x1a/0x30 [ 1557.755936][ T31] audit: type=1800 audit(1790292198.278:8459): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=283350 res=0 errno=0 [ 1558.736219][T28974] FAULT_INJECTION: forcing a failure. [ 1558.736219][T28974] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.736266][T28974] CPU: 0 UID: 0 PID: 28974 Comm: syz.4.8726 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1558.736308][T28974] Tainted: [L]=SOFTLOCKUP [ 1558.736320][T28974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1558.736338][T28974] Call Trace: [ 1558.736348][T28974] [ 1558.736360][T28974] dump_stack_lvl+0x100/0x190 [ 1558.736408][T28974] should_fail_ex.cold+0x5/0xa [ 1558.736443][T28974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1558.736486][T28974] should_failslab+0xc2/0x120 [ 1558.736519][T28974] __kmalloc_cache_noprof+0x91/0x6d0 [ 1558.736561][T28974] ? watch_queue_init+0x45/0x170 [ 1558.736602][T28974] watch_queue_init+0x45/0x170 [ 1558.736638][T28974] create_pipe_files+0x672/0x970 [ 1558.736674][T28974] do_pipe2+0xbd/0x1e0 [ 1558.736705][T28974] ? __pfx_do_pipe2+0x10/0x10 [ 1558.736735][T28974] ? xfd_validate_state+0x129/0x190 [ 1558.736777][T28974] __x64_sys_pipe2+0x54/0x80 [ 1558.736809][T28974] do_syscall_64+0x123/0x790 [ 1558.736845][T28974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.736876][T28974] RIP: 0033:0x7f4e2fb9e159 [ 1558.736900][T28974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.736935][T28974] RSP: 002b:00007f4e30a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1558.736964][T28974] RAX: ffffffffffffffda RBX: 00007f4e2fe25fa0 RCX: 00007f4e2fb9e159 [ 1558.736984][T28974] RDX: 0000000000000000 RSI: 0000000000084080 RDI: 0000000000000000 [ 1558.737003][T28974] RBP: 00007f4e2fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1558.737022][T28974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.737040][T28974] R13: 00007f4e2fe26038 R14: 00007f4e2fe25fa0 R15: 00007ffdcd8eb6b8 [ 1558.737080][T28974] [ 1561.168204][T28994] loop3: detected capacity change from 0 to 131072 [ 1561.202266][T28994] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 1561.202298][T28994] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1561.206726][T28994] F2FS-fs (loop3): invalid crc value [ 1561.319936][T28994] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1561.347595][T28994] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1561.347626][T28994] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1561.504138][T28993] ifb0: entered promiscuous mode [ 1561.504277][T28993] macvlan0: entered allmulticast mode [ 1561.504298][T28993] ifb0: entered allmulticast mode [ 1561.677863][T28993] ifb0: left allmulticast mode [ 1561.677902][T28993] ifb0: left promiscuous mode [ 1561.903126][T29002] loop9: detected capacity change from 0 to 7 [ 1561.903784][ C0] blk_print_req_error: 10 callbacks suppressed [ 1561.903805][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1561.903875][ C0] buffer_io_error: 10 callbacks suppressed [ 1561.903898][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1561.910244][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1561.910353][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1561.910772][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1561.910864][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1561.911113][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1561.911190][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.012443][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.012528][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.044920][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.045006][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.045207][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.045277][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.045322][T29002] ldm_validate_partition_table(): Disk read failed. [ 1562.045448][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.045514][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.049833][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.049946][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.071282][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1562.071391][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1562.169102][T29002] Dev loop9: unable to read RDB block 0 [ 1562.184645][T29002] loop9: unable to read partition table [ 1562.184844][T29002] loop9: partition table beyond EOD, truncated [ 1562.184881][T29002] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1562.599499][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1562.599524][ T31] audit: type=1800 audit(1790292203.148:8483): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1562.731681][ T31] audit: type=1800 audit(1790292203.278:8484): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1562.935991][ T31] audit: type=1800 audit(1790292203.478:8485): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1563.224536][ T31] audit: type=1800 audit(1790292203.768:8486): pid=29015 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.8742" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1563.305341][ T31] audit: type=1800 audit(1790292203.848:8487): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1563.334435][T29015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8742'. [ 1563.629918][ T31] audit: type=1800 audit(1790292204.168:8488): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1563.881898][T29021] profile_transition: unconfined exec no attachment [ 1564.101777][ T31] audit: type=1800 audit(1790292204.628:8489): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1564.267713][T29024] profile_transition: unconfined exec no attachment [ 1564.867117][ T31] audit: type=1800 audit(1790292205.408:8490): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1565.233347][T29027] overlayfs: failed lookup in lower (newroot/1490, name='file0', err=-40): overlapping layers [ 1565.558751][ T31] audit: type=1800 audit(1790292206.098:8491): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1565.667987][ T31] audit: type=1800 audit(1790292206.208:8492): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1565.897856][T29031] loop9: detected capacity change from 0 to 1024 [ 1565.898555][T29031] EXT4-fs: Ignoring removed bh option [ 1565.974354][T29031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1565.974465][T29031] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1566.101274][T29031] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 3) [ 1566.320652][T29031] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1566.320694][T29031] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1566.320694][T29031] [ 1566.350392][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.377374][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.399436][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.428917][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.429451][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.431337][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.595486][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.595937][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.622515][T29039] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.8721: lblock 3 mapped to illegal pblock 3 (length 1) [ 1566.929484][T26292] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1566.929524][T26292] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1566.929524][T26292] [ 1566.978359][T22892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1567.696294][T29053] ifb0: entered promiscuous mode [ 1567.696409][T29053] macvlan0: entered allmulticast mode [ 1567.696428][T29053] ifb0: entered allmulticast mode [ 1567.701020][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1567.701038][ T31] audit: type=1800 audit(1790292208.238:8500): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283745 res=0 errno=0 [ 1567.762802][ T31] audit: type=1800 audit(1790292208.308:8501): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=283749 res=0 errno=0 [ 1567.795768][ T31] audit: type=1800 audit(1790292208.348:8502): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=283753 res=0 errno=0 [ 1567.827574][ T31] audit: type=1800 audit(1790292208.378:8503): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=283752 res=0 errno=0 [ 1567.939712][ T31] audit: type=1800 audit(1790292208.478:8504): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1567.987189][ T31] audit: type=1800 audit(1790292208.528:8505): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283821 res=0 errno=0 [ 1567.989249][T29053] ifb0: left allmulticast mode [ 1567.989276][T29053] ifb0: left promiscuous mode [ 1568.030752][ T31] audit: type=1800 audit(1790292208.568:8506): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=283825 res=0 errno=0 [ 1568.401767][ T31] audit: type=1800 audit(1790292208.938:8507): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1568.556566][ T31] audit: type=1800 audit(1790292209.098:8508): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1568.749997][ T31] audit: type=1800 audit(1790292209.288:8509): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1569.052894][T28349] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1569.204529][T28349] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1569.207623][T28349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.210087][T28349] usb 6-1: config 0 descriptor?? [ 1569.293131][ T8229] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1569.455329][ T8229] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1569.461143][ T8229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.461217][ T8229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1569.461248][ T8229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1569.461281][ T8229] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1569.461524][ T8229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.545270][T28349] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1569.885362][T28349] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1569.885395][T28349] [drm] Initialized udl on minor 1 [ 1570.005132][T29080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1570.005319][T29080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1570.005515][T29080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1570.045620][ T8229] gud 1-1:1.0: probe with driver gud failed with error -121 [ 1570.302774][ T8229] usb 1-1: USB disconnect, device number 10 [ 1570.432394][T29088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1570.459309][T29088] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1570.881627][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1571.159642][T29094] FAULT_INJECTION: forcing a failure. [ 1571.159642][T29094] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.159715][T29094] CPU: 0 UID: 0 PID: 29094 Comm: syz.3.8768 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1571.159757][T29094] Tainted: [L]=SOFTLOCKUP [ 1571.159769][T29094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1571.159788][T29094] Call Trace: [ 1571.159798][T29094] [ 1571.159810][T29094] dump_stack_lvl+0x100/0x190 [ 1571.159859][T29094] should_fail_ex.cold+0x5/0xa [ 1571.159894][T29094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.159940][T29094] should_failslab+0xc2/0x120 [ 1571.159973][T29094] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1571.160018][T29094] ? d_instantiate+0x8a/0xb0 [ 1571.160055][T29094] ? alloc_empty_file+0x5b/0x1c0 [ 1571.160097][T29094] alloc_empty_file+0x5b/0x1c0 [ 1571.160133][T29094] alloc_file_pseudo+0x183/0x290 [ 1571.160171][T29094] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1571.160205][T29094] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1571.160246][T29094] ? __do_sys_memfd_secret+0x130/0x570 [ 1571.160289][T29094] __do_sys_memfd_secret+0x266/0x570 [ 1571.160326][T29094] do_syscall_64+0x123/0x790 [ 1571.160362][T29094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.160395][T29094] RIP: 0033:0x7fc68c39e159 [ 1571.160419][T29094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.160449][T29094] RSP: 002b:00007fc68d330028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1571.160478][T29094] RAX: ffffffffffffffda RBX: 00007fc68c625fa0 RCX: 00007fc68c39e159 [ 1571.160499][T29094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 1571.160518][T29094] RBP: 00007fc68c43506b R08: 0000000000000000 R09: 0000000000000000 [ 1571.160537][T29094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.160556][T29094] R13: 00007fc68c626038 R14: 00007fc68c625fa0 R15: 00007ffee1cf65b8 [ 1571.160597][T29094] [ 1572.082388][T15716] Bluetooth: hci1: command 0x0406 tx timeout [ 1572.082459][T15716] Bluetooth: hci4: command 0x0406 tx timeout [ 1572.082494][T15716] Bluetooth: hci3: command 0x0406 tx timeout [ 1572.857258][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1572.857281][ T31] audit: type=1800 audit(1790292213.398:8540): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1573.232545][ T31] audit: type=1800 audit(1790292213.778:8541): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1573.366799][ T31] audit: type=1800 audit(1790292213.908:8542): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1573.647813][T29123] loop6: detected capacity change from 0 to 256 [ 1573.701096][ T31] audit: type=1800 audit(1790292214.238:8543): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1573.780781][T29123] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 1573.848997][ T31] audit: type=1800 audit(1790292214.388:8544): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1574.392796][ T5728] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1574.545823][ T5728] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1574.550204][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.550243][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.550312][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.610530][ T5728] usb 5-1: config 0 descriptor?? [ 1574.668222][ T31] audit: type=1800 audit(1790292215.208:8545): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1574.710293][ T31] audit: type=1800 audit(1790292215.248:8546): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284168 res=0 errno=0 [ 1574.791165][ T31] audit: type=1800 audit(1790292215.328:8547): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=284197 res=0 errno=0 [ 1574.796118][ T31] audit: type=1800 audit(1790292215.338:8548): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=284175 res=0 errno=0 [ 1574.871254][ T31] audit: type=1800 audit(1790292215.408:8549): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=284176 res=0 errno=0 [ 1575.042717][T28349] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1575.043124][T28349] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1575.149668][T28349] usb 6-1: USB disconnect, device number 49 [ 1575.157467][ T5728] hid-steam 0003:28DE:1142.005C: item fetching failed at offset 4/5 [ 1575.158048][ T5728] hid-steam 0003:28DE:1142.005C: steam_probe:parse of hid interface failed [ 1575.158119][ T5728] hid-steam 0003:28DE:1142.005C: probe with driver hid-steam failed with error -22 [ 1575.265531][T16652] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1575.266234][T16652] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1575.428792][T29130] loop6: detected capacity change from 0 to 1024 [ 1575.429565][T29130] EXT4-fs: Ignoring removed bh option [ 1575.515167][T29130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.619767][T16652] usb 5-1: USB disconnect, device number 41 [ 1575.913789][T29138] loop5: detected capacity change from 0 to 1024 [ 1575.939721][T29138] EXT4-fs: Ignoring removed bh option [ 1575.985295][T29130] EXT4-fs error (device loop6): ext4_check_all_de:674: inode #12: block 7: comm syz.6.8780: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1576.043569][T29138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1576.043670][T29138] ext4 filesystem being mounted at /1495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1576.320630][T29138] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 3) [ 1576.352737][T29138] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1576.352780][T29138] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1576.352780][T29138] [ 1576.380425][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.414509][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.417015][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.460543][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.479638][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.507192][T29130] EXT4-fs (loop6): Remounting filesystem read-only [ 1576.524704][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.573408][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.597393][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.630983][T29142] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.8781: lblock 3 mapped to illegal pblock 3 (length 1) [ 1576.996720][ T9603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.198408][T29147] loop3: detected capacity change from 0 to 4096 [ 1577.295321][T26291] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1577.295362][T26291] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1577.295362][T26291] [ 1577.360340][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1577.372540][T29147] ntfs3(loop3): Failed to load $Extend (-22). [ 1577.372567][T29147] ntfs3(loop3): Failed to initialize $Extend. [ 1577.659056][T29153] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 1577.766342][T29154] loop6: detected capacity change from 0 to 512 [ 1577.798101][T29154] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1577.870459][T29154] EXT4-fs (loop6): 1 truncate cleaned up [ 1577.884417][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1577.884437][ T31] audit: type=1800 audit(1790292218.428:8562): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1577.888542][T29154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.001265][ T31] audit: type=1800 audit(1790292218.538:8563): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1578.024526][T29154] EXT4-fs (loop6): shut down requested (1) [ 1578.189059][ T31] audit: type=1800 audit(1790292218.728:8564): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1578.371148][ T9603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.422377][T29164] xt_hashlimit: size too large, truncated to 1048576 [ 1578.543807][ T31] audit: type=1800 audit(1790292219.088:8565): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1578.731787][T28349] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1578.868257][ T31] audit: type=1800 audit(1790292219.408:8566): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1578.897950][T28349] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1578.899039][T28349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.899089][T28349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.939483][T28349] usb 5-1: config 0 descriptor?? [ 1578.949962][ T31] audit: type=1800 audit(1790292219.488:8567): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284485 res=0 errno=0 [ 1578.996518][T28349] pwc: Askey VC010 type 2 USB webcam detected. [ 1579.000272][ T31] audit: type=1800 audit(1790292219.538:8568): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=284514 res=0 errno=0 [ 1579.001322][ T31] audit: type=1800 audit(1790292219.538:8569): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=284492 res=0 errno=0 [ 1579.066015][T29175] profile_transition: unconfined exec no attachment [ 1579.076120][ T31] audit: type=1800 audit(1790292219.628:8570): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=284493 res=0 errno=0 [ 1579.121017][ T31] audit: type=1800 audit(1790292219.658:8571): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=284494 res=0 errno=0 [ 1579.416115][T28349] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1579.419566][T29178] loop5: detected capacity change from 0 to 2048 [ 1579.419976][T28349] pwc: recv_control_msg error -32 req 02 val 2700 [ 1579.504079][T29178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1579.656923][T28349] pwc: recv_control_msg error -71 req 04 val 1000 [ 1579.657498][T28349] pwc: recv_control_msg error -71 req 04 val 1300 [ 1579.658097][T28349] pwc: recv_control_msg error -71 req 04 val 1400 [ 1579.659212][T28349] pwc: recv_control_msg error -71 req 02 val 2000 [ 1579.661191][T28349] pwc: recv_control_msg error -71 req 02 val 2100 [ 1579.663775][T28349] pwc: recv_control_msg error -71 req 04 val 1500 [ 1579.670761][T28349] pwc: recv_control_msg error -71 req 02 val 2500 [ 1579.671871][T28349] pwc: recv_control_msg error -71 req 02 val 2400 [ 1579.673150][T28349] pwc: recv_control_msg error -71 req 02 val 2600 [ 1579.679857][T28349] pwc: recv_control_msg error -71 req 02 val 2900 [ 1579.680994][T28349] pwc: recv_control_msg error -71 req 02 val 2800 [ 1579.730572][T28349] pwc: recv_control_msg error -71 req 04 val 1100 [ 1579.746985][T28349] pwc: recv_control_msg error -71 req 04 val 1200 [ 1579.856756][T28349] pwc: Registered as video103. [ 1579.888791][T28349] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input107 [ 1580.075430][T29179] profile_transition: unconfined exec no attachment [ 1580.088755][T28349] usb 5-1: USB disconnect, device number 42 [ 1581.163624][T29181] loop3: detected capacity change from 0 to 131072 [ 1581.244619][T29181] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 1581.244656][T29181] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1581.399055][T29181] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1581.427465][T29181] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1581.427498][T29181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1582.125099][T29194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1582.302585][T16652] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1582.457514][T16652] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1582.470959][T16652] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1582.471002][T16652] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.471033][T16652] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1582.471085][T16652] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.532234][T16652] usb 10-1: config 0 descriptor?? [ 1582.694338][T29200] ptp ptp0: max value is 2 [ 1583.000055][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1583.000078][ T31] audit: type=1800 audit(1790292223.538:8602): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1583.065898][ T31] audit: type=1800 audit(1790292223.608:8603): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284890 res=0 errno=0 [ 1583.069998][T16652] hid_parser_main: 5 callbacks suppressed [ 1583.070022][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070052][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070078][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070105][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070132][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070158][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070184][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070211][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070237][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.070263][T16652] hid-multitouch 0003:0457:07DA.005D: unknown main item tag 0x0 [ 1583.209195][T16652] hid-multitouch 0003:0457:07DA.005D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1583.251814][ T31] audit: type=1800 audit(1790292223.798:8604): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284912 res=0 errno=0 [ 1583.384220][T29206] profile_transition: unconfined exec no attachment [ 1583.613600][ T31] audit: type=1800 audit(1790292224.158:8605): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1583.696170][ T8229] usb 10-1: USB disconnect, device number 19 [ 1583.856269][ T31] audit: type=1800 audit(1790292224.398:8606): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1583.859296][T29206] fido_id[29206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1584.030142][T29213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1584.164233][T29215] input: syz1 as /devices/virtual/input/input108 [ 1584.169950][ T31] audit: type=1800 audit(1790292224.708:8607): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284961 res=0 errno=0 [ 1584.218315][ T31] audit: type=1800 audit(1790292224.748:8608): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=284976 res=0 errno=0 [ 1584.218375][ T31] audit: type=1800 audit(1790292224.758:8609): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=284979 res=0 errno=0 [ 1584.221116][ T31] audit: type=1800 audit(1790292224.758:8610): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=284978 res=0 errno=0 [ 1584.221173][ T31] audit: type=1800 audit(1790292224.758:8611): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=284977 res=0 errno=0 [ 1585.134584][T16652] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1585.242919][ T8229] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1585.283696][T16652] usb 5-1: Using ep0 maxpacket: 16 [ 1585.286787][T16652] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1585.290354][T16652] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1585.290385][T16652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.290412][T16652] usb 5-1: config 0 has no interface number 0 [ 1585.339718][T16652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.339752][T16652] usb 5-1: Product: syz [ 1585.339773][T16652] usb 5-1: Manufacturer: syz [ 1585.339794][T16652] usb 5-1: SerialNumber: syz [ 1585.384223][T16652] usb 5-1: config 0 descriptor?? [ 1585.410003][T16652] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 1585.422785][ T8229] usb 1-1: not running at top speed; connect to a high speed hub [ 1585.422820][ T8229] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1585.427241][ T8229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1585.439989][ T8229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.440021][ T8229] usb 1-1: Product: syz [ 1585.440042][ T8229] usb 1-1: Manufacturer: syz [ 1585.440086][ T8229] usb 1-1: SerialNumber: syz [ 1585.601275][ T8229] oti6858 1-1:1.0: oti6858 converter detected [ 1585.645771][ T8229] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 1585.660660][T16652] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1585.660702][T16652] uvcvideo 5-1:0.105: No valid video chain found. [ 1585.879250][ T8229] usb 5-1: USB disconnect, device number 43 [ 1586.556002][ T8229] usb 1-1: USB disconnect, device number 11 [ 1586.599166][ T8229] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1586.599864][ T8229] oti6858 1-1:1.0: device disconnected [ 1587.095191][T29240] ptp ptp0: max value is 2 [ 1587.229371][T28349] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1587.373478][T28349] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1587.374990][T28349] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1587.375021][T28349] usb 5-1: config 0 has no interface number 0 [ 1587.375064][T28349] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1587.378757][T28349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.378789][T28349] usb 5-1: Product: syz [ 1587.378809][T28349] usb 5-1: Manufacturer: syz [ 1587.378831][T28349] usb 5-1: SerialNumber: syz [ 1587.449124][T28349] usb 5-1: config 0 descriptor?? [ 1587.504923][T28349] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1587.820880][T28349] usb 5-1: USB disconnect, device number 44 [ 1587.854912][T28349] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1587.910690][T29244] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 1588.197925][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 1588.197948][ T31] audit: type=1800 audit(1790292228.738:8663): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1588.306797][ T31] audit: type=1800 audit(1790292228.848:8664): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1588.420474][ T31] audit: type=1800 audit(1790292228.958:8665): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1588.620524][ T31] audit: type=1800 audit(1790292229.158:8666): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1588.684481][T29253] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 1588.684520][T29253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1588.941797][ T31] audit: type=1800 audit(1790292229.478:8667): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1589.196502][ T31] audit: type=1800 audit(1790292229.738:8668): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1589.305449][ T31] audit: type=1800 audit(1790292229.848:8669): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1589.544007][T29266] serio: Serial port ptm0 [ 1589.564464][ T31] audit: type=1800 audit(1790292230.108:8670): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1589.605889][ T31] audit: type=1800 audit(1790292230.148:8671): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285473 res=0 errno=0 [ 1589.775881][ T31] audit: type=1800 audit(1790292230.318:8672): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1589.897917][T29273] ifb0: entered promiscuous mode [ 1589.898040][T29273] macvlan0: entered allmulticast mode [ 1589.898059][T29273] ifb0: entered allmulticast mode [ 1589.924531][T29275] loop9: detected capacity change from 0 to 1024 [ 1589.925449][T29275] EXT4-fs: Ignoring removed bh option [ 1589.985198][T29275] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.125806][T29273] ifb0: left allmulticast mode [ 1590.125836][T29273] ifb0: left promiscuous mode [ 1590.149104][T29275] EXT4-fs error (device loop9): ext4_check_all_de:674: inode #12: block 7: comm syz.9.8835: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1590.194477][T29275] EXT4-fs (loop9): Remounting filesystem read-only [ 1590.499136][T22892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.093706][T29294] profile_transition: unconfined exec no attachment [ 1591.253351][ T8229] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1591.390926][T29302] profile_transition: unconfined exec no attachment [ 1591.403081][ T8229] usb 4-1: Using ep0 maxpacket: 16 [ 1591.404342][ T8229] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1591.405730][ T8229] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 1591.405773][ T8229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.405800][ T8229] usb 4-1: config 0 has no interface number 0 [ 1591.405867][ T8229] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1591.405901][ T8229] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1591.405934][ T8229] usb 4-1: config 0 interface 98 has no altsetting 0 [ 1591.410906][ T8229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.410937][ T8229] usb 4-1: Product: syz [ 1591.410957][ T8229] usb 4-1: Manufacturer: syz [ 1591.410984][ T8229] usb 4-1: SerialNumber: syz [ 1591.506880][ T8229] usb 4-1: config 0 descriptor?? [ 1591.512217][T29290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1591.512265][T29290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1591.748424][T29290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1591.748502][T29290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1591.791664][T28349] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1591.942737][T28349] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1591.946006][T28349] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.946056][T28349] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1591.946114][T28349] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1591.950342][T28349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1591.950408][T28349] usb 7-1: Product: syz [ 1591.950430][T28349] usb 7-1: Manufacturer: syz [ 1592.030354][T29301] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1592.057934][T28349] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 1592.120096][T28349] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1592.385392][T28349] usb 7-1: USB disconnect, device number 51 [ 1592.451721][T28349] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1592.452435][T28349] garmin_gps 7-1:1.0: device disconnected [ 1592.693363][ T8229] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1592.693416][ T8229] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1592.693604][ T8229] asix 4-1:0.98: probe with driver asix failed with error -71 [ 1592.772089][ T8229] usb 4-1: USB disconnect, device number 53 [ 1592.953341][T29310] gtp0: entered promiscuous mode [ 1592.953368][T29310] gtp0: entered allmulticast mode [ 1593.227298][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 1593.227320][ T31] audit: type=1800 audit(1790292233.768:8711): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1593.390136][ T31] audit: type=1800 audit(1790292233.928:8712): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1593.552170][ T31] audit: type=1800 audit(1790292234.098:8713): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1593.666034][ T31] audit: type=1800 audit(1790292234.208:8714): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1593.917273][ T31] audit: type=1800 audit(1790292234.458:8715): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1594.002654][ T8229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1594.156956][ T8229] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1594.160566][ T8229] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1594.160596][ T8229] usb 1-1: config 1 has no interface number 0 [ 1594.203439][ T8229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.203471][ T8229] usb 1-1: Product: syz [ 1594.203492][ T8229] usb 1-1: Manufacturer: syz [ 1594.203513][ T8229] usb 1-1: SerialNumber: syz [ 1594.239806][ T31] audit: type=1800 audit(1790292234.788:8716): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1594.353080][ T31] audit: type=1800 audit(1790292234.898:8717): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1594.387643][ T31] audit: type=1800 audit(1790292234.928:8718): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286059 res=0 errno=0 [ 1594.428261][ T31] audit: type=1800 audit(1790292234.978:8719): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=286091 res=0 errno=0 [ 1594.533110][ T8229] usb 1-1: 3:1 : does not exist [ 1594.533139][ T8229] usb 1-1: 3:2 : does not exist [ 1594.570039][ T31] audit: type=1800 audit(1790292235.108:8720): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=286066 res=0 errno=0 [ 1594.744202][T29333] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1595.502328][T29339] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 1596.033217][T29349] loop5: detected capacity change from 0 to 512 [ 1596.053593][T29349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1596.129731][T29349] EXT4-fs (loop5): 1 truncate cleaned up [ 1596.152427][T29349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.157758][T29351] loop6: detected capacity change from 0 to 1024 [ 1596.602962][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.066746][T23129] usb 1-1: USB disconnect, device number 12 [ 1598.017014][T29366] loop6: detected capacity change from 0 to 2048 [ 1598.063227][T29366] NILFS (loop6): invalid segment: Magic number mismatch [ 1598.063259][T29366] NILFS (loop6): trying rollback from an earlier position [ 1598.133550][T29366] NILFS (loop6): recovery complete [ 1598.137443][T29376] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1598.316127][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1598.316149][ T31] audit: type=1800 audit(1790292238.858:8751): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1598.320901][T29366] NILFS (loop6): error -22 preparing GC: cannot read source blocks [ 1598.542741][ T31] audit: type=1800 audit(1790292239.088:8752): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1598.659676][ T31] audit: type=1800 audit(1790292239.198:8753): pid=29374 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.8873" name="file1" dev="tmpfs" ino=334 res=0 errno=0 [ 1598.828760][ T31] audit: type=1800 audit(1790292239.368:8754): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1599.078432][ T31] audit: type=1800 audit(1790292239.618:8755): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1599.185231][T29366] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 1599.288507][ T31] audit: type=1800 audit(1790292239.828:8756): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1599.491931][ T31] audit: type=1800 audit(1790292240.028:8757): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1599.857542][ T31] audit: type=1800 audit(1790292240.398:8758): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1600.110443][ T31] audit: type=1800 audit(1790292240.648:8759): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1600.487541][ T31] audit: type=1800 audit(1790292241.028:8760): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1601.033025][T23129] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1601.185124][T23129] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1601.188076][T23129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.188116][T23129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.188147][T23129] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1601.188220][T23129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.268721][T23129] usb 7-1: config 0 descriptor?? [ 1601.584309][T29420] loop5: detected capacity change from 0 to 128 [ 1601.706734][T29420] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1601.706772][T29420] hpfs: filesystem error: improperly stopped [ 1601.706792][T29420] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1601.706812][T29420] hpfs: You really don't want any checks? You are crazy... [ 1601.706853][T29420] hpfs: Code page index out of array [ 1601.706863][T29420] hpfs: code page support is disabled [ 1601.826929][T29420] hpfs: hpfs_map_4sectors(): unaligned read [ 1601.827015][T29420] hpfs: hpfs_map_4sectors(): unaligned read [ 1601.827029][T29420] hpfs: filesystem error: unable to find root dir [ 1601.950358][T23129] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1602.115402][T29424] profile_transition: unconfined exec no attachment [ 1602.162935][ T8229] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1602.312016][ T8229] usb 1-1: Using ep0 maxpacket: 16 [ 1602.316304][ T8229] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1602.319587][ T8229] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1602.319618][ T8229] usb 1-1: config 0 has no interface number 0 [ 1602.319685][ T8229] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1602.319719][ T8229] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1602.381880][ T8229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.381914][ T8229] usb 1-1: Product: syz [ 1602.381934][ T8229] usb 1-1: Manufacturer: syz [ 1602.381955][ T8229] usb 1-1: SerialNumber: syz [ 1602.416673][ T8229] usb 1-1: config 0 descriptor?? [ 1602.443103][T29422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1602.443198][T29422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1602.563164][T29426] sock: sock_set_timeout: `syz.9.8891' (pid 29426) tries to set negative timeout [ 1602.681051][T29422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1602.681103][T29422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1602.938222][ T8229] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1603.426451][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1603.426474][ T31] audit: type=1800 audit(1790292243.968:8786): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1603.577540][ T8229] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1603.577582][ T8229] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1603.610227][ T8229] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1603.644389][ T31] audit: type=1800 audit(1790292244.178:8787): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=286562 res=0 errno=0 [ 1603.644449][ T31] audit: type=1800 audit(1790292244.178:8788): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=286563 res=0 errno=0 [ 1603.698473][ T8229] usb 1-1: USB disconnect, device number 13 [ 1603.723339][ T31] audit: type=1800 audit(1790292244.268:8789): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=286542 res=0 errno=0 [ 1603.774104][ T31] audit: type=1800 audit(1790292244.318:8790): pid=26167 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=286564 res=0 errno=0 [ 1603.806527][ T31] audit: type=1800 audit(1790292244.358:8791): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1603.903746][ T31] audit: type=1800 audit(1790292244.448:8792): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1604.100774][ T31] audit: type=1800 audit(1790292244.638:8793): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1604.174131][T28349] usb 7-1: USB disconnect, device number 52 [ 1604.224347][T29437] FAULT_INJECTION: forcing a failure. [ 1604.224347][T29437] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.224393][T29437] CPU: 0 UID: 0 PID: 29437 Comm: syz.9.8896 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1604.224436][T29437] Tainted: [L]=SOFTLOCKUP [ 1604.224447][T29437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1604.224466][T29437] Call Trace: [ 1604.224478][T29437] [ 1604.224490][T29437] dump_stack_lvl+0x100/0x190 [ 1604.224539][T29437] should_fail_ex.cold+0x5/0xa [ 1604.224574][T29437] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.224624][T29437] should_failslab+0xc2/0x120 [ 1604.224658][T29437] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1604.224705][T29437] ? prepare_creds+0x2c/0x950 [ 1604.224759][T29437] prepare_creds+0x2c/0x950 [ 1604.224809][T29437] __sys_setresgid+0x4a7/0x12f0 [ 1604.224848][T29437] do_syscall_64+0x123/0x790 [ 1604.224885][T29437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.224917][T29437] RIP: 0033:0x7fa34439e159 [ 1604.224942][T29437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.224972][T29437] RSP: 002b:00007fa345339028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1604.225001][T29437] RAX: ffffffffffffffda RBX: 00007fa344625fa0 RCX: 00007fa34439e159 [ 1604.225028][T29437] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 000000000000ee00 [ 1604.225047][T29437] RBP: 00007fa34443506b R08: 0000000000000000 R09: 0000000000000000 [ 1604.225066][T29437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.225085][T29437] R13: 00007fa344626038 R14: 00007fa344625fa0 R15: 00007ffe38c4c248 [ 1604.225125][T29437] [ 1604.474818][ T31] audit: type=1800 audit(1790292245.018:8794): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 1604.502744][T23129] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1604.596628][ T31] audit: type=1800 audit(1790292245.138:8795): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1604.665669][T23129] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1604.684632][T23129] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1604.684664][T23129] usb 6-1: config 0 has no interface number 0 [ 1604.684710][T23129] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1604.708266][T23129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.708298][T23129] usb 6-1: Product: syz [ 1604.708319][T23129] usb 6-1: Manufacturer: syz [ 1604.708340][T23129] usb 6-1: SerialNumber: syz [ 1604.778994][T23129] usb 6-1: config 0 descriptor?? [ 1605.873245][T23129] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1605.931930][T23129] usb 6-1: USB disconnect, device number 50 [ 1606.364734][T29464] loop9: detected capacity change from 0 to 128 [ 1606.585654][T29465] syz.9.8908: attempt to access beyond end of device [ 1606.585654][T29465] loop9: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 1606.931029][T26033] kworker/u8:3: attempt to access beyond end of device [ 1606.931029][T26033] loop9: rw=1, sector=170, nr_sectors = 80 limit=128 [ 1607.487520][T29481] xt_hashlimit: size too large, truncated to 1048576 [ 1608.091206][T29491] profile_transition: unconfined exec no attachment [ 1608.137301][T29490] loop3: detected capacity change from 0 to 1024 [ 1608.237329][T29490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1608.237432][T29490] ext4 filesystem being mounted at /1549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1608.397238][T29490] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm syz.3.8919: bg 0: block 112: padding at end of block bitmap is not set [ 1608.454037][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1608.454059][ T31] audit: type=1800 audit(1790292248.998:8820): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1608.675644][ T31] audit: type=1800 audit(1790292249.218:8821): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1608.981019][T29490] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 1608.981061][T29490] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1608.981061][T29490] [ 1608.981081][T29490] EXT4-fs (loop3): Total free blocks count 0 [ 1608.981101][T29490] EXT4-fs (loop3): Free/Dirty block details [ 1608.981120][T29490] EXT4-fs (loop3): free_blocks=0 [ 1608.981140][T29490] EXT4-fs (loop3): dirty_blocks=16 [ 1608.981159][T29490] EXT4-fs (loop3): Block reservation details [ 1608.981177][T29490] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1609.116266][ T31] audit: type=1800 audit(1790292249.658:8822): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1609.305360][ T31] audit: type=1800 audit(1790292249.848:8823): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15962 res=0 errno=0 [ 1609.405883][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1609.595341][ T31] audit: type=1800 audit(1790292250.138:8824): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1609.740500][ T31] audit: type=1800 audit(1790292250.278:8825): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1609.969900][ T31] audit: type=1800 audit(1790292250.508:8826): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15347 res=0 errno=0 [ 1610.491810][T23129] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1610.512839][ T31] audit: type=1800 audit(1790292251.058:8827): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15470 res=0 errno=0 [ 1610.600824][ T31] audit: type=1800 audit(1790292251.138:8828): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 1610.645787][T23129] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 1610.666278][T23129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.666310][T23129] usb 5-1: Product: syz [ 1610.666331][T23129] usb 5-1: Manufacturer: syz [ 1610.666353][T23129] usb 5-1: SerialNumber: syz [ 1610.711028][T23129] usb 5-1: NFC: intf ffff88802a274000 id ffffffff8fe953e0 [ 1610.719995][ T31] audit: type=1800 audit(1790292251.258:8829): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286850 res=0 errno=0 [ 1611.181044][T29526] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1611.272657][ T8229] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1611.383678][T23129] nfcmrvl 5-1:1.0: NFC: registered with nci successfully [ 1611.426852][ T8229] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1611.429274][ T8229] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1611.429314][ T8229] usb 4-1: config 1 has no interface number 0 [ 1611.443259][ T8229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.443300][ T8229] usb 4-1: Product: syz [ 1611.443333][ T8229] usb 4-1: Manufacturer: syz [ 1611.443392][ T8229] usb 4-1: SerialNumber: syz [ 1611.499236][ T8229] usb 4-1: 3:1 : does not exist [ 1611.499273][ T8229] usb 4-1: 3:2 : does not exist [ 1611.509919][T26292] nfcmrvl 5-1:1.0: NFC: send entry, len 4 [ 1611.600176][ C0] nfcmrvl 5-1:1.0: NFC: urb ffff88804930ff00 status 0 count 0 [ 1611.896712][ T5618] Ring buffer clock went backwards: 262542986295 -> 12293 [ 1611.931079][T29532] [CPU: 1]TIME DOES NOT MATCH expected:262542986296 actual:12294 delta:1 before:12293 after:12293 context:. [ 1611.931079][T29532] trace clock:trace_clock_counter+0x0/0x40 [ 1611.931196][T29532] [262542986295] PAGE TIME STAMP [ 1611.931216][T29532] 0x0: [262542986295] delta:0 . [ 1611.931243][T29532] 0x18: [262542986295] delta:0 TIME EXTEND [ 1611.931267][T29532] 0x20: [262542986295] delta:0 . [ 1611.931294][T29532] expected end:0x58 last event actually ended at:0x58 [ 1611.931821][T29532] ------------[ cut here ]------------ [ 1611.931837][T29532] system_state != SYSTEM_BOOTING [ 1611.931851][T29532] WARNING: kernel/trace/ring_buffer.c:4783 at check_buffer.cold+0x1a2/0x1ef, CPU#1: syz.5.8933/29532 [ 1612.001464][T29532] Modules linked in: [ 1612.005423][T29532] CPU: 1 UID: 0 PID: 29532 Comm: syz.5.8933 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1612.016515][T29532] Tainted: [L]=SOFTLOCKUP [ 1612.020847][T29532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1612.030947][T29532] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1612.036743][T29532] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d ec 02 22 10 31 ff 89 ee e8 3f e4 e8 00 85 ed 0f 84 58 7f eb 00 e8 c2 e9 e8 00 90 <0f> 0b 90 e9 03 7d eb 00 49 c7 c7 00 5f f6 8b e9 51 fe ff ff e8 78 [ 1612.056423][T29532] RSP: 0018:ffffc90002e77768 EFLAGS: 00010293 [ 1612.062601][T29532] RAX: 0000000000000000 RBX: 1ffff920005ceef3 RCX: 0000000000000002 [ 1612.070589][T29532] RDX: ffff888051aa0000 RSI: ffffffff812327ae RDI: ffff888051aa0000 [ 1612.078609][T29532] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1612.086686][T29532] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000003006 [ 1612.094912][T29532] R13: ffff88801d2dd800 R14: ffff88801f681000 R15: ffffffff8bf65aa0 [ 1612.102938][T29532] FS: 000055555f1bf500(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 1612.111943][T29532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1612.118560][T29532] CR2: 000055555f1d29f8 CR3: 000000003c9d0000 CR4: 0000000000350ef0 [ 1612.126589][T29532] Call Trace: [ 1612.129877][T29532] [ 1612.132879][T29532] ? __pfx_trace_clock_counter+0x10/0x10 [ 1612.138581][T29532] ? __pfx_check_buffer+0x10/0x10 [ 1612.143703][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.149409][T29532] ? sched_mm_cid_fork+0x20c/0xeb0 [ 1612.154676][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.160376][T29532] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1612.166580][T29532] ring_buffer_lock_reserve+0x49a/0x1220 [ 1612.172324][T29532] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1612.178453][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.184198][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.189870][T29532] ? __lock_acquire+0x5c0/0x1f40 [ 1612.194916][T29532] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1612.201133][T29532] trace_event_buffer_reserve+0x1f9/0x350 [ 1612.206962][T29532] trace_event_raw_event_sched_process_fork+0x109/0x460 [ 1612.214011][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.219685][T29532] ? find_held_lock+0x2b/0x80 [ 1612.224454][T29532] ? __pfx_trace_event_raw_event_sched_process_fork+0x10/0x10 [ 1612.232007][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.237706][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.243426][T29532] ? lockdep_hardirqs_on+0x7d/0x110 [ 1612.248655][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.254377][T29532] ? __pfx_add_device_randomness+0x10/0x10 [ 1612.260220][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.265944][T29532] ? _copy_from_user+0x59/0xd0 [ 1612.270767][T29532] kernel_clone+0x461/0x9d0 [ 1612.275395][T29532] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1612.280807][T29532] ? __pfx_kernel_clone+0x10/0x10 [ 1612.285938][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.291639][T29532] ? __lock_acquire+0x5c0/0x1f40 [ 1612.296622][T29532] __do_sys_clone3+0x214/0x290 [ 1612.301483][T29532] ? __pfx___do_sys_clone3+0x10/0x10 [ 1612.306811][T29532] ? __might_fault+0xc5/0x140 [ 1612.311616][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.317296][T29532] ? _copy_to_user+0xaf/0xd0 [ 1612.322012][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.327709][T29532] do_syscall_64+0x123/0x790 [ 1612.332445][T29532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.338378][T29532] RIP: 0033:0x7f378c99ef49 [ 1612.342871][T29532] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1612.362556][T29532] RSP: 002b:00007fff49a820f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1612.370995][T29532] RAX: ffffffffffffffda RBX: 00007f378c95a4e0 RCX: 00007f378c99ef49 [ 1612.379062][T29532] RDX: 00007f378c95a4e0 RSI: 0000000000000058 RDI: 00007fff49a82150 [ 1612.387248][T29532] RBP: 00007f378d91e6c0 R08: 00007f378d91e6c0 R09: 00007fff49a82237 [ 1612.395329][T29532] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1612.403381][T29532] R13: 000000000000000b R14: 00007fff49a82150 R15: 00007fff49a82238 [ 1612.411442][T29532] [ 1612.414480][T29532] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1612.421775][T29532] CPU: 1 UID: 0 PID: 29532 Comm: syz.5.8933 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1612.432749][T29532] Tainted: [L]=SOFTLOCKUP [ 1612.437088][T29532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1612.447162][T29532] Call Trace: [ 1612.450467][T29532] [ 1612.453414][T29532] dump_stack_lvl+0x100/0x190 [ 1612.458145][T29532] vpanic+0x553/0x970 [ 1612.462153][T29532] ? __pfx_vpanic+0x10/0x10 [ 1612.466703][T29532] panic+0xd1/0xe0 [ 1612.470459][T29532] ? __pfx_panic+0x10/0x10 [ 1612.474923][T29532] check_panic_on_warn.cold+0x19/0x34 [ 1612.480331][T29532] ? check_buffer.cold+0x1a2/0x1ef [ 1612.485479][T29532] __warn.cold+0x191/0x318 [ 1612.489942][T29532] __report_bug+0x30f/0x440 [ 1612.494478][T29532] ? check_buffer.cold+0x1a2/0x1ef [ 1612.499633][T29532] ? __pfx___report_bug+0x10/0x10 [ 1612.504686][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.510350][T29532] ? irq_work_queue+0xd1/0x100 [ 1612.515159][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.520826][T29532] ? __wake_up_klogd+0xe5/0x140 [ 1612.525710][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.531382][T29532] ? vprintk_emit+0x1c9/0x6b0 [ 1612.536100][T29532] ? __pfx_vprintk_emit+0x10/0x10 [ 1612.541163][T29532] ? check_buffer.cold+0x1a2/0x1ef [ 1612.546313][T29532] report_bug+0xb3/0x220 [ 1612.550585][T29532] ? check_buffer.cold+0x1a2/0x1ef [ 1612.555730][T29532] handle_bug+0x16a/0x2a0 [ 1612.560097][T29532] exc_invalid_op+0x17/0x50 [ 1612.564635][T29532] asm_exc_invalid_op+0x1a/0x20 [ 1612.569506][T29532] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1612.575262][T29532] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d ec 02 22 10 31 ff 89 ee e8 3f e4 e8 00 85 ed 0f 84 58 7f eb 00 e8 c2 e9 e8 00 90 <0f> 0b 90 e9 03 7d eb 00 49 c7 c7 00 5f f6 8b e9 51 fe ff ff e8 78 [ 1612.594940][T29532] RSP: 0018:ffffc90002e77768 EFLAGS: 00010293 [ 1612.601054][T29532] RAX: 0000000000000000 RBX: 1ffff920005ceef3 RCX: 0000000000000002 [ 1612.609043][T29532] RDX: ffff888051aa0000 RSI: ffffffff812327ae RDI: ffff888051aa0000 [ 1612.617033][T29532] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1612.625019][T29532] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000003006 [ 1612.633004][T29532] R13: ffff88801d2dd800 R14: ffff88801f681000 R15: ffffffff8bf65aa0 [ 1612.641003][T29532] ? check_buffer.cold+0x1a1/0x1ef [ 1612.646152][T29532] ? check_buffer.cold+0x1a1/0x1ef [ 1612.651290][T29532] ? __pfx_trace_clock_counter+0x10/0x10 [ 1612.656954][T29532] ? __pfx_check_buffer+0x10/0x10 [ 1612.662015][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.667673][T29532] ? sched_mm_cid_fork+0x20c/0xeb0 [ 1612.672807][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.678475][T29532] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1612.684602][T29532] ring_buffer_lock_reserve+0x49a/0x1220 [ 1612.690293][T29532] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1612.696401][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.702066][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.707718][T29532] ? __lock_acquire+0x5c0/0x1f40 [ 1612.712674][T29532] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1612.718863][T29532] trace_event_buffer_reserve+0x1f9/0x350 [ 1612.724604][T29532] trace_event_raw_event_sched_process_fork+0x109/0x460 [ 1612.731578][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.737238][T29532] ? find_held_lock+0x2b/0x80 [ 1612.741943][T29532] ? __pfx_trace_event_raw_event_sched_process_fork+0x10/0x10 [ 1612.749437][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.755089][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.760745][T29532] ? lockdep_hardirqs_on+0x7d/0x110 [ 1612.765962][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.771626][T29532] ? __pfx_add_device_randomness+0x10/0x10 [ 1612.777540][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.783191][T29532] ? _copy_from_user+0x59/0xd0 [ 1612.787990][T29532] kernel_clone+0x461/0x9d0 [ 1612.792513][T29532] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1612.797908][T29532] ? __pfx_kernel_clone+0x10/0x10 [ 1612.802965][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.808620][T29532] ? __lock_acquire+0x5c0/0x1f40 [ 1612.813579][T29532] __do_sys_clone3+0x214/0x290 [ 1612.818368][T29532] ? __pfx___do_sys_clone3+0x10/0x10 [ 1612.823673][T29532] ? __might_fault+0xc5/0x140 [ 1612.828399][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.834052][T29532] ? _copy_to_user+0xaf/0xd0 [ 1612.838687][T29532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1612.844349][T29532] do_syscall_64+0x123/0x790 [ 1612.848961][T29532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.854871][T29532] RIP: 0033:0x7f378c99ef49 [ 1612.859306][T29532] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1612.878932][T29532] RSP: 002b:00007fff49a820f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1612.887368][T29532] RAX: ffffffffffffffda RBX: 00007f378c95a4e0 RCX: 00007f378c99ef49 [ 1612.895353][T29532] RDX: 00007f378c95a4e0 RSI: 0000000000000058 RDI: 00007fff49a82150 [ 1612.903335][T29532] RBP: 00007f378d91e6c0 R08: 00007f378d91e6c0 R09: 00007fff49a82237 [ 1612.911321][T29532] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1612.919322][T29532] R13: 000000000000000b R14: 00007fff49a82150 R15: 00007fff49a82238 [ 1612.927332][T29532] [ 1612.930560][T29532] Kernel Offset: disabled [ 1612.934878][T29532] Rebooting in 86400 seconds..