last executing test programs: 24.150797414s ago: executing program 0 (id=843): ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) 20.604703303s ago: executing program 0 (id=851): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) 17.183313119s ago: executing program 4 (id=854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='ceph\x00', 0x800000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10c94, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}], [], 0x2c}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.112192926s ago: executing program 1 (id=856): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000bc0)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=") r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x4a0400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x7fff, 0x203, 0x7, 0x6, 0xfffffeff, 0x5, 0xfff}, 0x20) sendto$inet6(r1, &(0x7f00000004c0)="a4", 0x1, 0x44, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000b40)=0x661e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18001f2f399f461aff2646023469881bcc1500100300"/35, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = socket(0x11, 0xa, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a200000"], 0x88}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11e8}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) 12.184977504s ago: executing program 1 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2830092d) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x801) ioctl$FE_GET_FRONTEND(r3, 0x80246f4d, &(0x7f0000000180)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r5 = inotify_init1(0x80000) inotify_add_watch(r5, 0x0, 0x7f7) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x101041, 0x66) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/122, 0x7a) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12) 12.028724588s ago: executing program 3 (id=864): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000bc0)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x4a0400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x7fff, 0x203, 0x7, 0x6, 0xfffffeff, 0x5, 0xfff}, 0x20) sendto$inet6(r1, &(0x7f00000004c0)="a4", 0x1, 0x44, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000b40)=0x661e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18001f2f399f461aff2646023469881bcc1500100300"/35, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r5 = socket(0x11, 0xa, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a200000"], 0x88}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11e8}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.412593233s ago: executing program 1 (id=865): ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r4, 0x1) r5 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x30000009}) 11.364843155s ago: executing program 2 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2830092d) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12) 10.783510739s ago: executing program 2 (id=867): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x4703, &(0x7f000000c7c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) 10.436770538s ago: executing program 0 (id=868): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) socket$inet(0x2, 0x5, 0xc) 8.655970633s ago: executing program 0 (id=869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) bind$inet(r3, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) 8.502805026s ago: executing program 4 (id=870): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd460104000000000000131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c388df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 8.087085037s ago: executing program 1 (id=871): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002240)={0xb0, 0xfffffff5, 0x3, [{{0x1, 0x1, 0xfffffffffffffff7, 0x6, 0x0, 0x6, {0x5, 0x6, 0x80000000, 0xd, 0x9, 0x100, 0x1, 0xffffff01, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x4, 0x10000}}, {0x2, 0x40, 0x1, 0x0, ':'}}]}, 0xb0) r4 = getegid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r5, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r5, 0x202, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0xee00, 0x0, r4, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, r5}) r6 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) 7.418627034s ago: executing program 3 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1214040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x104, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x0) 7.222592959s ago: executing program 4 (id=873): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) 7.053990093s ago: executing program 1 (id=874): ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) 6.987775565s ago: executing program 0 (id=875): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 6.888361177s ago: executing program 4 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2830092d) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x801) ioctl$FE_GET_FRONTEND(r3, 0x80246f4d, &(0x7f0000000180)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r5 = inotify_init1(0x80000) inotify_add_watch(r5, 0x0, 0x7f7) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x101041, 0x66) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/122, 0x7a) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12) 5.874430032s ago: executing program 3 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2830092d) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12) 5.722744676s ago: executing program 4 (id=878): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) 4.431305399s ago: executing program 1 (id=879): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = getegid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r4, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r4, 0x202, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0xee00, 0x0, r3, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, r4}) r5 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) 4.261781813s ago: executing program 2 (id=880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='ceph\x00', 0x800000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10c94, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}], [], 0x2c}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.215130714s ago: executing program 4 (id=881): ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r4, 0x1) r5 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x30000009}) 3.944238791s ago: executing program 0 (id=882): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000bc0)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x4a0400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x7fff, 0x203, 0x7, 0x6, 0xfffffeff, 0x5, 0xfff}, 0x20) sendto$inet6(r1, &(0x7f00000004c0)="a4", 0x1, 0x44, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000b40)=0x661e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18001f2f399f461aff2646023469881bcc1500100300"/35, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r5 = socket(0x11, 0xa, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a200000"], 0x88}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11e8}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.824546384s ago: executing program 3 (id=883): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.370159205s ago: executing program 3 (id=884): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 2.471736908s ago: executing program 2 (id=885): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002240)={0xb0, 0xfffffff5, 0x3, [{{0x1, 0x1, 0xfffffffffffffff7, 0x6, 0x0, 0x6, {0x5, 0x6, 0x80000000, 0xd, 0x9, 0x100, 0x1, 0xffffff01, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x4, 0x10000}}, {0x2, 0x40, 0x1, 0x0, ':'}}]}, 0xb0) r4 = getegid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r5, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r5, 0x202, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0xee00, 0x0, r4, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, r5}) r6 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) 1.243340699s ago: executing program 3 (id=886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) bind$inet(r3, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) 1.17980655s ago: executing program 2 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1214040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x104, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x0) 0s ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2830092d) add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x801) ioctl$FE_GET_FRONTEND(r3, 0x80246f4d, &(0x7f0000000180)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r5 = inotify_init1(0x80000) inotify_add_watch(r5, 0x0, 0x7f7) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x101041, 0x66) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/122, 0x7a) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12) kernel console output (not intermixed with test programs): aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.356446][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.368520][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.395342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.409161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.427078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.446531][ T4287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.461104][ T4287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.470925][ T4287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.484405][ T4287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.550896][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.569910][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.573231][ T955] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.581937][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.604025][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.622873][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.641339][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.655435][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.671165][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.693147][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.708278][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.722323][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.741442][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.764628][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.783508][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.853052][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.873621][ T955] usb 3-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 79.885551][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.896168][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.897111][ T955] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 79.914355][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.917007][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.934650][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.962699][ T4378] loop0: detected capacity change from 0 to 128 [ 79.977670][ T4378] EXT4-fs: Ignoring removed orlov option [ 79.997216][ T4374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.000617][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.057861][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.059408][ T4378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.073526][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.086058][ T4378] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.144202][ T955] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 80.224656][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.265459][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.286094][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.511395][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.514834][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.559560][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.578969][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.592804][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.603057][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.666913][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.702806][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 80.808847][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.829305][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.887559][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.935781][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.970293][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.992155][ T4385] loop4: detected capacity change from 0 to 256 [ 81.004888][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.017888][ T4385] exfat: Deprecated parameter 'utf8' [ 81.071699][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.111110][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.144357][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.158718][ T4385] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 81.188958][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.196832][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.270147][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.312029][ T4389] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81328eb2 (__mcheck_cpu_init_clear_banks+0x102/0x1e0) [ 81.334602][ T4389] Call Trace: [ 81.338500][ T4389] [ 81.342113][ T4389] mce_cpu_restart+0xca/0x1a0 [ 81.350987][ T4389] smp_call_function_many_cond+0xbfb/0x1250 [ 81.360833][ T4389] ? mce_restart+0x1a0/0x1a0 [ 81.368711][ T4389] ? smp_call_function_many+0x30/0x30 [ 81.376771][ T4389] ? timer_delete_sync+0x20/0x20 [ 81.383515][ T4389] ? mutex_lock_nested+0x10/0x10 [ 81.389979][ T4389] ? _parse_integer_limit+0x195/0x1d0 [ 81.396023][ T4389] ? mce_restart+0x1a0/0x1a0 [ 81.401797][ T4389] on_each_cpu_cond_mask+0x3b/0x80 [ 81.407737][ T4389] mce_restart+0x13d/0x1a0 [ 81.413292][ T4389] set_bank+0x27b/0x390 [ 81.418257][ T4389] ? show_bank+0x290/0x290 [ 81.424568][ T4389] ? sysfs_kf_write+0x183/0x2a0 [ 81.431729][ T4389] ? sysfs_kf_read+0x350/0x350 [ 81.437158][ T4389] kernfs_fop_write_iter+0x3a0/0x520 [ 81.442673][ T4389] vfs_write+0x482/0x9a0 [ 81.447248][ T4389] ? file_end_write+0x250/0x250 [ 81.452258][ T4389] ? __fget_files+0x3fc/0x460 [ 81.456991][ T4389] ? __fdget_pos+0x2ae/0x360 [ 81.461898][ T4389] ? ksys_write+0x70/0x260 [ 81.466660][ T4389] ksys_write+0x14d/0x260 [ 81.471344][ T4389] ? __ia32_sys_read+0x80/0x80 [ 81.476449][ T4389] ? lockdep_hardirqs_on+0x94/0x140 [ 81.482572][ T4389] do_syscall_64+0x4c/0xa0 [ 81.488853][ T4389] ? clear_bhb_loop+0x60/0xb0 [ 81.494360][ T4389] ? clear_bhb_loop+0x60/0xb0 [ 81.499183][ T4389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.505520][ T4389] RIP: 0033:0x7fd9b179e0d9 [ 81.510480][ T4389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.537850][ T4389] RSP: 002b:00007fd9b26b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.549469][ T4389] RAX: ffffffffffffffda RBX: 00007fd9b1a25fa0 RCX: 00007fd9b179e0d9 [ 81.558951][ T4389] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 81.568275][ T4389] RBP: 00007fd9b1835024 R08: 0000000000000000 R09: 0000000000000000 [ 81.578997][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.594250][ T4389] R13: 00007fd9b1a26038 R14: 00007fd9b1a25fa0 R15: 00007ffc1b080cf8 [ 81.605980][ T4389] [ 81.647137][ T4394] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 82.639837][ T4408] loop1: detected capacity change from 0 to 128 [ 82.650729][ T4408] EXT4-fs: Ignoring removed orlov option [ 82.707769][ T4408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.721151][ T4408] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.153538][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 83.475875][ T4418] loop1: detected capacity change from 0 to 128 [ 83.490872][ T4418] EXT4-fs: Ignoring removed orlov option [ 83.609330][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.620352][ T4418] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.026408][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 84.953789][ T4317] usb 3-1: USB disconnect, device number 2 [ 85.082497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 85.182404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.202435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.212680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.222411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.232447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.242406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.252428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.262908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.272431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 86.564950][ T22] cfg80211: failed to load regulatory.db [ 86.751462][ T4446] loop3: detected capacity change from 0 to 256 [ 86.776555][ T4445] loop2: detected capacity change from 0 to 2048 [ 86.847846][ T4446] exfat: Deprecated parameter 'utf8' [ 86.916614][ T4449] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.010691][ T4446] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 87.378742][ T4464] loop1: detected capacity change from 0 to 128 [ 87.387097][ T4464] EXT4-fs: Ignoring removed orlov option [ 87.664558][ T4464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.677813][ T4464] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.955330][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 89.077991][ T4452] Process accounting resumed [ 89.267646][ T4478] loop1: detected capacity change from 0 to 64 [ 91.159007][ T4483] mmap: syz.0.31 (4483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.281721][ T4483] loop0: detected capacity change from 0 to 128 [ 91.338640][ T4483] ======================================================= [ 91.338640][ T4483] WARNING: The mand mount option has been deprecated and [ 91.338640][ T4483] and is ignored by this kernel. Remove the mand [ 91.338640][ T4483] option from the mount to silence this warning. [ 91.338640][ T4483] ======================================================= [ 91.493464][ T4483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 91.561085][ T4483] hpfs: filesystem error: improperly stopped [ 91.622846][ T4483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 91.644664][ T4483] hpfs: You really don't want any checks? You are crazy... [ 91.679476][ T4483] hpfs: Code page index out of array [ 91.699535][ T4483] hpfs: code page support is disabled [ 91.713688][ T4483] hpfs: hpfs_map_4sectors(): unaligned read [ 91.736577][ T4483] hpfs: hpfs_map_4sectors(): unaligned read [ 91.753246][ T4483] hpfs: filesystem error: unable to find root dir [ 92.203915][ T4505] loop2: detected capacity change from 0 to 512 [ 92.217123][ T4507] loop3: detected capacity change from 0 to 256 [ 92.256025][ T4505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.263366][ T4507] exfat: Deprecated parameter 'utf8' [ 92.310784][ T4505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.352586][ T4507] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 92.470425][ T4505] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.519409][ T4503] loop0: detected capacity change from 0 to 8192 [ 92.591365][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 92.643522][ T4503] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 92.673502][ T4505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.804205][ T4503] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.885692][ T4503] ntfs3: loop0: Failed to load $Extend. [ 93.264688][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 93.995281][ T4524] loop3: detected capacity change from 0 to 4096 [ 94.102946][ T4526] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.157777][ T4524] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 94.242684][ T4524] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 94.454971][ T4528] loop4: detected capacity change from 0 to 32768 [ 94.534502][ T4528] XFS (loop4): Mounting V5 Filesystem [ 94.602154][ T4528] XFS (loop4): Ending clean mount [ 94.667433][ T4528] XFS (loop4): Quotacheck needed: Please wait. [ 94.802782][ T4528] XFS (loop4): Quotacheck: Done. [ 95.402664][ T27] audit: type=1800 audit(1786085886.783:2): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.47" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 95.596512][ T4271] XFS (loop4): Unmounting Filesystem [ 95.877743][ T4555] loop1: detected capacity change from 0 to 256 [ 95.937632][ T4555] exfat: Deprecated parameter 'utf8' [ 96.084846][ T4555] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 96.359195][ T4564] loop2: detected capacity change from 0 to 128 [ 96.373294][ T4564] EXT4-fs: Ignoring removed orlov option [ 96.461847][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 96.518971][ T4285] CPU: 1 PID: 4285 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 96.527299][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.538119][ T4285] Workqueue: hci2 hci_rx_work [ 96.544002][ T4285] Call Trace: [ 96.547302][ T4285] [ 96.550585][ T4285] dump_stack_lvl+0x188/0x24e [ 96.555488][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 96.561180][ T4285] ? show_regs_print_info+0x12/0x12 [ 96.567739][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 96.573478][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 96.578828][ T4285] ? __lock_acquire+0x7c40/0x7c40 [ 96.584617][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 96.589796][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 96.596348][ T4285] kobject_add_internal+0x617/0xca0 [ 96.601679][ T4285] kobject_add+0x160/0x230 [ 96.606222][ T4285] ? kobject_init+0x1c0/0x1c0 [ 96.611433][ T4285] ? __raw_spin_lock_init+0x41/0x100 [ 96.617047][ T4285] ? klist_children_get+0x50/0x50 [ 96.623813][ T4285] ? get_device_parent+0x121/0x3e0 [ 96.629505][ T4285] device_add+0x470/0x1050 [ 96.634168][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 96.640400][ T4285] le_conn_complete_evt+0xfac/0x15c0 [ 96.645746][ T4285] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 96.652392][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 96.658697][ T4285] ? mutex_unlock+0x10/0x10 [ 96.664302][ T4285] ? skb_pull_data+0xec/0x1f0 [ 96.670073][ T4285] hci_le_enh_conn_complete_evt+0x185/0x460 [ 96.678320][ T4285] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 96.688205][ T4285] ? hci_remote_host_features_evt+0x230/0x230 [ 96.695903][ T4285] hci_event_packet+0x7b3/0x1290 [ 96.701602][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 96.709059][ T4285] ? bis_list+0x280/0x280 [ 96.713713][ T4285] ? kcov_remote_start+0x1b1/0x7e0 [ 96.719567][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 96.726827][ T4285] hci_rx_work+0x3eb/0xd40 [ 96.732181][ T4285] ? process_one_work+0x7b4/0x1160 [ 96.738150][ T4285] process_one_work+0x8ab/0x1160 [ 96.744020][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 96.750143][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 96.755597][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 96.761920][ T4285] ? wq_worker_running+0x97/0x190 [ 96.769507][ T4285] worker_thread+0xaf5/0x12a0 [ 96.775853][ T4285] kthread+0x29d/0x330 [ 96.780257][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 96.786179][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 96.790892][ T4285] ret_from_fork+0x1f/0x30 [ 96.796656][ T4285] [ 96.806032][ T4285] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.927183][ T4285] Bluetooth: hci2: failed to register connection device [ 96.973353][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.988951][ T4564] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.116409][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 97.502521][ T4321] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.563039][ T4583] loop0: detected capacity change from 0 to 4096 [ 98.695415][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.790182][ T4590] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.810965][ T4586] loop3: detected capacity change from 0 to 32768 [ 98.822085][ T4589] input: syz1 as /devices/virtual/input/input6 [ 98.840115][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.927053][ T4586] XFS (loop3): Mounting V5 Filesystem [ 98.934405][ T4321] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 98.963247][ T4285] Bluetooth: hci2: command 0x2016 tx timeout [ 99.035596][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.084633][ T4321] usb 2-1: Product: syz [ 99.091938][ T4321] usb 2-1: Manufacturer: syz [ 99.112253][ T4321] usb 2-1: SerialNumber: syz [ 99.144441][ T4321] usb 2-1: config 0 descriptor?? [ 99.182102][ T4586] XFS (loop3): Ending clean mount [ 99.183397][ T4321] hub 2-1:0.0: bad descriptor, ignoring hub [ 99.191734][ T4586] XFS (loop3): Quotacheck needed: Please wait. [ 99.239974][ T4321] hub: probe of 2-1:0.0 failed with error -5 [ 99.295292][ T4321] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 99.408323][ T4586] XFS (loop3): Quotacheck: Done. [ 99.614195][ T27] audit: type=1326 audit(1786085891.223:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.2.65" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34f39e0d9 code=0x0 [ 100.016012][ T27] audit: type=1800 audit(1786085891.323:4): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.61" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 100.175243][ T4287] XFS (loop3): Unmounting Filesystem [ 100.676555][ T4620] loop2: detected capacity change from 0 to 128 [ 100.694516][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 100.699703][ T4620] EXT4-fs: Ignoring removed orlov option [ 100.748924][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 100.757806][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.767988][ T4286] Workqueue: hci2 hci_rx_work [ 100.772707][ T4286] Call Trace: [ 100.776079][ T4286] [ 100.779119][ T4286] dump_stack_lvl+0x188/0x24e [ 100.782918][ T4620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.783903][ T4286] ? show_regs_print_info+0x12/0x12 [ 100.794619][ T4620] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.797891][ T4286] ? load_image+0x410/0x410 [ 100.797935][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 100.818921][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 100.824077][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 100.829318][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 100.834566][ T4286] kobject_add_internal+0x617/0xca0 [ 100.839849][ T4286] kobject_add+0x160/0x230 [ 100.844309][ T4286] ? kobject_init+0x1c0/0x1c0 [ 100.849297][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 100.854888][ T4286] ? klist_children_get+0x50/0x50 [ 100.860666][ T4286] ? get_device_parent+0x121/0x3e0 [ 100.866018][ T4286] device_add+0x470/0x1050 [ 100.871123][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 100.876906][ T4286] le_conn_complete_evt+0xfac/0x15c0 [ 100.883082][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 100.890069][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 100.895836][ T4286] ? mutex_unlock+0x10/0x10 [ 100.900836][ T4286] ? skb_pull_data+0xec/0x1f0 [ 100.905978][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 100.912893][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 100.920619][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 100.926794][ T4286] hci_event_packet+0x7b3/0x1290 [ 100.931756][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 100.936792][ T4286] ? bis_list+0x280/0x280 [ 100.941192][ T4286] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 100.948918][ T4286] ? kcov_remote_start+0x4b0/0x7e0 [ 100.954177][ T4286] ? do_machine_check+0x380/0x750 [ 100.959569][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 100.965773][ T4286] hci_rx_work+0x3eb/0xd40 [ 100.970237][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 100.975950][ T4286] ? process_one_work+0x7b4/0x1160 [ 100.981171][ T4286] process_one_work+0x8ab/0x1160 [ 100.986591][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 100.992702][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.998729][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.006111][ T4286] ? wq_worker_running+0x97/0x190 [ 101.012412][ T4286] worker_thread+0xaf5/0x12a0 [ 101.018453][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 101.026543][ T4286] kthread+0x29d/0x330 [ 101.030840][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 101.040089][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 101.045610][ T4286] ret_from_fork+0x1f/0x30 [ 101.050517][ T4286] [ 101.195697][ T4286] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.217494][ T4286] Bluetooth: hci2: failed to register connection device [ 101.772445][ T4628] loop4: detected capacity change from 0 to 128 [ 101.781044][ T4628] EXT4-fs: Ignoring removed orlov option [ 101.843339][ T4628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.857252][ T4628] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.888170][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 101.924413][ T4317] usb 2-1: USB disconnect, device number 2 [ 102.237274][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 102.452972][ T4637] netlink: 64 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.459423][ T4630] Process accounting resumed [ 102.701267][ T4644] loop2: detected capacity change from 0 to 512 [ 102.773456][ T4647] loop4: detected capacity change from 0 to 1764 [ 103.950478][ T4286] Bluetooth: hci2: command 0x2016 tx timeout [ 103.965322][ T4644] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.020249][ T4646] input: syz1 as /devices/virtual/input/input8 [ 104.136711][ T4651] loop1: detected capacity change from 0 to 128 [ 104.305264][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.352989][ T4651] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.669244][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 104.905940][ T4672] 9pnet_fd: Insufficient options for proto=fd [ 106.495809][ T4679] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.695008][ T4679] CIFS: Attempting to mount \\127.0.0.1\share [ 108.187254][ T4679] CIFS: VFS: No username specified [ 108.251481][ T4687] input: syz1 as /devices/virtual/input/input9 [ 108.564635][ T4696] loop0: detected capacity change from 0 to 128 [ 108.579084][ T4696] EXT4-fs: Ignoring removed orlov option [ 108.982257][ T4696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.991128][ T4696] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.061111][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 109.156116][ T4702] loop2: detected capacity change from 0 to 128 [ 109.164598][ T4702] EXT4-fs: Ignoring removed orlov option [ 109.260498][ T4702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.278732][ T4702] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.460123][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 109.723043][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.097518][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.156703][ T4719] Zero length message leads to an empty skb [ 110.801247][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.815322][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.835856][ T4317] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.847418][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.397698][ T4317] usb 2-1: config 0 descriptor?? [ 112.112401][ C0] sched: RT throttling activated [ 112.280377][ T4317] usbhid 2-1:0.0: can't add hid device: -71 [ 112.304040][ T4317] usbhid: probe of 2-1:0.0 failed with error -71 [ 112.343572][ T4317] usb 2-1: USB disconnect, device number 3 [ 112.367007][ T4735] input: syz1 as /devices/virtual/input/input10 [ 112.377712][ T4734] input: syz0 as /devices/virtual/input/input11 [ 112.421788][ T4739] loop1: detected capacity change from 0 to 512 [ 112.476647][ T4739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.500384][ T4734] netlink: 76 bytes leftover after parsing attributes in process `syz.0.99'. [ 112.515105][ T4737] Process accounting resumed [ 112.579706][ T4739] EXT4-fs (loop1): 1 truncate cleaned up [ 112.614397][ T4739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.692054][ T4748] fuse: Bad value for 'user_id' [ 112.780665][ T4748] block device autoloading is deprecated and will be removed. [ 113.683115][ T4756] loop3: detected capacity change from 0 to 128 [ 113.696997][ T4756] EXT4-fs: Ignoring removed orlov option [ 113.757270][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 113.830821][ T4756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.847660][ T4756] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.194270][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 115.238827][ T4784] Process accounting resumed [ 115.360163][ T4786] input: syz1 as /devices/virtual/input/input12 [ 116.446117][ T4801] fuse: Bad value for 'user_id' [ 118.494434][ T4815] loop3: detected capacity change from 0 to 128 [ 118.505236][ T4815] EXT4-fs: Ignoring removed orlov option [ 119.274732][ T4818] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.284210][ T4815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.295505][ T4815] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.318587][ T4818] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.391328][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 119.436021][ T4818] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 119.450211][ T4818] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.486869][ T4818] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.506904][ T4818] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 119.525625][ T4818] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.561091][ T4818] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.421472][ T4818] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 120.436158][ T4818] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.444802][ T4818] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.464566][ T4818] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 120.487964][ T4818] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.501823][ T4822] Process accounting resumed [ 120.508029][ T4818] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.570753][ T4818] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 121.337330][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.977018][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.987191][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.117009][ T4841] loop0: detected capacity change from 0 to 512 [ 122.180922][ T4847] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.136'. [ 122.214808][ T4841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.356117][ T4841] EXT4-fs (loop0): 1 truncate cleaned up [ 122.392539][ T4841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.408955][ T4850] loop4: detected capacity change from 0 to 128 [ 122.416477][ T4850] EXT4-fs: Ignoring removed orlov option [ 122.482437][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.503522][ T127] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.552940][ T4850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.564633][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.579720][ T4850] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.813946][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 122.986969][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.085095][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.175189][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.209025][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 123.240249][ T127] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.279211][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.401040][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 123.665539][ T127] usb 3-1: config 0 descriptor?? [ 124.002589][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 124.010178][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 124.663304][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 124.663339][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 124.987530][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.842756][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.859146][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.870882][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.882066][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.890297][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.899613][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.907602][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.915309][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.932676][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.940576][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.948438][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.956154][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.963848][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.971283][ T127] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.981498][ T127] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 126.007228][ T127] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 126.062596][ T127] usb 3-1: USB disconnect, device number 3 [ 126.410750][ T4876] Process accounting resumed [ 127.113821][ T4892] fido_id[4892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 127.364668][ T4909] loop2: detected capacity change from 0 to 128 [ 127.375883][ T4909] EXT4-fs: Ignoring removed orlov option [ 127.502555][ T4322] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 127.792940][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.801854][ T4909] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.964293][ T4322] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 128.055139][ T4322] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 128.063810][ T4322] usb 4-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 128.074740][ T4322] usb 4-1: config 0 has no interface number 0 [ 128.081302][ T4322] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 128.091561][ T4322] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 17956, setting to 64 [ 128.172468][ T4322] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 128.223865][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 128.275607][ T4322] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 128.287493][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.319807][ T4322] usb 4-1: config 0 descriptor?? [ 128.327742][ T4901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.393649][ T4322] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 128.417565][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 129.261806][ T4868] usb 4-1: Failed to submit usb control message: -71 [ 129.270542][ T4868] usb 4-1: unable to send the bmi data to the device: -71 [ 129.280095][ T4868] usb 4-1: unable to get target info from device [ 129.287224][ T4868] usb 4-1: could not get target info (-71) [ 129.294761][ T4868] usb 4-1: could not probe fw (-71) [ 130.693072][ T4322] usb 4-1: USB disconnect, device number 2 [ 130.845933][ T4934] loop4: detected capacity change from 0 to 128 [ 130.969132][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 132.656347][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.663015][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.355988][ T4956] overlayfs: failed to clone upperpath [ 135.713644][ T4965] ceph: No source [ 136.788566][ T4978] loop1: detected capacity change from 0 to 64 [ 137.199837][ T4995] tipc: Can't bind to reserved service type 0 [ 138.076968][ T5000] ceph: No source [ 141.729659][ T5017] Process accounting resumed [ 142.106153][ T5049] ceph: No source [ 143.542677][ T955] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.847490][ T955] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 143.862403][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.872602][ T5070] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 143.892424][ T955] usb 1-1: Product: syz [ 143.896639][ T955] usb 1-1: Manufacturer: syz [ 143.911788][ T955] usb 1-1: SerialNumber: syz [ 145.074560][ C0] usb 1-1: invalid arpc response id received: 11 [ 145.100145][ T5060] loop3: detected capacity change from 0 to 32768 [ 146.262468][ T955] usb 1-1: failed to set cport flags for port 0 [ 146.283609][ T955] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 146.314485][ T955] es2_ap_driver: probe of 1-1:1.0 failed with error -110 [ 146.395389][ T4318] usb 1-1: USB disconnect, device number 2 [ 147.946014][ T5082] Process accounting resumed [ 148.952532][ T4323] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.970542][ T4577] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4577) [ 149.122980][ T4323] usb 3-1: device descriptor read/64, error -71 [ 150.082911][ T4323] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.242438][ T4323] usb 3-1: device descriptor read/64, error -71 [ 150.370018][ T4323] usb usb3-port1: attempt power cycle [ 150.578274][ T5108] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 151.902438][ T4323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.144415][ T4323] usb 3-1: device not accepting address 6, error -71 [ 152.234077][ T5120] ceph: No source [ 153.129043][ T5130] loop3: detected capacity change from 0 to 128 [ 153.140054][ T5130] EXT4-fs: Ignoring removed orlov option [ 153.621175][ T5130] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.636620][ T5130] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.893411][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 153.946249][ T5128] Process accounting resumed [ 156.232948][ T5153] 9pnet_fd: Insufficient options for proto=fd [ 156.582474][ T5165] loop1: detected capacity change from 0 to 128 [ 156.593093][ T5165] EXT4-fs: Ignoring removed orlov option [ 157.004390][ T5165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.020897][ T5165] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.097464][ T5167] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 157.124975][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 159.230084][ T5179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.275874][ T5179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.445732][ T5179] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 160.470217][ T5179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.543162][ T5179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.042403][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.352922][ T5179] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 161.367992][ T5179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.395219][ T5179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.579757][ T5179] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 161.598064][ T5179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.263547][ T5179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.285467][ T5179] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 162.305363][ T5179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.325854][ T5179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.359169][ T5179] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 162.483220][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.774036][ T5210] loop4: detected capacity change from 0 to 128 [ 162.785158][ T5210] EXT4-fs: Ignoring removed orlov option [ 163.122456][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 163.153275][ T5210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.162198][ T5210] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.252480][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 163.442714][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.602683][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.134616][ T5224] loop2: detected capacity change from 0 to 512 [ 164.255794][ T5224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.324685][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.329402][ T5224] EXT4-fs (loop2): 1 truncate cleaned up [ 164.344510][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.562591][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 164.906238][ T5215] Process accounting resumed [ 165.029937][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 165.115567][ T5235] fuse: Bad value for 'user_id' [ 165.522450][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 165.682545][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 166.402429][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 169.053401][ T5253] 9pnet_fd: Insufficient options for proto=fd [ 170.362929][ T4872] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 170.372224][ T5259] loop3: detected capacity change from 0 to 128 [ 170.379308][ T5259] EXT4-fs: Ignoring removed orlov option [ 170.467755][ T5259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.484555][ T5259] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.535110][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 170.593837][ T4872] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 170.609599][ T5266] loop0: detected capacity change from 0 to 4096 [ 170.636501][ T4872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.405805][ T4872] usb 5-1: can't set config #252, error -71 [ 172.443319][ T5278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.457576][ T4872] usb 5-1: USB disconnect, device number 2 [ 173.302615][ T5280] Process accounting resumed [ 175.054076][ T5297] fuse: Bad value for 'user_id' [ 178.474162][ T5314] loop0: detected capacity change from 0 to 32768 [ 178.504718][ T5314] XFS (loop0): Mounting V5 Filesystem [ 178.576683][ T5314] XFS (loop0): Ending clean mount [ 179.319260][ T5314] XFS (loop0): Quotacheck needed: Please wait. [ 179.375274][ T5314] XFS (loop0): Quotacheck: Done. [ 179.667990][ T27] audit: type=1800 audit(1786085971.233:5): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 180.048845][ T4277] XFS (loop0): Unmounting Filesystem [ 180.276649][ T5333] loop2: detected capacity change from 0 to 32768 [ 180.293264][ T5333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.275 (5333) [ 180.369976][ T5333] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.380524][ T5333] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 180.389368][ T5333] BTRFS info (device loop2): turning on sync discard [ 180.396289][ T5333] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 180.406131][ T5333] BTRFS info (device loop2): use zstd compression, level 3 [ 180.413417][ T5333] BTRFS info (device loop2): turning on async discard [ 180.420412][ T5333] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 180.431101][ T5333] BTRFS info (device loop2): trying to use backup root at mount time [ 180.439232][ T5333] BTRFS info (device loop2): enabling auto defrag [ 180.445765][ T5333] BTRFS info (device loop2): using free space tree [ 181.513306][ T5360] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 181.537750][ T5333] BTRFS error (device loop2): failed to load root extent [ 181.544943][ T5333] BTRFS warning (device loop2): try to load backup roots slot 1 [ 181.553006][ T5360] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 181.575068][ T5333] BTRFS warning (device loop2): couldn't read tree root [ 181.582069][ T5333] BTRFS warning (device loop2): try to load backup roots slot 2 [ 181.598162][ T5333] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 181.609742][ T5333] BTRFS warning (device loop2): couldn't read tree root [ 181.616775][ T5333] BTRFS warning (device loop2): try to load backup roots slot 3 [ 181.673378][ T5357] sctp: failed to load transform for md5: -2 [ 181.683302][ T5333] BTRFS info (device loop2): enabling ssd optimizations [ 181.691446][ T5333] BTRFS info (device loop2): rebuilding free space tree [ 181.730296][ T5333] BTRFS info (device loop2): checking UUID tree [ 181.747250][ T5345] Process accounting resumed [ 183.907557][ T5396] loop1: detected capacity change from 0 to 32768 [ 184.734791][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.768276][ T5396] XFS (loop1): Mounting V5 Filesystem [ 185.034949][ T5411] loop4: detected capacity change from 0 to 256 [ 185.078326][ T5396] XFS (loop1): Ending clean mount [ 185.092825][ T5396] XFS (loop1): Quotacheck needed: Please wait. [ 185.121403][ T5411] exfat: Deprecated parameter 'namecase' [ 185.352982][ T5411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 185.437080][ T5396] XFS (loop1): Quotacheck: Done. [ 185.984206][ T27] audit: type=1804 audit(1786085977.593:6): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.286" name="/newroot/58/file0/file2" dev="loop4" ino=1048599 res=1 errno=0 [ 186.191632][ T5425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.232637][ T5425] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.266834][ T5425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.304938][ T5425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.379201][ T5425] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 186.532503][ T5425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.538613][ T5425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.545726][ T5428] loop0: detected capacity change from 0 to 128 [ 186.748829][ T5428] EXT4-fs: Ignoring removed orlov option [ 186.822388][ T5436] fuse: Bad value for 'user_id' [ 188.242619][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.242721][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.254779][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.562427][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.562529][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.644209][ T5428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.672682][ T5428] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.265865][ T4276] XFS (loop1): Unmounting Filesystem [ 189.521562][ T5444] loop3: detected capacity change from 0 to 32768 [ 189.559724][ T5444] (syz.3.294,5444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.576457][ T5444] (syz.3.294,5444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.612565][ T5444] JBD2: Ignoring recovery information on journal [ 189.627515][ T5445] loop2: detected capacity change from 0 to 2048 [ 189.678364][ T5444] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 189.777779][ T5448] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.322445][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 191.636127][ T5456] input: syz0 as /devices/virtual/input/input13 [ 192.193728][ T4287] ocfs2: Unmounting device (7,3) on (node local) [ 194.515253][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521610][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.628337][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 194.726484][ T5479] fuse: Bad value for 'user_id' [ 196.328614][ T5482] loop0: detected capacity change from 0 to 32768 [ 196.407094][ T5482] XFS (loop0): Mounting V5 Filesystem [ 196.504846][ T5482] XFS (loop0): Ending clean mount [ 196.554676][ T5482] XFS (loop0): Quotacheck needed: Please wait. [ 196.562765][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 196.894370][ T5496] loop1: detected capacity change from 0 to 128 [ 196.901610][ T5496] EXT4-fs: Ignoring removed orlov option [ 196.941519][ T5482] XFS (loop0): Quotacheck: Done. [ 197.206360][ T27] audit: type=1800 audit(1786085988.763:7): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.302" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 197.509327][ T5496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.518767][ T5496] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.611074][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 197.652545][ T4277] XFS (loop0): Unmounting Filesystem [ 197.749783][ T5504] loop1: detected capacity change from 0 to 128 [ 197.756776][ T5504] EXT4-fs: Ignoring removed orlov option [ 197.801008][ T5504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.810069][ T5504] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.956982][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 198.320651][ T5514] ceph: No source [ 199.821556][ T5523] loop3: detected capacity change from 0 to 128 [ 199.828741][ T5523] EXT4-fs: Ignoring removed orlov option [ 199.921794][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.947255][ T5523] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.618787][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 201.814940][ T5537] input: syz0 as /devices/virtual/input/input14 [ 202.158372][ T5544] loop4: detected capacity change from 0 to 32768 [ 202.178989][ T5546] fuse: Bad value for 'user_id' [ 202.312491][ T4274] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 203.236700][ T4274] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 203.544357][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.648118][ T5544] XFS (loop4): Mounting V5 Filesystem [ 203.748160][ T4274] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 203.861090][ T5544] XFS (loop4): Ending clean mount [ 203.918822][ T5544] XFS (loop4): Quotacheck needed: Please wait. [ 203.971311][ T5544] XFS (loop4): Quotacheck: Done. [ 204.120994][ T5540] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.137468][ T4274] gspca_sn9c20x: Write register 1001 failed -71 [ 204.143807][ T4274] gspca_sn9c20x: Device initialization failed [ 204.392467][ T27] audit: type=1800 audit(1786085995.823:8): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.319" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 204.559755][ T4274] gspca_sn9c20x: probe of 3-1:252.0 failed with error -71 [ 204.575617][ T4271] XFS (loop4): Unmounting Filesystem [ 204.612759][ T4274] usb 3-1: USB disconnect, device number 8 [ 204.645999][ T5555] loop3: detected capacity change from 0 to 128 [ 204.656873][ T5555] EXT4-fs: Ignoring removed orlov option [ 204.691477][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 204.741810][ T5555] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.078222][ T5582] loop2: detected capacity change from 0 to 128 [ 208.088615][ T5582] EXT4-fs: Ignoring removed orlov option [ 208.241401][ T5582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.251219][ T5582] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.407496][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 208.490166][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 208.649711][ T5590] loop4: detected capacity change from 0 to 128 [ 208.657209][ T5590] EXT4-fs: Ignoring removed orlov option [ 208.687193][ T5590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.696220][ T5590] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.785091][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 208.893031][ T5596] fuse: Bad value for 'user_id' [ 208.942893][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 209.152744][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 209.167638][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.328416][ T26] usb 3-1: config 0 has no interfaces? [ 209.463666][ T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 209.597385][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.721692][ T26] usb 3-1: Product: syz [ 209.792438][ T26] usb 3-1: Manufacturer: syz [ 209.889933][ T26] usb 3-1: SerialNumber: syz [ 210.062196][ T26] usb 3-1: config 0 descriptor?? [ 210.366033][ T26] usb 3-1: USB disconnect, device number 9 [ 210.408771][ T5601] loop1: detected capacity change from 0 to 32768 [ 210.451682][ T5605] process 'syz.4.333' launched '/dev/fd/3' with NULL argv: empty string added [ 210.516932][ T5601] XFS (loop1): Mounting V5 Filesystem [ 210.579762][ T5601] XFS (loop1): Ending clean mount [ 210.589008][ T5601] XFS (loop1): Quotacheck needed: Please wait. [ 210.640988][ T5601] XFS (loop1): Quotacheck: Done. [ 210.916857][ T27] audit: type=1800 audit(1786086002.473:9): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.332" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 212.030655][ T4276] XFS (loop1): Unmounting Filesystem [ 213.241835][ T5629] loop2: detected capacity change from 0 to 128 [ 213.248675][ T5629] EXT4-fs: Ignoring removed orlov option [ 213.298677][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.307535][ T5629] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.365573][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 214.243484][ T5635] 9pnet: Could not find request transport: fd0x0000000000000003 [ 215.675604][ T5658] loop0: detected capacity change from 0 to 32768 [ 215.685881][ T5658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.347 (5658) [ 215.713571][ T5658] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.723983][ T5658] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 215.732739][ T5658] BTRFS info (device loop0): turning on sync discard [ 215.739451][ T5658] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.748893][ T5658] BTRFS info (device loop0): use zstd compression, level 3 [ 215.756117][ T5658] BTRFS info (device loop0): turning on async discard [ 215.762950][ T5658] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 215.773581][ T5658] BTRFS info (device loop0): trying to use backup root at mount time [ 215.781670][ T5658] BTRFS info (device loop0): enabling auto defrag [ 215.788446][ T5658] BTRFS info (device loop0): using free space tree [ 216.031094][ T5668] loop2: detected capacity change from 0 to 32768 [ 216.194144][ T5668] XFS (loop2): Mounting V5 Filesystem [ 216.400097][ T34] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 216.575534][ T5658] BTRFS error (device loop0): failed to load root extent [ 216.582736][ T5658] BTRFS warning (device loop0): try to load backup roots slot 1 [ 216.591337][ T4868] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 216.657189][ T5668] XFS (loop2): Ending clean mount [ 216.675473][ T5668] XFS (loop2): Quotacheck needed: Please wait. [ 216.794268][ T5658] BTRFS warning (device loop0): couldn't read tree root [ 216.801296][ T5658] BTRFS warning (device loop0): try to load backup roots slot 2 [ 216.814265][ T5658] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 216.825604][ T5658] BTRFS warning (device loop0): couldn't read tree root [ 216.832659][ T5658] BTRFS warning (device loop0): try to load backup roots slot 3 [ 216.924609][ T5658] BTRFS info (device loop0): enabling ssd optimizations [ 216.933917][ T5658] BTRFS info (device loop0): rebuilding free space tree [ 216.953740][ T5658] BTRFS info (device loop0): checking UUID tree [ 217.185251][ T5668] XFS (loop2): Quotacheck: Done. [ 217.326794][ T5693] input: syz0 as /devices/virtual/input/input15 [ 217.463568][ T27] audit: type=1800 audit(1786086009.023:10): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.348" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 217.779332][ T4272] XFS (loop2): Unmounting Filesystem [ 217.954649][ T5701] loop4: detected capacity change from 0 to 256 [ 218.027612][ T4277] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.033210][ T5701] exfat: Deprecated parameter 'namecase' [ 218.079577][ T5701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 218.206765][ T27] audit: type=1804 audit(1786086009.813:11): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.352" name="/newroot/72/file0/file2" dev="loop4" ino=1048600 res=1 errno=0 [ 220.310250][ T5705] program syz.3.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.185197][ T5730] loop1: detected capacity change from 0 to 128 [ 222.192192][ T5730] EXT4-fs: Ignoring removed orlov option [ 222.229642][ T5730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.257930][ T5730] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.315082][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 222.462916][ T5736] tmpfs: Unknown parameter 'quota' [ 223.222033][ T5743] loop0: detected capacity change from 0 to 512 [ 223.462842][ T5743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 223.545264][ T5743] EXT4-fs (loop0): 1 truncate cleaned up [ 223.550969][ T5743] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 223.611279][ T5754] loop3: detected capacity change from 0 to 128 [ 223.618795][ T5754] EXT4-fs: Ignoring removed orlov option [ 223.627540][ T5754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 223.636405][ T5754] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.694823][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 223.740925][ T5761] input: syz0 as /devices/virtual/input/input16 [ 223.744975][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 227.954415][ T5796] loop1: detected capacity change from 0 to 2048 [ 227.974831][ T5798] loop4: detected capacity change from 0 to 512 [ 227.984629][ T5798] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 228.032617][ T5800] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.036775][ T5798] EXT4-fs (loop4): 1 truncate cleaned up [ 228.052578][ T5798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.180984][ T5806] loop0: detected capacity change from 0 to 128 [ 228.192400][ T5806] EXT4-fs: Ignoring removed orlov option [ 228.253423][ T5806] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 228.263798][ T5806] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.592976][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 228.593423][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 229.008310][ T5818] tmpfs: Unknown parameter 'quota' [ 229.411373][ T5819] input: syz0 as /devices/virtual/input/input17 [ 229.617959][ T5820] tmpfs: Unknown parameter 'quota' [ 230.424772][ T5829] tmpfs: Unknown parameter 'quota' [ 231.288023][ T5832] loop3: detected capacity change from 0 to 32768 [ 231.357868][ T5832] (syz.3.389,5832,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.371540][ T5832] (syz.3.389,5832,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.406270][ T5832] JBD2: Ignoring recovery information on journal [ 232.308875][ T5832] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 232.443747][ T5846] loop2: detected capacity change from 0 to 64 [ 232.454628][ T4287] ocfs2: Unmounting device (7,3) on (node local) [ 232.750588][ T5858] loop0: detected capacity change from 0 to 128 [ 232.761756][ T5858] EXT4-fs: Ignoring removed orlov option [ 234.342891][ T5858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.352187][ T5858] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.439998][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 234.460456][ T5867] tmpfs: Unknown parameter 'quota' [ 235.495261][ T5878] loop1: detected capacity change from 0 to 128 [ 235.502346][ T5878] EXT4-fs: Ignoring removed orlov option [ 235.516108][ T5878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 235.543321][ T5878] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.593595][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 237.743891][ T5902] loop1: detected capacity change from 0 to 256 [ 237.751155][ T5902] exfat: Deprecated parameter 'namecase' [ 239.320571][ T5902] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 240.136391][ T5912] Process accounting resumed [ 240.174253][ T5921] loop0: detected capacity change from 0 to 8 [ 240.286049][ T5921] SQUASHFS error: Unable to read inode 0x11f [ 240.502830][ T5414] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 241.164500][ T5414] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 241.779660][ T5414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.375364][ T5414] usb 3-1: can't set config #252, error -71 [ 242.484907][ T5414] usb 3-1: USB disconnect, device number 10 [ 242.684315][ T5938] loop1: detected capacity change from 0 to 32768 [ 242.696013][ T5938] (syz.1.416,5938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.709855][ T5938] (syz.1.416,5938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.788463][ T5938] JBD2: Ignoring recovery information on journal [ 242.848264][ T5938] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 243.981382][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 244.078243][ T5955] tmpfs: Unknown parameter 'quota' [ 244.404940][ T5957] ceph: No source [ 245.025785][ T5965] block device autoloading is deprecated and will be removed. [ 245.458059][ T5963] loop0: detected capacity change from 0 to 128 [ 245.464958][ T5963] EXT4-fs: Ignoring removed orlov option [ 245.849160][ T5971] loop2: detected capacity change from 0 to 64 [ 245.856574][ T5963] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 245.874220][ T5963] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.955606][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 246.209611][ T5977] 9pnet_fd: Insufficient options for proto=fd [ 246.267627][ T5979] loop4: detected capacity change from 0 to 128 [ 246.274816][ T5979] EXT4-fs: Ignoring removed orlov option [ 246.362141][ T5979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.381980][ T5979] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.463254][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 246.782442][ T4872] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 247.574181][ T4872] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 247.667918][ T4872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.747888][ T5999] ceph: No source [ 248.211072][ T4872] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 248.547315][ T4872] gspca_sn9c20x: Write register 1001 failed -71 [ 248.562457][ T4872] gspca_sn9c20x: Device initialization failed [ 249.161501][ T4872] gspca_sn9c20x: probe of 2-1:252.0 failed with error -71 [ 249.463073][ T4872] usb 2-1: USB disconnect, device number 4 [ 251.836331][ T6023] input: syz1 as /devices/virtual/input/input18 [ 252.177652][ T6034] loop4: detected capacity change from 0 to 128 [ 252.189099][ T6034] EXT4-fs: Ignoring removed orlov option [ 252.777968][ T6041] ceph: No source [ 253.134604][ T6034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 253.144897][ T6034] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.249458][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 253.685750][ T6044] loop2: detected capacity change from 0 to 128 [ 253.693432][ T6044] EXT4-fs: Ignoring removed orlov option [ 254.171198][ T6044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.180005][ T6044] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.270835][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 254.390309][ T6061] tmpfs: Unknown parameter 'quota' [ 254.702546][ T4872] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 255.293761][ T6065] input: syz1 as /devices/virtual/input/input19 [ 255.453603][ T4872] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 255.482354][ T4872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.807714][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823682][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.315612][ T6069] loop1: detected capacity change from 0 to 32768 [ 256.330305][ T4872] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 256.351768][ T6069] (syz.1.453,6069,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.365590][ T6069] (syz.1.453,6069,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.403718][ T6069] JBD2: Ignoring recovery information on journal [ 256.472150][ T6069] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 257.112461][ T4872] gspca_sn9c20x: Write register 1001 failed -71 [ 257.128928][ T4872] gspca_sn9c20x: Device initialization failed [ 257.242910][ T4872] gspca_sn9c20x: probe of 5-1:252.0 failed with error -71 [ 257.253423][ T4872] usb 5-1: USB disconnect, device number 3 [ 257.362907][ T6082] ceph: No source [ 258.100708][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 258.276427][ T6090] loop3: detected capacity change from 0 to 128 [ 258.287594][ T6090] EXT4-fs: Ignoring removed orlov option [ 258.635545][ T6090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.644915][ T6090] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.736889][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 259.601776][ T6107] input: syz1 as /devices/virtual/input/input20 [ 260.263382][ T6114] tmpfs: Unknown parameter 'quota' [ 260.489472][ T6116] loop2: detected capacity change from 0 to 256 [ 260.524291][ T6116] FAT-fs (loop2): bogus number of FAT sectors [ 261.075247][ T6116] FAT-fs (loop2): Can't find a valid FAT filesystem [ 261.844829][ T6126] ceph: No source [ 263.486484][ T6135] loop0: detected capacity change from 0 to 256 [ 263.493907][ T6135] exfat: Deprecated parameter 'namecase' [ 263.516592][ T6135] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 263.602206][ T6137] overlayfs: overlapping lowerdir path [ 264.653021][ T6147] input: syz1 as /devices/virtual/input/input21 [ 264.912490][ T4319] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 265.164831][ T4319] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 266.030631][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.045877][ T4319] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 266.252071][ T6162] tmpfs: Unknown parameter 'quota' [ 266.602442][ T4319] gspca_sn9c20x: Write register 1001 failed -71 [ 267.043141][ T4319] gspca_sn9c20x: Device initialization failed [ 267.072429][ T4319] gspca_sn9c20x: probe of 1-1:252.0 failed with error -71 [ 267.137717][ T4319] usb 1-1: USB disconnect, device number 3 [ 267.216587][ T6164] loop4: detected capacity change from 0 to 256 [ 267.253850][ T6164] FAT-fs (loop4): bogus number of FAT sectors [ 267.274761][ T6164] FAT-fs (loop4): Can't find a valid FAT filesystem [ 267.445296][ T6168] loop1: detected capacity change from 0 to 128 [ 267.455754][ T6168] EXT4-fs: Ignoring removed orlov option [ 267.687466][ T6168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.798259][ T6168] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.008478][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 269.420132][ T6191] overlayfs: overlapping lowerdir path [ 270.127593][ T6189] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 270.354848][ T6202] tmpfs: Unknown parameter 'quota' [ 270.808893][ T6190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.144324][ T6190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.219768][ T6190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.232975][ T6190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.250172][ T6190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.292007][ T6209] loop1: detected capacity change from 0 to 256 [ 271.347513][ T6209] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 271.512990][ T6209] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 271.581511][ T6209] syz.1.491: attempt to access beyond end of device [ 271.581511][ T6209] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 271.611491][ T6219] tmpfs: Unknown parameter 'quota' [ 271.792736][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 272.322589][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.385651][ T6209] syz.1.491: attempt to access beyond end of device [ 272.385651][ T6209] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 272.667421][ T6209] syz.1.491: attempt to access beyond end of device [ 272.667421][ T6209] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 272.733261][ T27] audit: type=1800 audit(1786086064.343:12): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.491" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 272.836965][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.848704][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.858995][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.908495][ T22] usb 3-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 272.935132][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.969670][ T22] usb 3-1: Product: syz [ 273.018938][ T6232] loop1: detected capacity change from 0 to 1024 [ 273.027385][ T22] usb 3-1: Manufacturer: syz [ 273.037619][ T22] usb 3-1: SerialNumber: syz [ 273.048826][ T6235] loop0: detected capacity change from 0 to 256 [ 273.089658][ T6235] FAT-fs (loop0): bogus number of FAT sectors [ 273.107200][ T6235] FAT-fs (loop0): Can't find a valid FAT filesystem [ 273.202400][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.239899][ T6232] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 273.282453][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.288489][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.294579][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.977026][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 274.165797][ T6246] overlayfs: overlapping lowerdir path [ 274.658879][ T6242] ushc: probe of 3-1:1.0 failed with error -32 [ 275.049368][ T6251] tmpfs: Unknown parameter 'quota' [ 275.266066][ T5414] usb 3-1: USB disconnect, device number 11 [ 275.780174][ T6260] loop4: detected capacity change from 0 to 2048 [ 275.955008][ T6266] tmpfs: Unknown parameter 'quota' [ 276.423670][ T6268] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.772469][ T6260] syz.4.504: attempt to access beyond end of device [ 276.772469][ T6260] loop4: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 276.915184][ T6260] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 277.589656][ T6271] sctp: failed to load transform for md5: -2 [ 277.864388][ T6268] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 277.913743][ T6283] loop1: detected capacity change from 0 to 128 [ 277.925255][ T6283] EXT4-fs: Ignoring removed orlov option [ 277.927570][ T6268] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 278.035461][ T6283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 278.047614][ T6283] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.104881][ T6268] Remounting filesystem read-only [ 278.115381][ T6286] overlayfs: failed to clone upperpath [ 278.324519][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 278.569466][ T6296] loop1: detected capacity change from 0 to 1024 [ 278.587013][ T6296] hfsplus: unable to parse mount options [ 279.458970][ T6299] loop4: detected capacity change from 0 to 32768 [ 279.481558][ T6299] (syz.4.516,6299,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.495101][ T6299] (syz.4.516,6299,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.562166][ T6299] JBD2: Ignoring recovery information on journal [ 279.586580][ T6297] loop0: detected capacity change from 0 to 128 [ 279.593600][ T6297] EXT4-fs: Ignoring removed orlov option [ 279.650968][ T6299] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 279.721880][ T6297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.730647][ T6297] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.933443][ T4271] ocfs2: Unmounting device (7,4) on (node local) [ 280.052380][ T22] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 280.887573][ T22] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 280.897467][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.233835][ T22] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 281.288733][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 281.602370][ T22] gspca_sn9c20x: Write register 1001 failed -71 [ 281.608753][ T22] gspca_sn9c20x: Device initialization failed [ 281.623552][ T22] gspca_sn9c20x: probe of 4-1:252.0 failed with error -71 [ 282.245514][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 282.422751][ T22] usb 4-1: USB disconnect, device number 3 [ 282.484070][ T6330] loop0: detected capacity change from 0 to 128 [ 282.494882][ T6330] EXT4-fs: Ignoring removed orlov option [ 282.935130][ T6333] loop4: detected capacity change from 0 to 128 [ 282.945666][ T6333] EXT4-fs: Ignoring removed orlov option [ 282.984863][ T6330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.997058][ T6330] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.259571][ T6333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.307341][ T6333] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.346724][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 283.377984][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 283.434508][ T6338] overlayfs: failed to clone upperpath [ 284.310451][ T6348] loop4: detected capacity change from 0 to 128 [ 284.326384][ T6347] loop0: detected capacity change from 0 to 2048 [ 284.399968][ T6348] EXT4-fs: Ignoring removed orlov option [ 284.485538][ T6348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.499221][ T6348] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.520488][ T6355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.740904][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 284.917960][ T6365] loop2: detected capacity change from 0 to 128 [ 284.926927][ T6365] EXT4-fs: Ignoring removed orlov option [ 285.733251][ T6365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.742138][ T6365] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.800635][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 285.845326][ T6352] loop1: detected capacity change from 0 to 32768 [ 285.855359][ T6352] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.529 (6352) [ 285.934427][ T6352] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 285.963510][ T6352] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 286.010407][ T6352] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 286.020665][ T6352] BTRFS info (device loop1): use zstd compression, level 3 [ 286.037386][ T6352] BTRFS info (device loop1): using free space tree [ 286.134958][ T6377] tmpfs: Unknown parameter 'quota' [ 286.880550][ T6352] BTRFS info (device loop1): enabling ssd optimizations [ 287.106508][ T27] audit: type=1800 audit(1786086078.713:13): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.529" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 287.176211][ T27] audit: type=1800 audit(1786086078.783:14): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.529" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 287.374117][ T5424] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 287.473012][ T5419] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 287.762419][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 287.784443][ T5419] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 287.796854][ T5424] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 287.818328][ T5424] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.828159][ T5419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.873189][ T5424] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 287.899797][ T5424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.918157][ T5424] usb 1-1: Product: syz [ 287.928877][ T5419] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 287.938529][ T5424] usb 1-1: Manufacturer: syz [ 287.951540][ T5424] usb 1-1: SerialNumber: syz [ 289.086808][ T5424] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 289.113784][ T5424] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 289.170996][ T5424] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 289.204903][ T5424] usb 1-1: USB disconnect, device number 4 [ 289.280956][ T5419] gspca_sn9c20x: Write register 1001 failed -71 [ 289.300941][ T5419] gspca_sn9c20x: Device initialization failed [ 289.330976][ T4276] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 289.341525][ T5419] gspca_sn9c20x: probe of 4-1:252.0 failed with error -71 [ 289.392516][ T5419] usb 4-1: USB disconnect, device number 4 [ 289.433381][ T4577] udevd[4577]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.775858][ T6419] overlayfs: overlapping lowerdir path [ 290.759831][ T6423] loop2: detected capacity change from 0 to 128 [ 290.770505][ T6423] EXT4-fs: Ignoring removed orlov option [ 291.014211][ T6423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 291.028785][ T6423] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.753305][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 292.021736][ T6430] program syz.1.540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.798360][ T6435] loop3: detected capacity change from 0 to 2048 [ 292.950076][ T6438] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.090590][ T6437] loop2: detected capacity change from 0 to 2048 [ 293.093916][ T6443] jffs2: notice: (6443) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 294.755312][ T6454] tmpfs: Unknown parameter 'quota' [ 294.928895][ T6455] loop1: detected capacity change from 0 to 256 [ 294.973368][ T6455] exfat: Deprecated parameter 'namecase' [ 295.031773][ T6457] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.126628][ T6455] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 296.048425][ T6468] loop1: detected capacity change from 0 to 8 [ 296.097149][ T6468] SQUASHFS error: Unable to read inode 0x11f [ 296.522495][ T5715] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 296.975880][ T5715] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 297.025532][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.303781][ T5715] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 297.683286][ T5715] gspca_sn9c20x: Write register 1001 failed -71 [ 297.689581][ T5715] gspca_sn9c20x: Device initialization failed [ 298.232421][ T5715] gspca_sn9c20x: probe of 5-1:252.0 failed with error -71 [ 298.253648][ T5715] usb 5-1: USB disconnect, device number 4 [ 298.366512][ T6484] tmpfs: Unknown parameter 'quota' [ 299.350753][ T6492] program syz.4.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.253390][ T6495] tmpfs: Unknown parameter 'quota' [ 301.435986][ T6507] loop1: detected capacity change from 0 to 128 [ 301.446797][ T6507] EXT4-fs: Ignoring removed orlov option [ 301.718004][ T6507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 301.789815][ T6507] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.646742][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 304.838149][ T6525] Process accounting resumed [ 304.865181][ T6540] tmpfs: Unknown parameter 'quota' [ 304.962352][ T4317] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 305.165317][ T4317] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 305.182446][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.199014][ T6545] loop2: detected capacity change from 0 to 2048 [ 305.211421][ T4317] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 305.296573][ T6548] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.688573][ T4317] gspca_sn9c20x: Write register 1001 failed -110 [ 306.738728][ T4317] gspca_sn9c20x: Device initialization failed [ 306.773303][ T4317] gspca_sn9c20x: probe of 2-1:252.0 failed with error -110 [ 306.784390][ T4317] usb 2-1: USB disconnect, device number 5 [ 307.910879][ T6560] loop3: detected capacity change from 0 to 2048 [ 307.968473][ T6561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.586160][ T6576] loop0: detected capacity change from 0 to 128 [ 308.592988][ T6576] EXT4-fs: Ignoring removed orlov option [ 308.655625][ T6576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.665853][ T6576] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.062918][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 310.745711][ T6593] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 312.726780][ T6611] loop4: detected capacity change from 0 to 64 [ 312.938227][ T6613] loop1: detected capacity change from 0 to 2048 [ 313.038881][ T6618] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.122482][ T6620] loop0: detected capacity change from 0 to 128 [ 313.133560][ T6620] EXT4-fs: Ignoring removed orlov option [ 313.493851][ T6620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 313.502737][ T6620] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.585778][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 315.980558][ T6637] loop2: detected capacity change from 0 to 2048 [ 316.038312][ T6638] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.966672][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.972991][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.937990][ T6665] ceph: No source [ 321.692781][ T6677] loop2: detected capacity change from 0 to 2048 [ 321.853656][ T6684] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.136193][ T6690] loop1: detected capacity change from 0 to 128 [ 322.184617][ T6690] EXT4-fs: Ignoring removed orlov option [ 322.509249][ T6690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.542178][ T6690] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.722189][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 324.741399][ T6706] overlayfs: failed to clone upperpath [ 325.065164][ T6717] loop4: detected capacity change from 0 to 64 [ 325.329553][ T6727] loop2: detected capacity change from 0 to 128 [ 325.336793][ T6727] EXT4-fs: Ignoring removed orlov option [ 325.941367][ T6727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 325.994211][ T6727] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.211846][ T6733] loop0: detected capacity change from 0 to 128 [ 326.221223][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 326.248993][ T6733] EXT4-fs: Ignoring removed orlov option [ 326.459502][ T6733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 326.480787][ T6733] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.664354][ T6740] loop2: detected capacity change from 0 to 2048 [ 326.740487][ T6743] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.893705][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 327.971232][ T6745] ceph: No source [ 328.519198][ T6757] loop0: detected capacity change from 0 to 32768 [ 328.563422][ T6757] (syz.0.633,6757,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 328.578267][ T6757] (syz.0.633,6757,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 328.613973][ T6757] JBD2: Ignoring recovery information on journal [ 328.647535][ T6757] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 328.919922][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 328.981861][ T6764] overlayfs: failed to clone upperpath [ 329.234251][ T6770] loop2: detected capacity change from 0 to 64 [ 331.366299][ T6787] Process accounting resumed [ 331.442633][ T4286] Bluetooth: hci3: command 0x2016 tx timeout [ 331.612494][ T4362] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 331.833921][ T4362] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 331.912481][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.948538][ T4362] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 332.146472][ T4362] gspca_sn9c20x: Write register 1000 failed -71 [ 332.154545][ T4362] gspca_sn9c20x: Device initialization failed [ 332.188365][ T4362] gspca_sn9c20x: probe of 3-1:252.0 failed with error -71 [ 332.197182][ T4362] usb 3-1: USB disconnect, device number 12 [ 332.467680][ T6808] overlayfs: failed to clone upperpath [ 332.583092][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 332.593079][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 332.600642][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.610704][ T4286] Workqueue: hci3 hci_rx_work [ 332.615436][ T4286] Call Trace: [ 332.618707][ T4286] [ 332.621622][ T4286] dump_stack_lvl+0x188/0x24e [ 332.626298][ T4286] ? show_regs_print_info+0x12/0x12 [ 332.631494][ T4286] ? load_image+0x410/0x410 [ 332.636003][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 332.641139][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 332.646163][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 332.650849][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 332.656053][ T4286] kobject_add_internal+0x617/0xca0 [ 332.661243][ T4286] kobject_add+0x160/0x230 [ 332.665649][ T4286] ? kobject_init+0x1c0/0x1c0 [ 332.670312][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 332.675607][ T4286] ? klist_children_get+0x50/0x50 [ 332.680625][ T4286] ? get_device_parent+0x121/0x3e0 [ 332.685730][ T4286] device_add+0x470/0x1050 [ 332.690138][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 332.695097][ T4286] le_conn_complete_evt+0xfac/0x15c0 [ 332.700403][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 332.706644][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 332.712284][ T4286] ? mutex_unlock+0x10/0x10 [ 332.716784][ T4286] ? skb_pull_data+0xec/0x1f0 [ 332.721478][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 332.727366][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 332.733776][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 332.739843][ T4286] hci_event_packet+0x7b3/0x1290 [ 332.744782][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 332.749807][ T4286] ? bis_list+0x280/0x280 [ 332.754124][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.760009][ T4286] ? kcov_remote_start+0x4b0/0x7e0 [ 332.765126][ T4286] ? do_machine_check+0x380/0x750 [ 332.770143][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 332.775339][ T4286] hci_rx_work+0x3eb/0xd40 [ 332.779748][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 332.784591][ T4286] ? process_one_work+0x7b4/0x1160 [ 332.789710][ T4286] process_one_work+0x8ab/0x1160 [ 332.794648][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 332.800271][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 332.805283][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 332.810822][ T4286] ? wq_worker_running+0x97/0x190 [ 332.815840][ T4286] worker_thread+0xaf5/0x12a0 [ 332.820514][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.826424][ T4286] kthread+0x29d/0x330 [ 332.830482][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 332.835500][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 332.840080][ T4286] ret_from_fork+0x1f/0x30 [ 332.844493][ T4286] [ 332.893928][ T4286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 332.908609][ T4286] Bluetooth: hci3: failed to register connection device [ 334.962531][ T4286] Bluetooth: hci3: command 0x2016 tx timeout [ 335.983973][ T6847] loop4: detected capacity change from 0 to 128 [ 335.994811][ T6847] EXT4-fs: Ignoring removed orlov option [ 336.429645][ T6847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 336.441861][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 336.451411][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 336.458973][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.469041][ T4286] Workqueue: hci3 hci_rx_work [ 336.473736][ T4286] Call Trace: [ 336.477008][ T4286] [ 336.479932][ T4286] dump_stack_lvl+0x188/0x24e [ 336.484631][ T4286] ? show_regs_print_info+0x12/0x12 [ 336.489836][ T4286] ? load_image+0x410/0x410 [ 336.494348][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 336.499458][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 336.504478][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 336.509153][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 336.514352][ T4286] kobject_add_internal+0x617/0xca0 [ 336.519557][ T4286] kobject_add+0x160/0x230 [ 336.523974][ T4286] ? kobject_init+0x1c0/0x1c0 [ 336.528647][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 336.533926][ T4286] ? klist_children_get+0x50/0x50 [ 336.538948][ T4286] ? get_device_parent+0x121/0x3e0 [ 336.544234][ T4286] device_add+0x470/0x1050 [ 336.548651][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 336.553609][ T4286] le_conn_complete_evt+0xfac/0x15c0 [ 336.558917][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 336.565168][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 336.570814][ T4286] ? mutex_unlock+0x10/0x10 [ 336.575317][ T4286] ? skb_pull_data+0xec/0x1f0 [ 336.579989][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 336.585884][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 336.592306][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 336.598367][ T4286] hci_event_packet+0x7b3/0x1290 [ 336.603318][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 336.608340][ T4286] ? bis_list+0x280/0x280 [ 336.612666][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 336.618558][ T4286] ? kcov_remote_start+0x4b0/0x7e0 [ 336.623667][ T4286] ? do_machine_check+0x380/0x750 [ 336.628691][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 336.633890][ T4286] hci_rx_work+0x3eb/0xd40 [ 336.638303][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 336.643153][ T4286] ? process_one_work+0x7b4/0x1160 [ 336.648258][ T4286] process_one_work+0x8ab/0x1160 [ 336.653229][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 336.658863][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 336.663883][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 336.669421][ T4286] ? wq_worker_running+0x97/0x190 [ 336.674450][ T4286] worker_thread+0xaf5/0x12a0 [ 336.679136][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 336.685122][ T4286] kthread+0x29d/0x330 [ 336.689183][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 336.694239][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 336.698837][ T4286] ret_from_fork+0x1f/0x30 [ 336.703268][ T4286] [ 336.763590][ T4286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 336.777022][ T4286] Bluetooth: hci3: failed to register connection device [ 336.790439][ T6847] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.868575][ T6851] overlayfs: failed to clone upperpath [ 336.938734][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 337.906727][ T6865] loop2: detected capacity change from 0 to 2048 [ 337.972626][ T6868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.361227][ T6874] tmpfs: Unknown parameter 'quota' [ 338.802432][ T4286] Bluetooth: hci3: command 0x2016 tx timeout [ 339.327706][ T6879] Process accounting resumed [ 341.432137][ T6898] loop0: detected capacity change from 0 to 128 [ 341.443291][ T6898] EXT4-fs: Ignoring removed orlov option [ 341.880357][ T6898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 341.890304][ T6898] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.933933][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 342.191577][ T6911] overlayfs: failed to clone upperpath [ 342.202361][ T22] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 342.895852][ T6913] loop3: detected capacity change from 0 to 2048 [ 342.943966][ T22] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 342.962439][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.977249][ T6916] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.007518][ T22] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 343.202798][ T22] gspca_sn9c20x: Write register 1000 failed -71 [ 343.209089][ T22] gspca_sn9c20x: Device initialization failed [ 343.215494][ T4286] Bluetooth: hci1: command 0x2016 tx timeout [ 343.241938][ T22] gspca_sn9c20x: probe of 5-1:252.0 failed with error -71 [ 343.266262][ T22] usb 5-1: USB disconnect, device number 5 [ 343.288704][ T6920] Process accounting resumed [ 344.785587][ T6932] loop4: detected capacity change from 0 to 64 [ 345.262050][ T6945] loop0: detected capacity change from 0 to 128 [ 345.272735][ T6945] EXT4-fs: Ignoring removed orlov option [ 345.683946][ T6948] tmpfs: Unknown parameter 'quota' [ 346.113432][ T6945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 346.122611][ T6945] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.250510][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 346.526586][ T6963] CIFS: Attempting to mount \\127.0.0.1\share [ 346.534279][ T6963] CIFS: VFS: No username specified [ 346.962328][ T4286] Bluetooth: hci2: command 0x2016 tx timeout [ 347.855414][ T6970] Process accounting resumed [ 348.071010][ T6976] loop4: detected capacity change from 0 to 32768 [ 348.083909][ T6976] (syz.4.697,6976,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.098609][ T6976] (syz.4.697,6976,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.118400][ T6976] JBD2: Ignoring recovery information on journal [ 348.139680][ T6976] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 348.175389][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 348.185748][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 348.193319][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.203376][ T4286] Workqueue: hci1 hci_rx_work [ 348.208064][ T4286] Call Trace: [ 348.211338][ T4286] [ 348.214265][ T4286] dump_stack_lvl+0x188/0x24e [ 348.218958][ T4286] ? show_regs_print_info+0x12/0x12 [ 348.224157][ T4286] ? load_image+0x410/0x410 [ 348.228663][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 348.233781][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 348.238817][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 348.243499][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 348.248693][ T4286] kobject_add_internal+0x617/0xca0 [ 348.253893][ T4286] kobject_add+0x160/0x230 [ 348.258306][ T4286] ? kobject_init+0x1c0/0x1c0 [ 348.262980][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 348.268257][ T4286] ? klist_children_get+0x50/0x50 [ 348.273283][ T4286] ? get_device_parent+0x121/0x3e0 [ 348.278395][ T4286] device_add+0x470/0x1050 [ 348.282818][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 348.287759][ T4286] le_conn_complete_evt+0xfac/0x15c0 [ 348.293058][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 348.299304][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 348.304942][ T4286] ? mutex_unlock+0x10/0x10 [ 348.309444][ T4286] ? skb_pull_data+0xec/0x1f0 [ 348.314118][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 348.320011][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 348.326445][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 348.332526][ T4286] hci_event_packet+0x7b3/0x1290 [ 348.337483][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 348.342512][ T4286] ? bis_list+0x280/0x280 [ 348.346850][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 348.352751][ T4286] ? kcov_remote_start+0x4b0/0x7e0 [ 348.357860][ T4286] ? do_machine_check+0x380/0x750 [ 348.362889][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 348.368094][ T4286] hci_rx_work+0x3eb/0xd40 [ 348.372513][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 348.377363][ T4286] ? process_one_work+0x7b4/0x1160 [ 348.382474][ T4286] process_one_work+0x8ab/0x1160 [ 348.387419][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 348.393062][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 348.398123][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 348.403672][ T4286] ? wq_worker_running+0x97/0x190 [ 348.408704][ T4286] worker_thread+0xaf5/0x12a0 [ 348.413392][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 348.419295][ T4286] kthread+0x29d/0x330 [ 348.424590][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 348.429618][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 348.434203][ T4286] ret_from_fork+0x1f/0x30 [ 348.438629][ T4286] [ 348.444890][ T4362] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 348.472400][ T4286] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 348.485841][ T4286] Bluetooth: hci1: failed to register connection device [ 349.247632][ T4362] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 349.257493][ T4362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.306608][ T4362] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 349.689176][ T6987] tmpfs: Unknown parameter 'quota' [ 349.832536][ T4362] gspca_sn9c20x: Write register 1000 failed -110 [ 349.856270][ T4362] gspca_sn9c20x: Device initialization failed [ 349.866104][ T4271] ocfs2: Unmounting device (7,4) on (node local) [ 350.503214][ T4362] gspca_sn9c20x: probe of 4-1:252.0 failed with error -110 [ 350.512809][ T4362] usb 4-1: USB disconnect, device number 5 [ 350.573046][ T4286] Bluetooth: hci1: command 0x2016 tx timeout [ 352.594883][ T7007] Process accounting resumed [ 352.963328][ T7020] loop0: detected capacity change from 0 to 2048 [ 352.994252][ T7019] overlayfs: failed to clone upperpath [ 353.019431][ T7021] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.995329][ T7044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 357.011549][ T7044] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 357.199569][ T7044] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 357.255922][ T7044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 357.381544][ T7044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 357.404450][ T7044] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 358.118546][ T7044] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 358.164111][ T7044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.183049][ T7044] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 358.201238][ T7052] Process accounting resumed [ 358.402125][ T7044] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 358.412848][ T7044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 358.491844][ T7044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 358.571024][ T7044] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 359.167545][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 359.247405][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 359.254831][ T7068] loop3: detected capacity change from 0 to 2048 [ 359.257210][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 359.270803][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.280856][ T4286] Workqueue: hci3 hci_rx_work [ 359.285670][ T4286] Call Trace: [ 359.288996][ T4286] [ 359.292015][ T4286] dump_stack_lvl+0x188/0x24e [ 359.296749][ T4286] ? show_regs_print_info+0x12/0x12 [ 359.301941][ T4286] ? load_image+0x410/0x410 [ 359.306472][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 359.311582][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 359.316604][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 359.321289][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 359.326482][ T4286] kobject_add_internal+0x617/0xca0 [ 359.331687][ T4286] kobject_add+0x160/0x230 [ 359.336092][ T4286] ? kobject_init+0x1c0/0x1c0 [ 359.340755][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 359.346023][ T4286] ? klist_children_get+0x50/0x50 [ 359.351124][ T4286] ? get_device_parent+0x121/0x3e0 [ 359.356227][ T4286] device_add+0x470/0x1050 [ 359.360634][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 359.365633][ T4286] le_conn_complete_evt+0xfac/0x15c0 [ 359.370912][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 359.377142][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 359.382820][ T4286] ? mutex_unlock+0x10/0x10 [ 359.387310][ T4286] ? skb_pull_data+0xec/0x1f0 [ 359.391986][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 359.397871][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 359.404273][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 359.410324][ T4286] hci_event_packet+0x7b3/0x1290 [ 359.415266][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 359.420288][ T4286] ? bis_list+0x280/0x280 [ 359.424621][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 359.430520][ T4286] ? kcov_remote_start+0x4b0/0x7e0 [ 359.435645][ T4286] ? do_machine_check+0x380/0x750 [ 359.440665][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 359.445860][ T4286] hci_rx_work+0x3eb/0xd40 [ 359.450271][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 359.455117][ T4286] ? process_one_work+0x7b4/0x1160 [ 359.460312][ T4286] process_one_work+0x8ab/0x1160 [ 359.465245][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 359.470868][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 359.475879][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 359.481411][ T4286] ? wq_worker_running+0x97/0x190 [ 359.486525][ T4286] worker_thread+0xaf5/0x12a0 [ 359.491215][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 359.497109][ T4286] kthread+0x29d/0x330 [ 359.501166][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 359.506179][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 359.510756][ T4286] ret_from_fork+0x1f/0x30 [ 359.515195][ T4286] [ 359.519221][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 359.525743][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 359.532537][ T4286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 359.545804][ T4286] Bluetooth: hci3: failed to register connection device [ 359.686556][ T7074] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.856010][ T7076] overlayfs: failed to clone upperpath [ 360.504115][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.510496][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.620752][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 361.622336][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 361.673327][ T7093] loop2: detected capacity change from 0 to 2048 [ 361.854006][ T7094] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.693545][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 362.742417][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 362.973786][ T7101] loop3: detected capacity change from 0 to 128 [ 362.988525][ T7101] EXT4-fs: Ignoring removed orlov option [ 363.044771][ T7101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 363.063652][ T7101] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.337759][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 363.501237][ T7111] fuse: Bad value for 'fd' [ 364.802470][ T4278] Bluetooth: hci3: command 0x2016 tx timeout [ 366.660107][ T7139] input: syz0 as /devices/virtual/input/input24 [ 367.394003][ T7149] ceph: No source [ 367.659237][ T7159] fuse: Bad value for 'fd' [ 367.692031][ T7157] loop1: detected capacity change from 0 to 2048 [ 367.772519][ T7160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.976114][ T7174] tmpfs: Unknown parameter 'quota' [ 370.892300][ T4284] Bluetooth: hci0: command 0x2016 tx timeout [ 372.992789][ T7197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.998928][ T7197] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 373.053936][ T7197] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 373.065471][ T7197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 373.170922][ T7197] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 373.250704][ T7197] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 373.289513][ T7197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.318895][ T7205] ceph: No source [ 373.346031][ T7197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 373.402038][ T7197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 373.431333][ T7197] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 373.461953][ T7197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 373.650301][ T7207] loop0: detected capacity change from 0 to 2048 [ 374.431701][ T7215] Process accounting resumed [ 374.473763][ T7220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.964979][ T7225] loop2: detected capacity change from 0 to 128 [ 374.973104][ T7225] EXT4-fs: Ignoring removed orlov option [ 375.013853][ T7225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 375.042984][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.052524][ T7225] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.122479][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.282337][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.372546][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.519959][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 375.525991][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 376.590004][ T7251] CIFS: Attempting to mount \\127.0.0.1\share [ 376.597693][ T7251] CIFS: VFS: No username specified [ 377.122561][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 377.202300][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 377.893540][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 378.408872][ T7258] loop3: detected capacity change from 0 to 128 [ 378.409411][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.422277][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.436717][ T7258] EXT4-fs: Ignoring removed orlov option [ 378.587452][ T7258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 378.622665][ T7258] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.748376][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 378.820825][ T7255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.826868][ T7255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.832937][ T7255] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 378.941226][ T7255] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 378.948532][ T7255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.954576][ T7255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.960479][ T7255] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 379.104545][ T7255] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 379.111743][ T7255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.242425][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.352907][ T7261] Process accounting resumed [ 380.882319][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.042523][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 381.042611][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 381.212269][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 381.220754][ T7272] loop0: detected capacity change from 0 to 2048 [ 381.259390][ T7279] loop1: detected capacity change from 0 to 128 [ 381.324808][ T7279] EXT4-fs: Ignoring removed orlov option [ 381.392363][ T7280] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.478706][ T7279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 381.519069][ T7279] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.343834][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 382.447424][ T7296] loop3: detected capacity change from 0 to 2048 [ 382.733961][ T7299] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.939458][ T7304] tmpfs: Unknown parameter 'quota' [ 382.962338][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 383.122399][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 386.427773][ T7326] loop2: detected capacity change from 0 to 128 [ 386.443143][ T7326] EXT4-fs: Ignoring removed orlov option [ 386.525344][ T7326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 386.544632][ T7326] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.588864][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 388.279710][ T7342] Process accounting resumed [ 388.333218][ T7347] loop2: detected capacity change from 0 to 2048 [ 388.397950][ T7348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.803061][ T7356] overlayfs: overlapping lowerdir path [ 390.482348][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 392.108122][ T7374] tmpfs: Unknown parameter 'quota' [ 392.975541][ T7387] loop2: detected capacity change from 0 to 128 [ 392.999778][ T7385] loop3: detected capacity change from 0 to 128 [ 393.039583][ T7385] EXT4-fs: Ignoring removed orlov option [ 393.117429][ T7385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 393.126437][ T7385] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.150691][ T7387] EXT4-fs: Ignoring removed orlov option [ 393.236078][ T7387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 393.270823][ T7387] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.584952][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 394.721143][ T7401] loop4: detected capacity change from 0 to 2048 [ 394.765883][ T7403] loop0: detected capacity change from 0 to 2048 [ 394.879190][ T7404] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.916131][ T7405] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.603853][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 398.821928][ T7426] loop0: detected capacity change from 0 to 128 [ 398.840277][ T7422] loop3: detected capacity change from 0 to 32768 [ 398.923850][ T7426] EXT4-fs: Ignoring removed orlov option [ 398.958762][ T7422] XFS (loop3): Mounting V5 Filesystem [ 399.005559][ T7422] XFS (loop3): Ending clean mount [ 399.017292][ T7422] XFS (loop3): Quotacheck needed: Please wait. [ 399.063854][ T7426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 399.155284][ T7426] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.168582][ T7422] XFS (loop3): Quotacheck: Done. [ 399.382839][ T27] audit: type=1800 audit(1786086190.993:15): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.820" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 399.496381][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 399.714293][ T4287] XFS (loop3): Unmounting Filesystem [ 399.813533][ T7446] tmpfs: Unknown parameter 'quota' [ 400.782308][ T7457] loop0: detected capacity change from 0 to 128 [ 400.792904][ T7457] EXT4-fs: Ignoring removed orlov option [ 401.164330][ T7457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.174832][ T7457] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.335162][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 402.468356][ T7465] tmpfs: Unknown parameter 'quota' [ 404.516784][ T7476] loop2: detected capacity change from 0 to 2048 [ 404.725496][ T7477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.792631][ T7490] loop1: detected capacity change from 0 to 32768 [ 407.809641][ T7490] XFS (loop1): Mounting V5 Filesystem [ 407.962110][ T7509] loop0: detected capacity change from 0 to 2048 [ 408.050643][ T7510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.105635][ T7490] XFS (loop1): Ending clean mount [ 408.117125][ T7490] XFS (loop1): Quotacheck needed: Please wait. [ 408.173532][ T7490] XFS (loop1): Quotacheck: Done. [ 408.506500][ T27] audit: type=1800 audit(1786086199.933:16): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.834" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 409.678026][ T7520] tmpfs: Unknown parameter 'quota' [ 410.014168][ T4276] XFS (loop1): Unmounting Filesystem [ 411.367275][ T7535] loop1: detected capacity change from 0 to 2048 [ 411.527995][ T7536] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.680695][ T7544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.688044][ T7544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 412.733043][ T7544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.751795][ T7544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.791300][ T7544] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 412.840697][ T7544] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 413.066821][ T7544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.081178][ T7544] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 413.188813][ T7544] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 413.385158][ T7557] loop1: detected capacity change from 0 to 128 [ 413.392188][ T7557] EXT4-fs: Ignoring removed orlov option [ 413.417836][ T7557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 413.437485][ T7557] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.559741][ T7562] loop3: detected capacity change from 0 to 2048 [ 414.167412][ T7566] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.646515][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 414.722432][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.728500][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 414.802383][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 414.802441][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 415.108155][ T7579] loop1: detected capacity change from 0 to 32768 [ 415.122566][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 415.792862][ T7579] XFS (loop1): Mounting V5 Filesystem [ 416.882345][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 417.202291][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 417.436172][ T7579] XFS (loop1): Ending clean mount [ 417.445760][ T7579] XFS (loop1): Quotacheck needed: Please wait. [ 417.460234][ T7583] Process accounting resumed [ 417.632347][ T7599] program syz.2.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.444605][ T7600] tmpfs: Unknown parameter 'quota' [ 418.508376][ T7579] XFS (loop1): Quotacheck: Done. [ 418.665744][ T4276] XFS (loop1): Unmounting Filesystem [ 419.858741][ T7607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.993755][ T7607] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.083595][ T7607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.114274][ T7607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.176147][ T7607] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.207602][ T7610] loop1: detected capacity change from 0 to 2048 [ 420.359124][ T7614] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.425394][ T7626] loop2: detected capacity change from 0 to 128 [ 421.455663][ T7626] EXT4-fs: Ignoring removed orlov option [ 421.552811][ T7626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 421.678552][ T7626] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.932408][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 422.002522][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.002601][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 422.162334][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 422.162379][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 422.457282][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 422.985830][ T7639] loop1: detected capacity change from 0 to 128 [ 422.996499][ T7639] EXT4-fs: Ignoring removed orlov option [ 423.113208][ T7639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 423.125588][ T7639] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.334485][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 423.911268][ T7643] loop3: detected capacity change from 0 to 2048 [ 424.563631][ T7652] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.693739][ T7650] loop2: detected capacity change from 0 to 32768 [ 424.781608][ T7658] tmpfs: Unknown parameter 'quota' [ 424.875542][ T7650] (syz.2.867,7650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 424.895033][ T7650] (syz.2.867,7650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 425.068046][ T7662] ceph: No source [ 425.221912][ T7650] JBD2: Ignoring recovery information on journal [ 425.640835][ T7650] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 426.268860][ T7673] tmpfs: Unknown parameter 'quota' [ 427.496759][ T7686] loop4: detected capacity change from 0 to 128 [ 427.559917][ T7686] EXT4-fs: Ignoring removed orlov option [ 427.669721][ T7686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 427.684038][ T7686] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.768563][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 428.818577][ T7696] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 430.846067][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 431.158315][ T7720] loop0: detected capacity change from 0 to 2048 [ 431.485456][ T7724] ceph: No source [ 432.219938][ T7726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.800371][ T7747] tmpfs: Unknown parameter 'quota' [ 434.819513][ T7756] ================================================================== [ 434.827677][ T7756] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 434.835196][ T7756] Read of size 8 at addr ffff888147b26818 by task syz.2.888/7756 [ 434.843306][ T7756] [ 434.845665][ T7756] CPU: 1 PID: 7756 Comm: syz.2.888 Not tainted syzkaller #0 [ 434.852982][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.863024][ T7756] Call Trace: [ 434.866330][ T7756] [ 434.869264][ T7756] dump_stack_lvl+0x188/0x24e [ 434.873956][ T7756] ? read_lock_is_recursive+0x10/0x10 [ 434.879358][ T7756] ? show_regs_print_info+0x12/0x12 [ 434.884578][ T7756] ? load_image+0x410/0x410 [ 434.889101][ T7756] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 434.894579][ T7756] ? __virt_addr_valid+0x188/0x540 [ 434.899735][ T7756] ? __virt_addr_valid+0x467/0x540 [ 434.904862][ T7756] ? dvb_device_open+0xc5/0x360 [ 434.909728][ T7756] print_report+0xa8/0x210 [ 434.914158][ T7756] kasan_report+0x10b/0x140 [ 434.918699][ T7756] ? dvb_device_open+0xc5/0x360 [ 434.923570][ T7756] dvb_device_open+0xc5/0x360 [ 434.928265][ T7756] chrdev_open+0x585/0x5f0 [ 434.932774][ T7756] ? cd_forget+0x160/0x160 [ 434.937200][ T7756] ? fsnotify_perm+0x39b/0x550 [ 434.942004][ T7756] ? cd_forget+0x160/0x160 [ 434.946402][ T7756] do_dentry_open+0x7dd/0x10b0 [ 434.951198][ T7756] path_openat+0x2674/0x2f10 [ 434.955809][ T7756] ? verify_lock_unused+0x140/0x140 [ 434.960993][ T7756] ? do_sys_openat2+0xdd/0x4f0 [ 434.965747][ T7756] ? do_filp_open+0x420/0x420 [ 434.970417][ T7756] do_filp_open+0x1ee/0x420 [ 434.974905][ T7756] ? vfs_tmpfile+0x470/0x470 [ 434.979486][ T7756] ? _raw_spin_unlock+0x24/0x40 [ 434.984320][ T7756] ? alloc_fd+0x590/0x640 [ 434.988669][ T7756] do_sys_openat2+0x14b/0x4f0 [ 434.993370][ T7756] ? do_sys_open+0xe0/0xe0 [ 434.997790][ T7756] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.003774][ T7756] ? lock_chain_count+0x20/0x20 [ 435.008624][ T7756] __x64_sys_openat+0x135/0x160 [ 435.013471][ T7756] do_syscall_64+0x4c/0xa0 [ 435.017884][ T7756] ? clear_bhb_loop+0x60/0xb0 [ 435.022618][ T7756] ? clear_bhb_loop+0x60/0xb0 [ 435.027297][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.033197][ T7756] RIP: 0033:0x7fa34f35e90e [ 435.037606][ T7756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.057263][ T7756] RSP: 002b:00007fa350244b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.065735][ T7756] RAX: ffffffffffffffda RBX: 00007fa3502456c0 RCX: 00007fa34f35e90e [ 435.073696][ T7756] RDX: 0000000000000801 RSI: 00007fa350244c00 RDI: ffffffffffffff9c [ 435.081662][ T7756] RBP: 00007fa350244c00 R08: 0000000000000000 R09: 0000000000000000 [ 435.089625][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 435.097586][ T7756] R13: 00007fa34f626038 R14: 00007fa34f625fa0 R15: 00007ffd81a27638 [ 435.105554][ T7756] [ 435.108562][ T7756] [ 435.110874][ T7756] Allocated by task 1: [ 435.114997][ T7756] kasan_set_track+0x4b/0x70 [ 435.119583][ T7756] __kasan_kmalloc+0x8e/0xa0 [ 435.124166][ T7756] dvb_register_device+0x305/0x1dc0 [ 435.129361][ T7756] dvb_register_frontend+0x629/0x900 [ 435.134637][ T7756] vidtv_bridge_probe+0x9cf/0xf50 [ 435.139703][ T7756] platform_probe+0x137/0x1c0 [ 435.144403][ T7756] really_probe+0x24a/0xb40 [ 435.148896][ T7756] __driver_probe_device+0x1f5/0x390 [ 435.154168][ T7756] driver_probe_device+0x4f/0x420 [ 435.159215][ T7756] __driver_attach+0x43d/0x6c0 [ 435.163964][ T7756] bus_for_each_dev+0x182/0x1f0 [ 435.168801][ T7756] bus_add_driver+0x324/0x5d0 [ 435.173463][ T7756] driver_register+0x32d/0x430 [ 435.178214][ T7756] vidtv_bridge_init+0x39/0x67 [ 435.183092][ T7756] do_one_initcall+0x257/0x800 [ 435.187852][ T7756] do_initcall_level+0x13d/0x1ed [ 435.192833][ T7756] do_initcalls+0x4b/0x8a [ 435.197193][ T7756] kernel_init_freeable+0x401/0x5ab [ 435.202383][ T7756] kernel_init+0x19/0x1b0 [ 435.206702][ T7756] ret_from_fork+0x1f/0x30 [ 435.211123][ T7756] [ 435.213437][ T7756] Freed by task 7696: [ 435.217403][ T7756] kasan_set_track+0x4b/0x70 [ 435.221986][ T7756] kasan_save_free_info+0x27/0x40 [ 435.227054][ T7756] ____kasan_slab_free+0x126/0x1f0 [ 435.232156][ T7756] slab_free_freelist_hook+0x133/0x1b0 [ 435.237606][ T7756] __kmem_cache_free+0xb6/0x200 [ 435.242445][ T7756] dvb_device_open+0x2d2/0x360 [ 435.247202][ T7756] chrdev_open+0x585/0x5f0 [ 435.251607][ T7756] do_dentry_open+0x7dd/0x10b0 [ 435.256365][ T7756] path_openat+0x2674/0x2f10 [ 435.260942][ T7756] do_filp_open+0x1ee/0x420 [ 435.265430][ T7756] do_sys_openat2+0x14b/0x4f0 [ 435.270132][ T7756] __x64_sys_openat+0x135/0x160 [ 435.274984][ T7756] do_syscall_64+0x4c/0xa0 [ 435.279393][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.285282][ T7756] [ 435.287595][ T7756] The buggy address belongs to the object at ffff888147b26800 [ 435.287595][ T7756] which belongs to the cache kmalloc-256 of size 256 [ 435.301727][ T7756] The buggy address is located 24 bytes inside of [ 435.301727][ T7756] 256-byte region [ffff888147b26800, ffff888147b26900) [ 435.314901][ T7756] [ 435.317214][ T7756] The buggy address belongs to the physical page: [ 435.323671][ T7756] page:ffffea00051ec980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147b26 [ 435.333906][ T7756] head:ffffea00051ec980 order:1 compound_mapcount:0 compound_pincount:0 [ 435.342221][ T7756] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 435.350284][ T7756] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 435.358870][ T7756] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 435.367541][ T7756] page dumped because: kasan: bad access detected [ 435.373954][ T7756] page_owner tracks the page as allocated [ 435.379658][ T7756] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15704583063, free_ts 0 [ 435.399364][ T7756] post_alloc_hook+0x173/0x1a0 [ 435.404204][ T7756] get_page_from_freelist+0x206b/0x2180 [ 435.409741][ T7756] __alloc_pages+0x1ec/0x4f0 [ 435.414328][ T7756] alloc_page_interleave+0x24/0x1e0 [ 435.419562][ T7756] alloc_slab_page+0x5d/0x180 [ 435.424505][ T7756] new_slab+0x87/0x2d0 [ 435.428576][ T7756] ___slab_alloc+0xbc5/0x1240 [ 435.433245][ T7756] __kmem_cache_alloc_node+0x126/0x270 [ 435.438704][ T7756] kmalloc_trace+0x26/0xe0 [ 435.443200][ T7756] bus_add_driver+0xdc/0x5d0 [ 435.447781][ T7756] driver_register+0x32d/0x430 [ 435.452538][ T7756] do_one_initcall+0x257/0x800 [ 435.457294][ T7756] do_initcall_level+0x13d/0x1ed [ 435.462225][ T7756] do_initcalls+0x4b/0x8a [ 435.466550][ T7756] kernel_init_freeable+0x401/0x5ab [ 435.471737][ T7756] kernel_init+0x19/0x1b0 [ 435.476057][ T7756] page_owner free stack trace missing [ 435.481417][ T7756] [ 435.483726][ T7756] Memory state around the buggy address: [ 435.489396][ T7756] ffff888147b26700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 435.497443][ T7756] ffff888147b26780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 435.505488][ T7756] >ffff888147b26800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.513544][ T7756] ^ [ 435.518393][ T7756] ffff888147b26880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.526440][ T7756] ffff888147b26900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 435.534513][ T7756] ================================================================== [ 435.543800][ T7756] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 435.551040][ T7756] CPU: 1 PID: 7756 Comm: syz.2.888 Not tainted syzkaller #0 [ 435.558349][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.568397][ T7756] Call Trace: [ 435.571675][ T7756] [ 435.574606][ T7756] dump_stack_lvl+0x188/0x24e [ 435.579291][ T7756] ? memcpy+0x3c/0x60 [ 435.583264][ T7756] ? show_regs_print_info+0x12/0x12 [ 435.588460][ T7756] ? load_image+0x410/0x410 [ 435.592964][ T7756] panic+0x2d3/0x710 [ 435.596852][ T7756] ? bpf_jit_dump+0xd0/0xd0 [ 435.601347][ T7756] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 435.607317][ T7756] ? _raw_spin_unlock+0x40/0x40 [ 435.612158][ T7756] check_panic_on_warn+0x80/0xa0 [ 435.617167][ T7756] ? dvb_device_open+0xc5/0x360 [ 435.622017][ T7756] end_report+0x66/0x110 [ 435.626255][ T7756] kasan_report+0x118/0x140 [ 435.630753][ T7756] ? dvb_device_open+0xc5/0x360 [ 435.635599][ T7756] dvb_device_open+0xc5/0x360 [ 435.640268][ T7756] chrdev_open+0x585/0x5f0 [ 435.644679][ T7756] ? cd_forget+0x160/0x160 [ 435.649090][ T7756] ? fsnotify_perm+0x39b/0x550 [ 435.653843][ T7756] ? cd_forget+0x160/0x160 [ 435.658251][ T7756] do_dentry_open+0x7dd/0x10b0 [ 435.663012][ T7756] path_openat+0x2674/0x2f10 [ 435.667596][ T7756] ? verify_lock_unused+0x140/0x140 [ 435.672785][ T7756] ? do_sys_openat2+0xdd/0x4f0 [ 435.677545][ T7756] ? do_filp_open+0x420/0x420 [ 435.682219][ T7756] do_filp_open+0x1ee/0x420 [ 435.686724][ T7756] ? vfs_tmpfile+0x470/0x470 [ 435.691309][ T7756] ? _raw_spin_unlock+0x24/0x40 [ 435.696149][ T7756] ? alloc_fd+0x590/0x640 [ 435.700471][ T7756] do_sys_openat2+0x14b/0x4f0 [ 435.705138][ T7756] ? do_sys_open+0xe0/0xe0 [ 435.709545][ T7756] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.715519][ T7756] ? lock_chain_count+0x20/0x20 [ 435.720362][ T7756] __x64_sys_openat+0x135/0x160 [ 435.725216][ T7756] do_syscall_64+0x4c/0xa0 [ 435.729647][ T7756] ? clear_bhb_loop+0x60/0xb0 [ 435.734338][ T7756] ? clear_bhb_loop+0x60/0xb0 [ 435.739019][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.744913][ T7756] RIP: 0033:0x7fa34f35e90e [ 435.749328][ T7756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.768929][ T7756] RSP: 002b:00007fa350244b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.777334][ T7756] RAX: ffffffffffffffda RBX: 00007fa3502456c0 RCX: 00007fa34f35e90e [ 435.785299][ T7756] RDX: 0000000000000801 RSI: 00007fa350244c00 RDI: ffffffffffffff9c [ 435.793267][ T7756] RBP: 00007fa350244c00 R08: 0000000000000000 R09: 0000000000000000 [ 435.801231][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 435.809190][ T7756] R13: 00007fa34f626038 R14: 00007fa34f625fa0 R15: 00007ffd81a27638 [ 435.817167][ T7756] [ 435.820437][ T7756] Kernel Offset: disabled [ 435.824751][ T7756] Rebooting in 86400 seconds..