last executing test programs: 15.083980917s ago: executing program 3 (id=572): syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f9"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x0, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x7, 0x4, 0xbdb], 0x5000, 0x42900}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x45}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x4, 0x7d, 0x7, 0x36, 0x2, 0x2, 0x87}, {0x0, 0x33325000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x3000, 0xd000, 0xf, 0x3, 0x16, 0xa, 0xab, 0x8, 0xc, 0x9, 0x8, 0x97}, {0x2000, 0xeeef0000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x1, 0x0, 0x5, 0x7, 0x5, 0xa, 0x3, 0x8, 0x81, 0x42, 0x70}, {0x0, 0x25000, 0xa, 0x5, 0xcd, 0x9, 0x1, 0x9, 0x2, 0xfa, 0xb0, 0x81}, {0x30000, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0xfa60f000775a5d09}, 0xc) 11.973486899s ago: executing program 3 (id=579): r0 = socket(0xb, 0x800, 0x20000001) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000fdd6a6a50a0000", @ANYRES32=0x0, @ANYBLOB="15010000000000001400350070696d724467300000000000fe00000008000500", @ANYRES32=r2, @ANYRES8=r1, @ANYRES64=r1, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) r3 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x69b9}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @mcast2}, 0x1c) listen(r7, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000640)="fe97", 0x2}], 0x1}}], 0x1, 0x0) r8 = socket(0xa, 0x1, 0x84) r9 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r10 = dup3(r9, r8, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd00"/272], 0x110) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000080), 0x4) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0xffffffffffffffc1) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c0004000400000100c2800008000500", @ANYRES32=r12, @ANYBLOB="0e928c70"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) 11.535323723s ago: executing program 3 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 9.194725405s ago: executing program 0 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$midi(r3, &(0x7f00000012c0)=""/232, 0xe8) 9.030130228s ago: executing program 3 (id=592): r0 = inotify_init() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r4, 0x705, &(0x7f0000000200)=0xfffffffffffffff9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10000) r6 = socket(0x1d, 0x2, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r8, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r10, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getqdisc={0x40, 0x26, 0x2, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xb, 0xe}, {0xfff3, 0xd}, {0xb, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44060}, 0x98) close_range(r0, 0xffffffffffffffff, 0x0) 8.836116303s ago: executing program 2 (id=593): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28) (async) write(r0, &(0x7f0000000080)="3f000000010000", 0x7) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x17, 0x1}, 0x4a, [0x7ff, 0x3, 0x5, 0x40, 0x0, 0x4, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x5, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x3, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0x103, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x8001, 0x3, 0x9f5, 0x0, 0xb, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0x563, 0x6, 0x8, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x3, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @loopback}}}, 0x108) (async) ptrace(0x10, r1) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6, 0x80000001, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) ptrace$setregset(0x4205, r3, 0x6, &(0x7f0000000000)={&(0x7f00000002c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c15bb2bf8282853f3e16f8394a8676ff55a3507e2ad5024ebb04afead478b09e2d5f750d08c6130863b0f7433c7fbc9b978a39eae88bff205d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0bcdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec84475f9261f2dd4ee203bd67465b9fc251d0c05b982000b1039bfcc52b35464ed261ff0424118a840263328afa5b66612a15be4d7215be21a3d2597552da3b248765dc6a4eca7c9985abb35e60423ae7f652a40606fc262ed886b2bc932774e958a6862f052501b8495abc", 0xffffffffffffff93}) (async) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c945b941eb6a3f6dedf11f1508685636", 0x10}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) 8.145593717s ago: executing program 0 (id=594): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001540)='./file1\x00', 0xc04, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c636f6465706167653d3933322c757466383d302c757466383d302c756e695f786c6174653d302c696f636861727365743d6b0e2c5c9e752c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c00"], 0x15, 0x2ae, &(0x7f0000000900)="$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") syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0xa40c10, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="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"], 0x6, 0x64a, &(0x7f0000000bc0)="$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") syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0x8, 0x0, 0x1, {0x80000004, 0x1, 0x402, 0x8800001}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r2, 0x1, 0x2, 0x0, &(0x7f0000000000)=0x42) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0x0, 0x0, 0x8ffff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) truncate(&(0x7f0000000900)='./file1\x00', 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0xfea7) 8.058090264s ago: executing program 2 (id=595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000c4f100000000000000000800711077000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) unshare(0x26020400) r1 = socket$tipc(0x1e, 0x2, 0x0) listen(r1, 0x9) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.756262597s ago: executing program 2 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 7.595086529s ago: executing program 1 (id=597): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x9, &(0x7f0000000400)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = mq_open(0x0, 0x42, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) mq_timedsend(r4, &(0x7f0000000600)="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", 0x2b1, 0x5, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xffffff67) modify_ldt$write(0x1, &(0x7f0000000240)={0x6000000, 0x0, 0x1000}, 0x10) fsopen(0x0, 0x0) 7.58504868s ago: executing program 2 (id=598): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x800000000000000) 4.936698356s ago: executing program 1 (id=599): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f00000023c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x2, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004e80)="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", 0x2000, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) r3 = epoll_create1(0x80000) getpid() epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)={0xe000200c}) 4.875895581s ago: executing program 2 (id=600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 4.814896775s ago: executing program 0 (id=601): r0 = socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) (async) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @loopback, 0x5}, 0x1c) (async) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)='9', 0x1}], 0x1) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407100904001f000000fe000000000000000800110001000000", 0x24) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="00000004", 0x4, 0xb00, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 4.424087826s ago: executing program 0 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$midi(r3, &(0x7f00000012c0)=""/232, 0xe8) 3.497042918s ago: executing program 3 (id=603): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file3'}, 0xb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={r1}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'sha3-256-ce\x00'}}, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002640)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r3 = socket$packet(0x11, 0xa, 0x300) open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',msize=0x0000000000001000']) recvmmsg(r3, &(0x7f0000003c80), 0x3ffff87, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000000240)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}) recvfrom$inet_nvme(r0, &(0x7f00000003c0)=""/174, 0xae, 0x2041, &(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000b, 0x40010, 0xffffffffffffffff, 0x33bf7000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000b0601030000000000000000020000050900020073797a310000000004000780050001000700000023a75ffe30db17427ccd79915764e4f551a73955d72272443b4398bdf4cf9ff1562231d0ef19bbaa7c52e6cacbde6091a0dbe45537030382b3441a3b53eea10a260f89731fa88b86843f8813abba9dc84698c189cdbcbea589f1ad3b83a5f06adaace659f06b928b91066e7a547c184d501ca77246c839cb44e36cca99650ad203cd3a0f6dfd3eead4f9f307d77552bb55f1c62ffba836544caf93d4527182f7368b"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) fallocate(r0, 0x0, 0x0, 0x8ffff) truncate(&(0x7f0000000040)='./file1\x00', 0x42000) 3.416003474s ago: executing program 0 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000c4f100000000000000000800711077000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) unshare(0x26020400) r1 = socket$tipc(0x1e, 0x2, 0x0) listen(r1, 0x9) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.320315602s ago: executing program 1 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c000200000000000000000109f5010073797a30"], 0xb8}}, 0x0) 3.128479146s ago: executing program 1 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x101, 0x70bd23, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x300000000000000, 0xd0}, 0x0) 3.005113007s ago: executing program 1 (id=607): r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}, 0xfffe}, 0x90) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 1.629865343s ago: executing program 1 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r2, 0x2, &(0x7f00000008c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8, r1, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000340)="f1", 0x1, 0x7fffffffffffffff}]) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffe, 0x80480) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.628817433s ago: executing program 0 (id=609): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001540)='./file1\x00', 0xc04, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c636f6465706167653d3933322c757466383d302c757466383d302c756e695f786c6174653d302c696f636861727365743d6b0e2c5c9e752c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c00"], 0x15, 0x2ae, &(0x7f0000000900)="$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") syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0xa40c10, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="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"], 0x6, 0x64a, &(0x7f0000000bc0)="$eJzs3c1vHGcdB/DvrNeOnUqp2yZtQJWwGqkgLBK/yAVzaUAI+VChqhw4W4nTWNm4le0it0Lg8io4cegfUA6+cULiHqmc4darj5WQuPTkm9HMztobe+36Jcmu4fOJZp/n2WeeZ57ntzOzO7uxJsD/rYXJNB+lyMLkWxtleXtrtrW9NXuprm4lKfONpNlOUqwkxWfJ7bSXfK18sl6/OGo7nyzPv/P5l9tftEvNeqnWbxzX7mQ26yUTSYbq9ICRP52mv+F2puznTu/+TqHYm2EZsBudwEG/7R6yeZrm5zxugUFQtN83DxlPLicZrT8HpD47NJ7t6J68U53lAAAA4IJ6fic72ciVfo8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpL6/v9FvTQ6+YkUnfv/j9TPpco/1+cBn9Ojfg8AAAAAAAAAAJ6Ab+xkJxu50invFtVv/q9VhavV43P5IGtZympuZiOLWc96VjOdZLyro5GNxfX11ekTtJzp2XLm2cwXAAAAAAAAAP5H/ToL+7//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPw3VadHOFvVytZMfT6OZZDTJSLneZvKvTv6CKHo9+ejZjwMAAADOZfQMbZ7fyU42cqVT3i2qa/6Xq+vl0XyQlaxnOetpZSl362vo8qq/sb0129remn1YLof7/cF/TjWMqse9ryF6bfl6tcZY7mW5euZm7lSDuZtG1bJ0vTOe3uP6uBxT8WbthCO7W6flxv581LcIfTFeRWR4LyJT9djKaLxwfCS+8tVpHrul6TT2vvm5+hRifrlOy/n8fjBj3kgViZmuve/l4yORfPPvf/3Z/VY5mbXJwZnSGR3cJ2a7IvHKySKx8uD+vQGMRPOU609Vkbi2V17Ij/PTTGYib2c1y/l5FrOepezW9Yv1/lw+jh8fqduPld7+qpGM1K9L+yx6kjFN5EdVbjGvVW2vZDlF3svdLOWN6t9MpvPdzGUu812v8LUjx13NrTrqG6c76m98q86MJflDnfZb+y21jOsLXXHtPueOV3Xdz+xH6cUnf25sfr3OlNv4TZ0OhoORmO6KxEvHR+Iv1bGx1lp5sHp/8f0j+t88UH69Tss97ncD9S5R7i8vZrQ+kzy+d5R1L+2dZR6P10j9i0u7rnGo7lpVVxSdI/UnRx6pI/VnuMM9zVR1r/Ssm63qrnfVPfZ5K++ltfd5CIABdvnbl0fG/j32z7FPx347dn/srdEfXvrepVdHMvyP4e83p4Zeb7xa/C2f5pf71/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZrX340YPFVmtptXemcXTVk80U9Y18nsW2ZPqd6dxE8Nwd3h6I6fQ7M5ZzNB9KejavX6Kz3FwUuBBurT98/9bahx99Z/nh4rtL7y6tDM/NzU/Nz70xe+vecmtpqv3Y71ECT8P+m37v+mKgbrAJAAAAAAAAAAAA5GR/b7Nb//+/M/99Qr/nCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxsC5NpPkqR6ambU2V5e2u2VS6d/P6azSSNRlL8Iik+S26nvWS8q7vizSO288ny/Duff7n9xX5fzWr9stM6PYfNeslEkqE6PeDjs/Z3p2d/f/zVybsr9mZYBuxGJ3DQb/8NAAD//7oL/+Y=") syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610916dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84b99b2ed90f71810cd92eeca69f5275cb7b7027d4babf643bd69b0a68134c022fe5dcd03834f547325ac2d1a5d16f074d898946ff71afa90180b317e645dd58a922e5d907462cd50dc23801c48c0d49ab012961d84d2eb85a3730a3f3177da048c3bc991216b11dca020afefc24ae7583b59534a0ab1fca82bf473216141db8e9864f7861d0500a920e1a8d3352d0662f586e743386e87b6c0c5ed6e4d192ef2990b44cedbb708e7a18b20dcd5573b603c4d659992647ffa8210abf4e9d232b52a8ea1dd1c045afd8e472cd1fbb775e89cca49d136a6"], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0x8, 0x0, 0x1, {0x80000004, 0x1, 0x402, 0x8800001}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r2, 0x1, 0x2, 0x0, &(0x7f0000000000)=0x42) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0x0, 0x0, 0x8ffff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) truncate(&(0x7f0000000900)='./file1\x00', 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0xfea7) 296.965717ms ago: executing program 2 (id=610): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000040000aa00"/104], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) tgkill(r2, r2, 0x3c) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ous mode [ 73.199268][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.208979][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.229644][ T5764] veth1_vlan: entered promiscuous mode [ 73.305950][ T5766] veth0_macvtap: entered promiscuous mode [ 73.342106][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.352206][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.354825][ T5766] veth1_macvtap: entered promiscuous mode [ 73.414684][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.432545][ T5764] veth0_macvtap: entered promiscuous mode [ 73.449317][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.488661][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.493728][ T5764] veth1_macvtap: entered promiscuous mode [ 73.515235][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.520817][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.533642][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.546006][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.557045][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.570820][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.598765][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.611803][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.622300][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.633792][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.661420][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.713728][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.741171][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.759033][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.795729][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.801893][ T5845] syz.2.3[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.828549][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.861881][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.899327][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.919085][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.939849][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.956986][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.990240][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035175][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.052716][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.063367][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.074300][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.086333][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.111259][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.133665][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.194269][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.214406][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.234362][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.254380][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.350943][ T5767] Bluetooth: hci0: command tx timeout [ 74.392063][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.425929][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.554361][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.569884][ T5845] loop2: detected capacity change from 0 to 32768 [ 74.584425][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.592119][ T5767] Bluetooth: hci2: command tx timeout [ 74.601176][ T5767] Bluetooth: hci1: command tx timeout [ 74.630630][ T5845] ======================================================= [ 74.630630][ T5845] WARNING: The mand mount option has been deprecated and [ 74.630630][ T5845] and is ignored by this kernel. Remove the mand [ 74.630630][ T5845] option from the mount to silence this warning. [ 74.630630][ T5845] ======================================================= [ 74.670654][ T5767] Bluetooth: hci3: command tx timeout [ 74.672677][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.702391][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.790855][ T5845] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.810988][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.819165][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.197389][ T5845] XFS (loop2): Ending clean mount [ 75.228769][ T5845] XFS (loop2): Quotacheck needed: Please wait. [ 75.229592][ T5847] loop0: detected capacity change from 0 to 40427 [ 75.294360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.305862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.580189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 75.611689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.621081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.742201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.758911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.781296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.803125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.851178][ T5847] F2FS-fs (loop0): invalid crc value [ 76.000586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.380691][ T5845] XFS (loop2): Quotacheck: Done. [ 76.430824][ T5767] Bluetooth: hci0: command tx timeout [ 76.670506][ T5767] Bluetooth: hci1: command tx timeout [ 76.676084][ T5767] Bluetooth: hci2: command tx timeout [ 76.750617][ T5767] Bluetooth: hci3: command tx timeout [ 76.966644][ T5761] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.409448][ T5857] loop3: detected capacity change from 0 to 40427 [ 77.455868][ T5857] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 77.477663][ T5857] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 77.538471][ T5857] F2FS-fs (loop3): invalid crc value [ 77.556906][ T5857] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.800339][ T5857] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 77.820580][ T5857] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.119441][ T5868] loop1: detected capacity change from 0 to 32768 [ 79.509189][ T5868] JBD2: Ignoring recovery information on journal [ 79.548582][ T5868] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 79.566965][ T5888] syz.3.4: attempt to access beyond end of device [ 79.566965][ T5888] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.580782][ T5890] loop0: detected capacity change from 0 to 4096 [ 79.611650][ T5890] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 79.612148][ T5868] JBD2: bad block at offset 32 [ 79.631006][ T5888] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 79.821501][ T5868] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 80.021583][ T5896] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 80.196498][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 80.304710][ T5890] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 81.048350][ T28] audit: type=1400 audit(1765634757.824:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=5889 comm="syz.0.11" [ 81.396021][ T5900] loop1: detected capacity change from 0 to 256 [ 81.434673][ T5900] FAT-fs (loop1): Unrecognized mount option "\u" or missing value [ 81.569881][ T5905] loop2: detected capacity change from 0 to 64 [ 81.627268][ T5905] hfs: request for non-existent node 63 in B*Tree [ 81.634088][ T5905] hfs: request for non-existent node 63 in B*Tree [ 81.640950][ T5905] hfs: get root inode failed [ 82.931499][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 83.346123][ T5904] loop0: detected capacity change from 0 to 32768 [ 83.440353][ T5904] (syz.0.14,5904,0):ocfs2_load_local_alloc:319 ERROR: Local alloc size is invalid (la_size = 33328) [ 83.452888][ T5904] (syz.0.14,5904,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 83.465666][ T5904] (syz.0.14,5904,0):ocfs2_check_volume:2460 ERROR: status = -22 [ 83.473756][ T5904] (syz.0.14,5904,0):ocfs2_check_volume:2488 ERROR: status = -22 [ 83.482552][ T5904] (syz.0.14,5904,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 83.662608][ T5904] (syz.0.14,5904,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 85.035001][ T5930] loop0: detected capacity change from 0 to 64 [ 85.156933][ T28] audit: type=1800 audit(1765634761.944:3): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name=D54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop0" ino=22 res=0 errno=0 [ 85.309463][ T5915] loop2: detected capacity change from 0 to 32768 [ 85.356722][ T5915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (5915) [ 85.434883][ T5915] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.462137][ T5915] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 85.484718][ T5915] BTRFS info (device loop2): doing ref verification [ 85.499159][ T5915] BTRFS info (device loop2): setting nodatacow, compression disabled [ 85.517235][ T5915] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 85.550010][ T5915] BTRFS info (device loop2): trying to use backup root at mount time [ 85.576926][ T5915] BTRFS info (device loop2): metadata ratio 5 [ 85.592445][ T5915] BTRFS info (device loop2): using free space tree [ 85.750418][ T5915] BTRFS info (device loop2): enabling ssd optimizations [ 85.757897][ T5915] BTRFS info (device loop2): auto enabling async discard [ 85.838084][ T5929] loop1: detected capacity change from 0 to 32768 [ 85.882643][ T5929] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.21 (5929) [ 85.944018][ T5929] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 85.997961][ T5929] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.070426][ T5929] BTRFS info (device loop1): enabling ssd optimizations [ 86.134670][ T5929] BTRFS info (device loop1): turning on sync discard [ 86.237235][ T5929] BTRFS info (device loop1): using free space tree [ 87.195295][ T971] cfg80211: failed to load regulatory.db [ 87.521751][ T5963] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 87.608015][ T5761] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.122388][ T5929] BTRFS info (device loop1): balance: start [ 88.129753][ T5929] BTRFS info (device loop1): balance: ended with status: 0 [ 88.412594][ T5764] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 88.529113][ T5978] loop3: detected capacity change from 0 to 4096 [ 88.559142][ T5978] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 88.608612][ T5978] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 88.671405][ T5978] ntfs3: loop3: Failed to load $MFTMirr (-2). [ 88.710157][ T5978] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.024849][ T5754] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (5754) [ 89.300944][ T5994] loop2: detected capacity change from 0 to 512 [ 89.372363][ T5994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.496861][ T5994] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.30: iget: bad i_size value: 38620345925642 [ 89.512460][ T5971] loop0: detected capacity change from 0 to 32768 [ 89.545229][ T5971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.24 (5971) [ 89.579735][ T5994] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.30: couldn't read orphan inode 15 (err -117) [ 89.598691][ T5971] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.647839][ T5971] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.655806][ T6001] Zero length message leads to an empty skb [ 89.688344][ T5971] BTRFS info (device loop0): turning on flush-on-commit [ 89.747941][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.889827][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.916214][ T5971] BTRFS info (device loop0): max_inline at 4096 [ 89.965388][ T5971] BTRFS info (device loop0): enabling disk space caching [ 89.969493][ T6003] netlink: 'syz.3.32': attribute type 4 has an invalid length. [ 89.993931][ T5994] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.020129][ T5971] BTRFS info (device loop0): turning off barriers [ 90.027020][ T5971] BTRFS info (device loop0): disabling tree log [ 90.090168][ T5971] BTRFS info (device loop0): enabling ssd optimizations [ 90.099413][ T5971] BTRFS info (device loop0): force clearing of disk cache [ 90.207819][ T5971] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.271177][ T5998] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 90.290140][ T5971] BTRFS info (device loop0): use zstd compression, level 3 [ 90.307828][ T5971] BTRFS info (device loop0): max_inline at 0 [ 90.327694][ T5971] BTRFS info (device loop0): disk space caching is enabled [ 90.376966][ T5761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.361669][ T5971] BTRFS error (device loop0): open_ctree failed: -4 [ 93.064923][ T6047] loop2: detected capacity change from 0 to 22 [ 93.206933][ T5754] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.495296][ T6051] loop0: detected capacity change from 0 to 4096 [ 93.512554][ T6051] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 93.580407][ T6051] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 93.629111][ T6051] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.675092][ T6051] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 93.738871][ T6051] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.756975][ T6051] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 93.812256][ T6051] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.839824][ T6051] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 93.851740][ T6038] loop1: detected capacity change from 0 to 32768 [ 93.886051][ T6051] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.907221][ T6038] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.36 (6038) [ 93.926317][ T6051] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 93.986074][ T6038] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 94.015477][ T6051] ntfs: volume version 3.1. [ 94.017093][ T6038] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 94.049479][ T6038] BTRFS info (device loop1): enabling disk space caching [ 94.100159][ T6038] BTRFS info (device loop1): force clearing of disk cache [ 94.108101][ T6038] BTRFS info (device loop1): force zlib compression, level 3 [ 94.150058][ T6038] BTRFS info (device loop1): disk space caching is enabled [ 94.310133][ T6038] BTRFS info (device loop1): enabling ssd optimizations [ 94.317435][ T6038] BTRFS info (device loop1): auto enabling async discard [ 94.368317][ T6038] BTRFS info (device loop1): rebuilding free space tree [ 94.530672][ T6038] BTRFS info (device loop1): disabling free space tree [ 94.558653][ T6038] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.576878][ T6038] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.099146][ T5764] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 95.384287][ T6087] syz.2.46: attempt to access beyond end of device [ 95.384287][ T6087] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 95.400657][ T6087] syz.2.46: attempt to access beyond end of device [ 95.400657][ T6087] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 95.413923][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 95.424006][ T6087] syz.2.46: attempt to access beyond end of device [ 95.424006][ T6087] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 95.437538][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 95.449624][ T6087] syz.2.46: attempt to access beyond end of device [ 95.449624][ T6087] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 95.463289][ T6087] syz.2.46: attempt to access beyond end of device [ 95.463289][ T6087] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 95.476336][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 95.487968][ T6087] syz.2.46: attempt to access beyond end of device [ 95.487968][ T6087] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 95.510397][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 95.520770][ T6087] syz.2.46: attempt to access beyond end of device [ 95.520770][ T6087] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 95.533770][ T6087] syz.2.46: attempt to access beyond end of device [ 95.533770][ T6087] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 95.546958][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 95.556967][ T6087] syz.2.46: attempt to access beyond end of device [ 95.556967][ T6087] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 95.569889][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 95.580969][ T6087] syz.2.46: attempt to access beyond end of device [ 95.580969][ T6087] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 95.594378][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 95.604232][ T6087] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 95.624328][ T6087] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 96.919996][ C0] sched: RT throttling activated [ 96.958365][ T6093] loop3: detected capacity change from 0 to 131072 [ 96.985323][ T6093] F2FS-fs (loop3): invalid crc value [ 97.114647][ T6093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.235161][ T6093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 97.905463][ T6109] input: syz1 as /devices/virtual/input/input5 [ 98.220975][ T6117] tmpfs: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 98.402791][ T6113] loop0: detected capacity change from 0 to 8192 [ 98.445960][ T6113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.555205][ T6113] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 98.610287][ T6113] REISERFS (device loop0): using ordered data mode [ 98.630091][ T6113] reiserfs: using flush barriers [ 98.669167][ T6117] process 'syz.2.56' launched './file1' with NULL argv: empty string added [ 98.678001][ T6113] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.697669][ T6121] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 98.710545][ T6113] REISERFS (device loop0): checking transaction log (loop0) [ 99.048424][ T6113] REISERFS (device loop0): Using tea hash to sort names [ 99.086952][ T6113] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.439275][ T6131] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 101.055603][ T6144] loop0: detected capacity change from 0 to 16 [ 101.087018][ T6144] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.236951][ T6144] capability: warning: `syz.0.63' uses deprecated v2 capabilities in a way that may be insecure [ 102.840656][ T971] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 103.239765][ T6155] loop1: detected capacity change from 0 to 32768 [ 103.320397][ T6155] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 103.418124][ T6155] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 103.546454][ T6151] loop0: detected capacity change from 0 to 32768 [ 103.627013][ T6155] syz.1.68 (6155) used greatest stack depth: 19248 bytes left [ 103.697940][ T6151] [ 103.697940][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.697940][ T6151] [ 103.749380][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 103.849909][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 103.959661][ T6151] [ 103.959661][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.959661][ T6151] [ 104.010614][ T6151] [ 104.010614][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.010614][ T6151] [ 104.104013][ T6151] [ 104.104013][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.104013][ T6151] [ 104.132199][ T6151] [ 104.132199][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.132199][ T6151] [ 104.177697][ T6151] [ 104.177697][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.177697][ T6151] [ 104.229038][ T113] [ 104.229038][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.229038][ T113] [ 104.332544][ T2984] [ 104.332544][ T2984] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.332544][ T2984] [ 104.351636][ T2984] [ 104.351636][ T2984] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.351636][ T2984] [ 104.399175][ T113] [ 104.399175][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.399175][ T113] [ 104.420439][ T5771] [ 104.420439][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.420439][ T5771] [ 104.434784][ T5771] [ 104.434784][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.434784][ T5771] [ 104.512392][ T6190] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 104.552617][ T6190] netlink: 'syz.2.76': attribute type 2 has an invalid length. [ 104.577009][ T6190] netlink: 252 bytes leftover after parsing attributes in process `syz.2.76'. [ 104.606990][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.722988][ T6192] loop3: detected capacity change from 0 to 1024 [ 104.754718][ T6192] EXT4-fs: Ignoring removed orlov option [ 104.889638][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.740393][ T5810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.874806][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.038731][ T5810] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 107.078187][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.834884][ T5810] usb 3-1: config 0 descriptor?? [ 108.287301][ T6220] loop1: detected capacity change from 0 to 32768 [ 108.303785][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.320124][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.336882][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.365234][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.380937][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.388719][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.396734][ T5810] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 108.402916][ T6220] (syz.1.82,6220,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 108.402916][ T6220] found = 0, set = 0, taken = 0, off = 1280 [ 108.415042][ T5810] elecom 0003:056E:00FB.0001: hidraw0: USB HID v10.00 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 108.444465][ T6220] (syz.1.82,6220,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 108.455034][ T6220] (syz.1.82,6220,1):ocfs2_check_volume:2460 ERROR: status = -22 [ 108.468498][ T6220] (syz.1.82,6220,1):ocfs2_check_volume:2488 ERROR: status = -22 [ 108.477037][ T6220] (syz.1.82,6220,1):ocfs2_mount_volume:1820 ERROR: status = -22 [ 108.498961][ T6220] (syz.1.82,6220,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 108.544110][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.600877][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.672794][ T5810] usb 3-1: USB disconnect, device number 3 [ 108.777867][ T6229] fido_id[6229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 109.288658][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 109.330347][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 109.385132][ T6237] dummy0: entered promiscuous mode [ 109.401769][ T6237] team0: entered promiscuous mode [ 109.417765][ T6237] team_slave_0: entered promiscuous mode [ 109.430379][ T6237] team_slave_1: entered promiscuous mode [ 109.959154][ T6253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.88'. [ 110.884034][ T6264] syzkaller0: entered promiscuous mode [ 110.905391][ T6264] syzkaller0: entered allmulticast mode [ 110.997118][ T6264] tipc: Started in network mode [ 111.022952][ T6264] tipc: Node identity 4ab92e80d01, cluster identity 4711 [ 111.040603][ T6264] tipc: Enabled bearer , priority 10 [ 111.066179][ T6263] tipc: Resetting bearer [ 111.152584][ T6263] tipc: Disabling bearer [ 111.255634][ T6249] loop0: detected capacity change from 0 to 32768 [ 111.266758][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 111.327380][ T6249] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 111.364347][ T6280] netlink: 84 bytes leftover after parsing attributes in process `syz.3.96'. [ 111.366278][ T6249] (syz.0.89,6249,0):ocfs2_read_journal_inode:1659 ERROR: status = -13 [ 111.410526][ T6249] (syz.0.89,6249,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13 [ 111.419823][ T6249] (syz.0.89,6249,1):ocfs2_check_volume:2476 ERROR: status = -13 [ 111.428328][ T5803] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.436762][ T6249] (syz.0.89,6249,1):ocfs2_check_volume:2488 ERROR: status = -13 [ 111.445315][ T6249] (syz.0.89,6249,1):ocfs2_mount_volume:1820 ERROR: status = -13 [ 111.534995][ T6249] (syz.0.89,6249,1):ocfs2_fill_super:1178 ERROR: status = -13 [ 111.808736][ T5803] usb 3-1: Using ep0 maxpacket: 8 [ 111.818937][ T5803] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.832928][ T5803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.843942][ T5803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.855065][ T5803] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.872365][ T5803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.937054][ T6290] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.97'. [ 111.999048][ T6291] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.017831][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.891444][ T971] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.960613][ T6293] FAULT_INJECTION: forcing a failure. [ 112.960613][ T6293] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.980264][ T6293] CPU: 1 PID: 6293 Comm: syz.3.99 Not tainted syzkaller #0 [ 112.987630][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.997994][ T6293] Call Trace: [ 113.001516][ T6293] [ 113.004595][ T6293] dump_stack_lvl+0x16c/0x230 [ 113.007791][ T6273] loop2: detected capacity change from 0 to 4096 [ 113.009391][ T6293] ? show_regs_print_info+0x20/0x20 [ 113.021846][ T6293] ? load_image+0x3b0/0x3b0 [ 113.026367][ T6293] ? __lock_acquire+0x7c80/0x7c80 [ 113.031412][ T6293] ? snprintf+0xdb/0x120 [ 113.035875][ T6293] should_fail_ex+0x39d/0x4d0 [ 113.040681][ T6293] _copy_to_user+0x2f/0xa0 [ 113.045115][ T6293] simple_read_from_buffer+0xe7/0x150 [ 113.050589][ T6293] proc_fail_nth_read+0x1e3/0x250 [ 113.055632][ T6293] ? proc_fault_inject_write+0x340/0x340 [ 113.061672][ T6293] ? fsnotify_perm+0x271/0x5e0 [ 113.066685][ T6293] ? proc_fault_inject_write+0x340/0x340 [ 113.072401][ T6293] vfs_read+0x27e/0x920 [ 113.076658][ T6293] ? kernel_read+0x1e0/0x1e0 [ 113.081251][ T6293] ? __fget_files+0x28/0x4d0 [ 113.086174][ T6293] ? __fget_files+0x44a/0x4d0 [ 113.090872][ T6293] ? __fdget_pos+0x2a3/0x330 [ 113.095857][ T6293] ? ksys_read+0x75/0x250 [ 113.100294][ T6293] ksys_read+0x147/0x250 [ 113.104731][ T6293] ? vfs_write+0x940/0x940 [ 113.109392][ T6293] ? lockdep_hardirqs_on+0x98/0x150 [ 113.114680][ T6293] do_syscall_64+0x55/0xb0 [ 113.119797][ T6293] ? clear_bhb_loop+0x40/0x90 [ 113.124552][ T6293] ? clear_bhb_loop+0x40/0x90 [ 113.129404][ T6293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.135603][ T6293] RIP: 0033:0x7f2790d8e15c [ 113.140179][ T6293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.160150][ T6293] RSP: 002b:00007f2791be3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.169076][ T6293] RAX: ffffffffffffffda RBX: 00007f2790fe5fa0 RCX: 00007f2790d8e15c [ 113.177404][ T6293] RDX: 000000000000000f RSI: 00007f2791be30a0 RDI: 0000000000000004 [ 113.185906][ T6293] RBP: 00007f2791be3090 R08: 0000000000000000 R09: 0000000000000000 [ 113.194157][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.202141][ T6293] R13: 00007f2790fe6038 R14: 00007f2790fe5fa0 R15: 00007ffc4e100e28 [ 113.210207][ T6293] [ 113.260189][ T6273] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 113.307441][ T6273] ntfs3: loop2: failed to convert "c46c" to ascii [ 113.323349][ T5803] usb 3-1: GET_CAPABILITIES returned 0 [ 113.329559][ T5803] usbtmc 3-1:16.0: can't read capabilities [ 113.394860][ T971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.412341][ T971] usb 1-1: not running at top speed; connect to a high speed hub [ 113.422217][ T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.436663][ T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.464921][ T971] usb 1-1: string descriptor 0 read error: -22 [ 113.472976][ T971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.496708][ T6295] loop3: detected capacity change from 0 to 512 [ 113.530041][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.693871][ T971] usb 1-1: 0:2 : does not exist [ 114.586521][ T6295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.611347][ T6295] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.738719][ T6295] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.100: invalid size [ 114.795194][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.471788][ T6311] Cannot find set identified by id 0 to match [ 115.484684][ T6311] overlayfs: failed to resolve 'fowner=00000000000000000000': -2 [ 115.486477][ T971] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 115.507465][ T971] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.521840][ T971] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 115.614999][ T5803] usb 3-1: USB disconnect, device number 4 [ 115.736388][ T971] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.769023][ T971] usb 1-1: USB disconnect, device number 2 [ 116.257538][ T6331] syz.1.109 uses obsolete (PF_INET,SOCK_PACKET) [ 116.344389][ T5803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.355193][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 116.386747][ T6333] loop3: detected capacity change from 0 to 512 [ 116.456637][ T6333] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 116.550117][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 116.595916][ T5803] usb 3-1: config 0 has no interfaces? [ 116.635353][ T5803] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 116.724141][ T6333] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.110: bad orphan inode 15 [ 116.745962][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.853115][ T5803] usb 3-1: Product: syz [ 116.889568][ T6333] ext4_test_bit(bit=14, block=18) = 1 [ 116.926767][ T5803] usb 3-1: Manufacturer: syz [ 116.962884][ T6333] is_bad_inode(inode)=0 [ 116.996101][ T5803] usb 3-1: SerialNumber: syz [ 117.024904][ T6333] NEXT_ORPHAN(inode)=1023 [ 117.077497][ T6333] max_ino=32 [ 117.086348][ T6339] syzkaller0: entered promiscuous mode [ 117.092388][ T6333] i_nlink=0 [ 117.109796][ T6333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 117.123002][ T6339] syzkaller0: entered allmulticast mode [ 117.137179][ T5803] usb 3-1: config 0 descriptor?? [ 117.188897][ T6333] ext2 filesystem being mounted at /29/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 117.216728][ T6340] tipc: Started in network mode [ 117.236866][ T6340] tipc: Node identity 7e522e723112, cluster identity 4711 [ 117.277801][ T6340] tipc: Enabled bearer , priority 0 [ 117.324985][ T6338] tipc: Resetting bearer [ 117.441202][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 117.454960][ T6338] tipc: Disabling bearer [ 117.663481][ T5823] usb 3-1: USB disconnect, device number 5 [ 117.676348][ T6343] loop3: detected capacity change from 0 to 4096 [ 117.713661][ T6343] ntfs3: loop3: Failed to load $Volume (-22). [ 117.882045][ T6352] fuse: Bad value for 'fd' [ 117.944679][ T6350] sp0: Synchronizing with TNC [ 118.003368][ T6357] sch_fq: defrate 7 ignored. [ 118.142358][ T6350] loop1: detected capacity change from 0 to 1764 [ 118.223940][ T6350] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 118.422979][ T6363] 8021q: VLANs not supported on vxcan1 [ 118.440482][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 118.449542][ T6364] bridge_slave_1: left allmulticast mode [ 118.465335][ T6364] bridge_slave_1: left promiscuous mode [ 118.504870][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.541245][ T6364] bridge_slave_0: left allmulticast mode [ 118.547132][ T6364] bridge_slave_0: left promiscuous mode [ 118.566739][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.925649][ T6357] loop3: detected capacity change from 0 to 32768 [ 119.282863][ T6357] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 119.653096][ T6357] (syz.3.117,6357,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 119.735959][ T6357] ocfs2: Unmounting device (7,3) on (node local) [ 119.966815][ T6376] loop1: detected capacity change from 0 to 64 [ 120.103123][ T6361] loop0: detected capacity change from 0 to 40427 [ 120.171364][ T6361] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 120.178400][ T6361] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.217664][ T6361] F2FS-fs (loop0): build fault injection attr: rate: 2, type: 0x7ffff [ 120.240181][ T6361] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 122.264902][ T6398] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.035520][ T6385] loop2: detected capacity change from 0 to 32768 [ 123.080948][ T6385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.125 (6385) [ 123.129613][ T6385] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.153304][ T6385] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 123.186580][ T6385] BTRFS info (device loop2): force clearing of disk cache [ 123.221199][ T6385] BTRFS info (device loop2): enabling auto defrag [ 123.228799][ T6385] BTRFS info (device loop2): enabling ssd optimizations [ 123.250184][ T6385] BTRFS info (device loop2): max_inline at 0 [ 123.259192][ T6385] BTRFS info (device loop2): enabling disk space caching [ 123.285816][ T6385] BTRFS error (device loop2): unrecognized mount option 'fowner>00000000000000000000' [ 123.322929][ T6385] BTRFS error (device loop2): open_ctree failed: -22 [ 123.435207][ T6208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6208) [ 123.533915][ T6404] netlink: 48 bytes leftover after parsing attributes in process `syz.3.132'. [ 123.767363][ T6404] loop3: detected capacity change from 0 to 1024 [ 124.609753][ T6404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.736816][ T6416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.134'. [ 125.387367][ T6423] program syz.2.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.068729][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.303801][ T6429] loop1: detected capacity change from 0 to 1024 [ 126.464080][ T6429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.659211][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.516305][ T6447] input: syz1 as /devices/virtual/input/input6 [ 127.578956][ T6450] syz.3.144[6450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.579227][ T6450] syz.3.144[6450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.832433][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 127.862447][ T6445] loop1: detected capacity change from 0 to 32768 [ 127.892228][ T6445] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.068998][ T6471] loop3: detected capacity change from 0 to 32768 [ 129.112484][ T6427] block nbd2: shutting down sockets [ 129.143070][ T6471] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.239332][ T6471] XFS (loop3): Ending clean mount [ 129.253388][ T6471] XFS (loop3): Quotacheck needed: Please wait. [ 129.344895][ T6445] XFS (loop1): Ending clean mount [ 129.358008][ T6471] XFS (loop3): Quotacheck: Done. [ 129.421793][ T6445] XFS (loop1): Quotacheck needed: Please wait. [ 129.527859][ T6445] XFS (loop1): Quotacheck: Done. [ 129.763614][ T5766] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.916852][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.100121][ T5803] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.330096][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 130.337476][ T5803] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 130.360703][ T5803] usb 3-1: config 0 has no interface number 0 [ 130.367254][ T5803] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 130.397870][ T5803] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 130.409791][ T5803] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 130.424484][ T5803] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 130.439504][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.448285][ T5803] usb 3-1: Product: syz [ 130.452830][ T5803] usb 3-1: Manufacturer: syz [ 130.457538][ T5803] usb 3-1: SerialNumber: syz [ 130.466333][ T5803] usb 3-1: config 0 descriptor?? [ 130.473478][ T6487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.482660][ T6487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.516990][ T6478] loop0: detected capacity change from 0 to 40427 [ 130.551655][ T6478] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 130.577155][ T6478] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.621764][ T6478] F2FS-fs (loop0): invalid crc value [ 130.638164][ T6478] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.705619][ T5803] net1080: probe of 3-1:0.147 failed with error -71 [ 130.723609][ T5803] usb 3-1: USB disconnect, device number 6 [ 130.735860][ T6478] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.743683][ T6478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.880235][ T5810] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 131.082420][ T5810] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 131.094967][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 131.125215][ T5810] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 131.144606][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.170290][ T5810] usb 2-1: Product: syz [ 131.175247][ T5810] usb 2-1: Manufacturer: syz [ 131.186142][ T5810] usb 2-1: SerialNumber: syz [ 131.196850][ T5810] usb 2-1: config 0 descriptor?? [ 131.206890][ T5810] hub 2-1:0.0: bad descriptor, ignoring hub [ 131.218695][ T5810] hub: probe of 2-1:0.0 failed with error -5 [ 131.234609][ T5810] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 131.252445][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.147'. [ 131.287079][ T5810] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 131.356729][ T5810] usbtouchscreen: probe of 2-1:0.0 failed with error -90 [ 131.600383][ T5823] usb 2-1: USB disconnect, device number 2 [ 131.658682][ T6513] input: syz0 as /devices/virtual/input/input8 [ 131.684657][ T5810] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.073150][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 132.081109][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.093484][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.106157][ T5810] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.120073][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.128224][ T5810] usb 3-1: Product: syz [ 132.132802][ T5810] usb 3-1: Manufacturer: syz [ 132.138238][ T5810] usb 3-1: SerialNumber: syz [ 132.797892][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 132.917096][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943311][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.474501][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 134.409814][ T6530] syz.3.161 (6530) used greatest stack depth: 17576 bytes left [ 136.382637][ T5810] usb 3-1: 0:2 : does not exist [ 136.430447][ T5810] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 136.544772][ T5810] usb 3-1: USB disconnect, device number 7 [ 138.385248][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.800581][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.036831][ T5823] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 139.060091][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 139.078726][ T5823] usb 2-1: Product: syz [ 139.088898][ T5823] usb 2-1: SerialNumber: syz [ 139.105048][ T5823] usb 2-1: config 0 descriptor?? [ 139.222975][ T6552] loop3: detected capacity change from 0 to 32768 [ 139.284149][ T6552] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.170 (6552) [ 139.348596][ T6552] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 139.379374][ T6552] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 139.392998][ T6552] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 139.410699][ T6554] netlink: 44 bytes leftover after parsing attributes in process `syz.0.164'. [ 139.429988][ T6552] BTRFS info (device loop3): use zstd compression, level 3 [ 139.437363][ T6552] BTRFS info (device loop3): using free space tree [ 139.450209][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.164'. [ 139.494180][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.580909][ T6552] BTRFS info (device loop3): enabling ssd optimizations [ 139.587950][ T6552] BTRFS info (device loop3): auto enabling async discard [ 140.606408][ T6572] mmap: syz.2.169 (6572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.688915][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 140.724550][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'. [ 141.268662][ T6583] syzkaller0: entered promiscuous mode [ 141.291642][ T6583] syzkaller0: entered allmulticast mode [ 141.369003][ T6583] tipc: Started in network mode [ 141.374236][ T5766] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.385297][ T6583] tipc: Node identity 7a1670e46bdf, cluster identity 4711 [ 141.411498][ T6583] tipc: Enabled bearer , priority 0 [ 141.442791][ T6582] tipc: Resetting bearer [ 141.456325][ T5803] usb 2-1: USB disconnect, device number 3 [ 141.606948][ T6582] tipc: Disabling bearer [ 142.113001][ T6588] loop1: detected capacity change from 0 to 64 [ 142.226398][ T6600] loop2: detected capacity change from 0 to 7 [ 142.902524][ T6600] Dev loop2: unable to read RDB block 7 [ 142.908885][ T6600] loop2: AHDI p1 p2 p3 [ 142.914067][ T6600] loop2: partition table partially beyond EOD, truncated [ 142.921822][ T6600] loop2: p1 start 1601398130 is beyond EOD, truncated [ 142.928893][ T6600] loop2: p2 start 1702059890 is beyond EOD, truncated [ 143.360451][ T27] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 143.686686][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.701239][ T27] usb 2-1: not running at top speed; connect to a high speed hub [ 143.743606][ T27] usb 2-1: config 5 has an invalid interface number: 64 but max is 0 [ 143.754369][ T27] usb 2-1: config 5 has no interface number 0 [ 143.772634][ T27] usb 2-1: config 5 interface 64 has no altsetting 0 [ 143.817444][ T27] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 143.840066][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.890101][ T27] usb 2-1: Product: syz [ 143.894431][ T27] usb 2-1: Manufacturer: syz [ 143.900412][ T27] usb 2-1: SerialNumber: syz [ 145.420605][ T27] snd-usb-audio: probe of 2-1:5.64 failed with error -71 [ 145.440371][ T27] usb 2-1: USB disconnect, device number 4 [ 145.644704][ T6603] loop2: detected capacity change from 0 to 40427 [ 145.681059][ T6603] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 0) [ 145.698848][ T6603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 145.838049][ T6630] netlink: 376 bytes leftover after parsing attributes in process `syz.1.185'. [ 148.818319][ T6638] loop2: detected capacity change from 0 to 40427 [ 148.840601][ T6638] F2FS-fs (loop2): invalid crc value [ 148.871351][ T6638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.038248][ T6638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 149.097268][ T6638] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 150.024007][ T6676] loop2: detected capacity change from 0 to 2048 [ 150.042932][ T6679] loop1: detected capacity change from 0 to 16 [ 150.071306][ T6679] erofs: Unknown parameter 'erofs' [ 150.076072][ T6676] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.218037][ T6680] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.232231][ T6676] bio_check_eod: 2 callbacks suppressed [ 150.232249][ T6676] syz.2.199: attempt to access beyond end of device [ 150.232249][ T6676] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 150.347799][ T6676] syz.2.199: attempt to access beyond end of device [ 150.347799][ T6676] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 150.371466][ T6676] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 151.839138][ T6706] loop2: detected capacity change from 0 to 512 [ 151.902548][ T6699] loop0: detected capacity change from 0 to 4096 [ 151.938263][ T6706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.980816][ T6706] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.140114][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.384282][ T8] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 152.393723][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.423090][ T8] usb 2-1: config 0 descriptor?? [ 152.580137][ T5841] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.870466][ T8] kaweth 2-1:0.0: Firmware present in device. [ 153.679810][ T8] kaweth 2-1:0.0: Statistics collection: 0 [ 153.687561][ T8] kaweth 2-1:0.0: Multicast filter limit: 0 [ 153.693649][ T8] kaweth 2-1:0.0: MTU: 0 [ 153.697946][ T8] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 153.710113][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 153.718240][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.732816][ T5841] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 153.742011][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.754700][ T5841] usb 1-1: config 0 descriptor?? [ 153.936834][ T6703] syzkaller0: entered promiscuous mode [ 153.974891][ T6703] syzkaller0: entered allmulticast mode [ 154.012859][ T6732] loop1: detected capacity change from 0 to 256 [ 154.084391][ T6741] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.206057][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.250302][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.278946][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.305802][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.333715][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.370338][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.398070][ T5841] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 154.450981][ T5841] kye 0003:0458:4018.0002: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 154.745967][ T8] kaweth 2-1:0.0: Error setting receive filter [ 154.783101][ T8] kaweth: probe of 2-1:0.0 failed with error -5 [ 154.809404][ T5823] usb 1-1: USB disconnect, device number 3 [ 154.820824][ T8] usb 2-1: USB disconnect, device number 5 [ 155.169845][ T5761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.275531][ T6767] loop2: detected capacity change from 0 to 512 [ 155.293692][ T6767] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 155.311525][ T6767] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.380111][ T6767] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 155.400306][ T6767] EXT4-fs (loop2): 1 truncate cleaned up [ 155.438104][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.475959][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 155.475975][ T28] audit: type=1326 audit(1765634832.264:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.0.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa68df8f749 code=0x7ffe0000 [ 156.328250][ T5761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.245368][ T6794] loop2: detected capacity change from 0 to 128 [ 157.304912][ T6794] FAT-fs (loop2): bogus number of FAT sectors [ 157.346382][ T6794] FAT-fs (loop2): Can't find a valid FAT filesystem [ 157.446185][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'. [ 157.510826][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 158.892930][ T6794] loop2: detected capacity change from 0 to 32768 [ 159.156864][ T6801] loop3: detected capacity change from 0 to 32768 [ 159.180424][ T789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.230641][ T6801] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.270201][ T6801] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.290652][ T6801] BTRFS info (device loop3): disabling free space tree [ 159.297846][ T6801] BTRFS error (device loop3): unrecognized mount option 'dont_measure' [ 159.320852][ T6801] BTRFS error (device loop3): cannot disable free space tree [ 159.345760][ T6801] BTRFS error (device loop3): open_ctree failed: -22 [ 159.420652][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 159.453867][ T789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.480876][ T5754] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5754) [ 159.520059][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.553112][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.574310][ T789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.628098][ T789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.653564][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.077256][ T789] usb 2-1: GET_CAPABILITIES returned 0 [ 160.084634][ T789] usbtmc 2-1:16.0: can't read capabilities [ 160.270885][ T5841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 160.561027][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 160.726118][ T5841] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 160.963738][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.882019][ T5841] usb 4-1: config 0 descriptor?? [ 162.010483][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.022826][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.033305][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.042623][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.053007][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.062310][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.072096][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.081832][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.091360][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.100476][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.110476][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.119682][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.129484][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.139196][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.149112][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.158689][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.731557][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.852543][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.031125][ T5841] wacom 0003:056A:00F0.0003: hidraw0: USB HID v0.04 Device [HID 056a:00f0] on usb-dummy_hcd.3-1/input0 [ 164.046650][ T5841] usb 4-1: USB disconnect, device number 2 [ 164.111868][ T6842] loop3: detected capacity change from 0 to 1024 [ 164.169738][ T6843] fido_id[6843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 164.218139][ T5810] usb 2-1: USB disconnect, device number 6 [ 164.468711][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 164.474261][ T6849] loop2: detected capacity change from 0 to 256 [ 164.610351][ T6851] netlink: 'syz.1.235': attribute type 6 has an invalid length. [ 165.626963][ T6857] loop1: detected capacity change from 0 to 1024 [ 165.969106][ T49] hfsplus: b-tree write err: -5, ino 4 [ 166.130118][ T5810] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.336518][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 166.362148][ T5810] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 166.412290][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.467534][ T5810] usb 3-1: Product: syz [ 166.480234][ T5810] usb 3-1: Manufacturer: syz [ 166.509696][ T5810] usb 3-1: SerialNumber: syz [ 166.631216][ T5810] r8152-cfgselector 3-1: config 0 descriptor?? [ 167.095769][ T5810] r8152-cfgselector 3-1: Needed 1 retries to read version [ 167.122197][ T5810] r8152-cfgselector 3-1: Unknown version 0x0000 [ 167.152169][ T5810] r8152-cfgselector 3-1: bad CDC descriptors [ 167.207182][ T2924] hfsplus: b-tree write err: -5, ino 4 [ 167.341911][ T5810] r8152-cfgselector 3-1: Unknown version 0x0000 [ 167.397052][ T5810] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 167.754749][ T6874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.243'. [ 167.787788][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.841595][ T6874] netlink: 76 bytes leftover after parsing attributes in process `syz.0.243'. [ 167.860366][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.867763][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.889793][ T6874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.243'. [ 167.914933][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.326840][ T6879] loop2: detected capacity change from 0 to 131072 [ 169.424706][ T6879] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 169.436230][ T6879] F2FS-fs (loop2): invalid crc value [ 169.472069][ T6879] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1 [ 169.516694][ T6879] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 169.975847][ T6896] loop2: detected capacity change from 0 to 8 [ 169.996074][ T6896] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 171.520682][ T6901] loop3: detected capacity change from 0 to 4096 [ 171.732363][ T6901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.870089][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.882220][ T6901] fs-verity (loop3, inode 16): Unknown hash algorithm number: 0 [ 171.896098][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 171.958628][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 171.977597][ T6904] could not allocate digest TFM handle cryptd(blake2b-160) [ 172.055108][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 172.128548][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 172.135694][ T5823] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.135756][ T5823] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.135776][ T5823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.135821][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.213486][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 172.230383][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 172.231460][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.246514][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 172.296894][ T5823] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.306440][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.315817][ T5823] usb 1-1: Product: syz [ 172.322654][ T5823] usb 1-1: Manufacturer: syz [ 172.326925][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 172.348483][ T5823] cdc_wdm 1-1:1.0: skipping garbage [ 172.368936][ T5823] cdc_wdm 1-1:1.0: skipping garbage [ 172.388080][ T6208] udevd[6208]: incorrect cramfs checksum on /dev/loop2 [ 172.392380][ T5823] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 172.418786][ T5823] cdc_wdm 1-1:1.0: Unknown control protocol [ 172.478135][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.501545][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 172.521868][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.540078][ T5841] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.547892][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.567447][ T8] usb 4-1: string descriptor 0 read error: -22 [ 172.577810][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.608102][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.664253][ T8] usb 4-1: 0:2 : does not exist [ 172.678704][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 172.679118][ T5823] usb 1-1: USB disconnect, device number 4 [ 172.685560][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 172.697514][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 172.743993][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.777859][ T5949] udevd[5949]: incorrect cramfs checksum on /dev/loop2 [ 172.780981][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.816870][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.850065][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.869538][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.894245][ T5841] usb 2-1: config 0 descriptor?? [ 173.315189][ T5841] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 173.352300][ T5841] plantronics 0003:047F:FFFF.0004: parse failed [ 173.359016][ T5841] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 173.630549][ T5823] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.805376][ T6923] loop0: detected capacity change from 0 to 32768 [ 173.819822][ T6923] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.255 (6923) [ 173.852675][ T6923] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 173.854052][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 173.874469][ T6923] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 173.884906][ T6923] BTRFS info (device loop0): enabling ssd optimizations [ 173.892797][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 173.892991][ T6923] BTRFS info (device loop0): not using ssd optimizations [ 173.908825][ T5823] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 173.910898][ T6923] BTRFS info (device loop0): turning off barriers [ 173.921978][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.934299][ T6923] BTRFS info (device loop0): using free space tree [ 173.965590][ T5823] usb 3-1: Product: syz [ 173.978450][ T5823] usb 3-1: Manufacturer: syz [ 173.990573][ T5823] usb 3-1: SerialNumber: syz [ 174.024862][ T5823] usb 3-1: config 0 descriptor?? [ 174.036322][ T5823] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 174.304043][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.357708][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.405613][ T5823] usb 3-1: USB disconnect, device number 9 [ 174.411667][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 174.421985][ T8] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 174.490148][ T8] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.525793][ T8] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 174.661210][ T8] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.695337][ T8] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 174.754527][ T8] usb 4-1: USB disconnect, device number 3 [ 174.770946][ T5771] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 175.263453][ T5823] usb 2-1: USB disconnect, device number 7 [ 175.534157][ T6967] loop1: detected capacity change from 0 to 1024 [ 175.909139][ T2946] hfsplus: b-tree write err: -5, ino 4 [ 176.032482][ T5823] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.062555][ T6978] netlink: 164 bytes leftover after parsing attributes in process `syz.1.263'. [ 176.078744][ T6978] netlink: 164 bytes leftover after parsing attributes in process `syz.1.263'. [ 176.100326][ T6978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.263'. [ 176.206470][ T6961] loop0: detected capacity change from 0 to 32768 [ 176.240206][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 176.255315][ T5823] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 176.255704][ T6961] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.283408][ T5823] usb 4-1: config 0 has no interface number 0 [ 176.303101][ T5823] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 176.329865][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.341411][ T5823] usb 4-1: Product: syz [ 176.346565][ T5823] usb 4-1: Manufacturer: syz [ 176.353890][ T5823] usb 4-1: SerialNumber: syz [ 176.367741][ T5823] usb 4-1: config 0 descriptor?? [ 176.370185][ T6961] XFS (loop0): Ending clean mount [ 176.575669][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.029215][ T6988] loop1: detected capacity change from 0 to 32768 [ 177.074490][ T6988] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.284544][ T6988] XFS (loop1): Ending clean mount [ 177.299249][ T6988] XFS (loop1): Quotacheck needed: Please wait. [ 177.456361][ T6988] XFS (loop1): Quotacheck: Done. [ 177.910162][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.150102][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 178.175311][ T5841] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 178.199083][ T5841] usb 2-1: config 0 has no interface number 0 [ 178.213066][ T5841] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 178.238106][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.266884][ T5841] usb 2-1: Product: syz [ 178.277472][ T5841] usb 2-1: Manufacturer: syz [ 178.286671][ T5841] usb 2-1: SerialNumber: syz [ 178.307150][ T5841] usb 2-1: config 0 descriptor?? [ 178.348584][ T5841] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 178.377731][ T5841] usb 2-1: Detected SIO [ 178.407565][ T5841] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.584231][ T5841] usb 2-1: USB disconnect, device number 8 [ 178.654772][ T5841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.723327][ T5841] ftdi_sio 2-1:0.217: device disconnected [ 178.877350][ T5823] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 178.899356][ T5823] gspca_sn9c2028: read1 error -71 [ 178.917182][ T5823] gspca_sn9c2028: read1 error -71 [ 178.932611][ T5823] gspca_sn9c2028: read1 error -71 [ 178.950462][ T5823] sn9c2028: probe of 4-1:0.119 failed with error -71 [ 178.981572][ T5823] usb 4-1: USB disconnect, device number 4 [ 179.262733][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.876691][ T7029] loop0: detected capacity change from 0 to 32768 [ 179.951770][ T7029] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.996680][ T7029] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 180.006362][ T7029] BTRFS info (device loop0): using free space tree [ 180.075453][ T7029] BTRFS info (device loop0): enabling ssd optimizations [ 180.084379][ T7029] BTRFS info (device loop0): auto enabling async discard [ 180.250633][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.300358][ T7029] syzkaller1: entered promiscuous mode [ 180.330112][ T7029] syzkaller1: entered allmulticast mode [ 180.456291][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 180.492335][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 180.514753][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 180.534963][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 180.558066][ T8] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 180.590330][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.598398][ T8] usb 2-1: Product: syz [ 180.629576][ T8] usb 2-1: Manufacturer: syz [ 180.640342][ T8] usb 2-1: SerialNumber: syz [ 180.659421][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.684447][ T8] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 180.830437][ T6208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (6208) [ 180.901336][ T7060] loop2: detected capacity change from 0 to 64 [ 180.980295][ T7062] netlink: 88 bytes leftover after parsing attributes in process `syz.1.275'. [ 181.375234][ T7068] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 181.672364][ T7070] loop0: detected capacity change from 0 to 256 [ 181.679566][ T7070] exfat: Deprecated parameter 'namecase' [ 181.742088][ T7070] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 182.607445][ T5767] Bluetooth: hci0: command 0x0406 tx timeout [ 182.890111][ T971] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.124983][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.170268][ T971] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 183.201862][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.213464][ T971] usb 3-1: config 0 descriptor?? [ 183.592060][ T5810] usb 2-1: USB disconnect, device number 9 [ 183.592630][ T7092] loop0: detected capacity change from 0 to 128 [ 183.625019][ T7092] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 183.664411][ T7092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.707774][ T7094] netlink: 300 bytes leftover after parsing attributes in process `syz.1.291'. [ 183.989417][ T971] usbhid 3-1:0.0: can't add hid device: -71 [ 184.016728][ T971] usbhid: probe of 3-1:0.0 failed with error -71 [ 184.027736][ T971] usb 3-1: USB disconnect, device number 10 [ 184.472342][ T7110] loop1: detected capacity change from 0 to 256 [ 184.516850][ T7110] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.556195][ T7110] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 185.818041][ T7110] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.953964][ T28] audit: type=1800 audit(1765634862.744:5): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 186.025760][ T7110] fuse: Bad value for 'group_id' [ 186.102474][ T7100] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 187.208586][ T7144] loop0: detected capacity change from 0 to 512 [ 187.249232][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 187.270482][ T7144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.306516][ T7144] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.358476][ T7144] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.309: corrupted inode contents [ 187.409523][ T7144] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.309: mark_inode_dirty error [ 187.449059][ T7144] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.309: corrupted inode contents [ 187.465489][ T7149] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.309: corrupted inode contents [ 187.576581][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.080170][ T7161] warning: `syz.3.314' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.111284][ T5841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.340167][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 188.404604][ T5841] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 188.727040][ T5841] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.743286][ T5841] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.770098][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.784906][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.796885][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 188.814853][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 188.825820][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.851977][ T5841] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.869223][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.886851][ T5841] usb 1-1: config 0 descriptor?? [ 188.896742][ T7152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.517626][ T7181] loop1: detected capacity change from 0 to 512 [ 189.603718][ T7181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.855285][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 189.934985][ T7181] EXT4-fs error (device loop1): ext4_group_add:1745: comm syz.1.319: inode #7: comm syz.1.319: iget: illegal inode # [ 190.116614][ T7181] EXT4-fs warning (device loop1): ext4_group_add:1747: Error opening resize inode [ 191.317663][ T971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.415253][ T5841] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 191.476133][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 191.480106][ T5767] Bluetooth: hci1: command 0x0406 tx timeout [ 191.482568][ T7178] Bluetooth: hci2: command 0x0406 tx timeout [ 191.488349][ T5767] Bluetooth: hci3: command 0x0406 tx timeout [ 191.515584][ T5841] usb 1-1: USB disconnect, device number 5 [ 191.535659][ T5841] usblp0: removed [ 191.560120][ T971] usb 2-1: Using ep0 maxpacket: 16 [ 191.609160][ T971] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 191.651974][ T971] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 191.678785][ T971] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 191.702619][ T971] usb 2-1: language id specifier not provided by device, defaulting to English [ 191.725602][ T971] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.740342][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.761687][ T971] usb 2-1: Product: syz [ 191.777056][ T971] usb 2-1: SerialNumber: syz [ 192.701678][ T971] cdc_ncm 2-1:1.0: bind() failure [ 192.791722][ T971] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 192.830810][ T971] cdc_ncm 2-1:1.1: bind() failure [ 192.843416][ T971] usb 2-1: USB disconnect, device number 10 [ 192.931274][ T7207] loop2: detected capacity change from 0 to 32768 [ 192.957342][ T7207] jfs_mount: Mount Failure: superblock is corrupt! [ 192.982153][ T7207] Mount JFS Failure: -22 [ 192.996827][ T7207] jfs_mount failed w/return code = -22 [ 193.140190][ T789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.387507][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.670028][ T5763] Bluetooth: hci3: command 0x0406 tx timeout [ 194.150040][ T789] usb 1-1: Using ep0 maxpacket: 16 [ 194.168546][ T789] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 194.204170][ T789] usb 1-1: config 5 has no interface number 0 [ 194.259651][ T789] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 1024 [ 194.375589][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.431449][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.445494][ T789] usb 1-1: config 5 interface 168 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 194.508421][ T789] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 0 [ 194.525630][ T789] usb 1-1: config 5 interface 168 has no altsetting 0 [ 194.542354][ T789] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 194.553791][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.563024][ T789] usb 1-1: Product: syz [ 194.596944][ T789] usb 1-1: Manufacturer: syz [ 194.596969][ T789] usb 1-1: SerialNumber: syz [ 194.611060][ T7218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.818659][ T789] pn533_usb 1-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 194.850507][ T789] usb 1-1: USB disconnect, device number 6 [ 195.270702][ T7250] IPv6: addrconf: prefix option has invalid lifetime [ 196.154633][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 196.463702][ T7244] loop2: detected capacity change from 0 to 32768 [ 196.656234][ T7244] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.264830][ T7244] XFS (loop2): Ending clean mount [ 197.317036][ T7244] XFS (loop2): Quotacheck needed: Please wait. [ 197.564746][ T7244] XFS (loop2): Quotacheck: Done. [ 198.624026][ T5761] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.686047][ T7258] loop1: detected capacity change from 0 to 32768 [ 198.700521][ T7258] XFS: noikeep mount option is deprecated. [ 198.897016][ T7258] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.051334][ T7258] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 199.090710][ T7258] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 199.134076][ T7258] XFS (loop1): Starting recovery (logdev: internal) [ 199.184315][ T7258] XFS (loop1): Ending recovery (logdev: internal) [ 199.198959][ T7288] FAULT_INJECTION: forcing a failure. [ 199.198959][ T7288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.240119][ T5841] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.247367][ T7288] CPU: 1 PID: 7288 Comm: syz.3.349 Not tainted syzkaller #0 [ 199.254967][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.265247][ T7288] Call Trace: [ 199.268564][ T7288] [ 199.271533][ T7288] dump_stack_lvl+0x16c/0x230 [ 199.276272][ T7288] ? show_regs_print_info+0x20/0x20 [ 199.281520][ T7288] ? load_image+0x3b0/0x3b0 [ 199.286168][ T7288] ? __might_fault+0xaa/0x120 [ 199.290890][ T7288] ? __lock_acquire+0x7c80/0x7c80 [ 199.296049][ T7288] should_fail_ex+0x39d/0x4d0 [ 199.300776][ T7288] _copy_from_user+0x2f/0xe0 [ 199.305432][ T7288] kstrtouint_from_user+0xc2/0x150 [ 199.310589][ T7288] ? kstrtol_from_user+0x150/0x150 [ 199.315755][ T7288] proc_fail_nth_write+0x89/0x240 [ 199.320820][ T7288] ? proc_fail_nth_read+0x250/0x250 [ 199.326066][ T7288] ? proc_fail_nth_read+0x250/0x250 [ 199.331312][ T7288] vfs_write+0x288/0x940 [ 199.335614][ T7288] ? file_end_write+0x250/0x250 [ 199.340511][ T7288] ? __fget_files+0x28/0x4d0 [ 199.345152][ T7288] ? __fget_files+0x44a/0x4d0 [ 199.349967][ T7288] ? __fdget_pos+0x2a3/0x330 [ 199.354594][ T7288] ? ksys_write+0x75/0x250 [ 199.359030][ T7288] ksys_write+0x147/0x250 [ 199.363374][ T7288] ? __ia32_sys_read+0x90/0x90 [ 199.368154][ T7288] ? lockdep_hardirqs_on+0x98/0x150 [ 199.373379][ T7288] do_syscall_64+0x55/0xb0 [ 199.377887][ T7288] ? clear_bhb_loop+0x40/0x90 [ 199.382581][ T7288] ? clear_bhb_loop+0x40/0x90 [ 199.387293][ T7288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.393196][ T7288] RIP: 0033:0x7f2790d8e1ff [ 199.397624][ T7288] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 199.417321][ T7288] RSP: 002b:00007f2791be3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 199.425753][ T7288] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2790d8e1ff [ 199.433822][ T7288] RDX: 0000000000000001 RSI: 00007f2791be30a0 RDI: 0000000000000004 [ 199.441800][ T7288] RBP: 00007f2791be3090 R08: 0000000000000000 R09: 0000000000000000 [ 199.449779][ T7288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 199.457759][ T7288] R13: 00007f2790fe6038 R14: 00007f2790fe5fa0 R15: 00007ffc4e100e28 [ 199.465751][ T7288] [ 199.561960][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 199.573982][ T5841] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 199.583584][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.610010][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.653880][ T5841] usb 1-1: config 0 descriptor?? [ 199.682491][ T7294] netlink: 156 bytes leftover after parsing attributes in process `syz.3.353'. [ 199.760667][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 199.880938][ T5841] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 199.954046][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.991154][ T5841] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 200.015792][ T5841] usb 1-1: media controller created [ 200.050205][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 200.096880][ T7281] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 200.857200][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.101161][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 201.121231][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 201.208726][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.248197][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.373884][ T5823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.582420][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.728969][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.096998][ T5823] usb 4-1: usb_control_msg returned -71 [ 202.126610][ T5823] usbtmc 4-1:16.0: can't read capabilities [ 202.201795][ T5823] usb 4-1: USB disconnect, device number 5 [ 202.638010][ T7322] loop1: detected capacity change from 0 to 8192 [ 202.666986][ T7322] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.720095][ T7322] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 202.731995][ T7322] REISERFS (device loop1): using ordered data mode [ 202.738695][ T7322] reiserfs: using flush barriers [ 202.775188][ T7322] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.833448][ T7322] REISERFS (device loop1): checking transaction log (loop1) [ 202.874838][ T7322] REISERFS (device loop1): Using r5 hash to sort names [ 202.882860][ T7327] loop2: detected capacity change from 0 to 736 [ 202.921956][ T7322] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 203.032322][ T7322] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 203.160238][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 203.203408][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 203.231019][ T5841] az6027: usb out operation failed. (-110) [ 203.251401][ T5841] az6027: usb out operation failed. (-32) [ 203.257303][ T5841] stb0899_attach: Driver disabled by Kconfig [ 203.301825][ T5841] az6027: no front-end attached [ 203.301825][ T5841] [ 203.336367][ T5841] az6027: usb out operation failed. (-32) [ 203.356845][ T5841] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 203.406215][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 203.473498][ T5841] dvb-usb: schedule remote query interval to 400 msecs. [ 203.500346][ T5841] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 203.531605][ T5841] usb 1-1: USB disconnect, device number 7 [ 203.712082][ T5841] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 203.745582][ T7334] gretap1: entered allmulticast mode [ 203.889156][ T7337] loop0: detected capacity change from 0 to 2048 [ 204.025658][ T7337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.330529][ T971] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 205.601775][ T971] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 205.630645][ T971] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 205.657457][ T971] usb 3-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 205.698891][ T971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.728632][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.755240][ T971] usb 3-1: SerialNumber: syz [ 208.181267][ T971] rndis_wlan: probe of 3-1:253.0 failed with error -22 [ 208.219637][ T971] rndis_host: probe of 3-1:253.0 failed with error -22 [ 208.302774][ T971] usb 3-1: USB disconnect, device number 11 [ 209.242422][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 210.979064][ T7377] loop0: detected capacity change from 0 to 32768 [ 211.011150][ T7377] XFS: ikeep mount option is deprecated. [ 211.016995][ T7377] XFS: attr2 mount option is deprecated. [ 211.053343][ T7377] XFS (loop0): no-recovery mounts must be read-only. [ 211.139390][ T7394] loop1: detected capacity change from 0 to 1024 [ 211.176236][ T7394] EXT4-fs: Ignoring removed bh option [ 211.227810][ T7394] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 211.264746][ T7394] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 211.343902][ T7394] EXT4-fs (loop1): invalid journal inode [ 211.349688][ T7394] EXT4-fs (loop1): can't get journal size [ 211.431108][ T7394] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 17104912: comm syz.1.382: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 211.651816][ T7394] EXT4-fs (loop1): failed to initialize system zone (-117) [ 211.718722][ T7394] EXT4-fs (loop1): mount failed [ 212.259559][ T7394] loop1: detected capacity change from 0 to 1024 [ 212.570384][ T7405] Bluetooth: MGMT ver 1.22 [ 212.921595][ T2984] hfsplus: b-tree write err: -5, ino 4 [ 213.141756][ T7418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.390'. [ 213.306506][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'. [ 213.343281][ T7409] loop2: detected capacity change from 0 to 32768 [ 213.352194][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'. [ 213.383088][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'. [ 213.394641][ T7419] loop1: detected capacity change from 0 to 4096 [ 213.428610][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'. [ 213.471338][ T7419] ntfs3: loop1: Failed to load $BadClus (-22). [ 215.549223][ T7436] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 218.723072][ T7475] loop2: detected capacity change from 0 to 4096 [ 218.741002][ T5824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.832076][ T7475] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 220.214075][ T5763] Bluetooth: hci0: command 0x0406 tx timeout [ 220.238973][ T7465] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 220.532952][ T7465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.542052][ T7465] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.596285][ T7465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.610859][ T7465] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.623732][ T7465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.635764][ T7465] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.468466][ T7495] smc: net device bond0 applied user defined pnetid SYZ0 [ 221.509862][ T7495] smc: net device bond0 erased user defined pnetid SYZ0 [ 221.629158][ T28] audit: type=1326 audit(1765634898.414:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 221.678490][ T28] audit: type=1326 audit(1765634898.444:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 221.710034][ T28] audit: type=1326 audit(1765634898.454:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 222.026484][ T28] audit: type=1326 audit(1765634898.454:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 222.350374][ T5763] Bluetooth: hci1: command 0x0406 tx timeout [ 222.362791][ T28] audit: type=1326 audit(1765634898.454:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 222.600604][ T28] audit: type=1326 audit(1765634898.464:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 222.623526][ T28] audit: type=1326 audit(1765634898.464:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80798f749 code=0x7ffc0000 [ 222.670092][ T5763] Bluetooth: hci3: command 0x0406 tx timeout [ 222.676293][ T5763] Bluetooth: hci2: command 0x0406 tx timeout [ 223.933434][ T7519] loop0: detected capacity change from 0 to 128 [ 224.006590][ T7519] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.032546][ T7519] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.097813][ T7528] loop2: detected capacity change from 0 to 4096 [ 224.154423][ T7528] ntfs: (device loop2): parse_options(): NLS character set is not found. Using previous one default. [ 224.166888][ T7528] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 224.212711][ T7519] syz_tun: entered allmulticast mode [ 224.251463][ T7528] ntfs: volume version 3.1. [ 224.283929][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.430259][ T5763] Bluetooth: hci1: command 0x0406 tx timeout [ 224.750169][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 224.756467][ T5763] Bluetooth: hci2: command 0x0406 tx timeout [ 226.782565][ T7545] block device autoloading is deprecated and will be removed. [ 229.798844][ T7565] input: syz1 as /devices/virtual/input/input14 [ 230.053926][ T7568] loop1: detected capacity change from 0 to 256 [ 230.158690][ T7568] FAT-fs (loop1): Directory bread(block 64) failed [ 230.183862][ T7568] FAT-fs (loop1): Directory bread(block 65) failed [ 230.212281][ T7571] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.435' sets config #1 [ 230.223832][ T7568] FAT-fs (loop1): Directory bread(block 66) failed [ 230.241517][ T7568] FAT-fs (loop1): Directory bread(block 67) failed [ 230.267845][ T7568] FAT-fs (loop1): Directory bread(block 68) failed [ 230.290197][ T7568] FAT-fs (loop1): Directory bread(block 69) failed [ 230.298972][ T7568] FAT-fs (loop1): Directory bread(block 70) failed [ 230.318719][ T7568] FAT-fs (loop1): Directory bread(block 71) failed [ 230.345041][ T7568] FAT-fs (loop1): Directory bread(block 72) failed [ 230.373432][ T7568] FAT-fs (loop1): Directory bread(block 73) failed [ 230.521745][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 230.772423][ T7580] loop2: detected capacity change from 0 to 16 [ 230.799002][ T7580] cramfs: Unknown parameter '4'İ; P'L [ 230.799002][ T7580] [ 230.799002][ T7580] Uvq G* [ 230.799002][ T7580] ^ 6P7 &EJ}/Bn~5#G^CWʤ9QvF]w' [ 232.077235][ T7590] Cannot find set identified by id 0 to match [ 232.682882][ T7595] loop1: detected capacity change from 0 to 16 [ 232.808182][ T7597] loop0: detected capacity change from 0 to 16 [ 232.823795][ T7597] erofs: (device loop0): mounted with root inode @ nid 36. [ 233.130504][ T7595] erofs: (device loop1): mounted with root inode @ nid 36. [ 233.206155][ T7595] FAULT_INJECTION: forcing a failure. [ 233.206155][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 233.612834][ T7595] CPU: 0 PID: 7595 Comm: syz.1.444 Not tainted syzkaller #0 [ 233.620291][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.630563][ T7595] Call Trace: [ 233.633879][ T7595] [ 233.636840][ T7595] dump_stack_lvl+0x16c/0x230 [ 233.641571][ T7595] ? show_regs_print_info+0x20/0x20 [ 233.646904][ T7595] ? load_image+0x3b0/0x3b0 [ 233.651553][ T7595] ? __might_sleep+0xe0/0xe0 [ 233.656284][ T7595] ? __lock_acquire+0x7c80/0x7c80 [ 233.661719][ T7595] should_fail_ex+0x39d/0x4d0 [ 233.666544][ T7595] should_failslab+0x9/0x20 [ 233.671226][ T7595] slab_pre_alloc_hook+0x59/0x310 [ 233.676304][ T7595] kmem_cache_alloc_lru+0x4d/0x2e0 [ 233.681458][ T7595] ? __d_alloc+0x31/0x730 [ 233.685836][ T7595] __d_alloc+0x31/0x730 [ 233.690143][ T7595] d_alloc_parallel+0xde/0x1530 [ 233.695064][ T7595] ? lockdep_init_map_type+0xa1/0x880 [ 233.700511][ T7595] ? lockdep_softirqs_off+0x430/0x430 [ 233.705924][ T7595] ? d_hash_and_lookup+0x1b0/0x1b0 [ 233.711094][ T7595] ? __init_waitqueue_head+0xa9/0x150 [ 233.716521][ T7595] __lookup_slow+0x117/0x3b0 [ 233.721231][ T7595] ? lookup_one_len+0x2c0/0x2c0 [ 233.726252][ T7595] ? try_to_unlazy+0x34c/0x5a0 [ 233.731059][ T7595] ? down_read+0x1ac/0x2e0 [ 233.735603][ T7595] lookup_slow+0x53/0x70 [ 233.739892][ T7595] walk_component+0x2be/0x3f0 [ 233.744605][ T7595] ? path_lookupat+0x15c/0x440 [ 233.749392][ T7595] path_lookupat+0x169/0x440 [ 233.754002][ T7595] filename_lookup+0x1f4/0x510 [ 233.758780][ T7595] ? __virt_addr_valid+0x18c/0x540 [ 233.763905][ T7595] ? hashlen_string+0x110/0x110 [ 233.768942][ T7595] ? strncpy_from_user+0x197/0x2e0 [ 233.774066][ T7595] ? getname_flags+0x20a/0x500 [ 233.778852][ T7595] user_path_at_empty+0x42/0x60 [ 233.783812][ T7595] path_listxattr+0xa3/0x1b0 [ 233.788416][ T7595] ? lock_chain_count+0x20/0x20 [ 233.793306][ T7595] ? path_getxattr+0x400/0x400 [ 233.798126][ T7595] ? lockdep_hardirqs_on+0x98/0x150 [ 233.803355][ T7595] do_syscall_64+0x55/0xb0 [ 233.807786][ T7595] ? clear_bhb_loop+0x40/0x90 [ 233.812478][ T7595] ? clear_bhb_loop+0x40/0x90 [ 233.817169][ T7595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.823080][ T7595] RIP: 0033:0x7f933d78f749 [ 233.827513][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.847310][ T7595] RSP: 002b:00007f933e596038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 233.855969][ T7595] RAX: ffffffffffffffda RBX: 00007f933d9e5fa0 RCX: 00007f933d78f749 [ 233.864055][ T7595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 233.872131][ T7595] RBP: 00007f933e596090 R08: 0000000000000000 R09: 0000000000000000 [ 233.880198][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.888264][ T7595] R13: 00007f933d9e6038 R14: 00007f933d9e5fa0 R15: 00007ffcd2b31598 [ 233.896258][ T7595] [ 236.827153][ T7640] vlan2: entered promiscuous mode [ 236.827192][ T7608] loop1: detected capacity change from 0 to 32768 [ 237.448913][ T7648] loop0: detected capacity change from 0 to 64 [ 238.124109][ T7641] loop2: detected capacity change from 0 to 131072 [ 238.144113][ T7641] F2FS-fs (loop2): invalid crc value [ 238.176608][ T7641] F2FS-fs (loop2): Found nat_bits in checkpoint [ 238.226686][ T7641] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 240.840088][ T971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.044898][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 241.076409][ T971] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 241.095327][ T971] usb 2-1: config 0 has no interface number 0 [ 241.107885][ T971] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.974956][ T971] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 241.989989][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.000288][ T971] usb 2-1: Product: syz [ 242.004596][ T971] usb 2-1: Manufacturer: syz [ 242.029387][ T971] usb 2-1: SerialNumber: syz [ 242.045421][ T971] usb 2-1: config 0 descriptor?? [ 242.086546][ T971] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 242.120117][ T971] em28xx 2-1:0.132: Video interface 132 found: [ 242.340814][ T7684] loop0: detected capacity change from 0 to 1024 [ 242.365393][ T7684] EXT4-fs: Ignoring removed bh option [ 242.490876][ T971] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 242.511604][ T7684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.661967][ T7684] EXT4-fs error (device loop0): ext4_xattr_block_find:1891: inode #15: comm syz.0.470: corrupted xattr block 113: invalid header [ 242.689713][ T7684] EXT4-fs (loop0): Remounting filesystem read-only [ 242.766741][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.793918][ T7699] xt_connbytes: Forcing CT accounting to be enabled [ 243.830170][ T7699] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 243.893753][ T7699] xt_bpf: check failed: parse error [ 243.920008][ T971] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 243.940153][ T971] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 244.100561][ T7666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.050791][ T971] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 245.058842][ T971] em28xx 2-1:0.132: analog set to bulk mode. [ 245.065564][ T5824] em28xx 2-1:0.132: Registering V4L2 extension [ 245.094496][ T971] usb 2-1: USB disconnect, device number 11 [ 245.141147][ T971] em28xx 2-1:0.132: Disconnecting em28xx [ 246.813948][ T7725] fuse: Bad value for 'fd' [ 246.943270][ T5824] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 246.967730][ T5824] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 246.985823][ T5824] em28xx 2-1:0.132: No AC97 audio processor [ 247.089696][ T7735] x_tables: ip_tables: osf match: only valid for protocol 6 [ 247.587804][ T5824] usb 2-1: Decoder not found [ 247.596344][ T5824] em28xx 2-1:0.132: failed to create media graph [ 247.608995][ T5824] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 247.629673][ T5824] em28xx 2-1:0.132: Remote control support is not available for this card. [ 247.650458][ T971] em28xx 2-1:0.132: Closing input extension [ 247.851637][ T971] em28xx 2-1:0.132: Freeing device [ 248.899599][ T7752] netlink: 64 bytes leftover after parsing attributes in process `syz.1.486'. [ 250.169672][ T7759] loop2: detected capacity change from 0 to 1024 [ 251.062141][ T7743] loop0: detected capacity change from 0 to 1024 [ 251.093586][ T7743] EXT4-fs: inline encryption not supported [ 251.171583][ T7743] EXT4-fs: Mount option(s) incompatible with ext2 [ 251.646044][ T7764] loop1: detected capacity change from 0 to 32768 [ 251.685857][ T7764] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 251.740572][ T173] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.839675][ T7764] XFS (loop1): Ending clean mount [ 251.893565][ T7764] XFS (loop1): Quotacheck needed: Please wait. [ 251.996625][ T7764] XFS (loop1): Quotacheck: Done. [ 252.859381][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.030081][ T173] usb 1-1: Using ep0 maxpacket: 8 [ 253.044093][ T173] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.055024][ T173] usb 1-1: config 179 has no interface number 0 [ 253.063497][ T173] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 253.089981][ T173] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 253.303138][ T7759] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 253.303138][ T7759] [ 253.901651][ T173] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.913612][ T173] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 253.924601][ T173] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.939818][ T173] usb 1-1: config 179 interface 65 has no altsetting 0 [ 253.947203][ T173] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 253.956638][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.060842][ T173] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 255.219346][ T173] usb 1-1: USB disconnect, device number 9 [ 255.225665][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 255.251988][ T173] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 255.345770][ T7805] loop1: detected capacity change from 0 to 256 [ 255.378516][ T7805] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.603456][ T7805] loop1: detected capacity change from 256 to 3 [ 255.645365][ T7805] Dev loop1: unable to read RDB block 3 [ 255.661678][ T7813] syz.1.502: attempt to access beyond end of device [ 255.661678][ T7813] loop1: rw=1, sector=4, nr_sectors = 4 limit=3 [ 255.677101][ T7805] loop1: unable to read partition table [ 255.698578][ T7813] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 255.700246][ T7805] loop1: partition table beyond EOD, [ 255.713018][ T7813] syz.1.502: attempt to access beyond end of device [ 255.713018][ T7813] loop1: rw=0, sector=4, nr_sectors = 4 limit=3 [ 255.737564][ T7813] FAT-fs (loop1): FAT read failed (blocknr 1) [ 256.969274][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.976673][ T7813] FAT-fs (loop1): unable to read inode block for updating (i_pos 202) [ 256.980088][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.061477][ T7805] truncated [ 257.066728][ T7805] loop_reread_partitions: partition scan of loop1 (yޘ) failed (rc=-5) [ 257.349120][ T5139] Dev loop1: unable to read RDB block 3 [ 257.358560][ T5139] loop1: unable to read partition table [ 257.378491][ T5139] loop1: partition table beyond EOD, truncated [ 257.444917][ T6208] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.487710][ T7828] loop0: detected capacity change from 0 to 1024 [ 258.583189][ T7828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.710385][ T7828] ext4 filesystem being mounted at /134/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.781974][ T7834] tipc: Enabled bearer , priority 10 [ 259.049664][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.929120][ T971] tipc: Node number set to 1329606258 [ 262.650405][ T7859] loop0: detected capacity change from 0 to 128 [ 262.679073][ T7859] ADFS-fs (loop0): unrecognised mount option "u" or missing value [ 263.347005][ T6208] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.620446][ T7881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'. [ 266.643727][ T7881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'. [ 266.690509][ T7881] dummy0: entered promiscuous mode [ 266.709527][ T7881] team0: entered promiscuous mode [ 266.715525][ T7881] team_slave_0: entered promiscuous mode [ 266.726903][ T7881] team_slave_1: entered promiscuous mode [ 266.735608][ T7881] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 266.765034][ T7881] Cannot create hsr debugfs directory [ 268.241479][ T7912] batadv_slave_0: entered promiscuous mode [ 268.617215][ T7911] batadv_slave_0: left promiscuous mode [ 269.584823][ T7926] FAULT_INJECTION: forcing a failure. [ 269.584823][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 269.612201][ T7926] CPU: 0 PID: 7926 Comm: syz.1.538 Not tainted syzkaller #0 [ 269.617441][ T7929] fuse: Bad value for 'fd' [ 269.619715][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.619761][ T7926] Call Trace: [ 269.619770][ T7926] [ 269.640691][ T7926] dump_stack_lvl+0x16c/0x230 [ 269.645523][ T7926] ? show_regs_print_info+0x20/0x20 [ 269.650770][ T7926] ? load_image+0x3b0/0x3b0 [ 269.655313][ T7926] ? __might_sleep+0xe0/0xe0 [ 269.659940][ T7926] ? __lock_acquire+0x7c80/0x7c80 [ 269.665005][ T7926] should_fail_ex+0x39d/0x4d0 [ 269.669732][ T7926] should_failslab+0x9/0x20 [ 269.674375][ T7926] slab_pre_alloc_hook+0x59/0x310 [ 269.679453][ T7926] ? tomoyo_encode+0x28b/0x540 [ 269.684258][ T7926] ? tomoyo_encode+0x28b/0x540 [ 269.689059][ T7926] __kmem_cache_alloc_node+0x53/0x260 [ 269.694478][ T7926] ? tomoyo_encode+0x28b/0x540 [ 269.699378][ T7926] __kmalloc+0xa4/0x240 [ 269.703577][ T7926] tomoyo_encode+0x28b/0x540 [ 269.708318][ T7926] tomoyo_realpath_from_path+0x592/0x5d0 [ 269.714028][ T7926] tomoyo_path_number_perm+0x1ea/0x590 [ 269.719534][ T7926] ? tomoyo_path_number_perm+0x1ba/0x590 [ 269.725385][ T7926] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 269.730954][ T7926] ? ksys_write+0x1c1/0x250 [ 269.735506][ T7926] ? __fget_files+0x28/0x4d0 [ 269.740118][ T7926] security_file_ioctl+0x70/0xa0 [ 269.745095][ T7926] __se_sys_ioctl+0x48/0x170 [ 269.749878][ T7926] do_syscall_64+0x55/0xb0 [ 269.754316][ T7926] ? clear_bhb_loop+0x40/0x90 [ 269.759211][ T7926] ? clear_bhb_loop+0x40/0x90 [ 269.763922][ T7926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.769843][ T7926] RIP: 0033:0x7f933d78f749 [ 269.774311][ T7926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.794194][ T7926] RSP: 002b:00007f933e596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.802620][ T7926] RAX: ffffffffffffffda RBX: 00007f933d9e5fa0 RCX: 00007f933d78f749 [ 269.810598][ T7926] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 269.818666][ T7926] RBP: 00007f933e596090 R08: 0000000000000000 R09: 0000000000000000 [ 269.826666][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.834668][ T7926] R13: 00007f933d9e6038 R14: 00007f933d9e5fa0 R15: 00007ffcd2b31598 [ 269.842699][ T7926] [ 269.847080][ T5824] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 269.867644][ T7926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.034468][ T5824] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 270.044629][ T5824] usb 1-1: config 179 has no interface number 0 [ 270.060162][ T5824] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 270.094343][ T5824] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 270.114501][ T5824] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 270.127091][ T5824] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 270.149225][ T5824] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 270.171115][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 270.201141][ T5824] usb 1-1: Product: syz [ 270.219258][ T7921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.450882][ T7940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.542'. [ 271.045815][ T7939] loop1: detected capacity change from 0 to 128 [ 271.112598][ T7939] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.125447][ T7939] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.167027][ T5824] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 271.196769][ T28] audit: type=1800 audit(1765634947.974:13): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.543" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 271.345466][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.389157][ T7945] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 271.411462][ T7945] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 271.582186][ T7945] tipc: Enabled bearer , priority 10 [ 271.637984][ T7953] netlink: 'syz.1.546': attribute type 32 has an invalid length. [ 272.700925][ T5824] tipc: Node number set to 2594778752 [ 272.739696][ T7961] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 272.739696][ T7961] The task syz.3.549 (7961) triggered the difference, watch for misbehavior. [ 273.105128][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 273.105133][ T23] usb 1-1: USB disconnect, device number 10 [ 273.122562][ T23] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 273.130091][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 273.410333][ T7972] ip6t_srh: unknown srh invflags 7F00 [ 274.397351][ T7972] loop1: detected capacity change from 0 to 32768 [ 274.555131][ T6208] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.719553][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 274.898676][ T7969] loop1: detected capacity change from 0 to 32768 [ 274.916199][ T7969] (syz.1.550,7969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.942081][ T7969] (syz.1.550,7969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.988554][ T7969] (syz.1.550,7969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 275.007617][ T7969] JBD2: Ignoring recovery information on journal [ 275.075911][ T7969] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 275.398418][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 275.846796][ T7986] loop1: detected capacity change from 0 to 256 [ 275.854571][ T7986] FAT-fs (loop1): Unrecognized mount option "\u" or missing value [ 275.962902][ T7986] loop1: detected capacity change from 0 to 1024 [ 276.100226][ T6208] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.404571][ T8000] loop0: detected capacity change from 0 to 1024 [ 277.453699][ T8000] EXT4-fs: Ignoring removed oldalloc option [ 277.490212][ T8000] EXT4-fs: Ignoring removed nobh option [ 277.521778][ T8000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.617786][ T8000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.751053][ T5824] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 277.775654][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.930039][ T5824] usb 3-1: device descriptor read/64, error -71 [ 278.033473][ T7986] loop1: detected capacity change from 0 to 32768 [ 278.104110][ T7986] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 278.160486][ T8017] xt_hashlimit: max too large, truncated to 1048576 [ 278.200050][ T5824] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 278.380016][ T5824] usb 3-1: device descriptor read/64, error -71 [ 278.430174][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 278.522449][ T5824] usb usb3-port1: attempt power cycle [ 278.624280][ T8020] loop1: detected capacity change from 0 to 64 [ 278.958347][ T5824] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 279.047869][ T5824] usb 3-1: device descriptor read/8, error -71 [ 279.914295][ T5824] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 279.980502][ T5824] usb 3-1: device descriptor read/8, error -71 [ 280.110401][ T5824] usb usb3-port1: unable to enumerate USB device [ 280.707321][ T8042] loop0: detected capacity change from 0 to 2048 [ 280.940808][ T8042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.953536][ T8042] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.832507][ T8048] netlink: 52 bytes leftover after parsing attributes in process `syz.1.573'. [ 281.981799][ T5824] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 282.004774][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.069738][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 282.086281][ T8048] team0: Port device batadv1 added [ 282.173067][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.193165][ T5824] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.206746][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.213749][ T5824] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 282.227024][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.243134][ T5824] usb 4-1: config 0 descriptor?? [ 282.259704][ T5824] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 282.434705][ T8059] loop2: detected capacity change from 0 to 164 [ 282.621641][ T8039] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 282.718698][ T173] usb 4-1: USB disconnect, device number 6 [ 282.740098][ T5823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 282.950081][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 282.966967][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.983526][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 283.003249][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 283.030680][ T5823] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 283.040108][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.066528][ T5823] usb 3-1: Product: syz [ 283.076632][ T5823] usb 3-1: Manufacturer: syz [ 283.090024][ T5823] usb 3-1: SerialNumber: syz [ 283.104268][ T5823] usb 3-1: config 0 descriptor?? [ 283.111440][ T8059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.383763][ T5823] usb 3-1: USB disconnect, device number 16 [ 283.684065][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 284.559401][ T28] audit: type=1326 audit(1765634961.344:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.2.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa80798f749 code=0x0 [ 284.881782][ T8085] loop2: detected capacity change from 0 to 8192 [ 284.903951][ T8085] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 285.363178][ T8100] program syz.0.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.192505][ T8104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.216472][ T8116] loop0: detected capacity change from 0 to 256 [ 287.227817][ T8116] FAT-fs (loop0): Unrecognized mount option "\u" or missing value [ 287.337284][ T8096] loop1: detected capacity change from 0 to 40427 [ 287.348135][ T8116] loop0: detected capacity change from 0 to 1024 [ 287.362901][ T789] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 287.367362][ T8096] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 287.410000][ T8096] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 287.438473][ T8096] F2FS-fs (loop1): build fault injection attr: rate: 2, type: 0x7ffff [ 287.474386][ T8096] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 287.554756][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 287.582369][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.614526][ T789] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 287.648336][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.693311][ T789] usb 4-1: config 0 descriptor?? [ 288.138024][ T8126] program syz.1.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.230110][ T28] audit: type=1804 audit(1765634965.714:15): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.598" name="bus" dev="ramfs" ino=14646 res=1 errno=0 [ 290.457960][ T789] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 291.103637][ T789] usb 4-1: USB disconnect, device number 7 [ 292.045877][ T8147] netlink: 112 bytes leftover after parsing attributes in process `syz.1.605'. [ 293.550486][ T28] audit: type=1804 audit(1765634969.584:16): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.607" name="bus" dev="ramfs" ino=14703 res=1 errno=0 [ 293.803311][ T8158] loop0: detected capacity change from 0 to 256 [ 293.831514][ T8158] FAT-fs (loop0): Unrecognized mount option "\u" or missing value [ 294.931463][ T8158] loop0: detected capacity change from 0 to 32768 [ 295.171509][ T8158] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 295.978540][ T8158] ------------[ cut here ]------------ [ 295.984851][ T8158] kernel BUG at fs/ocfs2/aops.c:1180! [ 296.038972][ T8158] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 296.045121][ T8158] CPU: 0 PID: 8158 Comm: syz.0.609 Not tainted syzkaller #0 [ 296.052441][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.062794][ T8158] RIP: 0010:ocfs2_write_cluster_by_desc+0x1c75/0x1ca0 [ 296.069718][ T8158] Code: 4c 8b 03 48 8d bc 24 10 02 00 00 48 c7 c6 7e 53 62 8c ba 7f 04 00 00 48 c7 c1 00 90 e9 8a e8 92 3b 1a 00 0f 0b e8 2b 20 39 fe <0f> 0b e8 24 20 39 fe 0f 0b e8 1d 20 39 fe 0f 0b e8 16 20 39 fe 0f [ 296.087526][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 296.089430][ T8158] RSP: 0018:ffffc9000bf4eec0 EFLAGS: 00010287 [ 296.102941][ T8158] RAX: ffffffff834c7095 RBX: ffff88802f288014 RCX: 0000000000080000 [ 296.111138][ T8158] RDX: ffffc9000c9d9000 RSI: 000000000000254a RDI: 000000000000254b [ 296.113742][ T23] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.119212][ T8158] RBP: ffffc9000bf4f1f0 R08: ffff88805ac61563 R09: 1ffff1100b58c2ac [ 296.137240][ T8158] R10: dffffc0000000000 R11: ffffed100b58c2ad R12: ffff88803117c000 [ 296.145334][ T8158] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802f288014 [ 296.153347][ T8158] FS: 00007fa68ee726c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 296.162419][ T8158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.169039][ T8158] CR2: 0000001b2d223ffc CR3: 000000005e4c4000 CR4: 00000000003506f0 [ 296.177054][ T8158] Call Trace: [ 296.180364][ T8158] [ 296.183332][ T8158] ? folio_add_lru+0x54f/0xd50 [ 296.188138][ T8158] ? ocfs2_grab_pages_for_write+0xf60/0xf60 [ 296.194072][ T8158] ? __filemap_get_folio+0x8d0/0xbc0 [ 296.199396][ T8158] ? ocfs2_grab_pages_for_write+0xd05/0xf60 [ 296.205337][ T8158] ? ocfs2_expand_nonsparse_inode+0x450/0x450 [ 296.211450][ T8158] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 296.217558][ T8158] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 296.223410][ T8158] ocfs2_write_begin_nolock+0x2fcb/0x4190 [ 296.229284][ T8158] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 296.235308][ T8158] ? ocfs2_inode_lock_full_nested+0x154/0x1af0 [ 296.241764][ T8158] ? verify_lock_unused+0x140/0x140 [ 296.247087][ T8158] ? ocfs2_read_inode_block+0x11e/0x180 [ 296.253020][ T8158] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 296.259146][ T8158] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 296.265715][ T8158] ? __might_sleep+0xe0/0xe0 [ 296.270438][ T8158] ? read_lock_is_recursive+0x20/0x20 [ 296.276002][ T8158] ? mark_lock+0x94/0x320 [ 296.280496][ T8158] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 296.286532][ T8158] ? down_write+0x162/0x1f0 [ 296.291083][ T8158] ? down_read_killable+0x340/0x340 [ 296.296330][ T8158] ocfs2_write_begin+0x1bc/0x310 [ 296.301355][ T8158] ? ocfs2_readahead+0x1a0/0x1a0 [ 296.306352][ T8158] ? fault_in_readable+0xef/0x160 [ 296.311506][ T8158] ? fault_in_iov_iter_readable+0xbf/0x2e0 [ 296.317382][ T8158] generic_perform_write+0x2fb/0x5b0 [ 296.322842][ T8158] ? generic_file_direct_write+0x3e0/0x3e0 [ 296.328704][ T8158] ? __mnt_drop_write_file+0xc3/0x100 [ 296.334230][ T8158] ? __generic_file_write_iter+0xf7/0x230 [ 296.340190][ T8158] ? ocfs2_file_write_iter+0x1559/0x1d00 [ 296.346061][ T8158] ocfs2_file_write_iter+0x1582/0x1d00 [ 296.351577][ T8158] ? ocfs2_file_read_iter+0xa30/0xa30 [ 296.357025][ T8158] ? rcu_read_lock_any_held+0xb4/0x120 [ 296.362604][ T8158] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 296.368060][ T8158] vfs_write+0x43b/0x940 [ 296.372425][ T8158] ? file_end_write+0x250/0x250 [ 296.377314][ T8158] ? __fget_files+0x44a/0x4d0 [ 296.382042][ T8158] ? __fdget_pos+0x2a3/0x330 [ 296.386663][ T8158] ? ksys_write+0x75/0x250 [ 296.391115][ T8158] ksys_write+0x147/0x250 [ 296.395566][ T8158] ? __ia32_sys_read+0x90/0x90 [ 296.400598][ T8158] ? lockdep_hardirqs_on+0x98/0x150 [ 296.406005][ T8158] do_syscall_64+0x55/0xb0 [ 296.410456][ T8158] ? clear_bhb_loop+0x40/0x90 [ 296.415510][ T8158] ? clear_bhb_loop+0x40/0x90 [ 296.420223][ T8158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.426254][ T8158] RIP: 0033:0x7fa68df8f749 [ 296.430696][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.450331][ T8158] RSP: 002b:00007fa68ee72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.458832][ T8158] RAX: ffffffffffffffda RBX: 00007fa68e1e5fa0 RCX: 00007fa68df8f749 [ 296.467053][ T8158] RDX: 000000000000fea7 RSI: 0000200000000040 RDI: 0000000000000008 [ 296.475012][ T8158] RBP: 00007fa68e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.482966][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.490920][ T8158] R13: 00007fa68e1e6038 R14: 00007fa68e1e5fa0 R15: 00007ffec0e91238 [ 296.499111][ T8158] [ 296.502160][ T8158] Modules linked in: [ 296.559591][ T8158] ---[ end trace 0000000000000000 ]--- [ 296.565177][ T8158] RIP: 0010:ocfs2_write_cluster_by_desc+0x1c75/0x1ca0 [ 296.572414][ T8158] Code: 4c 8b 03 48 8d bc 24 10 02 00 00 48 c7 c6 7e 53 62 8c ba 7f 04 00 00 48 c7 c1 00 90 e9 8a e8 92 3b 1a 00 0f 0b e8 2b 20 39 fe <0f> 0b e8 24 20 39 fe 0f 0b e8 1d 20 39 fe 0f 0b e8 16 20 39 fe 0f [ 296.593716][ T8158] RSP: 0018:ffffc9000bf4eec0 EFLAGS: 00010287 [ 296.840587][ T8158] RAX: ffffffff834c7095 RBX: ffff88802f288014 RCX: 0000000000080000 [ 296.849234][ T8158] RDX: ffffc9000c9d9000 RSI: 000000000000254a RDI: 000000000000254b [ 296.857999][ T8158] RBP: ffffc9000bf4f1f0 R08: ffff88805ac61563 R09: 1ffff1100b58c2ac [ 296.874059][ T8158] R10: dffffc0000000000 R11: ffffed100b58c2ad R12: ffff88803117c000 [ 296.883267][ T8158] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802f288014 [ 296.892401][ T8158] FS: 00007fa68ee726c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 296.903301][ T8158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.910282][ T8158] CR2: 000000110c43a430 CR3: 000000005e4c4000 CR4: 00000000003506f0 [ 296.918747][ T8158] Kernel panic - not syncing: Fatal exception [ 296.925417][ T8158] Kernel Offset: disabled [ 296.929766][ T8158] Rebooting in 86400 seconds..