last executing test programs: 2m36.990775599s ago: executing program 2 (id=32): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) 2m36.757016214s ago: executing program 2 (id=34): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000240)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @opaque="ae0c5a9afeb39ed89990c73ff18f"}}}}}}, 0x0) 2m36.598164489s ago: executing program 2 (id=36): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000380)={0x10003, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 2m36.187917159s ago: executing program 2 (id=41): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000b80)={0x1, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x3, 0x0, 0x5, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000bc0)={0x0, 0x10, &(0x7f0000000c00)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000c40)=0x10) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000c80)={r1, @in={{0x2, 0x4e22, @empty}}, 0x4e23}, 0x90) 2m35.569614335s ago: executing program 2 (id=43): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000001bc0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) capset(&(0x7f0000001c00)={0x20080522}, &(0x7f0000001c40)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0), 0x8, &(0x7f0000001d00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m34.694864967s ago: executing program 2 (id=47): syz_mount_image$btrfs(&(0x7f0000000440), &(0x7f0000000040)='./sys\x00', 0x800810, &(0x7f00000006c0), 0xfe, 0x50f9, &(0x7f0000005140)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x3000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x84d9000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2m19.317715286s ago: executing program 32 (id=47): syz_mount_image$btrfs(&(0x7f0000000440), &(0x7f0000000040)='./sys\x00', 0x800810, &(0x7f00000006c0), 0xfe, 0x50f9, &(0x7f0000005140)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x3000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x84d9000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m27.468874298s ago: executing program 1 (id=381): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000a00)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0) 1m27.414278849s ago: executing program 1 (id=382): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m27.251006813s ago: executing program 1 (id=385): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) mount$9p_unix(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', &(0x7f00000002c0), 0x200080, &(0x7f0000000480)) 1m26.803972235s ago: executing program 1 (id=388): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x210000, &(0x7f0000000180)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x2000008, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000008c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file7\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x20c01, 0x0) 1m25.682739863s ago: executing program 1 (id=391): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000cc0)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000d00)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3}) 1m25.170224445s ago: executing program 1 (id=400): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10007, 0x0, 0x0, 0x0, 0x100}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0xd, 0x1c, 0x65, 0x0, 0x19, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x11, 0x1, 0x0, @rand_addr=0x64010102}}}}}, 0x0) 1m24.521802232s ago: executing program 33 (id=400): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10007, 0x0, 0x0, 0x0, 0x100}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0xd, 0x1c, 0x65, 0x0, 0x19, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x11, 0x1, 0x0, @rand_addr=0x64010102}}}}}, 0x0) 45.376378112s ago: executing program 0 (id=593): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x0, 0x0) lseek(r2, 0x5, 0x0) 45.134010589s ago: executing program 0 (id=594): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) semget(0x3, 0x0, 0x380) 44.806386627s ago: executing program 0 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) 44.516248774s ago: executing program 0 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x1214040, 0x0) stat(&(0x7f0000000400)='./file0/../file0\x00', 0x0) 44.223904622s ago: executing program 0 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) r1 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='00:03', 0x5) 43.862496851s ago: executing program 0 (id=602): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101c42, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 43.068012211s ago: executing program 34 (id=602): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101c42, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 24.041043642s ago: executing program 4 (id=661): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x575, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000500)="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", 0x131, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101) syz_fuse_handle_req(r1, &(0x7f0000000c00)="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", 0x2000, &(0x7f000000a300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r1, r0, 0x0, 0xe3aa6ea) 22.857333602s ago: executing program 4 (id=664): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0xf000, 0x2000001, 0x12, r0, 0x100000000) 22.511931121s ago: executing program 4 (id=667): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x100, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3505, 0x4, 0x0, 0x0, 0x83, 0x4000800, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 21.441956688s ago: executing program 4 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x0) mount$bind(&(0x7f0000002d80)='.\x00', &(0x7f0000002dc0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000002e00)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000002e40)='./file0/file0\x00', &(0x7f0000002e80)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000002ec0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)='./file0\x00', 0x0, 0x3c5093, 0x0) mount$bind(&(0x7f0000002f80)='./file0/file0\x00', &(0x7f0000002fc0)='./file0/../file0\x00', 0x0, 0x811002, 0x0) 21.170606425s ago: executing program 4 (id=671): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000040900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3100000000140003800800014001000000080002400000000014000000100001"], 0x88}}, 0x0) 18.359330306s ago: executing program 4 (id=675): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x20400, 0x68) sendfile(r0, r1, 0x0, 0x1) 18.358687086s ago: executing program 35 (id=675): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x20400, 0x68) sendfile(r0, r1, 0x0, 0x1) 10.619888412s ago: executing program 5 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000001200)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000001240), 0x3, 0x101000) syz_usb_disconnect(r1) syz_usb_connect$uac2(0x0, 0xfffffe56, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x40, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xc, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x26, 0xf7, 0xe9, {0x8, 0x25, 0x1, 0x1, 0x27, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0x1, {0x8, 0x25, 0x1, 0x83, 0xc, 0xc}}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.982131484s ago: executing program 3 (id=690): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 7.14128467s ago: executing program 5 (id=691): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fallocate(0xffffffffffffffff, 0x22, 0x0, 0xfffffffffffffffb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d"], &(0x7f0000000040)=""/3, 0x3e, 0x3, 0x1, 0x9}, 0x28) 7.14114103s ago: executing program 7 (id=682): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 6.419597938s ago: executing program 3 (id=692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffff4, 0x4) ppoll(&(0x7f0000000100)=[{r0, 0x205a}], 0x1, 0x0, 0x0, 0x0) 6.419443228s ago: executing program 6 (id=603): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.933006301s ago: executing program 5 (id=693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000200)=[@request_death], 0x50, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000440)=[@clear_death, @dead_binder_done]}) 5.932886251s ago: executing program 7 (id=682): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 5.307660066s ago: executing program 6 (id=603): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.885205447s ago: executing program 5 (id=694): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0xff7e, 0x0, 0x0, 0x7fff, 0x3, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xd) 4.884185727s ago: executing program 3 (id=695): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101b43, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='7\x00', 0x2) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 4.873864277s ago: executing program 7 (id=682): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 4.087137937s ago: executing program 6 (id=603): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.614492159s ago: executing program 5 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5f, 0x80000) r3 = eventfd2(0x0, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000017c0)={r3, 0x7, 0x2, r2}) close(0x4) 3.613275759s ago: executing program 3 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff1}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fffffff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 3.613160419s ago: executing program 7 (id=682): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 3.069589843s ago: executing program 6 (id=603): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.648873884s ago: executing program 5 (id=698): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401000000000000090401010300000000070501024000000705810240000007058201900301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 2.647727153s ago: executing program 3 (id=699): linkat(0xffffffffffffff9c, &(0x7f000000d480)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f000000d4c0)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f000000d540)='./file1\x00', 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f0000003040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000cec0)='./file1\x00', 0x6e842, 0x289) copy_file_range(r0, 0x0, r0, &(0x7f000000cf00)=0xf000, 0x863, 0x0) pwritev2(r0, &(0x7f000000d280)=[{0x0}, {0x0}, {&(0x7f0000002d80)}, {0x0}], 0x4, 0x0, 0x1f5ad82d, 0x2) truncate(&(0x7f0000000000)='./file1\x00', 0x733d) 2.643840264s ago: executing program 7 (id=682): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 1.822714745s ago: executing program 6 (id=603): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 782.305761ms ago: executing program 3 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x82002, 0x105) ioctl$KVM_RUN(r2, 0xae80, 0x0) 782.182561ms ago: executing program 7 (id=682): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 0s ago: executing program 6 (id=603): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): (device loop0): using spread ssd allocation scheme [ 158.361850][ T28] audit: type=1800 audit(1792438651.538:9): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.305" name="bus" dev="loop4" ino=17059 res=0 errno=0 [ 158.382206][ T7122] BTRFS info (device loop0): not using ssd optimizations [ 158.382264][ T7122] BTRFS info (device loop0): not using spread ssd allocation scheme [ 158.382282][ T7122] BTRFS info (device loop0): using free space tree [ 158.431121][ T7142] FAULT_INJECTION: forcing a failure. [ 158.431121][ T7142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.493500][ T7142] CPU: 0 PID: 7142 Comm: syz.3.316 Not tainted syzkaller #0 [ 158.500863][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.510969][ T7142] Call Trace: [ 158.514302][ T7142] [ 158.517283][ T7142] dump_stack_lvl+0x18c/0x250 [ 158.522022][ T7142] ? show_regs_print_info+0x20/0x20 [ 158.527270][ T7142] ? load_image+0x420/0x420 [ 158.531843][ T7142] ? __might_fault+0xaa/0x120 [ 158.536562][ T7142] ? __lock_acquire+0x7eb0/0x7eb0 [ 158.541628][ T7142] should_fail_ex+0x394/0x4c0 [ 158.546353][ T7142] _copy_to_user+0x2f/0xa0 [ 158.550808][ T7142] rng_dev_read+0x3eb/0x740 [ 158.555360][ T7142] ? hwrng_yield+0x30/0x30 [ 158.559809][ T7142] ? common_file_perm+0x198/0x1f0 [ 158.564891][ T7142] ? fsnotify_perm+0x3ed/0x5e0 [ 158.569690][ T7142] ? hwrng_yield+0x30/0x30 [ 158.574137][ T7142] vfs_read+0x298/0x990 [ 158.578336][ T7142] ? kernel_read+0x1e0/0x1e0 [ 158.582973][ T7142] ? __fget_files+0x28/0x460 [ 158.587605][ T7142] ? __fget_files+0x3fc/0x460 [ 158.592328][ T7142] ? __fdget_pos+0x1d8/0x330 [ 158.596956][ T7142] ? ksys_read+0x74/0x260 [ 158.601333][ T7142] ksys_read+0x151/0x260 [ 158.605624][ T7142] ? vfs_write+0x9a0/0x9a0 [ 158.610083][ T7142] ? lockdep_hardirqs_on+0x98/0x150 [ 158.615317][ T7142] do_syscall_64+0x55/0xb0 [ 158.619762][ T7142] ? clear_bhb_loop+0x40/0x90 [ 158.624477][ T7142] ? clear_bhb_loop+0x40/0x90 [ 158.629182][ T7142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.635123][ T7142] RIP: 0033:0x7fc29279e559 [ 158.639578][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.659225][ T7142] RSP: 002b:00007fc2936fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.667672][ T7142] RAX: ffffffffffffffda RBX: 00007fc292a25fa0 RCX: 00007fc29279e559 [ 158.675674][ T7142] RDX: 000000000000fef3 RSI: 0000200000000680 RDI: 0000000000000004 [ 158.683675][ T7142] RBP: 00007fc292835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 158.691693][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.699692][ T7142] R13: 00007fc292a26038 R14: 00007fc292a25fa0 R15: 00007fffbc53f488 [ 158.707700][ T7142] [ 158.895663][ T6257] ocfs2: Unmounting device (7,4) on (node local) [ 158.993257][ T7122] BTRFS info (device loop0): rebuilding free space tree [ 159.243687][ T7167] loop3: detected capacity change from 0 to 2048 [ 159.404725][ T7167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.492962][ T7167] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.563333][ T7177] loop4: detected capacity change from 0 to 512 [ 159.569724][ T5778] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.694034][ T7167] EXT4-fs (loop3): shut down requested (1) [ 159.812356][ T7177] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 159.837082][ T7177] FAT-fs (loop4): Filesystem has been set read-only [ 159.873810][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.168770][ T7186] bridge1: entered promiscuous mode [ 160.462919][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.667407][ T5875] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 70, using maximum allowed: 30 [ 160.699285][ T5875] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.747329][ T5875] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 70 [ 160.776261][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.798280][ T5875] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 160.821100][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.862235][ T5875] usb 4-1: config 0 descriptor?? [ 161.012387][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 161.122530][ T7218] loop1: detected capacity change from 0 to 512 [ 161.237291][ T7218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.318616][ T7218] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.360646][ T5875] input: HID 060b:500a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:060B:500A.0004/input/input7 [ 161.453443][ T7218] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.336: Allocating blocks 44-108 which overlap fs metadata [ 161.544896][ T7227] EXT4-fs (loop1): pa ffff8880786bbbc8: logic 1, phys. 44, len 63 [ 161.553302][ T7227] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 32 [ 161.563051][ T5875] cougar 0003:060B:500A.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.3-1/input0 [ 161.594086][ T7206] loop0: detected capacity change from 0 to 32768 [ 161.721847][ T7206] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.799172][ T7239] loop4: detected capacity change from 0 to 512 [ 161.807879][ T7239] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.906742][ T7239] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.338: corrupted in-inode xattr: e_value size too large [ 162.028474][ T7239] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.338: couldn't read orphan inode 15 (err -117) [ 162.053315][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.063668][ T7239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.185257][ T7206] XFS (loop0): Ending clean mount [ 162.220761][ T7206] XFS (loop0): Quotacheck needed: Please wait. [ 162.250617][ T7239] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 12: comm syz.4.338: lblock 3 mapped to illegal pblock 12 (length 1) [ 162.265453][ T5848] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 162.278433][ T5848] XFS (loop0): Unmount and run xfs_repair [ 162.285871][ T5848] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 162.294050][ T5848] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 162.303514][ T5848] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 162.314510][ T5848] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 162.326565][ T5848] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 162.336578][ T5848] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 162.346675][ T5848] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.372437][ T5848] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.399699][ T5848] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.420790][ T1112] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 162.437549][ T6257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.500796][ T7206] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 162.663561][ T5875] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 162.691671][ T5875] XFS (loop0): Unmount and run xfs_repair [ 162.705025][ T5875] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 162.723000][ T5875] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 162.748176][ T5875] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 162.767985][ T5875] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 162.778232][ T5875] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 162.794113][ T5875] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 162.809756][ T5875] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.832509][ T5875] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.842564][ T5875] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.872899][ T7206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 162.916277][ T7206] XFS (loop0): page discard on page ffffea00015756c0, inode 0x244a, pos 0. [ 162.938147][ T5872] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 162.950812][ T5872] XFS (loop0): Unmount and run xfs_repair [ 162.956696][ T5872] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 162.972771][ T5872] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 162.984441][ T5872] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 162.993745][ T5872] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 163.002647][ T5872] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 163.015425][ T5872] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 163.029759][ T5872] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.060750][ T5872] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.079243][ T5872] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.092502][ T7250] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 163.113569][ T7250] XFS (loop0): page discard on page ffffea00015f5b40, inode 0x2446, pos 134219776. [ 163.203975][ T5848] usb 4-1: USB disconnect, device number 8 [ 163.212986][ T5778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.459196][ T7263] relay: one or more items not logged [item size (48) > sub-buffer size (4)] [ 163.890308][ T7278] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 163.992830][ T5872] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.141580][ T7287] tipc: Started in network mode [ 164.147048][ T7287] tipc: Node identity 1001001, cluster identity 4711 [ 164.154780][ T7287] tipc: Node number set to 16781313 [ 164.165238][ T7287] tipc: Enabled bearer , priority 0 [ 164.193036][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.205879][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 164.221879][ T5872] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 164.231089][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.244564][ T5872] usb 1-1: Product: syz [ 164.248815][ T5872] usb 1-1: Manufacturer: syz [ 164.254086][ T5872] usb 1-1: SerialNumber: syz [ 164.428999][ T5849] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.445767][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.455252][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.464067][ T5849] usb 5-1: Product: syz [ 164.469620][ T5849] usb 5-1: Manufacturer: syz [ 164.474990][ T5849] usb 5-1: SerialNumber: syz [ 164.485885][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.345'. [ 164.495081][ T5872] usb 1-1: Cannot retrieve CPort count: -32 [ 164.501056][ T5872] usb 1-1: Cannot retrieve CPort count: -32 [ 164.515945][ T5872] es2_ap_driver: probe of 1-1:1.0 failed with error -32 [ 164.551936][ T5872] usb 1-1: USB disconnect, device number 6 [ 165.114532][ T5848] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.151056][ T7296] FAULT_INJECTION: forcing a failure. [ 165.151056][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 165.167511][ T7296] CPU: 1 PID: 7296 Comm: syz.0.361 Not tainted syzkaller #0 [ 165.174874][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.184975][ T7296] Call Trace: [ 165.188289][ T7296] [ 165.191249][ T7296] dump_stack_lvl+0x18c/0x250 [ 165.195979][ T7296] ? show_regs_print_info+0x20/0x20 [ 165.201211][ T7296] ? load_image+0x420/0x420 [ 165.205756][ T7296] ? __might_sleep+0xe0/0xe0 [ 165.210401][ T7296] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.215470][ T7296] should_fail_ex+0x394/0x4c0 [ 165.220201][ T7296] should_failslab+0x9/0x20 [ 165.224750][ T7296] slab_pre_alloc_hook+0x59/0x300 [ 165.229846][ T7296] ? bdev_open_by_dev+0x5c/0x100 [ 165.234874][ T7296] __kmem_cache_alloc_node+0x53/0x250 [ 165.240301][ T7296] ? bdev_open_by_dev+0x5c/0x100 [ 165.245291][ T7296] kmalloc_trace+0x2a/0xe0 [ 165.249760][ T7296] bdev_open_by_dev+0x5c/0x100 [ 165.254577][ T7296] setup_bdev_super+0x59/0x660 [ 165.259385][ T7296] mount_bdev+0x1ce/0x2c0 [ 165.263778][ T7296] ? kfree+0x31/0x1a0 [ 165.267812][ T7296] ? zonefs_kill_super+0x1f0/0x1f0 [ 165.272993][ T7296] ? get_tree_bdev+0x520/0x520 [ 165.277795][ T7296] ? vfs_parse_fs_param+0x420/0x420 [ 165.283043][ T7296] legacy_get_tree+0xea/0x180 [ 165.287768][ T7296] ? zonefs_get_zgroup_inode+0x310/0x310 [ 165.293449][ T7296] vfs_get_tree+0x8c/0x280 [ 165.297910][ T7296] do_new_mount+0x24a/0xa40 [ 165.302460][ T7296] __se_sys_mount+0x2e7/0x3d0 [ 165.307179][ T7296] ? __x64_sys_mount+0xc0/0xc0 [ 165.312016][ T7296] ? lockdep_hardirqs_on+0x98/0x150 [ 165.317254][ T7296] ? __x64_sys_mount+0x20/0xc0 [ 165.322048][ T7296] do_syscall_64+0x55/0xb0 [ 165.326518][ T7296] ? clear_bhb_loop+0x40/0x90 [ 165.331231][ T7296] ? clear_bhb_loop+0x40/0x90 [ 165.335950][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.341882][ T7296] RIP: 0033:0x7fde77b9e559 [ 165.346326][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.366005][ T7296] RSP: 002b:00007fde78abc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.374485][ T7296] RAX: ffffffffffffffda RBX: 00007fde77e25fa0 RCX: 00007fde77b9e559 [ 165.382500][ T7296] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000200000000080 [ 165.390507][ T7296] RBP: 00007fde77c35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 165.398505][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.406510][ T7296] R13: 00007fde77e26038 R14: 00007fde77e25fa0 R15: 00007ffd021b1178 [ 165.414524][ T7296] [ 165.671003][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.698211][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 165.713927][ T5848] usb 2-1: can't read configurations, error -71 [ 165.849535][ T5849] cdc_ncm 5-1:1.0: failed to get mac address [ 165.865007][ T5849] cdc_ncm 5-1:1.0: bind() failure [ 165.879055][ T5849] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 165.887164][ T5849] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 165.897284][ T5849] usbtest: probe of 5-1:1.1 failed with error -71 [ 165.920284][ T5849] usb 5-1: USB disconnect, device number 2 [ 166.203365][ T7307] vlan0: entered promiscuous mode [ 166.210822][ T7306] vlan0: left promiscuous mode [ 166.467376][ T7315] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 166.476422][ T7315] netlink: 'syz.3.370': attribute type 2 has an invalid length. [ 166.493177][ T7315] netlink: 244 bytes leftover after parsing attributes in process `syz.3.370'. [ 166.637089][ T7317] loop4: detected capacity change from 0 to 4096 [ 166.683065][ T5863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.750450][ T7317] ntfs3: loop4: Failed to load $Extend (-22). [ 166.770456][ T7317] ntfs3: loop4: Failed to initialize $Extend. [ 166.801771][ T7311] loop1: detected capacity change from 0 to 32768 [ 166.842220][ T7311] (syz.1.367,7311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.866265][ T7311] (syz.1.367,7311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.884496][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 166.901343][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.928223][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.955660][ T7311] JBD2: Ignoring recovery information on journal [ 166.969282][ T5863] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.011048][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.033755][ T5863] usb 1-1: Product: syz [ 167.038002][ T5863] usb 1-1: Manufacturer: syz [ 167.042653][ T5863] usb 1-1: SerialNumber: syz [ 167.080556][ T7311] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.365730][ T5863] usb 1-1: 0:2 : does not exist [ 167.390058][ T5863] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 167.464418][ T5863] usb 1-1: USB disconnect, device number 7 [ 167.548152][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.598984][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 168.269741][ T7351] FAULT_INJECTION: forcing a failure. [ 168.269741][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 168.297911][ T7351] CPU: 0 PID: 7351 Comm: syz.1.385 Not tainted syzkaller #0 [ 168.305315][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.315429][ T7351] Call Trace: [ 168.318758][ T7351] [ 168.321732][ T7351] dump_stack_lvl+0x18c/0x250 [ 168.326462][ T7351] ? show_regs_print_info+0x20/0x20 [ 168.331722][ T7351] ? load_image+0x420/0x420 [ 168.336298][ T7351] ? __might_sleep+0xe0/0xe0 [ 168.340951][ T7351] ? __lock_acquire+0x7eb0/0x7eb0 [ 168.346048][ T7351] should_fail_ex+0x394/0x4c0 [ 168.350790][ T7351] should_failslab+0x9/0x20 [ 168.355384][ T7351] slab_pre_alloc_hook+0x59/0x300 [ 168.360464][ T7351] ? kasan_set_track+0x5f/0x70 [ 168.365292][ T7351] ? v9fs_session_init+0xb5/0x1960 [ 168.370465][ T7351] ? v9fs_session_init+0xb5/0x1960 [ 168.375646][ T7351] __kmem_cache_alloc_node+0x53/0x250 [ 168.381085][ T7351] ? kasan_set_track+0x5f/0x70 [ 168.385922][ T7351] ? v9fs_session_init+0xb5/0x1960 [ 168.391091][ T7351] __kmalloc_node_track_caller+0xa4/0x230 [ 168.396885][ T7351] kstrdup+0x3b/0x80 [ 168.400843][ T7351] v9fs_session_init+0xb5/0x1960 [ 168.405834][ T7351] ? v9fs_show_options+0x700/0x700 [ 168.411004][ T7351] v9fs_mount+0xd0/0xb40 [ 168.415293][ T7351] ? kfree+0x31/0x1a0 [ 168.419315][ T7351] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 168.425181][ T7351] ? vfs_parse_fs_param+0x420/0x420 [ 168.430424][ T7351] legacy_get_tree+0xea/0x180 [ 168.435134][ T7351] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 168.441001][ T7351] vfs_get_tree+0x8c/0x280 [ 168.445459][ T7351] do_new_mount+0x24a/0xa40 [ 168.450028][ T7351] __se_sys_mount+0x2e7/0x3d0 [ 168.454764][ T7351] ? __x64_sys_mount+0xc0/0xc0 [ 168.459571][ T7351] ? lockdep_hardirqs_on+0x98/0x150 [ 168.464807][ T7351] ? __x64_sys_mount+0x20/0xc0 [ 168.469607][ T7351] do_syscall_64+0x55/0xb0 [ 168.474055][ T7351] ? clear_bhb_loop+0x40/0x90 [ 168.478801][ T7351] ? clear_bhb_loop+0x40/0x90 [ 168.483534][ T7351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.489472][ T7351] RIP: 0033:0x7fa515b9e559 [ 168.493923][ T7351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.513558][ T7351] RSP: 002b:00007fa516a05028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.522010][ T7351] RAX: ffffffffffffffda RBX: 00007fa515e25fa0 RCX: 00007fa515b9e559 [ 168.530013][ T7351] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0 [ 168.538027][ T7351] RBP: 00007fa515c35ad8 R08: 0000200000000480 R09: 0000000000000000 [ 168.546033][ T7351] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000000 [ 168.554034][ T7351] R13: 00007fa515e26038 R14: 00007fa515e25fa0 R15: 00007ffdb9f12508 [ 168.562049][ T7351] [ 168.748604][ T7357] loop1: detected capacity change from 0 to 1024 [ 168.776912][ T7357] EXT4-fs: Ignoring removed bh option [ 168.833350][ T7357] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 168.868835][ T7357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.958072][ T7357] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #12: block 7: comm syz.1.388: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 169.154774][ T7357] EXT4-fs (loop1): Remounting filesystem read-only [ 169.262041][ T7367] bond2: entered promiscuous mode [ 169.270351][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.914492][ T5775] tipc: Resetting bearer [ 170.021392][ T5775] tipc: Disabling bearer [ 170.207078][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.239492][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.310251][ T7386] FAULT_INJECTION: forcing a failure. [ 170.310251][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 170.310288][ T7386] CPU: 0 PID: 7386 Comm: syz.0.398 Not tainted syzkaller #0 [ 170.310312][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.310325][ T7386] Call Trace: [ 170.310335][ T7386] [ 170.310345][ T7386] dump_stack_lvl+0x18c/0x250 [ 170.310378][ T7386] ? show_regs_print_info+0x20/0x20 [ 170.310402][ T7386] ? load_image+0x420/0x420 [ 170.310438][ T7386] ? __might_sleep+0xe0/0xe0 [ 170.310468][ T7386] ? __lock_acquire+0x7eb0/0x7eb0 [ 170.310500][ T7386] should_fail_ex+0x394/0x4c0 [ 170.310541][ T7386] should_failslab+0x9/0x20 [ 170.310575][ T7386] slab_pre_alloc_hook+0x59/0x300 [ 170.310599][ T7386] ? vc_do_resize+0x357/0x17f0 [ 170.310630][ T7386] ? vc_do_resize+0x357/0x17f0 [ 170.310659][ T7386] __kmem_cache_alloc_node+0x53/0x250 [ 170.310699][ T7386] ? vc_do_resize+0x357/0x17f0 [ 170.310728][ T7386] __kmalloc+0xa7/0x240 [ 170.310765][ T7386] vc_do_resize+0x357/0x17f0 [ 170.310819][ T7386] ? lock_chain_count+0x20/0x20 [ 170.310853][ T7386] ? read_lock_is_recursive+0x20/0x20 [ 170.310883][ T7386] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 170.310917][ T7386] ? vc_resize+0x50/0x50 [ 170.310945][ T7386] ? apparmor_capable+0x137/0x1a0 [ 170.310985][ T7386] vt_ioctl+0x1c61/0x1f20 [ 170.311014][ T7386] ? __vt_event_wait+0x260/0x260 [ 170.311050][ T7386] ? __fget_files+0x28/0x460 [ 170.311088][ T7386] ? tty_jobctrl_ioctl+0x378/0xba0 [ 170.311122][ T7386] tty_ioctl+0x91e/0xdc0 [ 170.311153][ T7386] ? tty_get_icount+0xb0/0xb0 [ 170.311185][ T7386] __se_sys_ioctl+0xfd/0x170 [ 170.311219][ T7386] do_syscall_64+0x55/0xb0 [ 170.311239][ T7386] ? clear_bhb_loop+0x40/0x90 [ 170.311262][ T7386] ? clear_bhb_loop+0x40/0x90 [ 170.311287][ T7386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.311323][ T7386] RIP: 0033:0x7fde77b9e559 [ 170.311345][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.311365][ T7386] RSP: 002b:00007fde78abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.311391][ T7386] RAX: ffffffffffffffda RBX: 00007fde77e25fa0 RCX: 00007fde77b9e559 [ 170.311409][ T7386] RDX: 0000200000000100 RSI: 0000000000005609 RDI: 0000000000000003 [ 170.311425][ T7386] RBP: 00007fde77c35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 170.311440][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.311462][ T7386] R13: 00007fde77e26038 R14: 00007fde77e25fa0 R15: 00007ffd021b1178 [ 170.311499][ T7386] [ 170.347771][ T1112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.435101][ T5851] usb 5-1: device descriptor read/64, error -71 [ 170.506062][ T1112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.682475][ T1112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.723411][ T5851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.821578][ T1112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.873069][ T5851] usb 5-1: device descriptor read/64, error -71 [ 171.003408][ T5851] usb usb5-port1: attempt power cycle [ 171.198091][ T1112] tipc: Left network mode [ 171.312911][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.403044][ T173] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.452366][ T5851] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.511247][ T5851] usb 5-1: device descriptor read/8, error -71 [ 171.530575][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.543180][ T5872] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 171.554317][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.567623][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.578857][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.588223][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.595509][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.603656][ T5872] usb 4-1: SerialNumber: syz [ 171.616115][ T7391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.623490][ T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.639423][ T173] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.655758][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.667733][ T173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.677496][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.687179][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.694638][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.726619][ T173] usb 1-1: SerialNumber: syz [ 171.763549][ T173] usb 1-1: bad CDC descriptors [ 171.812987][ T5851] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.860358][ T7391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.876936][ T7397] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.887218][ T5851] usb 5-1: device descriptor read/8, error -71 [ 172.007788][ T173] usb 1-1: USB disconnect, device number 8 [ 172.039723][ T5851] usb usb5-port1: unable to enumerate USB device [ 172.362351][ T5872] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 172.713673][ T5848] usb 4-1: USB disconnect, device number 9 [ 172.721282][ T5848] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 172.976147][ T7414] lo: entered promiscuous mode [ 173.121324][ T7414] tunl0: entered promiscuous mode [ 173.155087][ T7414] gre0: entered promiscuous mode [ 173.333436][ T7414] gretap0: entered promiscuous mode [ 173.397994][ T7414] erspan0: entered promiscuous mode [ 173.458725][ T7414] ip_vti0: entered promiscuous mode [ 173.515041][ T7414] ip6_vti0: entered promiscuous mode [ 173.537916][ T7432] loop4: detected capacity change from 0 to 128 [ 173.584298][ T7432] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.622538][ T7432] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.667023][ T7414] sit0: entered promiscuous mode [ 173.737169][ T7414] ip6tnl0: entered promiscuous mode [ 173.763089][ T5087] Bluetooth: hci0: command tx timeout [ 173.786132][ T6257] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.872226][ T7414] ip6gre0: entered promiscuous mode [ 173.934560][ T7414] syz_tun: entered promiscuous mode [ 173.977461][ T7414] ip6gretap0: entered promiscuous mode [ 174.022432][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.032141][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.046482][ T7414] bridge0: entered promiscuous mode [ 174.090964][ T7414] vcan0: entered promiscuous mode [ 174.110416][ T7414] bond0: entered promiscuous mode [ 174.115657][ T7414] bond_slave_0: entered promiscuous mode [ 174.121738][ T7414] bond_slave_1: entered promiscuous mode [ 174.158741][ T7414] team0: entered promiscuous mode [ 174.164339][ T7414] team_slave_0: entered promiscuous mode [ 174.171489][ T7414] team_slave_1: entered promiscuous mode [ 174.221023][ T7414] dummy0: entered promiscuous mode [ 174.257394][ T7414] nlmon0: entered promiscuous mode [ 174.274330][ T7414] caif0: entered promiscuous mode [ 174.288758][ T7414] batadv0: entered promiscuous mode [ 174.324059][ T7414] vxcan0: entered promiscuous mode [ 174.341490][ T7414] vxcan1: entered promiscuous mode [ 174.357526][ T7414] veth0: entered promiscuous mode [ 174.392276][ T7414] veth1: entered promiscuous mode [ 174.432410][ T7414] wg0: entered promiscuous mode [ 174.459143][ T7414] wg1: entered promiscuous mode [ 174.487929][ T7414] wg2: entered promiscuous mode [ 174.515336][ T7414] veth0_to_bridge: entered promiscuous mode [ 174.571860][ T7414] veth1_to_bridge: entered promiscuous mode [ 174.601446][ T7442] loop4: detected capacity change from 0 to 32768 [ 174.634708][ T7414] veth0_to_bond: entered promiscuous mode [ 174.667611][ T7442] loop4: p1 p3 < > [ 174.683228][ T7414] veth1_to_bond: entered promiscuous mode [ 174.731352][ T7414] veth0_to_team: entered promiscuous mode [ 174.822093][ T7414] veth1_to_team: entered promiscuous mode [ 174.912657][ T7414] veth0_to_batadv: entered promiscuous mode [ 174.930988][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.965774][ T7414] batadv_slave_0: entered promiscuous mode [ 175.006825][ T7414] veth1_to_batadv: entered promiscuous mode [ 175.025959][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.051674][ T7414] batadv_slave_1: entered promiscuous mode [ 175.087333][ T7414] xfrm0: entered promiscuous mode [ 175.154587][ T7414] veth0_to_hsr: entered promiscuous mode [ 175.186113][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 175.206375][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 175.239926][ T7414] veth1_to_hsr: entered promiscuous mode [ 175.302998][ T7414] hsr0: entered promiscuous mode [ 175.335324][ T7414] veth1_virt_wifi: entered promiscuous mode [ 175.377091][ T7414] veth0_virt_wifi: entered promiscuous mode [ 175.396698][ T7414] virt_wifi0: entered promiscuous mode [ 175.486219][ T7414] vlan0: entered promiscuous mode [ 175.511045][ T7414] macvlan0: entered promiscuous mode [ 175.541159][ T7414] macvlan1: entered promiscuous mode [ 175.563818][ T7414] ipvlan0: entered promiscuous mode [ 175.569308][ T7414] ipvlan1: entered promiscuous mode [ 175.637839][ T7414] macvtap0: entered promiscuous mode [ 175.666222][ T7414] macsec0: entered promiscuous mode [ 175.698609][ T7414] geneve0: entered promiscuous mode [ 175.726313][ T7414] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.737022][ T7414] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.746040][ T7414] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.755045][ T7414] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.764783][ T7414] geneve1: entered promiscuous mode [ 175.799089][ T7414] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 175.828748][ T7414] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 175.842894][ T5087] Bluetooth: hci0: command tx timeout [ 175.858527][ T7414] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 175.880747][ T7414] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 175.926923][ T7414] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 175.954343][ T7414] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 175.964347][ T7414] ip6tnl1: entered promiscuous mode [ 175.969695][ T7414] ip6erspan0: entered promiscuous mode [ 176.025173][ T1112] hsr_slave_0: left promiscuous mode [ 176.035188][ T1112] hsr_slave_1: left promiscuous mode [ 176.053589][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.061096][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.081839][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.100396][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.111476][ T1112] bridge_slave_1: left allmulticast mode [ 176.117549][ T1112] bridge_slave_1: left promiscuous mode [ 176.123999][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.147137][ T1112] bridge_slave_0: left allmulticast mode [ 176.153285][ T1112] bridge_slave_0: left promiscuous mode [ 176.176352][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.270250][ T1112] veth1_macvtap: left promiscuous mode [ 176.276596][ T1112] veth0_macvtap: left promiscuous mode [ 176.292671][ T1112] veth1_vlan: left promiscuous mode [ 176.300911][ T1112] veth0_vlan: left promiscuous mode [ 176.366839][ T5875] IPVS: starting estimator thread 0... [ 176.484357][ T7460] IPVS: using max 15 ests per chain, 36000 per kthread [ 176.680696][ T1112] bond1 (unregistering): Released all slaves [ 177.447321][ T7475] syz.0.421: vmalloc error: size 208896, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 177.468480][ T7475] CPU: 1 PID: 7475 Comm: syz.0.421 Not tainted syzkaller #0 [ 177.475856][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.485967][ T7475] Call Trace: [ 177.489299][ T7475] [ 177.492282][ T7475] dump_stack_lvl+0x18c/0x250 [ 177.497021][ T7475] ? show_regs_print_info+0x20/0x20 [ 177.502268][ T7475] ? load_image+0x420/0x420 [ 177.506858][ T7475] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.513357][ T7475] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 177.519933][ T7475] warn_alloc+0x246/0x340 [ 177.524361][ T7475] ? zone_watermark_ok_safe+0x230/0x230 [ 177.530009][ T7475] __vmalloc_node_range+0x1055/0x1320 [ 177.535503][ T7475] ? free_vm_area+0x50/0x50 [ 177.540087][ T7475] vmalloc_user+0x74/0x80 [ 177.544514][ T7475] ? vb2_vmalloc_alloc+0xef/0x330 [ 177.549607][ T7475] vb2_vmalloc_alloc+0xef/0x330 [ 177.554542][ T7475] ? __copy_timestamp+0x1f0/0x1f0 [ 177.559636][ T7475] __vb2_queue_alloc+0x78f/0x1410 [ 177.564764][ T7475] vb2_core_reqbufs+0x9e8/0x10d0 [ 177.569788][ T7475] ? vb2_verify_memory_type+0x570/0x570 [ 177.575412][ T7475] ? do_vfs_ioctl+0x156c/0x1cc0 [ 177.580350][ T7475] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 177.585779][ T7475] __video_do_ioctl+0xa34/0xde0 [ 177.590707][ T7475] ? video_ioctl2+0x30/0x30 [ 177.595274][ T7475] ? __might_fault+0xc6/0x120 [ 177.600001][ T7475] ? __might_fault+0xaa/0x120 [ 177.604823][ T7475] video_usercopy+0x889/0x1360 [ 177.609660][ T7475] ? video_ioctl2+0x30/0x30 [ 177.614221][ T7475] ? v4l_printk_ioctl+0x160/0x160 [ 177.619329][ T7475] v4l2_ioctl+0x18a/0x1e0 [ 177.623726][ T7475] ? v4l2_poll+0x2b0/0x2b0 [ 177.628196][ T7475] __se_sys_ioctl+0xfd/0x170 [ 177.632852][ T7475] do_syscall_64+0x55/0xb0 [ 177.637324][ T7475] ? clear_bhb_loop+0x40/0x90 [ 177.642049][ T7475] ? clear_bhb_loop+0x40/0x90 [ 177.646782][ T7475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.652733][ T7475] RIP: 0033:0x7fde77b9e559 [ 177.657198][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.676860][ T7475] RSP: 002b:00007fde78abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.685333][ T7475] RAX: ffffffffffffffda RBX: 00007fde77e25fa0 RCX: 00007fde77b9e559 [ 177.693351][ T7475] RDX: 00002000000002c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 177.701401][ T7475] RBP: 00007fde77c35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 177.709444][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.717465][ T7475] R13: 00007fde77e26038 R14: 00007fde77e25fa0 R15: 00007ffd021b1178 [ 177.725526][ T7475] [ 177.781569][ T7475] Mem-Info: [ 177.788358][ T7475] active_anon:7241 inactive_anon:2 isolated_anon:0 [ 177.788358][ T7475] active_file:1395 inactive_file:40098 isolated_file:0 [ 177.788358][ T7475] unevictable:0 dirty:426 writeback:0 [ 177.788358][ T7475] slab_reclaimable:10966 slab_unreclaimable:95953 [ 177.788358][ T7475] mapped:24990 shmem:1367 pagetables:700 [ 177.788358][ T7475] sec_pagetables:3 bounce:0 [ 177.788358][ T7475] kernel_misc_reclaimable:0 [ 177.788358][ T7475] free:1347191 free_pcp:12220 free_cma:0 [ 177.838253][ T7475] Node 0 active_anon:27428kB inactive_anon:8kB active_file:5580kB inactive_file:160188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99960kB dirty:1704kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2800kB sec_pagetables:12kB all_unreclaimable? no [ 177.875701][ T7475] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 177.911843][ T7475] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.942936][ T5087] Bluetooth: hci0: command tx timeout [ 177.949009][ T7475] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 177.957621][ T7475] Node 0 DMA32 free:1489356kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:27392kB inactive_anon:8kB active_file:5580kB inactive_file:159108kB unevictable:0kB writepending:1700kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:23260kB local_pcp:5984kB free_cma:0kB [ 177.993266][ T7475] lowmem_reserve[]: 0 0 1 1 1 [ 177.998166][ T7475] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:4kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 178.029659][ T7475] lowmem_reserve[]: 0 0 0 0 0 [ 178.034831][ T7475] Node 1 Normal free:3883544kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26304kB local_pcp:14496kB free_cma:0kB [ 178.069727][ T7475] lowmem_reserve[]: 0 0 0 0 0 [ 178.074992][ T7475] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.093216][ T7475] Node 0 DMA32: 349*4kB (UME) 462*8kB (UME) 331*16kB (UME) 614*32kB (UME) 160*64kB (UME) 75*128kB (UME) 31*256kB (UME) 27*512kB (UME) 8*1024kB (UME) 10*2048kB (UME) 339*4096kB (M) = 1488852kB [ 178.116366][ T7475] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.128564][ T7475] Node 1 Normal: 300*4kB (UE) 67*8kB (UME) 53*16kB (UME) 38*32kB (UME) 19*64kB (UE) 5*128kB (UME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 945*4096kB (M) = 3883544kB [ 178.150608][ T7475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.160741][ T7475] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.201929][ T7475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.270577][ T7475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.307086][ T7475] 42872 total pagecache pages [ 178.345570][ T7475] 4 pages in swap cache [ 178.349812][ T7475] Free swap = 124472kB [ 178.364108][ T7475] Total swap = 124996kB [ 178.368356][ T7475] 2097051 pages RAM [ 178.372210][ T7475] 0 pages HighMem/MovableOnly [ 178.390538][ T7475] 421118 pages reserved [ 178.399572][ T7475] 0 pages cma reserved [ 178.528750][ T7483] FAULT_INJECTION: forcing a failure. [ 178.528750][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 178.541897][ T7483] CPU: 1 PID: 7483 Comm: syz.0.424 Not tainted syzkaller #0 [ 178.549245][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.559353][ T7483] Call Trace: [ 178.562670][ T7483] [ 178.565639][ T7483] dump_stack_lvl+0x18c/0x250 [ 178.570361][ T7483] ? show_regs_print_info+0x20/0x20 [ 178.575594][ T7483] ? load_image+0x420/0x420 [ 178.580148][ T7483] ? __might_sleep+0xe0/0xe0 [ 178.584788][ T7483] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.589864][ T7483] should_fail_ex+0x394/0x4c0 [ 178.594599][ T7483] should_failslab+0x9/0x20 [ 178.599158][ T7483] slab_pre_alloc_hook+0x59/0x300 [ 178.604226][ T7483] kmem_cache_alloc+0x5a/0x2c0 [ 178.609063][ T7483] ? prepare_creds+0x30/0x5d0 [ 178.613797][ T7483] prepare_creds+0x30/0x5d0 [ 178.618352][ T7483] __sys_setresgid+0x57e/0x8e0 [ 178.623177][ T7483] do_syscall_64+0x55/0xb0 [ 178.627624][ T7483] ? clear_bhb_loop+0x40/0x90 [ 178.632351][ T7483] ? clear_bhb_loop+0x40/0x90 [ 178.637062][ T7483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.643003][ T7483] RIP: 0033:0x7fde77b9e559 [ 178.647463][ T7483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.667099][ T7483] RSP: 002b:00007fde78abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 178.675552][ T7483] RAX: ffffffffffffffda RBX: 00007fde77e25fa0 RCX: 00007fde77b9e559 [ 178.683569][ T7483] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.691565][ T7483] RBP: 00007fde77c35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 178.699565][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.707565][ T7483] R13: 00007fde77e26038 R14: 00007fde77e25fa0 R15: 00007ffd021b1178 [ 178.715590][ T7483] [ 179.292929][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 179.360798][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 179.433495][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.503764][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.936531][ T1112] bond0 (unregistering): Released all slaves [ 180.002860][ T5087] Bluetooth: hci0: command tx timeout [ 180.018687][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 180.291999][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.314691][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.322077][ T7397] bridge_slave_0: entered allmulticast mode [ 180.336398][ T7397] bridge_slave_0: entered promiscuous mode [ 180.375353][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.405207][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.412516][ T7397] bridge_slave_1: entered allmulticast mode [ 180.477038][ T7397] bridge_slave_1: entered promiscuous mode [ 180.630809][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.675066][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.774975][ T7397] team0: Port device team_slave_0 added [ 180.828761][ T7397] team0: Port device team_slave_1 added [ 180.932336][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.946731][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.002792][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.038847][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.063116][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.148314][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.303052][ T7530] FAULT_INJECTION: forcing a failure. [ 181.303052][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 181.341355][ T7530] CPU: 0 PID: 7530 Comm: syz.4.436 Not tainted syzkaller #0 [ 181.348754][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.358872][ T7530] Call Trace: [ 181.362204][ T7530] [ 181.365224][ T7530] dump_stack_lvl+0x18c/0x250 [ 181.369971][ T7530] ? show_regs_print_info+0x20/0x20 [ 181.375259][ T7530] ? load_image+0x420/0x420 [ 181.379829][ T7530] ? verify_lock_unused+0x140/0x140 [ 181.385116][ T7530] should_fail_ex+0x394/0x4c0 [ 181.389871][ T7530] should_failslab+0x9/0x20 [ 181.394442][ T7530] slab_pre_alloc_hook+0x59/0x300 [ 181.399532][ T7530] kmem_cache_alloc+0x5a/0x2c0 [ 181.404363][ T7530] ? skb_clone+0x1eb/0x370 [ 181.408846][ T7530] skb_clone+0x1eb/0x370 [ 181.413158][ T7530] __netlink_deliver_tap+0x411/0x7f0 [ 181.418521][ T7530] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.423807][ T7530] netlink_deliver_tap+0x19c/0x1b0 [ 181.428984][ T7530] netlink_unicast+0x77b/0x930 [ 181.433822][ T7530] netlink_sendmsg+0x8d0/0xbf0 [ 181.438659][ T7530] ? netlink_getsockopt+0x590/0x590 [ 181.443936][ T7530] ? apparmor_socket_sendmsg+0x8e/0x330 [ 181.449551][ T7530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 181.454893][ T7530] ? security_socket_sendmsg+0x80/0xa0 [ 181.460414][ T7530] sock_write_iter+0x2dc/0x420 [ 181.465251][ T7530] ? sock_read_iter+0x3f0/0x3f0 [ 181.470177][ T7530] ? common_file_perm+0x198/0x1f0 [ 181.475274][ T7530] do_iter_write+0x747/0xc50 [ 181.479955][ T7530] ? __asan_memset+0x22/0x40 [ 181.484615][ T7530] ? vfs_iter_write+0xa0/0xa0 [ 181.489367][ T7530] ? __import_iovec+0x3fa/0x850 [ 181.494291][ T7530] ? import_iovec+0x73/0xa0 [ 181.498867][ T7530] do_writev+0x27f/0x480 [ 181.503175][ T7530] ? do_readv+0x460/0x460 [ 181.507576][ T7530] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 181.513624][ T7530] ? lock_chain_count+0x20/0x20 [ 181.518549][ T7530] ? lockdep_hardirqs_on+0x98/0x150 [ 181.523807][ T7530] do_syscall_64+0x55/0xb0 [ 181.528271][ T7530] ? clear_bhb_loop+0x40/0x90 [ 181.533017][ T7530] ? clear_bhb_loop+0x40/0x90 [ 181.537755][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.543734][ T7530] RIP: 0033:0x7f29a519e559 [ 181.548208][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.567963][ T7530] RSP: 002b:00007f29a6120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 181.576439][ T7530] RAX: ffffffffffffffda RBX: 00007f29a5425fa0 RCX: 00007f29a519e559 [ 181.584465][ T7530] RDX: 0000000000000003 RSI: 0000200000000140 RDI: 0000000000000003 [ 181.592480][ T7530] RBP: 00007f29a5235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 181.600502][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.608523][ T7530] R13: 00007f29a5426038 R14: 00007f29a5425fa0 R15: 00007fffadee8048 [ 181.616592][ T7530] [ 181.654385][ T7397] hsr_slave_0: entered promiscuous mode [ 181.694156][ T7397] hsr_slave_1: entered promiscuous mode [ 182.342275][ T7397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.385837][ T7397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.441608][ T7397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.477949][ T7397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.753995][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.769592][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 182.846664][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.880233][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.887505][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.933717][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.940933][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.101161][ T7560] raw_sendmsg: syz.3.442 forgot to set AF_INET. Fix it! [ 183.615513][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.891648][ T7585] loop4: detected capacity change from 0 to 512 [ 183.914038][ T7585] EXT4-fs: Ignoring removed nobh option [ 183.967398][ T7585] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.446: invalid indirect mapped block 256 (level 2) [ 183.991856][ T7585] EXT4-fs (loop4): 2 truncates cleaned up [ 183.999625][ T7585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.576646][ T6257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.590044][ T7397] veth0_vlan: entered promiscuous mode [ 184.645445][ T7397] veth1_vlan: entered promiscuous mode [ 184.744878][ T7397] veth0_macvtap: entered promiscuous mode [ 184.770560][ T7397] veth1_macvtap: entered promiscuous mode [ 184.842260][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.868086][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.888359][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.906782][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.920868][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.999691][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.040002][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.069176][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.081601][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.096416][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.121742][ T7397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.158672][ T7397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.193905][ T7397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.228071][ T7397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.613372][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.621270][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.747948][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.790090][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.966853][ T7643] "syz.0.456" (7643) uses obsolete ecb(arc4) skcipher [ 186.081314][ T5848] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 186.148467][ T5848] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 186.447414][ T5848] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 186.888418][ T7652] loop5: detected capacity change from 0 to 32768 [ 186.964841][ T27] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 186.972581][ T7652] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 186.982892][ T7652] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 187.049396][ T28] audit: type=1800 audit(1792438680.308:10): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.460" name="p_volume_present" dev="configfs" ino=13191 res=0 errno=0 [ 187.103756][ T7652] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 187.211317][ T7647] ceph: No mds server is up or the cluster is laggy [ 187.329510][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 187.581476][ T7652] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 187.773054][ T7698] FAULT_INJECTION: forcing a failure. [ 187.773054][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 187.803689][ T7702] syz.3.466: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 187.819895][ T7702] CPU: 0 PID: 7702 Comm: syz.3.466 Not tainted syzkaller #0 [ 187.827249][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.837369][ T7702] Call Trace: [ 187.840699][ T7702] [ 187.843685][ T7702] dump_stack_lvl+0x18c/0x250 [ 187.848409][ T7702] ? show_regs_print_info+0x20/0x20 [ 187.853653][ T7702] ? load_image+0x420/0x420 [ 187.858221][ T7702] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.864702][ T7702] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 187.871267][ T7702] warn_alloc+0x246/0x340 [ 187.875647][ T7702] ? stack_trace_save+0xaa/0x100 [ 187.880630][ T7702] ? zone_watermark_ok_safe+0x230/0x230 [ 187.886234][ T7702] ? kasan_set_track+0x5f/0x70 [ 187.891049][ T7702] ? kasan_set_track+0x4e/0x70 [ 187.895863][ T7702] ? __kasan_kmalloc+0x8f/0xa0 [ 187.900675][ T7702] ? xsk_init_queue+0xad/0x100 [ 187.905480][ T7702] ? xsk_setsockopt+0x413/0x750 [ 187.910384][ T7702] ? do_sock_setsockopt+0x175/0x1a0 [ 187.915620][ T7702] ? __x64_sys_setsockopt+0x182/0x200 [ 187.921040][ T7702] __vmalloc_node_range+0x129/0x1320 [ 187.926413][ T7702] ? free_vm_area+0x50/0x50 [ 187.930986][ T7702] vmalloc_user+0x74/0x80 [ 187.935358][ T7702] ? xskq_create+0xbf/0x170 [ 187.939899][ T7702] xskq_create+0xbf/0x170 [ 187.944267][ T7702] xsk_init_queue+0xad/0x100 [ 187.948893][ T7702] xsk_setsockopt+0x413/0x750 [ 187.953607][ T7702] ? xsk_poll+0x670/0x670 [ 187.957968][ T7702] ? __fget_files+0x28/0x460 [ 187.962597][ T7702] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 187.968201][ T7702] ? security_socket_setsockopt+0x7e/0xa0 [ 187.973954][ T7702] ? xsk_poll+0x670/0x670 [ 187.978319][ T7702] do_sock_setsockopt+0x175/0x1a0 [ 187.983406][ T7702] ? __fdget+0x180/0x210 [ 187.987691][ T7702] __x64_sys_setsockopt+0x182/0x200 [ 187.992966][ T7702] do_syscall_64+0x55/0xb0 [ 187.997408][ T7702] ? clear_bhb_loop+0x40/0x90 [ 188.002120][ T7702] ? clear_bhb_loop+0x40/0x90 [ 188.006839][ T7702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.012788][ T7702] RIP: 0033:0x7fc29279e559 [ 188.017252][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.036908][ T7702] RSP: 002b:00007fc2936fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.045365][ T7702] RAX: ffffffffffffffda RBX: 00007fc292a25fa0 RCX: 00007fc29279e559 [ 188.053377][ T7702] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 188.061381][ T7702] RBP: 00007fc292835ad8 R08: 0000000000000004 R09: 0000000000000000 [ 188.069389][ T7702] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.077404][ T7702] R13: 00007fc292a26038 R14: 00007fc292a25fa0 R15: 00007fffbc53f488 [ 188.085432][ T7702] [ 188.088780][ T7698] CPU: 1 PID: 7698 Comm: syz.4.465 Not tainted syzkaller #0 [ 188.094048][ T7702] Mem-Info: [ 188.096106][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.099243][ T7702] active_anon:11930 inactive_anon:2 isolated_anon:0 [ 188.099243][ T7702] active_file:1395 inactive_file:40212 isolated_file:0 [ 188.099243][ T7702] unevictable:0 dirty:231 writeback:0 [ 188.099243][ T7702] slab_reclaimable:11036 slab_unreclaimable:95253 [ 188.099243][ T7702] mapped:25399 shmem:5861 pagetables:781 [ 188.099243][ T7702] sec_pagetables:0 bounce:0 [ 188.099243][ T7702] kernel_misc_reclaimable:0 [ 188.099243][ T7702] free:1341066 free_pcp:14030 free_cma:0 [ 188.109323][ T7698] Call Trace: [ 188.109337][ T7698] [ 188.109349][ T7698] dump_stack_lvl+0x18c/0x250 [ 188.109380][ T7698] ? show_regs_print_info+0x20/0x20 [ 188.109401][ T7698] ? load_image+0x420/0x420 [ 188.109432][ T7698] ? __lock_acquire+0x7eb0/0x7eb0 [ 188.109466][ T7698] should_fail_ex+0x394/0x4c0 [ 188.109503][ T7698] should_failslab+0x9/0x20 [ 188.109535][ T7698] slab_pre_alloc_hook+0x59/0x300 [ 188.109556][ T7698] ? __se_sys_modify_ldt+0x6c/0x2f0 [ 188.109586][ T7698] ? do_syscall_64+0x55/0xb0 [ 188.109604][ T7698] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.109644][ T7698] kmem_cache_alloc_node+0x5e/0x310 [ 188.109678][ T7698] ? alloc_vmap_area+0x1b4/0x1e50 [ 188.109713][ T7698] alloc_vmap_area+0x1b4/0x1e50 [ 188.109765][ T7698] ? vm_map_ram+0xcf0/0xcf0 [ 188.109796][ T7698] ? rcu_is_watching+0x15/0xb0 [ 188.109831][ T7698] __get_vm_area_node+0x162/0x370 [ 188.156184][ T7702] Node 0 active_anon:46184kB inactive_anon:8kB active_file:5580kB inactive_file:160644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101596kB dirty:924kB writeback:0kB shmem:21908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11136kB pagetables:3124kB sec_pagetables:0kB all_unreclaimable? no [ 188.158131][ T7698] ? __kasan_kmalloc+0x8f/0xa0 [ 188.161074][ T7702] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 188.165776][ T7698] __vmalloc_node_range+0x36f/0x1320 [ 188.165823][ T7698] ? write_ldt+0x4d4/0x750 [ 188.171051][ T7702] Node 0 [ 188.175584][ T7698] ? free_vm_area+0x50/0x50 [ 188.175632][ T7698] ? write_ldt+0x4d4/0x750 [ 188.175661][ T7698] __vmalloc+0x7a/0x90 [ 188.175691][ T7698] ? write_ldt+0x4d4/0x750 [ 188.175721][ T7698] write_ldt+0x4d4/0x750 [ 188.175758][ T7698] ? native_write_gdt_entry+0x30/0x30 [ 188.175788][ T7698] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.175819][ T7698] ? lock_chain_count+0x20/0x20 [ 188.175851][ T7698] __se_sys_modify_ldt+0x6c/0x2f0 [ 188.175885][ T7698] do_syscall_64+0x55/0xb0 [ 188.175920][ T7698] ? clear_bhb_loop+0x40/0x90 [ 188.175943][ T7698] ? clear_bhb_loop+0x40/0x90 [ 188.175966][ T7698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.176001][ T7698] RIP: 0033:0x7f29a519e559 [ 188.176021][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.176040][ T7698] RSP: 002b:00007f29a6120028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 188.176064][ T7698] RAX: ffffffffffffffda RBX: 00007f29a5425fa0 RCX: 00007f29a519e559 [ 188.176079][ T7698] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000001 [ 188.176094][ T7698] RBP: 00007f29a5235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 188.176108][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.176122][ T7698] R13: 00007f29a5426038 R14: 00007f29a5425fa0 R15: 00007fffadee8048 [ 188.176155][ T7698] [ 188.181182][ T7702] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.497788][ T7702] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 188.503821][ T7702] Node 0 DMA32 free:1465136kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:46040kB inactive_anon:8kB active_file:5580kB inactive_file:159472kB unevictable:0kB writepending:928kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:30192kB local_pcp:10228kB free_cma:0kB [ 188.534812][ T7702] lowmem_reserve[]: 0 0 1 1 1 [ 188.539622][ T7702] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 188.567526][ T7702] lowmem_reserve[]: 0 0 0 0 0 [ 188.572322][ T7702] Node 1 Normal free:3883544kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26368kB local_pcp:11840kB free_cma:0kB [ 188.601918][ T7702] lowmem_reserve[]: 0 0 0 0 0 [ 188.606759][ T7702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.619687][ T7702] Node 0 DMA32: 44*4kB (E) 30*8kB (UE) 1*16kB (E) 484*32kB (UE) 58*64kB (UME) 25*128kB (UME) 30*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 10*2048kB (UME) 340*4096kB (UM) = 1465136kB [ 188.638316][ T7702] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 188.650155][ T7702] Node 1 Normal: 300*4kB (UE) 67*8kB (UME) 53*16kB (UME) 38*32kB (UME) 19*64kB (UE) 5*128kB (UME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 945*4096kB (M) = 3883544kB [ 188.668206][ T7702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.678399][ T7702] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.687892][ T7702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.697568][ T7702] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.706957][ T7702] 47446 total pagecache pages [ 188.711679][ T7702] 4 pages in swap cache [ 188.715956][ T7702] Free swap = 124472kB [ 188.720587][ T7702] Total swap = 124996kB [ 188.725400][ T7702] 2097051 pages RAM [ 188.729267][ T7702] 0 pages HighMem/MovableOnly [ 188.734033][ T7702] 421118 pages reserved [ 188.738708][ T7702] 0 pages cma reserved [ 189.030925][ T7708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.923035][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.992904][ T5848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 190.097951][ T7719] loop4: detected capacity change from 0 to 40427 [ 190.125372][ T7719] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 190.138851][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 190.157691][ T7719] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.169332][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.182939][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 190.196690][ T5848] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 190.199309][ T9] usb 1-1: Product: syz [ 190.211837][ T5848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.230148][ T9] usb 1-1: Manufacturer: syz [ 190.235032][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.255226][ T7719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.255452][ T9] usb 1-1: SerialNumber: syz [ 190.288689][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.349569][ T5848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.393541][ T5848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.416894][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.523347][ T7719] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.530515][ T7719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.641893][ T5848] usb 6-1: usb_control_msg returned -32 [ 190.672909][ T5848] usbtmc 6-1:16.0: can't read capabilities [ 190.852067][ T7719] syz.4.472: attempt to access beyond end of device [ 190.852067][ T7719] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 190.953896][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:3e:30:ab:f3:c2 [ 191.024700][ T9] rtl8150 1-1:1.0: eth9: rtl8150 is detected [ 191.246929][ T48] kworker/u4:3: attempt to access beyond end of device [ 191.246929][ T48] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 192.674230][ T5851] usb 1-1: USB disconnect, device number 9 [ 192.696329][ T7821] FAULT_INJECTION: forcing a failure. [ 192.696329][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 192.740450][ T7821] CPU: 0 PID: 7821 Comm: syz.4.489 Not tainted syzkaller #0 [ 192.747831][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.757944][ T7821] Call Trace: [ 192.761273][ T7821] [ 192.764264][ T7821] dump_stack_lvl+0x18c/0x250 [ 192.769028][ T7821] ? show_regs_print_info+0x20/0x20 [ 192.774294][ T7821] ? load_image+0x420/0x420 [ 192.778877][ T7821] ? __might_sleep+0xe0/0xe0 [ 192.783527][ T7821] ? __lock_acquire+0x7eb0/0x7eb0 [ 192.788616][ T7821] ? __asan_memset+0x22/0x40 [ 192.793277][ T7821] should_fail_ex+0x394/0x4c0 [ 192.798021][ T7821] should_failslab+0x9/0x20 [ 192.802570][ T7821] slab_pre_alloc_hook+0x59/0x300 [ 192.807639][ T7821] kmem_cache_alloc+0x5a/0x2c0 [ 192.812459][ T7821] ? proc_reg_open+0x1f0/0x520 [ 192.817314][ T7821] proc_reg_open+0x1f0/0x520 [ 192.821959][ T7821] do_dentry_open+0x880/0x14b0 [ 192.826772][ T7821] ? proc_reg_mmap+0x290/0x290 [ 192.831613][ T7821] path_openat+0x284f/0x3270 [ 192.836290][ T7821] ? do_filp_open+0x430/0x430 [ 192.841029][ T7821] do_filp_open+0x1f2/0x430 [ 192.845582][ T7821] ? vfs_tmpfile+0x620/0x620 [ 192.850228][ T7821] ? noop_direct_IO+0x20/0x20 [ 192.854954][ T7821] ? _raw_spin_unlock+0x28/0x40 [ 192.859847][ T7821] ? alloc_fd+0x590/0x640 [ 192.864232][ T7821] do_sys_openat2+0x134/0x1d0 [ 192.868952][ T7821] ? do_sys_open+0xe0/0xe0 [ 192.873407][ T7821] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.879451][ T7821] ? lock_chain_count+0x20/0x20 [ 192.884373][ T7821] __x64_sys_openat+0x139/0x160 [ 192.889303][ T7821] do_syscall_64+0x55/0xb0 [ 192.893753][ T7821] ? clear_bhb_loop+0x40/0x90 [ 192.898467][ T7821] ? clear_bhb_loop+0x40/0x90 [ 192.903199][ T7821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.909141][ T7821] RIP: 0033:0x7f29a515ed8e [ 192.913621][ T7821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.933278][ T7821] RSP: 002b:00007f29a611fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.941737][ T7821] RAX: ffffffffffffffda RBX: 00007f29a61206c0 RCX: 00007f29a515ed8e [ 192.949749][ T7821] RDX: 0000000000000002 RSI: 00007f29a611ff90 RDI: ffffffffffffff9c [ 192.957760][ T7821] RBP: 00007f29a5235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 192.965787][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.973794][ T7821] R13: 00007f29a5426038 R14: 00007f29a5425fa0 R15: 00007fffadee8048 [ 192.981814][ T7821] [ 193.031543][ T9] usb 6-1: USB disconnect, device number 2 [ 193.657164][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 193.683903][ T7852] netlink: 48 bytes leftover after parsing attributes in process `syz.4.497'. [ 193.742941][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.913963][ T27] usb 4-1: device descriptor read/64, error -71 [ 194.212903][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.392852][ T27] usb 4-1: device descriptor read/64, error -71 [ 194.499455][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.506055][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.518418][ T27] usb usb4-port1: attempt power cycle [ 194.765225][ T7885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 194.942799][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.007838][ T27] usb 4-1: device descriptor read/8, error -71 [ 195.112649][ T7894] loop8: detected capacity change from 0 to 10 [ 195.194578][ T7894] Dev loop8: unable to read RDB block 10 [ 195.210677][ T7894] loop8: unable to read partition table [ 195.223323][ T7894] loop8: partition table beyond EOD, truncated [ 195.239924][ T7894] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 195.293559][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.362823][ T27] usb 4-1: device descriptor read/8, error -71 [ 195.483060][ T27] usb usb4-port1: unable to enumerate USB device [ 195.942867][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.122831][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 196.137755][ T27] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.158893][ T27] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.175318][ T27] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.199677][ T27] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 196.219207][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.243116][ T27] usb 6-1: config 0 descriptor?? [ 196.675012][ T27] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.697847][ T27] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.713119][ T27] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.730638][ T27] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.761082][ T27] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.773970][ T27] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 196.963480][ T27] usb 6-1: USB disconnect, device number 3 [ 198.182989][ T5849] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.399332][ T5849] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 198.415422][ T5849] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 198.450746][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.459423][ T5849] usb 4-1: Product: syz [ 198.470252][ T5849] usb 4-1: Manufacturer: syz [ 198.478575][ T5849] usb 4-1: SerialNumber: syz [ 198.712419][ T7956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.515'. [ 198.731956][ T5849] usb 4-1: Cannot retrieve CPort count: -32 [ 198.762835][ T5849] usb 4-1: Cannot retrieve CPort count: -32 [ 198.790094][ T5849] es2_ap_driver: probe of 4-1:1.0 failed with error -32 [ 198.845026][ T5849] usb 4-1: USB disconnect, device number 14 [ 198.991385][ T7974] binder: 7973:7974 ioctl c0306201 200000000200 returned -14 [ 199.634576][ T7971] loop4: detected capacity change from 0 to 131072 [ 199.646812][ T7971] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 199.655030][ T7971] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 199.667646][ T7971] F2FS-fs (loop4): invalid crc value [ 199.710312][ T7971] F2FS-fs (loop4): Found nat_bits in checkpoint [ 199.771396][ T7971] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 199.778713][ T7971] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 200.362480][ T8004] use of bytesused == 0 is deprecated and will be removed in the future, [ 200.376770][ T8004] use the actual size instead. [ 200.739347][ T8013] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.753134][ T5849] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.965527][ T5849] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 200.979811][ T5849] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 201.009403][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.023110][ T5849] usb 1-1: Product: syz [ 201.027828][ T5849] usb 1-1: Manufacturer: syz [ 201.032499][ T5849] usb 1-1: SerialNumber: syz [ 201.281015][ T5849] usb 1-1: Cannot retrieve CPort count: -32 [ 201.283919][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 201.292387][ T5849] usb 1-1: Cannot retrieve CPort count: -32 [ 201.303093][ T5849] es2_ap_driver: probe of 1-1:1.0 failed with error -32 [ 201.323608][ T5849] usb 1-1: USB disconnect, device number 10 [ 201.352860][ T173] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 201.572788][ T173] usb 6-1: Using ep0 maxpacket: 8 [ 201.583647][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.595475][ T173] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.609913][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.621756][ T173] usb 6-1: config 0 descriptor?? [ 201.847391][ T173] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.379745][ T5851] usb 6-1: USB disconnect, device number 4 [ 203.472965][ T5849] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 203.652969][ T173] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 203.679566][ T5849] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.702844][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.710965][ T5849] usb 4-1: Product: syz [ 203.723270][ T5849] usb 4-1: Manufacturer: syz [ 203.727951][ T5849] usb 4-1: SerialNumber: syz [ 203.750470][ T5849] usb 4-1: config 0 descriptor?? [ 203.865741][ T173] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 203.881336][ T173] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 203.891956][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.900615][ T173] usb 5-1: Product: syz [ 203.905374][ T173] usb 5-1: Manufacturer: syz [ 203.910076][ T173] usb 5-1: SerialNumber: syz [ 203.947134][ T8094] program syz.0.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.995596][ T5849] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.023057][ T5848] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 204.126931][ T173] usb 5-1: Cannot retrieve CPort count: -32 [ 204.128437][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 204.149127][ T173] usb 5-1: Cannot retrieve CPort count: -32 [ 204.157147][ T173] es2_ap_driver: probe of 5-1:1.0 failed with error -32 [ 204.172405][ T173] usb 5-1: USB disconnect, device number 7 [ 204.218287][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.237691][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.249339][ T5848] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 204.263947][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.275117][ T5848] usb 6-1: config 0 descriptor?? [ 204.382866][ T5851] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.582798][ T5851] usb 1-1: Using ep0 maxpacket: 8 [ 204.590316][ T5851] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 204.598757][ T5851] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.615332][ T5851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.625303][ T5851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.635408][ T5851] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.648949][ T5851] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.658949][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.695774][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.708981][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.718466][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.742171][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.750196][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.758188][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.766140][ T5848] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 204.792001][ T5848] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 204.822961][ T5849] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 204.823304][ T5848] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 204.859184][ T5849] usb 4-1: USB disconnect, device number 15 [ 204.889562][ T5851] usb 1-1: usb_control_msg returned -32 [ 204.895726][ T5851] usbtmc 1-1:16.0: can't read capabilities [ 204.953496][ C1] hid-thrustmaster 0003:044F:B65D.0006: Wheel with model id 0x2 is a Thrustmaster T500RS [ 205.164766][ C1] hid-thrustmaster 0003:044F:B65D.0006: Success?! The wheel should have been initialized! [ 205.377282][ T5849] usb 6-1: USB disconnect, device number 5 [ 205.443243][ T5851] usb 1-1: USB disconnect, device number 11 [ 205.570691][ T8111] loop4: detected capacity change from 0 to 2048 [ 205.655357][ T8114] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.839043][ T8111] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 205.858402][ T8111] Remounting filesystem read-only [ 205.869522][ T8111] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 205.877895][ T8111] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 205.885745][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.895178][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.909485][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.008815][ T6257] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 206.035845][ T6257] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 206.069233][ T6257] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 206.091346][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.122183][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.149526][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.167975][ T28] audit: type=1800 audit(1792438699.428:11): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.564" name="console" dev="configfs" ino=16026 res=0 errno=0 [ 206.188132][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.196331][ T6257] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 206.219428][ T6257] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 206.230456][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.252457][ T6257] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 206.268345][ T6257] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 206.278685][ T6257] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 206.292152][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.301162][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 206.315043][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 206.322358][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 206.336757][ T6257] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 206.352925][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 206.366795][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.387912][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.404709][ T8121] FAULT_INJECTION: forcing a failure. [ 206.404709][ T8121] name failslab, interval 1, probability 0, space 0, times 0 [ 206.417530][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.441425][ T6257] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 206.457281][ T6257] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 206.463036][ T8121] CPU: 1 PID: 8121 Comm: syz.0.565 Not tainted syzkaller #0 [ 206.469809][ T6257] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 206.471932][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.471948][ T8121] Call Trace: [ 206.471957][ T8121] [ 206.471967][ T8121] dump_stack_lvl+0x18c/0x250 [ 206.500407][ T8121] ? show_regs_print_info+0x20/0x20 [ 206.502891][ T6257] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 206.505664][ T8121] ? load_image+0x420/0x420 [ 206.505703][ T8121] ? __might_sleep+0xe0/0xe0 [ 206.522181][ T8121] ? __lock_acquire+0x7eb0/0x7eb0 [ 206.527255][ T8121] should_fail_ex+0x394/0x4c0 [ 206.531978][ T8121] should_failslab+0x9/0x20 [ 206.536525][ T8121] slab_pre_alloc_hook+0x59/0x300 [ 206.541580][ T8121] ? _raw_spin_lock_irq+0xbb/0xf0 [ 206.546682][ T8121] kmem_cache_alloc+0x5a/0x2c0 [ 206.551492][ T8121] ? alloc_uid+0x151/0x550 [ 206.555956][ T8121] alloc_uid+0x151/0x550 [ 206.560248][ T8121] __sys_setreuid+0x407/0x980 [ 206.564976][ T8121] do_syscall_64+0x55/0xb0 [ 206.569427][ T8121] ? clear_bhb_loop+0x40/0x90 [ 206.574138][ T8121] ? clear_bhb_loop+0x40/0x90 [ 206.578847][ T8121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.584806][ T8121] RIP: 0033:0x7fde77b9e559 [ 206.589274][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.608916][ T8121] RSP: 002b:00007fde78abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 206.617373][ T8121] RAX: ffffffffffffffda RBX: 00007fde77e25fa0 RCX: 00007fde77b9e559 [ 206.625382][ T8121] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 206.633381][ T8121] RBP: 00007fde77c35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 206.641385][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.649394][ T8121] R13: 00007fde77e26038 R14: 00007fde77e25fa0 R15: 00007ffd021b1178 [ 206.657420][ T8121] [ 206.683022][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.712812][ T6257] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 206.731021][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.749425][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.762765][ T6257] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 206.780365][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.792533][ T6257] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 206.812614][ T6257] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.815065][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 206.827841][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 206.834019][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 206.874121][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 206.881440][ T6257] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 207.373278][ T173] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.425462][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 207.457287][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 207.562795][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.573025][ T173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.584684][ T173] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 207.596150][ T173] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 207.606787][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.626908][ T173] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 207.671656][ T8143] input: syz1 as /devices/virtual/input/input9 [ 207.750233][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.776599][ T5863] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 207.795808][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.823632][ T5863] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 207.831488][ T5863] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 207.857887][ T5863] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 207.874827][ T5863] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 207.882649][ T5863] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 207.902017][ T5863] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 207.915242][ T5863] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 207.928672][ T5863] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 207.940782][ T5863] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 208.010526][ T8145] FAULT_INJECTION: forcing a failure. [ 208.010526][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 208.024166][ T8145] CPU: 1 PID: 8145 Comm: syz.0.576 Not tainted syzkaller #0 [ 208.031525][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.041641][ T8145] Call Trace: [ 208.044991][ T8145] [ 208.047991][ T8145] dump_stack_lvl+0x18c/0x250 [ 208.052746][ T8145] ? show_regs_print_info+0x20/0x20 [ 208.058018][ T8145] ? load_image+0x420/0x420 [ 208.062626][ T8145] ? __might_sleep+0xe0/0xe0 [ 208.067301][ T8145] ? __lock_acquire+0x7eb0/0x7eb0 [ 208.072414][ T8145] should_fail_ex+0x394/0x4c0 [ 208.077185][ T8145] should_failslab+0x9/0x20 [ 208.081785][ T8145] slab_pre_alloc_hook+0x59/0x300 [ 208.086892][ T8145] kmem_cache_alloc+0x5a/0x2c0 [ 208.091740][ T8145] ? __anon_vma_prepare+0x68/0x440 [ 208.096930][ T8145] __anon_vma_prepare+0x68/0x440 [ 208.101944][ T8145] ? __pte_alloc+0x113/0x2a0 [ 208.106662][ T8145] handle_mm_fault+0x3ded/0x4a50 [ 208.106705][ T173] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 208.111657][ T8145] ? handle_mm_fault+0xe6/0x4a50 [ 208.127116][ T8145] ? numa_migrate_prep+0x350/0x350 [ 208.132332][ T8145] __get_user_pages+0x604/0x1580 [ 208.137361][ T8145] ? vma_link+0x2e1/0x530 [ 208.141780][ T8145] ? populate_vma_page_range+0x380/0x380 [ 208.147506][ T8145] get_user_pages_remote+0x39e/0xb90 [ 208.152888][ T8145] ? get_dump_page+0x200/0x200 [ 208.157752][ T8145] ? down_read+0x1ac/0x2e0 [ 208.162241][ T8145] get_arg_page+0x274/0x560 [ 208.166828][ T8145] ? copy_string_kernel+0x220/0x220 [ 208.172113][ T8145] ? up_write+0x1be/0x410 [ 208.176531][ T8145] copy_string_kernel+0x165/0x220 [ 208.181633][ T8145] do_execveat_common+0x35d/0x6b0 [ 208.186736][ T8145] __x64_sys_execveat+0xc4/0xe0 [ 208.191662][ T8145] do_syscall_64+0x55/0xb0 [ 208.196247][ T8145] ? clear_bhb_loop+0x40/0x90 [ 208.201001][ T8145] ? clear_bhb_loop+0x40/0x90 [ 208.205747][ T8145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.211734][ T8145] RIP: 0033:0x7fde77b9e559 [ 208.216232][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.235931][ T8145] RSP: 002b:00007fde78abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 208.244474][ T8145] RAX: ffffffffffffffda RBX: 00007fde77e25fa0 RCX: 00007fde77b9e559 [ 208.252543][ T8145] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 208.260586][ T8145] RBP: 00007fde77c35ad8 R08: 0000000000001000 R09: 0000000000000000 [ 208.268622][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.276655][ T8145] R13: 00007fde77e26038 R14: 00007fde77e25fa0 R15: 00007ffd021b1178 [ 208.284713][ T8145] [ 208.292457][ T173] usb 6-1: USB disconnect, device number 6 [ 208.573264][ T9] usb 5-1: USB disconnect, device number 8 [ 208.588812][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 208.631476][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 208.674680][ T9] keyspan 5-1:1.0: device disconnected [ 209.263574][ T5875] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.396287][ T8185] loop4: detected capacity change from 0 to 256 [ 209.468366][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 209.480183][ T5875] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.500938][ T5875] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.536151][ T5875] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.570971][ T5875] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.611656][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.646653][ T5875] hub 6-1:1.0: bad descriptor, ignoring hub [ 209.670118][ T5875] hub: probe of 6-1:1.0 failed with error -5 [ 209.695933][ T5875] cdc_wdm 6-1:1.0: skipping garbage [ 209.741794][ T5875] cdc_wdm 6-1:1.0: skipping garbage [ 209.783856][ T5875] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 209.794349][ T5875] cdc_wdm 6-1:1.0: Unknown control protocol [ 210.707427][ T8166] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 211.716448][ T8230] loop3: detected capacity change from 0 to 32768 [ 211.753452][ T8230] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.597 (8230) [ 211.826148][ T8230] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.873174][ T8230] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 211.903391][ T8230] BTRFS info (device loop3): setting nodatacow, compression disabled [ 211.911587][ T8230] BTRFS info (device loop3): setting datasum, datacow enabled [ 211.962830][ T8230] BTRFS info (device loop3): force clearing of disk cache [ 211.970062][ T8230] BTRFS info (device loop3): enabling ssd optimizations [ 212.022960][ T8230] BTRFS info (device loop3): using spread ssd allocation scheme [ 212.030712][ T8230] BTRFS info (device loop3): turning on sync discard [ 212.083848][ T8230] BTRFS info (device loop3): turning off barriers [ 212.090387][ T8230] BTRFS info (device loop3): enabling disk space caching [ 212.134049][ T8230] BTRFS info (device loop3): enabling auto defrag [ 212.140599][ T8230] BTRFS info (device loop3): not using ssd optimizations [ 212.168250][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 212.183383][ T8230] BTRFS info (device loop3): not using spread ssd allocation scheme [ 212.192121][ T8230] BTRFS info (device loop3): disk space caching is enabled [ 212.444422][ T5851] usb 6-1: USB disconnect, device number 7 [ 212.452537][ T8230] BTRFS info (device loop3): rebuilding free space tree [ 212.581839][ T8230] BTRFS info (device loop3): disabling free space tree [ 212.617704][ T8230] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.651091][ T8230] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.066017][ T8280] loop5: detected capacity change from 0 to 128 [ 213.199047][ T8280] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.335159][ T8280] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.367194][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.547400][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.560655][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.574657][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.602192][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.622888][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.631839][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.804569][ T5776] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.929746][ T8299] loop4: detected capacity change from 0 to 512 [ 213.937723][ T7397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.991318][ T8299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.063100][ T8299] EXT4-fs (loop4): 1 truncate cleaned up [ 214.069741][ T8299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.095777][ T8288] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.491397][ T6257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.753546][ T8314] loop4: detected capacity change from 0 to 1024 [ 215.252812][ T5848] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.344176][ T8318] loop5: detected capacity change from 0 to 32768 [ 215.373069][ T8318] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.614 (8318) [ 215.405917][ T8318] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.432929][ T8318] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 215.449074][ T8318] BTRFS info (device loop5): using free space tree [ 215.465349][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.476169][ T5848] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.492727][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.529693][ T5848] usb 4-1: config 0 descriptor?? [ 215.539389][ T5848] pwc: Askey VC010 type 2 USB webcam detected. [ 215.652475][ T8318] BTRFS info (device loop5): enabling ssd optimizations [ 215.683077][ T5779] Bluetooth: hci2: command tx timeout [ 215.773393][ T28] audit: type=1800 audit(1792438709.018:12): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.614" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 215.883624][ T8288] chnl_net:caif_netlink_parms(): no params data found [ 216.033121][ T5848] pwc: recv_control_msg error -32 req 02 val 2b00 [ 216.043097][ T173] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 216.067082][ T5848] pwc: recv_control_msg error -32 req 02 val 2700 [ 216.103540][ T5848] pwc: recv_control_msg error -32 req 02 val 2c00 [ 216.112068][ T7397] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 216.198126][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.233972][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.253721][ T168] bridge_slave_1: left allmulticast mode [ 216.264931][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.284781][ T173] usb 5-1: Using ep0 maxpacket: 32 [ 216.297090][ T168] bridge_slave_0: left allmulticast mode [ 216.309833][ T173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.313949][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.335613][ T5848] pwc: recv_control_msg error -71 req 04 val 1300 [ 216.348252][ T5848] pwc: recv_control_msg error -71 req 04 val 1400 [ 216.362043][ T173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.362571][ T5848] pwc: recv_control_msg error -71 req 02 val 2000 [ 216.399523][ T173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.432343][ T5848] pwc: recv_control_msg error -71 req 02 val 2100 [ 216.441494][ T5848] pwc: recv_control_msg error -71 req 04 val 1500 [ 216.448876][ T173] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 216.458332][ T5848] pwc: recv_control_msg error -71 req 02 val 2500 [ 216.480504][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.499052][ T5848] pwc: recv_control_msg error -71 req 02 val 2400 [ 216.507272][ T173] usb 5-1: Product: syz [ 216.511517][ T173] usb 5-1: Manufacturer: syz [ 216.523206][ T5848] pwc: recv_control_msg error -71 req 02 val 2600 [ 216.556528][ T173] usb 5-1: SerialNumber: syz [ 216.572571][ T5848] pwc: recv_control_msg error -71 req 02 val 2900 [ 216.603181][ T5848] pwc: recv_control_msg error -71 req 02 val 2800 [ 216.630452][ T5848] pwc: recv_control_msg error -71 req 04 val 1100 [ 216.652611][ T5848] pwc: recv_control_msg error -71 req 04 val 1200 [ 216.710392][ T5848] pwc: Registered as video103. [ 216.756808][ T5848] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 216.837845][ T5872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 216.866795][ T5848] usb 4-1: USB disconnect, device number 16 [ 217.060402][ T173] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 217.079789][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 217.092098][ T5872] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 217.116125][ T5872] usb 6-1: config 0 has no interface number 0 [ 217.140165][ T5872] usb 6-1: config 0 interface 12 has no altsetting 0 [ 217.166029][ T173] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 217.199890][ T5872] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 217.226470][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.249346][ T5872] usb 6-1: Product: syz [ 217.258228][ T5872] usb 6-1: Manufacturer: syz [ 217.296992][ T5872] usb 6-1: SerialNumber: syz [ 217.313948][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.336820][ T5872] usb 6-1: config 0 descriptor?? [ 217.389533][ T5848] usb 5-1: USB disconnect, device number 9 [ 217.652850][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.772811][ T5779] Bluetooth: hci2: command tx timeout [ 217.867718][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 217.878873][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.890175][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.900220][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 217.914972][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 217.924959][ T23] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 217.933487][ T23] usb 4-1: Manufacturer: syz [ 217.955113][ T23] usb 4-1: config 0 descriptor?? [ 217.999459][ T168] team0 (unregistering): Port device team_slave_1 removed [ 218.088060][ T168] team0 (unregistering): Port device team_slave_0 removed [ 218.177702][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.271247][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.395097][ T23] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 218.404181][ T23] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 218.430736][ T23] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 218.609986][ T5872] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 218.620926][ T8370] UBIFS error (pid: 8370): cannot open "./file0", error -22 [ 218.633238][ T5872] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 218.677156][ T5872] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 218.692006][ T5872] f81534: probe of 6-1:0.12 failed with error -71 [ 218.737703][ T23] usb 4-1: USB disconnect, device number 17 [ 218.741856][ T5872] usb 6-1: USB disconnect, device number 8 [ 219.102342][ T168] bond0 (unregistering): Released all slaves [ 219.162876][ T5848] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.316347][ T8379] atomic_op ffff88802b199198 conn xmit_atomic 0000000000000000 [ 219.347399][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.362653][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.365989][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 219.382128][ T8288] bridge_slave_0: entered allmulticast mode [ 219.390013][ T8288] bridge_slave_0: entered promiscuous mode [ 219.407539][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.422629][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.431053][ T8288] bridge_slave_1: entered allmulticast mode [ 219.434277][ T5848] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.475773][ T5848] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.489033][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.498055][ T8288] bridge_slave_1: entered promiscuous mode [ 219.520755][ T5848] usb 5-1: Product: syz [ 219.540363][ T5848] usb 5-1: Manufacturer: syz [ 219.553103][ T5848] usb 5-1: SerialNumber: syz [ 219.584616][ T5848] usb 5-1: config 0 descriptor?? [ 219.606462][ T8373] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.624155][ T5848] hub 5-1:0.0: bad descriptor, ignoring hub [ 219.640438][ T5848] hub: probe of 5-1:0.0 failed with error -5 [ 219.699445][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.779910][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.843307][ T5779] Bluetooth: hci2: command tx timeout [ 219.981729][ T8288] team0: Port device team_slave_0 added [ 219.994000][ T8288] team0: Port device team_slave_1 added [ 220.175947][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.185486][ T2136] usb 5-1: USB disconnect, device number 10 [ 220.218641][ T168] IPVS: stop unused estimator thread 0... [ 220.229075][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.298616][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.343495][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.365338][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.431338][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.585821][ T8288] hsr_slave_0: entered promiscuous mode [ 220.592629][ T8288] hsr_slave_1: entered promiscuous mode [ 220.600762][ T8288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.612303][ T8288] Cannot create hsr debugfs directory [ 220.901949][ T8408] loop4: detected capacity change from 0 to 256 [ 221.009098][ T8408] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x20200bb1, utbl_chksum : 0xe619d30d) [ 221.185401][ T8405] loop3: detected capacity change from 0 to 8192 [ 221.240771][ T8405] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.292326][ T8405] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 221.336226][ T8288] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.354442][ T8288] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.389017][ T8405] REISERFS (device loop3): using ordered data mode [ 221.420962][ T8405] reiserfs: using flush barriers [ 221.461882][ T8288] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.485427][ T8405] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.504722][ T8405] REISERFS (device loop3): checking transaction log (loop3) [ 221.528163][ T8288] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.587056][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 221.633746][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 221.800577][ T8405] REISERFS (device loop3): Using tea hash to sort names [ 221.827622][ T8405] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 221.910891][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.922935][ T5779] Bluetooth: hci2: command tx timeout [ 221.997829][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.068633][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.075908][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.138497][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.145759][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.153761][ T5872] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.359233][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 222.368232][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 222.398536][ T5872] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 222.413744][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 222.446528][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.466957][ T5872] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 222.492885][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.524591][ T5872] usb 5-1: config 0 descriptor?? [ 222.706430][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.014644][ T5872] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 223.071770][ T8462] udevd[8462]: open /dev/null failed: Not a directory [ 223.417843][ T8288] veth0_vlan: entered promiscuous mode [ 223.461805][ T8288] veth1_vlan: entered promiscuous mode [ 223.472141][ T5872] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -71 [ 223.518156][ T5872] usb 5-1: USB disconnect, device number 11 [ 223.604066][ T8288] veth0_macvtap: entered promiscuous mode [ 223.638419][ T8288] veth1_macvtap: entered promiscuous mode [ 223.701617][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.716727][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.727265][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.752973][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.773060][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.793191][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.828540][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.912289][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.924532][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.936059][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.947183][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.957486][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.969661][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.981522][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.017642][ T8288] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.026849][ T8288] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.037349][ T8288] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.047502][ T8288] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.259813][ T8475] loop3: detected capacity change from 0 to 4096 [ 224.311063][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 224.326695][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 224.335373][ T5779] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 224.415876][ T8475] ntfs3: loop3: Failed to load $Extend (-22). [ 224.453136][ T8475] ntfs3: loop3: Failed to initialize $Extend. [ 224.865035][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 224.902219][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 226.224464][ T8537] syzkaller0: entered promiscuous mode [ 226.243908][ T8537] syzkaller0: entered allmulticast mode [ 227.774267][ T5779] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 227.774493][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 230.178069][ T1330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.389051][ T1330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.534276][ T1330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.654998][ T1330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.693022][ T8601] loop4: detected capacity change from 0 to 1024 [ 231.816366][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 231.858752][ T8601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.894578][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 232.486423][ T8594] loop3: detected capacity change from 0 to 131072 [ 232.498670][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 232.524225][ T8594] F2FS-fs (loop3): invalid crc value [ 232.599497][ T8594] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.608810][ T6257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.673305][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 232.692147][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 232.703063][ T8594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 233.397576][ T1330] hsr_slave_0: left promiscuous mode [ 233.404161][ T1330] hsr_slave_1: left promiscuous mode [ 233.414976][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.422440][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.444105][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.451589][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.484328][ T1330] bridge_slave_1: left allmulticast mode [ 233.491077][ T1330] bridge_slave_1: left promiscuous mode [ 233.503215][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.523835][ T1330] bridge_slave_0: left allmulticast mode [ 233.529566][ T1330] bridge_slave_0: left promiscuous mode [ 233.543068][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.590886][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 233.626819][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 233.649506][ T1330] veth1_macvtap: left promiscuous mode [ 233.662946][ T1330] veth0_macvtap: left promiscuous mode [ 233.668769][ T1330] veth1_vlan: left promiscuous mode [ 233.682848][ T1330] veth0_vlan: left promiscuous mode [ 235.494937][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 235.551476][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 235.616096][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.676319][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.237596][ T1330] bond0 (unregistering): Released all slaves [ 237.173361][ T8680] loop5: detected capacity change from 0 to 1024 [ 237.203959][ T8680] EXT4-fs: Ignoring removed oldalloc option [ 237.209946][ T8680] EXT4-fs: Ignoring removed oldalloc option [ 237.233241][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 237.265164][ T8680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.290185][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 237.341477][ T8680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.962311][ T7397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.046705][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 238.097939][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 239.724780][ T8749] tipc: Enabled bearer , priority 1 [ 239.756170][ T8747] tipc: Resetting bearer [ 239.831804][ T8747] tipc: Disabling bearer [ 239.883242][ T27] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 240.099220][ T27] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 240.135495][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.150722][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.167046][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 240.196818][ T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 240.226026][ T27] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 240.243575][ T27] usb 6-1: Manufacturer: syz [ 240.259148][ T27] usb 6-1: config 0 descriptor?? [ 240.685805][ T27] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 240.719555][ T27] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 240.766741][ T27] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 240.859861][ T8767] udevd[8767]: open /dev/null failed: Not a directory [ 241.062910][ T27] usb 6-1: USB disconnect, device number 9 [ 243.997122][ T8819] loop3: detected capacity change from 0 to 32768 [ 244.020617][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 244.166818][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 244.196310][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 245.163666][ T8846] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 245.374125][ T8846] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 245.392832][ T8846] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.426195][ T8846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 245.438805][ T8846] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.458552][ T8846] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 245.476223][ T8846] usb 6-1: Product: syz [ 245.480458][ T8846] usb 6-1: Manufacturer: syz [ 245.485617][ T8846] usb 6-1: SerialNumber: syz [ 245.496305][ T8846] usb 6-1: config 0 descriptor?? [ 245.506582][ T8846] hub 6-1:0.0: bad descriptor, ignoring hub [ 245.512557][ T8846] hub: probe of 6-1:0.0 failed with error -5 [ 245.532109][ T8846] usb 6-1: selecting invalid altsetting 0 [ 246.229688][ T8851] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 246.684679][ T8851] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 246.733268][ T23] usb 6-1: USB disconnect, device number 10 [ 248.341614][ T8887] FAULT_INJECTION: forcing a failure. [ 248.341614][ T8887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.355415][ T8887] CPU: 0 PID: 8887 Comm: syz.5.691 Not tainted syzkaller #0 [ 248.362758][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 248.372876][ T8887] Call Trace: [ 248.376201][ T8887] [ 248.379170][ T8887] dump_stack_lvl+0x18c/0x250 [ 248.383906][ T8887] ? show_regs_print_info+0x20/0x20 [ 248.389182][ T8887] ? load_image+0x420/0x420 [ 248.393753][ T8887] ? __might_fault+0xaa/0x120 [ 248.398491][ T8887] ? __lock_acquire+0x7eb0/0x7eb0 [ 248.403576][ T8887] ? __virt_addr_valid+0x10c/0x380 [ 248.408752][ T8887] should_fail_ex+0x394/0x4c0 [ 248.413522][ T8887] _copy_to_user+0x2f/0xa0 [ 248.417999][ T8887] bpf_verifier_vlog+0x5ac/0x840 [ 248.422998][ T8887] btf_verifier_log+0x11e/0x1a0 [ 248.427930][ T8887] ? btf_parse_graph_root+0xb00/0xb00 [ 248.433341][ T8887] ? __btf_verifier_log+0xe3/0x140 [ 248.438508][ T8887] ? btf_check_sec_info+0x350/0x350 [ 248.443758][ T8887] btf_func_proto_log+0x29a/0x850 [ 248.448852][ T8887] __btf_verifier_log_type+0x457/0x690 [ 248.454365][ T8887] ? btf_int_show+0x2810/0x2810 [ 248.459274][ T8887] btf_func_proto_check_meta+0xed/0x150 [ 248.464865][ T8887] btf_check_all_metas+0x371/0xaf0 [ 248.470022][ T8887] btf_parse_type_sec+0xfc/0x1960 [ 248.475083][ T8887] ? btf_check_sec_info+0x350/0x350 [ 248.480324][ T8887] ? __virt_addr_valid+0x10c/0x380 [ 248.485489][ T8887] ? btf_verifier_log+0x1a0/0x1a0 [ 248.490551][ T8887] ? btf_parse_hdr+0x545/0x700 [ 248.495365][ T8887] ? btf_parse_str_sec+0x20d/0x2a0 [ 248.500518][ T8887] btf_new_fd+0x440/0x9e0 [ 248.504913][ T8887] ? bpf_btf_show_fdinfo+0x80/0x80 [ 248.510065][ T8887] ? capable+0x88/0xe0 [ 248.514192][ T8887] __sys_bpf+0x670/0x890 [ 248.518466][ T8887] ? bpf_link_show_fdinfo+0x560/0x560 [ 248.523918][ T8887] ? lock_chain_count+0x20/0x20 [ 248.528815][ T8887] __x64_sys_bpf+0x7c/0x90 [ 248.533261][ T8887] do_syscall_64+0x55/0xb0 [ 248.537715][ T8887] ? clear_bhb_loop+0x40/0x90 [ 248.542432][ T8887] ? clear_bhb_loop+0x40/0x90 [ 248.547141][ T8887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.553078][ T8887] RIP: 0033:0x7f2bfe39e559 [ 248.557520][ T8887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.577162][ T8887] RSP: 002b:00007f2bff1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.585606][ T8887] RAX: ffffffffffffffda RBX: 00007f2bfe625fa0 RCX: 00007f2bfe39e559 [ 248.593610][ T8887] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 248.601609][ T8887] RBP: 00007f2bfe435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 248.609605][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.617599][ T8887] R13: 00007f2bfe626038 R14: 00007f2bfe625fa0 R15: 00007ffc345d1358 [ 248.625618][ T8887] [ 250.667101][ T8914] FAULT_INJECTION: forcing a failure. [ 250.667101][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 250.689463][ T8914] CPU: 0 PID: 8914 Comm: syz.3.695 Not tainted syzkaller #0 [ 250.696849][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.706962][ T8914] Call Trace: [ 250.710292][ T8914] [ 250.713276][ T8914] dump_stack_lvl+0x18c/0x250 [ 250.718036][ T8914] ? show_regs_print_info+0x20/0x20 [ 250.723304][ T8914] ? load_image+0x420/0x420 [ 250.727877][ T8914] ? __might_sleep+0xe0/0xe0 [ 250.732535][ T8914] ? __lock_acquire+0x7eb0/0x7eb0 [ 250.737636][ T8914] should_fail_ex+0x394/0x4c0 [ 250.742413][ T8914] should_failslab+0x9/0x20 [ 250.746992][ T8914] slab_pre_alloc_hook+0x59/0x300 [ 250.752081][ T8914] ? ll_open+0x5e/0x300 [ 250.756295][ T8914] __kmem_cache_alloc_node+0x53/0x250 [ 250.761746][ T8914] ? ll_open+0x5e/0x300 [ 250.765976][ T8914] kmalloc_trace+0x2a/0xe0 [ 250.770469][ T8914] ll_open+0x5e/0x300 [ 250.774516][ T8914] hci_uart_tty_ioctl+0x775/0xa20 [ 250.779609][ T8914] ? hci_uart_tty_write+0x10/0x10 [ 250.784703][ T8914] tty_ioctl+0x9b5/0xdc0 [ 250.789008][ T8914] ? tty_get_icount+0xb0/0xb0 [ 250.793750][ T8914] __se_sys_ioctl+0xfd/0x170 [ 250.798410][ T8914] do_syscall_64+0x55/0xb0 [ 250.802881][ T8914] ? clear_bhb_loop+0x40/0x90 [ 250.807628][ T8914] ? clear_bhb_loop+0x40/0x90 [ 250.812357][ T8914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.818319][ T8914] RIP: 0033:0x7fc29279e559 [ 250.822786][ T8914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.842456][ T8914] RSP: 002b:00007fc2936fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.850955][ T8914] RAX: ffffffffffffffda RBX: 00007fc292a25fa0 RCX: 00007fc29279e559 [ 250.858993][ T8914] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 250.867036][ T8914] RBP: 00007fc292835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 250.875104][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.883156][ T8914] R13: 00007fc292a26038 R14: 00007fc292a25fa0 R15: 00007fffbc53f488 [ 250.891231][ T8914] [ 253.125718][ T5848] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 253.292550][ T8947] loop3: detected capacity change from 0 to 32768 [ 253.308943][ T8936] udevd[8936]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 253.331796][ T8947] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 253.351112][ T5848] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 253.372773][ T5848] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 253.390350][ T8947] XFS (loop3): Ending clean mount [ 253.396649][ T5848] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 253.406950][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 253.415289][ T5848] usb 6-1: Product: syz [ 253.419516][ T5848] usb 6-1: Manufacturer: syz [ 253.468267][ T28] audit: type=1800 audit(1792438752.729:13): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.699" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 253.568058][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 253.673217][ T8945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.680604][ T8945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.689959][ T8958] udevd[8958]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 253.717511][ T5848] dvb_ttusb_budget: ttusb_init_controller: error [ 253.718235][ T8958] udevd[8958]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 253.761678][ T5848] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 253.927873][ T5848] DVB: Unable to find symbol cx22700_attach() [ 254.113020][ T5848] DVB: Unable to find symbol tda10046_attach() [ 254.119267][ T5848] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 254.163480][ T5848] usb 6-1: USB disconnect, device number 11 SYZFAIL: open(/dev/rfkill) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=603 state=3 status=67 (errno 32: Broken pipe) [ 255.930464][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.942954][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.057973][ T1147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.285423][ T1147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.452892][ T1147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.516156][ T6883] tipc: Resetting bearer [ 256.606227][ T6883] tipc: Disabling bearer [ 256.675873][ T1147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.320743][ T1147] hsr_slave_0: left promiscuous mode [ 258.327794][ T1147] hsr_slave_1: left promiscuous mode [ 258.335615][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.346896][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.355548][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.364557][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.373919][ T1147] bridge_slave_1: left allmulticast mode [ 258.379631][ T1147] bridge_slave_1: left promiscuous mode [ 258.389522][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.399818][ T1147] bridge_slave_0: left allmulticast mode [ 258.409302][ T1147] bridge_slave_0: left promiscuous mode [ 258.415764][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.468234][ T1147] veth1_macvtap: left promiscuous mode [ 258.474828][ T1147] veth0_macvtap: left promiscuous mode [ 258.480565][ T1147] veth1_vlan: left promiscuous mode [ 258.486640][ T1147] veth0_vlan: left promiscuous mode [ 259.193662][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 259.253883][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 259.308050][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.362017][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.767265][ T1147] bond0 (unregistering): Released all slaves