last executing test programs: 7m49.335798895s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x2024800, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) 7m46.279397713s ago: executing program 0 (id=11): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) fchdir(r5) mount(0x0, 0x0, 0x0, 0x189, 0x0) syz_open_procfs(r4, 0x0) 7m41.517404594s ago: executing program 0 (id=16): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001100)={@local, 0x4, 0x2, 0x1, 0x8, 0x0, 0x8}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002e40), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f0000000040)={[{@oldalloc}]}, 0x3, 0x4d7, &(0x7f0000000540)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4, 0x10, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m40.966521871s ago: executing program 32 (id=16): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001100)={@local, 0x4, 0x2, 0x1, 0x8, 0x0, 0x8}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002e40), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f0000000040)={[{@oldalloc}]}, 0x3, 0x4d7, &(0x7f0000000540)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4, 0x10, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m33.66482065s ago: executing program 2 (id=662): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xfdfe, 0x3000000000000500}]) 2m27.754978756s ago: executing program 2 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setrlimit(0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getdents(r3, &(0x7f0000000f40)=""/243, 0xf3) 2m26.452220419s ago: executing program 2 (id=678): socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, 0x0, &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000f40)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x4}}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nostrict}, {@gid}, {@uid_forget}, {@partition}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc59, &(0x7f0000002940)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x21) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) 2m23.854167135s ago: executing program 2 (id=680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 2m21.734499928s ago: executing program 2 (id=682): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m20.486491628s ago: executing program 2 (id=689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 2m4.369972069s ago: executing program 33 (id=689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 35.683565512s ago: executing program 5 (id=870): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x2, @rand_addr=0x64010102}}, 0x0, 0x0, 0x100, 0x0, 0x32}, 0x9c) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@setlink={0x38, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x42402}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x2004c850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0\n\x00', 0x2) write(r2, &(0x7f0000000200)='5\n\x00', 0x2) 23.463314664s ago: executing program 5 (id=888): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) getdents(0xffffffffffffffff, 0x0, 0x3b) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000240), 0x3000010, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x9}}], [{@obj_type={'obj_type', 0x3d, '^'}}]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 20.561497455s ago: executing program 5 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\xe1\xc8Q\t\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x14b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 19.120880184s ago: executing program 1 (id=896): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x2, @rand_addr=0x64010102}}, 0x0, 0x0, 0x100, 0x0, 0x32}, 0x9c) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@setlink={0x38, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x42402}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x2004c850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0\n\x00', 0x2) write(r2, &(0x7f0000000200)='5\n\x00', 0x2) 15.173456696s ago: executing program 3 (id=902): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000340)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0x5483, &(0x7f0000000100)={0x0, 0x7628, 0x10, 0x3, 0xf3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x13, r3, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x3e, 0x0, 0x0) shutdown(r4, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)={r7}, &(0x7f0000000280)=0x8) futex(0x0, 0x207, 0x4, 0x0, 0x0, 0x1) 14.076196909s ago: executing program 5 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r3 = open(0x0, 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 14.012915202s ago: executing program 3 (id=904): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\n', 0xc) 13.833462581s ago: executing program 4 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 10.590414608s ago: executing program 4 (id=906): ioperm(0x3, 0x4, 0x100000a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/address_bits', 0x2, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x40800) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) 10.554341229s ago: executing program 5 (id=907): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(r3, 0x2, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) unlink(&(0x7f0000000380)='./file0\x00') ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x7, &(0x7f00000000c0)={0x5, "1ee90c1377e11167c5706128af89d631eac4339ee92390890e8619d3373b808450"}}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4102, 0x8a) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000008911aa000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 10.278776613s ago: executing program 3 (id=908): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="3f0f", 0x2}], 0x1}], 0x1, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.277349213s ago: executing program 1 (id=909): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9"], 0x15) 10.028956095s ago: executing program 1 (id=910): unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.028121385s ago: executing program 3 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\xe1\xc8Q\t\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x14b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.834645163s ago: executing program 1 (id=912): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000340)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0x5483, &(0x7f0000000100)={0x0, 0x7628, 0x10, 0x3, 0xf3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x13, r3, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x3e, 0x0, 0x0) shutdown(r4, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)={r7}, &(0x7f0000000280)=0x8) futex(0x0, 0x207, 0x4, 0x0, 0x0, 0x1) 6.680126067s ago: executing program 5 (id=913): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) getdents(0xffffffffffffffff, 0x0, 0x3b) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000240), 0x3000010, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x9}}], [{@obj_type={'obj_type', 0x3d, '^'}}]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 6.279459736s ago: executing program 3 (id=914): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) sendfile(r0, r1, 0x0, 0x20000023896) 6.100833335s ago: executing program 1 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 4.489294473s ago: executing program 3 (id=916): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x19, 0x2, "3f93"}, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0x4d, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348") signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.841978413s ago: executing program 1 (id=917): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_IO_FLUSHER(0x39, 0x1000000) r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) syz_usb_connect(0xb, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) write$evdev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00001dd000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x2) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r2 = syz_open_dev$usbfs(0x0, 0xb, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) 2.142045437s ago: executing program 4 (id=918): r0 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}}) 641.290569ms ago: executing program 4 (id=919): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @uvalue=0x40000}, {0x1, @uvalue=0x41}]}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) 429.445599ms ago: executing program 4 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000140)="1100f8ae33df8736", 0x8}], 0x2) 0s ago: executing program 4 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) kernel console output (not intermixed with test programs): ] dump_stack_lvl+0x18c/0x250 [ 171.953659][ T6496] ? show_regs_print_info+0x20/0x20 [ 171.958908][ T6496] ? load_image+0x420/0x420 [ 171.963468][ T6496] ? __lock_acquire+0x7d80/0x7d80 [ 171.968550][ T6496] ? lockdep_hardirqs_on+0x98/0x150 [ 171.973805][ T6496] should_fail_ex+0x394/0x4c0 [ 171.978577][ T6496] prepare_alloc_pages+0x1e1/0x5b0 [ 171.983755][ T6496] __alloc_pages+0x134/0x460 [ 171.988402][ T6496] ? zone_statistics+0x170/0x170 [ 171.993379][ T6496] ? do_raw_spin_lock+0x11f/0x2b0 [ 171.998459][ T6496] ? __rwlock_init+0x150/0x150 [ 172.003292][ T6496] pte_alloc_one+0x84/0x540 [ 172.007850][ T6496] ? pfn_modify_allowed+0x560/0x560 [ 172.013109][ T6496] ? __pud_alloc+0x200/0x200 [ 172.017777][ T6496] __pte_alloc+0x22/0x2a0 [ 172.022179][ T6496] handle_mm_fault+0x3dc6/0x4a50 [ 172.027194][ T6496] ? handle_mm_fault+0xe6/0x4a50 [ 172.032232][ T6496] ? numa_migrate_prep+0x350/0x350 [ 172.037417][ T6496] __get_user_pages+0x604/0x1580 [ 172.042518][ T6496] ? populate_vma_page_range+0x380/0x380 [ 172.048223][ T6496] get_user_pages_remote+0x39e/0xb90 [ 172.053570][ T6496] ? lock_chain_count+0x20/0x20 [ 172.058503][ T6496] ? get_dump_page+0x200/0x200 [ 172.063332][ T6496] ? down_read+0x1ac/0x2e0 [ 172.067803][ T6496] get_arg_page+0x274/0x560 [ 172.072368][ T6496] ? copy_string_kernel+0x220/0x220 [ 172.077645][ T6496] ? strnlen+0x36/0x90 [ 172.081764][ T6496] copy_string_kernel+0x165/0x220 [ 172.086849][ T6496] do_execveat_common+0x35d/0x6b0 [ 172.091951][ T6496] __x64_sys_execveat+0xc4/0xe0 [ 172.096866][ T6496] do_syscall_64+0x55/0xb0 [ 172.101338][ T6496] ? clear_bhb_loop+0x40/0x90 [ 172.106092][ T6496] ? clear_bhb_loop+0x40/0x90 [ 172.110832][ T6496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.116785][ T6496] RIP: 0033:0x7fd062b9e159 [ 172.121252][ T6496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.140913][ T6496] RSP: 002b:00007fd0639ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 172.149384][ T6496] RAX: ffffffffffffffda RBX: 00007fd062e25fa0 RCX: 00007fd062b9e159 [ 172.157401][ T6496] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 172.165422][ T6496] RBP: 00007fd062c3506b R08: 0000000000001000 R09: 0000000000000000 [ 172.173441][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.181461][ T6496] R13: 00007fd062e26038 R14: 00007fd062e25fa0 R15: 00007ffc2f28f3a8 [ 172.189495][ T6496] [ 172.558602][ T6506] loop4: detected capacity change from 0 to 128 [ 172.585310][ T6506] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.598805][ T6506] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.763781][ T5930] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.953747][ T6512] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 173.919270][ T6520] loop3: detected capacity change from 0 to 64 [ 174.616938][ T6541] loop3: detected capacity change from 0 to 128 [ 174.692428][ T6541] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.776883][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.820283][ T6541] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.285154][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.904267][ T6549] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 180.685896][ T6585] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.136986][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 184.697526][ T6617] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 189.843841][ T6649] binder: 6647:6649 ioctl 40046205 0 returned -22 [ 191.216779][ T5784] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 191.398082][ T5784] usb 2-1: not running at top speed; connect to a high speed hub [ 191.423558][ T5784] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 191.455619][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.476766][ T5784] usb 2-1: Product: syz [ 191.481010][ T5784] usb 2-1: Manufacturer: syz [ 191.485654][ T5784] usb 2-1: SerialNumber: syz [ 191.523899][ T5784] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 191.578031][ T5784] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 191.594912][ T5784] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 191.627789][ T5784] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 191.660404][ T5784] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 191.769173][ C0] usb 2-1: malformed indat packet [ 192.215882][ T6667] binder: 6665:6667 ioctl c0306201 0 returned -14 [ 192.312666][ T6672] binder: 6665:6672 ioctl c0306201 0 returned -14 [ 193.186062][ T6700] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.267966][ T6657] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 194.010800][ T6709] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 195.269279][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.275675][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.372945][ T5822] usb 2-1: USB disconnect, device number 2 [ 195.395123][ T5822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 195.430200][ T5822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 195.488674][ T5822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 195.547488][ T5822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 195.609095][ T5822] keyspan 2-1:1.0: device disconnected [ 196.256360][ T6719] binder: 6717:6719 ioctl 40046205 0 returned -22 [ 197.369619][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.178'. [ 199.844630][ T6734] loop4: detected capacity change from 0 to 64 [ 200.385064][ T6735] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 201.813014][ T6743] loop2: detected capacity change from 0 to 512 [ 201.843436][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.871317][ T6743] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.962327][ T6743] EXT4-fs (loop2): shut down requested (0) [ 202.043994][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.678531][ T6749] binder: 6747:6749 ioctl 40046205 0 returned -22 [ 203.858957][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.187'. [ 206.347355][ T6757] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.376779][ T6768] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 207.159543][ T6781] binder: 6776:6781 ioctl 40046205 0 returned -22 [ 208.175063][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 208.181183][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 208.213379][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 208.222416][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 212.273751][ T6811] binder: 6808:6811 ioctl 40046205 0 returned -22 [ 213.304658][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 213.316673][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 217.413749][ T6839] binder: 6836:6839 ioctl 40046205 0 returned -22 [ 218.546053][ T6838] loop3: detected capacity change from 0 to 512 [ 218.698270][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.271520][ T6845] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 220.355272][ T5789] Bluetooth: hci3: command tx timeout [ 220.400317][ T6838] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.506272][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.810583][ T6852] loop3: detected capacity change from 0 to 256 [ 220.827442][ T6852] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 220.848463][ T28] audit: type=1800 audit(1789573412.901:4): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 223.546992][ T5822] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 223.948269][ T5822] usb 2-1: not running at top speed; connect to a high speed hub [ 223.969172][ T5822] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 223.986583][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.094604][ T28] audit: type=1400 audit(1789573416.131:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=6865 comm="syz.2.221" [ 224.645138][ T6870] loop3: detected capacity change from 0 to 512 [ 224.692190][ T5822] usb 2-1: Product: syz [ 224.699426][ T5822] usb 2-1: Manufacturer: syz [ 224.704091][ T5822] usb 2-1: SerialNumber: syz [ 224.718984][ T5822] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 224.777050][ T5822] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 224.791489][ T6870] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.224: invalid indirect mapped block 256 (level 2) [ 224.834063][ T6870] EXT4-fs (loop3): 2 truncates cleaned up [ 224.845068][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.877114][ T5822] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 224.909966][ T5822] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 224.941237][ T5822] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 225.246795][ T6874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 226.621491][ T6884] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 228.398339][ T5822] usb 2-1: USB disconnect, device number 3 [ 228.513800][ T5822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 228.557642][ T5822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 228.588121][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.623929][ T5822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 228.679934][ T5822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 228.924393][ T5822] keyspan 2-1:1.0: device disconnected [ 229.896569][ T5766] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 230.756684][ T5766] usb 4-1: Using ep0 maxpacket: 32 [ 230.776742][ T5766] usb 4-1: config 91 has an invalid interface number: 231 but max is 0 [ 230.785534][ T5766] usb 4-1: config 91 has no interface number 0 [ 230.816779][ T5766] usb 4-1: config 91 interface 231 has no altsetting 0 [ 231.358268][ T6908] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 232.466487][ T5766] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 232.506729][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.514807][ T5766] usb 4-1: Product: syz [ 232.596055][ T5766] usb 4-1: Manufacturer: syz [ 232.617336][ T5766] usb 4-1: SerialNumber: syz [ 232.650498][ T5766] usb 4-1: can't set config #91, error -71 [ 232.669260][ T5766] usb 4-1: USB disconnect, device number 4 [ 232.819171][ T6913] loop3: detected capacity change from 0 to 512 [ 232.910389][ T6913] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.238: invalid indirect mapped block 256 (level 2) [ 233.096837][ T6913] EXT4-fs (loop3): 2 truncates cleaned up [ 233.105383][ T6913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.163876][ T6920] loop4: detected capacity change from 0 to 512 [ 233.327069][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.386818][ T6920] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.605349][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.865584][ T6927] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.238: bg 0: block 5: invalid block bitmap [ 235.014786][ T6927] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 235.043834][ T6927] EXT4-fs (loop3): This should not happen!! Data will be lost [ 235.043834][ T6927] [ 235.123239][ T6929] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 235.165133][ T6927] EXT4-fs (loop3): Total free blocks count 0 [ 235.182464][ T6929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 235.182464][ T6929] [ 235.201737][ T6927] EXT4-fs (loop3): Free/Dirty block details [ 235.212891][ T6927] EXT4-fs (loop3): free_blocks=0 [ 235.224531][ T6929] EXT4-fs (loop3): Total free blocks count 0 [ 235.236093][ T6927] EXT4-fs (loop3): dirty_blocks=544 [ 236.538050][ T6945] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 237.646712][ T5783] Bluetooth: hci4: command 0x1003 tx timeout [ 237.653501][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 237.659684][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 238.075389][ T6954] loop1: detected capacity change from 0 to 512 [ 238.212892][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.226641][ T6954] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.237120][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 238.402248][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.426510][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 238.434213][ T5822] usb 5-1: config 91 has an invalid interface number: 231 but max is 0 [ 238.457920][ T5822] usb 5-1: config 91 has no interface number 0 [ 238.464184][ T5822] usb 5-1: config 91 interface 231 has no altsetting 0 [ 238.538926][ T5822] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 238.596634][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.716706][ T5822] usb 5-1: Product: syz [ 238.771959][ T5822] usb 5-1: Manufacturer: syz [ 238.817262][ T5822] usb 5-1: SerialNumber: syz [ 239.283415][ T5822] ums-cypress 5-1:91.231: USB Mass Storage device detected [ 239.406765][ T5822] usb 5-1: USB disconnect, device number 2 [ 239.470947][ T6966] loop2: detected capacity change from 0 to 64 [ 239.723996][ T6968] loop2: detected capacity change from 0 to 512 [ 239.765758][ T6968] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.253: invalid indirect mapped block 256 (level 2) [ 239.825428][ T6968] EXT4-fs (loop2): 2 truncates cleaned up [ 239.869939][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.660281][ T6968] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.253: bg 0: block 5: invalid block bitmap [ 240.914020][ T6968] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 240.951110][ T6978] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 240.966670][ T6978] EXT4-fs (loop2): This should not happen!! Data will be lost [ 240.966670][ T6978] [ 240.977941][ T6978] EXT4-fs (loop2): Total free blocks count 0 [ 240.983976][ T6978] EXT4-fs (loop2): Free/Dirty block details [ 240.991361][ T6978] EXT4-fs (loop2): free_blocks=0 [ 240.996341][ T6978] EXT4-fs (loop2): dirty_blocks=6660 [ 241.007082][ T6978] EXT4-fs (loop2): Block reservation details [ 241.013130][ T6978] EXT4-fs (loop2): i_reserved_data_blocks=6630 [ 241.658846][ T6986] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 244.782969][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.787540][ T5783] Bluetooth: hci4: command 0x1003 tx timeout [ 244.946864][ T6992] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.988756][ T6999] loop2: detected capacity change from 0 to 32768 [ 246.590670][ T7021] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 247.657349][ T6999] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop2": -EINTR [ 247.749625][ T7025] loop4: detected capacity change from 0 to 512 [ 247.828064][ T7025] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.268: invalid indirect mapped block 256 (level 2) [ 247.868244][ T7025] EXT4-fs (loop4): 2 truncates cleaned up [ 247.918992][ T7025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.510508][ T2930] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 250.529730][ T2930] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 250.542644][ T2930] EXT4-fs (loop4): This should not happen!! Data will be lost [ 250.542644][ T2930] [ 250.552926][ T2930] EXT4-fs (loop4): Total free blocks count 0 [ 250.559466][ T2930] EXT4-fs (loop4): Free/Dirty block details [ 250.565493][ T2930] EXT4-fs (loop4): free_blocks=0 [ 250.571039][ T2930] EXT4-fs (loop4): dirty_blocks=16004 [ 250.576796][ T2930] EXT4-fs (loop4): Block reservation details [ 250.582920][ T2930] EXT4-fs (loop4): i_reserved_data_blocks=16002 [ 250.591218][ T2930] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 250.762918][ T7029] loop3: detected capacity change from 0 to 32768 [ 251.283128][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'. [ 252.230984][ T7050] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 253.294732][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.744186][ T5930] EXT4-fs: 39 callbacks suppressed [ 253.744204][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.656311][ T7061] loop2: detected capacity change from 0 to 512 [ 254.755773][ T7061] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.282: invalid indirect mapped block 256 (level 2) [ 254.805041][ T7061] EXT4-fs (loop2): 2 truncates cleaned up [ 254.825143][ T7061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.818693][ T7067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 255.853602][ T48] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 255.867150][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 255.879754][ T48] EXT4-fs (loop2): This should not happen!! Data will be lost [ 255.879754][ T48] [ 255.890536][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 255.903809][ T48] EXT4-fs (loop2): This should not happen!! Data will be lost [ 255.903809][ T48] [ 255.913683][ T48] EXT4-fs (loop2): Total free blocks count 0 [ 255.919942][ T48] EXT4-fs (loop2): Free/Dirty block details [ 255.927460][ T48] EXT4-fs (loop2): free_blocks=0 [ 255.932650][ T48] EXT4-fs (loop2): dirty_blocks=15999 [ 255.938660][ T48] EXT4-fs (loop2): Block reservation details [ 256.010848][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.017724][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.787264][ T7063] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 256.867784][ T7080] loop2: detected capacity change from 0 to 256 [ 256.906806][ T7080] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 256.932330][ T28] audit: type=1800 audit(1789573448.981:6): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 257.860921][ T7085] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 258.947092][ T7070] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 261.419733][ T7108] FAULT_INJECTION: forcing a failure. [ 261.419733][ T7108] name failslab, interval 1, probability 0, space 0, times 0 [ 261.456686][ T7108] CPU: 1 PID: 7108 Comm: syz.4.295 Not tainted syzkaller #0 [ 261.464071][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 261.474197][ T7108] Call Trace: [ 261.477543][ T7108] [ 261.480526][ T7108] dump_stack_lvl+0x18c/0x250 [ 261.485275][ T7108] ? show_regs_print_info+0x20/0x20 [ 261.490548][ T7108] ? load_image+0x420/0x420 [ 261.495162][ T7108] ? __might_sleep+0xe0/0xe0 [ 261.499816][ T7108] ? __lock_acquire+0x7d80/0x7d80 [ 261.504907][ T7108] ? __asan_memset+0x22/0x40 [ 261.509570][ T7108] should_fail_ex+0x394/0x4c0 [ 261.514318][ T7108] should_failslab+0x9/0x20 [ 261.518924][ T7108] slab_pre_alloc_hook+0x59/0x300 [ 261.524021][ T7108] ? stack_trace_snprint+0xf0/0xf0 [ 261.529200][ T7108] ? __kthread_create_on_node+0x116/0x3d0 [ 261.534984][ T7108] __kmem_cache_alloc_node+0x53/0x250 [ 261.540476][ T7108] ? __kthread_create_on_node+0x116/0x3d0 [ 261.546261][ T7108] kmalloc_trace+0x2a/0xe0 [ 261.550779][ T7108] ? install_unbound_pwq+0x480/0x480 [ 261.556127][ T7108] __kthread_create_on_node+0x116/0x3d0 [ 261.561737][ T7108] ? do_dentry_open+0x880/0x14b0 [ 261.566746][ T7108] ? kthread_create_on_node+0x140/0x140 [ 261.572357][ T7108] ? install_unbound_pwq+0x480/0x480 [ 261.577694][ T7108] ? install_unbound_pwq+0x480/0x480 [ 261.583025][ T7108] kthread_create_on_node+0xec/0x140 [ 261.588357][ T7108] ? tsk_fork_get_node+0x70/0x70 [ 261.593336][ T7108] ? rcu_is_watching+0x15/0xb0 [ 261.598141][ T7108] init_rescuer+0x1a9/0x2d0 [ 261.602678][ T7108] alloc_workqueue+0xcf0/0x1380 [ 261.607564][ T7108] ? __asan_memcpy+0x40/0x70 [ 261.612208][ T7108] ? snprintf+0xe9/0x140 [ 261.616487][ T7108] ? lockdep_init_map_type+0x9c/0x8e0 [ 261.621904][ T7108] ? apply_workqueue_attrs+0x180/0x180 [ 261.627392][ T7108] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 261.633324][ T7108] nci_register_device+0x22d/0xa00 [ 261.638471][ T7108] ? lockdep_softirqs_off+0x440/0x440 [ 261.643877][ T7108] ? nci_free_device+0x90/0x90 [ 261.648676][ T7108] ? __init_waitqueue_head+0xa8/0x140 [ 261.654086][ T7108] virtual_ncidev_open+0x12c/0x1a0 [ 261.659236][ T7108] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 261.664478][ T7108] misc_open+0x326/0x3a0 [ 261.668769][ T7108] chrdev_open+0x58c/0x600 [ 261.673227][ T7108] ? cd_forget+0x160/0x160 [ 261.677684][ T7108] ? fsnotify_perm+0x3ed/0x5e0 [ 261.682512][ T7108] do_dentry_open+0x880/0x14b0 [ 261.687317][ T7108] ? cd_forget+0x160/0x160 [ 261.691771][ T7108] path_openat+0x284f/0x3270 [ 261.696438][ T7108] ? do_sys_openat2+0xda/0x1d0 [ 261.701234][ T7108] ? __x64_sys_openat+0x139/0x160 [ 261.706293][ T7108] ? verify_lock_unused+0x140/0x140 [ 261.711529][ T7108] ? do_filp_open+0x430/0x430 [ 261.716249][ T7108] do_filp_open+0x1f2/0x430 [ 261.720790][ T7108] ? vfs_tmpfile+0x620/0x620 [ 261.725427][ T7108] ? _raw_spin_unlock+0x28/0x40 [ 261.730311][ T7108] ? alloc_fd+0x590/0x640 [ 261.734679][ T7108] do_sys_openat2+0x134/0x1d0 [ 261.739398][ T7108] ? do_sys_open+0xe0/0xe0 [ 261.743848][ T7108] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 261.749886][ T7108] ? lock_chain_count+0x20/0x20 [ 261.754772][ T7108] __x64_sys_openat+0x139/0x160 [ 261.759664][ T7108] do_syscall_64+0x55/0xb0 [ 261.764123][ T7108] ? clear_bhb_loop+0x40/0x90 [ 261.768838][ T7108] ? clear_bhb_loop+0x40/0x90 [ 261.773553][ T7108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.779488][ T7108] RIP: 0033:0x7fd062b9e159 [ 261.783963][ T7108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.803625][ T7108] RSP: 002b:00007fd0639ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.812077][ T7108] RAX: ffffffffffffffda RBX: 00007fd062e25fa0 RCX: 00007fd062b9e159 [ 261.820086][ T7108] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 261.828109][ T7108] RBP: 00007fd062c3506b R08: 0000000000000000 R09: 0000000000000000 [ 261.836105][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.844118][ T7108] R13: 00007fd062e26038 R14: 00007fd062e25fa0 R15: 00007ffc2f28f3a8 [ 261.852141][ T7108] [ 261.872325][ T7108] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 262.633025][ T7114] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 264.115883][ T7119] loop3: detected capacity change from 0 to 512 [ 264.170465][ T7119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 264.192067][ T7119] System zones: 1-12 [ 264.211149][ T7119] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.299: missing EA_INODE flag [ 264.231989][ T7119] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.299: error while reading EA inode 12 err=-117 [ 264.247547][ T7119] EXT4-fs (loop3): 1 orphan inode deleted [ 264.254889][ T7119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.465292][ T7123] loop4: detected capacity change from 0 to 256 [ 264.479676][ T7123] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 264.505486][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.506608][ T28] audit: type=1800 audit(1789573456.551:7): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.297" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 265.498288][ T7138] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 266.571586][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 267.731105][ T7143] loop1: detected capacity change from 0 to 32768 [ 267.838076][ T7150] loop3: detected capacity change from 0 to 256 [ 267.867950][ T7150] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 267.892049][ T28] audit: type=1800 audit(1789573459.941:8): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.310" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 268.836531][ T7167] random: crng reseeded on system resumption [ 270.426981][ T7172] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 273.802610][ T7199] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 274.873799][ T5783] Bluetooth: hci4: command 0x1003 tx timeout [ 274.880749][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.089954][ T7204] FAULT_INJECTION: forcing a failure. [ 275.089954][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 275.105531][ T7204] CPU: 1 PID: 7204 Comm: syz.2.329 Not tainted syzkaller #0 [ 275.112883][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 275.122989][ T7204] Call Trace: [ 275.126314][ T7204] [ 275.129296][ T7204] dump_stack_lvl+0x18c/0x250 [ 275.134041][ T7204] ? show_regs_print_info+0x20/0x20 [ 275.139296][ T7204] ? load_image+0x420/0x420 [ 275.143884][ T7204] ? __might_fault+0xaa/0x120 [ 275.148619][ T7204] ? __lock_acquire+0x7d80/0x7d80 [ 275.153703][ T7204] should_fail_ex+0x394/0x4c0 [ 275.158458][ T7204] strncpy_from_user+0x36/0x2f0 [ 275.163418][ T7204] getname_flags+0xf6/0x500 [ 275.167980][ T7204] do_sys_openat2+0xda/0x1d0 [ 275.172656][ T7204] ? do_sys_open+0xe0/0xe0 [ 275.177137][ T7204] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 275.183176][ T7204] ? lock_chain_count+0x20/0x20 [ 275.188174][ T7204] __x64_sys_openat+0x139/0x160 [ 275.193086][ T7204] do_syscall_64+0x55/0xb0 [ 275.197644][ T7204] ? clear_bhb_loop+0x40/0x90 [ 275.202386][ T7204] ? clear_bhb_loop+0x40/0x90 [ 275.207147][ T7204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.213096][ T7204] RIP: 0033:0x7f78a559e159 [ 275.217560][ T7204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.237240][ T7204] RSP: 002b:00007f78a37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 275.245709][ T7204] RAX: ffffffffffffffda RBX: 00007f78a5825fa0 RCX: 00007f78a559e159 [ 275.253750][ T7204] RDX: 0000000000006000 RSI: 0000200000000040 RDI: 0000000000000004 [ 275.261772][ T7204] RBP: 00007f78a563506b R08: 0000000000000000 R09: 0000000000000000 [ 275.269788][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.277808][ T7204] R13: 00007f78a5826038 R14: 00007f78a5825fa0 R15: 00007fff3a99bd78 [ 275.285893][ T7204] [ 275.981558][ T7214] binder: 7212:7214 ioctl 40046205 0 returned -22 [ 277.666577][ T7209] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 278.546431][ T7227] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 279.906702][ T7221] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 280.510549][ T2893] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xde [ 280.745881][ T7253] binder: 7250:7253 ioctl 40046205 0 returned -22 [ 280.835511][ T7230] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 281.440967][ T52] Bluetooth: Unexpected start frame (len 18) [ 281.457330][ T7255] loop4: detected capacity change from 0 to 64 [ 281.472020][ T7257] loop1: detected capacity change from 0 to 512 [ 281.514710][ T7257] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.343: invalid indirect mapped block 256 (level 2) [ 281.534369][ T52] Bluetooth: Fragment is too long (len 53, expected 9) [ 281.585306][ T7257] EXT4-fs (loop1): 2 truncates cleaned up [ 281.608407][ T7257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.436774][ T2986] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:11: bg 0: block 5: invalid block bitmap [ 282.517117][ T7257] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.343: bg 0: block 5: invalid block bitmap [ 282.543600][ T7257] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 282.556645][ T7257] EXT4-fs (loop1): This should not happen!! Data will be lost [ 282.556645][ T7257] [ 282.598602][ T2986] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 282.653309][ T2986] EXT4-fs (loop1): This should not happen!! Data will be lost [ 282.653309][ T2986] [ 282.680817][ T2986] EXT4-fs (loop1): Total free blocks count 0 [ 282.696796][ T2986] EXT4-fs (loop1): Free/Dirty block details [ 282.713076][ T2986] EXT4-fs (loop1): free_blocks=0 [ 283.243537][ T7267] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 284.342063][ T7246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.378794][ T2986] EXT4-fs (loop1): dirty_blocks=16066 [ 284.384282][ T2986] EXT4-fs (loop1): Block reservation details [ 285.594579][ T7281] binder: 7278:7281 ioctl 40046205 0 returned -22 [ 286.609555][ T7290] loop2: detected capacity change from 0 to 64 [ 287.568806][ T7302] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 288.667891][ T7283] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 289.109787][ T5840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 289.310049][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.332261][ T5840] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 289.351793][ T5840] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 289.382989][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.407218][ T5840] usb 5-1: config 0 descriptor?? [ 289.531701][ T28] audit: type=1326 audit(1789573481.581:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 289.557050][ T28] audit: type=1326 audit(1789573481.581:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 289.591242][ T28] audit: type=1326 audit(1789573481.581:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 289.708254][ T5840] Bluetooth: Can't get state to change to load ram patch err [ 289.722865][ T5840] Bluetooth: Loading patch file failed [ 289.757954][ T5840] ath3k: probe of 5-1:0.0 failed with error -71 [ 289.786384][ T7296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.830630][ T5840] usb 5-1: USB disconnect, device number 3 [ 289.974590][ T28] audit: type=1326 audit(1789573481.581:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 290.222807][ T28] audit: type=1326 audit(1789573481.641:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 290.290106][ T28] audit: type=1326 audit(1789573481.641:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 290.416568][ T28] audit: type=1326 audit(1789573481.641:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 291.297350][ T7317] binder: 7313:7317 ioctl 40046205 0 returned -22 [ 291.496678][ T28] audit: type=1326 audit(1789573481.671:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 291.547160][ T7315] ptp ptp0: delete virtual clock ptp5 [ 291.573172][ T28] audit: type=1326 audit(1789573481.671:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124199e159 code=0x7ffc0000 [ 291.681814][ T7315] ptp ptp0: delete virtual clock ptp4 [ 291.742992][ T7315] ptp ptp0: delete virtual clock ptp3 [ 291.838442][ T7315] ptp ptp0: delete virtual clock ptp2 [ 291.930002][ T7315] ptp ptp0: delete virtual clock ptp1 [ 291.984647][ T7315] ptp ptp0: only physical clock in use now [ 292.037270][ T7318] failed to create ptp aux_worker -4 [ 292.769867][ T7328] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 292.830733][ T7312] loop3: detected capacity change from 0 to 32768 [ 292.953923][ T7312] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.291541][ T5766] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 293.453452][ T7312] XFS (loop3): Ending clean mount [ 293.496832][ T7312] XFS (loop3): Quotacheck needed: Please wait. [ 293.533123][ T5766] usb 2-1: Using ep0 maxpacket: 32 [ 293.570908][ T5766] usb 2-1: config 91 has an invalid interface number: 231 but max is 0 [ 293.597336][ T5766] usb 2-1: config 91 has no interface number 0 [ 293.605446][ T5766] usb 2-1: config 91 interface 231 has no altsetting 0 [ 293.635902][ T5766] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 293.677130][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.711135][ T5766] usb 2-1: Product: syz [ 293.715460][ T5766] usb 2-1: Manufacturer: syz [ 293.723433][ T7312] XFS (loop3): Quotacheck: Done. [ 293.750756][ T5766] usb 2-1: SerialNumber: syz [ 293.792895][ T7345] FAULT_INJECTION: forcing a failure. [ 293.792895][ T7345] name failslab, interval 1, probability 0, space 0, times 0 [ 293.823223][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.833827][ T7345] CPU: 0 PID: 7345 Comm: syz.4.367 Not tainted syzkaller #0 [ 293.841203][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 293.851360][ T7345] Call Trace: [ 293.854690][ T7345] [ 293.857668][ T7345] dump_stack_lvl+0x18c/0x250 [ 293.862420][ T7345] ? show_regs_print_info+0x20/0x20 [ 293.867684][ T7345] ? load_image+0x420/0x420 [ 293.872251][ T7345] ? __might_sleep+0xe0/0xe0 [ 293.876904][ T7345] ? __lock_acquire+0x7d80/0x7d80 [ 293.881990][ T7345] should_fail_ex+0x394/0x4c0 [ 293.886740][ T7345] should_failslab+0x9/0x20 [ 293.891314][ T7345] slab_pre_alloc_hook+0x59/0x300 [ 293.896405][ T7345] ? d_instantiate+0x6f/0x90 [ 293.901056][ T7345] kmem_cache_alloc+0x5a/0x2c0 [ 293.905899][ T7345] ? alloc_empty_file+0x9e/0x1d0 [ 293.910904][ T7345] alloc_empty_file+0x9e/0x1d0 [ 293.915734][ T7345] alloc_file+0x5b/0x600 [ 293.920043][ T7345] alloc_file_pseudo+0x184/0x210 [ 293.925093][ T7345] ? fput+0x1a0/0x1a0 [ 293.929152][ T7345] ? alloc_fd+0x590/0x640 [ 293.933558][ T7345] sock_alloc_file+0xb7/0x280 [ 293.938351][ T7345] __sys_socket+0x140/0x1b0 [ 293.942945][ T7345] __x64_sys_socket+0x7a/0x90 [ 293.947714][ T7345] do_syscall_64+0x55/0xb0 [ 293.952203][ T7345] ? clear_bhb_loop+0x40/0x90 [ 293.956952][ T7345] ? clear_bhb_loop+0x40/0x90 [ 293.961706][ T7345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.967675][ T7345] RIP: 0033:0x7fd062b9e159 [ 293.972166][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.991843][ T7345] RSP: 002b:00007fd0639ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 294.000543][ T7345] RAX: ffffffffffffffda RBX: 00007fd062e25fa0 RCX: 00007fd062b9e159 [ 294.008594][ T7345] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 294.016635][ T7345] RBP: 00007fd062c3506b R08: 0000000000000000 R09: 0000000000000000 [ 294.024669][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.032721][ T7345] R13: 00007fd062e26038 R14: 00007fd062e25fa0 R15: 00007ffc2f28f3a8 [ 294.032760][ T7345] [ 294.067665][ T5766] ums-cypress 2-1:91.231: USB Mass Storage device detected [ 294.166835][ T5766] usb 2-1: USB disconnect, device number 4 [ 295.720410][ T7364] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 295.768526][ T7368] loop2: detected capacity change from 0 to 512 [ 295.830342][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.871554][ T7368] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.116143][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.293707][ T5840] IPVS: starting estimator thread 0... [ 296.436771][ T7379] IPVS: using max 16 ests per chain, 38400 per kthread [ 296.588244][ T7372] Set syz1 is full, maxelem 6117 reached [ 296.864861][ T7387] loop2: detected capacity change from 0 to 128 [ 297.054294][ T7387] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.067963][ T7387] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.497218][ T7353] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 297.713261][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.667273][ T7397] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 299.002627][ T7405] loop4: detected capacity change from 0 to 512 [ 299.076991][ T7405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.149470][ T7405] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.260437][ T7405] EXT4-fs (loop4): shut down requested (0) [ 299.477630][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.903004][ T7420] loop3: detected capacity change from 0 to 128 [ 300.088283][ T7420] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.112240][ T7420] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.757315][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.868465][ T7425] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 301.770200][ T7432] loop1: detected capacity change from 0 to 64 [ 301.913703][ T52] Bluetooth: Fragment is too long (len 53, expected 9) [ 302.222257][ T7441] loop1: detected capacity change from 0 to 512 [ 302.265052][ T7441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.330225][ T7441] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.419785][ T7441] EXT4-fs (loop1): shut down requested (0) [ 302.512650][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.651137][ T7451] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 302.798827][ T7456] loop1: detected capacity change from 0 to 128 [ 302.860784][ T7423] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 302.983307][ T7456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.997942][ T7456] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.666730][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.697575][ T7465] loop1: detected capacity change from 0 to 64 [ 304.773020][ T7467] loop3: detected capacity change from 0 to 512 [ 304.798593][ T7467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 304.816599][ T7467] System zones: 1-12 [ 304.832312][ T7467] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.408: missing EA_INODE flag [ 304.869981][ T52] Bluetooth: Fragment is too long (len 53, expected 9) [ 304.952339][ T7467] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.408: error while reading EA inode 12 err=-117 [ 304.981183][ T7467] EXT4-fs (loop3): 1 orphan inode deleted [ 304.993799][ T7467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.383851][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.171014][ T7482] binder: 7479:7482 ioctl 40046205 0 returned -22 [ 307.300055][ T7484] loop3: detected capacity change from 0 to 512 [ 307.461747][ T7484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.521019][ T7484] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.554146][ T7484] EXT4-fs (loop3): shut down requested (0) [ 308.457456][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.286711][ T7491] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 310.330316][ T7503] loop1: detected capacity change from 0 to 64 [ 310.481315][ T52] Bluetooth: Fragment is too long (len 53, expected 9) [ 310.988625][ T7511] loop4: detected capacity change from 0 to 128 [ 311.126191][ T7511] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.173569][ T7511] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.373551][ T7516] binder: 7514:7516 ioctl 40046205 0 returned -22 [ 313.448543][ T5930] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.812519][ T7522] loop4: detected capacity change from 0 to 256 [ 314.206764][ T7522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 314.357955][ T28] audit: type=1800 audit(1789573506.411:18): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.423" name="file1" dev="loop4" ino=1048600 res=0 errno=0 [ 316.390403][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 317.427200][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.433934][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.463314][ T7550] loop1: detected capacity change from 0 to 512 [ 317.565754][ T7554] loop2: detected capacity change from 0 to 128 [ 317.785372][ T7554] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.809825][ T7550] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.432: invalid indirect mapped block 256 (level 2) [ 317.839279][ T7554] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.138219][ T7550] EXT4-fs (loop1): 2 truncates cleaned up [ 318.303131][ T7550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.372796][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.109179][ T7550] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.432: bg 0: block 5: invalid block bitmap [ 319.236609][ T7556] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 319.256499][ T7545] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 319.329773][ T7550] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 319.342365][ T7550] EXT4-fs (loop1): This should not happen!! Data will be lost [ 319.342365][ T7550] [ 319.352120][ T7550] EXT4-fs (loop1): Total free blocks count 0 [ 319.358163][ T7550] EXT4-fs (loop1): Free/Dirty block details [ 319.364071][ T7550] EXT4-fs (loop1): free_blocks=0 [ 319.369171][ T7550] EXT4-fs (loop1): dirty_blocks=16004 [ 319.374570][ T7550] EXT4-fs (loop1): Block reservation details [ 319.380679][ T7550] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 319.439282][ T2893] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 321.172153][ T7573] ptp ptp0: only physical clock in use now [ 321.641080][ T7573] ptp ptp0: new virtual clock ptp1 [ 321.667234][ T7573] failed to create ptp aux_worker -4 [ 324.506821][ T5777] EXT4-fs: 23 callbacks suppressed [ 324.506839][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.816689][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 326.071656][ T8] usb 4-1: device descriptor read/64, error -71 [ 326.409359][ T7618] ptp ptp0: only physical clock in use now [ 326.418581][ T7617] ptp ptp0: new virtual clock ptp2 [ 326.434880][ T7617] ptp ptp0: new virtual clock ptp3 [ 326.447317][ T7617] ptp ptp0: new virtual clock ptp4 [ 326.471927][ T7617] ptp ptp0: new virtual clock ptp5 [ 326.477599][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 326.500595][ T7617] ptp ptp0: new virtual clock ptp6 [ 326.506196][ T7617] ptp ptp0: guarantee physical clock free running [ 326.616749][ T7599] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 326.666660][ T8] usb 4-1: device descriptor read/64, error -71 [ 326.760031][ T7628] loop2: detected capacity change from 0 to 256 [ 326.849230][ T7628] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 326.956532][ T28] audit: type=1800 audit(1789573518.931:19): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 327.622667][ T8] usb usb4-port1: attempt power cycle [ 328.087268][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 328.691076][ T8] usb 4-1: device descriptor read/8, error -71 [ 329.082141][ T7645] loop1: detected capacity change from 0 to 512 [ 329.161601][ T7645] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.458: invalid indirect mapped block 256 (level 2) [ 329.286972][ T7650] ptp ptp0: delete virtual clock ptp6 [ 329.393360][ T7645] EXT4-fs (loop1): 2 truncates cleaned up [ 329.462130][ T7650] ptp ptp0: delete virtual clock ptp5 [ 329.495851][ T7645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.561945][ T7650] ptp ptp0: delete virtual clock ptp4 [ 330.169152][ T7645] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.458: bg 0: block 5: invalid block bitmap [ 330.440531][ T7645] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 330.453359][ T7645] EXT4-fs (loop1): This should not happen!! Data will be lost [ 330.453359][ T7645] [ 330.463240][ T7645] EXT4-fs (loop1): Total free blocks count 0 [ 330.469475][ T7645] EXT4-fs (loop1): Free/Dirty block details [ 330.476173][ T7645] EXT4-fs (loop1): free_blocks=0 [ 330.481329][ T7645] EXT4-fs (loop1): dirty_blocks=16004 [ 330.486849][ T7645] EXT4-fs (loop1): Block reservation details [ 330.492931][ T7645] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 330.523691][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 330.555522][ T7650] ptp ptp0: delete virtual clock ptp3 [ 330.716302][ T7650] ptp ptp0: delete virtual clock ptp2 [ 330.753018][ T7650] ptp ptp0: only physical clock in use now [ 330.773375][ T7651] failed to create ptp aux_worker -4 [ 331.056665][ T7660] loop3: detected capacity change from 0 to 256 [ 332.024304][ T7660] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 332.059747][ T28] audit: type=1800 audit(1789573524.091:20): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.462" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 332.471840][ T7670] random: crng reseeded on system resumption [ 333.356744][ T5822] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 333.387838][ T7684] loop2: detected capacity change from 0 to 512 [ 333.413898][ T7684] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.470: invalid indirect mapped block 256 (level 2) [ 333.445131][ T7684] EXT4-fs (loop2): 2 truncates cleaned up [ 333.465367][ T7684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.526463][ T5822] usb 4-1: device descriptor read/64, error -71 [ 334.829999][ T7686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 334.856937][ T7665] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 334.897441][ T49] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 334.920677][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 334.934374][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 334.934374][ T49] [ 335.023283][ T7688] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 335.035860][ T7688] EXT4-fs (loop2): This should not happen!! Data will be lost [ 335.035860][ T7688] [ 335.045681][ T7688] EXT4-fs (loop2): Total free blocks count 0 [ 335.051713][ T7688] EXT4-fs (loop2): Free/Dirty block details [ 335.057655][ T7688] EXT4-fs (loop2): free_blocks=0 [ 335.062620][ T7688] EXT4-fs (loop2): dirty_blocks=15997 [ 335.068128][ T7688] EXT4-fs (loop2): Block reservation details [ 335.111460][ T5822] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 335.416566][ T5822] usb 4-1: device descriptor read/64, error -71 [ 335.538545][ T5822] usb usb4-port1: attempt power cycle [ 335.966492][ T5822] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 336.020110][ T5822] usb 4-1: device descriptor read/8, error -71 [ 336.465968][ T7711] loop2: detected capacity change from 0 to 512 [ 336.499361][ T7711] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.480: invalid indirect mapped block 256 (level 2) [ 336.547647][ T7711] EXT4-fs (loop2): 2 truncates cleaned up [ 336.558067][ T7711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.976337][ T1132] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 338.038874][ T1132] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 338.053249][ T1132] EXT4-fs (loop2): This should not happen!! Data will be lost [ 338.053249][ T1132] [ 338.066199][ T1132] EXT4-fs (loop2): Total free blocks count 0 [ 338.072870][ T1132] EXT4-fs (loop2): Free/Dirty block details [ 338.080453][ T1132] EXT4-fs (loop2): free_blocks=0 [ 338.085446][ T1132] EXT4-fs (loop2): dirty_blocks=16002 [ 338.102013][ T1132] EXT4-fs (loop2): Block reservation details [ 338.116476][ T1132] EXT4-fs (loop2): i_reserved_data_blocks=16002 [ 338.206264][ T7716] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 338.389772][ T7721] loop3: detected capacity change from 0 to 512 [ 338.438184][ T7721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 338.480605][ T7721] System zones: 1-12 [ 338.497434][ T7721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.483: missing EA_INODE flag [ 338.550329][ T7721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.483: error while reading EA inode 12 err=-117 [ 338.578177][ T7721] EXT4-fs (loop3): 1 orphan inode deleted [ 338.585535][ T7721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.710079][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.846665][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 339.042214][ T8] usb 2-1: device descriptor read/64, error -71 [ 339.336535][ T8] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 339.516875][ T8] usb 2-1: device descriptor read/64, error -71 [ 339.662437][ T8] usb usb2-port1: attempt power cycle [ 340.012237][ T7747] loop4: detected capacity change from 0 to 512 [ 340.040386][ T7747] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.491: invalid indirect mapped block 256 (level 2) [ 340.079083][ T7747] EXT4-fs (loop4): 2 truncates cleaned up [ 340.095402][ T7747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.113681][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 341.428053][ T8] usb 2-1: device descriptor read/8, error -71 [ 341.466257][ T11] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 341.507136][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 341.533018][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 341.533018][ T11] [ 341.546797][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 341.557206][ T11] EXT4-fs (loop4): Free/Dirty block details [ 341.563297][ T11] EXT4-fs (loop4): free_blocks=0 [ 341.570772][ T11] EXT4-fs (loop4): dirty_blocks=16002 [ 341.576330][ T11] EXT4-fs (loop4): Block reservation details [ 341.582644][ T11] EXT4-fs (loop4): i_reserved_data_blocks=16002 [ 341.665812][ T7750] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 341.776538][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 341.817311][ T7741] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 341.881089][ T7755] loop1: detected capacity change from 0 to 512 [ 341.927272][ T7755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 341.939488][ T7757] Zero length message leads to an empty skb [ 341.947151][ T7755] System zones: 1-12 [ 341.968712][ T7755] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.494: missing EA_INODE flag [ 342.007211][ T8] usb 2-1: device not accepting address 8, error -71 [ 342.033642][ T7755] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.494: error while reading EA inode 12 err=-117 [ 342.060526][ T8] usb usb2-port1: unable to enumerate USB device [ 342.117912][ T7755] EXT4-fs (loop1): 1 orphan inode deleted [ 342.125127][ T7755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.219764][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.291158][ T5821] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 344.574012][ T7791] loop1: detected capacity change from 0 to 128 [ 344.685269][ T7791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.699717][ T7791] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.101527][ T7795] loop2: detected capacity change from 0 to 512 [ 345.168150][ T7795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 345.208961][ T7795] System zones: 1-12 [ 345.226652][ T7795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.505: missing EA_INODE flag [ 345.252574][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.276853][ T7795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.505: error while reading EA inode 12 err=-117 [ 345.316484][ T5821] usb 4-1: device descriptor read/64, error -71 [ 345.335693][ T7795] EXT4-fs (loop2): 1 orphan inode deleted [ 345.387063][ T7795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.543866][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.586537][ T5821] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 345.749901][ T5821] usb 4-1: device descriptor read/64, error -71 [ 345.886730][ T5821] usb usb4-port1: attempt power cycle [ 345.940658][ T7802] loop1: detected capacity change from 0 to 32768 [ 346.035338][ T7802] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 346.099804][ T7807] Set syz1 is full, maxelem 6117 reached [ 346.208953][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 346.239999][ T7800] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 346.316480][ T5821] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 346.357208][ T5821] usb 4-1: device descriptor read/8, error -71 [ 347.387504][ T7824] loop2: detected capacity change from 0 to 128 [ 347.538429][ T7824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.552147][ T7824] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.011742][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.179440][ T7833] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 348.686904][ T5822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 348.926494][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 348.937279][ T5822] usb 3-1: config 91 has an invalid interface number: 231 but max is 0 [ 348.945595][ T5822] usb 3-1: config 91 has no interface number 0 [ 348.972333][ T5822] usb 3-1: config 91 interface 231 has no altsetting 0 [ 349.002800][ T5822] usb 3-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 349.027696][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.041720][ T5822] usb 3-1: Product: syz [ 349.046335][ T5822] usb 3-1: Manufacturer: syz [ 349.052010][ T5822] usb 3-1: SerialNumber: syz [ 349.464350][ T7843] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 349.680411][ T7856] loop1: detected capacity change from 0 to 512 [ 349.725334][ T7856] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.524: invalid indirect mapped block 256 (level 2) [ 349.770760][ T7856] EXT4-fs (loop1): 2 truncates cleaned up [ 349.800509][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.529285][ T7793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 351.536889][ T5821] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 351.582605][ T11] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 351.618395][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 351.631092][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 351.631092][ T11] [ 351.744654][ T7859] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 351.757234][ T7859] EXT4-fs (loop1): This should not happen!! Data will be lost [ 351.757234][ T7859] [ 351.766982][ T7859] EXT4-fs (loop1): Total free blocks count 0 [ 351.773922][ T7859] EXT4-fs (loop1): Free/Dirty block details [ 351.779941][ T7859] EXT4-fs (loop1): free_blocks=0 [ 351.784915][ T7859] EXT4-fs (loop1): dirty_blocks=15997 [ 351.790382][ T7859] EXT4-fs (loop1): Block reservation details [ 351.878711][ T5822] ums-cypress 3-1:91.231: USB Mass Storage device detected [ 351.928097][ T5821] usb 5-1: device descriptor read/64, error -71 [ 351.986500][ T5822] usb 3-1: USB disconnect, device number 4 [ 352.206493][ T5821] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 352.376578][ T5821] usb 5-1: device descriptor read/64, error -71 [ 352.506703][ T5821] usb usb5-port1: attempt power cycle [ 355.016386][ C0] sched: RT throttling activated [ 355.053818][ T7877] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 355.267251][ T7884] loop1: detected capacity change from 0 to 128 [ 355.575911][ T7884] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.588680][ T7884] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.818648][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.991937][ T7891] loop1: detected capacity change from 0 to 512 [ 356.050068][ T7891] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.534: invalid indirect mapped block 256 (level 2) [ 356.147897][ T7891] EXT4-fs (loop1): 2 truncates cleaned up [ 356.156223][ T7891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.246765][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 357.547492][ T48] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 357.561591][ T48] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 357.574346][ T48] EXT4-fs (loop1): This should not happen!! Data will be lost [ 357.574346][ T48] [ 357.584089][ T48] EXT4-fs (loop1): Total free blocks count 0 [ 357.590193][ T48] EXT4-fs (loop1): Free/Dirty block details [ 357.596142][ T48] EXT4-fs (loop1): free_blocks=0 [ 357.607732][ T48] EXT4-fs (loop1): dirty_blocks=16002 [ 357.614094][ T48] EXT4-fs (loop1): Block reservation details [ 357.620320][ T48] EXT4-fs (loop1): i_reserved_data_blocks=16002 [ 357.703663][ T7901] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 357.776449][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 357.790050][ T23] usb 5-1: config 91 has an invalid interface number: 231 but max is 0 [ 357.814766][ T23] usb 5-1: config 91 has no interface number 0 [ 357.831632][ T23] usb 5-1: config 91 interface 231 has no altsetting 0 [ 357.849727][ T23] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 357.866920][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.889920][ T23] usb 5-1: Product: syz [ 357.894166][ T23] usb 5-1: Manufacturer: syz [ 358.081988][ T23] usb 5-1: SerialNumber: syz [ 360.098830][ T23] ums-cypress 5-1:91.231: USB Mass Storage device detected [ 360.506790][ T23] usb 5-1: USB disconnect, device number 7 [ 363.029998][ T7926] FAULT_INJECTION: forcing a failure. [ 363.029998][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 363.064230][ T7926] CPU: 0 PID: 7926 Comm: syz.2.547 Not tainted syzkaller #0 [ 363.071617][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 363.081761][ T7926] Call Trace: [ 363.085173][ T7926] [ 363.088212][ T7926] dump_stack_lvl+0x18c/0x250 [ 363.093111][ T7926] ? show_regs_print_info+0x20/0x20 [ 363.098416][ T7926] ? load_image+0x420/0x420 [ 363.103012][ T7926] ? __might_sleep+0xe0/0xe0 [ 363.107705][ T7926] ? __lock_acquire+0x7d80/0x7d80 [ 363.112916][ T7926] should_fail_ex+0x394/0x4c0 [ 363.117693][ T7926] should_failslab+0x9/0x20 [ 363.122272][ T7926] slab_pre_alloc_hook+0x59/0x300 [ 363.127392][ T7926] kmem_cache_alloc+0x5a/0x2c0 [ 363.132215][ T7926] ? security_inode_alloc+0x34/0x110 [ 363.137599][ T7926] security_inode_alloc+0x34/0x110 [ 363.142776][ T7926] inode_init_always+0x914/0xc90 [ 363.147792][ T7926] new_inode_pseudo+0x95/0x1d0 [ 363.152619][ T7926] __sock_create+0x12d/0x940 [ 363.157365][ T7926] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 363.163414][ T7926] __sys_socket+0xd7/0x1b0 [ 363.167892][ T7926] __x64_sys_socket+0x7a/0x90 [ 363.172633][ T7926] do_syscall_64+0x55/0xb0 [ 363.177139][ T7926] ? clear_bhb_loop+0x40/0x90 [ 363.182001][ T7926] ? clear_bhb_loop+0x40/0x90 [ 363.186737][ T7926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.192691][ T7926] RIP: 0033:0x7f78a559e159 [ 363.197226][ T7926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.216959][ T7926] RSP: 002b:00007f78a37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 363.225437][ T7926] RAX: ffffffffffffffda RBX: 00007f78a5825fa0 RCX: 00007f78a559e159 [ 363.233460][ T7926] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 363.241501][ T7926] RBP: 00007f78a563506b R08: 0000000000000000 R09: 0000000000000000 [ 363.249521][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.257548][ T7926] R13: 00007f78a5826038 R14: 00007f78a5825fa0 R15: 00007fff3a99bd78 [ 363.265588][ T7926] [ 363.381034][ T7926] socket: no more sockets [ 363.436656][ T5777] EXT4-fs: 7 callbacks suppressed [ 363.436671][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.735441][ T7961] jffs2: notice: (7961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 370.216541][ T7967] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 370.386813][ T57] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 370.586606][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 370.603723][ T57] usb 4-1: config 91 has an invalid interface number: 231 but max is 0 [ 370.619775][ T57] usb 4-1: config 91 has no interface number 0 [ 370.629905][ T57] usb 4-1: config 91 interface 231 has no altsetting 0 [ 370.644674][ T57] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 370.659175][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.669062][ T57] usb 4-1: Product: syz [ 370.673370][ T57] usb 4-1: Manufacturer: syz [ 370.682095][ T57] usb 4-1: SerialNumber: syz [ 371.057039][ T57] ums-cypress 4-1:91.231: USB Mass Storage device detected [ 371.613927][ T57] usb 4-1: USB disconnect, device number 17 [ 372.260527][ T8005] loop3: detected capacity change from 0 to 1024 [ 372.286839][ T8005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.332308][ T8005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 372.346255][ T8005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 372.366002][ T8005] System zones: 0-1, 3-36 [ 374.044043][ T8005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.143345][ T8005] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.568: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 374.307567][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.036515][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 376.118208][ T8037] loop1: detected capacity change from 0 to 512 [ 376.128073][ T8037] EXT4-fs: inline encryption not supported [ 376.163672][ T8037] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 376.191186][ T8037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 376.247622][ T8037] EXT4-fs (loop1): 1 truncate cleaned up [ 376.261681][ T8037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.398246][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.460658][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 376.468805][ T5821] usb 5-1: config 91 has an invalid interface number: 231 but max is 0 [ 376.477354][ T5821] usb 5-1: config 91 has no interface number 0 [ 376.483589][ T5821] usb 5-1: config 91 interface 231 has no altsetting 0 [ 376.494245][ T5821] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 376.520686][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.530467][ T5821] usb 5-1: Product: syz [ 376.534706][ T5821] usb 5-1: Manufacturer: syz [ 376.539656][ T8019] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 377.227047][ T5821] usb 5-1: SerialNumber: syz [ 377.520510][ T5821] ums-cypress 5-1:91.231: USB Mass Storage device detected [ 377.544626][ T8046] loop2: detected capacity change from 0 to 2048 [ 377.626691][ T5821] usb 5-1: USB disconnect, device number 8 [ 377.639328][ T8046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.451098][ T8065] fuse: Bad value for 'fd' [ 378.496839][ T8067] loop4: detected capacity change from 0 to 1024 [ 378.872358][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.878954][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.112116][ T8088] FAULT_INJECTION: forcing a failure. [ 380.112116][ T8088] name fail_futex, interval 1, probability 0, space 0, times 1 [ 380.125144][ T8088] CPU: 0 PID: 8088 Comm: syz.2.594 Not tainted syzkaller #0 [ 380.132494][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 380.142604][ T8088] Call Trace: [ 380.145937][ T8088] [ 380.148922][ T8088] dump_stack_lvl+0x18c/0x250 [ 380.153667][ T8088] ? show_regs_print_info+0x20/0x20 [ 380.158924][ T8088] ? load_image+0x420/0x420 [ 380.163492][ T8088] ? stack_trace_save+0xaa/0x100 [ 380.168511][ T8088] should_fail_ex+0x394/0x4c0 [ 380.173266][ T8088] get_futex_key+0x136/0x1030 [ 380.178031][ T8088] ? futex_setup_timer+0xc0/0xc0 [ 380.183032][ T8088] futex_wake+0x127/0x4f0 [ 380.187507][ T8088] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 380.193550][ T8088] ? futex_wake_mark+0x150/0x150 [ 380.198554][ T8088] ? lockdep_hardirqs_on+0x98/0x150 [ 380.203893][ T8088] do_futex+0x35d/0x3e0 [ 380.208106][ T8088] ? __ia32_sys_get_robust_list+0x110/0x110 [ 380.214062][ T8088] __se_sys_futex+0x3a9/0x440 [ 380.218812][ T8088] ? __x64_sys_futex+0xf0/0xf0 [ 380.223637][ T8088] ? __x64_sys_futex+0x21/0xf0 [ 380.228454][ T8088] do_syscall_64+0x55/0xb0 [ 380.232937][ T8088] ? clear_bhb_loop+0x40/0x90 [ 380.237682][ T8088] ? clear_bhb_loop+0x40/0x90 [ 380.242422][ T8088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.248381][ T8088] RIP: 0033:0x7f78a559e159 [ 380.252877][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.272539][ T8088] RSP: 002b:00007f78a37f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.281076][ T8088] RAX: ffffffffffffffda RBX: 00007f78a5825fa8 RCX: 00007f78a559e159 [ 380.289108][ T8088] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f78a5825fac [ 380.297131][ T8088] RBP: 00007f78a5825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 380.305155][ T8088] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 380.313205][ T8088] R13: 00007f78a5826038 R14: 00007fff3a99bc90 R15: 00007fff3a99bd78 [ 380.321257][ T8088] [ 380.336651][ T5822] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 380.526470][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 380.540065][ T5822] usb 4-1: config 91 has an invalid interface number: 231 but max is 0 [ 380.568314][ T5822] usb 4-1: config 91 has no interface number 0 [ 380.575387][ T5822] usb 4-1: config 91 interface 231 has no altsetting 0 [ 380.588021][ T5822] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 380.600150][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.609039][ T5822] usb 4-1: Product: syz [ 380.613770][ T5822] usb 4-1: Manufacturer: syz [ 380.619372][ T5822] usb 4-1: SerialNumber: syz [ 380.857662][ T5822] ums-cypress 4-1:91.231: USB Mass Storage device detected [ 382.135508][ T8076] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 382.164515][ T5822] usb 4-1: USB disconnect, device number 18 [ 386.996505][ T5821] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 387.780073][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 387.819757][ T5821] usb 4-1: config 91 has an invalid interface number: 231 but max is 0 [ 387.834248][ T5821] usb 4-1: config 91 has no interface number 0 [ 387.861298][ T5821] usb 4-1: config 91 interface 231 has no altsetting 0 [ 387.885115][ T5821] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 387.906759][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.926418][ T5821] usb 4-1: Product: syz [ 387.930680][ T5821] usb 4-1: Manufacturer: syz [ 387.946706][ T5821] usb 4-1: SerialNumber: syz [ 388.812051][ T5821] ums-cypress 4-1:91.231: USB Mass Storage device detected [ 388.857546][ T8159] loop2: detected capacity change from 0 to 256 [ 388.987058][ T5821] usb 4-1: USB disconnect, device number 19 [ 389.102111][ T8159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 389.168072][ T28] audit: type=1800 audit(1789573581.221:21): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.615" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 389.296709][ T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 389.491558][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 389.504272][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.520187][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 389.549384][ T23] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 389.560820][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.570190][ T23] usb 5-1: Product: syz [ 389.574543][ T23] usb 5-1: Manufacturer: syz [ 389.585747][ T23] usb 5-1: SerialNumber: syz [ 389.607648][ T23] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 389.629396][ T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 389.640345][ T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 389.653855][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 389.683733][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 389.703077][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 389.714253][ T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 389.724216][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 389.851524][ T23] usb 5-1: USB disconnect, device number 9 [ 389.879083][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 389.894233][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 389.909594][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 389.924011][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 389.935568][ T23] keyspan 5-1:1.0: device disconnected [ 391.565274][ T8165] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 392.167846][ T8183] FAULT_INJECTION: forcing a failure. [ 392.167846][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 392.226502][ T8183] CPU: 0 PID: 8183 Comm: syz.3.623 Not tainted syzkaller #0 [ 392.233907][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 392.244008][ T8183] Call Trace: [ 392.247353][ T8183] [ 392.250327][ T8183] dump_stack_lvl+0x18c/0x250 [ 392.255160][ T8183] ? show_regs_print_info+0x20/0x20 [ 392.260414][ T8183] ? load_image+0x420/0x420 [ 392.264974][ T8183] ? __might_sleep+0xe0/0xe0 [ 392.269730][ T8183] ? __lock_acquire+0x7d80/0x7d80 [ 392.274846][ T8183] should_fail_ex+0x394/0x4c0 [ 392.279591][ T8183] should_failslab+0x9/0x20 [ 392.284152][ T8183] slab_pre_alloc_hook+0x59/0x300 [ 392.289239][ T8183] kmem_cache_alloc+0x5a/0x2c0 [ 392.294068][ T8183] ? security_inode_alloc+0x34/0x110 [ 392.299427][ T8183] security_inode_alloc+0x34/0x110 [ 392.304608][ T8183] inode_init_always+0x914/0xc90 [ 392.309603][ T8183] new_inode_pseudo+0x95/0x1d0 [ 392.314419][ T8183] __sock_create+0x12d/0x940 [ 392.319082][ T8183] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 392.325148][ T8183] __sys_socket+0xd7/0x1b0 [ 392.329634][ T8183] __x64_sys_socket+0x7a/0x90 [ 392.334368][ T8183] do_syscall_64+0x55/0xb0 [ 392.338841][ T8183] ? clear_bhb_loop+0x40/0x90 [ 392.343583][ T8183] ? clear_bhb_loop+0x40/0x90 [ 392.348330][ T8183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.354288][ T8183] RIP: 0033:0x7fa54639e159 [ 392.358753][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.378417][ T8183] RSP: 002b:00007fa547318028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 392.386897][ T8183] RAX: ffffffffffffffda RBX: 00007fa546625fa0 RCX: 00007fa54639e159 [ 392.394918][ T8183] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 392.402937][ T8183] RBP: 00007fa54643506b R08: 0000000000000000 R09: 0000000000000000 [ 392.410961][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.418993][ T8183] R13: 00007fa546626038 R14: 00007fa546625fa0 R15: 00007fff480f7088 [ 392.427052][ T8183] [ 392.476485][ T8183] socket: no more sockets [ 392.657951][ T8194] capability: warning: `syz.4.626' uses 32-bit capabilities (legacy support in use) [ 392.702929][ T8194] program syz.4.626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.546843][ T8245] ptp ptp0: only physical clock in use now [ 402.578420][ T8245] ptp ptp0: new virtual clock ptp2 [ 402.609244][ T8245] ptp ptp0: new virtual clock ptp3 [ 402.671742][ T8245] ptp ptp0: new virtual clock ptp4 [ 402.876677][ T8245] ptp ptp0: new virtual clock ptp5 [ 402.894636][ T8253] FAULT_INJECTION: forcing a failure. [ 402.894636][ T8253] name failslab, interval 1, probability 0, space 0, times 0 [ 402.927114][ T8245] ptp ptp0: new virtual clock ptp6 [ 402.936328][ T8245] ptp ptp0: guarantee physical clock free running [ 402.953803][ T8253] CPU: 1 PID: 8253 Comm: syz.2.644 Not tainted syzkaller #0 [ 402.961200][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 402.971397][ T8253] Call Trace: [ 402.974732][ T8253] [ 402.977712][ T8253] dump_stack_lvl+0x18c/0x250 [ 402.982475][ T8253] ? show_regs_print_info+0x20/0x20 [ 402.987744][ T8253] ? load_image+0x420/0x420 [ 402.992338][ T8253] ? __might_sleep+0xe0/0xe0 [ 402.997012][ T8253] ? __lock_acquire+0x7d80/0x7d80 [ 403.002115][ T8253] should_fail_ex+0x394/0x4c0 [ 403.006868][ T8253] should_failslab+0x9/0x20 [ 403.011434][ T8253] slab_pre_alloc_hook+0x59/0x300 [ 403.016528][ T8253] kmem_cache_alloc+0x5a/0x2c0 [ 403.021356][ T8253] ? security_inode_alloc+0x34/0x110 [ 403.026710][ T8253] security_inode_alloc+0x34/0x110 [ 403.031889][ T8253] inode_init_always+0x914/0xc90 [ 403.036890][ T8253] new_inode_pseudo+0x95/0x1d0 [ 403.041716][ T8253] __sock_create+0x12d/0x940 [ 403.046358][ T8253] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 403.052448][ T8253] __sys_socket+0xd7/0x1b0 [ 403.056929][ T8253] __x64_sys_socket+0x7a/0x90 [ 403.061673][ T8253] do_syscall_64+0x55/0xb0 [ 403.066151][ T8253] ? clear_bhb_loop+0x40/0x90 [ 403.070898][ T8253] ? clear_bhb_loop+0x40/0x90 [ 403.075668][ T8253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.081633][ T8253] RIP: 0033:0x7f78a559e159 [ 403.086097][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.105762][ T8253] RSP: 002b:00007f78a37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 403.114233][ T8253] RAX: ffffffffffffffda RBX: 00007f78a5825fa0 RCX: 00007f78a559e159 [ 403.122283][ T8253] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 403.130306][ T8253] RBP: 00007f78a563506b R08: 0000000000000000 R09: 0000000000000000 [ 403.138330][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.146349][ T8253] R13: 00007f78a5826038 R14: 00007f78a5825fa0 R15: 00007fff3a99bd78 [ 403.154391][ T8253] [ 403.168897][ T8253] socket: no more sockets [ 403.517101][ T8267] loop3: detected capacity change from 0 to 256 [ 403.574779][ T8267] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 405.329712][ T28] audit: type=1800 audit(1789573597.381:22): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.645" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 408.305952][ T8278] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 408.423111][ T8293] ptp ptp0: delete virtual clock ptp6 [ 408.662975][ T8293] ptp ptp0: delete virtual clock ptp5 [ 408.698280][ T8293] ptp ptp0: delete virtual clock ptp4 [ 408.709063][ T8293] ptp ptp0: delete virtual clock ptp3 [ 408.717678][ T8293] ptp ptp0: delete virtual clock ptp2 [ 408.727015][ T8293] ptp ptp0: only physical clock in use now [ 408.744786][ T8296] ptp ptp0: new virtual clock ptp2 [ 408.806681][ T5860] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 409.656885][ T8296] ptp ptp0: new virtual clock ptp3 [ 409.688697][ T8296] failed to create ptp aux_worker -4 [ 409.812603][ T5822] IPVS: starting estimator thread 0... [ 409.876888][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 409.906612][ T8305] IPVS: using max 17 ests per chain, 40800 per kthread [ 409.917904][ T5860] usb 5-1: config 91 has an invalid interface number: 231 but max is 0 [ 409.926229][ T5860] usb 5-1: config 91 has no interface number 0 [ 409.972210][ T5860] usb 5-1: config 91 interface 231 has no altsetting 0 [ 409.997294][ T5860] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 410.023694][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.111809][ T8314] loop1: detected capacity change from 0 to 256 [ 410.398456][ T5860] usb 5-1: Product: syz [ 410.426454][ T5860] usb 5-1: Manufacturer: syz [ 410.431176][ T5860] usb 5-1: SerialNumber: syz [ 410.464974][ T8314] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 410.493059][ T28] audit: type=1800 audit(1789573602.541:23): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.660" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 410.649588][ T5860] ums-cypress 5-1:91.231: USB Mass Storage device detected [ 410.761976][ T5860] usb 5-1: USB disconnect, device number 10 [ 414.576238][ T8336] ptp ptp0: only physical clock in use now [ 414.629342][ T8336] ptp ptp0: new virtual clock ptp4 [ 414.683770][ T8336] ptp ptp0: new virtual clock ptp5 [ 414.698263][ T8336] ptp ptp0: new virtual clock ptp6 [ 414.727891][ T8336] ptp ptp0: new virtual clock ptp7 [ 414.779462][ T8336] ptp ptp0: new virtual clock ptp8 [ 414.805370][ T8342] loop1: detected capacity change from 0 to 256 [ 414.817293][ T8336] ptp ptp0: guarantee physical clock free running [ 414.901787][ T8342] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 416.860252][ T8357] loop1: detected capacity change from 0 to 256 [ 417.173951][ T8357] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 417.199431][ T28] audit: type=1800 audit(1789573609.251:24): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.673" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 418.892162][ T8374] loop2: detected capacity change from 0 to 2048 [ 421.022204][ T8374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.246217][ T8377] ptp ptp0: delete virtual clock ptp8 [ 421.416580][ T8377] ptp ptp0: delete virtual clock ptp7 [ 421.483368][ T8377] ptp ptp0: delete virtual clock ptp6 [ 421.581061][ T8377] ptp ptp0: delete virtual clock ptp5 [ 423.394164][ T8377] ptp ptp0: delete virtual clock ptp4 [ 423.440393][ T8377] ptp ptp0: only physical clock in use now [ 423.498059][ T8378] failed to create ptp aux_worker -4 [ 424.276683][ T5766] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 424.349564][ T8413] loop2: detected capacity change from 0 to 512 [ 424.360439][ T8413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 424.392585][ T8413] EXT4-fs (loop2): 1 truncate cleaned up [ 424.408346][ T8413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.467879][ T5766] usb 5-1: not running at top speed; connect to a high speed hub [ 424.482213][ T8413] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 424.495816][ T5766] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 424.534241][ T5766] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 424.562061][ T5776] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 424.565049][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.589959][ T5776] EXT4-fs (loop2): Remounting filesystem read-only [ 424.623582][ T5766] usb 5-1: Product: syz [ 424.635133][ T5766] usb 5-1: Manufacturer: syz [ 424.644431][ T5766] usb 5-1: SerialNumber: syz [ 424.718168][ T5766] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 424.749274][ T5766] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 424.808424][ T5766] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 424.824800][ T5766] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 424.868087][ T5766] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 424.946258][ T8418] binder: 8416:8418 unknown command 1074553619 [ 424.952798][ T8418] binder: 8416:8418 ioctl c0306201 200000000140 returned -22 [ 425.132363][ T5766] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 425.430721][ T5766] usb 5-1: USB disconnect, device number 11 [ 425.823684][ T5766] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 425.884445][ T5766] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 425.930324][ T5766] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 425.953907][ T5766] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 426.091485][ T8427] overlayfs: overlapping lowerdir path [ 426.126519][ T57] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 426.824653][ T5766] keyspan 5-1:1.0: device disconnected [ 426.986737][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 426.994213][ T57] usb 2-1: config 91 has an invalid interface number: 231 but max is 0 [ 427.024618][ T57] usb 2-1: config 91 has no interface number 0 [ 427.045528][ T57] usb 2-1: config 91 interface 231 has no altsetting 0 [ 427.081244][ T57] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 427.133370][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.225025][ T57] usb 2-1: Product: syz [ 427.229809][ T57] usb 2-1: Manufacturer: syz [ 427.234455][ T57] usb 2-1: SerialNumber: syz [ 427.418429][ T8431] ptp ptp0: only physical clock in use now [ 427.481991][ T8430] ptp ptp0: new virtual clock ptp4 [ 427.508236][ T8430] ptp ptp0: new virtual clock ptp5 [ 427.535250][ T8430] ptp ptp0: new virtual clock ptp6 [ 427.579883][ T8430] ptp ptp0: new virtual clock ptp7 [ 427.590985][ T57] ums-cypress 2-1:91.231: USB Mass Storage device detected [ 427.608351][ T8430] ptp ptp0: new virtual clock ptp8 [ 427.613815][ T8430] ptp ptp0: guarantee physical clock free running [ 427.685025][ T57] usb 2-1: USB disconnect, device number 9 [ 428.241191][ T8448] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 429.582712][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'. [ 430.936551][ T5830] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 431.338183][ T5830] usb 5-1: not running at top speed; connect to a high speed hub [ 431.357298][ T5830] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 431.409733][ T5830] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 431.419567][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.436717][ T5830] usb 5-1: Product: syz [ 431.462081][ T5830] usb 5-1: Manufacturer: syz [ 431.472198][ T5830] usb 5-1: SerialNumber: syz [ 431.489947][ T5830] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 431.521633][ T5830] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 431.556875][ T5830] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 431.601072][ T5830] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 431.632105][ T5830] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 431.677054][ T5830] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 431.712695][ T5830] usb 5-1: USB disconnect, device number 12 [ 431.747578][ T5830] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 431.816083][ T5830] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 431.844159][ T5830] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 431.879754][ T5830] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 431.898598][ T5830] keyspan 5-1:1.0: device disconnected [ 433.694087][ T8478] binder: 8477:8478 ioctl 40046205 0 returned -22 [ 434.643363][ T8483] loop4: detected capacity change from 0 to 64 [ 434.878757][ T8483] Trying to free block not in datazone [ 436.716527][ T52] Bluetooth: Fragment is too long (len 53, expected 9) [ 440.303545][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314567][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.038663][ T8513] binder: 8512:8513 ioctl 40046205 0 returned -22 [ 442.722083][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.732647][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.745847][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.759411][ T8522] loop3: detected capacity change from 0 to 64 [ 442.777034][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.800810][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 442.816716][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.851746][ T5783] Bluetooth: Unexpected continuation frame (len 53) [ 443.546066][ T8532] loop4: detected capacity change from 0 to 2048 [ 443.591829][ T8532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.404610][ T8538] loop3: detected capacity change from 0 to 128 [ 444.638571][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 444.835261][ T297] bio_check_eod: 24 callbacks suppressed [ 444.835347][ T297] kworker/u4:5: attempt to access beyond end of device [ 444.835347][ T297] loop3: rw=1, sector=138, nr_sectors = 112 limit=128 [ 444.856688][ T5783] Bluetooth: hci0: command tx timeout [ 446.071832][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.081013][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.090112][ T8521] bridge_slave_0: entered allmulticast mode [ 446.100451][ T8521] bridge_slave_0: entered promiscuous mode [ 446.111261][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.118759][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.126015][ T8521] bridge_slave_1: entered allmulticast mode [ 447.024155][ T5783] Bluetooth: hci0: command tx timeout [ 447.037649][ T8521] bridge_slave_1: entered promiscuous mode [ 447.123110][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.145263][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.186104][ T8521] team0: Port device team_slave_0 added [ 447.187773][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 447.201982][ T8521] team0: Port device team_slave_1 added [ 447.243135][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.251315][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.280671][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.295451][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.302755][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.331936][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.388918][ T8521] hsr_slave_0: entered promiscuous mode [ 447.401228][ T8521] hsr_slave_1: entered promiscuous mode [ 447.407094][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 447.415540][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 447.426732][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.434348][ T8521] Cannot create hsr debugfs directory [ 447.442946][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.456714][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.475030][ T8] usb 4-1: Product: syz [ 447.485158][ T8] usb 4-1: Manufacturer: syz [ 447.495290][ T8] usb 4-1: SerialNumber: syz [ 447.508941][ T8] usb 4-1: config 0 descriptor?? [ 447.521651][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.618879][ T8] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 447.981204][ T8521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.012274][ T8521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 448.041753][ T8521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.096132][ T8521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 448.177179][ T8] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 448.391886][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.441059][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.464386][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.471627][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.514638][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.521953][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.612790][ T8] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.636995][ T8] em28xx 4-1:0.0: board has no eeprom [ 449.086595][ T8] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 449.098396][ T5783] Bluetooth: hci0: command tx timeout [ 449.151018][ T8] em28xx 4-1:0.0: dvb set to bulk mode. [ 449.180728][ T5830] em28xx 4-1:0.0: Binding DVB extension [ 449.375272][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.590933][ T8570] loop4: detected capacity change from 0 to 64 [ 449.648340][ T5783] Bluetooth: Unexpected continuation frame (len 53) [ 450.060034][ T8549] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 450.172752][ T5860] usb 4-1: USB disconnect, device number 20 [ 450.196618][ T5860] em28xx 4-1:0.0: Disconnecting em28xx [ 450.236429][ T5784] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 450.249101][ T5830] em28xx 4-1:0.0: Registering input extension [ 450.288099][ T5860] em28xx 4-1:0.0: Closing input extension [ 450.348421][ T8521] veth0_vlan: entered promiscuous mode [ 450.369257][ T8521] veth1_vlan: entered promiscuous mode [ 450.405085][ T5860] em28xx 4-1:0.0: Freeing device [ 450.468641][ T5784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.495481][ T8521] veth0_macvtap: entered promiscuous mode [ 450.501967][ T5784] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 450.520987][ T8521] veth1_macvtap: entered promiscuous mode [ 450.526865][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.569354][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.579424][ T5784] usb 5-1: config 0 descriptor?? [ 450.595687][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.600115][ T5784] pwc: Askey VC010 type 2 USB webcam detected. [ 450.622010][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.641687][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.659907][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.675153][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.692241][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.704802][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.731595][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.791091][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.811925][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.824098][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.840135][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.853415][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.887546][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.924668][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.959629][ T8521] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.984182][ T8521] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.992440][ T5784] pwc: recv_control_msg error -32 req 02 val 2b00 [ 451.008020][ T5784] pwc: recv_control_msg error -32 req 02 val 2700 [ 451.017724][ T8521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.034669][ T8521] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.056720][ T5784] pwc: recv_control_msg error -32 req 02 val 2c00 [ 451.177664][ T5783] Bluetooth: hci0: command tx timeout [ 451.268908][ T5784] pwc: recv_control_msg error -71 req 04 val 1300 [ 451.296562][ T5784] pwc: recv_control_msg error -71 req 04 val 1400 [ 451.320888][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.324359][ T5784] pwc: recv_control_msg error -71 req 02 val 2000 [ 451.359921][ T5784] pwc: recv_control_msg error -71 req 02 val 2100 [ 451.366479][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.413060][ T5784] pwc: recv_control_msg error -71 req 04 val 1500 [ 451.436925][ T5784] pwc: recv_control_msg error -71 req 02 val 2500 [ 451.454600][ T5784] pwc: recv_control_msg error -71 req 02 val 2400 [ 451.474755][ T5784] pwc: recv_control_msg error -71 req 02 val 2600 [ 451.484006][ T5784] pwc: recv_control_msg error -71 req 02 val 2900 [ 451.491116][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.516307][ T5784] pwc: recv_control_msg error -71 req 02 val 2800 [ 451.531335][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.548012][ T5784] pwc: recv_control_msg error -71 req 04 val 1100 [ 451.616552][ T5784] pwc: recv_control_msg error -71 req 04 val 1200 [ 451.639440][ T5784] pwc: Registered as video103. [ 451.658295][ T5784] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 451.731488][ T5784] usb 5-1: USB disconnect, device number 13 [ 451.971736][ T8594] loop1: detected capacity change from 0 to 2048 [ 452.114127][ T8594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.984330][ T8603] FAULT_INJECTION: forcing a failure. [ 453.984330][ T8603] name failslab, interval 1, probability 0, space 0, times 0 [ 454.088744][ T8603] CPU: 1 PID: 8603 Comm: syz.5.737 Not tainted syzkaller #0 [ 454.096118][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 454.106320][ T8603] Call Trace: [ 454.109656][ T8603] [ 454.112808][ T8603] dump_stack_lvl+0x18c/0x250 [ 454.117562][ T8603] ? show_regs_print_info+0x20/0x20 [ 454.122824][ T8603] ? load_image+0x420/0x420 [ 454.127387][ T8603] ? __lock_acquire+0x7d80/0x7d80 [ 454.132483][ T8603] should_fail_ex+0x394/0x4c0 [ 454.137222][ T8603] should_failslab+0x9/0x20 [ 454.141789][ T8603] slab_pre_alloc_hook+0x59/0x300 [ 454.146879][ T8603] ? __lock_acquire+0x7d80/0x7d80 [ 454.151987][ T8603] kmem_cache_alloc+0x5a/0x2c0 [ 454.156835][ T8603] ? alloc_empty_file+0x9e/0x1d0 [ 454.161828][ T8603] alloc_empty_file+0x9e/0x1d0 [ 454.166649][ T8603] path_openat+0x120/0x3270 [ 454.171217][ T8603] ? __kernel_text_address+0xd/0x30 [ 454.176491][ T8603] ? mark_lock+0x94/0x320 [ 454.180878][ T8603] ? do_filp_open+0x430/0x430 [ 454.185611][ T8603] ? verify_lock_unused+0x140/0x140 [ 454.190889][ T8603] ? __lock_acquire+0x1262/0x7d80 [ 454.196052][ T8603] do_filp_open+0x1f2/0x430 [ 454.200622][ T8603] ? vfs_tmpfile+0x620/0x620 [ 454.205312][ T8603] ? lock_repin_lock+0x3b0/0x3b0 [ 454.210324][ T8603] ? lock_chain_count+0x20/0x20 [ 454.215240][ T8603] ? do_open_execat+0xaa/0x400 [ 454.220072][ T8603] do_open_execat+0x14c/0x400 [ 454.224821][ T8603] ? open_exec+0x60/0x60 [ 454.229123][ T8603] ? prepare_creds+0x43b/0x5d0 [ 454.233949][ T8603] ? do_raw_spin_unlock+0x121/0x230 [ 454.239239][ T8603] bprm_execve+0x570/0x1730 [ 454.243816][ T8603] ? get_arg_page+0x3d3/0x560 [ 454.248552][ T8603] ? bprm_execve+0x23f/0x1730 [ 454.253292][ T8603] ? up_write+0x1be/0x410 [ 454.257667][ T8603] ? alloc_bprm+0x9a0/0x9a0 [ 454.262182][ T8603] ? put_arg_page+0xea/0x260 [ 454.266806][ T8603] ? copy_string_kernel+0x1e9/0x220 [ 454.272076][ T8603] do_execveat_common+0x501/0x6b0 [ 454.277181][ T8603] __x64_sys_execveat+0xc4/0xe0 [ 454.282102][ T8603] do_syscall_64+0x55/0xb0 [ 454.286578][ T8603] ? clear_bhb_loop+0x40/0x90 [ 454.291323][ T8603] ? clear_bhb_loop+0x40/0x90 [ 454.296100][ T8603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.302053][ T8603] RIP: 0033:0x7f43abb9e159 [ 454.306539][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.326200][ T8603] RSP: 002b:00007f43acb10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 454.334674][ T8603] RAX: ffffffffffffffda RBX: 00007f43abe25fa0 RCX: 00007f43abb9e159 [ 454.342705][ T8603] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 454.350735][ T8603] RBP: 00007f43abc3506b R08: 0000000000001000 R09: 0000000000000000 [ 454.358761][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.366788][ T8603] R13: 00007f43abe26038 R14: 00007f43abe25fa0 R15: 00007ffe220a8c48 [ 454.374817][ T8603] [ 457.227326][ T57] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 457.465761][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 457.538619][ T57] usb 4-1: device descriptor read/all, error -71 [ 457.905771][ T8622] loop3: detected capacity change from 0 to 2048 [ 458.044708][ T8622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.930121][ T8624] fuse: Bad value for 'group_id' [ 459.607616][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 459.826815][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 459.890769][ T23] usb 4-1: config 91 has an invalid interface number: 231 but max is 0 [ 459.982310][ T23] usb 4-1: config 91 has no interface number 0 [ 460.075074][ T23] usb 4-1: config 91 interface 231 has no altsetting 0 [ 460.214136][ T23] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 460.348512][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.452112][ T23] usb 4-1: Product: syz [ 460.500011][ T23] usb 4-1: Manufacturer: syz [ 460.551988][ T23] usb 4-1: SerialNumber: syz [ 460.893714][ T23] ums-cypress 4-1:91.231: USB Mass Storage device detected [ 461.000054][ T23] usb 4-1: USB disconnect, device number 23 [ 467.224654][ T23] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 467.448264][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 467.472679][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 467.511325][ T23] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 467.531003][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.559296][ T23] usb 5-1: Product: syz [ 467.570560][ T23] usb 5-1: Manufacturer: syz [ 467.575225][ T23] usb 5-1: SerialNumber: syz [ 467.621561][ T23] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 467.666651][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 467.700924][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 467.751225][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 467.812251][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 467.874852][ T23] usb 5-1: USB disconnect, device number 14 [ 467.945618][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 468.001402][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 468.204220][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 468.496184][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 468.644173][ T23] keyspan 5-1:1.0: device disconnected [ 469.026785][ T8689] binder: 8687:8689 unknown command 1074553619 [ 469.033150][ T8689] binder: 8687:8689 ioctl c0306201 200000000140 returned -22 [ 474.920612][ T8711] loop5: detected capacity change from 0 to 64 [ 475.032723][ T5783] Bluetooth: Fragment is too long (len 53, expected 9) [ 475.116538][ T5830] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 475.308135][ T5830] usb 2-1: not running at top speed; connect to a high speed hub [ 475.323358][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 475.365311][ T5830] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 475.384417][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.406590][ T5830] usb 2-1: Product: syz [ 475.426746][ T5830] usb 2-1: Manufacturer: syz [ 475.443701][ T5830] usb 2-1: SerialNumber: syz [ 475.459643][ T5830] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 475.517675][ T5830] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 475.533397][ T5830] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 475.550197][ T5830] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 475.564224][ T5830] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 475.883364][ T5830] usb 2-1: USB disconnect, device number 10 [ 475.907301][ T5830] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 475.968098][ T5830] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 476.019084][ T5830] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 476.061324][ T5830] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 476.099479][ T5830] keyspan 2-1:1.0: device disconnected [ 478.473012][ T8733] loop5: detected capacity change from 0 to 512 [ 478.643623][ T8733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 478.685924][ T8735] loop4: detected capacity change from 0 to 512 [ 478.723448][ T8733] System zones: 1-12 [ 478.750704][ T8733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.779: missing EA_INODE flag [ 478.832068][ T8735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 478.882379][ T8733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.779: error while reading EA inode 12 err=-117 [ 478.938853][ T8735] System zones: 1-12 [ 478.970488][ T8735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.781: missing EA_INODE flag [ 478.999197][ T8733] EXT4-fs (loop5): 1 orphan inode deleted [ 478.999281][ T8735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.781: error while reading EA inode 12 err=-117 [ 479.018803][ T8733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.036539][ T8735] EXT4-fs (loop4): 1 orphan inode deleted [ 479.044439][ T8735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.136861][ T8733] overlayfs: missing 'lowerdir' [ 479.293711][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.343221][ T8521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.463816][ T8746] loop3: detected capacity change from 0 to 256 [ 479.496587][ T8746] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 479.559427][ T28] audit: type=1800 audit(1789573671.571:25): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.782" name="file1" dev="loop3" ino=1048614 res=0 errno=0 [ 480.069148][ T8748] loop1: detected capacity change from 0 to 2048 [ 480.123941][ T8748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.317195][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.787'. [ 484.463608][ T8771] loop1: detected capacity change from 0 to 512 [ 484.543277][ T8774] loop5: detected capacity change from 0 to 512 [ 484.550023][ T8771] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 484.640312][ T8774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 484.666801][ T8771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.792: bg 0: block 104: invalid block bitmap [ 484.682371][ T8774] System zones: 1-12 [ 484.712505][ T8774] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.793: missing EA_INODE flag [ 484.772106][ T8771] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 484.799285][ T8774] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.793: error while reading EA inode 12 err=-117 [ 484.827753][ T8771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.792: invalid indirect mapped block 1 (level 1) [ 484.851499][ T8774] EXT4-fs (loop5): 1 orphan inode deleted [ 484.868144][ T8774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.894125][ T8771] EXT4-fs (loop1): 1 truncate cleaned up [ 484.912406][ T8771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.125448][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.154371][ T8521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.586932][ T8783] loop1: detected capacity change from 0 to 2048 [ 485.761429][ T8783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.475086][ T8810] autofs4:pid:8810:autofs_fill_super: called with bogus options [ 489.570706][ T8814] Bluetooth: MGMT ver 1.22 [ 491.716456][ T8814] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 493.653771][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.815'. [ 496.306578][ T8856] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 500.065183][ T8898] binder: 8896:8898 unknown command 1074553619 [ 500.071653][ T8898] binder: 8896:8898 ioctl c0306201 200000000140 returned -22 [ 501.751852][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.758648][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.207268][ T8908] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 504.453727][ T8919] loop4: detected capacity change from 0 to 2048 [ 504.588121][ T8919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.536654][ T5766] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 507.752039][ T5766] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 507.785476][ T5766] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 507.826006][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.852894][ T5766] usb 4-1: Product: syz [ 507.874007][ T5766] usb 4-1: Manufacturer: syz [ 507.897312][ T5766] usb 4-1: SerialNumber: syz [ 507.941680][ T5766] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 508.012658][ T5766] dvb-usb: bulk message failed: -22 (3/0) [ 508.097166][ T5766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.108159][ T5766] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 508.118785][ T5766] usb 4-1: media controller created [ 508.300766][ T8938] dvb-usb: bulk message failed: -22 (11/0) [ 508.673684][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.036038][ T8939] xt_hashlimit: max too large, truncated to 1048576 [ 512.100935][ T5766] DVB: Unable to find symbol mt352_attach() [ 512.922658][ T5766] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 512.967303][ T5766] dvb-usb: bulk message failed: -22 (3/0) [ 513.006717][ T5766] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 513.106664][ T5766] usb 4-1: USB disconnect, device number 24 [ 513.265894][ T5766] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 518.449245][ T8975] binder: 8969:8975 ioctl 40046205 0 returned -22 [ 518.576548][ T5821] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 518.798323][ T5821] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 518.830032][ T5821] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 518.852583][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.876695][ T5821] usb 4-1: Product: syz [ 518.885162][ T5821] usb 4-1: Manufacturer: syz [ 518.899679][ T5821] usb 4-1: SerialNumber: syz [ 518.934388][ T5821] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 518.963009][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 519.048803][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.062008][ T5821] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 519.078615][ T5821] usb 4-1: media controller created [ 519.102362][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.508266][ T5821] DVB: Unable to find symbol mt352_attach() [ 520.514267][ T5821] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 520.600705][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 522.244538][ T5821] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 522.280652][ T5821] usb 4-1: USB disconnect, device number 25 [ 522.339704][ T5821] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 522.450260][ T8993] ptp ptp0: delete virtual clock ptp8 [ 522.532308][ T8993] ptp ptp0: delete virtual clock ptp7 [ 522.582562][ T8993] ptp ptp0: delete virtual clock ptp6 [ 522.630291][ T8993] ptp ptp0: delete virtual clock ptp5 [ 522.673226][ T8993] ptp ptp0: delete virtual clock ptp4 [ 522.725479][ T8993] ptp ptp0: only physical clock in use now [ 522.757084][ T9000] failed to create ptp aux_worker -4 [ 525.006813][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 526.397305][ T9017] loop1: detected capacity change from 0 to 256 [ 526.478771][ T9017] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 526.495161][ T28] audit: type=1800 audit(1789573718.541:26): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.865" name="file1" dev="loop1" ino=1048615 res=0 errno=0 [ 529.387620][ T5821] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 529.632059][ T5821] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 530.518658][ T5821] usb 2-1: string descriptor 0 read error: -71 [ 530.524953][ T5821] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 530.576981][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.602971][ T5821] usb 2-1: can't set config #54, error -71 [ 530.617319][ T5821] usb 2-1: USB disconnect, device number 11 [ 530.646395][ T5830] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 530.892469][ T5830] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 530.929930][ T5830] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 531.242185][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.636561][ T5830] usb 5-1: Product: syz [ 531.640812][ T5830] usb 5-1: Manufacturer: syz [ 531.645454][ T5830] usb 5-1: SerialNumber: syz [ 532.725158][ T5830] usb 5-1: can't set config #54, error -71 [ 532.758146][ T5830] usb 5-1: USB disconnect, device number 15 [ 536.786444][ T5830] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 537.003893][ T5830] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 537.067126][ T5830] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 537.076248][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.126629][ T5830] usb 2-1: Product: syz [ 537.130965][ T5830] usb 2-1: Manufacturer: syz [ 537.135598][ T5830] usb 2-1: SerialNumber: syz [ 537.163393][ T5830] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 537.196440][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 537.247808][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 537.296996][ T5830] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 537.305303][ T5830] usb 2-1: media controller created [ 538.866134][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.028753][ T5830] DVB: Unable to find symbol mt352_attach() [ 539.034743][ T5830] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 539.106445][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 539.136411][ T5830] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 539.187700][ T5830] usb 2-1: USB disconnect, device number 12 [ 539.295358][ T5830] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 539.665196][ T9077] ptp ptp0: only physical clock in use now [ 540.372031][ T9077] ptp ptp0: new virtual clock ptp4 [ 540.406532][ T9077] failed to create ptp aux_worker -4 [ 546.009188][ T9109] netlink: 52 bytes leftover after parsing attributes in process `syz.3.894'. [ 551.227913][ T9144] loop5: detected capacity change from 0 to 256 [ 552.627630][ T9145] ptp ptp0: only physical clock in use now [ 552.709774][ T9145] ptp ptp0: new virtual clock ptp5 [ 552.731040][ T9144] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 552.760464][ T9145] ptp ptp0: new virtual clock ptp6 [ 552.781661][ T9145] ptp ptp0: new virtual clock ptp7 [ 554.591829][ T9145] ptp ptp0: new virtual clock ptp8 [ 554.620410][ T9145] failed to create ptp aux_worker -4 [ 554.875422][ T5783] Bluetooth: Frame is too long (len 16, expected len 4) [ 554.886411][ T8580] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 555.084009][ T8580] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 555.110639][ T8580] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 555.966668][ T8580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.974752][ T8580] usb 6-1: Product: syz [ 555.982046][ T8580] usb 6-1: Manufacturer: syz [ 555.987086][ T8580] usb 6-1: SerialNumber: syz [ 556.081537][ T8580] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 556.152205][ T8580] dvb-usb: bulk message failed: -22 (3/0) [ 556.250644][ T8580] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 556.326170][ T8580] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 556.464963][ T9172] dvb-usb: bulk message failed: -22 (11/0) [ 557.844939][ T8580] usb 6-1: media controller created [ 558.732752][ T8580] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.849334][ T8580] DVB: Unable to find symbol mt352_attach() [ 558.855324][ T8580] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 558.895831][ T8580] dvb-usb: bulk message failed: -22 (3/0) [ 558.946410][ T8580] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 560.502430][ T8580] usb 6-1: USB disconnect, device number 2 [ 562.257662][ T8580] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 563.198431][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.204841][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.719830][ T9198] syz.4.920 uses obsolete (PF_INET,SOCK_PACKET) [ 565.136812][ T7737] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 565.147448][ T7737] ref_tracker: syz_tun@ffff8880602b85b8 has 1/2 users at [ 565.147448][ T7737] netdev_get_by_index+0x79/0xa0 [ 565.147448][ T7737] fib6_nh_init+0x1ff/0x1fe0 [ 565.147448][ T7737] ip6_route_info_create+0x96c/0x1260 [ 565.147448][ T7737] addrconf_f6i_alloc+0x1fa/0x440 [ 565.147448][ T7737] ipv6_add_addr+0x5a4/0x10d0 [ 565.147448][ T7737] inet6_addr_add+0x563/0xb30 [ 565.147448][ T7737] inet6_rtm_newaddr+0x6fd/0x9d0 [ 565.147448][ T7737] rtnetlink_rcv_msg+0x843/0xf90 [ 565.147448][ T7737] netlink_rcv_skb+0x235/0x4c0 [ 565.147448][ T7737] netlink_unicast+0x7b1/0x930 [ 565.147448][ T7737] netlink_sendmsg+0x8d0/0xbf0 [ 565.147448][ T7737] __sys_sendto+0x4a9/0x6b0 [ 565.147448][ T7737] __x64_sys_sendto+0xde/0xf0 [ 565.147448][ T7737] do_syscall_64+0x55/0xb0 [ 565.147448][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.147448][ T7737] [ 565.233156][ T7737] ref_tracker: syz_tun@ffff8880602b85b8 has 1/2 users at [ 565.233156][ T7737] ipv6_add_dev+0x407/0x11f0 [ 565.233156][ T7737] addrconf_notify+0x67b/0x1010 [ 565.233156][ T7737] notifier_call_chain+0x18f/0x380 [ 565.233156][ T7737] register_netdevice+0x1670/0x1ba0 [ 565.233156][ T7737] tun_set_iff+0x82b/0xea0 [ 565.233156][ T7737] __tun_chr_ioctl+0x7e0/0x2070 [ 565.233156][ T7737] __se_sys_ioctl+0xfd/0x170 [ 565.233156][ T7737] do_syscall_64+0x55/0xb0 [ 565.233156][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.233156][ T7737] [ 567.236411][ T5860] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 567.430468][ T5860] usb 4-1: not running at top speed; connect to a high speed hub [ 567.459089][ T5860] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 567.477824][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.485937][ T5860] usb 4-1: Product: syz [ 567.493219][ T5860] usb 4-1: Manufacturer: syz [ 567.498322][ T5860] usb 4-1: SerialNumber: syz [ 567.519020][ T5860] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 567.560679][ T5860] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 567.719807][ C0] usb 4-1: malformed indat packet [ 567.740696][ T5860] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 567.761830][ T5860] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 567.793104][ T5860] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 567.954368][ T5860] usb 4-1: USB disconnect, device number 26 [ 567.969087][ T5860] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 567.994167][ T5860] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 568.015668][ T5860] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 568.034032][ T5860] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 568.100672][ T5860] keyspan 4-1:1.0: device disconnected