last executing test programs: 2m55.650227176s ago: executing program 0 (id=659): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x64000}], 0x1, 0x7c00, 0x0, 0x3) lseek(r0, 0x2, 0x3) 2m54.310708988s ago: executing program 0 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000003c0)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x43, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x9, 0x4}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa1}, @val={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0xd8b, 0x1, 0x0, 0x1ca, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x9, 0x8}}, @void}}]}, 0x60}}, 0x40080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m54.128872343s ago: executing program 0 (id=670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="bad0a5b32a79", 0x6, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x46a, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 2m53.912299998s ago: executing program 0 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m53.80990231s ago: executing program 0 (id=675): r0 = socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x204202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_usb_connect$midi(0x0, 0x3b, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x1, 0x18, 0x38, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x5, 0x1, [{0x9, 0xb0}], 0x5}], [{{0x9, 0x5, 0x8c, 0x2, 0x20, 0x6d, 0xf7, 0x80, {0x5, 0x25, 0x1, 0x1, "05"}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2m53.352853561s ago: executing program 0 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c62) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10, 0xeeef0000, 0x4, r2, 0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m52.97309806s ago: executing program 32 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c62) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10, 0xeeef0000, 0x4, r2, 0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m54.362582793s ago: executing program 1 (id=1046): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x37, 0x38, 0x39, 0x67, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) write$FUSE_BMAP(r0, &(0x7f00000025c0)={0x2, 0xffffffffffffffda, 0x0, {0xfdffffbffffffff9}}, 0x18) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 1m53.256572679s ago: executing program 1 (id=1049): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@multicast2, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x100, 0x20}, {0x81000, 0x800009, 0x40000000009, 0xfffbffff, 0x100000000, 0x80000000, 0x200000003, 0x9}, {0x5}, 0x5, 0x6e6bb1, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@broadcast, 0x3503, 0x4, 0x8, 0x0, 0x9075, 0xf2, 0x2}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m52.717642942s ago: executing program 1 (id=1051): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x21be, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x44040044) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/131, 0x83}, 0x8}], 0x1, 0x40002142, 0x0) 1m52.539790647s ago: executing program 1 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m52.40293953s ago: executing program 1 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) shutdown(r0, 0x1) 1m51.932679191s ago: executing program 1 (id=1058): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1m51.040979272s ago: executing program 33 (id=1058): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1m32.303923011s ago: executing program 4 (id=1157): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f00002dd000/0x3000)=nil, 0x3000, 0x1000000d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x1, 0x7eac4, 0x3d3b4e}) 1m32.229447333s ago: executing program 4 (id=1158): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r2, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e23, 0xd, @remote, 0x4}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b9, 0xc, 0xd, 0x4, 0xfff, 0x0, 0x4, 0x4]}}, 0x5c) 1m32.120117825s ago: executing program 4 (id=1159): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 1m32.022848018s ago: executing program 4 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x802, 0x1a8) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket$pppoe(0x18, 0x1, 0x0) 1m31.660968946s ago: executing program 4 (id=1162): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m31.347312243s ago: executing program 4 (id=1167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 1m26.459496131s ago: executing program 5 (id=1217): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}, 0x1, 0x0, 0x0, 0x8058}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 1m25.514168523s ago: executing program 5 (id=1222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x4042) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 1m25.384659366s ago: executing program 5 (id=1223): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c69dacbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebb4fff, 0xdd2, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x1, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0x2, 0x3, 0x404, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000) 1m25.168707702s ago: executing program 5 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m24.921112697s ago: executing program 5 (id=1225): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1m24.472580748s ago: executing program 5 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1m23.799039324s ago: executing program 34 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1m16.255092345s ago: executing program 35 (id=1167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 5.665215964s ago: executing program 7 (id=1571): r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) 4.031821393s ago: executing program 7 (id=1578): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 3.799818159s ago: executing program 7 (id=1580): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x802, 0x1a8) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) fanotify_init(0x8, 0x2) 3.249899892s ago: executing program 2 (id=1582): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x1200}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2.852703501s ago: executing program 7 (id=1584): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) lseek(r2, 0x3, 0x0) 2.684748145s ago: executing program 7 (id=1585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.316783114s ago: executing program 6 (id=1587): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) 1.945799223s ago: executing program 6 (id=1589): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) 1.64913623s ago: executing program 6 (id=1590): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1000001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) setrlimit(0xf, 0x0) 1.572686192s ago: executing program 3 (id=1591): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 1.420890326s ago: executing program 6 (id=1592): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000900), &(0x7f0000000040)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 1.320296688s ago: executing program 3 (id=1593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)='v', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 1.058403524s ago: executing program 2 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.010146445s ago: executing program 3 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 744.480012ms ago: executing program 2 (id=1596): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x30000, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) 671.880304ms ago: executing program 3 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 585.857576ms ago: executing program 2 (id=1598): unshare(0x28000600) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) unshare(0x8000280) openat(r1, &(0x7f0000000100)='./file1\x00', 0x189042, 0x177) 417.801099ms ago: executing program 3 (id=1599): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002540)=[{{0xfffffffffffffffe, 0x0, 0x0}, 0x7}], 0x1, 0x10121, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 417.00323ms ago: executing program 2 (id=1600): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xd, &(0x7f0000000280)={0x8, 0x8, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008ca) 408.03463ms ago: executing program 6 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setregid(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x14, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x5) 196.557205ms ago: executing program 7 (id=1602): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 188.766335ms ago: executing program 2 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 132.069216ms ago: executing program 6 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000180)=[{r0, 0x4c0}, {0xffffffffffffffff, 0x1058}, {0xffffffffffffffff, 0x8024}, {r0, 0x123}, {0xffffffffffffffff, 0x208}, {r0, 0xa380}, {r1}, {0xffffffffffffffff, 0x310}, {r0, 0x2080}], 0x9, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) 0s ago: executing program 3 (id=1605): unshare(0x20000400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x4}, 0x10) kernel console output (not intermixed with test programs): -executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f187359e159 code=0x0 [ 190.686890][ T23] usb 4-1: USB disconnect, device number 10 [ 190.732157][ T23] usblp0: removed [ 191.043825][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'. [ 191.809117][ C1] sched: RT throttling activated [ 191.822657][ T7907] futex_wake_op: syz.2.765 tries to shift op by 144; fix this program [ 192.036979][ T7894] loop3: detected capacity change from 0 to 131072 [ 192.052642][ T7894] F2FS-fs (loop3): invalid crc value [ 192.116715][ T7894] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.192781][ T7894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 193.291186][ T23] IPVS: starting estimator thread 0... [ 193.428045][ T7951] IPVS: using max 20 ests per chain, 48000 per kthread [ 193.914100][ T7967] loop2: detected capacity change from 0 to 256 [ 193.993195][ T7967] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 194.535004][ T7980] loop1: detected capacity change from 0 to 1024 [ 194.566868][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.579368][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.377250][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 195.574870][ T7986] loop3: detected capacity change from 0 to 32768 [ 195.659732][ T7986] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 195.822281][ T7986] XFS (loop3): Ending clean mount [ 196.154878][ T5772] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 196.423246][ T8023] FAULT_INJECTION: forcing a failure. [ 196.423246][ T8023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.465204][ T8023] CPU: 0 PID: 8023 Comm: syz.1.794 Not tainted syzkaller #0 [ 196.472598][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.482714][ T8023] Call Trace: [ 196.486033][ T8023] [ 196.489003][ T8023] dump_stack_lvl+0x18c/0x250 [ 196.493768][ T8023] ? show_regs_print_info+0x20/0x20 [ 196.499043][ T8023] ? load_image+0x420/0x420 [ 196.503605][ T8023] ? __lock_acquire+0x7d80/0x7d80 [ 196.508700][ T8023] should_fail_ex+0x394/0x4c0 [ 196.513442][ T8023] prepare_alloc_pages+0x1e1/0x5b0 [ 196.518638][ T8023] __alloc_pages+0x134/0x460 [ 196.523283][ T8023] ? zone_statistics+0x170/0x170 [ 196.528278][ T8023] ? alloc_pages+0x4e1/0x740 [ 196.532909][ T8023] ? do_raw_spin_unlock+0x121/0x230 [ 196.538169][ T8023] __get_free_pages+0xc/0x30 [ 196.542813][ T8023] kasan_populate_vmalloc_pte+0x35/0x100 [ 196.548518][ T8023] __apply_to_page_range+0x860/0xdd0 [ 196.553868][ T8023] ? kasan_populate_vmalloc+0x70/0x70 [ 196.559307][ T8023] ? apply_to_page_range+0x50/0x50 [ 196.564484][ T8023] ? do_raw_spin_unlock+0x121/0x230 [ 196.569746][ T8023] alloc_vmap_area+0x1d26/0x1e50 [ 196.574765][ T8023] ? vm_map_ram+0xcf0/0xcf0 [ 196.579327][ T8023] ? rcu_is_watching+0x15/0xb0 [ 196.584167][ T8023] __get_vm_area_node+0x162/0x370 [ 196.589262][ T8023] __vmalloc_node_range+0x36f/0x1320 [ 196.594610][ T8023] ? sock_hash_alloc+0x25e/0x4e0 [ 196.599652][ T8023] ? free_vm_area+0x50/0x50 [ 196.604216][ T8023] ? bpf_map_area_alloc+0x5e/0x110 [ 196.609395][ T8023] ? rcu_is_watching+0x15/0xb0 [ 196.614226][ T8023] ? bpf_map_area_alloc+0x5e/0x110 [ 196.619415][ T8023] bpf_map_area_alloc+0xf1/0x110 [ 196.624441][ T8023] ? sock_hash_alloc+0x25e/0x4e0 [ 196.629441][ T8023] sock_hash_alloc+0x25e/0x4e0 [ 196.634270][ T8023] map_create+0x877/0x12f0 [ 196.638751][ T8023] __sys_bpf+0x651/0x890 [ 196.643046][ T8023] ? bpf_link_show_fdinfo+0x390/0x390 [ 196.648496][ T8023] ? lock_chain_count+0x20/0x20 [ 196.653429][ T8023] __x64_sys_bpf+0x7c/0x90 [ 196.657917][ T8023] do_syscall_64+0x55/0xb0 [ 196.662411][ T8023] ? clear_bhb_loop+0x40/0x90 [ 196.667146][ T8023] ? clear_bhb_loop+0x40/0x90 [ 196.671879][ T8023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.677828][ T8023] RIP: 0033:0x7f551d59e159 [ 196.682289][ T8023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.701952][ T8023] RSP: 002b:00007f551e386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.710428][ T8023] RAX: ffffffffffffffda RBX: 00007f551d825fa0 RCX: 00007f551d59e159 [ 196.718451][ T8023] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 196.726485][ T8023] RBP: 00007f551d63503b R08: 0000000000000000 R09: 0000000000000000 [ 196.734499][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.742518][ T8023] R13: 00007f551d826038 R14: 00007f551d825fa0 R15: 00007ffce7544ce8 [ 196.750559][ T8023] [ 196.756103][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bfa3800: rx timeout, send abort [ 197.197172][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bfa2400: rx timeout, send abort [ 197.231756][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 197.308927][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bfa3800: abort rx timeout. Force session deactivation [ 197.647395][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 197.654731][ T5818] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 197.705988][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bfa2400: abort rx timeout. Force session deactivation [ 197.865315][ T5818] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.879554][ T5818] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.909302][ T5818] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.923754][ T5818] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.959856][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.148963][ T28] audit: type=1326 audit(1788984797.930:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.2.799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc78199e159 code=0x0 [ 198.226310][ T8039] loop2: detected capacity change from 0 to 7 [ 198.230730][ T5818] usb 5-1: GET_CAPABILITIES returned 0 [ 198.241790][ T5818] usbtmc 5-1:16.0: can't read capabilities [ 198.263115][ T8039] Dev loop2: unable to read RDB block 7 [ 198.278976][ T8039] loop2: AHDI p1 p2 p3 [ 198.287870][ T8039] loop2: partition table partially beyond EOD, truncated [ 198.302794][ T8039] loop2: p1 start 1601398130 is beyond EOD, truncated [ 198.313505][ T8039] loop2: p2 start 1702059890 is beyond EOD, truncated [ 198.460953][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 198.470975][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 198.488388][ T5777] usb 5-1: USB disconnect, device number 2 [ 198.709772][ T8041] loop1: detected capacity change from 0 to 32768 [ 198.751623][ T8041] JBD2: Ignoring recovery information on journal [ 198.803678][ T8041] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 199.193989][ T8041] syz.1.800 (8041) used greatest stack depth: 18520 bytes left [ 199.260065][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 199.658709][ T8061] team0: Device veth1_macvtap failed to register rx_handler [ 199.914964][ T8067] ip_tables: iptables: counters copy to user failed while replacing table [ 200.399298][ T5817] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 200.570950][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 200.599045][ T8089] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 200.614003][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.657068][ T5817] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.693764][ T5817] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.722083][ T5817] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 200.746469][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.796741][ T8091] FAULT_INJECTION: forcing a failure. [ 200.796741][ T8091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.817490][ T8091] CPU: 0 PID: 8091 Comm: syz.1.814 Not tainted syzkaller #0 [ 200.824885][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.834984][ T8091] Call Trace: [ 200.838336][ T8091] [ 200.841343][ T8091] dump_stack_lvl+0x18c/0x250 [ 200.846116][ T8091] ? show_regs_print_info+0x20/0x20 [ 200.851381][ T8091] ? load_image+0x420/0x420 [ 200.855958][ T8091] ? __might_fault+0xaa/0x120 [ 200.860687][ T8091] ? __lock_acquire+0x7d80/0x7d80 [ 200.865763][ T8091] ? __virt_addr_valid+0x10c/0x380 [ 200.870944][ T8091] should_fail_ex+0x394/0x4c0 [ 200.875683][ T8091] _copy_to_user+0x2f/0xa0 [ 200.880152][ T8091] bpf_verifier_vlog+0x4e6/0x840 [ 200.885168][ T8091] __btf_verifier_log+0xe3/0x140 [ 200.890168][ T8091] ? btf_check_sec_info+0x350/0x350 [ 200.895439][ T8091] btf_verifier_log_vsi+0x23c/0x3d0 [ 200.900705][ T8091] ? sort_r+0x17f5/0x1810 [ 200.905083][ T8091] ? btf_datasec_show+0x970/0x970 [ 200.910179][ T8091] btf_datasec_check_meta+0x97f/0xb50 [ 200.915623][ T8091] btf_check_all_metas+0x371/0xaf0 [ 200.920790][ T8091] btf_parse_type_sec+0xfc/0x1960 [ 200.925864][ T8091] ? btf_check_sec_info+0x350/0x350 [ 200.931123][ T8091] ? __virt_addr_valid+0x10c/0x380 [ 200.936313][ T8091] ? btf_verifier_log+0x1a0/0x1a0 [ 200.941416][ T8091] ? btf_parse_hdr+0x545/0x700 [ 200.946241][ T8091] ? btf_parse_str_sec+0x20d/0x2a0 [ 200.951428][ T8091] btf_new_fd+0x440/0x9e0 [ 200.955830][ T8091] ? bpf_btf_show_fdinfo+0x80/0x80 [ 200.961009][ T8091] ? capable+0x88/0xe0 [ 200.965140][ T8091] __sys_bpf+0x670/0x890 [ 200.969432][ T8091] ? bpf_link_show_fdinfo+0x390/0x390 [ 200.974880][ T8091] ? lock_chain_count+0x20/0x20 [ 200.979827][ T8091] __x64_sys_bpf+0x7c/0x90 [ 200.984300][ T8091] do_syscall_64+0x55/0xb0 [ 200.988775][ T8091] ? clear_bhb_loop+0x40/0x90 [ 200.993512][ T8091] ? clear_bhb_loop+0x40/0x90 [ 200.998245][ T8091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.004199][ T8091] RIP: 0033:0x7f551d59e159 [ 201.008662][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.028322][ T8091] RSP: 002b:00007f551e386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.036785][ T8091] RAX: ffffffffffffffda RBX: 00007f551d825fa0 RCX: 00007f551d59e159 [ 201.044893][ T8091] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 201.052912][ T8091] RBP: 00007f551d63503b R08: 0000000000000000 R09: 0000000000000000 [ 201.060930][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.068954][ T8091] R13: 00007f551d826038 R14: 00007f551d825fa0 R15: 00007ffce7544ce8 [ 201.077006][ T8091] [ 201.282271][ T5817] dvb_ttusb_budget: ttusb_init_controller: error [ 201.291956][ T5817] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 201.469447][ T5817] DVB: Unable to find symbol stv0299_attach() [ 201.578651][ T5817] DVB: Unable to find symbol tda8083_attach() [ 201.591464][ T5817] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 201.676008][ T8098] dvb_ttusb_budget: cmd xter failed, receive error -90 [ 201.774380][ T4555] Bluetooth: hci4: Frame reassembly failed (-84) [ 201.877175][ T5818] usb 3-1: USB disconnect, device number 14 [ 202.342686][ T8107] loop4: detected capacity change from 0 to 4096 [ 202.360099][ T8107] EXT4-fs: Ignoring removed nobh option [ 202.365917][ T8107] EXT4-fs: Ignoring removed bh option [ 202.377368][ T8107] EXT4-fs (loop4): Test dummy encryption mode enabled [ 202.408458][ T8107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.567076][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 202.594854][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.821'. [ 202.658157][ T7584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.726476][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 202.744102][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.821'. [ 202.892953][ T8120] loop4: detected capacity change from 0 to 128 [ 202.905291][ T8120] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.932910][ T8120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 202.950062][ T8120] System zones: 1-3, 19-19, 35-36 [ 202.965696][ T8120] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 202.979007][ T8120] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.042783][ T8120] syz.4.824 (pid 8120) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 203.111667][ T7584] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.809430][ T5818] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 203.820281][ T8143] loop4: detected capacity change from 0 to 1024 [ 203.831712][ T8141] loop1: detected capacity change from 0 to 512 [ 203.840740][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 203.841166][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 204.019284][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 204.056168][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.087244][ T5818] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 204.104719][ T5818] usb 3-1: can't read configurations, error -71 [ 204.319710][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.756979][ T28] audit: type=1400 audit(1788984804.540:97): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8167 comm="syz.1.842" name="unknown" offset=16 [ 205.129433][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 205.344415][ T8190] loop1: detected capacity change from 0 to 1024 [ 205.351202][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.374915][ T8190] EXT4-fs: Ignoring removed orlov option [ 205.389405][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.415664][ T8190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.457545][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.504670][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.539218][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.580117][ T23] usb 4-1: config 0 descriptor?? [ 206.017664][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.053667][ T23] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 206.090378][ T23] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 206.309377][ T8214] all: renamed from bridge_slave_0 (while UP) [ 206.545765][ T8221] loop1: detected capacity change from 0 to 128 [ 206.587418][ T8221] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 206.613919][ T23] usb 4-1: USB disconnect, device number 11 [ 206.845368][ T60] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 207.295344][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 208.270108][ T8281] loop1: detected capacity change from 0 to 512 [ 208.330668][ T8281] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 208.349389][ T8281] FAT-fs (loop1): Filesystem has been set read-only [ 208.522793][ T8289] loop3: detected capacity change from 0 to 1024 [ 208.555132][ T8289] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.570974][ T8291] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.874'. [ 208.638390][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.889888][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.373633][ T8319] gadgetfs: bound to dummy_udc driver [ 210.202267][ T8350] loop4: detected capacity change from 0 to 16 [ 210.256508][ T8350] erofs: (device loop4): mounted with root inode @ nid 36. [ 210.879396][ T8368] netlink: 'syz.3.896': attribute type 11 has an invalid length. [ 211.839338][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.865688][ T8396] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 211.959247][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.191047][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.201523][ T23] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 212.211047][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.229936][ T23] as10x_usb: device has been detected [ 212.236106][ T23] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 212.311243][ T23] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 212.341954][ T5777] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 212.510370][ T23] as10x_usb: error during firmware upload part1 [ 212.531814][ T23] Registered device Abilis Systems DVB-Titan [ 212.541515][ T8412] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.588135][ T5777] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 212.609285][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.628246][ T8415] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.691114][ T5777] usb 3-1: config 0 descriptor?? [ 212.713810][ T5777] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 212.918914][ T8424] Invalid ELF header len 3 [ 213.146777][ T5777] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 213.621865][ T5818] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.765624][ T5777] gspca_cpia1: usb_control_msg 05, error -71 [ 213.784463][ T5777] cpia1 3-1:0.0: unexpected systemstate: 00 [ 213.809482][ T5777] usb 3-1: USB disconnect, device number 17 [ 213.829261][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 213.856938][ T5818] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.889657][ T5818] usb 2-1: config 0 has no interface number 0 [ 213.906669][ T5818] usb 2-1: config 0 interface 12 has no altsetting 0 [ 213.930579][ T5818] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 213.959232][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.970586][ T5818] usb 2-1: Product: syz [ 213.974839][ T5818] usb 2-1: Manufacturer: syz [ 213.988997][ T5818] usb 2-1: SerialNumber: syz [ 214.009831][ T5818] usb 2-1: config 0 descriptor?? [ 214.274151][ T5777] usb 5-1: USB disconnect, device number 3 [ 214.337312][ T5777] Unregistered device Abilis Systems DVB-Titan [ 214.353091][ T5777] as10x_usb: device has been disconnected [ 214.564521][ T8459] input: syz1 as /devices/virtual/input/input22 [ 215.296599][ T5818] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 215.310861][ T5818] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 215.325031][ T5818] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 215.350604][ T5818] f81534: probe of 2-1:0.12 failed with error -71 [ 215.383521][ T5818] usb 2-1: USB disconnect, device number 11 [ 215.445538][ T8483] gadgetfs: bound to dummy_udc driver [ 215.698665][ T8489] Bluetooth: ISO socket layer initialized [ 215.819313][ T5817] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.011006][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 216.027549][ T5817] usb 4-1: too many endpoints for config 0 interface 0 altsetting 13: 130, using maximum allowed: 30 [ 216.054448][ T5817] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 123, changing to 10 [ 216.086610][ T5817] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 216.119620][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.132215][ T5817] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 216.153665][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.212631][ T5817] usb 4-1: config 0 descriptor?? [ 216.668391][ T5817] cypress 0003:04B4:07B1.000C: item fetching failed at offset 0/3 [ 216.693177][ T8491] loop2: detected capacity change from 0 to 40427 [ 216.698839][ T5817] cypress 0003:04B4:07B1.000C: parse failed [ 216.705918][ T5817] cypress: probe of 0003:04B4:07B1.000C failed with error -22 [ 216.725239][ T8491] F2FS-fs (loop2): invalid crc value [ 216.745509][ T8491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 216.927322][ T8491] F2FS-fs (loop2): Start checkpoint disabled! [ 216.975147][ T5777] usb 4-1: USB disconnect, device number 12 [ 217.024601][ T8491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 217.293966][ T8499] loop1: detected capacity change from 0 to 32768 [ 217.336982][ T8499] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 217.356652][ T8499] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.398410][ T4555] kworker/u4:9: attempt to access beyond end of device [ 217.398410][ T4555] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 217.428315][ T4555] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 217.443058][ T4555] kworker/u4:9: attempt to access beyond end of device [ 217.443058][ T4555] loop2: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 217.471843][ T4555] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 217.661810][ T8499] XFS (loop1): Ending clean mount [ 217.729264][ T8499] XFS (loop1): Quotacheck needed: Please wait. [ 217.866748][ T8499] XFS (loop1): Quotacheck: Done. [ 218.202391][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.876899][ T8538] loop4: detected capacity change from 0 to 64 [ 219.769458][ T5818] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 219.865736][ T1088] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.991131][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.013714][ T5818] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.034608][ T5818] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.053450][ T5818] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 220.064313][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.512906][ T5818] dvb_ttusb_budget: ttusb_init_controller: error [ 220.524360][ T5818] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 220.653927][ T5818] DVB: Unable to find symbol stv0299_attach() [ 220.786982][ T5818] DVB: Unable to find symbol tda8083_attach() [ 220.793570][ T5818] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 220.991781][ T8578] dvb_ttusb_budget: cmd xter failed, receive error -90 [ 221.209549][ T5841] usb 5-1: USB disconnect, device number 4 [ 221.420699][ T28] audit: type=1326 audit(1788984821.220:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.3.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbec439e159 code=0x0 [ 221.639393][ T5816] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 221.831964][ T5816] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.849430][ T5816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.859859][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 221.867998][ T5816] usb 3-1: Product: syz [ 221.872819][ T5816] usb 3-1: Manufacturer: syz [ 221.877469][ T5816] usb 3-1: SerialNumber: syz [ 221.919808][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 221.927594][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.039271][ T5818] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 222.094988][ T5816] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.221899][ T5818] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 222.232304][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.242045][ T5818] usb 5-1: config 1 has no interface number 0 [ 222.248337][ T5818] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.259902][ T5818] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 222.272636][ T5818] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 222.282206][ T5818] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 56968, setting to 64 [ 222.293671][ T5818] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.311925][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.329274][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.348702][ T5818] usb 5-1: Product: syz [ 222.358544][ T5818] usb 5-1: Manufacturer: syz [ 222.363675][ T5818] usb 5-1: SerialNumber: syz [ 222.385452][ T8598] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 222.395262][ C1] usblp0: nonzero write bulk status received: -71 [ 222.397337][ T5841] usb 3-1: USB disconnect, device number 18 [ 222.428728][ T5841] usblp0: removed [ 222.617143][ T8598] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 222.833069][ T8598] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.263846][ T8598] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.303997][ T5818] cdc_ncm 5-1:1.1: bind() failure [ 223.516499][ T5841] usb 5-1: USB disconnect, device number 5 [ 224.159564][ T5818] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.349871][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 224.383093][ T5818] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 224.401775][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.426638][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.437460][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.448166][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.462902][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.474126][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.524628][ T28] audit: type=1326 audit(1788984824.320:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.4.987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f187359e159 code=0x0 [ 224.718347][ T5818] usb 2-1: usb_control_msg returned -32 [ 224.731269][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 225.545690][ T8660] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.995'. [ 226.079481][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.281937][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.301487][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.329204][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.356978][ T8671] loop3: detected capacity change from 0 to 32768 [ 226.368264][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.392235][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.403216][ T8671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1000 (8671) [ 226.422373][ T23] usb 3-1: Product: syz [ 226.426608][ T23] usb 3-1: Manufacturer: syz [ 226.435076][ T23] usb 3-1: SerialNumber: syz [ 226.467629][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 226.485657][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 226.502274][ T8671] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.513739][ T8671] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 226.523100][ T8671] BTRFS info (device loop3): setting nodatacow, compression disabled [ 226.534895][ T8671] BTRFS info (device loop3): enabling auto defrag [ 226.543275][ T8671] BTRFS info (device loop3): max_inline at 0 [ 226.551624][ T8671] BTRFS info (device loop3): using free space tree [ 226.559378][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 226.676914][ T8671] BTRFS info (device loop3): auto enabling async discard [ 226.707015][ T23] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 226.964322][ T5817] usb 2-1: USB disconnect, device number 12 [ 227.032826][ T8698] loop4: detected capacity change from 0 to 128 [ 227.300251][ T5841] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 227.339351][ T5841] usb 3-1: device reset changed ep0 maxpacket size! [ 227.383274][ T5841] usb 3-1: USB disconnect, device number 19 [ 227.408364][ T5841] usblp1: removed [ 227.611229][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.789296][ T5841] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 227.914078][ T8705] loop1: detected capacity change from 0 to 32768 [ 227.985371][ T8705] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 228.009283][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 228.039180][ T5841] usb 3-1: config 0 has no interfaces? [ 228.053986][ T8705] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.075614][ T5841] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 228.139215][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.162681][ T8705] XFS (loop1): Ending clean mount [ 228.169826][ T5841] usb 3-1: Product: syz [ 228.174069][ T5841] usb 3-1: Manufacturer: syz [ 228.178711][ T5841] usb 3-1: SerialNumber: syz [ 228.213797][ T8705] XFS (loop1): Quotacheck needed: Please wait. [ 228.227593][ T5841] usb 3-1: config 0 descriptor?? [ 228.344122][ T8705] XFS (loop1): Quotacheck: Done. [ 228.477323][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.554726][ T5819] usb 3-1: USB disconnect, device number 20 [ 228.643366][ T8707] loop4: detected capacity change from 0 to 32768 [ 228.704143][ T8707] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 228.734689][ T8722] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 228.741771][ T8707] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.995212][ T8734] loop1: detected capacity change from 0 to 512 [ 229.008914][ T8707] XFS (loop4): Ending clean mount [ 229.033289][ T8707] XFS (loop4): Quotacheck needed: Please wait. [ 229.041537][ T8734] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 229.105461][ T8734] EXT4-fs (loop1): invalid journal inode [ 229.129448][ T8707] XFS (loop4): Quotacheck: Done. [ 229.135934][ T8734] EXT4-fs (loop1): can't get journal size [ 229.161744][ T8734] EXT4-fs (loop1): 1 truncate cleaned up [ 229.192707][ T28] audit: type=1800 audit(1788984828.990:100): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1009" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 229.224353][ T8734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.426813][ T7584] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.437410][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.661657][ T8748] loop1: detected capacity change from 0 to 512 [ 230.288626][ T8773] loop2: detected capacity change from 0 to 16 [ 230.307796][ T8773] erofs: (device loop2): mounted with root inode @ nid 36. [ 230.699358][ T5819] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.901630][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.912925][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.925748][ T5819] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 230.936486][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.097381][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 231.385341][ T5819] wacom 0003:056A:033B.000D: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 231.417538][ T5819] wacom 0003:056A:033B.000D: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 231.454144][ T5819] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.000D/input/input23 [ 231.717285][ T23] usb 4-1: USB disconnect, device number 13 [ 232.709241][ T5777] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 232.901866][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.913542][ T5777] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 232.922746][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.940590][ T5777] as10x_usb: device has been detected [ 232.947719][ T5777] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 232.969605][ T5777] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 232.982408][ T5777] as10x_usb: error during firmware upload part1 [ 232.989587][ T5777] Registered device Abilis Systems DVB-Titan [ 233.019674][ T8764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.060291][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.290921][ T23] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 233.309779][ T23] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 233.336146][ T23] usb 4-1: config 0 has no interface number 0 [ 233.351604][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 233.361055][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.371352][ T23] usb 4-1: Product: syz [ 233.375620][ T23] usb 4-1: Manufacturer: syz [ 233.381069][ T23] usb 4-1: SerialNumber: syz [ 233.399982][ T23] usb 4-1: config 0 descriptor?? [ 233.791925][ T8823] loop1: detected capacity change from 0 to 32768 [ 233.805589][ T8823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1046 (8823) [ 233.825327][ T23] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 233.844126][ T8823] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.856391][ T23] usb 4-1: No valid video chain found. [ 233.863086][ T8823] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 233.873250][ T8823] BTRFS info (device loop1): setting nodatacow, compression disabled [ 233.881978][ T8823] BTRFS info (device loop1): enabling auto defrag [ 233.888743][ T8823] BTRFS info (device loop1): max_inline at 0 [ 233.896206][ T8823] BTRFS info (device loop1): using free space tree [ 233.995240][ T8823] BTRFS info (device loop1): auto enabling async discard [ 234.082714][ T5819] usb 4-1: USB disconnect, device number 14 [ 234.342772][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.893257][ T23] usb 3-1: USB disconnect, device number 21 [ 234.982792][ T23] Unregistered device Abilis Systems DVB-Titan [ 235.000666][ T23] as10x_usb: device has been disconnected [ 235.383362][ T5818] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.599261][ T5818] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 235.632601][ T5818] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 235.669620][ T5818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.691907][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.711003][ T5818] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.729211][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.747640][ T5818] usb 4-1: Product: syz [ 235.757754][ T5818] usb 4-1: Manufacturer: syz [ 235.767915][ T5818] usb 4-1: SerialNumber: syz [ 235.799759][ T5818] usb 4-1: config 0 descriptor?? [ 235.809337][ T8860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.839272][ T8865] loop4: detected capacity change from 0 to 32768 [ 235.851141][ T5818] usb 4-1: selecting invalid altsetting 0 [ 235.867144][ T8865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1056 (8865) [ 235.885433][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.945072][ T8865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.989795][ T8865] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 236.008874][ T8865] BTRFS info (device loop4): setting nodatacow, compression disabled [ 236.023845][ T8865] BTRFS info (device loop4): enabling auto defrag [ 236.064271][ T8865] BTRFS info (device loop4): max_inline at 0 [ 236.087101][ T8865] BTRFS info (device loop4): using free space tree [ 236.123352][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.164054][ T8860] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 236.268979][ T5818] usb 4-1: USB disconnect, device number 15 [ 236.269011][ C0] usb 4-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 236.327968][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.384416][ T8865] BTRFS info (device loop4): auto enabling async discard [ 236.627648][ T8887] loop2: detected capacity change from 0 to 128 [ 237.012324][ T7584] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.479954][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.493606][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.502239][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.551672][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.564785][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.572553][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.629998][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.676137][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.690939][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.706983][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.734238][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.745580][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.989365][ T5777] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 238.189777][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 238.202025][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.260633][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.316825][ T5777] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.357777][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.432226][ T5777] usb 4-1: config 0 descriptor?? [ 238.481013][ T5777] hub 4-1:0.0: USB hub found [ 238.694867][ T5777] hub 4-1:0.0: 1 port detected [ 238.747581][ T8899] chnl_net:caif_netlink_parms(): no params data found [ 239.045395][ T8922] loop2: detected capacity change from 0 to 8 [ 239.102661][ T5777] usb 4-1: USB disconnect, device number 16 [ 239.185723][ T8922] SQUASHFS error: Failed to read block 0x4de: -5 [ 239.203829][ T8922] SQUASHFS error: Failed to read block 0x4de: -5 [ 239.220125][ T28] audit: type=1800 audit(1788984839.020:101): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1066" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 239.282281][ T12] hsr_slave_0: left promiscuous mode [ 239.299013][ T12] hsr_slave_1: left promiscuous mode [ 239.306941][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.321548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.332175][ T12] bridge_slave_1: left allmulticast mode [ 239.337874][ T12] bridge_slave_1: left promiscuous mode [ 239.347420][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.368155][ T12] bridge_slave_0: left allmulticast mode [ 239.379933][ T12] bridge_slave_0: left promiscuous mode [ 239.390131][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.509961][ T12] veth0_macvtap: left promiscuous mode [ 239.521214][ T12] veth1_vlan: left promiscuous mode [ 239.530029][ T12] veth0_vlan: left promiscuous mode [ 239.839929][ T5084] Bluetooth: hci1: command tx timeout [ 240.946191][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.061073][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.134463][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.196416][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.919440][ T5084] Bluetooth: hci1: command tx timeout [ 242.145403][ T12] bond0 (unregistering): Released all slaves [ 242.395379][ T8944] veth1_to_bond: entered promiscuous mode [ 242.411291][ T8945] veth1_to_bond: entered allmulticast mode [ 242.437821][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 242.683917][ T8947] bond0: (slave bond_slave_1): Releasing backup interface [ 242.818254][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.838375][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.856333][ T8899] bridge_slave_0: entered allmulticast mode [ 242.872736][ T8899] bridge_slave_0: entered promiscuous mode [ 242.934390][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.979540][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.986921][ T8899] bridge_slave_1: entered allmulticast mode [ 243.022581][ T8899] bridge_slave_1: entered promiscuous mode [ 243.166255][ T8899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.219596][ T8899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.343373][ T8899] team0: Port device team_slave_0 added [ 243.401845][ T8899] team0: Port device team_slave_1 added [ 243.603432][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.623969][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.709130][ T8899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.733034][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.740121][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.766126][ T8899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.010314][ T5789] Bluetooth: hci1: command tx timeout [ 244.046703][ T8899] hsr_slave_0: entered promiscuous mode [ 244.092416][ T8990] loop2: detected capacity change from 0 to 256 [ 244.114615][ T8899] hsr_slave_1: entered promiscuous mode [ 244.122627][ T8899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.137617][ T8899] Cannot create hsr debugfs directory [ 244.308056][ T12] IPVS: stop unused estimator thread 0... [ 244.437386][ T8996] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1086'. [ 244.898288][ T8899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.941090][ T8899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.956217][ T8899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.985674][ T8899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 245.326199][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.383747][ T8899] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.433523][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.440762][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.520965][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.528205][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.798792][ T9035] loop3: detected capacity change from 0 to 1024 [ 246.079327][ T5789] Bluetooth: hci1: command tx timeout [ 246.408525][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.936709][ T9074] loop2: detected capacity change from 0 to 512 [ 246.983863][ T9074] EXT4-fs (loop2): orphan cleanup on readonly fs [ 247.011993][ T9074] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.1107: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 247.091132][ T9074] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.1107: Bad quota inode: 4, type: 1 [ 247.155280][ T9074] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.219014][ T9074] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 247.253087][ T9074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.376899][ T8899] veth0_vlan: entered promiscuous mode [ 247.398389][ T8899] veth1_vlan: entered promiscuous mode [ 247.448718][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.537750][ T8899] veth0_macvtap: entered promiscuous mode [ 247.563684][ T8899] veth1_macvtap: entered promiscuous mode [ 247.607453][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.639171][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.661951][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.683139][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.694928][ T9095] loop4: detected capacity change from 0 to 128 [ 247.709843][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.729625][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.763694][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.795456][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.820493][ T9095] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.867590][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.899569][ T9095] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.918724][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.937109][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.947426][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.958304][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.983788][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.017687][ T8899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.052656][ T8899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.068590][ T8899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.077960][ T8899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.123960][ T7584] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.290692][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.298597][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.411384][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.459224][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.719525][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 248.937425][ T9119] loop2: detected capacity change from 0 to 256 [ 248.980660][ T9119] exfat: Deprecated parameter 'utf8' [ 249.024142][ T9119] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 249.775344][ T9135] loop4: detected capacity change from 0 to 8 [ 249.960984][ T9135] SQUASHFS error: Failed to read block 0x4de: -5 [ 250.024757][ T9135] SQUASHFS error: Failed to read block 0x4de: -5 [ 250.086630][ T28] audit: type=1800 audit(1788984849.880:102): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1120" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 250.107052][ T9116] loop3: detected capacity change from 0 to 32768 [ 250.247459][ T9116] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.363563][ T9116] XFS (loop3): Ending clean mount [ 250.878532][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.989480][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 251.031913][ T9172] loop4: detected capacity change from 0 to 128 [ 251.082760][ T9172] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 251.199948][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 251.225647][ T23] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 251.236594][ T23] usb 6-1: config 0 has no interface number 0 [ 251.275796][ T23] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.333522][ T23] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.386267][ T23] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 251.437892][ T23] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 251.460221][ T23] usb 6-1: Product: syz [ 251.464548][ T23] usb 6-1: SerialNumber: syz [ 251.498361][ T23] usb 6-1: config 0 descriptor?? [ 251.511585][ T23] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 251.534331][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input26 [ 251.772332][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 252.555885][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.559043][ T5816] usb 6-1: USB disconnect, device number 2 [ 252.562905][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 252.611537][ T5816] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 252.781281][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880272e1c00: rx timeout, send abort [ 252.790402][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880272e1c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.009325][ T970] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 254.066962][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880272e0c00: rx timeout, send abort [ 254.075568][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880272e0c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.232719][ T970] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 254.253113][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.290018][ T970] usb 4-1: config 0 descriptor?? [ 255.142009][ T9271] loop2: detected capacity change from 0 to 256 [ 255.182507][ T9271] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 255.349066][ T970] usb 4-1: Cannot set autoneg [ 255.358808][ T970] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 255.384419][ T970] usb 4-1: USB disconnect, device number 17 [ 255.404249][ T9277] bridge0: entered allmulticast mode [ 255.588111][ T9281] FAULT_INJECTION: forcing a failure. [ 255.588111][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 255.601778][ T9281] CPU: 1 PID: 9281 Comm: syz.4.1160 Not tainted syzkaller #0 [ 255.609219][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.619314][ T9281] Call Trace: [ 255.622633][ T9281] [ 255.625609][ T9281] dump_stack_lvl+0x18c/0x250 [ 255.630359][ T9281] ? show_regs_print_info+0x20/0x20 [ 255.635619][ T9281] ? load_image+0x420/0x420 [ 255.640185][ T9281] ? __might_sleep+0xe0/0xe0 [ 255.644861][ T9281] ? __lock_acquire+0x7d80/0x7d80 [ 255.649948][ T9281] should_fail_ex+0x394/0x4c0 [ 255.654696][ T9281] should_failslab+0x9/0x20 [ 255.659262][ T9281] slab_pre_alloc_hook+0x59/0x300 [ 255.664350][ T9281] ? sk_prot_alloc+0xe7/0x210 [ 255.669108][ T9281] ? sk_prot_alloc+0xe7/0x210 [ 255.673845][ T9281] __kmem_cache_alloc_node+0x53/0x250 [ 255.679284][ T9281] ? sk_prot_alloc+0xe7/0x210 [ 255.684010][ T9281] __kmalloc+0xa7/0x240 [ 255.688222][ T9281] sk_prot_alloc+0xe7/0x210 [ 255.692782][ T9281] ? sk_alloc+0x24/0x350 [ 255.697080][ T9281] sk_alloc+0x3a/0x350 [ 255.701200][ T9281] pppoe_create+0x32/0x2a0 [ 255.705681][ T9281] pppox_create+0x12b/0x1a0 [ 255.710249][ T9281] __sock_create+0x49e/0x940 [ 255.714894][ T9281] __sys_socket+0xd7/0x1b0 [ 255.719355][ T9281] __x64_sys_socket+0x7a/0x90 [ 255.724082][ T9281] do_syscall_64+0x55/0xb0 [ 255.728551][ T9281] ? clear_bhb_loop+0x40/0x90 [ 255.733279][ T9281] ? clear_bhb_loop+0x40/0x90 [ 255.738006][ T9281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.743949][ T9281] RIP: 0033:0x7f187359e159 [ 255.748420][ T9281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.768120][ T9281] RSP: 002b:00007f18744ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.776588][ T9281] RAX: ffffffffffffffda RBX: 00007f1873825fa0 RCX: 00007f187359e159 [ 255.784603][ T9281] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 255.792594][ T9281] RBP: 00007f187363503b R08: 0000000000000000 R09: 0000000000000000 [ 255.800616][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.808633][ T9281] R13: 00007f1873826038 R14: 00007f1873825fa0 R15: 00007ffdac4379c8 [ 255.816683][ T9281] [ 255.830640][ T9283] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.838719][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.846854][ T9283] IPv6: NLM_F_CREATE should be set when creating new route [ 255.864766][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.872091][ T9283] IPv6: NLM_F_CREATE should be set when creating new route [ 256.005468][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.012179][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.238807][ T9291] loop3: detected capacity change from 0 to 2048 [ 256.256303][ T9291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.572316][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1169'. [ 257.136355][ T28] audit: type=1800 audit(1788984856.930:103): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1165" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 257.547537][ T9323] loop3: detected capacity change from 0 to 128 [ 257.990060][ T9337] gadgetfs: bound to dummy_udc driver [ 258.778229][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 259.247993][ T9373] loop3: detected capacity change from 0 to 256 [ 259.711007][ T5841] smpboot: CPU 1 is now offline [ 261.265726][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1217'. [ 261.294700][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1217'. [ 261.493664][ T9422] netlink: 'syz.2.1219': attribute type 6 has an invalid length. [ 261.989274][ T5777] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.179974][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 262.201747][ T5777] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 262.220105][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.262312][ T5777] pvrusb2: Hardware description: Terratec Grabster AV400 [ 262.281327][ T5777] pvrusb2: ********** [ 262.293248][ T5777] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 262.333363][ T5777] pvrusb2: Important functionality might not be entirely working. [ 262.364261][ T5777] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 262.415823][ T5777] pvrusb2: ********** [ 262.468024][ T2324] pvrusb2: Invalid write control endpoint [ 262.712138][ T2324] pvrusb2: Invalid write control endpoint [ 262.744713][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 262.804028][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 262.848712][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 262.919349][ T2324] pvrusb2: Device being rendered inoperable [ 262.945521][ T9427] pvrusb2: Attempted to execute control transfer when device not ok [ 262.972990][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 262.988058][ T5777] usb 3-1: USB disconnect, device number 22 [ 263.024065][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 263.113394][ T2324] pvrusb2: Attached sub-driver cx25840 [ 263.161774][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 263.197774][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 263.234374][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.587530][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.801029][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.994110][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.061810][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.074737][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.083122][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.091002][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.098388][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.106010][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.569444][ T5817] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 265.795977][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.849161][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.918816][ T5817] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.964857][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.029317][ T5817] usb 4-1: SerialNumber: syz [ 266.271796][ T5817] usb 4-1: 0:2 : does not exist [ 266.375956][ T5817] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 266.431629][ T5817] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 266.525392][ T5817] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 266.599599][ T5817] usb 4-1: USB disconnect, device number 18 [ 267.004134][ T9468] chnl_net:caif_netlink_parms(): no params data found [ 267.100506][ T11] hsr_slave_0: left promiscuous mode [ 267.179670][ T11] hsr_slave_1: left promiscuous mode [ 267.196934][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.206810][ T5084] Bluetooth: hci1: command tx timeout [ 267.233531][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.283071][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.338126][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.390925][ T11] bridge_slave_1: left allmulticast mode [ 267.396705][ T11] bridge_slave_1: left promiscuous mode [ 267.455142][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.506399][ T11] bridge_slave_0: left allmulticast mode [ 267.526282][ T11] bridge_slave_0: left promiscuous mode [ 267.551347][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.708725][ T11] veth1_macvtap: left promiscuous mode [ 267.714631][ T5777] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 267.736121][ T11] veth0_macvtap: left promiscuous mode [ 267.752423][ T11] veth1_vlan: left promiscuous mode [ 267.768771][ T11] veth0_vlan: left promiscuous mode [ 267.921661][ T5777] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 267.968112][ T5777] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 268.030366][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.062594][ T5777] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 268.093797][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 268.114326][ T5777] usb 3-1: Product: syz [ 268.126034][ T5777] usb 3-1: Manufacturer: syz [ 268.144200][ T5777] usb 3-1: SerialNumber: syz [ 268.166783][ T5777] usb 3-1: config 0 descriptor?? [ 268.182230][ T9508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.206961][ T5777] usb 3-1: selecting invalid altsetting 0 [ 268.578320][ T5777] usb 3-1: USB disconnect, device number 23 [ 268.584693][ T9508] usb 3-1: cannot submit urb 0, error -19: no device [ 269.288610][ T5084] Bluetooth: hci1: command tx timeout [ 269.846871][ T9533] loop3: detected capacity change from 0 to 8192 [ 270.421795][ T11] team0 (unregistering): Port device team_slave_1 removed [ 270.624508][ T11] team0 (unregistering): Port device team_slave_0 removed [ 270.772096][ T9543] loop2: detected capacity change from 0 to 128 [ 270.823473][ T9543] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 270.869666][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.892515][ T9543] hpfs: filesystem error: improperly stopped [ 270.898588][ T9543] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 270.938404][ T9543] hpfs: You really don't want any checks? You are crazy... [ 270.973914][ T9543] hpfs: Code page index out of array [ 271.007512][ T9543] hpfs: code page support is disabled [ 271.017762][ T9543] hpfs: hpfs_map_4sectors(): unaligned read [ 271.039769][ T9543] hpfs: hpfs_map_4sectors(): unaligned read [ 271.045712][ T9543] hpfs: filesystem error: unable to find root dir [ 271.085556][ T9545] kvm: apic: phys broadcast and lowest prio [ 271.095060][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.370215][ T5084] Bluetooth: hci1: command tx timeout [ 271.494739][ T9548] FAULT_INJECTION: forcing a failure. [ 271.494739][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.553448][ T9548] CPU: 0 PID: 9548 Comm: syz.2.1254 Not tainted syzkaller #0 [ 271.560877][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.570939][ T9548] Call Trace: [ 271.574224][ T9548] [ 271.577170][ T9548] dump_stack_lvl+0x18c/0x250 [ 271.581874][ T9548] ? show_regs_print_info+0x20/0x20 [ 271.587113][ T9548] ? load_image+0x420/0x420 [ 271.591633][ T9548] ? __might_fault+0xaa/0x120 [ 271.596319][ T9548] ? __lock_acquire+0x7d80/0x7d80 [ 271.601369][ T9548] should_fail_ex+0x394/0x4c0 [ 271.606150][ T9548] _copy_from_iter+0x1cd/0x1290 [ 271.611016][ T9548] ? rcu_is_watching+0x15/0xb0 [ 271.615811][ T9548] ? copyout_mc+0x70/0x70 [ 271.620176][ T9548] ? __virt_addr_valid+0x10c/0x380 [ 271.625298][ T9548] ? __virt_addr_valid+0x10c/0x380 [ 271.630419][ T9548] ? __virt_addr_valid+0x10c/0x380 [ 271.635539][ T9548] ? __check_object_size+0x4fc/0xa40 [ 271.640840][ T9548] netlink_sendmsg+0x76b/0xbf0 [ 271.645618][ T9548] ? netlink_getsockopt+0x590/0x590 [ 271.650849][ T9548] ? apparmor_socket_sendmsg+0x8e/0x330 [ 271.656415][ T9548] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.661713][ T9548] ? security_socket_sendmsg+0x80/0xa0 [ 271.667182][ T9548] __sys_sendto+0x4a9/0x6b0 [ 271.671695][ T9548] ? __ia32_sys_getpeername+0x90/0x90 [ 271.677082][ T9548] ? __lock_acquire+0x7d80/0x7d80 [ 271.682126][ T9548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.688121][ T9548] ? lock_chain_count+0x20/0x20 [ 271.692985][ T9548] ? lock_chain_count+0x20/0x20 [ 271.697866][ T9548] __x64_sys_sendto+0xde/0xf0 [ 271.702555][ T9548] do_syscall_64+0x55/0xb0 [ 271.706977][ T9548] ? clear_bhb_loop+0x40/0x90 [ 271.711671][ T9548] ? clear_bhb_loop+0x40/0x90 [ 271.716355][ T9548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.722253][ T9548] RIP: 0033:0x7fc78195e98e [ 271.726672][ T9548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.746377][ T9548] RSP: 002b:00007fc78281ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 271.754801][ T9548] RAX: ffffffffffffffda RBX: 00007fc78281e6c0 RCX: 00007fc78195e98e [ 271.762779][ T9548] RDX: 0000000000000028 RSI: 00007fc78281d000 RDI: 0000000000000004 [ 271.770754][ T9548] RBP: 0000000000000000 R08: 00007fc78281cf04 R09: 000000000000000c [ 271.778728][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 271.786699][ T9548] R13: 00007fc78281cf58 R14: 00007fc78281d000 R15: 0000000000000000 [ 271.794686][ T9548] [ 271.797825][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.185259][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.222282][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.245444][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.295908][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.306578][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.317367][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.905270][ T11] bond0 (unregistering): Released all slaves [ 273.248932][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.303776][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.327973][ T9468] bridge_slave_0: entered allmulticast mode [ 273.361665][ T9468] bridge_slave_0: entered promiscuous mode [ 273.427993][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.439184][ T5789] Bluetooth: hci1: command tx timeout [ 273.463365][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.509600][ T9468] bridge_slave_1: entered allmulticast mode [ 273.516612][ T9468] bridge_slave_1: entered promiscuous mode [ 273.636002][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.680987][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.776074][ T9468] team0: Port device team_slave_0 added [ 273.834093][ T9468] team0: Port device team_slave_1 added [ 273.931389][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.938370][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.012038][ T9468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.044595][ T9549] chnl_net:caif_netlink_parms(): no params data found [ 274.065038][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.092357][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.141942][ T9468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.340889][ T9468] hsr_slave_0: entered promiscuous mode [ 274.347359][ T9468] hsr_slave_1: entered promiscuous mode [ 274.357686][ T9468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.365817][ T9468] Cannot create hsr debugfs directory [ 274.399586][ T5789] Bluetooth: hci4: command tx timeout [ 274.500173][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.507408][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.530174][ T9549] bridge_slave_0: entered allmulticast mode [ 274.540937][ T9549] bridge_slave_0: entered promiscuous mode [ 274.604599][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.624845][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.643845][ T9549] bridge_slave_1: entered allmulticast mode [ 274.660911][ T9549] bridge_slave_1: entered promiscuous mode [ 274.761120][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.815766][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.960247][ T9549] team0: Port device team_slave_0 added [ 274.992315][ T9549] team0: Port device team_slave_1 added [ 275.136423][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.154946][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.219963][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.273699][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.301398][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.379241][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.454782][ T9468] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.508591][ T9468] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.544860][ T9468] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.571294][ T9468] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.603019][ T9549] hsr_slave_0: entered promiscuous mode [ 275.620054][ T9549] hsr_slave_1: entered promiscuous mode [ 275.639622][ T9549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.647225][ T9549] Cannot create hsr debugfs directory [ 276.003488][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.076612][ T9468] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.163009][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.170280][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.272007][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.279282][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.347838][ T9549] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.410078][ T9549] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.443794][ T9549] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.475687][ T9549] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.489718][ T5789] Bluetooth: hci4: command tx timeout [ 276.752732][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.842835][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.898206][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.905391][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.998790][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.005983][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.118609][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.657357][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.012610][ T9468] veth0_vlan: entered promiscuous mode [ 278.058066][ T9468] veth1_vlan: entered promiscuous mode [ 278.183463][ T9468] veth0_macvtap: entered promiscuous mode [ 278.225121][ T9468] veth1_macvtap: entered promiscuous mode [ 278.308196][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.352539][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.385139][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.409340][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.436491][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.464526][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.510573][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.556129][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.573511][ T5789] Bluetooth: hci4: command tx timeout [ 278.600838][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.629198][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.659330][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.680520][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.715332][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.748571][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.811891][ T9468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.841021][ T9468] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.862651][ T9468] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.883955][ T9468] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.955367][ T9549] veth0_vlan: entered promiscuous mode [ 279.031285][ T9549] veth1_vlan: entered promiscuous mode [ 279.149067][ T9549] veth0_macvtap: entered promiscuous mode [ 279.215776][ T9549] veth1_macvtap: entered promiscuous mode [ 279.272852][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.297176][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.362530][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.394705][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.421783][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.454253][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.467368][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.482453][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.492604][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.505201][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.530672][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.553371][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.585859][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.597957][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.615335][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.628367][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.643523][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.653922][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.668068][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.678344][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.697359][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.718485][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.765552][ T9549] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.804920][ T9549] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.829574][ T9549] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.838330][ T9549] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.209854][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.273553][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.515962][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.586817][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.639380][ T5789] Bluetooth: hci4: command tx timeout [ 280.824373][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 281.065371][ T8] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 281.159276][ T8] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 281.247785][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 281.305501][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.358980][ T8] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.427677][ T8] usb 7-1: Product: syz [ 281.455763][ T8] usb 7-1: Manufacturer: syz [ 281.481525][ T8] usb 7-1: SerialNumber: syz [ 281.518391][ T8] usb 7-1: config 0 descriptor?? [ 281.574611][ T9669] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 281.623406][ T8] usb 7-1: selecting invalid altsetting 0 [ 282.199937][ C0] usb 7-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 282.208872][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 282.216849][ T8] usb 7-1: USB disconnect, device number 2 [ 282.230481][ T9669] usb 7-1: cannot submit urb 0, error -19: no device [ 283.836354][ T9734] loop7: detected capacity change from 0 to 512 [ 283.882155][ T9734] EXT4-fs: Ignoring removed oldalloc option [ 284.027758][ T9734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.296173][ T28] audit: type=1800 audit(1788984884.080:104): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1273" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 284.994199][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.321785][ T9809] loop2: detected capacity change from 0 to 512 [ 287.357934][ T9809] EXT4-fs: Ignoring removed oldalloc option [ 287.475872][ T9809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.567176][ T9809] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.836617][ T9817] loop6: detected capacity change from 0 to 64 [ 287.894560][ T9818] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1293: corrupted xattr block 32: invalid ea_ino [ 288.073486][ T9809] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1293: corrupted xattr block 32: invalid ea_ino [ 288.088633][ T28] audit: type=1800 audit(1788984887.870:105): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1293" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 288.344784][ T9809] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1293: corrupted xattr block 32: invalid ea_ino [ 290.420348][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.869724][ T9879] netlink: 'syz.7.1300': attribute type 10 has an invalid length. [ 291.081837][ T9879] team0: Port device dummy0 added [ 292.287842][ T9910] input: syz0 as /devices/virtual/input/input27 [ 292.900606][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 292.952799][ T9891] loop7: detected capacity change from 0 to 32768 [ 293.066343][ T9891] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop7 scanned by syz.7.1304 (9891) [ 293.264264][ T9891] BTRFS info (device loop7): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 293.338173][ T9891] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 293.442713][ T9891] BTRFS info (device loop7): using free space tree [ 293.599672][ T5777] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 293.656270][ T9891] BTRFS info (device loop7): enabling ssd optimizations [ 293.703986][ T9891] BTRFS info (device loop7): auto enabling async discard [ 293.835877][ T5777] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 293.883875][ T9957] loop6: detected capacity change from 0 to 512 [ 293.899325][ T5777] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 293.980453][ T5777] usb 3-1: config 4 has no interface number 0 [ 293.986627][ T5777] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.008171][ T9957] EXT4-fs (loop6): Test dummy encryption mode enabled [ 294.155209][ T9957] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.1320: inode has both inline data and extents flags [ 294.222720][ T5777] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 294.309186][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.318534][ T9957] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1320: couldn't read orphan inode 15 (err -117) [ 294.387116][ T5777] usb 3-1: Product: syz [ 294.436698][ T5777] usb 3-1: Manufacturer: syz [ 294.460910][ T9957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.498671][ T5777] usb 3-1: SerialNumber: syz [ 294.887001][ T9468] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.990428][ T9549] BTRFS info (device loop7): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 295.021854][ T5777] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 295.084925][ T5777] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 295.151832][ T5777] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 295.220565][ T5777] usb 3-1: media controller created [ 295.273124][ T9933] i2c i2c-1: Invalid block size returned: 70 [ 295.290378][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.642649][ T5777] DVB: Unable to find symbol dib7000p_attach() [ 295.675202][ T5777] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 295.849751][ T5841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 295.899618][ T5777] rc_core: IR keymap rc-dib0700-rc5 not found [ 295.934796][ T5777] Registered IR keymap rc-empty [ 295.958290][ T5777] dvb-usb: could not initialize remote control. [ 296.017229][ T5777] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 296.109349][ T5841] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.167944][ T5777] usb 3-1: USB disconnect, device number 24 [ 296.234100][ T5841] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 296.276112][ T5777] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 296.357635][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 296.435853][ T5841] usb 7-1: Product: syz [ 296.476416][ T5841] usb 7-1: Manufacturer: syz [ 296.510473][ T5841] usb 7-1: SerialNumber: syz [ 296.777668][ T5841] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 297.182096][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 297.717139][T10018] loop3: detected capacity change from 0 to 512 [ 297.825842][T10018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.466787][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.627685][ T5821] usb 7-1: USB disconnect, device number 3 [ 298.695206][ T5821] usblp0: removed [ 298.984643][T10046] loop3: detected capacity change from 0 to 128 [ 299.084397][T10046] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 299.224733][T10046] hpfs: filesystem error: improperly stopped [ 299.285014][T10046] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 299.358561][T10046] hpfs: You really don't want any checks? You are crazy... [ 299.430255][T10046] hpfs: Code page index out of array [ 299.479279][T10046] hpfs: code page support is disabled [ 299.525920][T10046] hpfs: hpfs_map_4sectors(): unaligned read [ 299.576225][T10046] hpfs: hpfs_map_4sectors(): unaligned read [ 299.635337][T10046] hpfs: filesystem error: unable to find root dir [ 300.305497][T10074] loop2: detected capacity change from 0 to 512 [ 300.448646][T10074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.805401][T10086] netlink: 'syz.7.1353': attribute type 4 has an invalid length. [ 300.980396][T10086] netlink: 'syz.7.1353': attribute type 4 has an invalid length. [ 300.995686][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.051660][T10116] netlink: 'syz.7.1362': attribute type 1 has an invalid length. [ 302.114149][T10116] erspan1: entered allmulticast mode [ 302.569907][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 302.792412][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.811544][ T8] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.856160][ T8] usb 3-1: string descriptor 0 read error: -22 [ 302.875632][ T8] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 302.889297][ T5841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.927860][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.099241][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 303.115500][ T5841] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 303.153390][ T5841] usb 7-1: config 0 has no interface number 0 [ 303.204869][ T5841] usb 7-1: config 0 interface 184 has no altsetting 0 [ 303.266399][ T5841] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.306175][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.350103][ T5841] usb 7-1: Product: syz [ 303.390655][ T5841] usb 7-1: Manufacturer: syz [ 303.395333][ T5841] usb 7-1: SerialNumber: syz [ 303.448384][ T5841] usb 7-1: config 0 descriptor?? [ 303.500915][ T5841] smsc75xx v1.0.0 [ 304.484497][T10137] loop7: detected capacity change from 0 to 32768 [ 304.614501][T10137] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 304.747961][ T5841] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 304.817477][T10137] XFS (loop7): Ending clean mount [ 304.826440][ T5841] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 304.861487][T10137] XFS (loop7): Quotacheck needed: Please wait. [ 304.884455][T10161] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1371'. [ 304.908568][ T5841] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 304.991084][ T5841] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 305.059387][T10137] XFS (loop7): Quotacheck: Done. [ 305.076512][ T5841] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 305.152378][ T5841] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 305.259411][ T5841] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 305.331829][ T5841] usb 7-1: USB disconnect, device number 4 [ 305.505684][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 305.558262][ T9549] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 306.849225][ T5821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 307.079160][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 307.095966][ T5821] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.148598][ T5821] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.220832][ T5821] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.294563][ T5821] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 307.368202][ T5821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.419235][ T5821] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 307.481720][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.521587][ T5821] usb 7-1: config 0 descriptor?? [ 307.538776][T10191] loop7: detected capacity change from 0 to 512 [ 307.552795][T10170] loop3: detected capacity change from 0 to 32768 [ 307.597170][T10191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.679790][T10170] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.1374 (10170) [ 307.769036][T10191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.876955][T10170] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 307.889459][T10191] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.980240][T10170] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 308.062997][ T5821] logitech-djreceiver 0003:046D:C53A.000E: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 308.100108][T10170] BTRFS info (device loop3): using free space tree [ 308.293845][ T5821] usb 7-1: USB disconnect, device number 5 [ 308.398224][T10203] fido_id[10203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 308.444169][T10170] BTRFS info (device loop3): enabling ssd optimizations [ 308.460905][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.496860][T10170] BTRFS info (device loop3): auto enabling async discard [ 309.209777][T10122] usb 3-1: 1:1: usb_set_interface failed (-110) [ 309.266985][ T5772] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 309.280292][ T8] usb 3-1: USB disconnect, device number 25 [ 309.737540][T10230] input: syz0 as /devices/virtual/input/input29 [ 310.223301][T10236] loop6: detected capacity change from 0 to 4096 [ 310.409783][T10236] NILFS (loop6): invalid segment: Checksum error in segment payload [ 310.418451][T10236] NILFS (loop6): trying rollback from an earlier position [ 310.733866][T10236] NILFS (loop6): recovery complete [ 310.857981][T10245] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.618911][T10253] loop7: detected capacity change from 0 to 4096 [ 311.698290][T10253] EXT4-fs (loop7): Test dummy encryption mode enabled [ 311.786888][T10253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.543447][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.558193][T10250] loop2: detected capacity change from 0 to 32768 [ 312.615335][T10250] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.1394 (10250) [ 312.764990][T10250] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 312.869035][T10250] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 312.981113][T10250] BTRFS info (device loop2): using free space tree [ 313.049345][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 313.180179][T10250] BTRFS info (device loop2): enabling ssd optimizations [ 313.240109][T10250] BTRFS info (device loop2): auto enabling async discard [ 313.271489][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 313.321321][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25970, setting to 1024 [ 313.396645][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 313.493868][ T5821] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 313.571703][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.637221][T10277] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 313.693340][T10277] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 313.740194][ T5821] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 313.834744][ T5821] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 313.898107][ T5774] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 313.984518][ T5777] usb 7-1: USB disconnect, device number 6 [ 314.062452][ T5777] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 314.160237][ T5777] cyberjack 7-1:1.0: device disconnected [ 314.438304][ T6890] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop2 scanned by udevd (6890) [ 316.039289][ T5841] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 316.270488][ T5841] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 316.312021][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.382604][ T5841] usb 4-1: config 0 descriptor?? [ 316.422782][ T5841] cp210x 4-1:0.0: cp210x converter detected [ 316.518226][T10356] loop2: detected capacity change from 0 to 512 [ 316.601995][T10356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.689342][T10356] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.036035][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.095202][ T5841] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 317.166297][ T5841] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 317.253654][ T5841] usb 4-1: cp210x converter now attached to ttyUSB0 [ 317.333892][ T5841] usb 4-1: USB disconnect, device number 19 [ 317.404395][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 317.455714][T10371] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1429'. [ 317.479440][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.489497][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.526485][ T5841] cp210x 4-1:0.0: device disconnected [ 317.555259][T10371] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1429'. [ 317.791189][T10378] FAULT_INJECTION: forcing a failure. [ 317.791189][T10378] name failslab, interval 1, probability 0, space 0, times 0 [ 317.868739][T10378] CPU: 0 PID: 10378 Comm: syz.2.1431 Not tainted syzkaller #0 [ 317.876249][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.886323][T10378] Call Trace: [ 317.889613][T10378] [ 317.892554][T10378] dump_stack_lvl+0x18c/0x250 [ 317.897253][T10378] ? show_regs_print_info+0x20/0x20 [ 317.902471][T10378] ? load_image+0x420/0x420 [ 317.907016][T10378] ? __might_sleep+0xe0/0xe0 [ 317.911623][T10378] ? __lock_acquire+0x7d80/0x7d80 [ 317.916661][T10378] should_fail_ex+0x394/0x4c0 [ 317.921359][T10378] should_failslab+0x9/0x20 [ 317.925903][T10378] slab_pre_alloc_hook+0x59/0x300 [ 317.930949][T10378] kmem_cache_alloc+0x5a/0x2c0 [ 317.935735][T10378] ? ptlock_alloc+0x20/0x70 [ 317.940249][T10378] ptlock_alloc+0x20/0x70 [ 317.944588][T10378] pte_alloc_one+0xcc/0x540 [ 317.949105][T10378] ? pfn_modify_allowed+0x560/0x560 [ 317.954317][T10378] ? hugepage_vma_check+0x471/0x560 [ 317.959527][T10378] handle_mm_fault+0x2f72/0x4a50 [ 317.964487][T10378] ? handle_mm_fault+0xe6/0x4a50 [ 317.969468][T10378] ? numa_migrate_prep+0x350/0x350 [ 317.974612][T10378] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 317.979909][T10378] do_user_addr_fault+0x736/0x12d0 [ 317.985039][T10378] exc_page_fault+0x64/0x100 [ 317.989659][T10378] asm_exc_page_fault+0x26/0x30 [ 317.994547][T10378] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 318.000366][T10378] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 318.020070][T10378] RSP: 0018:ffffc9000b7bfab0 EFLAGS: 00050202 [ 318.026143][T10378] RAX: ffffffff8433cd01 RBX: 0000000000000028 RCX: 0000000000000028 [ 318.034123][T10378] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000b7bfb20 [ 318.042116][T10378] RBP: ffffc9000b7bfbf0 R08: ffffc9000b7bfb47 R09: 1ffff920016f7f68 [ 318.050094][T10378] R10: dffffc0000000000 R11: fffff520016f7f69 R12: 0000000000000028 [ 318.058074][T10378] R13: ffffc9000b7bfc40 R14: ffffc9000b7bfb20 R15: 0000000000000000 [ 318.066071][T10378] ? rcuref_put_slowpath+0x121/0x150 [ 318.071375][T10378] _copy_from_user+0x8b/0xe0 [ 318.075976][T10378] keyctl_pkey_params_get_2+0x120/0x4b0 [ 318.081532][T10378] ? keyctl_pkey_e_d_s+0x300/0x300 [ 318.086654][T10378] ? futex_wait+0x4a7/0x5c0 [ 318.091173][T10378] ? futex_setup_timer+0xc0/0xc0 [ 318.096141][T10378] keyctl_pkey_verify+0xc5/0x270 [ 318.101114][T10378] ? keyctl_pkey_params_get_2+0x4b0/0x4b0 [ 318.106870][T10378] __se_sys_keyctl+0x4bf/0xb50 [ 318.111664][T10378] ? __x64_sys_keyctl+0xc0/0xc0 [ 318.116535][T10378] ? do_futex+0x2ff/0x3e0 [ 318.120882][T10378] ? __ia32_sys_get_robust_list+0x110/0x110 [ 318.126814][T10378] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 318.132828][T10378] ? lock_chain_count+0x20/0x20 [ 318.137712][T10378] ? lockdep_hardirqs_on+0x98/0x150 [ 318.142934][T10378] ? __x64_sys_keyctl+0x20/0xc0 [ 318.147841][T10378] do_syscall_64+0x55/0xb0 [ 318.152281][T10378] ? clear_bhb_loop+0x40/0x90 [ 318.156976][T10378] ? clear_bhb_loop+0x40/0x90 [ 318.161678][T10378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.167608][T10378] RIP: 0033:0x7fc78199e159 [ 318.172038][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.191654][T10378] RSP: 002b:00007fc78281e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 318.200075][T10378] RAX: ffffffffffffffda RBX: 00007fc781c25fa0 RCX: 00007fc78199e159 [ 318.208050][T10378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001c [ 318.216026][T10378] RBP: 00007fc781a3503b R08: 0000000000000000 R09: 0000000000000000 [ 318.224176][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.232169][T10378] R13: 00007fc781c26038 R14: 00007fc781c25fa0 R15: 00007ffca85bc108 [ 318.240173][T10378] [ 318.401408][T10385] loop7: detected capacity change from 0 to 1024 [ 318.837986][T10396] input: syz0 as /devices/virtual/input/input30 [ 318.858276][T10385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 318.940051][T10385] ext4 filesystem being mounted at /48/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 319.051277][T10385] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 3: comm syz.7.1433: lblock 3 mapped to illegal pblock 3 (length 3) [ 319.229643][T10397] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 319.249180][T10385] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 319.320497][T10385] EXT4-fs (loop7): This should not happen!! Data will be lost [ 319.320497][T10385] [ 319.394678][T10404] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 8: comm syz.7.1433: lblock 8 mapped to illegal pblock 8 (length 8) [ 319.552995][T10404] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 319.632706][T10404] EXT4-fs (loop7): This should not happen!! Data will be lost [ 319.632706][T10404] [ 319.914380][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 321.031980][T10446] loop3: detected capacity change from 0 to 128 [ 321.113986][T10446] FAT-fs (loop3): bogus number of reserved sectors [ 321.192668][T10446] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 321.301595][T10446] FAT-fs (loop3): Can't find a valid FAT filesystem [ 322.071243][T10470] loop7: detected capacity change from 0 to 512 [ 322.153391][T10470] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 322.257147][T10470] EXT4-fs (loop7): 1 truncate cleaned up [ 322.276818][T10468] loop3: detected capacity change from 0 to 4096 [ 322.334857][T10470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.547934][T10481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.835190][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.673743][T10497] FAULT_INJECTION: forcing a failure. [ 323.673743][T10497] name failslab, interval 1, probability 0, space 0, times 0 [ 323.771701][T10497] CPU: 0 PID: 10497 Comm: syz.6.1470 Not tainted syzkaller #0 [ 323.779213][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.789284][T10497] Call Trace: [ 323.792573][T10497] [ 323.795523][T10497] dump_stack_lvl+0x18c/0x250 [ 323.800223][T10497] ? show_regs_print_info+0x20/0x20 [ 323.805434][T10497] ? load_image+0x420/0x420 [ 323.809952][T10497] should_fail_ex+0x394/0x4c0 [ 323.814650][T10497] should_failslab+0x9/0x20 [ 323.819182][T10497] slab_pre_alloc_hook+0x59/0x300 [ 323.824224][T10497] ? stack_depot_init+0x36/0xe0 [ 323.829103][T10497] ? __hw_addr_add_ex+0x1f4/0x700 [ 323.834162][T10497] __kmem_cache_alloc_node+0x53/0x250 [ 323.839556][T10497] ? __hw_addr_add_ex+0x1f4/0x700 [ 323.844600][T10497] kmalloc_trace+0x2a/0xe0 [ 323.849105][T10497] __hw_addr_add_ex+0x1f4/0x700 [ 323.853998][T10497] dev_addr_init+0x15b/0x240 [ 323.858615][T10497] ? dev_addr_flush+0x210/0x210 [ 323.863518][T10497] alloc_netdev_mqs+0x2d8/0x1040 [ 323.868521][T10497] ? tun_get_tx_ring+0xa0/0xa0 [ 323.873357][T10497] tun_set_iff+0x546/0xea0 [ 323.877815][T10497] __tun_chr_ioctl+0x7e0/0x2070 [ 323.882710][T10497] ? tun_flow_create+0x310/0x310 [ 323.887694][T10497] ? bpf_lsm_file_ioctl+0x9/0x10 [ 323.892663][T10497] ? security_file_ioctl+0x80/0xa0 [ 323.897790][T10497] ? tun_chr_poll+0x630/0x630 [ 323.902479][T10497] __se_sys_ioctl+0xfd/0x170 [ 323.907088][T10497] do_syscall_64+0x55/0xb0 [ 323.911516][T10497] ? clear_bhb_loop+0x40/0x90 [ 323.916210][T10497] ? clear_bhb_loop+0x40/0x90 [ 323.920904][T10497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.926808][T10497] RIP: 0033:0x7eff96b9e159 [ 323.931232][T10497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.950845][T10497] RSP: 002b:00007eff979f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.959269][T10497] RAX: ffffffffffffffda RBX: 00007eff96e25fa0 RCX: 00007eff96b9e159 [ 323.967248][T10497] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 323.975225][T10497] RBP: 00007eff96c3503b R08: 0000000000000000 R09: 0000000000000000 [ 323.983222][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.991199][T10497] R13: 00007eff96e26038 R14: 00007eff96e25fa0 R15: 00007fffa8b500a8 [ 323.999205][T10497] [ 324.132713][T10506] gadgetfs: bound to dummy_udc driver [ 324.472672][T10500] netlink: 'syz.7.1471': attribute type 12 has an invalid length. [ 324.483292][T10500] netlink: 'syz.7.1471': attribute type 29 has an invalid length. [ 324.508916][T10500] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1471'. [ 324.537428][T10500] netlink: 'syz.7.1471': attribute type 1 has an invalid length. [ 324.574705][T10500] netlink: 'syz.7.1471': attribute type 2 has an invalid length. [ 324.611254][T10500] netlink: 'syz.7.1471': attribute type 3 has an invalid length. [ 324.632310][T10500] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1471'. [ 325.288839][T10531] loop7: detected capacity change from 0 to 512 [ 325.362106][T10531] EXT4-fs: Ignoring removed nobh option [ 325.479950][T10531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.619974][T10531] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.782854][T10546] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.1477: corrupted inode contents [ 325.803631][T10546] EXT4-fs error (device loop7): ext4_dirty_inode:6144: inode #2: comm syz.7.1477: mark_inode_dirty error [ 325.825011][T10546] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.1477: corrupted inode contents [ 325.856489][T10546] EXT4-fs error (device loop7): __ext4_ext_dirty:208: inode #2: comm syz.7.1477: mark_inode_dirty error [ 325.927005][T10531] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.1477: corrupted inode contents [ 325.998627][T10547] loop2: detected capacity change from 0 to 2048 [ 326.011362][T10542] loop3: detected capacity change from 0 to 4096 [ 326.069544][T10547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.116650][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.197167][T10542] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 326.428612][T10542] ntfs3: Cannot use different iocharset when remounting! [ 328.457271][T10594] loop2: detected capacity change from 0 to 512 [ 328.567130][T10594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 328.662507][T10594] EXT4-fs (loop2): 1 truncate cleaned up [ 328.707210][T10594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.905699][T10594] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5960: inode #12: comm syz.2.1495: bad extra_isize 62 (inode size 256) [ 329.035723][T10594] EXT4-fs (loop2): Remounting filesystem read-only [ 329.222294][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.255549][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1499'. [ 331.873572][T10668] input: syz0 as /devices/virtual/input/input31 [ 332.150220][T10676] loop7: detected capacity change from 0 to 512 [ 332.308626][T10676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.399369][ T5821] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 332.444299][ T5841] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 332.568605][ T5841] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.624041][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.639941][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 332.693206][ T5821] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 332.732959][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.827675][ T5821] usb 3-1: Product: syz [ 332.862712][ T5821] usb 3-1: Manufacturer: syz [ 332.927136][ T5821] usb 3-1: SerialNumber: syz [ 332.977145][ T5821] usb 3-1: config 0 descriptor?? [ 333.036730][ T5821] usb 3-1: selecting invalid altsetting 1 [ 333.079330][ T5821] technisat-usb2: could not set alternate setting to 0 [ 333.249310][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 333.268932][ T5821] technisat-usb2: firmware version: 0.0 [ 333.292830][ T5821] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 333.462704][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.520062][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 333.565718][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.615204][ T9] usb 7-1: Product: syz [ 333.639665][ T9] usb 7-1: Manufacturer: syz [ 333.665196][ T9] usb 7-1: SerialNumber: syz [ 333.688429][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.748537][ T5821] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 333.801208][ T5821] usb 3-1: media controller created [ 333.836204][ T5821] technisat-usb2: i2c-error: out failed 53 = -22 [ 333.865942][ T5821] dvb-usb: MAC address reading failed. [ 333.888699][T10674] technisat-usb2: i2c-error: out failed 41 = -22 [ 334.092192][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.206420][ T9] snd-usb-6fire 7-1:1.0: can't set first interface. [ 334.263900][ T9] snd-usb-6fire: probe of 7-1:1.0 failed with error -5 [ 334.325978][ T9] usb 7-1: USB disconnect, device number 7 [ 334.526611][ T5821] DVB: Unable to find symbol stv090x_attach() [ 334.569341][ T5821] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 334.993345][ T5821] rc_core: IR keymap rc-technisat-usb2 not found [ 335.053009][ T5821] Registered IR keymap rc-empty [ 335.104837][ T5821] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 335.220289][T10719] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1530'. [ 335.241188][ T5821] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input32 [ 335.397966][ T5821] dvb-usb: schedule remote query interval to 100 msecs. [ 335.460614][ T5821] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 335.555410][ T5819] dvb-usb: error -71 while querying for an remote control event. [ 335.602508][ T5821] usb 3-1: USB disconnect, device number 26 [ 335.950136][ T5821] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 336.342210][ T28] audit: type=1326 audit(1788985192.136:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.3.1539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbec439e159 code=0x0 [ 337.184095][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 337.412739][T10767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'. [ 338.788665][T10796] loop2: detected capacity change from 0 to 4096 [ 338.934138][T10796] EXT4-fs (loop2): Test dummy encryption mode enabled [ 338.989878][T10796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.284007][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.569391][T10774] loop3: detected capacity change from 0 to 32768 [ 339.704613][T10774] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.068924][T10774] XFS (loop3): Ending clean mount [ 340.163249][T10774] XFS (loop3): Quotacheck needed: Please wait. [ 340.385668][T10774] XFS (loop3): Quotacheck: Done. [ 340.570870][ T5841] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 340.823328][T10837] loop6: detected capacity change from 0 to 40427 [ 340.850546][T10837] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 340.856992][T10837] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 340.879454][T10837] F2FS-fs (loop6): invalid crc value [ 340.980773][T10837] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 340.987887][T10837] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 341.027197][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.067734][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.103722][ T5841] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 341.215898][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.269028][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.277403][ T5841] usb 3-1: Product: syz [ 341.333065][ T9468] syz-executor: attempt to access beyond end of device [ 341.333065][ T9468] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 341.373796][ T5841] usb 3-1: Manufacturer: syz [ 341.404313][ T5841] usb 3-1: SerialNumber: syz [ 341.427534][ T5841] cdc_mbim 3-1:1.0: skipping garbage [ 341.448721][ T9468] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 341.635344][T10833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.282870][T10833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.329451][ T5841] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 342.530526][T10853] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 342.563063][ T5841] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 342.603428][ T5841] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 342.722654][ T5841] wwan wwan0: port wwan0mbim0 attached [ 342.865155][ T5841] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 36:2d:66:43:c0:0c [ 342.931094][ T5841] usb 3-1: USB disconnect, device number 27 [ 342.978558][ T5841] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 343.059175][ T5777] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 343.161712][ T5841] wwan wwan0: port wwan0mbim0 disconnected [ 343.282008][ T5777] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 343.341759][ T5777] usb 7-1: config 1 interface 0 has no altsetting 0 [ 343.415302][ T5777] usb 7-1: string descriptor 0 read error: -22 [ 343.443884][ T5777] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.487388][ T5777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.865963][T10873] FAULT_INJECTION: forcing a failure. [ 343.865963][T10873] name failslab, interval 1, probability 0, space 0, times 0 [ 343.910601][T10873] CPU: 0 PID: 10873 Comm: syz.7.1580 Not tainted syzkaller #0 [ 343.918112][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.928179][T10873] Call Trace: [ 343.931472][T10873] [ 343.934412][T10873] dump_stack_lvl+0x18c/0x250 [ 343.939108][T10873] ? show_regs_print_info+0x20/0x20 [ 343.944322][T10873] ? load_image+0x420/0x420 [ 343.948857][T10873] ? __might_sleep+0xe0/0xe0 [ 343.953467][T10873] ? __lock_acquire+0x7d80/0x7d80 [ 343.958505][T10873] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 343.964497][T10873] should_fail_ex+0x394/0x4c0 [ 343.969200][T10873] should_failslab+0x9/0x20 [ 343.973748][T10873] slab_pre_alloc_hook+0x59/0x300 [ 343.978794][T10873] kmem_cache_alloc_lru+0x4d/0x2b0 [ 343.983925][T10873] ? __d_alloc+0x31/0x710 [ 343.988281][T10873] __d_alloc+0x31/0x710 [ 343.992449][T10873] d_alloc_pseudo+0x1d/0x70 [ 343.996988][T10873] alloc_file_pseudo+0xe4/0x210 [ 344.001879][T10873] ? fput+0x1a0/0x1a0 [ 344.005880][T10873] ? _raw_spin_unlock+0x28/0x40 [ 344.010742][T10873] ? alloc_fd+0x590/0x640 [ 344.015097][T10873] anon_inode_getfd+0xca/0x1c0 [ 344.019887][T10873] __se_sys_fanotify_init+0x62a/0x750 [ 344.025282][T10873] do_syscall_64+0x55/0xb0 [ 344.029711][T10873] ? clear_bhb_loop+0x40/0x90 [ 344.034401][T10873] ? clear_bhb_loop+0x40/0x90 [ 344.039094][T10873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.045000][T10873] RIP: 0033:0x7f69d299e159 [ 344.049428][T10873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.069045][T10873] RSP: 002b:00007f69d378c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 344.077670][T10873] RAX: ffffffffffffffda RBX: 00007f69d2c25fa0 RCX: 00007f69d299e159 [ 344.085664][T10873] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008 [ 344.093661][T10873] RBP: 00007f69d2a3503b R08: 0000000000000000 R09: 0000000000000000 [ 344.101644][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.109626][T10873] R13: 00007f69d2c26038 R14: 00007f69d2c25fa0 R15: 00007ffff83951b8 [ 344.117642][T10873] [ 344.211145][ T5777] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 344.259790][ T5777] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0926:3333.0010/input/input33 [ 344.496764][ T5777] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 344.605076][ T5777] usb 7-1: USB disconnect, device number 8 [ 344.699285][ T5819] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 344.799586][T10879] fido_id[10879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 344.921077][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.975368][ T5819] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 345.033060][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.101891][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 345.121455][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 345.145864][ T5819] usb 3-1: Product: syz [ 345.157366][ T5819] usb 3-1: Manufacturer: syz [ 345.168580][ T5819] usb 3-1: SerialNumber: syz [ 345.263247][T10891] FAULT_INJECTION: forcing a failure. [ 345.263247][T10891] name failslab, interval 1, probability 0, space 0, times 0 [ 345.277935][T10891] CPU: 0 PID: 10891 Comm: syz.6.1587 Not tainted syzkaller #0 [ 345.285433][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.295496][T10891] Call Trace: [ 345.298805][T10891] [ 345.301745][T10891] dump_stack_lvl+0x18c/0x250 [ 345.306439][T10891] ? show_regs_print_info+0x20/0x20 [ 345.311649][T10891] ? load_image+0x420/0x420 [ 345.316174][T10891] ? __might_sleep+0xe0/0xe0 [ 345.320779][T10891] ? __lock_acquire+0x7d80/0x7d80 [ 345.325841][T10891] should_fail_ex+0x394/0x4c0 [ 345.330539][T10891] should_failslab+0x9/0x20 [ 345.335057][T10891] slab_pre_alloc_hook+0x59/0x300 [ 345.340112][T10891] ? ramfs_init_fs_context+0x4f/0xe0 [ 345.345419][T10891] __kmem_cache_alloc_node+0x53/0x250 [ 345.350844][T10891] ? ramfs_init_fs_context+0x4f/0xe0 [ 345.356138][T10891] kmalloc_trace+0x2a/0xe0 [ 345.360572][T10891] ramfs_init_fs_context+0x4f/0xe0 [ 345.365722][T10891] alloc_fs_context+0x618/0x7a0 [ 345.370601][T10891] __se_sys_fsopen+0xa0/0x2c0 [ 345.375299][T10891] do_syscall_64+0x55/0xb0 [ 345.379722][T10891] ? clear_bhb_loop+0x40/0x90 [ 345.384405][T10891] ? clear_bhb_loop+0x40/0x90 [ 345.389095][T10891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.394998][T10891] RIP: 0033:0x7eff96b9e159 [ 345.399425][T10891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.419039][T10891] RSP: 002b:00007eff979f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 345.427461][T10891] RAX: ffffffffffffffda RBX: 00007eff96e25fa0 RCX: 00007eff96b9e159 [ 345.435442][T10891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 345.443422][T10891] RBP: 00007eff96c3503b R08: 0000000000000000 R09: 0000000000000000 [ 345.451399][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.459396][T10891] R13: 00007eff96e26038 R14: 00007eff96e25fa0 R15: 00007fffa8b500a8 [ 345.467386][T10891] [ 345.479021][ T5841] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 345.521998][ T5819] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 345.699849][ T5841] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.744959][ T5841] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 345.790879][ T5841] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 345.824420][ T5777] usb 3-1: USB disconnect, device number 28 [ 345.848691][ T5841] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 345.884840][T10878] usblp0: removed [ 345.945387][ T5841] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 346.002945][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.035976][T10887] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 346.075357][T10887] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 346.117386][ T5841] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 346.161797][ T5841] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 346.213270][ T5841] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 346.261076][ T5841] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 346.305072][ T5841] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 346.346177][ T5841] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 346.383867][ T5841] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 346.669790][ T5841] usb 8-1: USB disconnect, device number 2 [ 346.721544][ T5841] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 346.793364][ T5841] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 346.865884][ T5841] keyspan 8-1:1.0: device disconnected [ 347.796904][T10928] [ 347.799278][T10928] ====================================================== [ 347.806299][T10928] WARNING: possible circular locking dependency detected [ 347.813353][T10928] syzkaller #0 Not tainted [ 347.817768][T10928] ------------------------------------------------------ [ 347.824782][T10928] syz.6.1604/10928 is trying to acquire lock: [ 347.830863][T10928] ffff88807e4120e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 347.840466][T10928] [ 347.840466][T10928] but task is already holding lock: [ 347.847830][T10928] ffff888148d25f08 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 347.857429][T10928] [ 347.857429][T10928] which lock already depends on the new lock. [ 347.857429][T10928] [ 347.867832][T10928] [ 347.867832][T10928] the existing dependency chain (in reverse order) is: [ 347.876845][T10928] [ 347.876845][T10928] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 347.885014][T10928] __mutex_lock+0x135/0xc80 [ 347.890050][T10928] bd_finish_claiming+0x229/0x3f0 [ 347.895620][T10928] blkdev_get_by_dev+0x469/0x610 [ 347.901085][T10928] bdev_open_by_dev+0x77/0x100 [ 347.906512][T10928] setup_bdev_super+0x59/0x660 [ 347.911909][T10928] mount_bdev+0x1ce/0x2c0 [ 347.916783][T10928] legacy_get_tree+0xea/0x180 [ 347.922012][T10928] vfs_get_tree+0x8c/0x280 [ 347.926962][T10928] do_new_mount+0x24a/0xa40 [ 347.931996][T10928] init_mount+0xde/0x130 [ 347.936766][T10928] do_mount_root+0x97/0x230 [ 347.941798][T10928] mount_root_generic+0x1a6/0x3e0 [ 347.947351][T10928] prepare_namespace+0xc2/0x100 [ 347.952729][T10928] kernel_init_freeable+0x41a/0x560 [ 347.958452][T10928] kernel_init+0x1d/0x1c0 [ 347.963309][T10928] ret_from_fork+0x48/0x80 [ 347.968255][T10928] ret_from_fork_asm+0x11/0x20 [ 347.973552][T10928] [ 347.973552][T10928] -> #3 (bdev_lock){+.+.}-{3:3}: [ 347.980691][T10928] __mutex_lock+0x135/0xc80 [ 347.985736][T10928] bd_prepare_to_claim+0x1d9/0x4a0 [ 347.991376][T10928] truncate_bdev_range+0x4e/0x260 [ 347.996927][T10928] blkdev_fallocate+0x428/0x6a0 [ 348.002301][T10928] vfs_fallocate+0x585/0x6f0 [ 348.007424][T10928] do_madvise+0x166b/0x3790 [ 348.012468][T10928] __x64_sys_madvise+0xa6/0xc0 [ 348.017767][T10928] do_syscall_64+0x55/0xb0 [ 348.022707][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.029146][T10928] [ 348.029146][T10928] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 348.037492][T10928] down_write+0x97/0x200 [ 348.042280][T10928] set_blocksize+0x247/0x4b0 [ 348.047391][T10928] sb_min_blocksize+0xbe/0x190 [ 348.052766][T10928] ext4_fill_super+0x6e7/0x6870 [ 348.058145][T10928] get_tree_bdev+0x3e5/0x520 [ 348.063259][T10928] vfs_get_tree+0x8c/0x280 [ 348.068198][T10928] do_new_mount+0x24a/0xa40 [ 348.073246][T10928] init_mount+0xde/0x130 [ 348.078013][T10928] do_mount_root+0x97/0x230 [ 348.083041][T10928] mount_root_generic+0x1a6/0x3e0 [ 348.088594][T10928] prepare_namespace+0xc2/0x100 [ 348.093970][T10928] kernel_init_freeable+0x41a/0x560 [ 348.099693][T10928] kernel_init+0x1d/0x1c0 [ 348.104561][T10928] ret_from_fork+0x48/0x80 [ 348.109509][T10928] ret_from_fork_asm+0x11/0x20 [ 348.114806][T10928] [ 348.114806][T10928] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 348.123503][T10928] down_write+0x97/0x200 [ 348.128274][T10928] set_blocksize+0x1ff/0x4b0 [ 348.133386][T10928] sb_min_blocksize+0xbe/0x190 [ 348.138668][T10928] ext4_fill_super+0x6e7/0x6870 [ 348.144045][T10928] get_tree_bdev+0x3e5/0x520 [ 348.149161][T10928] vfs_get_tree+0x8c/0x280 [ 348.154107][T10928] do_new_mount+0x24a/0xa40 [ 348.159127][T10928] init_mount+0xde/0x130 [ 348.163894][T10928] do_mount_root+0x97/0x230 [ 348.168939][T10928] mount_root_generic+0x1a6/0x3e0 [ 348.174486][T10928] prepare_namespace+0xc2/0x100 [ 348.179861][T10928] kernel_init_freeable+0x41a/0x560 [ 348.185585][T10928] kernel_init+0x1d/0x1c0 [ 348.190435][T10928] ret_from_fork+0x48/0x80 [ 348.195385][T10928] ret_from_fork_asm+0x11/0x20 [ 348.200676][T10928] [ 348.200676][T10928] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 348.208934][T10928] __lock_acquire+0x37ef/0x7d80 [ 348.214309][T10928] lock_acquire+0x19e/0x420 [ 348.219338][T10928] down_read+0x46/0x2e0 [ 348.224020][T10928] super_lock+0x189/0x390 [ 348.228872][T10928] fs_bdev_mark_dead+0xad/0x1f0 [ 348.234337][T10928] bdev_mark_dead+0x83/0x1a0 [ 348.239557][T10928] blk_report_disk_dead+0x21c/0x3e0 [ 348.245284][T10928] del_gendisk+0x2cb/0x8f0 [ 348.250258][T10928] sd_remove+0x8d/0x100 [ 348.254958][T10928] device_release_driver_internal+0x458/0x6f0 [ 348.261574][T10928] bus_remove_device+0x43b/0x520 [ 348.267063][T10928] device_del+0x51f/0x910 [ 348.271925][T10928] __scsi_remove_device+0x1a2/0x390 [ 348.277649][T10928] scsi_forget_host+0xd0/0x110 [ 348.282947][T10928] scsi_remove_host+0x1b3/0x730 [ 348.288322][T10928] virtscsi_remove+0x130/0x1a0 [ 348.293649][T10928] virtio_dev_remove+0x96/0x1a0 [ 348.299029][T10928] device_release_driver_internal+0x408/0x6f0 [ 348.305648][T10928] bus_remove_device+0x43b/0x520 [ 348.311122][T10928] device_del+0x51f/0x910 [ 348.315982][T10928] device_unregister+0x20/0xc0 [ 348.321275][T10928] unregister_virtio_device+0x37/0x60 [ 348.327173][T10928] virtio_pci_remove+0x7f/0xf0 [ 348.332479][T10928] pci_device_remove+0x97/0x230 [ 348.337858][T10928] device_release_driver_internal+0x408/0x6f0 [ 348.344470][T10928] pci_stop_bus_device+0x108/0x140 [ 348.350109][T10928] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 348.357138][T10928] remove_store+0xe6/0x150 [ 348.362087][T10928] kernfs_fop_write_iter+0x3a4/0x520 [ 348.367898][T10928] vfs_write+0x474/0x9a0 [ 348.372676][T10928] ksys_write+0x151/0x260 [ 348.377534][T10928] do_syscall_64+0x55/0xb0 [ 348.382494][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.388929][T10928] [ 348.388929][T10928] other info that might help us debug this: [ 348.388929][T10928] [ 348.399170][T10928] Chain exists of: [ 348.399170][T10928] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 348.399170][T10928] [ 348.412831][T10928] Possible unsafe locking scenario: [ 348.412831][T10928] [ 348.420295][T10928] CPU0 CPU1 [ 348.425662][T10928] ---- ---- [ 348.431027][T10928] lock(&bdev->bd_holder_lock); [ 348.435974][T10928] lock(bdev_lock); [ 348.442451][T10928] lock(&bdev->bd_holder_lock); [ 348.449910][T10928] rlock(&type->s_umount_key#31); [ 348.455036][T10928] [ 348.455036][T10928] *** DEADLOCK *** [ 348.455036][T10928] [ 348.463178][T10928] 9 locks held by syz.6.1604/10928: [ 348.468374][T10928] #0: ffff88802f159748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 348.477615][T10928] #1: ffff88802e344418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 348.486504][T10928] #2: ffff88805c2e7888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 348.496266][T10928] #3: ffffffff8d815fe8 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x12/0x30 [ 348.508387][T10928] #4: ffff888146a421f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 348.518940][T10928] #5: ffff88801abbc1b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 348.529515][T10928] #6: ffff888021a640e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 348.539444][T10928] #7: ffff888022afa3b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 348.550000][T10928] #8: ffff888148d25f08 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 348.560034][T10928] [ 348.560034][T10928] stack backtrace: [ 348.565922][T10928] CPU: 0 PID: 10928 Comm: syz.6.1604 Not tainted syzkaller #0 [ 348.573378][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.583455][T10928] Call Trace: [ 348.586742][T10928] [ 348.589679][T10928] dump_stack_lvl+0x18c/0x250 [ 348.594400][T10928] ? load_image+0x420/0x420 [ 348.598909][T10928] ? show_regs_print_info+0x20/0x20 [ 348.604129][T10928] ? print_circular_bug+0x12b/0x1a0 [ 348.609339][T10928] check_noncircular+0x2fc/0x400 [ 348.614291][T10928] ? print_deadlock_bug+0x5d0/0x5d0 [ 348.619501][T10928] ? lockdep_lock+0xf5/0x230 [ 348.624112][T10928] ? _find_first_zero_bit+0xd6/0x100 [ 348.629416][T10928] __lock_acquire+0x37ef/0x7d80 [ 348.634291][T10928] ? __lock_acquire+0x1262/0x7d80 [ 348.639327][T10928] ? verify_lock_unused+0x140/0x140 [ 348.644536][T10928] ? verify_lock_unused+0x140/0x140 [ 348.649746][T10928] ? find_lock_entries+0x120/0x1020 [ 348.654952][T10928] lock_acquire+0x19e/0x420 [ 348.659460][T10928] ? super_lock+0x189/0x390 [ 348.663990][T10928] ? __might_sleep+0xe0/0xe0 [ 348.668607][T10928] ? read_lock_is_recursive+0x20/0x20 [ 348.673988][T10928] ? __mutex_trylock_common+0x160/0x270 [ 348.679541][T10928] ? trace_raw_output_contention_end+0xd0/0xd0 [ 348.685719][T10928] ? mapping_try_invalidate+0x4bf/0x570 [ 348.691297][T10928] down_read+0x46/0x2e0 [ 348.695464][T10928] ? super_lock+0x189/0x390 [ 348.699973][T10928] super_lock+0x189/0x390 [ 348.704309][T10928] ? xa_find_after+0xaf/0x430 [ 348.709029][T10928] ? user_get_super+0x180/0x180 [ 348.713914][T10928] ? mutex_lock_nested+0x20/0x20 [ 348.718880][T10928] fs_bdev_mark_dead+0xad/0x1f0 [ 348.723754][T10928] ? super_s_dev_set+0xa0/0xa0 [ 348.728532][T10928] bdev_mark_dead+0x83/0x1a0 [ 348.733139][T10928] ? blk_report_disk_dead+0x88/0x3e0 [ 348.738445][T10928] blk_report_disk_dead+0x21c/0x3e0 [ 348.743662][T10928] ? __blk_mark_disk_dead+0x120/0x120 [ 348.749046][T10928] ? xa_find_after+0xaf/0x430 [ 348.753735][T10928] del_gendisk+0x2cb/0x8f0 [ 348.758169][T10928] ? blk_report_disk_dead+0x3e0/0x3e0 [ 348.763558][T10928] ? __pm_runtime_resume+0x129/0x170 [ 348.768860][T10928] sd_remove+0x8d/0x100 [ 348.773022][T10928] ? sd_probe+0x11c0/0x11c0 [ 348.777526][T10928] device_release_driver_internal+0x458/0x6f0 [ 348.783613][T10928] bus_remove_device+0x43b/0x520 [ 348.788590][T10928] ? bus_probe_device+0x260/0x260 [ 348.793625][T10928] ? up_write+0x1be/0x410 [ 348.797985][T10928] ? kernfs_remove_by_name_ns+0x117/0x150 [ 348.803723][T10928] device_del+0x51f/0x910 [ 348.808064][T10928] ? kill_device+0x160/0x160 [ 348.812665][T10928] ? kobject_put+0x421/0x450 [ 348.817272][T10928] __scsi_remove_device+0x1a2/0x390 [ 348.822477][T10928] scsi_forget_host+0xd0/0x110 [ 348.827255][T10928] scsi_remove_host+0x1b3/0x730 [ 348.832116][T10928] virtscsi_remove+0x130/0x1a0 [ 348.836894][T10928] virtio_dev_remove+0x96/0x1a0 [ 348.841755][T10928] ? virtio_dev_probe+0xae0/0xae0 [ 348.846789][T10928] device_release_driver_internal+0x408/0x6f0 [ 348.852891][T10928] bus_remove_device+0x43b/0x520 [ 348.857850][T10928] ? bus_probe_device+0x260/0x260 [ 348.862884][T10928] ? up_write+0x1be/0x410 [ 348.867221][T10928] ? kernfs_remove_by_name_ns+0x117/0x150 [ 348.872981][T10928] device_del+0x51f/0x910 [ 348.877336][T10928] ? kill_device+0x160/0x160 [ 348.881951][T10928] ? pci_device_is_present+0x175/0x240 [ 348.887441][T10928] ? pci_real_dma_dev+0x20/0x20 [ 348.892321][T10928] device_unregister+0x20/0xc0 [ 348.897096][T10928] unregister_virtio_device+0x37/0x60 [ 348.902477][T10928] virtio_pci_remove+0x7f/0xf0 [ 348.907255][T10928] pci_device_remove+0x97/0x230 [ 348.912116][T10928] ? pci_device_probe+0x8d0/0x8d0 [ 348.917147][T10928] device_release_driver_internal+0x408/0x6f0 [ 348.923247][T10928] pci_stop_bus_device+0x108/0x140 [ 348.928372][T10928] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 348.934884][T10928] remove_store+0xe6/0x150 [ 348.939314][T10928] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 348.945237][T10928] ? sysfs_kf_read+0x360/0x360 [ 348.950009][T10928] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 348.955919][T10928] ? sysfs_kf_read+0x360/0x360 [ 348.960684][T10928] kernfs_fop_write_iter+0x3a4/0x520 [ 348.965974][T10928] vfs_write+0x474/0x9a0 [ 348.970232][T10928] ? file_end_write+0x250/0x250 [ 348.975115][T10928] ? __fget_files+0x3fc/0x460 [ 348.979808][T10928] ? __fdget_pos+0x2a3/0x330 [ 348.984421][T10928] ? ksys_write+0x74/0x260 [ 348.988848][T10928] ksys_write+0x151/0x260 [ 348.993187][T10928] ? __ia32_sys_read+0x90/0x90 [ 348.997963][T10928] ? lockdep_hardirqs_on+0x98/0x150 [ 349.003177][T10928] do_syscall_64+0x55/0xb0 [ 349.007599][T10928] ? clear_bhb_loop+0x40/0x90 [ 349.012284][T10928] ? clear_bhb_loop+0x40/0x90 [ 349.016984][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.022897][T10928] RIP: 0033:0x7eff96b9e159 [ 349.027317][T10928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.046929][T10928] RSP: 002b:00007eff979f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.055373][T10928] RAX: ffffffffffffffda RBX: 00007eff96e25fa0 RCX: 00007eff96b9e159 [ 349.063352][T10928] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 349.071331][T10928] RBP: 00007eff96c3503b R08: 0000000000000000 R09: 0000000000000000 [ 349.079307][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.087281][T10928] R13: 00007eff96e26038 R14: 00007eff96e25fa0 R15: 00007fffa8b500a8 [ 349.095262][T10928] [ 349.152254][T10934] loop2: detected capacity change from 0 to 512 [ 349.457467][ T5101] device offline error, dev sda, sector 1052398 op 0x1:(WRITE) flags 0x9800 phys_seg 3 prio class 2 [ 349.499307][ T5101] Aborting journal on device sda1-8. [ 349.527362][ T10] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 349.541509][ T10] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 349.552313][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 349.565269][ T5101] JBD2: I/O error when updating journal superblock for sda1-8. [ 349.591979][ T10] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 349.604378][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 92198) [ 349.616159][ T10] Buffer I/O error on device sda1, logical block 92160 [ 349.624731][ T10] device offline error, dev sda, sector 745774 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 349.640767][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93221) [ 349.655012][ T10] Buffer I/O error on device sda1, logical block 93183 [ 349.663420][ T10] device offline error, dev sda, sector 749750 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 349.674058][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93718) [ 349.687342][ T10] Buffer I/O error on device sda1, logical block 93680 [ 349.694431][ T10] Buffer I/O error on device sda1, logical block 93681 [ 349.703644][ T10] Buffer I/O error on device sda1, logical block 93682 [ 349.710756][ T10] Buffer I/O error on device sda1, logical block 93683 [ 349.717689][ T10] Buffer I/O error on device sda1, logical block 93684 [ 349.726756][ T10] Buffer I/O error on device sda1, logical block 93685 [ 349.734114][ T10] Buffer I/O error on device sda1, logical block 93686 [ 349.745943][ T10] Buffer I/O error on device sda1, logical block 93687 [ 349.756505][ T10] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 349.768524][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 96294) [ 349.781798][ T10] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 349.792590][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 100390) [ 349.805840][ T10] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 349.817706][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 101413) [ 349.830744][ T10] device offline error, dev sda, sector 815214 op 0x1:(WRITE) flags 0x0 phys_seg 17 prio class 2 [ 349.841640][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 101901) [ 349.859961][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90157) [ 349.871801][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90161) [ 349.883489][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90172) [ 349.944572][T10928] EXT4-fs (sda1): shut down requested (2) [ 350.017134][T10928] sd 0:0:1:0: [sda] Synchronizing SCSI cache