last executing test programs: 6m21.745087927s ago: executing program 0 (id=387): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00004f6000/0x4000)=nil, 0x4000}}) 6m21.60803719s ago: executing program 0 (id=389): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r1, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000005c0)={0xc, 0x8, 0xfa00, {&(0x7f0000001180)}}, 0x10) 6m21.521183453s ago: executing program 0 (id=391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0), 0x4) 6m21.391985971s ago: executing program 0 (id=395): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 6m21.142516258s ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), 0xa7c, r0}, 0x36) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbe6ed2c9900000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x48891}, 0x8010) 6m20.172449486s ago: executing program 0 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f0000000600)=ANY=[], 0x8) 6m19.686918463s ago: executing program 32 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f0000000600)=ANY=[], 0x8) 4m56.427541062s ago: executing program 6 (id=1331): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="63202a3a2a2001"], 0x8) 4m56.170685622s ago: executing program 6 (id=1334): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}]}}}}}, 0x0) 4m55.8949296s ago: executing program 6 (id=1335): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 4m55.533703793s ago: executing program 6 (id=1339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004006, &(0x7f00000000c0), 0x1, 0x576, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 4m54.616949857s ago: executing program 6 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 4m52.355996566s ago: executing program 6 (id=1366): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="22fe", 0x2) 4m51.927392761s ago: executing program 33 (id=1366): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="22fe", 0x2) 4m1.834191638s ago: executing program 4 (id=1737): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/59, 0x3b, 0xbce) 4m1.344964067s ago: executing program 4 (id=1741): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='+ 1 0 1', 0x7) 4m0.828357447s ago: executing program 4 (id=1746): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007c, 0x0) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x2808080, &(0x7f0000000f40)={[{@rodir}, {@shortname_win95}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8}, {@fat=@showexec}, {@fat=@nocase}, {@uni_xlate}, {@utf8no}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@utf8no}]}, 0x81, 0x2b1, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x5808020, 0x0, 0xbe, 0x0, &(0x7f0000001340)) 4m0.248493803s ago: executing program 4 (id=1751): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000001c0), 0xfc, 0x4f9, &(0x7f0000000200)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJu42qHqCcEEKVED2C1IbEjaLYcRQnpQk9pGeuSCBxgiN/AOeeuHNBcONSDkj8iEANEgejGU9SN7Vbq0nsKP58pNG8N2/q73tN5736m8QvgKF1OSL2ImIsIu5HxHR2PZcdcbt1JPc933+8dLD/eCkXzebdf+bS9uRatP2ZxKXsNYsR8YPvRPw492rcxs7u2mK1WtnM6rNbtY3Zxs7utdXa4kplpbJeLi/ML8zdvH6jfGpj/ag2lpW+/OwPe9/4adKtqexK+zhOU2vohaM4idGI+N5ZBBuAkWw8Y4PuCG8lHxHvR8TH6fM/HSPpVxMAuMiazeloTrfXAYCLLp/mwHL5UpYLmIp8vlRq5fA+iMl8td7Yuvqgvr2+3MqVzUQh/2C1WpnLcoUzUcgl9fm0/KJePla/HhHvRcTPxyfSemmpXl0e5H98AGCIXTq2/v9nvLX+AwAXXHHQHQAA+s76DwDDx/oPAMPH+g8Aw6e1/k8MuhsAQB95/w8Aw8f6DwBD5ft37iRH8yD7/Ovlhzvba/WH15YrjbVSbXuptFTf3Cit1Osr6Wf21N70etV6fWP+s9h+NPPNjcbWbGNn916tvr2+dS/9XO97lUJ6114fRgYAdPPeR0//nEtW5FsT6RFtezkUBtoz4KzlB90BYGBGBt0BYGDs9gXD6wTv8aUH4ILosEXvS4qdfkGo2Ww2z65LwBm78gX5fxhWbfl/PwUMQ0b+H4aX/D8Mr2Yz1+ue/9HrjQDA+SbHD3T5/v/72fm32TcHfrR8/I5fnmWvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Hw73P+3lO0FPhX5fKkU8U5EzEQh92C1WpmLiHcj4k/jhfGkPj/gPgMAJ5X/Wy7b/+vK9KdTLzV9eOmoOBYRP/nV3V88Wtza2vxjxFjuX+OH11PJ9XJfOw4A9OhRtk6n57Y38s/3Hy8dHv3sz9+/HRHFVvyD/bE4OIo/GqPpuRiFiJj8dy6rt+TachcnsfckIj7fafy5mEpzIK2dT4/HT2K/09f4+Zfi59O21jn5u/jcKfQFhs3TZP653en5y8fl9Nz5+S+mM9TJZfNf8lJLB+kc+CL+4fw30mX+u9xrjM9+/91WaeLVticRXxyNOIx90Db/HMbPdYn/aY/x//KlDz/u1tb8dcSV6By/PdbsVm1jtrGze221trhSWamsl8sL8wtzN6/fKM+mOerZ7qvBP25dfbdbWzL+yS7xi28Y/1d7HP9v/nf/h195Tfyvf9Ipfj4+eE38ZE38Wo/xFyd/V+zWlsRf7jL+N339r/YY/9lfd1/ZNhwAGJzGzu7aYrVa2VRQOP+F5J/sOehGx8K3+hVrLDo3/eyT1jN9rKnZfKtY3WaM08i6AefB0UMfEf8ddGcAAAAAAAAAAAAAAICO+vEbS4MeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//DWLMtQ==") r0 = creat(&(0x7f0000000700)='./bus\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000780)={0xc, r0, 0x0, 0x40, 0x0, 0xfffffffffe000001}) 3m59.139339626s ago: executing program 4 (id=1760): sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f00000004c0)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000940)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) 3m58.258961714s ago: executing program 4 (id=1765): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc_mnt\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 3m42.909290517s ago: executing program 34 (id=1765): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc_mnt\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 3m41.193929154s ago: executing program 2 (id=1847): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x6e24, @loopback}, 0x10) 3m40.668003891s ago: executing program 2 (id=1850): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e20, 0x3, 'fo\x00', 0x30, 0x760f5380}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m40.089848043s ago: executing program 2 (id=1854): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, r1) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m39.638346637s ago: executing program 2 (id=1856): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000480)="$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") mount(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='sysfs\x00', 0x1214040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x0) lseek(r0, 0x101, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x29) 3m38.780157738s ago: executing program 2 (id=1860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 3m37.74462983s ago: executing program 2 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x2a020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 3m36.056445087s ago: executing program 35 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x2a020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 47.849291593s ago: executing program 5 (id=2578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) close(0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) 47.19816377s ago: executing program 5 (id=2583): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0000008a000000000000c00100000000000100", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000030000000400000000000000", @ANYRES32], 0x50) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f00000001c0)={&(0x7f0000000680)=""/120, 0xffffffffffffff28}) 45.392637555s ago: executing program 5 (id=2589): r0 = landlock_create_ruleset(&(0x7f0000000580)={0x100}, 0x18, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') fchdir(r1) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x101842, 0x1) 44.498466251s ago: executing program 5 (id=2594): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 43.912582214s ago: executing program 5 (id=2597): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000200)='6', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 41.532179431s ago: executing program 5 (id=2607): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000001c0)={r2, 0xfffffffd}, &(0x7f0000000200)=0x8) 40.044707182s ago: executing program 36 (id=2607): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000001c0)={r2, 0xfffffffd}, &(0x7f0000000200)=0x8) 26.392574928s ago: executing program 7 (id=2660): socket$igmp(0x2, 0x3, 0x2) syz_open_dev$video4linux(&(0x7f00000000c0), 0x7fff, 0x48b03) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.719174137s ago: executing program 7 (id=2662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 24.994172813s ago: executing program 7 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x3c}}, 0x20000010) 19.503013148s ago: executing program 7 (id=2682): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oIPT5d67uqRIL1zMpGRQB714W5AmCC0U/INpJ1cXR1cXQXDzS7j4DQRXwc1CC0dOzjn508aY1Kbi7e83tG/ePM/7Pu/JaUOHPP3w5eHB0zT2T7/4NVqtJGrd6MZZEp2oReUk5nS/DgDg/+wsy+KPrLBOXhIRrc2VBQBs0Pj9/3yN9/8fN14SALBh77z73ls7vd7u22naikfDr477+V/2+ffi+Z39+DgGsRf3ox0XEdlEMX6UZdmonuY68dpwdNzPM4cf/Fyuv/N7RNTLB53x1/n8x73dB2lhJn+U1/FcuX833/9htOPFBfs/7u0+XJAf/Ua8/upM/feiHb98FJ/EIJ6Oiyjyoxbx5YM0fTP75s/P38/Ly/OT0XG/OY6byrZu8WUBAAAAAAAAAAAAAAAAAAAAAOAZd6/sndOMcf+efKrsv7N1kT/YjrTSme/PU+Qn1UKX+gONsvi26s9zP03TrAyc5tfjpfqkMxAAAAAAAAAAAAAAAAAAAADcaUeffnbwZDDYO7yRQdUNoPpY/3XX6c7MvBLLg5vTvWrlcMnKsVXFJBFLy8gPsXLN52Xbg+tduhf+rubvf1h5ne/++ezlYHuFmH85qO6ugyfJ4mvYjGqmVd0kP83GNGLFvRrzM63Ja5qtdfs1Fj7VXv3IyUlx4ufHM6MlwZEsK+yN34p1ypnk8ika46s6n1XObJczM+nzW7RWv5/zn5Qrkkm3juQGfwMBAAAAAAAAAAAAAAAAAACV2U8RX3G6NLWWNTdWFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcqun//19jMCqTVwhuxOHRf3xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oC/AgAA//+rJl27") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') getcwd(&(0x7f0000000140)=""/81, 0x51) 18.541172374s ago: executing program 7 (id=2685): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) socket(0x1f, 0xa, 0x8) 15.340609646s ago: executing program 7 (id=2692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000002140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002180)=0x10, 0x4) r1 = dup(r0) recvfrom$unix(r1, 0x0, 0x0, 0x100, 0x0, 0x0) 13.835177787s ago: executing program 37 (id=2692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000002140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002180)=0x10, 0x4) r1 = dup(r0) recvfrom$unix(r1, 0x0, 0x0, 0x100, 0x0, 0x0) 7.544582521s ago: executing program 8 (id=2716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e9b5b00ace03dd65193dfb6c5619a3d86dd60670600001406", 0x19}, {&(0x7f0000000840)="37bcb39800000000f66b8157b45046eb15ff314c846dbc0f31fa4cc9f8296c3c2e", 0x36}], 0x2) 6.767554767s ago: executing program 9 (id=2718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 6.274546715s ago: executing program 9 (id=2721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) 5.752132848s ago: executing program 8 (id=2723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x4, &(0x7f00000001c0)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r1}]) 5.669367717s ago: executing program 1 (id=2724): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(r0, &(0x7f0000000380)=""/153, 0x20) 5.639859627s ago: executing program 9 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1add1617ffe57f6) 5.164178139s ago: executing program 8 (id=2726): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6) 5.001119545s ago: executing program 1 (id=2727): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) 4.809365867s ago: executing program 9 (id=2728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xb}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 4.630442947s ago: executing program 3 (id=2729): r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f0000000700)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000740)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r1 = userfaultfd(0x1) ioctl$int_in(r0, 0x5452, &(0x7f00000007c0)=0x2) ppoll(&(0x7f0000000800)=[{r0}, {r1, 0xb100}], 0x2, 0x0, 0x0, 0x0) 4.29856222s ago: executing program 1 (id=2730): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001280)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x0) 4.220686304s ago: executing program 9 (id=2731): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x17a) r0 = add_key(0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000011c0)={r0}, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010200000008920a201040000102030109026f0003010c20000904000000010100000a24010300190002010206240503004609240301ff010503"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.922550887s ago: executing program 8 (id=2732): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) 3.732991578s ago: executing program 3 (id=2733): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x114) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/175, 0xaf}], 0x1) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/216, 0xd8}, {&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000000440)=""/254, 0xfe}], 0x4) 3.692541939s ago: executing program 1 (id=2734): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 3.236750339s ago: executing program 8 (id=2735): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000400)={0x0, 0x280, 0x1e0, 0x34325258, 0x2, [0x2], [0x80ffff, 0x0, 0x4000000, 0x2], [0x0, 0x0, 0x0, 0x4000100], [0x400000000000000, 0xe4]}) 2.900139418s ago: executing program 3 (id=2736): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.861300832s ago: executing program 1 (id=2737): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.163814302s ago: executing program 3 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.899467725s ago: executing program 9 (id=2739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000001c80)={@remote, @broadcast, @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}}}}}, 0x0) 985.361894ms ago: executing program 8 (id=2740): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x14, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 647.298648ms ago: executing program 1 (id=2741): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002", 0x3d, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 473.721681ms ago: executing program 3 (id=2742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000951000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x2000) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=2743): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2c0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): =-22 [ 395.256127][ T31] audit: type=1800 audit(1794087120.945:948): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=218033 res=0 errno=-22 [ 395.387184][ T6424] udevd[6424]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.481693][ T5780] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 395.522495][ T31] audit: type=1800 audit(1794087121.205:949): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=218307 res=0 errno=-22 [ 395.921058][T12257] loop5: detected capacity change from 0 to 512 [ 395.968628][T12257] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.2243: corrupted in-inode xattr: invalid ea_ino [ 395.968659][T12257] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 395.982519][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 395.982542][ C0] EXT4-fs (loop5): initial error at time 1794087121: ext4_iget_extra_inode:6027: inode 15 [ 395.982569][ C0] EXT4-fs (loop5): last error at time 1794087121: ext4_iget_extra_inode:6027: inode 15 [ 396.027780][T12257] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2243: couldn't read orphan inode 15 (err -117) [ 396.027810][T12257] loop5: lost filesystem error report for type 5 error -117 [ 396.091706][T12260] FAULT_INJECTION: forcing a failure. [ 396.091706][T12260] name failslab, interval 1, probability 0, space 0, times 0 [ 396.091738][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.8.2244 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.091763][T12260] Tainted: [L]=SOFTLOCKUP [ 396.091771][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 396.091782][T12260] Call Trace: [ 396.091790][T12260] [ 396.091799][T12260] dump_stack_lvl+0xe8/0x150 [ 396.091835][T12260] should_fail_ex+0x3eb/0x540 [ 396.091865][T12260] should_failslab+0xa8/0x100 [ 396.091898][T12260] __kmalloc_cache_noprof+0x9e/0x600 [ 396.091925][T12260] ? snd_timer_user_open+0x5e/0x150 [ 396.091944][T12260] ? snd_timer_user_open+0x5e/0x150 [ 396.091968][T12260] snd_timer_user_open+0x5e/0x150 [ 396.091989][T12260] chrdev_open+0x4d9/0x600 [ 396.092012][T12260] ? __pfx_chrdev_open+0x10/0x10 [ 396.092030][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.092059][T12260] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 396.092090][T12260] ? devcgroup_check_permission+0x31/0x8f0 [ 396.092158][T12260] ? __pfx_chrdev_open+0x10/0x10 [ 396.092176][T12260] do_dentry_open+0x80e/0x1360 [ 396.092208][T12260] vfs_open_consume+0x4a/0x350 [ 396.092228][T12260] ? path_openat+0x16e1/0x20f0 [ 396.092259][T12260] path_openat+0x16fc/0x20f0 [ 396.092305][T12260] do_file_open+0x23e/0x4a0 [ 396.092338][T12260] ? __pfx_do_file_open+0x10/0x10 [ 396.092386][T12260] ? _raw_spin_unlock+0x28/0x50 [ 396.092408][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.092430][T12260] ? alloc_fd+0x6af/0x760 [ 396.092464][T12260] do_sys_openat2+0x115/0x200 [ 396.092485][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.092507][T12260] ? __se_sys_futex+0x3a8/0x450 [ 396.092529][T12260] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.092557][T12260] ? rcu_is_watching+0x16/0xb0 [ 396.092586][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.092612][T12260] __x64_sys_openat+0x138/0x170 [ 396.092640][T12260] do_syscall_64+0x166/0x520 [ 396.092664][T12260] ? trace_irq_disable+0x3b/0x140 [ 396.092696][T12260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.092721][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.092741][T12260] RIP: 0033:0x7f3685b9fb19 [ 396.092758][T12260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.092774][T12260] RSP: 002b:00007f3686ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.092794][T12260] RAX: ffffffffffffffda RBX: 00007f3685e25fa0 RCX: 00007f3685b9fb19 [ 396.092808][T12260] RDX: 00000000000a8000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 396.092822][T12260] RBP: 00007f3685c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 396.092835][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.092846][T12260] R13: 00007f3685e26038 R14: 00007f3685e25fa0 R15: 00007fff80ad6c38 [ 396.092877][T12260] [ 396.163352][T12257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.306803][ T4945] Bluetooth: hci3: command 0x0406 tx timeout [ 396.986750][ T5644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.715873][T12284] FAULT_INJECTION: forcing a failure. [ 397.715873][T12284] name failslab, interval 1, probability 0, space 0, times 0 [ 397.715904][T12284] CPU: 0 UID: 0 PID: 12284 Comm: syz.5.2255 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.715935][T12284] Tainted: [L]=SOFTLOCKUP [ 397.715943][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 397.715954][T12284] Call Trace: [ 397.715963][T12284] [ 397.715977][T12284] dump_stack_lvl+0xe8/0x150 [ 397.716014][T12284] should_fail_ex+0x3eb/0x540 [ 397.716041][T12284] ? __pfx_lowpan_enable_set+0x10/0x10 [ 397.716067][T12284] should_failslab+0xa8/0x100 [ 397.716097][T12284] ? __pfx_lowpan_enable_fops_open+0x10/0x10 [ 397.716122][T12284] __kmalloc_cache_noprof+0x9e/0x600 [ 397.716146][T12284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.716171][T12284] ? simple_attr_open+0x62/0x180 [ 397.716194][T12284] ? simple_attr_open+0x62/0x180 [ 397.716218][T12284] ? __pfx___debugfs_file_get+0x10/0x10 [ 397.716244][T12284] ? __pfx_lowpan_enable_fops_open+0x10/0x10 [ 397.716267][T12284] ? __pfx_lowpan_enable_set+0x10/0x10 [ 397.716291][T12284] ? __pfx_lowpan_enable_get+0x10/0x10 [ 397.716313][T12284] simple_attr_open+0x62/0x180 [ 397.716337][T12284] ? __pfx_lowpan_enable_fops_open+0x10/0x10 [ 397.716362][T12284] open_proxy_open+0x2ff/0x480 [ 397.716389][T12284] ? __pfx_open_proxy_open+0x10/0x10 [ 397.716414][T12284] do_dentry_open+0x80e/0x1360 [ 397.716445][T12284] vfs_open_consume+0x4a/0x350 [ 397.716465][T12284] ? path_openat+0x16e1/0x20f0 [ 397.716496][T12284] path_openat+0x16fc/0x20f0 [ 397.716542][T12284] do_file_open+0x23e/0x4a0 [ 397.716575][T12284] ? __pfx_do_file_open+0x10/0x10 [ 397.716624][T12284] ? _raw_spin_unlock+0x28/0x50 [ 397.716644][T12284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.716666][T12284] ? alloc_fd+0x6af/0x760 [ 397.716699][T12284] do_sys_openat2+0x115/0x200 [ 397.716721][T12284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.716743][T12284] ? __se_sys_futex+0x3a8/0x450 [ 397.716764][T12284] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.716792][T12284] ? rcu_is_watching+0x16/0xb0 [ 397.716821][T12284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.716847][T12284] __x64_sys_openat+0x138/0x170 [ 397.716875][T12284] do_syscall_64+0x166/0x520 [ 397.716898][T12284] ? trace_irq_disable+0x3b/0x140 [ 397.716925][T12284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.716950][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.716975][T12284] RIP: 0033:0x7f904519fb19 [ 397.716993][T12284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.717008][T12284] RSP: 002b:00007f9046006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.717029][T12284] RAX: ffffffffffffffda RBX: 00007f9045425fa0 RCX: 00007f904519fb19 [ 397.717043][T12284] RDX: 0000000000000002 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 397.717057][T12284] RBP: 00007f9045237b70 R08: 0000000000000000 R09: 0000000000000000 [ 397.717070][T12284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.717081][T12284] R13: 00007f9045426038 R14: 00007f9045425fa0 R15: 00007ffd36a27428 [ 397.717112][T12284] [ 397.902029][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2254'. [ 398.010521][T12283] netlink: 'syz.7.2254': attribute type 15 has an invalid length. [ 398.528060][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 398.528092][T12291] netlink: 'syz.1.2256': attribute type 30 has an invalid length. [ 398.570695][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 398.570726][T12291] netlink: 'syz.1.2256': attribute type 30 has an invalid length. [ 399.050195][T12302] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2264'. [ 399.389769][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 399.389786][ T31] audit: type=1800 audit(1794087125.075:951): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218468 res=0 errno=-22 [ 400.067128][ T31] audit: type=1800 audit(1794087125.755:952): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2270" name="wakealarm" dev="sysfs" ino=42302 res=0 errno=-22 [ 400.169511][T12323] FAULT_INJECTION: forcing a failure. [ 400.169511][T12323] name fail_futex, interval 1, probability 0, space 0, times 1 [ 400.169542][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.3.2271 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.169567][T12323] Tainted: [L]=SOFTLOCKUP [ 400.169575][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 400.169587][T12323] Call Trace: [ 400.169595][T12323] [ 400.169603][T12323] dump_stack_lvl+0xe8/0x150 [ 400.169639][T12323] should_fail_ex+0x3eb/0x540 [ 400.169673][T12323] get_futex_key+0x1ab/0x1410 [ 400.169708][T12323] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.169737][T12323] ? __pfx_get_futex_key+0x10/0x10 [ 400.169765][T12323] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.169787][T12323] ? futex_private_hash+0x319/0x330 [ 400.169822][T12323] futex_wait_multiple_setup+0x167/0x6c0 [ 400.169864][T12323] futex_wait_multiple+0xb2/0x430 [ 400.169898][T12323] __se_sys_futex_waitv+0x20f/0x2c0 [ 400.169922][T12323] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 400.169951][T12323] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.169980][T12323] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.170002][T12323] ? __x64_sys_futex_waitv+0x20/0xc0 [ 400.170026][T12323] do_syscall_64+0x166/0x520 [ 400.170051][T12323] ? trace_irq_disable+0x3b/0x140 [ 400.170078][T12323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.170103][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.170123][T12323] RIP: 0033:0x7efc8339fb19 [ 400.170140][T12323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.170157][T12323] RSP: 002b:00007efc84263028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 400.170177][T12323] RAX: ffffffffffffffda RBX: 00007efc83625fa0 RCX: 00007efc8339fb19 [ 400.170192][T12323] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000001940 [ 400.170205][T12323] RBP: 00007efc83437b70 R08: 0000000000000001 R09: 0000000000000000 [ 400.170217][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.170230][T12323] R13: 00007efc83626038 R14: 00007efc83625fa0 R15: 00007ffc0c7dcb78 [ 400.170261][T12323] [ 402.076467][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2283'. [ 402.076609][T12352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.275289][T12352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.809300][T12359] loop1: detected capacity change from 0 to 32768 [ 402.837127][T12359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2287 (12359) [ 402.868169][T12359] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.868197][T12359] BTRFS info (device loop1): using crc32c checksum algorithm [ 402.968390][ T31] audit: type=1800 audit(1794087128.655:953): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14995 res=0 errno=-22 [ 403.011290][ T31] audit: type=1800 audit(1794087128.695:954): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218571 res=0 errno=-22 [ 403.119893][T12359] BTRFS info (device loop1): enabling ssd optimizations [ 403.119917][T12359] BTRFS info (device loop1): turning on flush-on-commit [ 403.119932][T12359] BTRFS info (device loop1): turning on async discard [ 403.119947][T12359] BTRFS info (device loop1): enabling free space tree [ 403.119970][T12359] BTRFS info (device loop1): enabling auto defrag [ 403.119985][T12359] BTRFS info (device loop1): use lzo compression, level 1 [ 403.120003][T12359] BTRFS info (device loop1): max_inline set to 4096 [ 403.540235][T12380] loop8: detected capacity change from 0 to 512 [ 403.575121][T12380] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.2290: Unrecognised inode hash code 255 [ 403.575149][T12380] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2290: Corrupt directory, running e2fsck is recommended [ 403.585163][T12380] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 403.585252][T12380] EXT4-fs error (device loop8): ext4_iget_extra_inode:6027: inode #15: comm syz.8.2290: corrupted in-inode xattr: invalid ea_ino [ 403.585274][T12380] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.597160][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 403.597178][ C0] EXT4-fs (loop8): initial error at time 1794087129: ext4_iget_extra_inode:6027: inode 15 [ 403.597205][ C0] EXT4-fs (loop8): last error at time 1794087129: ext4_iget_extra_inode:6027: inode 15 [ 403.629116][T12380] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.2290: couldn't read orphan inode 15 (err -117) [ 403.629144][T12380] loop8: lost filesystem error report for type 5 error -117 [ 403.708983][T12380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.832488][ T31] audit: type=1800 audit(1794087129.505:955): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 403.872243][T12380] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.2290: Unrecognised inode hash code 255 [ 403.872271][T12380] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2290: Corrupt directory, running e2fsck is recommended [ 403.880827][T12380] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.2290: Unrecognised inode hash code 255 [ 403.880853][T12380] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2290: Corrupt directory, running e2fsck is recommended [ 403.880887][T12380] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 4: comm syz.8.2290: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 403.992718][ T5650] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 404.250456][T12384] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 404.379052][T10936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.598833][T12392] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 404.730343][T12395] netlink: 'syz.9.2297': attribute type 4 has an invalid length. [ 406.631080][T12388] loop3: detected capacity change from 0 to 32768 [ 406.704021][T12388] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 406.735529][T12394] loop5: detected capacity change from 0 to 32768 [ 406.753997][T12394] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2296 (12394) [ 406.800697][ T31] audit: type=1800 audit(1794087132.485:956): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 406.831086][T12394] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 406.831115][T12394] BTRFS info (device loop5): using blake2b checksum algorithm [ 406.925458][T12388] XFS (loop3): Ending clean mount [ 406.967545][ T31] audit: type=1800 audit(1794087132.655:957): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15487 res=0 errno=-22 [ 407.028112][ T31] audit: type=1800 audit(1794087132.715:958): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218769 res=0 errno=-22 [ 407.092348][T12394] BTRFS info (device loop5): enabling ssd optimizations [ 407.092391][T12394] BTRFS info (device loop5): turning on async discard [ 407.092407][T12394] BTRFS info (device loop5): enabling free space tree [ 407.335460][ T31] audit: type=1800 audit(1794087133.025:959): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2296" name="file1" dev="loop5" ino=260 res=0 errno=-22 [ 407.778269][ T5639] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 407.952899][T12448] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2309'. [ 408.471210][ T5644] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 408.758161][T12456] bridge0: port 4(vlan0) entered blocking state [ 408.758291][T12456] bridge0: port 4(vlan0) entered disabled state [ 408.832294][T12456] vlan0: entered allmulticast mode [ 408.832315][T12456] veth0_vlan: entered allmulticast mode [ 409.071251][T12456] vlan0: entered promiscuous mode [ 409.099849][T12456] bridge0: port 4(vlan0) entered blocking state [ 409.100026][T12456] bridge0: port 4(vlan0) entered forwarding state [ 410.567991][ T31] audit: type=1800 audit(1794087136.245:960): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218920 res=0 errno=-22 [ 410.605290][ T31] audit: type=1800 audit(1794087136.295:961): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218935 res=0 errno=-22 [ 411.380741][T12485] FAULT_INJECTION: forcing a failure. [ 411.380741][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 411.380775][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.5.2326 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.380801][T12485] Tainted: [L]=SOFTLOCKUP [ 411.380809][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 411.380820][T12485] Call Trace: [ 411.380828][T12485] [ 411.380837][T12485] dump_stack_lvl+0xe8/0x150 [ 411.380874][T12485] should_fail_ex+0x3eb/0x540 [ 411.380904][T12485] should_failslab+0xa8/0x100 [ 411.380937][T12485] __kmalloc_noprof+0xf9/0x710 [ 411.380963][T12485] ? security_sk_alloc+0x52/0x360 [ 411.380993][T12485] ? security_sk_alloc+0x52/0x360 [ 411.381022][T12485] security_sk_alloc+0x52/0x360 [ 411.381049][T12485] sk_prot_alloc+0x101/0x210 [ 411.381069][T12485] ? sk_alloc+0x27/0x390 [ 411.381091][T12485] sk_alloc+0x3a/0x390 [ 411.381115][T12485] pfkey_create+0xdc/0x570 [ 411.381139][T12485] __sock_create+0x4b5/0xac0 [ 411.381175][T12485] __sys_socket+0xd6/0x1b0 [ 411.381207][T12485] __x64_sys_socket+0x7a/0x90 [ 411.381237][T12485] do_syscall_64+0x166/0x520 [ 411.381262][T12485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.381288][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.381308][T12485] RIP: 0033:0x7f904519fb19 [ 411.381326][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.381343][T12485] RSP: 002b:00007f9046006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 411.381367][T12485] RAX: ffffffffffffffda RBX: 00007f9045425fa0 RCX: 00007f904519fb19 [ 411.381382][T12485] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 411.381394][T12485] RBP: 00007f9045237b70 R08: 0000000000000000 R09: 0000000000000000 [ 411.381407][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.381419][T12485] R13: 00007f9045426038 R14: 00007f9045425fa0 R15: 00007ffd36a27428 [ 411.381451][T12485] [ 412.080270][T12468] loop7: detected capacity change from 0 to 32768 [ 412.117991][T12468] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2318 (12468) [ 412.205741][T12468] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 412.205770][T12468] BTRFS info (device loop7): using blake2b checksum algorithm [ 412.281591][ T31] audit: type=1800 audit(1794087137.955:962): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 412.323122][ T31] audit: type=1800 audit(1794087138.005:963): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219034 res=0 errno=-22 [ 412.500160][T12468] BTRFS info (device loop7): setting nodatasum [ 412.500186][T12468] BTRFS info (device loop7): setting nodatacow [ 412.500201][T12468] BTRFS info (device loop7): turning on async discard [ 412.500215][T12468] BTRFS info (device loop7): enabling free space tree [ 412.500231][T12468] BTRFS info (device loop7): max_inline set to 842 [ 412.901511][ T31] audit: type=1800 audit(1794087138.585:964): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219153 res=0 errno=-22 [ 412.972319][ T31] audit: type=1800 audit(1794087138.655:965): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2318" name="file2" dev="loop7" ino=261 res=0 errno=-4 [ 413.354789][ T9509] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 413.480103][T12527] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2337'. [ 413.973265][T12533] loop3: detected capacity change from 0 to 2048 [ 414.121938][ T31] audit: type=1800 audit(1794087139.805:966): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 414.201176][T12533] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 414.594570][ T31] audit: type=1800 audit(1794087140.275:967): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219200 res=0 errno=-22 [ 414.744694][ T31] audit: type=1800 audit(1794087140.425:968): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219215 res=0 errno=-22 [ 415.208847][T12553] loop8: detected capacity change from 0 to 512 [ 415.282200][T12553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 415.282304][T12553] System zones: 1-12 [ 415.302858][T12553] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.2348: missing EA_INODE flag [ 415.302879][T12553] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 415.303507][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 415.303524][ C0] EXT4-fs (loop8): initial error at time 1794087140: ext4_xattr_inode_iget:437: inode 12 [ 415.303551][ C0] EXT4-fs (loop8): last error at time 1794087140: ext4_xattr_inode_iget:437: inode 12 [ 415.366695][T12553] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.2348: error while reading EA inode 12 err=-117 [ 415.366725][T12553] loop8: lost filesystem error report for type 5 error -117 [ 415.372314][T12553] EXT4-fs (loop8): 1 orphan inode deleted [ 415.415448][T12553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.468280][ T986] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 415.635051][ T986] usb 8-1: Using ep0 maxpacket: 16 [ 415.637917][ T986] usb 8-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 415.657418][ T986] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 415.657444][ T986] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.714854][ T986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.714879][ T986] usb 8-1: Product: syz [ 415.714892][ T986] usb 8-1: Manufacturer: syz [ 415.714905][ T986] usb 8-1: SerialNumber: syz [ 415.752314][ T986] usb 8-1: config 0 descriptor?? [ 415.774015][ T31] audit: type=1800 audit(1794087141.465:969): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219292 res=0 errno=-22 [ 415.816658][ T986] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 415.816686][ T986] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 415.852002][ T31] audit: type=1800 audit(1794087141.495:970): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219324 res=0 errno=-22 [ 415.852070][ T31] audit: type=1800 audit(1794087141.535:971): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219299 res=0 errno=-22 [ 415.904539][ T4945] Bluetooth: hci6: command 0x0406 tx timeout [ 415.944115][T12559] WARNING! power/level is deprecated; use power/control instead [ 416.254390][ T5742] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 416.325175][T10936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.419751][ T5742] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 416.435253][ T5742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.435303][ T5742] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 416.435333][ T5742] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 416.438490][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.438511][ T5742] usb 4-1: SerialNumber: syz [ 416.529741][ T5742] cdc_acm 4-1:1.0: skipping garbage [ 416.529761][ T5742] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 416.529775][ T5742] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 416.529794][ T5742] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 416.572532][ T986] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 416.582333][ T986] em28xx 8-1:0.0: Config register raw data: 0x41 [ 416.759884][ T986] usb 4-1: USB disconnect, device number 17 [ 416.830484][ T5742] usb 8-1: USB disconnect, device number 4 [ 416.831927][ T5742] em28xx 8-1:0.0: Disconnecting em28xx [ 417.124143][ T5742] em28xx: Freeing device [ 417.260684][T12547] loop9: detected capacity change from 0 to 32768 [ 417.276959][T12547] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2345 (12547) [ 417.311313][T12547] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 417.311342][T12547] BTRFS info (device loop9): using sha256 checksum algorithm [ 417.412999][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 417.413017][ T31] audit: type=1800 audit(1794087143.095:987): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22 [ 417.460217][ T31] audit: type=1800 audit(1794087143.145:988): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219510 res=0 errno=-22 [ 417.518142][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2354'. [ 417.918251][T12584] loop7: detected capacity change from 0 to 512 [ 417.969981][T12547] BTRFS error (device loop9): open_ctree failed: -EINTR [ 418.068482][ T31] audit: type=1800 audit(1794087143.755:989): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 419.009111][T12600] netlink: 'syz.3.2362': attribute type 6 has an invalid length. [ 419.623889][ T5742] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 419.774701][ T5742] usb 9-1: Using ep0 maxpacket: 8 [ 419.777773][ T5742] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.781883][ T5742] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 419.781926][ T5742] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.781945][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.781966][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.781987][ T5742] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.782030][ T5742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.901981][ T31] audit: type=1800 audit(1794087145.585:990): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219633 res=0 errno=-22 [ 419.952289][ T31] audit: type=1800 audit(1794087145.625:991): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219662 res=0 errno=-22 [ 419.983269][ T31] audit: type=1800 audit(1794087145.665:992): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219640 res=0 errno=-22 [ 420.027453][ T31] audit: type=1800 audit(1794087145.715:993): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=219641 res=0 errno=-22 [ 420.068434][ T31] audit: type=1800 audit(1794087145.755:994): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219642 res=0 errno=-22 [ 420.131019][ T31] audit: type=1800 audit(1794087145.815:995): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219682 res=0 errno=-22 [ 420.187526][ T5742] usb 9-1: usb_control_msg returned -32 [ 420.187568][ T5742] usbtmc 9-1:16.0: can't read capabilities [ 420.232920][ T31] audit: type=1800 audit(1794087145.915:996): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219699 res=0 errno=-22 [ 420.644428][T12614] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 420.666876][ T5742] usb 9-1: USB disconnect, device number 4 [ 421.112686][T12599] loop7: detected capacity change from 0 to 32768 [ 421.164321][T12599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2360 (12599) [ 421.217791][T12599] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.217822][T12599] BTRFS info (device loop7): using sha256 checksum algorithm [ 421.463837][T12599] BTRFS info (device loop7): enabling ssd optimizations [ 421.463863][T12599] BTRFS info (device loop7): turning on async discard [ 421.463877][T12599] BTRFS info (device loop7): enabling free space tree [ 421.815345][T12608] loop3: detected capacity change from 0 to 32768 [ 422.011993][T12608] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 422.011993][T12608] [ 422.197798][T12608] ERROR: (device loop3): remounting filesystem as read-only [ 422.197815][T12608] xtLookup: xtSearch returned -5 [ 422.197911][T12608] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 422.197911][T12608] [ 422.197966][T12608] xtLookup: xtSearch returned -5 [ 422.198303][T12608] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 422.198303][T12608] [ 422.198422][T12608] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 422.198422][T12608] [ 422.198446][T12608] xtLookup: xtSearch returned -5 [ 422.198460][T12608] ERROR: (device loop3): xtTruncate: xt_getpage: xtree page corrupt [ 422.198460][T12608] [ 422.441935][ T9509] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 422.478997][T12654] loop8: detected capacity change from 0 to 512 [ 422.509072][T12654] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 422.509089][T12654] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 422.618598][T12654] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #16: comm syz.8.2377: invalid indirect mapped block 32768 (level 2) [ 422.618631][T12654] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.623541][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 422.623559][ C0] EXT4-fs (loop8): initial error at time 1794087148: ext4_free_branches:1040: inode 16 [ 422.623586][ C0] EXT4-fs (loop8): last error at time 1794087148: ext4_free_branches:1040: inode 16 [ 422.727481][T12654] EXT4-fs (loop8): 1 orphan inode deleted [ 422.727502][T12654] EXT4-fs (loop8): 1 truncate cleaned up [ 422.760343][T12654] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.780107][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 422.780121][ T31] audit: type=1800 audit(1794087148.445:1003): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 423.208070][T10936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.392079][T12663] loop3: detected capacity change from 0 to 2048 [ 423.392854][T12663] udf: Unknown parameter 'ÿÿ0xffffffffffffffffÿÿ' [ 423.546092][ T31] audit: type=1800 audit(1794087149.235:1004): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 424.113566][ T5858] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 424.161286][T12677] loop5: detected capacity change from 0 to 1024 [ 424.263026][T12677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.281072][ T5858] usb 10-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 424.301105][ T5858] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.333746][ T31] audit: type=1800 audit(1794087150.015:1005): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15487 res=0 errno=-22 [ 424.338409][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.338432][ T5858] usb 10-1: Product: syz [ 424.338446][ T5858] usb 10-1: Manufacturer: syz [ 424.338459][ T5858] usb 10-1: SerialNumber: syz [ 424.419248][ T31] audit: type=1800 audit(1794087150.105:1006): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220088 res=0 errno=-22 [ 424.461417][ T31] audit: type=1800 audit(1794087150.145:1007): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220120 res=0 errno=-22 [ 424.500610][ T31] audit: type=1800 audit(1794087150.185:1008): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220095 res=0 errno=-22 [ 424.540832][ T31] audit: type=1800 audit(1794087150.225:1009): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220154 res=0 errno=-22 [ 424.568730][ T31] audit: type=1800 audit(1794087150.255:1010): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220096 res=0 errno=-22 [ 425.964170][T12685] loop7: detected capacity change from 0 to 131072 [ 425.965074][T12685] xfs: Deprecated parameter 'ikeep' [ 425.965112][T12685] XFS: ikeep mount option is deprecated. [ 425.970210][T12674] raw-gadget.0 gadget.9: fail, usb_ep_queue returned -108 [ 426.058685][T12685] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 426.252148][T12685] XFS (loop7): Starting recovery (logdev: internal) [ 426.371545][T12685] XFS (loop7): Ending recovery (logdev: internal) [ 426.461387][ T5644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.722817][T12700] jffs2: notice: (12700) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 427.211989][ T9509] XFS (loop7): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 427.233160][ T5858] speedtch 10-1:1.0: speedtch_bind: device reset failed (-19)! [ 427.233420][ T5858] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -19! [ 427.302715][ T31] audit: type=1800 audit(1794087152.985:1011): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=220117 res=0 errno=-22 [ 427.302762][ T31] audit: type=1800 audit(1794087152.985:1012): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=220118 res=0 errno=-22 [ 427.363635][ T5858] usb 10-1: USB disconnect, device number 5 [ 427.879849][T12712] loop5: detected capacity change from 0 to 2048 [ 428.077161][T12712] loop5: p4 < > [ 428.247343][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 428.247361][ T31] audit: type=1800 audit(1794087153.935:1015): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2392" name="force" dev="sysfs" ino=64055 res=0 errno=-22 [ 428.355527][ T31] audit: type=1800 audit(1794087154.045:1016): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220330 res=0 errno=-22 [ 428.425405][ T31] audit: type=1800 audit(1794087154.105:1017): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="dev" dev="sysfs" ino=15527 res=0 errno=-22 [ 428.453261][T12717] EXT4-fs (loop11): unable to read superblock [ 428.504937][ T31] audit: type=1800 audit(1794087154.195:1018): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="size" dev="sysfs" ino=220335 res=0 errno=-22 [ 428.540718][ T31] audit: type=1800 audit(1794087154.225:1019): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="start" dev="sysfs" ino=220334 res=0 errno=-22 [ 428.976280][T12734] loop7: detected capacity change from 0 to 1024 [ 429.156783][ T31] audit: type=1800 audit(1794087154.845:1020): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 429.245183][T12734] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.245201][T12734] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.722730][T12737] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.722747][T12737] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.837447][T12734] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.837466][T12734] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.891076][T12741] hfsplus: request for non-existent node 33423360 in B*Tree [ 429.891094][T12741] hfsplus: request for non-existent node 33423360 in B*Tree [ 430.225290][ T986] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 430.393898][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 430.394956][ T986] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 430.399671][ T986] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.399697][ T986] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.399717][ T986] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 430.399740][ T986] usb 2-1: config 0 interface 0 has no altsetting 0 [ 430.399768][ T986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.540856][ T31] audit: type=1800 audit(1794087156.225:1021): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220373 res=0 errno=-22 [ 430.540945][ T986] usb 2-1: config 0 descriptor?? [ 430.588645][ T31] audit: type=1800 audit(1794087156.275:1022): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220402 res=0 errno=-22 [ 430.617107][ T31] audit: type=1800 audit(1794087156.305:1023): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220380 res=0 errno=-22 [ 430.661920][ T31] audit: type=1800 audit(1794087156.345:1024): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220381 res=0 errno=-22 [ 430.725931][T12761] loop7: detected capacity change from 0 to 128 [ 431.082023][ T986] hid (null): unknown global tag 0xe [ 431.082049][ T986] hid (null): invalid report_size 15363 [ 431.082072][ T986] hid (null): unknown global tag 0xc [ 431.082094][ T986] hid (null): unknown global tag 0xc [ 431.094746][T12757] loop3: detected capacity change from 0 to 8192 [ 431.125647][ T986] hid (null): global environment stack underflow [ 431.125666][ T986] hid (null): global environment stack underflow [ 431.293577][ T986] usb 2-1: USB disconnect, device number 11 [ 431.497954][T12767] input: syz1 as /devices/virtual/input/input19 [ 432.201390][T12746] loop8: detected capacity change from 0 to 32768 [ 432.441229][T12773] loop1: detected capacity change from 0 to 164 [ 432.736419][T12776] jfs_unlink: dtDelete returned -116 [ 432.736641][T12776] jfs_unlink: dtDelete returned -116 [ 432.978244][T12778] loop9: detected capacity change from 0 to 16 [ 433.028322][T12778] erofs (device loop9): mounted with root inode @ nid 36. [ 433.464745][ T5858] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 433.602645][T12786] FAULT_INJECTION: forcing a failure. [ 433.602645][T12786] name failslab, interval 1, probability 0, space 0, times 0 [ 433.602676][T12786] CPU: 0 UID: 0 PID: 12786 Comm: syz.8.2425 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.602702][T12786] Tainted: [L]=SOFTLOCKUP [ 433.602710][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 433.602722][T12786] Call Trace: [ 433.602730][T12786] [ 433.602739][T12786] dump_stack_lvl+0xe8/0x150 [ 433.602775][T12786] should_fail_ex+0x3eb/0x540 [ 433.602805][T12786] should_failslab+0xa8/0x100 [ 433.602839][T12786] __kmalloc_cache_noprof+0x9e/0x600 [ 433.602866][T12786] ? do_eventfd+0x84/0x280 [ 433.602892][T12786] ? do_eventfd+0x84/0x280 [ 433.602925][T12786] do_eventfd+0x84/0x280 [ 433.602954][T12786] __x64_sys_eventfd2+0x5a/0x70 [ 433.602982][T12786] do_syscall_64+0x166/0x520 [ 433.603017][T12786] ? trace_irq_disable+0x3b/0x140 [ 433.603045][T12786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.603071][T12786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.603091][T12786] RIP: 0033:0x7f3685b9fb19 [ 433.603110][T12786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.603125][T12786] RSP: 002b:00007f3686ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 433.603145][T12786] RAX: ffffffffffffffda RBX: 00007f3685e25fa0 RCX: 00007f3685b9fb19 [ 433.603160][T12786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 433.603173][T12786] RBP: 00007f3685c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 433.603185][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.603197][T12786] R13: 00007f3685e26038 R14: 00007f3685e25fa0 R15: 00007fff80ad6c38 [ 433.603228][T12786] [ 433.666197][ T5858] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 433.844186][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.869711][ T5858] usb 2-1: config 0 descriptor?? [ 433.888646][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 433.888663][ T31] audit: type=1800 audit(1794087159.575:1043): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220586 res=0 errno=-22 [ 433.951047][ T31] audit: type=1800 audit(1794087159.625:1044): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220615 res=0 errno=-22 [ 433.951112][ T31] audit: type=1800 audit(1794087159.635:1045): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220593 res=0 errno=-22 [ 434.017901][ T31] audit: type=1800 audit(1794087159.705:1046): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220594 res=0 errno=-22 [ 434.056082][ T31] audit: type=1800 audit(1794087159.745:1047): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=220595 res=0 errno=-22 [ 434.117991][ T31] audit: type=1800 audit(1794087159.805:1048): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220635 res=0 errno=-22 [ 434.171479][ T5858] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 434.245055][T12792] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 434.457300][ T31] audit: type=1800 audit(1794087160.135:1049): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220652 res=0 errno=-22 [ 434.512261][ T5858] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 434.512284][ T5858] [drm] Initialized udl on minor 1 [ 434.594443][ T31] audit: type=1800 audit(1794087160.285:1050): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220666 res=0 errno=-22 [ 436.920076][ T3321] IPVS: starting estimator thread 0... [ 437.005101][T12833] IPVS: fo: FWM 3 0x00000003 - no destination available [ 437.005209][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 437.118540][T12832] IPVS: using max 33 ests per chain, 79200 per kthread [ 437.187821][T12835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.120973][T12820] loop7: detected capacity change from 0 to 32768 [ 438.169117][T12844] Bluetooth: ISO socket layer initialized [ 438.255666][ T31] audit: type=1800 audit(1794087164.944:1051): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 438.336255][T12820] ERROR: (device loop7): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 438.336255][T12820] [ 438.388150][T12828] loop3: detected capacity change from 0 to 32768 [ 438.502709][ T31] audit: type=1800 audit(1794087165.184:1052): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 438.528620][T12828] JBD2: Ignoring recovery information on journal [ 438.544293][T12820] ERROR: (device loop7): remounting filesystem as read-only [ 438.544320][T12820] ERROR: (device loop7): jfs_rename: [ 438.544320][T12820] [ 438.855915][T12828] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 439.431790][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.566316][ T9509] ERROR: (device loop7): xtTruncate: xt_getpage: xtree page corrupt [ 439.566316][ T9509] [ 439.566353][ T9509] ERROR: (device loop7): remounting filesystem as read-only [ 439.600097][ T5858] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 439.600453][ T5858] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 439.642174][ T5858] usb 2-1: USB disconnect, device number 12 [ 439.663075][ T5787] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 439.707943][ T5787] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 439.911211][ T31] audit: type=1800 audit(1794087166.594:1053): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2441" name="file1" dev="loop3" ino=17059 res=0 errno=-4 [ 439.992425][ T31] audit: type=1800 audit(1794087166.674:1054): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220757 res=0 errno=-22 [ 440.300479][ T5639] ocfs2: Unmounting device (7,3) on (node local) [ 440.823231][T12847] loop9: detected capacity change from 0 to 32768 [ 440.848101][T12847] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2449 (12847) [ 440.897972][T12847] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 440.898002][T12847] BTRFS info (device loop9): using sha256 checksum algorithm [ 440.990600][ T31] audit: type=1800 audit(1794087167.674:1055): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22 [ 441.040780][ T31] audit: type=1800 audit(1794087167.724:1056): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220783 res=0 errno=-22 [ 441.401045][T12847] BTRFS error (device loop9): open_ctree failed: -EINTR [ 441.962873][T12898] vxcan0: tx address claim with different name [ 442.110489][T12901] loop7: detected capacity change from 0 to 1024 [ 442.111652][T12901] hfsplus: Unknown parameter '01777777777777777777777ÿÿ0xffffffffffffffffÿÿ(²{/á@ÇAv‚™nÜÂÂЭõ7ðCm†)e¼C_üͶµ¬-Ê­o_{˜©˜¿ª6b7-2žß0!‹ó.X ¢Wý#î[ÎŽ¼¦ö9®éÈÖwä»”rã-ÂêÆ' [ 442.246212][ T31] audit: type=1800 audit(1794087168.934:1057): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 442.591753][T12913] loop3: detected capacity change from 0 to 512 [ 442.762353][ T31] audit: type=1800 audit(1794087169.444:1058): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 442.835139][T12913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.835236][T12913] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.966415][T12913] EXT4-fs (loop3): shut down requested (2) [ 443.058940][ T31] audit: type=1800 audit(1794087169.744:1059): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220979 res=0 errno=-22 [ 443.334481][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.506491][T12925] FAULT_INJECTION: forcing a failure. [ 443.506491][T12925] name failslab, interval 1, probability 0, space 0, times 0 [ 443.506529][T12925] CPU: 0 UID: 0 PID: 12925 Comm: syz.8.2470 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.506555][T12925] Tainted: [L]=SOFTLOCKUP [ 443.506563][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 443.506574][T12925] Call Trace: [ 443.506582][T12925] [ 443.506591][T12925] dump_stack_lvl+0xe8/0x150 [ 443.506628][T12925] should_fail_ex+0x3eb/0x540 [ 443.506658][T12925] should_failslab+0xa8/0x100 [ 443.506691][T12925] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 443.506718][T12925] ? __d_alloc+0x37/0x820 [ 443.506743][T12925] ? __d_alloc+0x37/0x820 [ 443.506774][T12925] __d_alloc+0x37/0x820 [ 443.506798][T12925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.506827][T12925] d_alloc_pseudo+0x21/0xc0 [ 443.506856][T12925] alloc_path_pseudo+0x107/0x220 [ 443.506882][T12925] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 443.506905][T12925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.506930][T12925] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.506957][T12925] alloc_file_pseudo+0xa8/0x1e0 [ 443.506983][T12925] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 443.507007][T12925] ? _raw_spin_unlock+0x28/0x50 [ 443.507027][T12925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.507057][T12925] sock_alloc_file+0xb8/0x2e0 [ 443.507082][T12925] ? __sys_socket+0x12b/0x1b0 [ 443.507112][T12925] __sys_socket+0x13f/0x1b0 [ 443.507144][T12925] __x64_sys_socket+0x7a/0x90 [ 443.507173][T12925] do_syscall_64+0x166/0x520 [ 443.507197][T12925] ? trace_irq_disable+0x3b/0x140 [ 443.507224][T12925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.507250][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.507269][T12925] RIP: 0033:0x7f3685b9fb19 [ 443.507287][T12925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.507303][T12925] RSP: 002b:00007f3686ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 443.507324][T12925] RAX: ffffffffffffffda RBX: 00007f3685e25fa0 RCX: 00007f3685b9fb19 [ 443.507339][T12925] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 443.507351][T12925] RBP: 00007f3685c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 443.507364][T12925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.507376][T12925] R13: 00007f3685e26038 R14: 00007f3685e25fa0 R15: 00007fff80ad6c38 [ 443.507407][T12925] [ 444.259338][T12937] loop8: detected capacity change from 0 to 128 [ 444.333189][T12937] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.349186][T12937] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 444.422773][ T31] audit: type=1800 audit(1794087171.104:1060): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 444.817647][T10936] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.521441][T12971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 446.544158][ T31] audit: type=1800 audit(1794087173.224:1061): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221099 res=0 errno=-22 [ 446.584096][ T31] audit: type=1800 audit(1794087173.274:1062): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=221115 res=0 errno=-22 [ 446.627559][ T31] audit: type=1800 audit(1794087173.314:1063): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=221118 res=0 errno=-22 [ 446.673795][ T31] audit: type=1800 audit(1794087173.364:1064): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=221117 res=0 errno=-22 [ 446.674724][ T31] audit: type=1800 audit(1794087173.364:1065): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=221116 res=0 errno=-22 [ 446.734496][ T31] audit: type=1800 audit(1794087173.424:1066): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=221107 res=0 errno=-22 [ 446.844259][T12943] loop5: detected capacity change from 0 to 32768 [ 446.926210][T12943] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 446.967837][T12943] JBD2: Ignoring recovery information on journal [ 447.001162][ T31] audit: type=1800 audit(1794087173.674:1067): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15487 res=0 errno=-22 [ 447.172053][T12943] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 447.189126][ T31] audit: type=1800 audit(1794087173.874:1068): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221131 res=0 errno=-22 [ 447.259453][ T31] audit: type=1800 audit(1794087173.944:1069): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=221103 res=0 errno=-22 [ 447.299519][ T31] audit: type=1800 audit(1794087173.984:1070): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=221104 res=0 errno=-22 [ 447.861673][ T5644] ocfs2: Unmounting device (7,5) on (node local) [ 449.538722][T13020] loop3: detected capacity change from 0 to 1024 [ 449.559427][T13020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.622934][T13020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.629764][T13020] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.829324][T13026] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2507: bg 0: block 112: padding at end of block bitmap is not set [ 449.856263][T13026] EXT4-fs (loop3): Remounting filesystem read-only [ 450.173086][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 450.555522][T13040] loop5: detected capacity change from 0 to 512 [ 450.608465][T13040] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 450.608483][T13040] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 450.647977][T13040] EXT4-fs (loop5): 1 truncate cleaned up [ 450.722477][T13040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.810734][T13040] EXT4-fs (loop5): shut down requested (2) [ 450.881991][T13003] loop1: detected capacity change from 0 to 40427 [ 450.935727][T13003] F2FS-fs (loop1): invalid crc value [ 451.091423][ T5644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.567458][T13055] vlan2: entered allmulticast mode [ 451.567479][T13055] bond0: entered allmulticast mode [ 451.567491][T13055] bond_slave_0: entered allmulticast mode [ 451.567506][T13055] bond_slave_1: entered allmulticast mode [ 451.631905][T13055] bridge0: port 4(vlan2) entered blocking state [ 451.632007][T13055] bridge0: port 4(vlan2) entered disabled state [ 451.658690][T13003] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 451.709720][T13055] vlan2: entered promiscuous mode [ 451.709739][T13055] bond0: entered promiscuous mode [ 451.709752][T13055] bond_slave_0: entered promiscuous mode [ 451.709929][T13055] bond_slave_1: entered promiscuous mode [ 451.713640][T13055] bridge0: port 4(vlan2) entered blocking state [ 451.713735][T13055] bridge0: port 4(vlan2) entered forwarding state [ 451.972286][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2520'. [ 451.972313][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2520'. [ 452.315182][T13066] syzkaller1: entered promiscuous mode [ 452.315203][T13066] syzkaller1: entered allmulticast mode [ 452.461922][T13071] FAULT_INJECTION: forcing a failure. [ 452.461922][T13071] name failslab, interval 1, probability 0, space 0, times 0 [ 452.461955][T13071] CPU: 0 UID: 0 PID: 13071 Comm: syz.3.2524 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.461980][T13071] Tainted: [L]=SOFTLOCKUP [ 452.461988][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 452.462000][T13071] Call Trace: [ 452.462009][T13071] [ 452.462024][T13071] dump_stack_lvl+0xe8/0x150 [ 452.462060][T13071] should_fail_ex+0x3eb/0x540 [ 452.462088][T13071] ? __alloc_skb+0x1db/0x7a0 [ 452.462107][T13071] should_failslab+0xa8/0x100 [ 452.462140][T13071] ? __alloc_skb+0x1db/0x7a0 [ 452.462157][T13071] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 452.462182][T13071] ? __alloc_skb+0x18d/0x7a0 [ 452.462200][T13071] ? __alloc_skb+0x1db/0x7a0 [ 452.462225][T13071] __alloc_skb+0x1db/0x7a0 [ 452.462249][T13071] vhci_write+0xc3/0x4a0 [ 452.462277][T13071] vfs_write+0x612/0xba0 [ 452.462313][T13071] ? __pfx_vfs_write+0x10/0x10 [ 452.462343][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.462369][T13071] ? __fget_files+0x3a2/0x420 [ 452.462394][T13071] ? __fget_files+0x2a/0x420 [ 452.462422][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.462444][T13071] ? fdget+0x1ac/0x250 [ 452.462471][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.462497][T13071] ksys_write+0x150/0x270 [ 452.462530][T13071] ? __pfx_ksys_write+0x10/0x10 [ 452.462568][T13071] do_syscall_64+0x166/0x520 [ 452.462594][T13071] ? trace_irq_disable+0x3b/0x140 [ 452.462621][T13071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.462646][T13071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.462666][T13071] RIP: 0033:0x7efc8336034e [ 452.462684][T13071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.462701][T13071] RSP: 002b:00007efc84262fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.462722][T13071] RAX: ffffffffffffffda RBX: 00007efc842636c0 RCX: 00007efc8336034e [ 452.462736][T13071] RDX: 000000000000000b RSI: 0000000000000000 RDI: 00000000000000ca [ 452.462749][T13071] RBP: 00007efc83437b70 R08: 0000000000000000 R09: 0000000000000000 [ 452.462762][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.462774][T13071] R13: 00007efc83626038 R14: 00007efc83625fa0 R15: 00007ffc0c7dcb78 [ 452.462805][T13071] [ 456.987859][T13109] loop7: detected capacity change from 0 to 512 [ 457.136216][T13109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.136316][T13109] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.176443][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 457.176459][ T31] audit: type=1800 audit(1794087183.864:1074): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 457.423268][ T9509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.799959][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.221137][T13138] loop3: detected capacity change from 0 to 128 [ 458.240155][T13138] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 458.318846][ T31] audit: type=1800 audit(1794087185.004:1075): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2547" name="xps_cpus" dev="sysfs" ino=103139 res=0 errno=-22 [ 458.350894][ T31] audit: type=1800 audit(1794087185.034:1076): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 458.413422][T11363] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 459.600447][ T31] audit: type=1800 audit(1794087186.274:1077): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221663 res=0 errno=-22 [ 459.726945][ T31] audit: type=1800 audit(1794087186.414:1078): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221675 res=0 errno=-22 [ 459.830055][ T31] audit: type=1800 audit(1794087186.514:1079): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221699 res=0 errno=-22 [ 459.881439][ T31] audit: type=1800 audit(1794087186.564:1080): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221687 res=0 errno=-22 [ 459.961548][T13170] loop7: detected capacity change from 0 to 1024 [ 459.981748][T13170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.999753][ T31] audit: type=1800 audit(1794087186.684:1081): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221723 res=0 errno=-22 [ 460.047236][ T31] audit: type=1800 audit(1794087186.734:1082): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221711 res=0 errno=-22 [ 460.106064][T13170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.106162][T13170] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.206533][ T31] audit: type=1800 audit(1794087186.894:1083): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 460.351326][T13178] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.2564: bg 0: block 112: padding at end of block bitmap is not set [ 460.367955][T13178] EXT4-fs (loop7): Remounting filesystem read-only [ 460.426842][T13168] loop5: detected capacity change from 0 to 4096 [ 460.610875][T13168] ntfs3(loop5): Failed to load $Extend (-22). [ 460.610898][T13168] ntfs3(loop5): Failed to initialize $Extend. [ 460.700013][ T9509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 460.991768][T13184] loop9: detected capacity change from 0 to 2048 [ 461.006821][T13184] udf: Bad value for 'anchor' [ 463.664330][T13218] loop3: detected capacity change from 0 to 32768 [ 463.716967][T13218] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 463.716985][T13218] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 463.780065][T13218] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 463.794939][ T5858] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 463.794957][ T5858] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 463.856465][ T31] kauditd_printk_skb: 73 callbacks suppressed [ 463.856483][ T31] audit: type=1800 audit(1794087190.544:1157): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=39712 res=0 errno=-22 [ 464.019698][ T31] audit: type=1800 audit(1794087190.704:1158): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 464.437267][ T5858] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 642ms [ 464.464582][ T5858] gfs2: fsid=syz:syz.0: jid=0: Done [ 464.464624][T13218] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 465.150311][T13237] loop1: detected capacity change from 0 to 512 [ 465.205615][T13237] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2587: iget: bad i_size value: 38620345925642 [ 465.205646][T13237] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.219064][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 465.219086][ C0] EXT4-fs (loop1): initial error at time 1794087191: ext4_orphan_get:1404: inode 15 [ 465.219113][ C0] EXT4-fs (loop1): last error at time 1794087191: ext4_orphan_get:1404: inode 15 [ 465.231958][T13237] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2587: couldn't read orphan inode 15 (err -117) [ 465.231989][T13237] loop1: lost filesystem error report for type 5 error -117 [ 465.256248][ T31] audit: type=1800 audit(1794087191.944:1159): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2588" name="map_device" dev="sysfs" ino=21039 res=0 errno=-22 [ 465.354262][T13237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.389096][T13238] rnbd_client L213: map_device: Parameters missing [ 465.466675][ T31] audit: type=1800 audit(1794087192.154:1160): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14995 res=0 errno=-22 [ 465.752528][ T31] audit: type=1800 audit(1794087192.434:1161): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187557 res=0 errno=-22 [ 465.779568][ T31] audit: type=1800 audit(1794087192.464:1162): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40488 res=0 errno=-22 [ 466.012133][ T5650] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.570107][T13256] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 466.981617][ T5858] kernel write not supported for file /cpu/0/msr (pid: 5858 comm: kworker/0:8) [ 467.960981][T13262] loop8: detected capacity change from 0 to 131072 [ 467.998047][T13262] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0) [ 467.998072][T13262] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 468.027644][T13262] F2FS-fs (loop8): invalid crc value [ 468.090039][ T31] audit: type=1800 audit(1794087194.774:1163): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 468.199342][T13262] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 468.216739][T13262] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 468.216760][T13262] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 468.281030][T13266] FAULT_INJECTION: forcing a failure. [ 468.281030][T13266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.281062][T13266] CPU: 0 UID: 0 PID: 13266 Comm: syz.3.2591 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.281094][T13266] Tainted: [L]=SOFTLOCKUP [ 468.281101][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 468.281113][T13266] Call Trace: [ 468.281121][T13266] [ 468.281129][T13266] dump_stack_lvl+0xe8/0x150 [ 468.281166][T13266] should_fail_ex+0x3eb/0x540 [ 468.281196][T13266] _copy_from_user+0x2d/0xb0 [ 468.281224][T13266] __x64_sys_mq_open+0x13f/0x1e0 [ 468.281259][T13266] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 468.281287][T13266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.281321][T13266] do_syscall_64+0x166/0x520 [ 468.281346][T13266] ? trace_irq_disable+0x3b/0x140 [ 468.281373][T13266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.281398][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.281417][T13266] RIP: 0033:0x7efc8339fb19 [ 468.281435][T13266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.281451][T13266] RSP: 002b:00007efc84263028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 468.281471][T13266] RAX: ffffffffffffffda RBX: 00007efc83625fa0 RCX: 00007efc8339fb19 [ 468.281486][T13266] RDX: 000000000000002c RSI: 6e93ebbbcc0884f2 RDI: 0000000000000000 [ 468.281498][T13266] RBP: 00007efc83437b70 R08: 0000000000000000 R09: 0000000000000000 [ 468.281511][T13266] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000000 [ 468.281524][T13266] R13: 00007efc83626038 R14: 00007efc83625fa0 R15: 00007ffc0c7dcb78 [ 468.281555][T13266] [ 468.511623][T13262] F2FS-fs (loop8): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 468.512705][T13262] F2FS-fs (loop8): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 468.567755][T13273] loop7: detected capacity change from 0 to 512 [ 468.705440][T13273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.705536][T13273] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.772225][ T31] audit: type=1800 audit(1794087195.454:1164): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 469.355607][ T9509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.069995][ T63] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.680939][ T63] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.152323][ T63] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.340909][ T31] audit: type=1800 audit(1794087198.024:1165): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222860 res=0 errno=-22 [ 471.371221][ T31] audit: type=1800 audit(1794087198.054:1166): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222871 res=0 errno=-22 [ 471.443442][ T4945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.452792][ T4945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.461613][ T4945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.489771][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.499717][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.547349][ T31] audit: type=1800 audit(1794087198.234:1167): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222890 res=0 errno=-22 [ 471.591120][ T31] audit: type=1800 audit(1794087198.274:1168): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222901 res=0 errno=-22 [ 472.001786][ T63] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.498614][T13313] FAULT_INJECTION: forcing a failure. [ 472.498614][T13313] name failslab, interval 1, probability 0, space 0, times 0 [ 472.498645][T13313] CPU: 0 UID: 0 PID: 13313 Comm: syz.9.2617 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.498671][T13313] Tainted: [L]=SOFTLOCKUP [ 472.498679][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 472.498690][T13313] Call Trace: [ 472.498698][T13313] [ 472.498707][T13313] dump_stack_lvl+0xe8/0x150 [ 472.498743][T13313] should_fail_ex+0x3eb/0x540 [ 472.498773][T13313] should_failslab+0xa8/0x100 [ 472.498807][T13313] __kmalloc_cache_noprof+0x9e/0x600 [ 472.498832][T13313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.498857][T13313] ? btrfs_init_fs_context+0x54/0x640 [ 472.498881][T13313] ? btrfs_init_fs_context+0x54/0x640 [ 472.498913][T13313] btrfs_init_fs_context+0x54/0x640 [ 472.498941][T13313] alloc_fs_context+0x99e/0xd00 [ 472.498980][T13313] __se_sys_fsopen+0x118/0x370 [ 472.499003][T13313] do_syscall_64+0x166/0x520 [ 472.499027][T13313] ? trace_irq_disable+0x3b/0x140 [ 472.499055][T13313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.499089][T13313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.499109][T13313] RIP: 0033:0x7f1c7e59fb19 [ 472.499127][T13313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.499143][T13313] RSP: 002b:00007f1c7f494028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 472.499162][T13313] RAX: ffffffffffffffda RBX: 00007f1c7e825fa0 RCX: 00007f1c7e59fb19 [ 472.499177][T13313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000700 [ 472.499190][T13313] RBP: 00007f1c7e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 472.499202][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.499214][T13313] R13: 00007f1c7e826038 R14: 00007f1c7e825fa0 R15: 00007ffe1b777978 [ 472.499244][T13313] [ 473.057041][ T31] audit: type=1800 audit(1794087199.744:1169): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222913 res=0 errno=-22 [ 473.098315][ T31] audit: type=1800 audit(1794087199.784:1170): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=222918 res=0 errno=-22 [ 473.098359][ T31] audit: type=1800 audit(1794087199.784:1171): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=222922 res=0 errno=-22 [ 473.122114][ T5858] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 473.172685][ T31] audit: type=1800 audit(1794087199.854:1172): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=222921 res=0 errno=-22 [ 473.212726][ T31] audit: type=1800 audit(1794087199.894:1173): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=222924 res=0 errno=-22 [ 473.318259][ T5858] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 473.320588][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.320614][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.320634][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.320670][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.388451][ T5858] usb 2-1: config 0 descriptor?? [ 473.407133][ T31] audit: type=1800 audit(1794087200.094:1174): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223007 res=0 errno=-22 [ 473.585051][ T53] Bluetooth: hci4: command tx timeout [ 473.740678][T13324] loop9: detected capacity change from 0 to 1024 [ 473.966578][ T5858] hid_parser_main: 5 callbacks suppressed [ 473.966599][ T5858] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 473.966622][ T5858] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 474.092579][ T63] vlan2: left promiscuous mode [ 474.092600][ T63] bond0: left promiscuous mode [ 474.092612][ T63] bond_slave_0: left promiscuous mode [ 474.092796][ T63] bond_slave_1: left promiscuous mode [ 474.130499][ T5858] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 474.221856][ T5858] usb 2-1: USB disconnect, device number 13 [ 474.252720][ T63] bridge0: port 4(vlan2) entered disabled state [ 474.337461][ T63] bond1: left allmulticast mode [ 474.337605][ T63] bond1: left promiscuous mode [ 474.337833][ T63] bridge0: port 3(bond1) entered disabled state [ 474.448942][ T63] bridge_slave_1: left allmulticast mode [ 474.448966][ T63] bridge_slave_1: left promiscuous mode [ 474.449126][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.540828][ T63] bridge_slave_0: left allmulticast mode [ 474.540853][ T63] bridge_slave_0: left promiscuous mode [ 474.541018][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.815682][T13336] FAULT_INJECTION: forcing a failure. [ 474.815682][T13336] name failslab, interval 1, probability 0, space 0, times 0 [ 474.815713][T13336] CPU: 0 UID: 0 PID: 13336 Comm: syz.9.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.815739][T13336] Tainted: [L]=SOFTLOCKUP [ 474.815746][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 474.815758][T13336] Call Trace: [ 474.815766][T13336] [ 474.815774][T13336] dump_stack_lvl+0xe8/0x150 [ 474.815811][T13336] should_fail_ex+0x3eb/0x540 [ 474.815840][T13336] should_failslab+0xa8/0x100 [ 474.815873][T13336] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 474.815900][T13336] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.815923][T13336] ? _raw_spin_unlock+0x28/0x50 [ 474.815943][T13336] ? setup_ipc_sysctls+0x55/0x2e0 [ 474.815964][T13336] ? setup_ipc_sysctls+0x55/0x2e0 [ 474.815992][T13336] kmemdup_noprof+0x2b/0x70 [ 474.816017][T13336] setup_ipc_sysctls+0x55/0x2e0 [ 474.816042][T13336] copy_ipcs+0x48f/0x6c0 [ 474.816079][T13336] create_new_namespaces+0x210/0x6b0 [ 474.816111][T13336] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.816137][T13336] ? security_capable+0x7e/0x2c0 [ 474.816173][T13336] unshare_nsproxy_namespaces+0x144/0x190 [ 474.816205][T13336] ksys_unshare+0x532/0x890 [ 474.816238][T13336] ? __pfx_ksys_unshare+0x10/0x10 [ 474.816270][T13336] ? rcu_is_watching+0x16/0xb0 [ 474.816310][T13336] __x64_sys_unshare+0x38/0x50 [ 474.816340][T13336] do_syscall_64+0x166/0x520 [ 474.816369][T13336] ? trace_irq_disable+0x3b/0x140 [ 474.816396][T13336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.816421][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.816440][T13336] RIP: 0033:0x7f1c7e59fb19 [ 474.816458][T13336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.816474][T13336] RSP: 002b:00007f1c7f494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 474.816494][T13336] RAX: ffffffffffffffda RBX: 00007f1c7e825fa0 RCX: 00007f1c7e59fb19 [ 474.816508][T13336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 474.816521][T13336] RBP: 00007f1c7e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 474.816533][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.816545][T13336] R13: 00007f1c7e826038 R14: 00007f1c7e825fa0 R15: 00007ffe1b777978 [ 474.816576][T13336] [ 475.162834][T13332] fido_id[13332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 475.572789][T13346] loop1: detected capacity change from 0 to 512 [ 475.648462][T13346] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2626: inode has both inline data and extents flags [ 475.648492][T13346] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.648746][T13346] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2626: couldn't read orphan inode 15 (err -117) [ 475.648772][T13346] loop1: lost filesystem error report for type 5 error -117 [ 475.666976][ T53] Bluetooth: hci4: command tx timeout [ 475.753126][T13347] loop8: detected capacity change from 0 to 1024 [ 475.754412][T13347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.801317][T13346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.881456][T13347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.908431][T13347] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.055880][ T5780] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 476.081500][T13358] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.2625: bg 0: block 112: padding at end of block bitmap is not set [ 476.212884][T13358] EXT4-fs (loop8): Remounting filesystem read-only [ 476.216034][ T5780] usb 10-1: Using ep0 maxpacket: 8 [ 476.241886][ T5780] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.254670][ T5780] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 476.254711][ T5780] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.254755][ T5780] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.254776][ T5780] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.254797][ T5780] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.254832][ T5780] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.351900][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 476.351916][ T31] audit: type=1800 audit(1794087203.034:1200): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223539 res=0 errno=-22 [ 476.412418][ T31] audit: type=1800 audit(1794087203.094:1201): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=223568 res=0 errno=-22 [ 476.463084][ T31] audit: type=1800 audit(1794087203.144:1202): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=223546 res=0 errno=-22 [ 476.528481][ T31] audit: type=1800 audit(1794087203.204:1203): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=223547 res=0 errno=-22 [ 476.571960][ T31] audit: type=1800 audit(1794087203.254:1204): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=223548 res=0 errno=-22 [ 476.597728][ T5650] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.673311][ T31] audit: type=1800 audit(1794087203.354:1205): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223588 res=0 errno=-22 [ 476.707271][ T5780] usb 10-1: usb_control_msg returned -32 [ 476.707313][ T5780] usbtmc 10-1:16.0: can't read capabilities [ 476.761743][ T31] audit: type=1800 audit(1794087203.444:1206): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223605 res=0 errno=-22 [ 476.857102][T10936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 477.096218][T13367] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 477.299946][ T5858] usb 10-1: USB disconnect, device number 6 [ 477.417319][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.417614][ T63] bond_slave_0: left allmulticast mode [ 477.472454][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.493037][ T63] bond_slave_1: left allmulticast mode [ 477.509775][ T63] bond0 (unregistering): Released all slaves [ 477.555799][ T63] bond1 (unregistering): Released all slaves [ 477.741792][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2632'. [ 477.746317][ T53] Bluetooth: hci4: command tx timeout [ 478.159275][T13380] jffs2: notice: (13380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 478.568905][T13390] FAULT_INJECTION: forcing a failure. [ 478.568905][T13390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.568936][T13390] CPU: 0 UID: 0 PID: 13390 Comm: syz.9.2638 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.568961][T13390] Tainted: [L]=SOFTLOCKUP [ 478.568969][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 478.568981][T13390] Call Trace: [ 478.568989][T13390] [ 478.568998][T13390] dump_stack_lvl+0xe8/0x150 [ 478.569034][T13390] should_fail_ex+0x3eb/0x540 [ 478.569071][T13390] set_fd_set+0x3a/0xa0 [ 478.569093][T13390] core_sys_select+0x9f7/0xb40 [ 478.569113][T13390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.569150][T13390] ? __pfx_core_sys_select+0x10/0x10 [ 478.569194][T13390] ? __pfx_set_user_sigmask+0x10/0x10 [ 478.569222][T13390] ? lockdep_hardirqs_on+0x7b/0x110 [ 478.569247][T13390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.569271][T13390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.569293][T13390] ? ktime_get_ts64+0x28c/0x300 [ 478.569323][T13390] __se_sys_pselect6+0x267/0x320 [ 478.569350][T13390] ? __pfx___se_sys_pselect6+0x10/0x10 [ 478.569379][T13390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.569401][T13390] ? __x64_sys_pselect6+0x21/0xf0 [ 478.569426][T13390] do_syscall_64+0x166/0x520 [ 478.569450][T13390] ? trace_irq_disable+0x3b/0x140 [ 478.569477][T13390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.569502][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.569521][T13390] RIP: 0033:0x7f1c7e59fb19 [ 478.569539][T13390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.569555][T13390] RSP: 002b:00007f1c7f494028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 478.569576][T13390] RAX: ffffffffffffffda RBX: 00007f1c7e825fa0 RCX: 00007f1c7e59fb19 [ 478.569590][T13390] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000040 [ 478.569604][T13390] RBP: 00007f1c7e637b70 R08: 0000200000000380 R09: 0000200000000400 [ 478.569618][T13390] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 478.569635][T13390] R13: 00007f1c7e826038 R14: 00007f1c7e825fa0 R15: 00007ffe1b777978 [ 478.569666][T13390] [ 479.015629][T13302] rxe_eth0 speed is unknown, defaulting to 1000 [ 479.640214][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 479.789503][ T31] audit: type=1800 audit(1794087206.474:1207): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142859 res=0 errno=-22 [ 479.826206][ T53] Bluetooth: hci4: command tx timeout [ 480.339649][T13414] netlink: 'syz.8.2646': attribute type 2 has an invalid length. [ 481.243139][T13420] bridge0: port 4(vlan0) entered disabled state [ 481.243319][T13420] bridge0: port 3(vlan2) entered disabled state [ 481.243533][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.243757][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.506342][T13420] team_slave_0: left promiscuous mode [ 481.506378][T13420] team_slave_1: left promiscuous mode [ 481.541270][T13398] loop3: detected capacity change from 0 to 32768 [ 481.570411][T13398] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2641 (13398) [ 481.643036][T13398] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 481.643075][T13398] BTRFS info (device loop3): using blake2b checksum algorithm [ 481.750714][ T31] audit: type=1800 audit(1794087208.434:1208): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 481.800811][ T31] audit: type=1800 audit(1794087208.484:1209): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226862 res=0 errno=-22 [ 481.920644][T13398] BTRFS info (device loop3): enabling ssd optimizations [ 481.920669][T13398] BTRFS info (device loop3): turning on async discard [ 481.920683][T13398] BTRFS info (device loop3): enabling free space tree [ 482.197360][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.287918][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.660118][ T5639] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 482.680952][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2652'. [ 483.734534][ T177] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.734964][ T177] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.734997][ T177] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.735029][ T177] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.123240][ T63] hsr_slave_0: left promiscuous mode [ 484.142932][ T63] hsr_slave_1: left promiscuous mode [ 484.151912][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.151930][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.255775][ T63] veth1_macvtap: left promiscuous mode [ 484.255809][ T63] veth0_macvtap: left promiscuous mode [ 484.255916][ T63] veth0_vlan: left promiscuous mode [ 485.072918][ T31] audit: type=1800 audit(1794087211.754:1210): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2662" name="remove" dev="sysfs" ino=2658 res=0 errno=-13 [ 485.114381][T13485] loop1: detected capacity change from 0 to 1024 [ 485.135768][ T31] audit: type=1800 audit(1794087211.824:1211): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2662" name="rescan" dev="sysfs" ino=1652 res=0 errno=-13 [ 485.245513][ T31] audit: type=1800 audit(1794087211.934:1212): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14995 res=0 errno=-22 [ 485.279750][ T31] audit: type=1800 audit(1794087211.974:1213): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227200 res=0 errno=-22 [ 485.316582][ T31] audit: type=1800 audit(1794087212.004:1214): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227215 res=0 errno=-22 [ 486.286859][T13506] loop8: detected capacity change from 0 to 32768 [ 486.316020][T13506] (syz.8.2671,13506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 486.316449][T13506] (syz.8.2671,13506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 486.360485][T13506] JBD2: Ignoring recovery information on journal [ 486.462636][ T31] audit: type=1800 audit(1794087213.144:1215): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 486.497532][T13506] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 486.547650][T13504] loop3: detected capacity change from 0 to 4096 [ 486.705398][T13504] ntfs3(loop3): Failed to load $Extend (-22). [ 486.705422][T13504] ntfs3(loop3): Failed to initialize $Extend. [ 486.731155][ T31] audit: type=1800 audit(1794087213.424:1216): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 487.832977][T13512] loop1: detected capacity change from 0 to 131072 [ 487.863975][T13512] F2FS-fs (loop1): invalid crc value [ 487.928379][T13512] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 487.946672][T13512] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 488.069126][ T31] audit: type=1800 audit(1794087214.744:1217): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14995 res=0 errno=-22 [ 488.115191][T10936] ocfs2: Unmounting device (7,8) on (node local) [ 488.500812][T13519] loop8: detected capacity change from 0 to 512 [ 488.644123][ T31] audit: type=1800 audit(1794087215.324:1218): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 488.702046][T13519] syz.8.2673: attempt to access beyond end of device [ 488.702046][T13519] loop8: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 488.720448][T13519] syz.8.2673: attempt to access beyond end of device [ 488.720448][T13519] loop8: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 488.720666][ T31] audit: type=1800 audit(1794087215.414:1219): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2673" name="file2" dev="loop8" ino=231 res=0 errno=-5 [ 488.788263][ T63] team0 (unregistering): Port device team_slave_1 removed [ 488.822941][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 488.822967][T13519] FAT-fs (loop8): Filesystem has been set read-only [ 488.861633][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 488.862091][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.023435][ T63] team0 (unregistering): Port device team_slave_0 removed [ 489.102024][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.103123][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.103382][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.151638][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.151908][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.183217][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.194741][T13519] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 489.799161][T13525] FAULT_INJECTION: forcing a failure. [ 489.799161][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 489.799193][T13525] CPU: 0 UID: 0 PID: 13525 Comm: syz.8.2676 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.799218][T13525] Tainted: [L]=SOFTLOCKUP [ 489.799226][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 489.799238][T13525] Call Trace: [ 489.799246][T13525] [ 489.799254][T13525] dump_stack_lvl+0xe8/0x150 [ 489.799291][T13525] should_fail_ex+0x3eb/0x540 [ 489.799320][T13525] should_failslab+0xa8/0x100 [ 489.799351][T13525] ? security_file_alloc+0x34/0x310 [ 489.799377][T13525] kmem_cache_alloc_noprof+0x9c/0x600 [ 489.799400][T13525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.799423][T13525] ? rcu_is_watching+0x16/0xb0 [ 489.799452][T13525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.799474][T13525] ? security_file_alloc+0x34/0x310 [ 489.799505][T13525] security_file_alloc+0x34/0x310 [ 489.799532][T13525] init_file+0x90/0x2b0 [ 489.799557][T13525] alloc_empty_file+0x74/0x1d0 [ 489.799580][T13525] alloc_file_pseudo+0x110/0x1e0 [ 489.799606][T13525] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 489.799630][T13525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.799653][T13525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.799682][T13525] anon_inode_getfile_fmode+0xb0/0x1c0 [ 489.799710][T13525] do_signalfd4+0x1a2/0x3c0 [ 489.799738][T13525] __x64_sys_signalfd4+0x15a/0x1a0 [ 489.799765][T13525] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 489.799799][T13525] do_syscall_64+0x166/0x520 [ 489.799823][T13525] ? trace_irq_disable+0x3b/0x140 [ 489.799851][T13525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.799875][T13525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.799895][T13525] RIP: 0033:0x7f3685b9fb19 [ 489.799913][T13525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.799929][T13525] RSP: 002b:00007f3686ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 489.799950][T13525] RAX: ffffffffffffffda RBX: 00007f3685e25fa0 RCX: 00007f3685b9fb19 [ 489.799965][T13525] RDX: 0000000000000008 RSI: 0000200000000f40 RDI: ffffffffffffffff [ 489.799979][T13525] RBP: 00007f3685c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 489.799992][T13525] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 489.800004][T13525] R13: 00007f3685e26038 R14: 00007f3685e25fa0 R15: 00007fff80ad6c38 [ 489.800036][T13525] [ 490.571318][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15 [ 490.870893][T13531] loop8: detected capacity change from 0 to 256 [ 491.022229][T13531] device-mapper: ioctl: Unable to change uuid on mapped device to one that already exists: CRP-syzi2 [ 491.078159][ T31] audit: type=1800 audit(1794087217.764:1220): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 491.208622][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.408911][T13541] loop7: detected capacity change from 0 to 256 [ 491.560441][ T31] audit: type=1800 audit(1794087218.244:1221): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22 [ 491.882643][T13548] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2684'. [ 491.918177][ T9509] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 491.918199][ T9509] FAT-fs (loop7): Filesystem has been set read-only [ 492.023222][ T9509] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 492.257955][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.785050][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.872766][T13558] loop8: detected capacity change from 0 to 2048 [ 493.176721][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.176810][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.177147][T13302] bridge_slave_0: entered allmulticast mode [ 493.209735][T13302] bridge_slave_0: entered promiscuous mode [ 493.254843][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.254935][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.255049][T13302] bridge_slave_1: entered allmulticast mode [ 493.283012][ T5858] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 493.302130][T13302] bridge_slave_1: entered promiscuous mode [ 493.329989][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.455948][ T5858] usb 9-1: New USB device found: idVendor=0403, idProduct=bca4, bcdDevice=2.23 [ 493.476502][ T5858] usb 9-1: config 0 has an invalid interface number: 134 but max is 0 [ 493.476528][ T5858] usb 9-1: config 0 has no interface number 0 [ 493.476560][ T5858] usb 9-1: config 0 interface 134 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 493.476583][ T5858] usb 9-1: config 0 interface 134 has no altsetting 0 [ 493.528647][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.528671][ T5858] usb 9-1: Product: syz [ 493.528684][ T5858] usb 9-1: Manufacturer: syz [ 493.528697][ T5858] usb 9-1: SerialNumber: syz [ 493.605914][T13302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.612549][ T5858] usb 9-1: config 0 descriptor?? [ 493.643424][ T31] audit: type=1800 audit(1794087220.324:1222): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230024 res=0 errno=-22 [ 493.650612][T13302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.692207][ T31] audit: type=1800 audit(1794087220.384:1223): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=230056 res=0 errno=-22 [ 493.728392][ T31] audit: type=1800 audit(1794087220.414:1224): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=230031 res=0 errno=-22 [ 493.760348][ T31] audit: type=1800 audit(1794087220.444:1225): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=230032 res=0 errno=-22 [ 493.960718][T13302] team0: Port device team_slave_0 added [ 493.991480][T13302] team0: Port device team_slave_1 added [ 494.237476][T13558] loop8: p1 p2 p3 [ 494.237476][T13558] p1: [ 494.237503][T13558] loop8: partition table partially beyond EOD, truncated [ 494.237704][T13558] loop8: p1 size 16777216 extends beyond EOD, truncated [ 494.261784][T13558] loop8: p2 size 458752 extends beyond EOD, truncated [ 494.303262][T13558] loop8: p3 start 3036741376 is beyond EOD, truncated [ 494.371774][ T5858] ftdi_sio 9-1:0.134: FTDI USB Serial Device converter detected [ 494.396782][ T5858] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 494.420397][ T31] audit: type=1800 audit(1794087221.104:1226): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=230053 res=0 errno=-22 [ 494.420446][ T31] audit: type=1800 audit(1794087221.104:1227): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=230054 res=0 errno=-22 [ 494.488879][ T31] audit: type=1800 audit(1794087221.174:1228): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=230033 res=0 errno=-22 [ 494.488924][ T31] audit: type=1800 audit(1794087221.174:1229): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=230055 res=0 errno=-22 [ 494.555641][ T5858] usb 9-1: USB disconnect, device number 5 [ 494.592530][ T5858] ftdi_sio 9-1:0.134: device disconnected [ 494.709932][ T31] audit: type=1800 audit(1794087221.384:1230): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230618 res=0 errno=-22 [ 494.737208][ T31] audit: type=1800 audit(1794087221.404:1231): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230646 res=0 errno=-22 [ 495.086733][T13302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.086750][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.086773][T13302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.169846][T13302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.169862][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.169886][T13302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.237199][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.271026][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.753426][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.765468][ T3321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.766820][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.767277][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.039512][T13302] hsr_slave_0: entered promiscuous mode [ 496.065105][T13302] hsr_slave_1: entered promiscuous mode [ 496.065711][T13302] debugfs: 'hsr0' already exists in 'hsr' [ 496.065726][T13302] Cannot create hsr debugfs directory [ 496.252500][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16 [ 496.307893][ T5787] net_ratelimit: 1 callbacks suppressed [ 496.307913][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.535112][ T32] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.832762][T13596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.097455][ T32] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.347682][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.438712][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.455558][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.456815][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.472535][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.480965][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.837544][ T32] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.362611][ T32] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.384474][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.844799][T13625] loop8: detected capacity change from 0 to 512 [ 498.867504][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.011909][T13625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.075227][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 499.075244][ T31] audit: type=1800 audit(1794087225.764:1243): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22 [ 499.183203][T13625] EXT4-fs (loop8): shut down requested (0) [ 499.426408][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.517885][ T31] audit: type=1800 audit(1794087226.204:1244): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233083 res=0 errno=-22 [ 499.555918][ T31] audit: type=1800 audit(1794087226.234:1245): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=233088 res=0 errno=-22 [ 499.583945][ T53] Bluetooth: hci1: command tx timeout [ 499.606382][ T31] audit: type=1800 audit(1794087226.294:1246): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=233092 res=0 errno=-22 [ 499.606428][ T31] audit: type=1800 audit(1794087226.294:1247): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=233091 res=0 errno=-22 [ 499.671912][ T31] audit: type=1800 audit(1794087226.354:1248): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=233094 res=0 errno=-22 [ 499.789948][T10936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.104621][ T986] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 500.266304][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 500.271845][ T986] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 500.291909][ T986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.291950][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.291974][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.291992][ T986] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 500.292011][ T986] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.338643][ T986] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.338666][ T986] usb 4-1: Manufacturer: syz [ 500.377981][ T31] audit: type=1800 audit(1794087227.064:1249): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233177 res=0 errno=-22 [ 500.407552][ T986] usb 4-1: config 0 descriptor?? [ 500.422830][T13611] loop1: detected capacity change from 0 to 40427 [ 500.448843][ T31] audit: type=1800 audit(1794087227.134:1250): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=233207 res=0 errno=-22 [ 500.448889][ T31] audit: type=1800 audit(1794087227.134:1251): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=233184 res=0 errno=-22 [ 500.505363][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.521378][ T31] audit: type=1800 audit(1794087227.214:1252): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=233185 res=0 errno=-22 [ 500.521487][T13611] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 500.576150][T13611] F2FS-fs (loop1): invalid crc value [ 500.865717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.868006][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.963821][ T986] rc_core: IR keymap rc-hauppauge not found [ 500.963837][ T986] Registered IR keymap rc-empty [ 500.963954][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 500.987231][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.017144][ T986] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 501.042067][ T986] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 501.075508][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.100002][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.115868][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.135483][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.155694][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.177031][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.198584][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.216591][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.235680][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.255325][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.303883][ T986] mceusb 4-1:0.0: Registered 42 with mce emulator interface version 1 [ 501.303907][ T986] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 501.362086][ T986] usb 4-1: USB disconnect, device number 18 [ 501.411130][T13611] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 501.543865][T13611] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 501.595673][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.664965][ T53] Bluetooth: hci1: command tx timeout [ 501.904154][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.248269][ T5290] 8021q: adding VLAN 0 to HW filter on device eth17 [ 502.559209][ T32] bridge_slave_1: left allmulticast mode [ 502.559233][ T32] bridge_slave_1: left promiscuous mode [ 502.559421][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.619576][ T32] bridge_slave_0: left allmulticast mode [ 502.619771][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.745341][ T53] Bluetooth: hci1: command tx timeout [ 503.759805][ T32] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 503.776774][T13678] 9p: Bad value for 'wfdno' [ 503.816174][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.840065][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.858617][ T32] bond0 (unregistering): Released all slaves [ 504.500591][T13689] loop3: detected capacity change from 0 to 2048 [ 504.620127][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 504.620146][ T31] audit: type=1800 audit(1794087231.304:1272): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15241 res=0 errno=-22 [ 504.676176][T13690] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 504.679606][ T32] tipc: Disabling bearer [ 504.680067][ T32] tipc: Left network mode [ 505.138578][T13607] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.828267][ T53] Bluetooth: hci1: command tx timeout [ 506.894919][ T10] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 507.078775][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 507.078820][ T10] usb 10-1: New USB device found: idVendor=0a92, idProduct=1020, bcdDevice=0.40 [ 507.083075][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.083101][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.142834][ T10] usb 10-1: string descriptor 0 read error: -22 [ 507.142950][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.350617][ T31] audit: type=1800 audit(1794087234.034:1273): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237182 res=0 errno=-22 [ 507.410156][ T31] audit: type=1800 audit(1794087234.094:1274): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=237211 res=0 errno=-22 [ 507.450274][ T31] audit: type=1800 audit(1794087234.134:1275): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=237189 res=0 errno=-22 [ 507.483785][ T31] audit: type=1800 audit(1794087234.164:1276): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=237190 res=0 errno=-22 [ 507.516904][ T31] audit: type=1800 audit(1794087234.204:1277): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=237191 res=0 errno=-22 [ 507.859892][ T31] audit: type=1800 audit(1794087234.544:1278): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237538 res=0 errno=-22 [ 507.907743][ T10] usb 10-1: 0:1 : does not exist [ 507.907764][ T10] usb 10-1: 0:2 : does not exist [ 507.932595][ T31] audit: type=1800 audit(1794087234.614:1279): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24523 res=0 errno=-13 [ 507.957447][ T5780] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 508.051023][ T31] audit: type=1800 audit(1794087234.734:1280): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237657 res=0 errno=-22 [ 508.112460][ T31] audit: type=1800 audit(1794087234.794:1281): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237747 res=0 errno=-22 [ 508.138163][ T5780] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 508.144384][ T5780] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.186160][ T5780] usb 9-1: config 0 descriptor?? [ 508.638171][T13736] macvlan4: entered promiscuous mode [ 508.720647][ T10] usb 10-1: USB disconnect, device number 7 [ 508.768123][ T5780] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 508.770216][ T5780] [drm:udl_init] *ERROR* Selecting channel failed [ 509.134363][T13737] macvlan4: entered promiscuous mode [ 509.150066][ T5780] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 509.150096][ T5780] [drm] Initialized udl on minor 1 [ 509.189715][ T5780] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 509.190090][ T5780] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 509.227122][ T5767] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 509.258225][ T5780] usb 9-1: USB disconnect, device number 6 [ 509.302575][ T5767] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 509.302742][ T5767] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 509.691493][T13741] ipvlan2: entered allmulticast mode [ 509.691516][T13741] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 509.721494][T13741] batman_adv: batadv0: Adding interface: ipvlan2 [ 509.721509][T13741] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.721535][T13741] batman_adv: batadv0: Interface activated: ipvlan2 [ 509.880575][ T32] hsr_slave_0: left promiscuous mode [ 509.905129][ T32] hsr_slave_1: left promiscuous mode [ 509.905884][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.905902][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.982947][ T32] veth1_macvtap: left promiscuous mode [ 509.982981][ T32] veth0_macvtap: left promiscuous mode [ 509.983066][ T32] veth1_vlan: left promiscuous mode [ 509.983127][ T32] veth0_vlan: left promiscuous mode [ 510.105559][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 510.161798][T13754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 510.185508][ T5780] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 510.336513][ T5780] usb 9-1: Using ep0 maxpacket: 32 [ 510.338961][ T5780] usb 9-1: unable to get BOS descriptor or descriptor too short [ 510.339000][ T5780] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 510.342141][ T5780] usb 9-1: config 14 has an invalid interface number: 57 but max is 0 [ 510.342163][ T5780] usb 9-1: config 14 has no interface number 0 [ 510.342197][ T5780] usb 9-1: config 14 interface 57 has no altsetting 0 [ 510.360147][ T5780] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.360172][ T5780] usb 9-1: Product: syz [ 510.360186][ T5780] usb 9-1: Manufacturer: syz [ 510.360199][ T5780] usb 9-1: SerialNumber: syz [ 510.463268][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 510.463286][ T31] audit: type=1800 audit(1794087237.144:1296): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238389 res=0 errno=-22 [ 510.509466][ T31] audit: type=1800 audit(1794087237.194:1297): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=238421 res=0 errno=-22 [ 510.513400][ T31] audit: type=1800 audit(1794087237.194:1298): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=238396 res=0 errno=-22 [ 510.572018][ T31] audit: type=1800 audit(1794087237.254:1299): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=238397 res=0 errno=-22 [ 516.169514][ C0] sched: DL replenish lagged too much [ 564.248908][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 667.447741][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.393468][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 706.400412][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4995/1:b..l.. [ 706.410964][ C0] rcu: (detected by 0, t=10502 jiffies, g=97913, q=783 ncpus=1) [ 706.418668][ C0] task:udevd state:R running task stack:22408 pid:4995 tgid:4995 ppid:1 task_flags:0x400140 flags:0x00080000 [ 706.432159][ C0] Call Trace: [ 706.435419][ C0] [ 706.438354][ C0] __schedule+0x17dd/0x5830 [ 706.442858][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.448512][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 706.453819][ C0] ? __pfx___schedule+0x10/0x10 [ 706.458663][ C0] ? do_syscall_64+0x166/0x520 [ 706.463436][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 706.469594][ C0] preempt_schedule_irq+0x4b/0x90 [ 706.474611][ C0] irqentry_exit+0x14f/0x9b0 [ 706.479192][ C0] ? trace_irq_disable+0x3b/0x140 [ 706.484214][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.490180][ C0] RIP: 0010:lock_release+0x4d/0x3c0 [ 706.495366][ C0] Code: 24 28 0f 1f 44 00 00 65 8b 05 57 18 3d 13 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 c4 b7 19 10 73 0d e8 35 24 09 00 84 c0 <0f> 84 9e 02 00 00 83 3d e6 e6 19 10 00 0f 84 26 02 00 00 65 8b 05 [ 706.514957][ C0] RSP: 0018:ffffc90010187448 EFLAGS: 00000202 [ 706.521031][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000001 [ 706.528991][ C0] RDX: 0000000000000000 RSI: ffffffff8c8ea260 RDI: ffffffff8c8ea220 [ 706.536945][ C0] RBP: ffff88801fce9430 R08: ffff88801fce9437 R09: 1ffff11003f9d286 [ 706.544900][ C0] R10: dffffc0000000000 R11: ffffed1003f9d287 R12: ffff88801fce9474 [ 706.552854][ C0] R13: ffffffff824ad877 R14: ffffffff9015a260 R15: 0000000000000008 [ 706.560817][ C0] ? __update_page_owner_free_handle+0x37/0x410 [ 706.567098][ C0] ? lock_release+0x4b/0x3c0 [ 706.571685][ C0] ? __update_page_owner_free_handle+0x37/0x410 [ 706.577924][ C0] __update_page_owner_free_handle+0x3df/0x410 [ 706.584075][ C0] ? __update_page_owner_free_handle+0x37/0x410 [ 706.590336][ C0] __reset_page_owner+0xd2/0x2a0 [ 706.595270][ C0] __free_frozen_pages+0xc97/0xd90 [ 706.600380][ C0] __slab_free+0x269/0x2c0 [ 706.604788][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.610424][ C0] qlist_free_all+0x99/0x100 [ 706.615007][ C0] kasan_quarantine_reduce+0x148/0x160 [ 706.620463][ C0] __kasan_slab_alloc+0x22/0x80 [ 706.625309][ C0] __kmalloc_noprof+0x302/0x710 [ 706.630167][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 706.635199][ C0] ? tomoyo_encode+0x2ad/0x570 [ 706.639974][ C0] ? tomoyo_encode+0x2ad/0x570 [ 706.644734][ C0] tomoyo_encode+0x2ad/0x570 [ 706.649314][ C0] tomoyo_realpath_from_path+0x5fd/0x640 [ 706.654942][ C0] tomoyo_path_perm+0x283/0x560 [ 706.659818][ C0] ? tomoyo_path_perm+0x251/0x560 [ 706.664833][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 706.670248][ C0] security_inode_getattr+0x12b/0x310 [ 706.675629][ C0] vfs_getattr+0x23/0x70 [ 706.679861][ C0] vfs_statx_path+0x2b/0x230 [ 706.684464][ C0] ? vfs_statx+0x107/0x200 [ 706.688884][ C0] vfs_statx+0x12e/0x200 [ 706.693115][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 706.697860][ C0] ? strncpy_from_user+0x150/0x2c0 [ 706.702961][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.708580][ C0] ? do_getname+0x151/0x250 [ 706.713103][ C0] vfs_fstatat+0x11b/0x170 [ 706.717509][ C0] __se_sys_newfstatat+0x118/0x3a0 [ 706.722616][ C0] ? __pfx___se_sys_newfstatat+0x10/0x10 [ 706.728247][ C0] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 706.734584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.740229][ C0] ? rcu_is_watching+0x16/0xb0 [ 706.744991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.750711][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.756337][ C0] do_syscall_64+0x166/0x520 [ 706.760919][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.766992][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.772870][ C0] RIP: 0033:0x7f5c8cd11b0a [ 706.777268][ C0] RSP: 002b:00007ffe06ccab08 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 706.785668][ C0] RAX: ffffffffffffffda RBX: 000055d49ebdf408 RCX: 00007f5c8cd11b0a [ 706.793622][ C0] RDX: 00007ffe06ccab10 RSI: 000055d49ebcdef3 RDI: 00000000ffffff9c [ 706.801575][ C0] RBP: 000055d4d1abe148 R08: 00063489548db180 R09: 3fffffffffffffff [ 706.809615][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.817568][ C0] R13: 00007ffe06ccab10 R14: 0000000000000000 R15: 00063489548db180 [ 706.825541][ C0] [ 706.828543][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g97913 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 706.839538][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 706.849485][ C0] rcu: RCU grace-period kthread stack dump: [ 706.855353][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 706.868837][ C0] Call Trace: [ 706.872109][ C0] [ 706.875028][ C0] __schedule+0x17dd/0x5830 [ 706.879524][ C0] ? __lock_acquire+0x747/0x2de0 [ 706.884470][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 706.889576][ C0] ? __pfx___schedule+0x10/0x10 [ 706.894414][ C0] ? lock_acquire+0x115/0x350 [ 706.899108][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.904730][ C0] ? schedule+0x90/0x2b0 [ 706.908964][ C0] schedule+0x164/0x2b0 [ 706.913112][ C0] schedule_timeout+0x152/0x2c0 [ 706.917947][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 706.923321][ C0] ? __pfx_process_timeout+0x10/0x10 [ 706.928615][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.934234][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 706.940040][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.945683][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 706.951251][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 706.956106][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.961732][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.967352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.972977][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 706.978511][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 706.983701][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 706.989514][ C0] rcu_gp_kthread+0x9c/0x340 [ 706.994111][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 706.999304][ C0] ? __kthread_parkme+0x71/0x1f0 [ 707.004226][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.009844][ C0] ? __kthread_parkme+0x199/0x1f0 [ 707.014857][ C0] kthread+0x38b/0x480 [ 707.018914][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 707.024101][ C0] ? __pfx_kthread+0x10/0x10 [ 707.028699][ C0] ret_from_fork+0x514/0xb70 [ 707.033280][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 707.038401][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.044041][ C0] ? __switch_to+0xc78/0x1410 [ 707.048734][ C0] ? __pfx_kthread+0x10/0x10 [ 707.053316][ C0] ret_from_fork_asm+0x1a/0x30 [ 707.058081][ C0] [ 707.061079][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 707.067420][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 707.078698][ C0] Tainted: [L]=SOFTLOCKUP [ 707.083000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 707.093038][ C0] Workqueue: bat_events batadv_dat_purge [ 707.098677][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 707.103958][ C0] Code: ff ff ff e8 30 7e 61 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 48 3d 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 fa 28 6c ff cc 48 8d 3d 07 22 1d [ 707.123579][ C0] RSP: 0018:ffffc90000007270 EFLAGS: 00000292 [ 707.129664][ C0] RAX: 079d240f4a867b00 RBX: 0000000000000001 RCX: 8000000000000301 [ 707.137639][ C0] RDX: 00000000f7c63eef RSI: ffffffff8e9349f9 RDI: ffffffff8c8ea280 [ 707.145631][ C0] RBP: ffff888033aa9f40 R08: ffffffff89c7038c R09: 0000000000000000 [ 707.153592][ C0] R10: dffffc0000000000 R11: fffff52000000e98 R12: ffff8880b823a0d0 [ 707.161547][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 707.169520][ C0] FS: 0000000000000000(0000) GS:ffff88812340a000(0000) knlGS:0000000000000000 [ 707.178527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.185108][ C0] CR2: 00007fc3287cb670 CR3: 0000000079d65000 CR4: 0000000000350ef0 [ 707.193068][ C0] Call Trace: [ 707.196330][ C0] [ 707.199158][ C0] ? napi_skb_cache_get+0x16c/0x7e0 [ 707.204353][ C0] napi_skb_cache_get+0x184/0x7e0 [ 707.209367][ C0] ? napi_skb_cache_get+0x16c/0x7e0 [ 707.214570][ C0] ? __alloc_skb+0x18d/0x7a0 [ 707.219140][ C0] __alloc_skb+0x1a1/0x7a0 [ 707.223539][ C0] synproxy_send_client_synack+0x175/0xde0 [ 707.229333][ C0] ? lock_acquire+0x115/0x350 [ 707.233998][ C0] ? synproxy_pernet+0x45/0x270 [ 707.238842][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 707.245155][ C0] ? nft_tunnel_obj_dump+0x994/0xa70 [ 707.250425][ C0] ? synproxy_pernet+0x45/0x270 [ 707.255291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.260931][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 707.266125][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 707.271835][ C0] ? nf_ip_checksum+0x13c/0x510 [ 707.276672][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.282291][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 707.287484][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 707.293229][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.298869][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.304597][ C0] nft_do_chain+0x132b/0x1b10 [ 707.309279][ C0] ? __lock_acquire+0x747/0x2de0 [ 707.314204][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 707.319327][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 707.324611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.330228][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 707.335436][ C0] nft_do_chain_ipv4+0x195/0x290 [ 707.340384][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 707.345333][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 707.351166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.356792][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 707.362075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.367700][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 707.373151][ C0] nf_hook_slow+0xc5/0x220 [ 707.377695][ C0] NF_HOOK+0x21f/0x3c0 [ 707.381758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.387394][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 707.393381][ C0] ? NF_HOOK+0x9e/0x3c0 [ 707.397526][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 707.402122][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 707.408094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.413718][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.419336][ C0] ? ip_local_deliver+0x113/0x190 [ 707.424353][ C0] NF_HOOK+0x336/0x3c0 [ 707.428435][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 707.433542][ C0] ? NF_HOOK+0x9e/0x3c0 [ 707.437691][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 707.442298][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 707.447424][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.453047][ C0] ? ip_rcv_core+0x88d/0xd50 [ 707.457656][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 707.462148][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 707.466672][ C0] process_backlog+0xa6b/0x18b0 [ 707.471530][ C0] ? process_backlog+0x3de/0x18b0 [ 707.476579][ C0] __napi_poll+0xaa/0x330 [ 707.480904][ C0] net_rx_action+0x61d/0xf50 [ 707.485488][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 707.490613][ C0] handle_softirqs+0x265/0x8d0 [ 707.495383][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 707.500404][ C0] do_softirq+0x77/0xd0 [ 707.504575][ C0] [ 707.507485][ C0] [ 707.510412][ C0] __local_bh_enable_ip+0x100/0x140 [ 707.515630][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 707.520481][ C0] ? process_scheduled_works+0x97a/0x1630 [ 707.526193][ C0] process_scheduled_works+0xc3d/0x1630 [ 707.531748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.537395][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.543388][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.549012][ C0] ? assign_work+0x3af/0x5d0 [ 707.553623][ C0] rescuer_thread+0x84a/0x12a0 [ 707.558378][ C0] ? rescuer_thread+0xb8/0x12a0 [ 707.563229][ C0] kthread+0x38b/0x480 [ 707.567285][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 707.572471][ C0] ? __pfx_kthread+0x10/0x10 [ 707.577051][ C0] ret_from_fork+0x514/0xb70 [ 707.581631][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 707.586729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 707.592349][ C0] ? __switch_to+0xc78/0x1410 [ 707.597036][ C0] ? __pfx_kthread+0x10/0x10 [ 707.601622][ C0] ret_from_fork_asm+0x1a/0x30 [ 707.606391][ C0]