last executing test programs: 11m54.839911693s ago: executing program 32 (id=289): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, 0x4) 11m17.256388636s ago: executing program 33 (id=752): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, r2}) 8m39.789640224s ago: executing program 34 (id=2408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000091}]}) 7m56.423542731s ago: executing program 35 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010400000000ff5bdf2500000000", @ANYRES32=r2, @ANYBLOB="10000500420005003c0012800b00010067656e65766500002c000280140012001e"], 0x5c}}, 0x40) 5m41.670812342s ago: executing program 3 (id=4371): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @remote, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2c}}}}], 0x28}, 0x40) 5m41.394370933s ago: executing program 3 (id=4376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x3}) 5m41.025932664s ago: executing program 3 (id=4381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/irq_vectors/vector_setup/id\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 5m40.794190338s ago: executing program 3 (id=4385): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800004, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="4d467bd4ed9065c52d68dde4574c7c15cfd856bcc34351f0a0525eb942610d992527be89ad7560b8475f4484bf922a8b1d8c72f350ac27028c0bc8f70acf86040fe411ede7f2ea11fa400f82c54126ea0701a83ec7a12dd711848ab29f3846f2c994f96265e0a565205631dee31829d2234000"/124, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES64, @ANYBLOB="fad50f61722d8f2e0ccd6186e627354da57807aa9a4f9752c80919dfb058acc725c18edc3e8760cabb4294aa9e3fc7f54e7122bc70666228004fb7f23cfbaaa3844f52c446820ec0b99b05d05f570d8c151971cedc87359c3dd4a292636a5bbf63f65e24e48bdff93a7edd3feb44df8153a1f5b36dd7424aa3e0a69c2da0542601a506fb13f1bc27fd19eca65aff32c9999a38a10c949a1c2377ae7de9691249adf0dd07da9250db2395f54e7802427cb8c0ce373cb5df46cc07c06db0a8125ab3fed2eaa59816083c4574eb8a41e5187afff1"], 0x1, 0x1ff, &(0x7f0000000700)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 5m40.371143763s ago: executing program 3 (id=4392): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, &(0x7f0000000300)='./cgroup\x00', 0x89801) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x46) 5m39.698596141s ago: executing program 3 (id=4401): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m39.256559711s ago: executing program 36 (id=4401): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m6.962540952s ago: executing program 2 (id=4707): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000480)={[{}, {@umask={'umask', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@nodecompose}, {@nobarrier}]}, 0xfe, 0x5f2, &(0x7f0000000680)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)={[{@type={'type', 0x3d, "54a10fb2"}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 5m6.452650245s ago: executing program 2 (id=4712): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000005000)='syna', 0x4) 5m6.171601129s ago: executing program 2 (id=4715): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x41) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@can={{0x2, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "e267e28db23ee206"}, 0x10}, 0xee, 0x0, 0x0, 0x40488d4}, 0x0) 5m5.858541695s ago: executing program 2 (id=4719): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) 5m5.790896843s ago: executing program 2 (id=4720): landlock_restrict_self(0xffffffffffffffff, 0x1) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 5m5.683090596s ago: executing program 2 (id=4722): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 4m51.994562702s ago: executing program 6 (id=4838): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 4m50.815094304s ago: executing program 6 (id=4849): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x80802, 0xf7) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r0, r0, 0x0, 0x2000000000409) 4m50.550488933s ago: executing program 37 (id=4722): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 4m50.142608275s ago: executing program 6 (id=4854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x3, 0xf}, 0xc) 4m49.766991369s ago: executing program 6 (id=4857): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) 4m49.239693335s ago: executing program 6 (id=4860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 4m48.610500336s ago: executing program 6 (id=4865): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 4m48.076538143s ago: executing program 38 (id=4865): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 1m14.657052297s ago: executing program 4 (id=6464): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() 1m14.240485141s ago: executing program 4 (id=6467): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast1}}}], 0x20}, 0x4000) 1m14.04972518s ago: executing program 4 (id=6468): setreuid(0x0, 0xee01) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x8000000, 0x2, 0x2, 0x8, 0xe9e, 0x4}, 0x20) 1m13.803036379s ago: executing program 4 (id=6470): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 1m13.293126909s ago: executing program 4 (id=6471): recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0xe}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/60, 0x3c, 0x40000143, 0x0, 0x18) 1m10.345717213s ago: executing program 4 (id=6490): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m9.993127225s ago: executing program 39 (id=6490): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 53.448062699s ago: executing program 5 (id=6580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e:\fV', 0x4) 53.029365749s ago: executing program 5 (id=6583): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="edc6b53b75971c8fc20289c17197fd861c803de9d86b08a3b20e54d7fae25399a9940c8c0e9f246d221821dd47b30934234b04ede1c214c7a9f0c6cb914ea4eaea2e7ac3ff4159781d71dd47dcd1379803db170821310c5fde227eeea37c3abb3573eb9b979210cd8e", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') 51.170803642s ago: executing program 5 (id=6592): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 50.062937321s ago: executing program 5 (id=6601): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 49.514720617s ago: executing program 5 (id=6607): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000004480)={0x2, 0x2, 0x7fffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602ffc300000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 47.394507392s ago: executing program 5 (id=6621): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 46.747376354s ago: executing program 40 (id=6621): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 6.138651184s ago: executing program 8 (id=6961): syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000180), &(0x7f0000000080)=""/11, 0x2}, 0x20) 5.966219037s ago: executing program 8 (id=6964): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 5.911863587s ago: executing program 8 (id=6965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2000}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x74}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 5.420336845s ago: executing program 8 (id=6968): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000003801") 4.998021486s ago: executing program 8 (id=6972): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) 4.850819777s ago: executing program 7 (id=6974): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.662841667s ago: executing program 8 (id=6977): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 4.257777452s ago: executing program 7 (id=6980): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/28, 0x1c) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.910428839s ago: executing program 0 (id=6982): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x800006, &(0x7f0000000600)=ANY=[], 0x8, 0xb7, &(0x7f0000001a40)="$eJzs0rFJBUEQBuD/3Ts9DkELsAd7MDW3ggsNjRRBK7EDW7GE68DgUpOR5U7BxEAQFb4v2J2dYeGH3efXp9McJ3WfVFUdJhmz1tc3t1eXF23dJ8lj+gxZve/8c13q4y3rpJ2Tl/MMD1uvDeflbpp3meal/YqjqtqGB7+TGQAA+J4uZ1u1+9Qfv7rUJ9l3PxkLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M94CwAA///K8iH3") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.852361145s ago: executing program 1 (id=6983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="306663353a313232373a6d6cc53ff2a6db3d", 0x12) 3.643930609s ago: executing program 9 (id=6984): r0 = memfd_create(&(0x7f0000000040)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xef\xccG\x98\x12\xafN/sAB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) 2.79627268s ago: executing program 9 (id=6989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x705e80, 0xb0) umount2(&(0x7f00000001c0)='./debug\x00', 0x1) 2.794902071s ago: executing program 1 (id=6990): mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munlockall() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 2.499031677s ago: executing program 0 (id=6991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x23d1) 2.444523286s ago: executing program 9 (id=6992): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000300)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0\x00') 1.929182483s ago: executing program 7 (id=6993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.921320557s ago: executing program 0 (id=6994): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') 1.867998446s ago: executing program 9 (id=6995): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x61a4, &(0x7f000000c4c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) 1.446262116s ago: executing program 0 (id=6996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1ab402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6a7, 0x0, 0x8001}]}) 1.420791053s ago: executing program 1 (id=6997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.335248583s ago: executing program 7 (id=6998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002f00)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) 1.034384818s ago: executing program 1 (id=6999): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) geteuid() 1.033056843s ago: executing program 0 (id=7000): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xc1, 0xba, 0xda, 0x10, 0x2cb7, 0x104, 0x62f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xff, 0x20, 0x9, "", [{{0x9, 0x4, 0xa5, 0x2, 0x0, 0x9, 0x5a, 0xf8, 0x2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000100)=ANY=[]) 891.215561ms ago: executing program 7 (id=7001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0x4, 0x799b, 0x0, 0x28e, 0x68}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 210.326807ms ago: executing program 7 (id=7002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000021000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 0s ago: executing program 9 (id=7003): keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x3, 0x7fffffff, 0x800, 0xba5, 0x8000000000000001, 0x8a5, 0x9, 0x0, 0x0, 0x7, 0xfffffffffffffffa, 0x8000, 0x5, 0xffff, 0x4, 0xf52, 0xffff, 0x7f, 0x7f, 0x101, 0x8000000000000001, 0x1b, 0x10000, 0xfffffffffffffffc}) kernel console output (not intermixed with test programs): 18][ T31] audit: type=1800 audit(736.971:3241): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 731.185934][ T31] audit: type=1800 audit(737.021:3242): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245899 res=0 errno=0 [ 731.219322][ T31] audit: type=1800 audit(737.051:3243): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245931 res=0 errno=0 [ 731.237909][ T31] audit: type=1800 audit(737.051:3244): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245906 res=0 errno=0 [ 731.237965][ T31] audit: type=1800 audit(737.071:3245): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245907 res=0 errno=0 [ 731.699442][T22780] loop9: detected capacity change from 0 to 1024 [ 731.763892][T22780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 731.830255][T22780] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.6415: lblock 0 mapped to illegal pblock 0 (length 1) [ 731.844670][T17341] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 731.844699][T17341] asix 9-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 731.844935][T17341] asix 9-1:0.251: probe with driver asix failed with error -71 [ 731.857707][T17341] usb 9-1: USB disconnect, device number 25 [ 731.891537][T22780] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 731.909199][T22780] EXT4-fs (loop9): This should not happen!! Data will be lost [ 731.909199][T22780] [ 731.966123][T17253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 732.813155][ T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 732.900908][T22808] block nbd5: server does not support multiple connections per device. [ 732.912739][T22808] block nbd5: shutting down sockets [ 732.971328][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 732.977243][ T9] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 732.987855][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 733.003013][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.003049][ T9] usb 9-1: Product: syz [ 733.003066][ T9] usb 9-1: Manufacturer: syz [ 733.003084][ T9] usb 9-1: SerialNumber: syz [ 733.028546][ T9] usb 9-1: config 0 descriptor?? [ 733.035863][T22799] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 733.044462][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 733.044487][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 733.062607][ T9] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input65 [ 733.339372][ T5715] usb 9-1: USB disconnect, device number 26 [ 733.339441][ C0] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 733.675350][T22819] loop9: detected capacity change from 0 to 128 [ 733.686031][T22819] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 733.706551][T22819] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 733.817078][ T8225] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 733.864908][T22820] bond1: Removing last ns target with arp_interval on [ 733.892267][T22807] loop5: detected capacity change from 0 to 40427 [ 733.909085][T22807] F2FS-fs (loop5): build fault injection rate: 174 [ 733.909121][T22807] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 733.943773][T22807] F2FS-fs (loop5): invalid crc value [ 733.985599][T22825] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 733.991628][T22825] pim6reg1: linktype set to 780 [ 734.128042][T22829] loop4: detected capacity change from 0 to 1024 [ 734.256555][T22807] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 734.441440][ T9] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 734.453157][T22807] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 734.626077][ T9] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 734.651880][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.651920][ T9] usb 9-1: Product: syz [ 734.651951][ T9] usb 9-1: Manufacturer: syz [ 734.651979][ T9] usb 9-1: SerialNumber: syz [ 734.690721][ T9] usb 9-1: config 0 descriptor?? [ 734.725043][ T9] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 734.962991][T22827] loop9: detected capacity change from 0 to 131072 [ 734.975599][T22827] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 734.975639][T22827] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 734.991689][T22827] F2FS-fs (loop9): invalid crc value [ 735.016111][ T6546] syz-executor: attempt to access beyond end of device [ 735.016111][ T6546] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 735.062377][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 735.062412][ T6546] Tainted: [L]=SOFTLOCKUP [ 735.062419][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.062431][ T6546] Call Trace: [ 735.062440][ T6546] [ 735.062450][ T6546] dump_stack_lvl+0xe8/0x150 [ 735.062486][ T6546] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 735.062518][ T6546] f2fs_write_end_bio+0x1211/0x16e0 [ 735.062549][ T6546] ? blkg_put+0x22/0x240 [ 735.062589][ T6546] __submit_merged_bio+0x258/0x6a0 [ 735.062613][ T6546] ? rcu_is_watching+0x16/0xb0 [ 735.062644][ T6546] __submit_merged_write_cond+0x3c9/0x4e0 [ 735.062678][ T6546] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 735.062728][ T6546] f2fs_write_data_pages+0x2a27/0x36f0 [ 735.062755][ T6546] ? __lock_acquire+0x6df/0x2e50 [ 735.062812][ T6546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 735.062837][ T6546] ? is_bpf_text_address+0x26/0x2b0 [ 735.062874][ T6546] ? arch_stack_walk+0xfb/0x150 [ 735.062935][ T6546] ? add_lock_to_list+0xc7/0x100 [ 735.062962][ T6546] ? lockdep_unlock+0x5c/0xd0 [ 735.062978][ T6546] ? __lock_acquire+0x14b9/0x2e50 [ 735.063031][ T6546] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.063069][ T6546] ? do_raw_spin_unlock+0xf5/0x200 [ 735.063098][ T6546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 735.063126][ T6546] do_writepages+0x338/0x560 [ 735.063168][ T6546] ? do_raw_spin_unlock+0xf5/0x200 [ 735.063201][ T6546] filemap_fdatawrite+0x1e9/0x2f0 [ 735.063226][ T6546] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 735.063296][ T6546] ? do_raw_spin_unlock+0xf5/0x200 [ 735.063328][ T6546] f2fs_sync_dirty_inodes+0x30e/0x830 [ 735.063373][ T6546] f2fs_write_checkpoint+0xa3d/0x2710 [ 735.063401][ T6546] ? __lock_acquire+0x6df/0x2e50 [ 735.063454][ T6546] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 735.063521][ T6546] ? try_to_wake_up+0x8b6/0x14d0 [ 735.063560][ T6546] kill_f2fs_super+0x2dd/0x700 [ 735.063598][ T6546] ? __pfx_kill_f2fs_super+0x10/0x10 [ 735.063639][ T6546] ? call_rcu+0x64d/0x8b0 [ 735.063662][ T6546] ? lockdep_hardirqs_on+0x7b/0x110 [ 735.063706][ T6546] deactivate_locked_super+0xbc/0x110 [ 735.063736][ T6546] cleanup_mnt+0x3d3/0x460 [ 735.063772][ T6546] task_work_run+0x1d9/0x270 [ 735.063798][ T6546] ? __pfx_task_work_run+0x10/0x10 [ 735.063831][ T6546] exit_to_user_mode_loop+0x204/0x770 [ 735.063852][ T6546] ? rcu_is_watching+0x16/0xb0 [ 735.063880][ T6546] do_syscall_64+0x328/0x520 [ 735.063907][ T6546] ? trace_irq_disable+0x3b/0x140 [ 735.063932][ T6546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.063953][ T6546] ? clear_bhb_loop+0x70/0xc0 [ 735.063979][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.063999][ T6546] RIP: 0033:0x7f3ae019f317 [ 735.064019][ T6546] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 735.064036][ T6546] RSP: 002b:00007fff2f82e778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 735.064058][ T6546] RAX: 0000000000000000 RBX: 00007f3ae0234474 RCX: 00007f3ae019f317 [ 735.064072][ T6546] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2f82e830 [ 735.064085][ T6546] RBP: 00007fff2f82e830 R08: 00007fff2f82f830 R09: 00000000ffffffff [ 735.064099][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2f82f8c0 [ 735.064113][ T6546] R13: 00007f3ae0234474 R14: 00000000000b35bf R15: 00007fff2f82f900 [ 735.064146][ T6546] [ 735.082633][T22827] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 735.118586][T22827] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 735.118610][T22827] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 735.183862][ T25] usb 9-1: USB disconnect, device number 27 [ 735.288455][ T45] bridge_slave_1: left allmulticast mode [ 735.288481][ T45] bridge_slave_1: left promiscuous mode [ 735.288721][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.300967][ T6546] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 735.323985][ T45] bridge_slave_0: left allmulticast mode [ 735.324009][ T45] bridge_slave_0: left promiscuous mode [ 735.324214][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.854547][ T25] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 735.887154][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 735.887199][ T31] audit: type=1800 audit(741.721:3304): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 735.988758][ T31] audit: type=1800 audit(741.821:3305): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 736.051827][ T25] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 736.053357][ T25] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 736.053388][ T25] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.053408][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.053439][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.059232][ T25] usb 5-1: config 0 descriptor?? [ 736.070346][ T31] audit: type=1800 audit(741.901:3306): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246991 res=0 errno=0 [ 736.083994][ T31] audit: type=1800 audit(741.921:3307): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=247020 res=0 errno=0 [ 736.090616][ T31] audit: type=1800 audit(741.921:3308): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=246998 res=0 errno=0 [ 736.100238][ T31] audit: type=1800 audit(741.931:3309): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=246999 res=0 errno=0 [ 736.126411][ T31] audit: type=1800 audit(741.961:3310): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=247000 res=0 errno=0 [ 736.212929][ T31] audit: type=1800 audit(742.051:3311): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247049 res=0 errno=0 [ 736.335958][ T31] audit: type=1800 audit(742.171:3312): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 736.435947][ T31] audit: type=1800 audit(742.271:3313): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 736.667012][ T25] hid_parser_main: 28 callbacks suppressed [ 736.667071][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667101][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667132][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667158][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667185][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667211][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667236][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667262][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667287][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.667312][ T25] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 736.708280][ T25] waterforce 0003:1044:7A4D.002C: item 0 2 0 11 parsing failed [ 736.725824][ T25] waterforce 0003:1044:7A4D.002C: hid parse failed with -22 [ 736.725933][ T25] waterforce 0003:1044:7A4D.002C: probe with driver waterforce failed with error -22 [ 736.746848][ T25] usb 5-1: USB disconnect, device number 17 [ 737.240794][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.263460][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.282109][ T45] bond0 (unregistering): Released all slaves [ 737.634415][T22866] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 738.001322][ T5715] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 738.091630][ T45] hsr_slave_0: left promiscuous mode [ 738.118680][ T45] hsr_slave_1: left promiscuous mode [ 738.119570][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.119590][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.142309][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.142344][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.161545][ T5715] usb 9-1: Using ep0 maxpacket: 8 [ 738.167298][ T5715] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 738.177502][ T5715] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.177548][ T5715] usb 9-1: config 0 has no interface number 0 [ 738.177604][ T5715] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.177649][ T5715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.219563][ T5715] usb 9-1: config 0 descriptor?? [ 738.230660][ T45] veth1_macvtap: left promiscuous mode [ 738.230716][ T45] veth0_macvtap: left promiscuous mode [ 738.230810][ T45] veth1_vlan: left promiscuous mode [ 738.230870][ T45] veth0_vlan: left promiscuous mode [ 738.264233][ T5715] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 738.488015][ T5715] usb 9-1: USB disconnect, device number 28 [ 738.587329][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6459'. [ 738.905148][T22891] 9p: Unknown uid 00000000004294967295 [ 739.685611][ T45] team0 (unregistering): Port device team_slave_1 removed [ 739.715114][ T45] team0 (unregistering): Port device team_slave_0 removed [ 739.969107][T22908] loop4: detected capacity change from 0 to 1024 [ 739.991370][T22908] EXT4-fs: Ignoring removed oldalloc option [ 739.997402][T22908] EXT4-fs: Ignoring removed orlov option [ 740.043021][T22908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.258535][T22908] EXT4-fs error (device loop4): ext4_readdir:280: inode #12: block 80: comm syz.4.6470: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 740.322474][T22347] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /19/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 740.330815][T22347] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 740.336560][T22347] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 740.338012][T22347] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 740.338679][T22347] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 740.340640][T22347] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 740.350908][T22347] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 740.354643][T22347] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 740.355690][T22347] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 740.724639][T22916] loop1: detected capacity change from 0 to 512 [ 740.725680][T22916] EXT4-fs: Ignoring removed bh option [ 740.798469][T22916] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.6473: corrupted in-inode xattr: e_value size too large [ 740.798525][T22916] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 740.801027][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 740.801047][ C1] EXT4-fs (loop1): initial error at time 746: ext4_iget_extra_inode:5210: inode 15 [ 740.801074][ C1] EXT4-fs (loop1): last error at time 746: ext4_iget_extra_inode:5210: inode 15 [ 740.803169][T22916] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.6473: couldn't read orphan inode 15 (err -117) [ 740.803197][T22916] loop1: lost filesystem error report for type 5 error -117 [ 740.847773][T22916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.015952][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 741.015998][ T31] audit: type=1800 audit(746.851:3355): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 741.198146][T18513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.248344][ T31] audit: type=1800 audit(747.081:3356): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 741.318240][ T31] audit: type=1800 audit(747.151:3357): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 741.359324][T22926] loop5: detected capacity change from 0 to 1024 [ 741.397598][ T31] audit: type=1800 audit(747.211:3358): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 741.470698][ T31] audit: type=1800 audit(747.311:3359): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 741.550050][T22929] loop1: detected capacity change from 0 to 512 [ 741.659034][T22929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.778374][ T31] audit: type=1800 audit(747.611:3360): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 741.900437][ T31] audit: type=1800 audit(747.741:3361): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 741.909872][T22929] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 509 (only 1 groups) [ 742.011831][T18513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.518850][ T31] audit: type=1800 audit(748.361:3362): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 742.690676][ T31] audit: type=1800 audit(748.521:3363): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 742.840271][ T31] audit: type=1800 audit(748.671:3364): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 743.200597][T22347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 743.374684][T22964] loop9: detected capacity change from 0 to 4096 [ 743.388947][T22964] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 743.403204][T22968] program syz.5.6491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.511899][T22964] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 743.511997][T22964] ntfs3(loop9): Failed to load $Extend (-22). [ 743.512016][T22964] ntfs3(loop9): Failed to initialize $Extend. [ 743.654740][T22969] profile_transition: 8 callbacks suppressed [ 743.661259][T22969] profile_transition: unconfined exec no attachment [ 743.736457][ T45] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 743.765859][T17253] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 743.771197][T17253] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 743.771218][T17253] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 743.771369][T22947] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 743.901501][T22972] loop1: detected capacity change from 0 to 1024 [ 744.122266][T22958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.345401][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.370402][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.378492][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.401258][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.409278][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.920330][T22958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.424019][T22958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.792934][T22958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.083335][T23012] loop1: detected capacity change from 0 to 32768 [ 746.098121][T23012] (syz.1.6510,23012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 746.118352][T23012] (syz.1.6510,23012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 746.148101][T23012] JBD2: Ignoring recovery information on journal [ 746.173265][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 746.173733][ T31] audit: type=1800 audit(752.011:3393): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 746.222676][T23012] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 746.265177][ T31] audit: type=1800 audit(752.101:3394): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 746.331356][ T31] audit: type=1800 audit(752.161:3395): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 746.527156][ T31] audit: type=1800 audit(752.361:3396): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 746.591635][T14788] Bluetooth: hci5: command tx timeout [ 746.709732][T23009] loop9: detected capacity change from 0 to 32768 [ 746.727181][ T31] audit: type=1800 audit(752.561:3397): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 746.746532][T23009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6509 (23009) [ 746.765640][T23009] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 746.776223][T23009] BTRFS info (device loop9): using crc32c checksum algorithm [ 746.784488][ T31] audit: type=1800 audit(752.631:3398): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249578 res=0 errno=0 [ 746.827814][T18513] ocfs2: Unmounting device (7,1) on (node local) [ 746.965067][ T31] audit: type=1800 audit(752.791:3399): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 747.220025][T23009] BTRFS info (device loop9): enabling ssd optimizations [ 747.220072][T23009] BTRFS info (device loop9): turning on flush-on-commit [ 747.220104][T23009] BTRFS info (device loop9): enabling free space tree [ 747.220124][T23009] BTRFS info (device loop9): enabling auto defrag [ 747.220145][T23009] BTRFS info (device loop9): use lzo compression, level 1 [ 747.220167][T23009] BTRFS info (device loop9): max_inline set to 4096 [ 747.244439][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.244491][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.323453][T23046] profile_transition: unconfined exec no attachment [ 747.400889][ T31] audit: type=1800 audit(753.231:3400): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 747.515377][ T31] audit: type=1800 audit(753.351:3401): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 747.607181][ T31] audit: type=1800 audit(753.441:3402): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 747.765364][T17253] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 747.833486][T23053] loop5: detected capacity change from 0 to 32768 [ 747.991686][T23058] loop8: detected capacity change from 0 to 512 [ 748.002789][T23058] EXT4-fs (loop8): Test dummy encryption mode enabled [ 748.056279][T23058] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.6521: inode has both inline data and extents flags [ 748.056327][T23058] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 748.069780][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 748.069801][ C1] EXT4-fs (loop8): initial error at time 753: ext4_orphan_get:1403: inode 15 [ 748.069828][ C1] EXT4-fs (loop8): last error at time 753: ext4_orphan_get:1403: inode 15 [ 748.088261][T23058] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.6521: couldn't read orphan inode 15 (err -117) [ 748.088295][T23058] loop8: lost filesystem error report for type 5 error -117 [ 748.207696][T23053] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 748.229160][T23058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.304374][T22981] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.304493][T22981] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.306546][T22981] bridge_slave_0: entered allmulticast mode [ 748.323407][T22981] bridge_slave_0: entered promiscuous mode [ 748.388487][T22981] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.388602][T22981] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.388758][T22981] bridge_slave_1: entered allmulticast mode [ 748.422746][T22981] bridge_slave_1: entered promiscuous mode [ 748.672183][T13389] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.686058][T14788] Bluetooth: hci5: command tx timeout [ 748.689658][T22981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.734632][ T6546] ocfs2: Unmounting device (7,5) on (node local) [ 748.769089][T23066] profile_transition: unconfined exec no attachment [ 748.829983][T22981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.081513][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 749.130885][T23073] profile_transition: unconfined exec no attachment [ 749.180435][T22958] bridge_slave_1: left allmulticast mode [ 749.180483][T22958] bridge_slave_1: left promiscuous mode [ 749.180680][T22958] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.231271][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 749.231964][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 749.242589][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.309659][T23076] profile_transition: unconfined exec no attachment [ 749.317433][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 749.317478][ T9] pvrusb2: ********** [ 749.317501][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 749.317516][ T9] pvrusb2: Important functionality might not be entirely working. [ 749.317528][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 749.317542][ T9] pvrusb2: ********** [ 749.377513][T22958] bridge_slave_0: left allmulticast mode [ 749.377540][T22958] bridge_slave_0: left promiscuous mode [ 749.383876][T22958] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.547828][ T2356] pvrusb2: Invalid write control endpoint [ 749.624640][ T2356] pvrusb2: Invalid write control endpoint [ 749.672642][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 749.672692][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 749.672704][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 749.672714][ T2356] pvrusb2: Device being rendered inoperable [ 749.672748][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 749.672794][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 749.762080][T23068] pvrusb2: Attempted to execute control transfer when device not ok [ 749.771502][ T30] usb 10-1: USB disconnect, device number 15 [ 749.852650][T23082] profile_transition: unconfined exec no attachment [ 749.979711][ T2356] pvrusb2: Attached sub-driver cx25840 [ 749.979751][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 749.979761][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 750.107791][T23088] loop8: detected capacity change from 0 to 1024 [ 750.145580][T23091] profile_transition: unconfined exec no attachment [ 750.227766][T23088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.338223][T23097] profile_transition: unconfined exec no attachment [ 750.468703][T13389] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.637329][T23098] profile_transition: unconfined exec no attachment [ 750.758381][T14788] Bluetooth: hci5: command tx timeout [ 750.853178][T23103] profile_transition: unconfined exec no attachment [ 751.036445][T22958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.066859][T22958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.093843][T22958] bond0 (unregistering): Released all slaves [ 751.127682][T22958] bond1 (unregistering): Released all slaves [ 751.214775][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 751.214823][ T31] audit: type=1800 audit(758.055:3447): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 751.249140][T22981] team0: Port device team_slave_0 added [ 751.264926][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.279102][T22981] team0: Port device team_slave_1 added [ 751.387543][ T31] audit: type=1800 audit(758.225:3448): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 751.423153][T22981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.423193][T22981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.423217][T22981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.447770][T22981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.447785][T22981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.447809][T22981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.475338][ T31] audit: type=1800 audit(758.315:3449): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 751.605010][ T31] audit: type=1800 audit(758.445:3450): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 751.692527][ T31] audit: type=1800 audit(758.535:3451): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 751.789263][T23117] jffs2: notice: (23117) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 751.913231][T23113] loop9: detected capacity change from 0 to 32768 [ 751.925455][T23113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6537 (23113) [ 751.950003][ T31] audit: type=1800 audit(758.785:3452): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 751.981138][T17341] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 751.985497][T23113] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 751.985527][T23113] BTRFS info (device loop9): using sha256 checksum algorithm [ 751.987830][T23123] profile_transition: unconfined exec no attachment [ 752.027234][ T31] audit: type=1800 audit(758.865:3453): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 752.087368][ T31] audit: type=1800 audit(758.925:3454): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252366 res=0 errno=0 [ 752.137266][T17341] usb 2-1: Using ep0 maxpacket: 8 [ 752.139526][T17341] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 752.142315][T17341] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 752.149845][T17341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.149867][T17341] usb 2-1: Product: syz [ 752.149881][T17341] usb 2-1: Manufacturer: syz [ 752.149894][T17341] usb 2-1: SerialNumber: syz [ 752.167081][T17341] usb 2-1: config 0 descriptor?? [ 752.205530][ T31] audit: type=1800 audit(759.045:3455): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 752.239225][ T31] audit: type=1800 audit(759.075:3456): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252551 res=0 errno=0 [ 752.256961][T17341] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 752.257023][T17341] usb 2-1: setting power ON [ 752.257040][T17341] dvb-usb: bulk message failed: -22 (2/0) [ 752.266767][T23113] BTRFS info (device loop9): enabling ssd optimizations [ 752.266791][T23113] BTRFS info (device loop9): turning on async discard [ 752.266807][T23113] BTRFS info (device loop9): enabling free space tree [ 752.319609][T23141] profile_transition: unconfined exec no attachment [ 752.413783][T23140] loop5: detected capacity change from 0 to 512 [ 752.414653][T23140] EXT4-fs: Ignoring removed i_version option [ 752.426437][T17341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.431561][T17341] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 752.431611][T17341] usb 2-1: media controller created [ 752.451445][T23116] dvb-usb: bulk message failed: -22 (3/0) [ 752.451463][T23116] cxusb: i2c wr: len=80 is too big! [ 752.451463][T23116] [ 752.504992][T23140] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 752.543602][T17253] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 752.567938][T22981] hsr_slave_0: entered promiscuous mode [ 752.582660][T22981] hsr_slave_1: entered promiscuous mode [ 752.648021][T23145] loop8: detected capacity change from 0 to 512 [ 752.690975][T23145] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6544: Unrecognised inode hash code 4 [ 752.691353][T23145] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6544: Corrupt directory, running e2fsck is recommended [ 752.724603][T23145] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 752.728837][T17341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.737102][T23145] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.6544: corrupted in-inode xattr: invalid ea_ino [ 752.737135][T23145] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 752.741036][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 752.741055][ C0] EXT4-fs (loop8): initial error at time 759: ext4_iget_extra_inode:5210: inode 15 [ 752.741082][ C0] EXT4-fs (loop8): last error at time 759: ext4_iget_extra_inode:5210: inode 15 [ 752.758734][T23145] EXT4-fs (loop8): Remounting filesystem read-only [ 752.770612][T23145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.795559][T23140] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 752.821027][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 752.822437][ C1] EXT4-fs (loop5): initial error at time 759: ext4_mb_generate_buddy:1317 [ 752.822461][ C1] EXT4-fs (loop5): last error at time 759: ext4_mb_generate_buddy:1317 [ 752.822713][T23140] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.6542: Failed to acquire dquot type 1 [ 752.822739][T23140] loop5: lost filesystem error report for type 5 error -28 [ 752.823823][T23140] EXT4-fs (loop5): 1 truncate cleaned up [ 752.825490][T23140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.832550][T14788] Bluetooth: hci5: command tx timeout [ 752.901778][T23145] EXT4-fs warning (device loop8): ext4_empty_dir:3096: inode #2: comm syz.8.6544: directory missing '.' [ 753.083339][T17341] usb 2-1: selecting invalid altsetting 6 [ 753.083393][T17341] usb 2-1: digital interface selection failed (-22) [ 753.083416][T17341] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 753.085918][T17341] usb 2-1: setting power OFF [ 753.086014][T17341] dvb-usb: bulk message failed: -22 (2/0) [ 753.086029][T17341] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 753.086041][T17341] (NULL device *): no alternate interface [ 753.130546][T13389] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.364582][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.450433][T22958] hsr_slave_0: left promiscuous mode [ 753.520539][T22958] hsr_slave_1: left promiscuous mode [ 753.536725][T22958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.536769][T22958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.539053][T17341] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 753.561249][T17341] usb 2-1: USB disconnect, device number 13 [ 753.576507][T22958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.576558][T22958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.801603][T22958] veth1_macvtap: left promiscuous mode [ 753.801655][T22958] veth0_macvtap: left promiscuous mode [ 753.801768][T22958] veth1_vlan: left promiscuous mode [ 753.801842][T22958] veth0_vlan: left promiscuous mode [ 753.998638][T23170] profile_transition: 5 callbacks suppressed [ 754.005101][T23170] profile_transition: unconfined exec no attachment [ 754.379714][T23176] loop5: detected capacity change from 0 to 32768 [ 754.406835][T23177] profile_transition: unconfined exec no attachment [ 754.457068][T23176] (syz.5.6552,23176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 754.458099][T23176] (syz.5.6552,23176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 754.521874][T23176] JBD2: Ignoring recovery information on journal [ 754.558932][T23176] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 755.374688][ T6546] ocfs2: Unmounting device (7,5) on (node local) [ 755.739857][T22958] team0 (unregistering): Port device team_slave_1 removed [ 755.758010][T23179] loop8: detected capacity change from 0 to 32768 [ 755.802917][T23179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6553 (23179) [ 755.844986][T22958] team0 (unregistering): Port device team_slave_0 removed [ 755.882172][T23179] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 755.893236][T23179] BTRFS info (device loop8): using crc32c checksum algorithm [ 756.055716][T23179] BTRFS info (device loop8): enabling ssd optimizations [ 756.055764][T23179] BTRFS info (device loop8): turning on flush-on-commit [ 756.055782][T23179] BTRFS info (device loop8): enabling free space tree [ 756.055796][T23179] BTRFS info (device loop8): enabling auto defrag [ 756.055811][T23179] BTRFS info (device loop8): use lzo compression, level 1 [ 756.055829][T23179] BTRFS info (device loop8): max_inline set to 0 [ 756.105906][T23205] profile_transition: unconfined exec no attachment [ 756.316172][T13389] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 756.599752][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 756.664357][ T8225] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.664440][ T8225] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.664494][ T8225] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.681473][ T149] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.831332][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 756.831374][ T31] audit: type=1800 audit(763.665:3478): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 756.908542][T23212] profile_transition: unconfined exec no attachment [ 756.957722][ T31] audit: type=1800 audit(763.795:3479): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 756.999873][T23216] profile_transition: unconfined exec no attachment [ 757.065185][ T31] audit: type=1800 audit(763.905:3480): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 757.169657][ T31] audit: type=1800 audit(764.005:3481): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 757.285433][T23221] netlink: 'syz.5.6562': attribute type 2 has an invalid length. [ 757.309468][ T31] audit: type=1800 audit(764.135:3482): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 757.353093][T23223] loop8: detected capacity change from 0 to 512 [ 757.408686][T23220] loop9: detected capacity change from 0 to 32768 [ 757.416013][T23220] ocfs2: Unknown parameter 'cohesency' [ 757.508254][ T31] audit: type=1800 audit(764.345:3483): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 757.553882][T23223] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 757.639203][ T31] audit: type=1800 audit(764.475:3484): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 757.665677][T23229] profile_transition: unconfined exec no attachment [ 757.774030][ T31] audit: type=1800 audit(764.605:3485): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 757.914932][ T31] audit: type=1800 audit(764.755:3486): pid=22981 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24607 res=0 errno=0 [ 757.984211][ T31] audit: type=1800 audit(764.825:3487): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 758.236173][T23237] profile_transition: unconfined exec no attachment [ 758.594941][T23244] profile_transition: unconfined exec no attachment [ 758.936650][T23249] profile_transition: unconfined exec no attachment [ 759.167449][T23251] loop9: detected capacity change from 0 to 2048 [ 759.176234][T23254] profile_transition: unconfined exec no attachment [ 759.214791][T23251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 759.383781][T23255] profile_transition: unconfined exec no attachment [ 759.689292][T23261] loop1: detected capacity change from 0 to 512 [ 759.790673][T23261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 759.790811][T23261] System zones: 1-12 [ 759.807271][T23261] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.6575: missing EA_INODE flag [ 759.807314][T23261] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 759.819085][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 759.819107][ C0] EXT4-fs (loop1): initial error at time 766: ext4_xattr_inode_iget:437: inode 12 [ 759.819136][ C0] EXT4-fs (loop1): last error at time 766: ext4_xattr_inode_iget:437: inode 12 [ 759.841241][T23261] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.6575: error while reading EA inode 12 err=-117 [ 759.841271][T23261] loop1: lost filesystem error report for type 5 error -117 [ 759.843863][T23261] EXT4-fs (loop1): 1 orphan inode deleted [ 759.847859][T23261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.966363][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 760.158152][T23268] profile_transition: unconfined exec no attachment [ 760.167949][T18513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.213899][T23253] loop8: detected capacity change from 0 to 32768 [ 760.454902][T23277] profile_transition: unconfined exec no attachment [ 760.731482][T23284] profile_transition: unconfined exec no attachment [ 761.022456][T23288] profile_transition: unconfined exec no attachment [ 761.305891][T23290] loop9: detected capacity change from 0 to 64 [ 761.330419][T23290] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 761.398576][T23295] profile_transition: unconfined exec no attachment [ 761.630781][T23299] profile_transition: unconfined exec no attachment [ 761.751641][T23297] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.818286][T23302] profile_transition: unconfined exec no attachment [ 761.859064][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 761.859113][ T31] audit: type=1800 audit(768.695:3515): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.6587" name="bConfigurationValue" dev="sysfs" ino=26907 res=0 errno=0 [ 761.948684][T23283] loop5: detected capacity change from 0 to 32768 [ 762.010608][T23283] [ 762.010608][T23283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.010608][T23283] [ 762.041799][ T31] audit: type=1800 audit(768.885:3516): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 762.056218][T23283] ERROR: (device loop5): diWrite: ixpxd invalid [ 762.056218][T23283] [ 762.064292][T23283] ERROR: (device loop5): txCommit: [ 762.064292][T23283] [ 762.073000][T23283] [ 762.073000][T23283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.073000][T23283] [ 762.084593][T23283] [ 762.084593][T23283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.084593][T23283] [ 762.148660][ T31] audit: type=1800 audit(768.985:3517): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 762.178500][T23305] profile_transition: unconfined exec no attachment [ 762.237220][T23307] loop8: detected capacity change from 0 to 8 [ 762.250044][T23283] ERROR: (device loop5): diWrite: ixpxd invalid [ 762.250044][T23283] [ 762.250093][T23283] ERROR: (device loop5): txCommit: [ 762.250093][T23283] [ 762.295911][ T31] audit: type=1800 audit(769.135:3518): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 762.409782][ T31] audit: type=1800 audit(769.245:3519): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 762.483267][ T6546] ERROR: (device loop5): diFree: wmap shows inode already free [ 762.483267][ T6546] [ 762.486230][ T6546] [ 762.486230][ T6546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.486230][ T6546] [ 762.487310][ T6546] [ 762.487310][ T6546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.487310][ T6546] [ 762.525898][ T31] audit: type=1800 audit(769.365:3520): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 762.711560][ T31] audit: type=1800 audit(769.555:3521): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 762.778644][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 762.805118][ T31] audit: type=1800 audit(769.645:3522): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 762.871066][T22981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 762.927687][T22981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.935842][T22981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 762.960114][T22981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.968260][T22981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 762.977529][ T31] audit: type=1800 audit(769.815:3523): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 763.003749][T22981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.180116][ T31] audit: type=1800 audit(770.015:3524): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 763.304721][T22981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 763.318374][T22981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.329477][T23325] tipc: Started in network mode [ 763.329530][T23325] tipc: Node identity 2d03000000000000002e, cluster identity 4711 [ 763.707174][T22981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.767975][T22981] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.788789][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.788900][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.832907][T23346] netlink: 'syz.8.6604': attribute type 3 has an invalid length. [ 763.844124][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.844239][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.880457][T23344] loop5: detected capacity change from 0 to 1024 [ 763.915122][T23344] EXT4-fs: Ignoring removed oldalloc option [ 763.915167][T23344] EXT4-fs: Ignoring removed orlov option [ 763.954442][T23344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.028831][T23344] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz.5.6601: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 764.099039][ T6546] EXT4-fs error (device loop5): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /1316/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 764.150287][ T6546] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /1316/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 764.153044][ T6546] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 764.163229][ T6546] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /1316/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 764.164227][ T6546] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 764.171150][ T6546] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /1316/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 764.184706][ T6546] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 764.185879][ T6546] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /1316/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 764.191929][ T6546] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 764.335050][T22981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 764.373500][T22981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.563228][T22981] veth0_vlan: entered promiscuous mode [ 764.653759][T22981] veth1_vlan: entered promiscuous mode [ 764.661599][T23368] profile_transition: 4 callbacks suppressed [ 764.661964][T23368] profile_transition: unconfined exec no attachment [ 764.739493][T22981] veth0_macvtap: entered promiscuous mode [ 764.772457][T22981] veth1_macvtap: entered promiscuous mode [ 764.803087][T22981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.815674][T22981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.822368][T23373] profile_transition: unconfined exec no attachment [ 764.881322][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.881397][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.881449][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.881487][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.152756][T23377] netlink: 'syz.8.6615': attribute type 8 has an invalid length. [ 765.227351][T23382] profile_transition: unconfined exec no attachment [ 765.320557][ T8225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.320603][ T8225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.379166][T23388] profile_transition: unconfined exec no attachment [ 765.419445][T23389] loop9: detected capacity change from 0 to 128 [ 765.443713][T23389] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 765.443779][T23389] hpfs: filesystem error: improperly stopped [ 765.443793][T23389] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 765.443806][T23389] hpfs: You really don't want any checks? You are crazy... [ 765.444133][T23389] hpfs: hpfs_map_sector(): read error [ 765.444144][T23389] hpfs: code page support is disabled [ 765.449327][T23389] hpfs: hpfs_map_4sectors(): unaligned read [ 765.449398][T23389] hpfs: hpfs_map_4sectors(): unaligned read [ 765.449408][T23389] hpfs: filesystem error: unable to find root dir [ 765.707690][T23389] hpfs: hpfs_map_4sectors(): unaligned read [ 765.745955][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.745990][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.752764][T23391] profile_transition: unconfined exec no attachment [ 765.912705][T17549] tipc: Resetting bearer [ 766.023682][T23395] profile_transition: unconfined exec no attachment [ 766.092359][T17549] tipc: Disabling bearer [ 766.377988][T23402] profile_transition: unconfined exec no attachment [ 766.615345][T23411] profile_transition: unconfined exec no attachment [ 766.895216][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 766.895266][ T31] audit: type=1800 audit(773.735:3553): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 766.943596][T23414] profile_transition: unconfined exec no attachment [ 766.992553][T23416] profile_transition: unconfined exec no attachment [ 767.132870][ T31] audit: type=1800 audit(773.975:3554): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255448 res=0 errno=0 [ 767.135936][ T31] audit: type=1800 audit(773.975:3555): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255459 res=0 errno=0 [ 767.170427][T23420] ip6erspan0: entered allmulticast mode [ 767.189455][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 767.215860][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 767.230167][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 767.241520][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 767.249475][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.374416][ T31] audit: type=1800 audit(774.215:3556): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 767.375762][ T31] audit: type=1800 audit(774.215:3557): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255537 res=0 errno=0 [ 767.385867][ T31] audit: type=1800 audit(774.225:3558): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 767.395314][ T31] audit: type=1800 audit(774.235:3559): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 767.397245][ T31] audit: type=1800 audit(774.235:3560): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255548 res=0 errno=0 [ 767.589912][ T31] audit: type=1800 audit(774.425:3561): pid=23428 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.6628" name="rebind" dev="sysfs" ino=41367 res=0 errno=0 [ 767.822039][ T31] audit: type=1800 audit(774.655:3562): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 768.519885][T23456] loop1: detected capacity change from 0 to 1024 [ 768.530236][T23456] EXT4-fs: Ignoring removed orlov option [ 768.543809][T23459] loop9: detected capacity change from 0 to 128 [ 768.583384][T23459] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 768.614845][T23456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.050594][T18513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.192494][T23423] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.197058][T23423] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.197213][T23423] bridge_slave_0: entered allmulticast mode [ 769.213259][T23423] bridge_slave_0: entered promiscuous mode [ 769.269863][T23423] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.269977][T23423] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.270115][T23423] bridge_slave_1: entered allmulticast mode [ 769.300650][T23423] bridge_slave_1: entered promiscuous mode [ 769.311909][ T5615] Bluetooth: hci4: command tx timeout [ 769.545097][T23423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.571403][T23423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.778208][T23423] team0: Port device team_slave_0 added [ 769.802032][T23423] team0: Port device team_slave_1 added [ 769.950835][T23423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.961119][T23423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.961171][T23423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.003475][T23423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.012334][T23423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.038806][T23423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.077581][T23501] bpf: Bad value for 'uid' [ 770.174798][T23508] profile_transition: 10 callbacks suppressed [ 770.181207][T23508] profile_transition: unconfined exec no attachment [ 770.368665][T23516] profile_transition: unconfined exec no attachment [ 770.454198][T23423] hsr_slave_0: entered promiscuous mode [ 770.483790][T23423] hsr_slave_1: entered promiscuous mode [ 770.491668][T23423] debugfs: 'hsr0' already exists in 'hsr' [ 770.491710][T23423] Cannot create hsr debugfs directory [ 770.508951][T23523] profile_transition: unconfined exec no attachment [ 770.582236][T23521] block2mtd: device name too long [ 770.602709][T23528] profile_transition: unconfined exec no attachment [ 770.700749][T23532] profile_transition: unconfined exec no attachment [ 770.760508][T23533] profile_transition: unconfined exec no attachment [ 770.817784][T23534] profile_transition: unconfined exec no attachment [ 770.887231][T23536] profile_transition: unconfined exec no attachment [ 770.977559][T23543] profile_transition: unconfined exec no attachment [ 771.059190][T23546] profile_transition: unconfined exec no attachment [ 771.392155][ T5615] Bluetooth: hci4: command tx timeout [ 771.581380][T17341] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 771.733670][T17341] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 771.734840][T17341] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 771.734863][T17341] usb 2-1: config 0 has no interface number 0 [ 771.734896][T17341] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 771.734921][T17341] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 771.734945][T17341] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 771.746676][T17341] usb 2-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 771.746700][T17341] usb 2-1: Product: syz [ 771.746715][T17341] usb 2-1: SerialNumber: syz [ 771.768319][T17341] usb 2-1: config 0 descriptor?? [ 771.785624][T17341] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 771.803044][T17341] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input66 [ 771.925523][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 771.925589][ T31] audit: type=1800 audit(778.765:3594): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=261225 res=0 errno=0 [ 771.930509][ T31] audit: type=1800 audit(778.765:3595): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=261205 res=0 errno=0 [ 771.939878][ T31] audit: type=1800 audit(778.775:3596): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=261226 res=0 errno=0 [ 772.016912][ T31] audit: type=1800 audit(778.855:3597): pid=23565 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.6667" name="uevent" dev="sysfs" ino=4909 res=0 errno=0 [ 772.039771][ T31] audit: type=1800 audit(778.875:3598): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 772.056571][ T31] audit: type=1800 audit(778.895:3599): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261247 res=0 errno=0 [ 772.076999][T23565] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 772.077032][T23565] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 772.106487][ T31] audit: type=1800 audit(778.945:3600): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261266 res=0 errno=0 [ 772.156882][ T31] audit: type=1800 audit(778.995:3601): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=261282 res=0 errno=0 [ 772.171589][ T31] audit: type=1800 audit(779.015:3602): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=261285 res=0 errno=0 [ 772.213892][ T31] audit: type=1800 audit(779.045:3603): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=261284 res=0 errno=0 [ 772.357739][T23568] loop9: detected capacity change from 0 to 524287936 [ 772.451735][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.454786][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.454991][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.455194][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.455398][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.455602][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.455800][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.456072][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.456280][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.456484][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 772.457905][ T30] usb 2-1: USB disconnect, device number 14 [ 772.458025][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 772.579645][ T30] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 772.981359][T17341] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 773.137395][T17341] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 773.143072][T17341] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.143106][T17341] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 773.143144][T17341] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.148145][T17341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 773.148175][T17341] usb 1-1: Product: syz [ 773.148204][T17341] usb 1-1: Manufacturer: syz [ 773.148222][T17341] usb 1-1: SerialNumber: syz [ 773.420679][T17341] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 773.471515][ T5615] Bluetooth: hci4: command tx timeout [ 774.005920][T23603] netlink: 124 bytes leftover after parsing attributes in process `syz.9.6680'. [ 774.370198][T23613] loop8: detected capacity change from 0 to 2048 [ 774.440543][T23613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.889388][T23626] openvswitch: netlink: IP tunnel dst address not specified [ 774.889439][T23626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.400549][T23638] profile_transition: 13 callbacks suppressed [ 775.400593][T23638] profile_transition: unconfined exec no attachment [ 775.551781][ T5615] Bluetooth: hci4: command tx timeout [ 775.680874][T23423] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 775.698051][T23423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.710390][T23423] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 775.739266][T23644] profile_transition: unconfined exec no attachment [ 775.825666][T23423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.829565][T23423] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 775.884846][T23423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.894034][T17341] usb 1-1: USB disconnect, device number 19 [ 775.897467][T23423] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 775.949538][T23423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.010804][T17341] usblp0: removed [ 776.074590][T13389] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.296633][T23660] profile_transition: unconfined exec no attachment [ 776.347745][T23423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.421841][T23423] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.450901][T22958] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.451075][T22958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.485525][T23667] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6699'. [ 776.495404][T23667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6699'. [ 776.524912][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.525040][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.706403][T23669] profile_transition: unconfined exec no attachment [ 776.904572][T23423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.946767][T23679] profile_transition: unconfined exec no attachment [ 777.075910][T23423] veth0_vlan: entered promiscuous mode [ 777.113231][T23423] veth1_vlan: entered promiscuous mode [ 777.117420][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 777.117437][ T31] audit: type=1800 audit(783.955:3656): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 777.190503][ T31] audit: type=1800 audit(784.025:3657): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 777.290552][T23682] loop8: detected capacity change from 0 to 256 [ 777.300837][T23682] exfat: Deprecated parameter 'namecase' [ 777.300921][T23682] exfat: Deprecated parameter 'namecase' [ 777.300944][T23682] exfat: Deprecated parameter 'utf8' [ 777.309231][T23686] profile_transition: unconfined exec no attachment [ 777.373165][T23682] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 777.393851][T23423] veth0_macvtap: entered promiscuous mode [ 777.429991][ T31] audit: type=1800 audit(784.265:3658): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 777.453889][T23423] veth1_macvtap: entered promiscuous mode [ 777.646854][T23423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.687503][T23423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.697776][ T31] audit: type=1800 audit(784.535:3659): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 777.760312][T23694] profile_transition: unconfined exec no attachment [ 777.851380][ T8225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.851445][ T8225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.851475][ T8225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.851503][ T8225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.013605][T23701] profile_transition: unconfined exec no attachment [ 778.112938][ T31] audit: type=1800 audit(784.945:3660): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261898 res=0 errno=0 [ 778.285941][ T31] audit: type=1800 audit(785.125:3661): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 778.364077][T22958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.364125][T22958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.368670][ T31] audit: type=1800 audit(785.205:3662): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 778.456267][T23710] profile_transition: unconfined exec no attachment [ 778.480817][ T31] audit: type=1800 audit(785.315:3663): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 778.573534][ T31] audit: type=1800 audit(785.415:3664): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 778.594823][ T31] audit: type=1800 audit(785.425:3665): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262024 res=0 errno=0 [ 778.728758][T22948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.738786][T22948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.823076][T23716] profile_transition: unconfined exec no attachment [ 779.425438][ T5715] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 779.574875][T23739] batman_adv: batadv0: Adding interface: macvtap1 [ 779.585902][T23739] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.585962][T23739] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 779.614527][ T5715] usb 10-1: Using ep0 maxpacket: 32 [ 779.631455][ T5715] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 779.642303][ T5715] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.654819][ T5715] usb 10-1: config 0 descriptor?? [ 779.747201][T23745] loop7: detected capacity change from 0 to 64 [ 779.874083][ T5715] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 779.898976][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 779.909308][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 779.916871][ T5715] usb 10-1: media controller created [ 779.944494][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.075892][ T5715] az6027: usb out operation failed. (-71) [ 780.098220][T23750] Cannot find set identified by id 4 to match [ 780.112749][ T5715] az6027: usb out operation failed. (-71) [ 780.118640][ T5715] stb0899_attach: Driver disabled by Kconfig [ 780.125147][ T5715] az6027: no front-end attached [ 780.125147][ T5715] [ 780.133924][ T5715] az6027: usb out operation failed. (-71) [ 780.139762][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 780.150651][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input67 [ 780.179082][ T5715] dvb-usb: schedule remote query interval to 400 msecs. [ 780.186213][ T5715] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 780.198359][ T5715] usb 10-1: USB disconnect, device number 16 [ 780.338877][ T5715] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 780.401577][T23759] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.402231][T23759] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.413416][T23759] bridge0: entered allmulticast mode [ 780.502412][T23759] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.502532][T23759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.502792][T23759] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.502896][T23759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.503353][T23759] bridge0: entered promiscuous mode [ 780.740626][T23766] profile_transition: 6 callbacks suppressed [ 780.753274][T23766] profile_transition: unconfined exec no attachment [ 780.844558][T23772] profile_transition: unconfined exec no attachment [ 780.926723][T23776] profile_transition: unconfined exec no attachment [ 780.987429][T23778] profile_transition: unconfined exec no attachment [ 781.019415][T23775] loop9: detected capacity change from 0 to 512 [ 781.055278][T23775] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 781.055583][T23775] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.6737: corrupted in-inode xattr: e_value size too large [ 781.055612][T23775] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 781.056411][T23775] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.6737: couldn't read orphan inode 15 (err -117) [ 781.056439][T23775] loop9: lost filesystem error report for type 5 error -117 [ 781.068110][T23775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.265718][T23785] profile_transition: unconfined exec no attachment [ 781.334267][T17253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.468765][T23789] loop7: detected capacity change from 0 to 512 [ 781.549470][T23789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.640279][T23789] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 781.660240][T23789] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 781.678809][T23800] profile_transition: unconfined exec no attachment [ 781.799357][T23803] profile_transition: unconfined exec no attachment [ 781.858099][T23423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.982734][T23806] profile_transition: unconfined exec no attachment [ 782.067854][T23808] profile_transition: unconfined exec no attachment [ 782.146705][T23812] profile_transition: unconfined exec no attachment [ 782.211850][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 782.211895][ T31] audit: type=1800 audit(789.055:3711): pid=23815 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.6746" name="new_id" dev="sysfs" ino=21358 res=0 errno=0 [ 782.221527][T23816] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6745'. [ 782.284415][ T5700] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 782.291661][ T5700] lpc_ich 0000:00:01.0: No MFD cells added [ 782.318106][ T31] audit: type=1800 audit(789.155:3712): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262554 res=0 errno=0 [ 782.359010][ T31] audit: type=1800 audit(789.195:3713): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2771 res=0 errno=0 [ 782.383122][ T5700] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 782.390260][ T5700] lpc_ich 0000:00:05.0: No MFD cells added [ 782.407425][ T31] audit: type=1800 audit(789.245:3714): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 782.437059][ T31] audit: type=1800 audit(789.275:3715): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 782.609870][ T31] audit: type=1800 audit(789.445:3716): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 782.756240][ T31] audit: type=1800 audit(789.595:3717): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 782.795456][ T31] audit: type=1800 audit(789.635:3718): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.7.6752" name="altsetting" dev="sysfs" ino=59957 res=0 errno=0 [ 782.949769][ T31] audit: type=1800 audit(789.785:3719): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 782.999274][T23836] loop9: detected capacity change from 0 to 128 [ 783.048267][ T31] audit: type=1800 audit(789.885:3720): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 783.338826][T23848] netlink: 'syz.9.6759': attribute type 1 has an invalid length. [ 783.360515][T23848] gretap0: entered promiscuous mode [ 783.427854][T23848] netlink: 'syz.9.6759': attribute type 1 has an invalid length. [ 783.981468][T23867] loop7: detected capacity change from 0 to 512 [ 783.994717][T23867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 784.034162][T23867] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 784.034196][T23867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 784.034467][T23867] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 784.034490][T23867] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 784.080010][T23867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 784.163310][T23867] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 784.360819][T23423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.363756][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 784.543850][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 784.543917][ T25] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 784.546173][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.547678][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 784.547701][ T25] usb 1-1: Product: syz [ 784.547714][ T25] usb 1-1: Manufacturer: syz [ 784.702315][ T25] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 784.798160][T23890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 785.010136][ T25] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 785.028675][ T25] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 785.028752][ T25] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 785.080522][ T25] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 785.144089][ T25] usb 1-1: USB disconnect, device number 20 [ 785.174783][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 785.357017][T23907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.850840][T23920] profile_transition: 16 callbacks suppressed [ 785.859411][T23920] profile_transition: unconfined exec no attachment [ 785.894087][T23921] block2mtd: illegal erase size [ 786.210049][T23932] profile_transition: unconfined exec no attachment [ 786.521108][T23942] profile_transition: unconfined exec no attachment [ 786.722112][ T5739] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 786.842651][T23953] profile_transition: unconfined exec no attachment [ 786.902671][ T5739] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 786.925316][ T5739] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.925368][ T5739] usb 8-1: config 0 interface 0 has no altsetting 0 [ 786.947598][ T5739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.947638][ T5739] usb 8-1: Product: syz [ 786.947666][ T5739] usb 8-1: Manufacturer: syz [ 786.947684][ T5739] usb 8-1: SerialNumber: syz [ 787.000154][T23956] profile_transition: unconfined exec no attachment [ 787.017325][ T5739] usb 8-1: config 0 descriptor?? [ 787.053629][ T5739] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 787.080248][ T5739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 787.092395][ T5739] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 787.092497][ T5739] usb 8-1: media controller created [ 787.137962][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 787.173194][ T5739] DVB: Unable to find symbol tda10046_attach() [ 787.179524][ T5739] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 787.181691][T23961] netlink: 'syz.1.6795': attribute type 11 has an invalid length. [ 787.181709][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6795'. [ 787.206144][ T5739] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 787.232101][T23963] profile_transition: unconfined exec no attachment [ 787.246618][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 787.246664][ T31] audit: type=1800 audit(794.085:3768): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 787.334353][ T25] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 787.394120][ T31] audit: type=1800 audit(794.235:3769): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 787.484106][ T25] usb 9-1: New USB device found, idVendor=5109, idProduct=6caa, bcdDevice=38.71 [ 787.495220][ T25] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.495266][ T25] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.495293][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 787.503906][ T25] usb 9-1: New USB device strings: Mfr=232, Product=139, SerialNumber=0 [ 787.503930][ T25] usb 9-1: Product: syz [ 787.503944][ T25] usb 9-1: Manufacturer: syz [ 787.522573][ T25] usb 9-1: config 0 descriptor?? [ 787.538244][ T31] audit: type=1800 audit(794.375:3770): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 787.578735][ T31] audit: type=1800 audit(794.415:3771): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263078 res=0 errno=0 [ 787.608171][ T31] audit: type=1800 audit(794.435:3772): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=263109 res=0 errno=0 [ 787.608253][ T31] audit: type=1800 audit(794.445:3773): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=263085 res=0 errno=0 [ 787.616280][T23970] profile_transition: unconfined exec no attachment [ 787.623442][ T31] audit: type=1800 audit(794.465:3774): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=263086 res=0 errno=0 [ 787.649208][ T31] audit: type=1800 audit(794.485:3775): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 787.903597][ T5739] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 787.914491][ T31] audit: type=1800 audit(794.755:3776): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=262979 res=0 errno=0 [ 787.964707][ T31] audit: type=1800 audit(794.805:3777): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=262980 res=0 errno=0 [ 787.985362][ T5739] usb 8-1: USB disconnect, device number 4 [ 788.068562][T23980] profile_transition: unconfined exec no attachment [ 788.089488][T23974] loop1: detected capacity change from 0 to 4096 [ 788.116188][ T25] hid-generic 0003:5109:6CAA.002D: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.8-1/input0 [ 788.201589][ T30] usb 9-1: USB disconnect, device number 29 [ 788.217884][T23974] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 788.286048][T23983] profile_transition: unconfined exec no attachment [ 788.308764][T23984] profile_transition: unconfined exec no attachment [ 788.324460][T23974] ntfs3(loop1): Failed to load $Extend (-22). [ 788.337976][T23974] ntfs3(loop1): Failed to initialize $Extend. [ 788.669802][T23992] loop7: detected capacity change from 0 to 1024 [ 789.813373][T24024] netlink: 'syz.8.6817': attribute type 3 has an invalid length. [ 789.813616][T24024] netlink: 'syz.8.6817': attribute type 3 has an invalid length. [ 790.594879][T24052] loop8: detected capacity change from 0 to 256 [ 790.908073][T24059] profile_transition: 10 callbacks suppressed [ 790.918090][T24059] profile_transition: unconfined exec no attachment [ 791.030562][T24062] profile_transition: unconfined exec no attachment [ 791.044435][T24058] loop9: detected capacity change from 0 to 4096 [ 791.333777][T24066] profile_transition: unconfined exec no attachment [ 791.663160][T24073] profile_transition: unconfined exec no attachment [ 791.721582][ T5739] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 791.898638][ T5739] usb 9-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 791.915545][ T5739] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 791.915607][ T5739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.947453][ T5739] usb 9-1: config 0 descriptor?? [ 791.953297][T24068] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 792.015975][T24080] profile_transition: unconfined exec no attachment [ 792.199802][T24082] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6834'. [ 792.376364][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 792.376409][ T31] audit: type=1800 audit(799.215:3825): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 792.433787][ T5739] hid_parser_main: 663 callbacks suppressed [ 792.440217][ T31] audit: type=1800 audit(799.275:3826): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263345 res=0 errno=0 [ 792.460433][T24091] profile_transition: unconfined exec no attachment [ 792.460754][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477393][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477428][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477456][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477483][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477510][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477536][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477564][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477589][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.477614][ T5739] uclogic 0003:5543:0064.002E: unknown main item tag 0x0 [ 792.553034][ T5739] uclogic 0003:5543:0064.002E: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.8-1/input0 [ 792.564554][ T31] audit: type=1800 audit(799.395:3827): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263367 res=0 errno=0 [ 792.614739][T24095] profile_transition: unconfined exec no attachment [ 792.657789][ T31] audit: type=1800 audit(799.495:3828): pid=24095 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=263347 res=0 errno=0 [ 792.699990][ T30] usb 9-1: USB disconnect, device number 30 [ 792.979388][T24097] profile_transition: unconfined exec no attachment [ 793.105193][T24098] profile_transition: unconfined exec no attachment [ 793.218443][ T31] audit: type=1800 audit(800.055:3829): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 793.378326][ T31] audit: type=1800 audit(800.215:3830): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 793.392290][T24103] profile_transition: unconfined exec no attachment [ 793.551790][ T31] audit: type=1800 audit(800.395:3831): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 793.569445][T24071] loop1: detected capacity change from 0 to 40427 [ 793.612285][T24071] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 793.612334][T24071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 793.629995][T24071] F2FS-fs (loop1): invalid crc value [ 793.670907][ T31] audit: type=1800 audit(800.505:3832): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 793.765589][ T31] audit: type=1800 audit(800.605:3833): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 793.790117][ T31] audit: type=1800 audit(800.625:3834): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.9.6843" name="uevent" dev="sysfs" ino=24730 res=0 errno=0 [ 793.963317][T24114] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 794.035805][T24071] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 794.306778][T24071] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 794.306825][T24071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 794.746934][T24128] syz.1.6831: attempt to access beyond end of device [ 794.746934][T24128] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 794.775055][T24128] CPU: 0 UID: 0 PID: 24128 Comm: syz.1.6831 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.775091][T24128] Tainted: [L]=SOFTLOCKUP [ 794.775101][T24128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.775122][T24128] Call Trace: [ 794.775131][T24128] [ 794.775142][T24128] dump_stack_lvl+0xe8/0x150 [ 794.775179][T24128] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 794.775214][T24128] f2fs_write_end_bio+0x1211/0x16e0 [ 794.775270][T24128] __submit_merged_bio+0x258/0x6a0 [ 794.775295][T24128] ? rcu_is_watching+0x16/0xb0 [ 794.775326][T24128] __submit_merged_write_cond+0x3c9/0x4e0 [ 794.775362][T24128] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 794.775412][T24128] f2fs_write_data_pages+0x2a27/0x36f0 [ 794.775479][T24128] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 794.775552][T24128] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 794.775582][T24128] ? __bfs+0x153/0x290 [ 794.775602][T24128] ? __pfx_hlock_conflict+0x10/0x10 [ 794.775645][T24128] ? lockdep_unlock+0x5c/0xd0 [ 794.775663][T24128] ? __lock_acquire+0x14b9/0x2e50 [ 794.775712][T24128] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 794.775742][T24128] do_writepages+0x338/0x560 [ 794.775787][T24128] ? do_raw_spin_unlock+0xf5/0x200 [ 794.775821][T24128] filemap_fdatawrite+0x1e9/0x2f0 [ 794.775847][T24128] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 794.775915][T24128] ? do_raw_spin_unlock+0xf5/0x200 [ 794.775948][T24128] f2fs_sync_dirty_inodes+0x30e/0x830 [ 794.775997][T24128] f2fs_write_checkpoint+0xa3d/0x2710 [ 794.776057][T24128] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 794.776126][T24128] ? __pfx_down_write+0x10/0x10 [ 794.776149][T24128] ? kernel_text_address+0xa5/0xe0 [ 794.776175][T24128] ? rcu_is_watching+0x16/0xb0 [ 794.776201][T24128] f2fs_trim_fs+0xa88/0x13e0 [ 794.776243][T24128] ? __lock_acquire+0x6df/0x2e50 [ 794.776262][T24128] ? __pfx_f2fs_trim_fs+0x10/0x10 [ 794.776306][T24128] ? mnt_get_write_access+0x66/0x280 [ 794.776338][T24128] ? mnt_want_write_file+0x172/0x200 [ 794.776359][T24128] __f2fs_ioctl+0x5bba/0xd0c0 [ 794.776393][T24128] ? lock_acquire+0x115/0x350 [ 794.776423][T24128] ? is_bpf_text_address+0x26/0x2b0 [ 794.776454][T24128] ? is_bpf_text_address+0x292/0x2b0 [ 794.776476][T24128] ? is_bpf_text_address+0x26/0x2b0 [ 794.776500][T24128] ? __pfx___f2fs_ioctl+0x10/0x10 [ 794.776526][T24128] ? kernel_text_address+0xa5/0xe0 [ 794.776550][T24128] ? __kernel_text_address+0xd/0x30 [ 794.776573][T24128] ? unwind_get_return_address+0x4d/0x90 [ 794.776595][T24128] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 794.776616][T24128] ? arch_stack_walk+0xfb/0x150 [ 794.776654][T24128] ? stack_trace_save+0xa9/0x100 [ 794.776674][T24128] ? __pfx_stack_trace_save+0x10/0x10 [ 794.776693][T24128] ? kasan_save_track+0x4f/0x80 [ 794.776717][T24128] ? stack_depot_save_flags+0x33/0x7f0 [ 794.776751][T24128] ? __lock_acquire+0x6df/0x2e50 [ 794.776777][T24128] ? kasan_save_track+0x4f/0x80 [ 794.776797][T24128] ? kasan_save_track+0x3e/0x80 [ 794.776817][T24128] ? kasan_save_free_info+0x40/0x50 [ 794.776845][T24128] ? __kasan_slab_free+0x5c/0x80 [ 794.776866][T24128] ? kfree+0x1c5/0x650 [ 794.776891][T24128] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 794.776921][T24128] ? security_file_ioctl+0xc3/0x2a0 [ 794.776949][T24128] ? __se_sys_ioctl+0x47/0x170 [ 794.776968][T24128] ? do_syscall_64+0x166/0x520 [ 794.776996][T24128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.777069][T24128] ? kasan_quarantine_put+0xbb/0x1f0 [ 794.777100][T24128] ? tomoyo_path_number_perm+0x219/0x5f0 [ 794.777140][T24128] ? tomoyo_path_number_perm+0x219/0x5f0 [ 794.777177][T24128] ? do_vfs_ioctl+0x116f/0x1530 [ 794.777200][T24128] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 794.777238][T24128] ? hook_file_ioctl+0x1f2/0x600 [ 794.777282][T24128] ? __fget_files+0x2a/0x420 [ 794.777314][T24128] ? __fget_files+0x3a2/0x420 [ 794.777341][T24128] ? __fget_files+0x2a/0x420 [ 794.777372][T24128] ? f2fs_ioctl+0x135/0x250 [ 794.777399][T24128] ? __pfx_f2fs_ioctl+0x10/0x10 [ 794.777425][T24128] __se_sys_ioctl+0xfc/0x170 [ 794.777449][T24128] do_syscall_64+0x166/0x520 [ 794.777475][T24128] ? trace_irq_disable+0x3b/0x140 [ 794.777494][T24128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.777515][T24128] ? clear_bhb_loop+0x70/0xc0 [ 794.777540][T24128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.777561][T24128] RIP: 0033:0x7fe21e19e0d9 [ 794.777580][T24128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.777598][T24128] RSP: 002b:00007fe21f0ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.777620][T24128] RAX: ffffffffffffffda RBX: 00007fe21e426090 RCX: 00007fe21e19e0d9 [ 794.777636][T24128] RDX: 0000200000000140 RSI: 00000000c0185879 RDI: 0000000000000004 [ 794.777651][T24128] RBP: 00007fe21e235024 R08: 0000000000000000 R09: 0000000000000000 [ 794.777664][T24128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.777677][T24128] R13: 00007fe21e426128 R14: 00007fe21e426090 R15: 00007fff84607938 [ 794.777713][T24128] [ 794.886971][T24128] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 794.993307][ T25] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 795.141815][ T25] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 795.149275][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.149321][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.149343][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.149365][ T25] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.149403][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.702029][ T25] gud 9-1:1.0: Unexpected status OK for failed transfer [ 795.702091][ T25] gud 9-1:1.0: probe with driver gud failed with error -32 [ 795.924611][ T5787] usb 9-1: USB disconnect, device number 31 [ 796.055935][T24162] profile_transition: 7 callbacks suppressed [ 796.069468][T24162] profile_transition: unconfined exec no attachment [ 796.294753][T24170] loop7: detected capacity change from 0 to 512 [ 796.397734][T24170] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.6859: bg 0: block 5: invalid block bitmap [ 796.425839][T24174] profile_transition: unconfined exec no attachment [ 796.434275][T24170] loop7: lost filesystem error report for type 5 error -117 [ 796.444257][T24170] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 796.451664][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 796.451684][ C0] EXT4-fs (loop7): initial error at time 803: ext4_validate_block_bitmap:436 [ 796.451703][ C0] EXT4-fs (loop7): last error at time 803: ext4_validate_block_bitmap:436 [ 796.491322][T24170] loop7: lost filesystem error report for type 5 error -117 [ 796.494197][T24170] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.6859: invalid indirect mapped block 3 (level 2) [ 796.516282][T24170] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 796.518379][T24170] EXT4-fs (loop7): 1 orphan inode deleted [ 796.534398][T24170] EXT4-fs (loop7): 1 truncate cleaned up [ 796.546808][T24170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.682212][T24181] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6863'. [ 796.770511][T24170] overlayfs: failed to verify upper root origin [ 796.816826][T24184] profile_transition: unconfined exec no attachment [ 796.928712][T23423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.189784][T24195] profile_transition: unconfined exec no attachment [ 797.447188][T24199] kAFS: bad VL server IP address [ 797.449420][T24202] program syz.9.6869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.464080][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 797.464119][ T31] audit: type=1800 audit(804.305:3865): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 797.658730][ T31] audit: type=1800 audit(804.485:3866): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 797.676187][T24206] profile_transition: unconfined exec no attachment [ 797.748900][ T31] audit: type=1800 audit(804.585:3867): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 797.868131][ T31] audit: type=1800 audit(804.705:3868): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 798.037297][T24211] profile_transition: unconfined exec no attachment [ 798.093022][ T5715] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 798.113704][ T31] audit: type=1800 audit(804.955:3869): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 798.219447][T24215] profile_transition: unconfined exec no attachment [ 798.276114][ T5715] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 798.295501][ T5715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.295541][ T5715] usb 10-1: Product: syz [ 798.295577][ T5715] usb 10-1: Manufacturer: syz [ 798.295595][ T5715] usb 10-1: SerialNumber: syz [ 798.320619][ T5715] usb 10-1: config 0 descriptor?? [ 798.330423][ T31] audit: type=1800 audit(805.165:3870): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264589 res=0 errno=0 [ 798.350193][ T31] audit: type=1800 audit(805.185:3871): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=264621 res=0 errno=0 [ 798.364586][ T31] audit: type=1800 audit(805.205:3872): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=264596 res=0 errno=0 [ 798.376441][ T31] audit: type=1800 audit(805.215:3873): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=264597 res=0 errno=0 [ 798.449618][ T31] audit: type=1800 audit(805.285:3874): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 798.629314][T24220] profile_transition: unconfined exec no attachment [ 798.664568][ T5787] usb 10-1: USB disconnect, device number 17 [ 798.786461][T24226] profile_transition: unconfined exec no attachment [ 799.014527][T24231] profile_transition: unconfined exec no attachment [ 799.274524][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6880'. [ 800.352697][T24262] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 800.691719][T24272] loop8: detected capacity change from 0 to 128 [ 800.720335][T24272] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 801.178920][T24287] program syz.7.6894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 801.244947][T24291] profile_transition: 8 callbacks suppressed [ 801.253375][T24291] profile_transition: unconfined exec no attachment [ 801.281372][T24290] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 801.369609][T24293] profile_transition: unconfined exec no attachment [ 801.539696][ T5715] kernel write not supported for file /input/mice (pid: 5715 comm: kworker/0:5) [ 801.635207][T24303] profile_transition: unconfined exec no attachment [ 801.902419][T24310] profile_transition: unconfined exec no attachment [ 802.227919][T24324] profile_transition: unconfined exec no attachment [ 802.498646][T24327] profile_transition: unconfined exec no attachment [ 802.517433][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 802.517474][ T31] audit: type=1800 audit(810.353:3915): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 802.780329][T24335] profile_transition: unconfined exec no attachment [ 802.805944][ T31] audit: type=1800 audit(810.643:3916): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 802.886128][ T31] audit: type=1800 audit(810.723:3917): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 803.029303][T24339] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 803.172058][T24342] profile_transition: unconfined exec no attachment [ 803.217135][ T31] audit: type=1800 audit(811.053:3918): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 803.342518][T24347] profile_transition: unconfined exec no attachment [ 803.442249][ T31] audit: type=1800 audit(811.283:3919): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 803.490126][ T31] audit: type=1800 audit(811.323:3920): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 803.519676][ T31] audit: type=1800 audit(811.353:3921): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 803.536808][T24349] profile_transition: unconfined exec no attachment [ 803.698269][ T31] audit: type=1800 audit(811.533:3922): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 803.813820][ T31] audit: type=1800 audit(811.653:3923): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 803.852698][ T31] audit: type=1800 audit(811.693:3924): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 804.567029][T24382] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 806.160317][T24424] loop9: detected capacity change from 0 to 256 [ 806.295395][T24424] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 806.295441][T24424] FAT-fs (loop9): Filesystem has been set read-only [ 806.321956][T24431] profile_transition: 9 callbacks suppressed [ 806.322378][T24431] profile_transition: unconfined exec no attachment [ 806.546040][T24435] loop7: detected capacity change from 0 to 2048 [ 806.589849][T24435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 806.824459][T24452] profile_transition: unconfined exec no attachment [ 807.069592][T24458] sd 0:0:1:0: PR command failed: 1026 [ 807.069652][T24458] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 807.069710][T24458] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 807.257285][T24468] profile_transition: unconfined exec no attachment [ 807.399729][T24471] profile_transition: unconfined exec no attachment [ 807.521124][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 807.534760][ T31] audit: type=1800 audit(815.353:3953): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 807.625846][ T31] audit: type=1800 audit(815.463:3954): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 807.725203][ T31] audit: type=1800 audit(815.563:3955): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 807.774648][T24484] profile_transition: unconfined exec no attachment [ 807.798971][T24483] sg_write: data in/out 270400/136 bytes for SCSI command 0x0-- guessing data in; [ 807.798971][T24483] program syz.9.6962 not setting count and/or reply_len properly [ 807.835109][ T31] audit: type=1800 audit(815.673:3956): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 807.960846][T24488] profile_transition: unconfined exec no attachment [ 808.045878][ T31] audit: type=1800 audit(815.883:3957): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 808.124779][T24490] profile_transition: unconfined exec no attachment [ 808.220848][T24494] profile_transition: unconfined exec no attachment [ 808.278379][ T31] audit: type=1800 audit(816.103:3958): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15953 res=0 errno=0 [ 808.306719][ T31] audit: type=1800 audit(816.143:3959): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=43666 res=0 errno=0 [ 808.396034][ T31] audit: type=1800 audit(816.233:3960): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 808.443869][T24502] profile_transition: unconfined exec no attachment [ 808.481790][ T31] audit: type=1800 audit(816.323:3961): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 808.588648][ T31] audit: type=1800 audit(816.423:3962): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 808.677251][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.677320][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.990310][T24515] profile_transition: unconfined exec no attachment [ 809.011865][T24517] loop7: detected capacity change from 0 to 128 [ 809.056421][T24517] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 809.266452][T24517] overlayfs: upper fs needs to support d_type. [ 809.298022][T24532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6978'. [ 809.304624][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6978'. [ 809.304646][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6978'. [ 809.423248][T23423] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 810.372255][T24558] loop9: detected capacity change from 0 to 128 [ 810.386353][T24558] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 810.386415][T24558] hpfs: filesystem error: improperly stopped [ 810.386437][T24558] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 810.386457][T24558] hpfs: You really don't want any checks? You are crazy... [ 810.386472][T24558] hpfs: Code page index out of array [ 810.386480][T24558] hpfs: code page support is disabled [ 810.405125][T24558] hpfs: hpfs_map_4sectors(): unaligned read [ 810.405205][T24558] hpfs: hpfs_map_4sectors(): unaligned read [ 810.405216][T24558] hpfs: filesystem error: unable to find root dir [ 810.807539][T24540] loop7: detected capacity change from 0 to 32768 [ 810.881605][T24540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6980 (24540) [ 811.048657][T24540] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.048712][T24540] BTRFS info (device loop7): using crc32c checksum algorithm [ 811.123575][T24574] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 811.328637][T24540] BTRFS info (device loop7): enabling ssd optimizations [ 811.328687][T24540] BTRFS info (device loop7): turning on flush-on-commit [ 811.329028][T24540] BTRFS info (device loop7): enabling free space tree [ 811.329048][T24540] BTRFS info (device loop7): enabling auto defrag [ 811.329065][T24540] BTRFS info (device loop7): use lzo compression, level 1 [ 811.329084][T24540] BTRFS info (device loop7): max_inline set to 4096 [ 811.369334][T24588] profile_transition: 9 callbacks suppressed [ 811.369351][T24588] profile_transition: unconfined exec no attachment [ 811.464476][T24591] loop9: detected capacity change from 0 to 128 [ 811.495505][T24591] EXT4-fs (loop9): Test dummy encryption mode enabled [ 811.496688][T24592] profile_transition: unconfined exec no attachment [ 811.523392][T24591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 811.523498][T24591] System zones: 1-3, 19-19, 35-36 [ 811.536943][T24591] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 811.680194][T23423] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.843056][T17253] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 811.879802][T24594] profile_transition: unconfined exec no attachment [ 812.290374][T24603] profile_transition: unconfined exec no attachment [ 812.478736][T24610] profile_transition: unconfined exec no attachment [ 812.608175][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 812.608222][ T31] audit: type=1800 audit(820.443:3986): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 812.753423][ T31] audit: type=1800 audit(820.593:3987): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15830 res=0 errno=0 [ 812.790256][T24618] profile_transition: unconfined exec no attachment [ 812.870974][T24620] profile_transition: unconfined exec no attachment [ 812.931956][T24621] profile_transition: unconfined exec no attachment [ 812.951120][ T5700] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 813.015707][T24624] profile_transition: unconfined exec no attachment [ 813.128840][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 813.142696][ T5700] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 813.153890][ T5700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.153958][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 813.154011][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 813.154038][ T5700] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 813.154063][ T5700] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.211727][ T5700] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 813.211767][ T5700] usb 1-1: Manufacturer: syz [ 813.264735][ T5700] usb 1-1: config 0 descriptor?? [ 813.296604][ T31] audit: type=1800 audit(821.133:3988): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265187 res=0 errno=0 [ 813.316451][ T31] audit: type=1800 audit(821.143:3989): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=265217 res=0 errno=0 [ 813.336669][ T31] audit: type=1800 audit(821.163:3990): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=265194 res=0 errno=0 [ 813.336714][ T31] audit: type=1800 audit(821.163:3991): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=265195 res=0 errno=0 [ 813.380474][T24625] profile_transition: unconfined exec no attachment [ 813.415885][T24599] loop9: detected capacity change from 0 to 32768 [ 813.446254][ T31] audit: type=1800 audit(821.263:3992): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16076 res=0 errno=0 [ 813.483362][ T5700] rc_core: Couldn't load IR keymap rc-hauppauge [ 813.483393][ T5700] Registered IR keymap rc-empty [ 813.483535][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.503484][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.522593][ T5700] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 813.537287][ T5700] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input69 [ 813.567584][T24599] *** Log Is Dirty ! *** [ 813.568049][T24599] lmLogInit: exit(-22) [ 813.568097][T24599] lmLogOpen: exit(-22) [ 813.576898][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.591162][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.611442][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.642117][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.681465][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 813.773329][T24629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7002'. [ 918.701011][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 918.716911][ C1] rcu: 0-...!: (0 ticks this GP) idle=b30c/1/0x4000000000000000 softirq=145181/145181 fqs=14 [ 918.727154][ C1] rcu: (detected by 1, t=10502 jiffies, g=161645, q=679 ncpus=2) [ 918.734961][ C1] Sending NMI from CPU 1 to CPUs 0: [ 918.740170][ C0] NMI backtrace for cpu 0 [ 918.740193][ C0] CPU: 0 UID: 0 PID: 24630 Comm: syz.9.7003 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.740217][ C0] Tainted: [L]=SOFTLOCKUP [ 918.740224][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.740235][ C0] RIP: 0010:lock_is_held_type+0x2f/0x150 [ 918.740270][ C0] Code: 41 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d 76 b1 96 04 00 0f 84 e4 00 00 00 65 8b 05 a1 fe b0 07 85 c0 0f 85 d5 00 00 00 <65> 4c 8b 2d e1 b8 b0 07 41 83 bd a4 0b 00 00 00 0f 85 bf 00 00 00 [ 918.740286][ C0] RSP: 0018:ffffc90000007cc0 EFLAGS: 00000046 [ 918.740303][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888032663e80 [ 918.740316][ C0] RDX: 8000000001000001 RSI: 00000000ffffffff RDI: ffff888076f6a2c0 [ 918.740329][ C0] RBP: ffff888076f6a300 R08: 0000000001000001 R09: 0000000000000004 [ 918.740342][ C0] R10: dffffc0000000000 R11: fffff52000000f90 R12: 0000000000000001 [ 918.740355][ C0] R13: ffff888076f6a000 R14: dffffc0000000000 R15: ffff888029b88400 [ 918.740368][ C0] FS: 00007f8c304bb6c0(0000) GS:ffff888124cd8000(0000) knlGS:0000000000000000 [ 918.740385][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.740398][ C0] CR2: 0000200000000240 CR3: 00000000387ac000 CR4: 00000000003526f0 [ 918.740414][ C0] Call Trace: [ 918.740422][ C0] [ 918.740434][ C0] advance_sched+0x163/0xc80 [ 918.740465][ C0] ? __pfx_advance_sched+0x10/0x10 [ 918.740488][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 918.740516][ C0] ? __pfx_advance_sched+0x10/0x10 [ 918.740539][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 918.740573][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 918.740613][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 918.740635][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 918.740659][ C0] [ 918.740665][ C0] [ 918.740673][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 918.740694][ C0] RIP: 0010:_raw_spin_unlock_irq_enable+0x66/0xa0 [ 918.740719][ C0] Code: 8b 1d 7e 3e ae 07 f7 c3 00 02 00 00 74 05 e8 b1 82 e9 f5 9c 58 a9 00 02 00 00 75 33 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 05 66 ae f5 65 48 8b 05 ad fd ad 07 48 85 c0 74 07 5b c3 cc cc [ 918.740735][ C0] RSP: 0018:ffffc9000eb4fb30 EFLAGS: 00000206 [ 918.740750][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000002 [ 918.740763][ C0] RDX: 0000000000000000 RSI: ffffffff8e4787e8 RDI: 0000000000000001 [ 918.740775][ C0] RBP: dffffc0000000000 R08: ffffffff907a477f R09: 1ffffffff20f48ef [ 918.740788][ C0] R10: dffffc0000000000 R11: fffffbfff20f48f0 R12: 1ffff11003f617d3 [ 918.740813][ C0] R13: ffff8880b863bc08 R14: 1ffff110170c7954 R15: ffff8880b863caa0 [ 918.740836][ C0] try_to_wake_up+0x887/0x14d0 [ 918.740863][ C0] wake_up_q+0x85/0xd0 [ 918.740888][ C0] futex_wake+0x504/0x5f0 [ 918.740917][ C0] ? __pfx_futex_wake+0x10/0x10 [ 918.740946][ C0] ? add_device_randomness+0xcf/0x130 [ 918.741050][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 918.741072][ C0] do_futex+0x458/0x4e0 [ 918.741100][ C0] ? ushc_probe+0xecd/0x10a0 [ 918.741169][ C0] ? __pfx_do_futex+0x10/0x10 [ 918.741195][ C0] __se_sys_futex+0x3a8/0x450 [ 918.741221][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 918.741243][ C0] ? rcu_is_watching+0x16/0xb0 [ 918.741267][ C0] ? __x64_sys_futex+0x21/0xf0 [ 918.741290][ C0] do_syscall_64+0x166/0x520 [ 918.741314][ C0] ? trace_irq_disable+0x3b/0x140 [ 918.741332][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.741350][ C0] ? clear_bhb_loop+0x70/0xc0 [ 918.741370][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.741387][ C0] RIP: 0033:0x7f8c2f59e0d9 [ 918.741405][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.741420][ C0] RSP: 002b:00007f8c304bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 918.741438][ C0] RAX: ffffffffffffffda RBX: 00007f8c2f825fa8 RCX: 00007f8c2f59e0d9 [ 918.741451][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8c2f825fac [ 918.741464][ C0] RBP: 00007f8c2f825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 918.741477][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.741488][ C0] R13: 00007f8c2f826038 R14: 00007ffc117ed240 R15: 00007ffc117ed328 [ 918.741510][ C0] [ 919.160347][ C1] rcu: rcu_preempt kthread starved for 10472 jiffies! g161645 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 919.171454][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 919.181421][ C1] rcu: RCU grace-period kthread stack dump: [ 919.187299][ C1] task:rcu_preempt state:R running task stack:28112 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 919.200786][ C1] Call Trace: [ 919.204067][ C1] [ 919.207001][ C1] __schedule+0x1b57/0x5bc0 [ 919.211515][ C1] ? __lock_acquire+0x6df/0x2e50 [ 919.216474][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 919.221598][ C1] ? __pfx___schedule+0x10/0x10 [ 919.226452][ C1] ? lock_acquire+0x115/0x350 [ 919.231140][ C1] ? schedule+0x90/0x2b0 [ 919.235392][ C1] schedule+0x164/0x2b0 [ 919.239560][ C1] schedule_timeout+0x152/0x2c0 [ 919.244417][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 919.249793][ C1] ? __pfx_process_timeout+0x10/0x10 [ 919.255090][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 919.260899][ C1] ? prepare_to_swait_event+0x322/0x350 [ 919.266455][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 919.271321][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 919.277475][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 919.282760][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 919.287966][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 919.293783][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 919.298375][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 919.303571][ C1] ? __kthread_parkme+0x71/0x1f0 [ 919.308518][ C1] ? __kthread_parkme+0x199/0x1f0 [ 919.313562][ C1] kthread+0x38b/0x480 [ 919.317629][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 919.322831][ C1] ? __pfx_kthread+0x10/0x10 [ 919.327422][ C1] ret_from_fork+0x514/0xb70 [ 919.332017][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 919.337127][ C1] ? __switch_to+0xc89/0x1420 [ 919.341811][ C1] ? __pfx_kthread+0x10/0x10 [ 919.346402][ C1] ret_from_fork_asm+0x1a/0x30 [ 919.351180][ C1] [ 919.354192][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 919.360511][ C1] CPU: 1 UID: 0 PID: 5933 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 919.370927][ C1] Tainted: [L]=SOFTLOCKUP [ 919.375245][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.385295][ C1] RIP: 0010:smp_call_function_many_cond+0x62d/0x1500 [ 919.391970][ C1] Code: 89 fe 83 e6 01 31 ff e8 51 51 0c 00 41 83 e7 01 75 07 e8 46 4c 0c 00 eb 3f f3 90 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 <84> c0 75 0f f7 03 01 00 00 00 74 1d e8 22 4c 0c 00 eb dc 89 d9 80 [ 919.411574][ C1] RSP: 0018:ffffc90004dc7b60 EFLAGS: 00000293 [ 919.417650][ C1] RAX: 0000000000000000 RBX: ffff8880b8643808 RCX: ffff88807b920000 [ 919.425615][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 919.433581][ C1] RBP: ffffc90004dc7cb8 R08: ffff88807b92159f R09: 1ffff1100f7242b3 [ 919.441548][ C1] R10: dffffc0000000000 R11: ffffffff825fb910 R12: 1ffff110170c8701 [ 919.449513][ C1] R13: 0000000000000000 R14: ffff8880b8643800 R15: 0000000000000001 [ 919.457484][ C1] FS: 00007f1004635880(0000) GS:ffff888124dd8000(0000) knlGS:0000000000000000 [ 919.466419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 919.473000][ C1] CR2: 00007ff3c32f9ff8 CR3: 0000000055c6c000 CR4: 00000000003526f0 [ 919.480971][ C1] Call Trace: [ 919.484246][ C1] [ 919.487185][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 919.492681][ C1] ? __pfx_has_bh_in_lru+0x10/0x10 [ 919.497796][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 919.504124][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 919.509169][ C1] blkdev_flush_mapping+0xff/0x2f0 [ 919.514290][ C1] bdev_release+0x443/0x690 [ 919.518874][ C1] ? __pfx_blkdev_release+0x10/0x10 [ 919.524069][ C1] blkdev_release+0x15/0x20 [ 919.528571][ C1] __fput+0x418/0xa50 [ 919.532563][ C1] fput_close_sync+0x11f/0x240 [ 919.537334][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 919.542634][ C1] __x64_sys_close+0x7e/0x110 [ 919.547318][ C1] do_syscall_64+0x166/0x520 [ 919.551914][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.557979][ C1] ? clear_bhb_loop+0x70/0xc0 [ 919.562659][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.568552][ C1] RIP: 0033:0x7f1003ea7407 [ 919.572967][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 919.592567][ C1] RSP: 002b:00007fff52095e80 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 919.600979][ C1] RAX: ffffffffffffffda RBX: 00007f1004635880 RCX: 00007f1003ea7407 [ 919.608946][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 919.616912][ C1] RBP: 00007f10046356e8 R08: 0000000000000000 R09: 0000000000000000 [ 919.624879][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 919.632841][ C1] R13: 000055a0e9118190 R14: 0000000000000008 R15: 000055a0e9122e00 [ 919.640831][ C1]