last executing test programs: 1m20.962556835s ago: executing program 2 (id=220): syz_open_dev$usbfs(0x0, 0x76, 0x101341) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000540)=0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e1e, 0x0, @local, 0x300}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.147396653s ago: executing program 2 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 1m19.775443496s ago: executing program 2 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1e94c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r4 = socket$kcm(0x29, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xa748a1016cff1f1b, 0xdd1, 0x7, 0xb, 0x800, 0x0, 0x0, 0x182, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x28, {0x8, 0xffffffff, 0x0, {0x5, 0x5, 0x7, 0x8, 0xa, 0xffffffffffffff0c, 0x9, 0x35741060, 0x9, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2404c851) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r6}) close_range(r3, 0xffffffffffffffff, 0x0) 1m18.889627966s ago: executing program 2 (id=226): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x80078b, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noload}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gg54ru4/5fGffnzb/nfXcUcymBE3B0RuyPinojYExH3RuRt74+IB1YZz+39n/TKKj9yWVn/77libmtx/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHllnHNy/+/Em7Zc39v+yRrb/sCxZxXOltGaCbmpibyDulHXD1YsS+3qXyT27OBCQRsTci9q3so3eVheknvtzfrtGd819GB+aZFr7I0pvP8p+PlvxLSfP85PRt85OjW6NeOzha7hW3+/GnS6+1W/+q8u+Aq7XGc9P2b20ymDTP186ufB2Xfv2o7T3Nf9z/0/7kjXyeub947b2JubkzYxH9ydG8vuj18VvvLetl+2z/Hz6w9PG/u3hPlv+DEZHtxA9FxMMR8UgR+6MR8VhEHFgm/+9faL+szD/Sirb/xYipJc9/N/f/lu2/8kLPye++brf+f7f9D+el4eKV/Px3B0uFk50uWgNczf8OAAAA/i/S/DvwSTpys5ymIyON7/DvibvS+szs3JPHZ945PdX4rvxg9KXlSNdAMR5an67XxpL54hMb46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W2O/8zvPVVHB6yxbUu+Ot6/7oEAFWidR08XVy+8Gk4GsFn5vTZ0rzsc/+l6xQGsP9d/6F5LHf8XWurmAmBzcv2H7uX4hy6Vflt1BECFXP+hK63md/1rWNi6McKoprBRN0peiCgL6YaIR2GNClWfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjnwAAAP//fhbpGw==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) landlock_create_ruleset(&(0x7f0000000380)={0x80, 0x3, 0x3}, 0x18, 0x3) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x57ee5876f45c597a}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m17.146203426s ago: executing program 2 (id=235): getresgid(0x0, 0x0, 0x0) (async) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4000003, 0x80000000}, 0xfffffffffffffeaf) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) 1m16.367781703s ago: executing program 2 (id=244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m16.16869779s ago: executing program 32 (id=244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11.820427293s ago: executing program 0 (id=452): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000000c0)) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@notreelog}, {@noautodefrag}, {@space_cache_v1}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x47, 0x37, 0x2d, 0x32, 0x2d, 0x6b, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r2, &(0x7f0000002440)=[{&(0x7f0000002080)=""/36, 0x24}], 0x1, 0x9f, 0x6) read$char_usb(r2, &(0x7f0000000280)=""/67, 0x43) move_mount(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000140)='./file0\x00', 0x0) 10.16822635s ago: executing program 3 (id=459): syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000100)={[{@nojoliet}, {@map_off}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {}, {@check_relaxed}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") 10.017105375s ago: executing program 3 (id=460): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x140, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x50, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x20, 0x80, "316f74ee"}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@local, 0x0, 0x8, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x200000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@empty, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x10000004}}, 0xe8) unshare(0x2c020400) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket(0x28, 0x80007, 0x200) 9.567116701s ago: executing program 0 (id=462): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(0xffffffffffffffff, 0x2c, 0x3a3, 0x8, 0x0, 0x0) sched_setscheduler(r0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x2000fb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) unshare(0x30000100) 6.585592273s ago: executing program 5 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x39, 0x21, 0x200, &(0x7f0000000140)="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"}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x4, 0x5, 0x5323d5d3, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000300)=[r6], 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r8 = dup(r4) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000240)={0x3, 0x2c5, 0x4, 0x7, 0x4, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.539468025s ago: executing program 3 (id=469): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x29463d08}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x15fa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000200)="744b746a26ed568e", &(0x7f0000000240)=""/224, &(0x7f0000000340)="cfb87975e45a13108e4520d30300d10102d95503defe620827a0eb7808fcef09a988cc920128b446075d81e88822ce81651baf8de8d644327d85222726f8650deb56d5056cc8e7080b9c855addfbaf61aba76b23fda6a9dd1e7c2362b9a1f890912a196de1abc778e2a2451dba6bd5c5090a9732418fdc864bf404089f5f09cea93c3c8e3f02e38aea88938f12f2398162d9460919a76c2cbbcd8003871fd882a0bc765424836837c576a0f8af8e26cb7c55b2f808156fdbaf84e931c1a7de6aa4ed28d7c3e0d6b5a57d02966b0d0b38a5925de3ced9a79ff32bc301516c17eb2b", &(0x7f0000000440)="73c7a1cda6a6bb83187be1689e8641404953964b1ad65a4f32cff856e5f1839709434f0799c61bbd9918234a68e11dfcfc6f9f738d48186570f70e39f20cc1049de4af965febcf6fccb3d7fd61019f55f4213c56a676e591b4b486d9f7af99080a094860fd83dbd818c817d45bc0905eab0d3d5fd43089e09ee0ab267b4a5112", 0x524, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x394, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "fedbfbcf52e21f5374044498e035f5ade364d0eed1e4b6856d712f0c22a3f82183ef3f14307be8fdb46e64f133d2d1eda5202c261b73957016c3b9c83a6145d5f95299eca9744e6cf98fa076e92d5216e272d34fede2814ed7418e3f809b3710f778331af669d1b7693a0b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x680000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x900000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x818}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1e40959840f0b1ed11814743a62336fe0080d3edceca3689e3e215"}}, @TIPC_NLA_NODE_ID={0x43, 0x3, "c8057bca19ce20c6caa126d6bcc4e6f29da842920029af248056126b893f7665030351c2389165098a92d4f22f11c8abd033e55832ab13be5b7384eea9d4b9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @mcast1, 0xc55}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe2f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6e924eeb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4001}, 0x24040840) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0xe, 0x80000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000a00)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {0x2, 0x8003}, {0x8007, 0x2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6d9}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = syz_open_dev$midi(&(0x7f0000000bc0), 0x2, 0x80000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65) r5 = syz_open_dev$evdev(&(0x7f0000000c00), 0x31d90, 0x385000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000c40)=""/171) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x4000, r5}, 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d80)=0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000dc0)=0xad2) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e40)=0x14) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000e80)=@req3={0x9e4, 0x7, 0x7, 0x200, 0x9, 0x200, 0xae5}, 0x1c) write$evdev(r5, &(0x7f0000000ec0)=[{{}, 0x16, 0xfff, 0x6}, {{0x0, 0x2710}, 0x1, 0x68, 0x1}, {{}, 0x5, 0x80, 0x7}, {{0x77359400}, 0x3, 0x8, 0x1}], 0x60) sched_setscheduler(r6, 0x0, &(0x7f0000000f40)=0x4) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000f80)=""/12) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000001000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r9 = fcntl$getown(r4, 0x9) ptrace$ARCH_SET_CPUID(0x1e, r9, 0x0, 0x1012) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000001040)) r10 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001080), 0x408001, 0x4) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r10, 0x80845663, &(0x7f00000010c0)) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xb8, r0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 6.184640167s ago: executing program 0 (id=470): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="0100002010c3"}) 6.132606158s ago: executing program 5 (id=473): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000002080)="487d5b43619cfa3217e11f16f3305344affe4355b61d1ace1ab742c8050b60e914e16e22ad69b58747915158cf12de492771172ee3f95689fb03c80e9a832464baf041e8a832a29e", 0x0, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r3, 0x8002) 6.132035139s ago: executing program 3 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x225, &(0x7f0000000540)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40541000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) writev(r4, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000300)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xd}, {0x4}}}, 0x24}}, 0x44004) sendmsg$NFT_BATCH(r5, 0x0, 0x40) 5.932216596s ago: executing program 4 (id=475): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r0, r1, 0x0) 5.931828326s ago: executing program 0 (id=476): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='sessiox0000000000000033,map=off,session=0x0000000000000058,cruft,\x00'], 0x1, 0x53d, &(0x7f0000000bc0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000000000000000000200000000070000000000000803000000000000000000000d00000000008c9d00305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, 0x0) 4.92859703s ago: executing program 4 (id=477): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xbe91210000000000) 4.811783724s ago: executing program 5 (id=478): mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x3c, 0x4, 0x5, '\x00', 0x1a}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.811183854s ago: executing program 1 (id=479): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42908}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) kexec_load(0xffffffffffffffff, 0xa, &(0x7f00000025c0)=[{&(0x7f00000003c0)="bdba918673392f9005be3a45e94f0a185169d32de273ddf21f74510c09627e095d9f6b1e48c9d0cdf6cc53ac6bbafac61bab0cba2907fea179fd0dc4879a06f9942c53d73f01eee7a8c22fdfd52c02e022a030e7209369323612090459dfcd21cbe3cf2d9d142cbe38df7bfc4faca30475477f8b0498e23b908c6c24d40643af896154c1ebcb71ac5dd2b11eef7b98d161d263a11f7686264204d8b930cdfebbb46abf59c00c037c79547de23b07aca04fc1d183cce070247428a00d96c7195011904f30c146c7e00594099d7fc1d6e8ae9635b0f6bd8767381f86d43f78753101e5", 0xe2, 0x4, 0x800000000010001}, {&(0x7f00000004c0)="6790cf48eccc8725bd377aef22c61d4958fd49e17530", 0x16, 0x8, 0x80}, {&(0x7f0000000540)="dc13a64f85c5a6c22eba5cf2624f458a32617a63b2b4c95f8eb144fff29558587b1586f599925270c1ca886ce4b78c14787cd1", 0x33, 0x81, 0xffffffffffffdf32}, {&(0x7f0000000580)="37e689dfcb744db851f4909ab35ccca926a7bf8ff36f59f9641deb828f99949220a4de07eb2242c27e4e2f29cd3b77d2fcfe5224fa3ac10252ff9e62cf8698d2ebe8a1b3341b39a56571c2ca33dee16f4500a927875d133beb611be3013b60713d4324aa75351bbc2b63afd608509d7913b0475129a841964843ae47ba725024b114d91104765103469ad4a1204f0bc0f29da5962275e304f83f2f32517f87d26704a1d5bfbd7b503fcf78d07c8d18ff985041f4313c55826f08e4e398ccfd4c93a331e7f7980ca6294f4a27b0498927a05990cbda5935", 0xd7, 0x0, 0x4}, {&(0x7f0000000680)="6828fab58fa80da2e099ca0a5f742beb89897aad1db81bcae4a3745e0b27d229854976aa362826541be4f8da970507c8ec481a115d9cc36a46f96de13f3f8719c633e00079bb776d7b8aeeaee15d62ed9baa5a988dfcbc4469da3588647fd19e775031bfc25b084b93", 0x69, 0x9, 0x21}, {&(0x7f0000000700)="a8459462fb1bff74d97737bb318bb6f2080c2cfeb22ed8759efc7c03267285c75f2fd8f7569455355b4f41d4bd4d7c47daf8cc0f9c7c5e1b965e72acc32265cc9c17fba704c26f824719e0aa6edca6b002b4f49af2ab3f93d5e37ef652a2f983fce01f3aa100", 0x66, 0x9, 0x80000001}, {&(0x7f0000000780)="c88e431474a8c6f19417cd7d12fee15d603f46af0892af52ae99ae37e9fda12f9e64a12f5e5e811e104378bf7533afe2b7d6", 0x32, 0x1000, 0x1}, {&(0x7f00000014c0)="85ea8ef2e09bb9ae112671eb825a312f8b48605dacc9f7a6a50c73ade24e9ca773d193f309e6a77877e0f30e14d0e89011e34874b0d3af6633c77d4588d1bde5acd68cd4a56a3d8900be8134b933b2e8ee827efe8049b35cd830cc435a38e048bfc7c4251c98062b2b8a851a0ff38fbb9847c1f91a7d036826683403158f58a632ce675133ae733c0e7e50cf46795b9b96354e49043711a6c8fdc8cb3e5ee22f86e631b482f0416707811791111d98f6d5521c7dd7fa8ef32b6d5e24e6acb7278a3f796da8b80fee12d5d51b5f4a08d3e783ed3f57ee85ad3c42985d6851b31e30692132e4559eb52535b292ee671b4f21b671cba5d1331e3f996083483845af3dfab76f37dbdc543fcd1fe343e6575ff9833622961283b0461ecd9b3acd82e179147000b63c95d100dace2ba99e18912a55261e5d710ea22d078901b1f469b39b70587360395c2a13507f980f6c753144b7fe5efd2ab3b33337e6a789d518abc3858785c66c92cd6d35cc90ada1324e29fe064c3ee2cbe72ba446fc888b7e7d6a7aa424e7b5275e00b464f1487f6a8e2e964d38efaafea5fbd1da581ada4311425cce0e1c959af4b9ba637111d2c1dd4a855a0a2cb9ac72f3be73209e3d1c4a25aec8bb7953fdb466b035be54bfa30ebcdf75d5bde98ccc3c8f1db0132c59a450459e839dc99a49cfa20f347563f9b8e09feb694cc4ff0c91cce6b546e2010dfb604a47af23c785c0391d5d636772e7af97f2272dfd46719311eabba35c5b8a2887c74b963fd875455eec4aad38aee042b95b200949ece88099890514a74047308ef7557dbbf32db270804876e5a34c6b7257f25b833cd5c8878c810cd79afa1bd3a9defab6d9c5daa5226902bb05a3f423e2334fbe1237dae1e3aede4a48a620bcf20f33e65b42c81eb35acd701c8f61b2ee55f8971b5b257df9edc205651665ba6bf3a22c34ff637c05948ccdc33293c05b4e58d0f1722486fdbdaaf11a80a50faa76a233e4d7fd78d983132df9b492e6a7e2387dbc241d9bb44b4ead65d5dc2331a88431259b4b8d5e63296ec8f0d99e8fa2baaf706346986d4d9258927f9e12546e5a8d2c068ea85ef7d3dfd8d66018dd21413d17f3f31f5e04091b8ffd2729059adf3cec5847692d4905ab30430d15c71f391bec15b7ddbc549b6157df4964ec3f75a8fe111e322b776c2ff761fda1599c26b0d932c613f3c880bc94e14622e28fce38d77ca2e76acf686437947e52f53ff17d6720e3a7405d36849c7eb864249970e58f1212a80c8c4df7db73fc47db4f8142888849511f654e3724b700b9254e8e54c12eaca516095a3837aacd6319681e55e068364a248f6aa47986b81b4521baeb9d5fa8f016ab5fdc40447fab5be9596d1b107c4475610e92ab632f370a8f9760dbbcd8828cfccab83b936c2a5b205382d7206c25e5783e6d7f0a4da8adac3855a32a1da9097e205436dd04f91d8128070020c501c8fc34ef2afd8528d357753ff27da428deb2c3ad294cdc9cffc2846b0928e7641a40765f508189ac9965e9d465bcb7c71232b79519387f35cd380474b58fde04e872596d3cf2c148e909c0ee369a6ce4705730f2a344783849108c14aa6b8e8ca20d2cc3ee601c459d8b7ecaf2ac7ecff1ed96e564de3813842ee35cce0fac9bae20348d3e0c01f39c580a746f3af9ca9a954af2838f2957ac81d2cb2a8ab6382722e0f533537d7642131ff71aba0d59b4264a6f486daa9b4f95e0cd2278408b9ff5f5a882610172bb8ecfb5b0e32e2f9e42d22a220c151d8c0226b3bb013ad16f4f0230cea14ed71dfe4d88823a9d72b97246019f13caa8f7057c2ac8c7b01b67b3703bd5dbecaf70bfb40cdefe989f84dc2a2da4bce42d0a0bd43163101859732d602883066f0e4483f4a90754b545c743af3e4f2a1f184f54145937ab542515a58b4a14b84bd3a328c6317b43383cfbbb5132449c0a9f692a47d7e22ab9cae87a73c0efca6d7ed3294c786df1d5bbd6a8b85d07fc75e364d7a76adfaa8a3b248d4fedc4ae422453fad6e16eec42d7121a4f2cee3cad5b90c309e4a7364ded931b51dfd4c9b10ce77bbaa947cc7120088f861789b1a573b533918617fe624eb6ebaae7ee00d2ce34bf7a6fe035214c18ecedd11b7ea8dcc13dd0583efa354e94ed7af6e222c63b6c1a57e8e268a650daca873adb9b0468403b532df0b885c1022316c087572e10cab2f01a8971b7c7c6c690b18054874899ca2dcf1c5a420e00936ed691d3f3efbca26cb0ee3b92a5563ee59cbcef30cb2f9805cbca73799bbe06b12f499dd2ccc587a9b78355545ea436f9c12719b26854cb2fc7514044013930ab7b30c9c5def7df6939558652987dab289d0ccc666c40579556a15455effb4c0708de90a90f484dab0c2797729c6ddc22682644e3105c576e8b714cf12a4a6c888c1fb084976451b23f7e141abe45c30ef5234c01fb1c738f6515d559142d35537477a5f743ff33fe843396ce533c4cd00fc5261457fc171b487f8cd1cf6c4d7a2bdd1c724535ccb2409237c4cfe3dfe0fd850c7972bd3ee5817298a1ce73babfbb8d5812477b5f336ee8fe1139e74d935f2e32f27da5aa7f1392c9fc57bdbc6e121381c643d7687fdeb34b89e051d3bd91e2a7f17ff1e35628b1290c02f4586fb43d0bc64ec97c20870667e6330e050750421445cad241b2717e3370bb111471ce9d14c9222809d80ec5eadfc9dd635d503715f7cfe9cb11cd4a6edfc6c5ddd4aba37cdbabef34019caa579a1d33ab8b5632fea8f8635ca6e2b87bbc8741f8263721711787382388e9ceaa88ede69b9fcc292950eec1ab29946937de0239b884fdc091cad52569ecfc56ea902fbde6935a71ed895b1aa79edd2ebdd2f2e18b3a95bd084a6751d3f98935c163e3e9bc7a69678b7802093eb05a76e02557ea35bfb4c6371861ee78e82c4ee4b9a95df9d2486c32ccc77b0ce64b6c4a4cc8249234815f0101273c201a5f48b4151544aa8e8991bb5e8881a8c0bdd8e8991ececbc9a0b3a9e35d9949cb3890587ae7cc7c924a4f427306891daa11408b28e85724c58ea87024107cc35c3be236fb3781a1c6f223255d62ec55d8f56807f8e05c4c39ef232a04b372567c0008dc133505aa79919ad4470a44f500cb1024f35923e4dad4f305cb6d800c1429380cd961bd3bba4e50d3da6c5368ead92a13abc11d9117d096ee0847cd2be57e1abcd05cae625591ca26fe0b2cbabf8d51acd98c7cc4ef71ea1afcd1a9c5b3c575a0593fce04f460d9a118a7bec05e6bd627ecae507249991aec22dd53bb7e2e6e909f6b1bf82ae301c83334d47dddfd02a7f9e6dfb16e4aee6376cbfb799019e23a9e8814f5a1faa87458fd3f586999ec19838263bed56ca60401935433e853f59cb87dfeaec84fac2d1ca09c7fcb3ed13126eea28b3720a36189ee66bd8b920f52c41035ea84f3c19bedcabafcd6ef04df8db8f4f0b4d973e96934cb6b348b40f2e84ab41add1c9615a9f696c87e2d2a15de088e755fb69d61221086657d0633f657015e2b341ce839cf9eaf327e925da9c7eb762f09586219f602762c76afc40adc89257be14ee58dbef113dff82fedfa839539830df90da5d2ee402d5769e5ecca0c37071b21709313602e50a86c4132289b38f53b15d2f12851ca47aa2d155e14d249f03e72c36adae4887d4fe8664d93d9249ff6eb74cb9d589dc17a34e792d7b6cd720be03777bf91729957bfd6b42d7f144f8a5e02f2dbaad139e29e5a4ffd6d3edd273df81f070ad2058e5e341bf4a3b2bd628f87c58e0a1984ab19228adb84e774d4a4536f2904fb4c08f8dc5c1ae9a26a6be4f4c2c22aebd45c1fa319f5d162837a4695d172eadd8c290c74da11b6157eba91c57973433f62010e86a4fcaa8521c0aef81067ac2d3076bd915cdfae2624badd8c0d494c610b6d61c958e1498c3c212d7dc07ce2584f21dfb6bceb38d55f6a0579e94130478fdf010c01308940b315a7cd55b017e440f9678dd845eef012db0f273b01936c4279e0781a93e5d6f3438ce9ac5e7cb9b420d440c120316360c0d561cbb2a8106efb6aa537a9413b7a31c11173d7c9125d4ecce1c01f537abce4f6fa34486856265fcc6030f4fb8308b063ff1a9a996b2fa4b8c546fe4edf8876412a1afc5bc55134fcefd4860f9cdda16357bafa6287f782adc11c71ba3556bfc208c93b247d8c66ea327ae52fde436413584dc00283546d4839269b589038f0214a9665c71dc5df1ea92c581065decd67bee11a0fc20aa0d240ad929e36bd41631082ffce69b9c38510566c1599aa177b787ad8044838fa71405611d53a41159517e6f4474e8cdb62d19e079f52b37b011a22dfd7f9c6bd0916ea09befe9f6ab209ef65367c61472c5ee5d9a419252ec448f6dab0c6ebd4d78940060915e04ba6a6dfaed4a83064e5df1c4a45ad44afa5631fbdc687089ee86529cce3c549733f67e46218f76ac633b8accd565a95de54890d9477b8ff92a0fe88cb2df0be1e8255286c64e0155cba17da18473e1efa39ac04ff85d8153a9b4a82adaaaf93c8162ff5129823022c694098d23e2c4036f639c75aadbed44c3d9e5ffaf97e68a2660633f8913b66f3c8983793da36b776e84051a037ccac2414399dd00acec86d552c4ceb33946e24c35c1c317a130a6194d33a86fb1a71b19fe22a400e7f048e0c3d3ba5c3d9a4589e8b36287459b487aa6689d1d2d377984f3de3551c1d0d44417a8d661f3afad444ae13958edfbe4e63c2709b9367f21fd8893e94ffc8d303bbd292433bbc334c9d306a899245370dc96622c10723c90f1aa1ca5520a41849288fa4500455670aaaea95b20d96daf1409417fb4659f0d1540bfe9abe6936a405908aa101b932df0abb916ea220344a072fb3a4261901ea9d7b370c7ca8fef35c045ead0ff4d380dfd2f3c4e924e054da8907bf25f572ce0e2a5fec4dfb1137312b812fb1d41ea0ac6d925b7d012fcca181a0cd63c0df1fb90e96857262adf9a0023dac658901a813e8c0ac6ce86f2cc50f27af732b161be6e0cdd667d1d2cc695d0e5f0487815ce41ac75a1e52e318e65afd3d291847ed91c4278eb9ad49d5d141cb50ef97b396417c95f3bafbeb740223949c282adbcc15f141b1cb4c21225fe5c13e044d2a782f2ff5532da9df4e7b36aa968c74b7a58df44240c4d45bcc24b05b691093fe2ce1b9a969a7d32019634b6e7c49ca13712095f354b1ad008cfa30f94e78a7a01d303ae5a2b4e398fbedfc6a3b67ed8e0a694bc19a83836cdaf1e6de874c567ee6c9b9c57cb9c058a4577bc225351892bce5089fd78932981fbcbfeb1fb78fbca687baf8b646e3d965c03fc0f8e8b066be9f3539bf4c3c1fb221c9ed05ae791d99369327dec3915de6a5a502c2847bc39df296956a5bffb1855bbb22bfd37557805c7eb30c03a808c90530b8bc1dd9d3befa4414c0d987f44a1f19528e788f0b0f85c95801c57023311623e1031d9bbcc7d0df4ca0c1826940a14f0ec830964e9f283123bcc5d6adb5f5996bbd5976ffca5a5a6f04d33237ec8cb7dc6e7031cc5531c31db69a785b0632ae812d3d882c4e69c40ec687b4186293f1b18eb6449f5720332a823470fc634e6acc8db66ac679a66ecee46a87e653cd7f40a6f89a392c3ad4d554e0ba90364113a8e5ab16669888930fe521d10a8133fbccc67a9c223ca67bbbad6e6323d8b3d4bb3179a76111b28555b61f7d88dff54be0c2b21b90717a30a3dbe0808727e1d56d141faf63ba156d9fa386c284b9eb0452", 0x1000, 0x0, 0x8}, {&(0x7f00000024c0)="548c0e637a48b4454466abbb6a000714df39f587606a903c79802b8da092c2085496ccc0e7b64f58aec41e1b4ecb64726ac43453cf478c1f44d0af91", 0x3c, 0x101, 0x4000000000008}, {&(0x7f0000002500)="347ff6088a8e98a2161304f97044dad2e4e421b48e57b64b1e4689f40586b71e5e1a5852d664e44e2d47fdff71c5f01f6dcaffb7c9c172291b85288ddab89210b44962e5f6ce55925b4910a9d0dbe0e3f6a89cc2fc8d4ad6628a7816cc1aaf40c7217c1599283b86b5e69c7db979aa43475232fdb6b942eb6ecca27716918e0e42d19acf6c5a6ef01d09ad2333d919c5924b97270a99b77875db608747af4025fabc3bcb275f4d5b780dc05dba6b9d962c74", 0xb2, 0x3, 0x6}], 0x80000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0xc, 0xaff3, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0x4, 0x1, 0x3, 0x40000000000002}], 0x8}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendto$packet(r1, &(0x7f0000000180)="87d9890d026f9d04f5cd281bccbfad52aa41cd7290c076adec4bd49043e6e62637b99402eb61e1dfdbdc136f24ec28cbb6c11cb33798a1a7085c4dffda02ba25da98eb4208d6a3b6dd48ff794aac0af06bcfb328f99f30665b305d981f45122ddb8aa4ee5b17970dd9f1c126bc0f6f9c37eabc11f8fd406101035602e76a062b82f6c00657410a9e67da2252ed6e1f4f0422cc16e1e58319e0584a5188f97718db6a5be00cde7ec7d018733f51663651fa6a491294e2bc38df8f5f8dd8a35e034eb65826f3d6ac662c32ea2b61d23fc25d150bca", 0xd4, 0x4000000, &(0x7f0000000300)={0x11, 0x1a, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 4.63218471s ago: executing program 0 (id=480): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x1ff, 0x6, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000900)={{r1}, r2, 0x2, @unused=[0xf, 0x2, 0x50a2ad1f, 0x80000001], @devid=r3}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='stack :'], 0x11) 4.563245733s ago: executing program 4 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2000080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) syz_extract_tcp_res(0x0, 0x1, 0xfa) syz_emit_ethernet(0x5a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) 4.554400843s ago: executing program 0 (id=482): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x43000c80) r1 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x12000092) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) semget$private(0x0, 0x4000, 0x0) unshare(0x5e0206c0) semget$private(0x0, 0x0, 0x40) 4.476146016s ago: executing program 5 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x6000, r6, {0x5, 0xc}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.439547337s ago: executing program 1 (id=484): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x70, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2, 0xff, 0x0, 0xe}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) 4.236703984s ago: executing program 1 (id=485): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="10be8bca0b2b2e1508a5d5c3defaad270e9fea5639f0938511db9e99d5775c26336a45e95a2c44157dc6ba783fa8010db8ad05e162b429c31ac263124dd7dad66334e70e2d6fb9fb1b8ad1324fb71903db0cfed142f9853ce4c298d66dce7af9066c719283e329c1d0e48c2cd6d15162582717aa53059320bd187c6a3f07f7d5ac602cca42505b1c5ba5a925f9ca2cb64b36a6093bf46459639a8f1002e0d3dd983549b49856eb13dadfbcdcf9cf147372a59e9d34f2d7075d8adf8ac05ff2a07312c65ea850ae895e0d37f77d", 0xcd}, {&(0x7f0000000880)="0644dc1e59e80232e82dea0946fa3c33bf832475569c75f6d91d271166ba38d8d06230298f87f756dd6cb8c75f62a6c591add104fd0b38840e1bf8abd7823789272c8f85c5fc3975153434a76bbe692d2fc6a5e0c4384d02191eb114ac88c4221b9c7cbbb122cfd9585edf9cdffe3314eb2800d0928c3c00797b51b770271441e542beeed382ace6e4b7385a6e9095632aa1ace9eb8312daa44ab495c222364a5444e71fe22706219c1d22", 0xab}, {&(0x7f0000000940)}, {&(0x7f0000000980)="ed11e03190f778df794a7856edf790ba", 0x10}], 0x4, &(0x7f0000000a00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}, @hoplimit={{0x14}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x33, 0x6, 0x1, 0xfe, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x3a, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2, 0x7, '\x00', [@ra={0x5, 0x2, 0x87e4}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0x7, [0xffffffffffffffff, 0x1b5e, 0x5, 0x9, 0x3]}}, @pad1, @pad1]}}}, @dontfrag={{0x14}}], 0x140}, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) io_uring_setup(0x4479, &(0x7f0000000100)={0x0, 0x4000bcad, 0x20, 0x3, 0x2f5}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x1158}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) fcntl$dupfd(r0, 0x406, r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) 3.104853793s ago: executing program 5 (id=486): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="10be8bca0b2b2e1508a5d5c3defaad270e9fea5639f0938511db9e99d5775c26336a45e95a2c44157dc6ba783fa8010db8ad05e162b429c31ac263124dd7dad66334e70e2d6fb9fb1b8ad1324fb71903db0cfed142f9853ce4c298d66dce7af9066c719283e329c1d0e48c2cd6d15162582717aa53059320bd187c6a3f07f7d5ac602cca42505b1c5ba5a925f9ca2cb64b36a6093bf46459639a8f1002e0d3dd983549b49856eb13dadfbcdcf9cf147372a59e9d34f2d7075d8adf8ac05ff2a07312c65ea850ae895e0d37f77d", 0xcd}, {&(0x7f0000000880)="0644dc1e59e80232e82dea0946fa3c33bf832475569c75f6d91d271166ba38d8d06230298f87f756dd6cb8c75f62a6c591add104fd0b38840e1bf8abd7823789272c8f85c5fc3975153434a76bbe692d2fc6a5e0c4384d02191eb114ac88c4221b9c7cbbb122cfd9585edf9cdffe3314eb2800d0928c3c00797b51b770271441e542beeed382ace6e4b7385a6e9095632aa1ace9eb8312daa44ab495c222364a5444e71fe22706219c1d22", 0xab}, {&(0x7f0000000940)}, {&(0x7f0000000980)="ed11e03190f778df794a7856edf790ba", 0x10}], 0x4, &(0x7f0000000a00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}, @hoplimit={{0x14}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x33, 0x6, 0x1, 0xfe, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x3a, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2, 0x7, '\x00', [@ra={0x5, 0x2, 0x87e4}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0x7, [0xffffffffffffffff, 0x1b5e, 0x5, 0x9, 0x3]}}, @pad1, @pad1]}}}, @dontfrag={{0x14}}], 0x140}, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) io_uring_setup(0x4479, &(0x7f0000000100)={0x0, 0x4000bcad, 0x20, 0x3, 0x2f5}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x1158}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) fcntl$dupfd(r0, 0x406, r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) 3.104533163s ago: executing program 4 (id=487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) 3.090902893s ago: executing program 1 (id=488): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000000)}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) 2.875388741s ago: executing program 3 (id=489): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r5, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) connect$ax25(r5, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000004000005ee4d5035086b3e40000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c000180060017"], 0x124}, 0x1, 0x0, 0x0, 0x44840}, 0x44040) 2.87496418s ago: executing program 4 (id=490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000002400010028bd7000ffdbdf25040000000600040080ff0000060003"], 0x5c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4008084) 2.739399315s ago: executing program 1 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000004380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0xffffffffffffffff, &(0x7f0000000040)=0x47) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file1\x00'}, 0x18) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000440)=[r1, r0, r1, r5]}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000002c0)=r0}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xb7f7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x94}, [@call={0x85, 0x0, 0x0, 0x2e}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @tail_call, @alu={0x7, 0x1, 0x1, 0x4, 0xb, 0x40, 0xfffffffffffffff0}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0xf, 0xb, 0x7fff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, r6, r7, r8], &(0x7f0000000400)=[{0x0, 0x1, 0x5, 0x7}, {0x1, 0x1, 0x9, 0x2}], 0x10, 0x6a8}, 0x94) 359.513727ms ago: executing program 5 (id=492): syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wg0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, 0x0, 0x26}, 0x28) r2 = open(&(0x7f0000001200)='./file0\x00', 0x105800, 0x188) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000014c0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,uid=', @ANYRESHEX=0x0, @ANYBLOB=',usrquota,iocharset=maciceland,nointegrity,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f6368617273656657fd9e213d46769900743d63703837342c00bbcbfc821aa1a219e6db1c43cb2aeddf427287a3"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f666c7573685f6d657267652c616374fe71ea677c6976655f6c6f67733d342c616c6c6f635f6d6f64653d72657573652c6e6f6c617a7974696d652c64697361626c655f726f6c6c5f666f72776172642c6e6f626172726965722c6261636b67726f756e645f67633d6f66662c6673796e635f6d6f64653d706f7369782c757365725f78617474722c646174615f666c7573682c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c00"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x145) fsync(r4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001280), 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6d60, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x6, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x60, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x40, '\x00', r0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x0, 0xc, 0x2, 0x6}, 0x10, r1, r2, 0x0, &(0x7f00000012c0)=[r3, r5], 0x0, 0x10, 0x1}, 0x94) 358.975487ms ago: executing program 4 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x120002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x28108c0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x6233, &(0x7f00000079c0)="$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") r0 = creat(&(0x7f0000000100)='./file1\x00', 0x1) write$binfmt_register(r0, &(0x7f0000000540)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, '[-', 0x3a, '\xe5^[Y[', 0x3a, './file0/file0'}, 0x34) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(r1, 0x7, &(0x7f00000001c0)={0x0, 0x8001}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0), 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 358.576748ms ago: executing program 1 (id=494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "961a58"}) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000233c0)={0x0, 0x0, &(0x7f0000023380)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x20048054) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) recvmmsg(r1, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) 0s ago: executing program 3 (id=495): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff6f, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800d0939c000000010104010000000100000002000000240001801400018008000100e0000001a6000200e00000010c0002800500010000000000100005800b000100616d613a5fe140", @ANYRES8, @ANYRESOCT, @ANYRES32=r1], 0x48}}, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x0, "4f6fb4d1af0f72b0efcdf5a284da144a011a00", 0x4, 0x1}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) r3 = socket(0x15, 0x5, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') syz_usb_connect(0x0, 0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0702030109024800010000000019046900000e0100002b4101", @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB="2b64982da3f379aa87600c702d27cb25e30dfa9830d6a75c574e1e936ff6010ddbc0d87b223820d0d6542e0e5a6f199514a3f2052a684e15"], 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ecc000/0x3000)=nil}) kernel console output (not intermixed with test programs): uch: probe of 3-1:0.85 failed with error -5 [ 116.862075][ T5152] loop0: detected capacity change from 0 to 32768 [ 116.901029][ T23] usb 3-1: USB disconnect, device number 4 [ 116.948053][ T5159] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.192: iget: bad i_size value: 38620345925642 [ 116.972182][ T5152] XFS (loop0): Mounting V5 Filesystem [ 117.037982][ T5159] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.192: couldn't read orphan inode 15 (err -117) [ 117.056499][ T5159] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 117.074230][ T5152] XFS (loop0): Ending clean mount [ 117.110752][ T5152] XFS (loop0): Quotacheck needed: Please wait. [ 117.138451][ T4229] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.156470][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.194373][ T4229] usb 4-1: config 0 descriptor?? [ 117.241588][ T4229] cp210x 4-1:0.0: cp210x converter detected [ 117.313074][ T5152] XFS (loop0): Quotacheck: Done. [ 117.499122][ T4198] XFS (loop0): Unmounting Filesystem [ 118.117189][ T5197] device syzkaller0 entered promiscuous mode [ 118.333641][ T5202] FAULT_INJECTION: forcing a failure. [ 118.333641][ T5202] name failslab, interval 1, probability 0, space 0, times 0 [ 118.367000][ T5202] CPU: 1 PID: 5202 Comm: syz.2.201 Not tainted syzkaller #0 [ 118.374358][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.384443][ T5202] Call Trace: [ 118.387749][ T5202] [ 118.390749][ T5202] dump_stack_lvl+0x188/0x250 [ 118.395460][ T5202] ? show_regs_print_info+0x20/0x20 [ 118.400689][ T5202] ? load_image+0x400/0x400 [ 118.405744][ T5202] ? __might_sleep+0xf0/0xf0 [ 118.410360][ T5202] ? __lock_acquire+0x7d10/0x7d10 [ 118.415416][ T5202] should_fail+0x38c/0x4c0 [ 118.420122][ T5202] should_failslab+0x5/0x20 [ 118.424655][ T5202] slab_pre_alloc_hook+0x51/0xc0 [ 118.429625][ T5202] ? fuse_get_req+0x449/0xad0 [ 118.434329][ T5202] kmem_cache_alloc+0x3d/0x290 [ 118.439119][ T5202] fuse_get_req+0x449/0xad0 [ 118.443652][ T5202] ? verify_lock_unused+0x140/0x140 [ 118.448885][ T5202] ? fuse_simple_request+0x1a90/0x1a90 [ 118.454493][ T5202] ? finish_lock_switch+0x12f/0x280 [ 118.459730][ T5202] ? lockdep_hardirqs_on+0x94/0x140 [ 118.464965][ T5202] ? finish_lock_switch+0x12f/0x280 [ 118.470204][ T5202] fuse_simple_request+0x257/0x1a90 [ 118.475439][ T5202] ? __lock_acquire+0x13bc/0x7d10 [ 118.480511][ T5202] ? fuse_put_request+0x2d0/0x2d0 [ 118.485606][ T5202] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 118.491111][ T5202] ? lockdep_hardirqs_off+0x70/0x100 [ 118.496569][ T5202] ? verify_lock_unused+0x140/0x140 [ 118.501889][ T5202] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 118.507819][ T5202] ? lockdep_hardirqs_on+0x94/0x140 [ 118.513065][ T5202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 118.518995][ T5202] fuse_getxattr+0x2eb/0x4a0 [ 118.523633][ T5202] ? fuse_setxattr+0x4d0/0x4d0 [ 118.528417][ T5202] ? __lock_acquire+0x13bc/0x7d10 [ 118.533512][ T5202] fuse_xattr_get+0x7c/0xa0 [ 118.538044][ T5202] ? fuse_removexattr+0x390/0x390 [ 118.543096][ T5202] __vfs_getxattr+0x395/0x3d0 [ 118.547815][ T5202] cap_inode_need_killpriv+0x41/0x60 [ 118.553160][ T5202] security_inode_need_killpriv+0x5e/0x90 [ 118.558911][ T5202] file_remove_privs+0x22f/0x5d0 [ 118.563885][ T5202] ? dentry_needs_remove_privs+0xf0/0xf0 [ 118.569560][ T5202] ? rwsem_write_trylock+0x135/0x1c0 [ 118.575213][ T5202] ? clear_nonspinnable+0x60/0x60 [ 118.580398][ T5202] __generic_file_write_iter+0x186/0x4e0 [ 118.586082][ T5202] generic_file_write_iter+0xa6/0x1b0 [ 118.591578][ T5202] fuse_file_write_iter+0x9d3/0xd90 [ 118.596916][ T5202] ? fuse_file_read_iter+0x640/0x640 [ 118.602336][ T5202] ? rcu_read_lock_any_held+0xb0/0x130 [ 118.607846][ T5202] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 118.613326][ T5202] ? end_current_label_crit_section+0x14b/0x170 [ 118.619696][ T5202] ? memset+0x1e/0x40 [ 118.623693][ T5212] FAULT_INJECTION: forcing a failure. [ 118.623693][ T5212] name failslab, interval 1, probability 0, space 0, times 0 [ 118.623718][ T5202] ? iov_iter_init+0xb4/0x170 [ 118.641506][ T5202] vfs_write+0x745/0xd60 [ 118.645799][ T5202] ? file_end_write+0x250/0x250 [ 118.650688][ T5202] ? __fget_files+0x40f/0x480 [ 118.655411][ T5202] ? __fdget_pos+0x1e2/0x370 [ 118.660038][ T5202] ? ksys_write+0x71/0x260 [ 118.664477][ T5202] ksys_write+0x152/0x260 [ 118.668873][ T5202] ? __ia32_sys_read+0x80/0x80 [ 118.673669][ T5202] ? lockdep_hardirqs_on+0x94/0x140 [ 118.679173][ T5202] do_syscall_64+0x4c/0xa0 [ 118.683781][ T5202] ? clear_bhb_loop+0x30/0x80 [ 118.688673][ T5202] ? clear_bhb_loop+0x30/0x80 [ 118.693373][ T5202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.699294][ T5202] RIP: 0033:0x7f7e338c8819 [ 118.703760][ T5202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.723483][ T5202] RSP: 002b:00007f7e31b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.731927][ T5202] RAX: ffffffffffffffda RBX: 00007f7e33b41fa0 RCX: 00007f7e338c8819 [ 118.740017][ T5202] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 118.748012][ T5202] RBP: 00007f7e31b22090 R08: 0000000000000000 R09: 0000000000000000 [ 118.756233][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.764313][ T5202] R13: 00007f7e33b42038 R14: 00007f7e33b41fa0 R15: 00007ffc87e52c88 [ 118.772335][ T5202] [ 118.782740][ T5212] CPU: 0 PID: 5212 Comm: syz.0.195 Not tainted syzkaller #0 [ 118.790175][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.800266][ T5212] Call Trace: [ 118.803571][ T5212] [ 118.806516][ T5212] dump_stack_lvl+0x188/0x250 [ 118.811230][ T5212] ? show_regs_print_info+0x20/0x20 [ 118.816578][ T5212] ? load_image+0x400/0x400 [ 118.821132][ T5212] ? __might_sleep+0xf0/0xf0 [ 118.825760][ T5212] ? __lock_acquire+0x7d10/0x7d10 [ 118.830830][ T5212] should_fail+0x38c/0x4c0 [ 118.835281][ T5212] should_failslab+0x5/0x20 [ 118.839893][ T5212] slab_pre_alloc_hook+0x51/0xc0 [ 118.844856][ T5212] ? io_submit_one+0x12c/0x1380 [ 118.849729][ T5212] kmem_cache_alloc+0x3d/0x290 [ 118.854515][ T5212] io_submit_one+0x12c/0x1380 [ 118.859367][ T5212] ? lookup_ioctx+0x5f0/0x5f0 [ 118.864067][ T5212] ? __might_fault+0xb7/0x110 [ 118.868888][ T5212] ? __might_fault+0xb3/0x110 [ 118.873587][ T5212] __se_sys_io_submit+0x19d/0x310 [ 118.878633][ T5212] ? __x64_sys_io_submit+0x80/0x80 [ 118.883779][ T5212] ? vtime_user_exit+0x2c8/0x3e0 [ 118.888745][ T5212] ? lockdep_hardirqs_on+0x94/0x140 [ 118.893963][ T5212] do_syscall_64+0x4c/0xa0 [ 118.899310][ T5212] ? clear_bhb_loop+0x30/0x80 [ 118.904033][ T5212] ? clear_bhb_loop+0x30/0x80 [ 118.908746][ T5212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.914699][ T5212] RIP: 0033:0x7f3800527819 [ 118.919137][ T5212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.938764][ T5212] RSP: 002b:00007f37fe781028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 118.947298][ T5212] RAX: ffffffffffffffda RBX: 00007f38007a0fa0 RCX: 00007f3800527819 [ 118.955285][ T5212] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 00007f380077a000 [ 118.963271][ T5212] RBP: 00007f37fe781090 R08: 0000000000000000 R09: 0000000000000000 [ 118.971266][ T5212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.979426][ T5212] R13: 00007f38007a1038 R14: 00007f38007a0fa0 R15: 00007ffc5077dd48 [ 118.987437][ T5212] [ 119.077870][ T1107] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.325761][ T5215] FAULT_INJECTION: forcing a failure. [ 119.325761][ T5215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.327795][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 119.376810][ T4229] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 119.425097][ T4229] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 119.443625][ T4229] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 119.464739][ T4229] usb 4-1: cp210x converter now attached to ttyUSB0 [ 119.477853][ T1107] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.508610][ T1107] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.509968][ T4229] usb 4-1: USB disconnect, device number 4 [ 119.521970][ T26] audit: type=1326 audit(1775261698.131:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c204ce819 code=0x0 [ 119.547937][ T5215] CPU: 1 PID: 5215 Comm: syz.0.205 Not tainted syzkaller #0 [ 119.555269][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.565360][ T5215] Call Trace: [ 119.566727][ T1107] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.568657][ T5215] [ 119.568669][ T5215] dump_stack_lvl+0x188/0x250 [ 119.568700][ T5215] ? show_regs_print_info+0x20/0x20 [ 119.594712][ T5215] ? load_image+0x400/0x400 [ 119.598347][ T1107] usb 5-1: config 1 interface 0 has no altsetting 0 [ 119.599244][ T5215] ? __lock_acquire+0x7d10/0x7d10 [ 119.610859][ T5215] should_fail+0x38c/0x4c0 [ 119.615311][ T5215] _copy_from_user+0x2e/0x170 [ 119.620018][ T5215] kstrtouint_from_user+0xd3/0x220 [ 119.625249][ T5215] ? kstrtol_from_user+0x2a0/0x2a0 [ 119.630409][ T5215] proc_fail_nth_write+0x8b/0x200 [ 119.635495][ T5215] ? proc_fail_nth_read+0x220/0x220 [ 119.640742][ T5215] ? common_file_perm+0x171/0x1c0 [ 119.645808][ T5215] ? proc_fail_nth_read+0x220/0x220 [ 119.651033][ T5215] vfs_write+0x30b/0xd60 [ 119.655312][ T5215] ? file_end_write+0x250/0x250 [ 119.660197][ T5215] ? __fget_files+0x40f/0x480 [ 119.664900][ T5215] ? mutex_lock_nested+0x17/0x20 [ 119.669861][ T5215] ? __fdget_pos+0x2bf/0x370 [ 119.674478][ T5215] ? ksys_write+0x71/0x260 [ 119.678957][ T5215] ksys_write+0x152/0x260 [ 119.683316][ T5215] ? __ia32_sys_read+0x80/0x80 [ 119.688223][ T5215] ? lockdep_hardirqs_on+0x94/0x140 [ 119.693548][ T5215] do_syscall_64+0x4c/0xa0 [ 119.697985][ T5215] ? clear_bhb_loop+0x30/0x80 [ 119.702684][ T5215] ? clear_bhb_loop+0x30/0x80 [ 119.707468][ T5215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.713471][ T5215] RIP: 0033:0x7f38004e804e [ 119.717998][ T5215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.737627][ T5215] RSP: 002b:00007f37fe75ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.746162][ T5215] RAX: ffffffffffffffda RBX: 00007f37fe7606c0 RCX: 00007f38004e804e [ 119.754163][ T5215] RDX: 0000000000000001 RSI: 00007f37fe7600a0 RDI: 0000000000000003 [ 119.762178][ T5215] RBP: 00007f37fe760090 R08: 0000000000000000 R09: 0000000000000000 [ 119.770176][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.778264][ T5215] R13: 00007f38007a1128 R14: 00007f38007a1090 R15: 00007ffc5077dd48 [ 119.779154][ T1107] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 119.786306][ T5215] [ 119.809035][ T4229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.831093][ T4229] cp210x 4-1:0.0: device disconnected [ 119.839327][ T26] audit: type=1326 audit(1775261698.451:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 119.887438][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.906475][ T26] audit: type=1326 audit(1775261698.451:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 119.938531][ T1107] usb 5-1: Product: syz [ 119.947343][ T1107] usb 5-1: Manufacturer: syz [ 119.957870][ T1107] usb 5-1: SerialNumber: syz [ 119.982023][ T26] audit: type=1326 audit(1775261698.451:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.031400][ T26] audit: type=1326 audit(1775261698.481:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.055352][ T26] audit: type=1326 audit(1775261698.481:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.080894][ T26] audit: type=1326 audit(1775261698.481:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.104307][ T26] audit: type=1326 audit(1775261698.481:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.127479][ T26] audit: type=1326 audit(1775261698.481:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.150574][ T26] audit: type=1326 audit(1775261698.481:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3c204ce819 code=0x7ffc0000 [ 120.240288][ T1107] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 120.273446][ T5221] binder: 5220:5221 ioctl c0306201 0 returned -14 [ 120.884451][ T5237] 9pnet: Insufficient options for proto=fd [ 120.938270][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.308669][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.332730][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.365062][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.406953][ T7] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 121.432103][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.465831][ T5255] binder: 5254:5255 ioctl c0306201 0 returned -14 [ 121.470450][ T7] usb 4-1: config 0 descriptor?? [ 121.547826][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.612950][ T5242] loop1: detected capacity change from 0 to 32768 [ 121.641805][ T23] usb 5-1: USB disconnect, device number 9 [ 121.817815][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 121.824546][ T5242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.216 (5242) [ 122.019153][ T5230] loop3: detected capacity change from 0 to 256 [ 122.225501][ T23] usblp0: removed [ 122.307902][ T4229] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 122.321718][ T5242] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.332224][ T5230] FAT-fs (loop3): Directory bread(block 64) failed [ 122.351569][ T5230] FAT-fs (loop3): Directory bread(block 65) failed [ 122.361774][ T5230] FAT-fs (loop3): Directory bread(block 66) failed [ 122.371076][ T5230] FAT-fs (loop3): Directory bread(block 67) failed [ 122.386732][ T5230] FAT-fs (loop3): Directory bread(block 68) failed [ 122.396398][ T5230] FAT-fs (loop3): Directory bread(block 69) failed [ 122.407252][ T5230] FAT-fs (loop3): Directory bread(block 70) failed [ 122.422197][ T5242] BTRFS info (device loop1): force clearing of disk cache [ 122.435403][ T5230] FAT-fs (loop3): Directory bread(block 71) failed [ 122.442668][ T5242] BTRFS info (device loop1): force zlib compression, level 3 [ 122.457904][ T5230] FAT-fs (loop3): Directory bread(block 72) failed [ 122.483803][ T5230] FAT-fs (loop3): Directory bread(block 73) failed [ 122.490694][ T4229] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 122.506641][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.525825][ T5242] BTRFS info (device loop1): enabling auto defrag [ 122.545507][ T4229] usb 1-1: Product: syz [ 122.556907][ T4229] usb 1-1: Manufacturer: syz [ 122.563301][ T5242] BTRFS info (device loop1): max_inline at 0 [ 122.574835][ T4229] usb 1-1: SerialNumber: syz [ 122.581190][ T5242] BTRFS info (device loop1): enabling disk space caching [ 122.596433][ T4229] usb 1-1: config 0 descriptor?? [ 122.603379][ T5242] BTRFS info (device loop1): disk space caching is enabled [ 122.621659][ T5242] BTRFS info (device loop1): has skinny extents [ 122.661994][ T7] belkin 0003:1020:0006.0004: item fetching failed at offset 0/3 [ 122.668561][ T4229] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 122.670823][ T7] belkin 0003:1020:0006.0004: parse failed [ 122.683829][ T7] belkin: probe of 0003:1020:0006.0004 failed with error -22 [ 122.700799][ T4229] usb 1-1: setting power ON [ 122.706489][ T4229] dvb-usb: bulk message failed: -22 (2/0) [ 122.722617][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.768200][ T4229] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 122.787801][ T4229] usb 1-1: media controller created [ 122.974789][ T5245] dvb-usb: bulk message failed: -22 (3/0) [ 123.002124][ T5230] udc-core: couldn't find an available UDC or it's busy [ 123.014783][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.035207][ T5245] cxusb: i2c rd: len=147 is too big! [ 123.035207][ T5245] [ 123.068238][ T5230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.369847][ T4229] usb 1-1: selecting invalid altsetting 6 [ 123.375817][ T4229] usb 1-1: digital interface selection failed (-22) [ 123.457345][ T4229] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 123.471784][ T5282] dvb-usb: bulk message failed: -22 (12/0) [ 123.524635][ T4225] usb 4-1: USB disconnect, device number 5 [ 123.568707][ T4229] usb 1-1: setting power OFF [ 123.629990][ T4229] dvb-usb: bulk message failed: -22 (2/0) [ 123.630063][ T4229] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 123.630078][ T4229] (NULL device *): no alternate interface [ 123.718838][ T5242] BTRFS info (device loop1): enabling ssd optimizations [ 123.729285][ T5242] BTRFS info (device loop1): clearing free space tree [ 123.729852][ T5242] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.729947][ T5242] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.748640][ T4229] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 123.780778][ T4229] usb 1-1: USB disconnect, device number 6 [ 124.015093][ T5308] loop2: detected capacity change from 0 to 512 [ 124.029637][ T5303] loop3: detected capacity change from 0 to 40427 [ 124.108378][ T5308] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.135409][ T5242] FAULT_INJECTION: forcing a failure. [ 124.135409][ T5242] name failslab, interval 1, probability 0, space 0, times 0 [ 124.163024][ T5242] CPU: 0 PID: 5242 Comm: syz.1.216 Not tainted syzkaller #0 [ 124.170368][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.180625][ T5242] Call Trace: [ 124.183931][ T5242] [ 124.186883][ T5242] dump_stack_lvl+0x188/0x250 [ 124.191590][ T5242] ? show_regs_print_info+0x20/0x20 [ 124.196825][ T5242] ? load_image+0x400/0x400 [ 124.201350][ T5242] ? __might_sleep+0xf0/0xf0 [ 124.205954][ T5242] ? __lock_acquire+0x7d10/0x7d10 [ 124.210998][ T5242] should_fail+0x38c/0x4c0 [ 124.215442][ T5242] should_failslab+0x5/0x20 [ 124.219969][ T5242] slab_pre_alloc_hook+0x51/0xc0 [ 124.224934][ T5242] kmem_cache_alloc_trace+0x47/0x2a0 [ 124.230247][ T5242] ? __se_sys_mount+0x157/0x3d0 [ 124.231627][ T5308] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.226: ea_inode file size=4 entry size=6 [ 124.235143][ T5242] __se_sys_mount+0x157/0x3d0 [ 124.235178][ T5242] ? __x64_sys_mount+0xc0/0xc0 [ 124.235202][ T5242] ? lockdep_hardirqs_on+0x94/0x140 [ 124.235226][ T5242] ? __x64_sys_mount+0x1c/0xc0 [ 124.235247][ T5242] do_syscall_64+0x4c/0xa0 [ 124.271986][ T5242] ? clear_bhb_loop+0x30/0x80 [ 124.276799][ T5242] ? clear_bhb_loop+0x30/0x80 [ 124.281509][ T5242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.287450][ T5242] RIP: 0033:0x7fe94b8e7a8a [ 124.291896][ T5242] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.293923][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 124.311610][ T5242] RSP: 002b:00007fe949b3fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.311644][ T5242] RAX: ffffffffffffffda RBX: 00007fe949b3fee0 RCX: 00007fe94b8e7a8a [ 124.311659][ T5242] RDX: 00002000000003c0 RSI: 0000200000000340 RDI: 0000000000000000 [ 124.311672][ T5242] RBP: 00002000000003c0 R08: 00007fe949b3fee0 R09: 000000000126a4b5 [ 124.311686][ T5242] R10: 000000000126a4b5 R11: 0000000000000246 R12: 0000200000000340 [ 124.311699][ T5242] R13: 00007fe949b3fea0 R14: 0000000000000000 R15: 0000200000001600 [ 124.344235][ T5308] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.344834][ T5242] [ 124.368441][ T5308] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.226: corrupted inode contents [ 124.369769][ T5303] F2FS-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 124.413555][ T4229] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.422220][ T5311] device veth3 entered promiscuous mode [ 124.451901][ T5308] EXT4-fs (loop2): Remounting filesystem read-only [ 124.475661][ T5303] 9pnet: Could not find request transport: Td [ 124.477766][ T5308] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #15: comm syz.2.226: mark_inode_dirty error [ 124.530652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 124.567383][ T5308] EXT4-fs (loop2): Remounting filesystem read-only [ 124.578428][ T5308] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.226: corrupted inode contents [ 124.601633][ T5314] binder: 5313:5314 ioctl c0306201 0 returned -14 [ 124.646960][ T5308] EXT4-fs (loop2): Remounting filesystem read-only [ 124.663603][ T5308] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2952: inode #15: comm syz.2.226: mark_inode_dirty error [ 124.718000][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 124.723531][ T5308] EXT4-fs (loop2): Remounting filesystem read-only [ 124.732257][ T5308] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #15: comm syz.2.226: mark inode dirty (error -117) [ 124.814948][ T5308] EXT4-fs (loop2): Remounting filesystem read-only [ 124.825772][ T5308] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 124.838312][ T5308] EXT4-fs (loop2): 1 orphan inode deleted [ 124.844072][ T5308] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,auto_da_alloc=0x0000000000000004,debug_want_extra_isize=0x000000000000005c,noload,errors=remount-ro,min_batch_time=0x000000000000b656,init_itable=0x0000000000008d55,. Quota mode: none. [ 124.877445][ T4229] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.933021][ T4229] usb 1-1: config 0 has no interface number 0 [ 124.956882][ T4229] usb 1-1: config 0 interface 184 has no altsetting 0 [ 125.179521][ T4229] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.204919][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.227000][ T5333] QAT: failed to copy from user cfg_data. [ 125.253845][ T4229] usb 1-1: Product: syz [ 125.264616][ T5333] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 125.283144][ T4229] usb 1-1: Manufacturer: syz [ 125.306073][ T4229] usb 1-1: SerialNumber: syz [ 125.345110][ T4229] usb 1-1: config 0 descriptor?? [ 125.410866][ T5334] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 125.421191][ T4229] smsc75xx v1.0.0 [ 125.432191][ T4190] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 125.465092][ T4190] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag [ 125.480222][ T4190] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag [ 125.689779][ T5346] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 125.776854][ T5349] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 125.917930][ T5337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.073759][ T4229] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 126.089279][ T4229] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.295347][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.348073][ T5337] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 126.362061][ T5337] usb 4-1: config 0 has no interface number 0 [ 126.375052][ T5337] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.398480][ T5363] loop1: detected capacity change from 0 to 4096 [ 126.417757][ T5337] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.424342][ T5363] __ntfs_error: 110 callbacks suppressed [ 126.424358][ T5363] ntfs: (device loop1): parse_options(): Unrecognized mount option P…|xÓQôòDZ¨b¸sÀC¥²%0Þ¥Á)ÎñÎòMeU³ô [ 126.424358][ T5363] µžF×þ¾jÛ¾c]ø:¾ )7þÈI°. [ 126.459399][ T5363] ntfs: (device loop1): parse_options(): Unrecognized mount option wuÍB“(`´JâÍðni<¹"Ú¢ãÊêÙð+ˆwuNÖ `FâÀÛeĨ'ô7Loi±¤Å“t;ßÑBè èÕ΀Ù6ô‘E«†+. [ 126.493109][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.599873][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.610710][ T5337] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 126.629206][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.657759][ T5337] usb 4-1: Product: syz [ 126.664097][ T5337] usb 4-1: Manufacturer: syz [ 126.688980][ T5337] usb 4-1: SerialNumber: syz [ 126.716382][ T5337] usb 4-1: config 0 descriptor?? [ 126.784337][ T5337] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 126.800356][ T5337] vmk80xx: probe of 4-1:0.255 failed with error -22 [ 126.810724][ T4229] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 126.821785][ T4229] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 126.834017][ T4229] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 126.844001][ T4229] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 126.886957][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.689583][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 127.864062][ T5371] loop4: detected capacity change from 0 to 32768 [ 127.919185][ T5371] (syz.4.247,5371,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "00000000000000000006" or missing value [ 127.932002][ T5371] (syz.4.247,5371,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 127.988655][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 128.249608][ T5385] loop1: detected capacity change from 0 to 32768 [ 128.325245][ T5385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.249 (5385) [ 128.351068][ T5385] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 128.360005][ T5385] BTRFS info (device loop1): setting nodatasum [ 128.366252][ T5385] BTRFS info (device loop1): force zlib compression, level 3 [ 128.375494][ T5385] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.385096][ T5385] BTRFS info (device loop1): use lzo compression, level 0 [ 128.391608][ T4229] usb 1-1: USB disconnect, device number 7 [ 128.392331][ T5385] BTRFS info (device loop1): turning on flush-on-commit [ 128.405249][ T5385] BTRFS info (device loop1): enabling auto defrag [ 128.411799][ T5385] BTRFS info (device loop1): max_inline at 4096 [ 128.418125][ T5385] BTRFS info (device loop1): using free space tree [ 128.424809][ T5385] BTRFS info (device loop1): has skinny extents [ 128.574630][ T4230] usb 4-1: USB disconnect, device number 6 [ 128.594711][ T5417] netlink: 'syz.3.253': attribute type 8 has an invalid length. [ 128.602852][ T5417] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.253'. [ 128.643863][ T5385] BTRFS info (device loop1): enabling ssd optimizations [ 128.649326][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.755507][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.769071][ T5385] ODEBUG: Out of memory. ODEBUG disabled [ 128.831284][ T5365] device bridge_slave_0 entered promiscuous mode [ 128.907222][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.987917][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.996247][ T5365] device bridge_slave_1 entered promiscuous mode [ 129.038242][ T5385] syz.1.249 (5385): drop_caches: 2 [ 129.062675][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 129.282146][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.348161][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.748880][ T5417] loop3: detected capacity change from 0 to 32768 [ 129.803662][ T5417] resize option for remount only [ 130.690996][ T5419] loop0: detected capacity change from 0 to 32768 [ 132.135467][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 132.135957][ T5419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.252 (5419) [ 132.209015][ T5365] team0: Port device team_slave_0 added [ 132.227446][ T5419] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.242303][ T5419] BTRFS info (device loop0): turning on flush-on-commit [ 132.250102][ T5419] BTRFS info (device loop0): setting nodatacow, compression disabled [ 132.258381][ T5419] BTRFS info (device loop0): setting datasum, datacow enabled [ 132.266298][ T5419] BTRFS info (device loop0): turning off barriers [ 132.272883][ T5419] BTRFS info (device loop0): doing ref verification [ 132.320954][ T5365] team0: Port device team_slave_1 added [ 132.354779][ T5461] FAULT_INJECTION: forcing a failure. [ 132.354779][ T5461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.368023][ T5461] CPU: 0 PID: 5461 Comm: syz.1.259 Not tainted syzkaller #0 [ 132.375329][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.385471][ T5461] Call Trace: [ 132.388750][ T5461] [ 132.391686][ T5461] dump_stack_lvl+0x188/0x250 [ 132.396367][ T5461] ? show_regs_print_info+0x20/0x20 [ 132.401674][ T5461] ? load_image+0x400/0x400 [ 132.406176][ T5461] ? __lock_acquire+0x7d10/0x7d10 [ 132.411205][ T5461] should_fail+0x38c/0x4c0 [ 132.415635][ T5461] _copy_from_user+0x2e/0x170 [ 132.420498][ T5461] ___sys_recvmsg+0x173/0x5c0 [ 132.425181][ T5461] ? __sys_recvmsg+0x280/0x280 [ 132.429960][ T5461] ? __lock_acquire+0x7d10/0x7d10 [ 132.434991][ T5461] ? __might_fault+0xb3/0x110 [ 132.439673][ T5461] do_recvmmsg+0x382/0x850 [ 132.444100][ T5461] ? __sys_recvmmsg+0x290/0x290 [ 132.449040][ T5461] ? preempt_schedule_irq+0xe6/0x160 [ 132.454336][ T5461] ? lock_chain_count+0x20/0x20 [ 132.459197][ T5461] __x64_sys_recvmmsg+0x195/0x250 [ 132.464223][ T5461] ? do_recvmmsg+0x850/0x850 [ 132.468815][ T5461] ? syscall_enter_from_user_mode+0x2a/0x70 [ 132.475024][ T5461] do_syscall_64+0x4c/0xa0 [ 132.479463][ T5461] ? clear_bhb_loop+0x30/0x80 [ 132.484159][ T5461] ? clear_bhb_loop+0x30/0x80 [ 132.488851][ T5461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.494752][ T5461] RIP: 0033:0x7fe94b8e6819 [ 132.499265][ T5461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.518874][ T5461] RSP: 002b:00007fe949afe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 132.527299][ T5461] RAX: ffffffffffffffda RBX: 00007fe94bb60180 RCX: 00007fe94b8e6819 [ 132.535279][ T5461] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000005 [ 132.543265][ T5461] RBP: 00007fe949afe090 R08: 0000000000000000 R09: 0000000000000000 [ 132.551340][ T5461] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 132.559311][ T5461] R13: 00007fe94bb60218 R14: 00007fe94bb60180 R15: 00007ffc314a3bf8 [ 132.567297][ T5461] [ 132.630185][ T5419] BTRFS info (device loop0): ignoring data csums [ 132.656487][ T5419] BTRFS info (device loop0): force clearing of disk cache [ 132.854560][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.862002][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.941805][ T5419] BTRFS info (device loop0): enabling all of the rescue options [ 133.123705][ T5419] BTRFS info (device loop0): ignoring bad roots [ 133.135865][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.185838][ T5419] BTRFS info (device loop0): disabling log replay at mount time [ 133.193755][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.220416][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.270438][ T5419] BTRFS info (device loop0): turning on async discard [ 133.310749][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.327835][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.362049][ T5419] BTRFS warning (device loop0): excessive commit interval 21112 [ 133.390579][ T5419] BTRFS error (device loop0): unrecognized mount option 'fowner=000000' [ 133.438940][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.450965][ T5419] BTRFS error (device loop0): open_ctree failed: -22 [ 133.723956][ T5365] device hsr_slave_0 entered promiscuous mode [ 133.776088][ T5365] device hsr_slave_1 entered promiscuous mode [ 133.815991][ T5365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.838121][ T5365] Cannot create hsr debugfs directory [ 134.180678][ T5494] loop0: detected capacity change from 0 to 32768 [ 134.189641][ T144] device hsr_slave_0 left promiscuous mode [ 134.218024][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 134.245097][ T144] device hsr_slave_1 left promiscuous mode [ 134.261640][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.317079][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.363130][ T5494] XFS (loop0): Mounting V5 Filesystem [ 134.402319][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.427950][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.437308][ T5494] XFS (loop0): Ending clean mount [ 134.447530][ T5494] XFS (loop0): Quotacheck needed: Please wait. [ 134.465215][ T144] device bridge_slave_1 left promiscuous mode [ 134.473393][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.493713][ T144] device bridge_slave_0 left promiscuous mode [ 134.500375][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.529508][ T5494] XFS (loop0): Quotacheck: Done. [ 134.541611][ T5464] loop3: detected capacity change from 0 to 32768 [ 134.635722][ T5464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.261 (5464) [ 134.787784][ T5494] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 134.793746][ T5464] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 134.797096][ T5494] pit: kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 134.816149][ T5494] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 134.828057][ T144] device veth1_macvtap left promiscuous mode [ 134.829424][ T5494] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 134.846633][ T144] device veth0_macvtap left promiscuous mode [ 134.877962][ T5464] BTRFS info (device loop3): turning on flush-on-commit [ 134.897882][ T5464] BTRFS info (device loop3): setting nodatacow, compression disabled [ 134.906065][ T144] device veth1_vlan left promiscuous mode [ 134.917729][ T26] audit: type=1800 audit(1775261713.521:125): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.264" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 134.923396][ T144] device veth0_vlan left promiscuous mode [ 134.989173][ T5464] BTRFS info (device loop3): setting datasum, datacow enabled [ 135.008414][ T5464] BTRFS info (device loop3): turning off barriers [ 135.082034][ T5485] loop1: detected capacity change from 0 to 32768 [ 135.089041][ T5464] BTRFS info (device loop3): doing ref verification [ 135.095694][ T5464] BTRFS info (device loop3): ignoring data csums [ 135.112809][ T5464] BTRFS info (device loop3): force clearing of disk cache [ 135.124746][ T4198] XFS (loop0): Unmounting Filesystem [ 135.168151][ T5464] BTRFS info (device loop3): enabling all of the rescue options [ 135.176017][ T5464] BTRFS info (device loop3): ignoring bad roots [ 135.196593][ T5485] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.265 (5485) [ 135.220493][ T5464] BTRFS info (device loop3): disabling log replay at mount time [ 135.275156][ T5464] BTRFS info (device loop3): turning on async discard [ 135.320054][ T5464] BTRFS warning (device loop3): excessive commit interval 21112 [ 135.355670][ T5464] BTRFS error (device loop3): unrecognized mount option 'fowner=000000' [ 135.375122][ T4740] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4740) [ 135.400235][ T5512] FAULT_INJECTION: forcing a failure. [ 135.400235][ T5512] name failslab, interval 1, probability 0, space 0, times 0 [ 135.448747][ T5464] BTRFS error (device loop3): open_ctree failed: -22 [ 135.454276][ T5512] CPU: 0 PID: 5512 Comm: syz.1.270 Not tainted syzkaller #0 [ 135.462795][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.472887][ T5512] Call Trace: [ 135.476199][ T5512] [ 135.479247][ T5512] dump_stack_lvl+0x188/0x250 [ 135.483958][ T5512] ? show_regs_print_info+0x20/0x20 [ 135.489197][ T5512] ? load_image+0x400/0x400 [ 135.493757][ T5512] ? __might_sleep+0xf0/0xf0 [ 135.498453][ T5512] ? __lock_acquire+0x7d10/0x7d10 [ 135.503511][ T5512] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 135.509877][ T5512] should_fail+0x38c/0x4c0 [ 135.514331][ T5512] should_failslab+0x5/0x20 [ 135.518862][ T5512] slab_pre_alloc_hook+0x51/0xc0 [ 135.523822][ T5512] __kmalloc+0x6b/0x330 [ 135.527995][ T5512] ? tomoyo_encode+0x27e/0x540 [ 135.532870][ T5512] tomoyo_encode+0x27e/0x540 [ 135.537575][ T5512] tomoyo_realpath_from_path+0x5cd/0x610 [ 135.541718][ T5514] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 135.543265][ T5512] tomoyo_check_open_permission+0x1eb/0x410 [ 135.543296][ T5512] ? tomoyo_check_path_number_acl+0x280/0x280 [ 135.551475][ T5514] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.271'. [ 135.557494][ T5512] ? step_into+0x37b/0xd10 [ 135.566861][ T5514] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 135.572968][ T5512] ? __lock_acquire+0x7d10/0x7d10 [ 135.573008][ T5512] ? __rwlock_init+0x140/0x140 [ 135.595183][ T5512] ? hook_file_open+0xf1/0x230 [ 135.600066][ T5512] ? tomoyo_file_open+0xe9/0x170 [ 135.605015][ T5512] security_file_open+0x5e/0xa0 [ 135.609882][ T5512] do_dentry_open+0x322/0xf80 [ 135.614654][ T5512] path_openat+0x26f5/0x2fa0 [ 135.619277][ T5512] ? verify_lock_unused+0x140/0x140 [ 135.624561][ T5512] ? slab_post_alloc_hook+0x4c/0x380 [ 135.630191][ T5512] ? do_filp_open+0x410/0x410 [ 135.634870][ T5512] do_filp_open+0x1e2/0x410 [ 135.639613][ T5512] ? vfs_tmpfile+0x300/0x300 [ 135.644294][ T5512] ? _raw_spin_unlock+0x24/0x40 [ 135.649134][ T5512] ? alloc_fd+0x598/0x630 [ 135.653457][ T5512] do_sys_openat2+0x150/0x4b0 [ 135.658120][ T5512] ? __lock_acquire+0x7d10/0x7d10 [ 135.663143][ T5512] ? do_sys_open+0xe0/0xe0 [ 135.667549][ T5512] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.673520][ T5512] ? lock_chain_count+0x20/0x20 [ 135.679289][ T5512] ? vtime_user_exit+0x2c8/0x3e0 [ 135.684269][ T5512] __x64_sys_openat+0x135/0x160 [ 135.689139][ T5512] do_syscall_64+0x4c/0xa0 [ 135.693575][ T5512] ? clear_bhb_loop+0x30/0x80 [ 135.698408][ T5512] ? clear_bhb_loop+0x30/0x80 [ 135.703090][ T5512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.708992][ T5512] RIP: 0033:0x7fe94b8a704e [ 135.713441][ T5512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.733080][ T5512] RSP: 002b:00007fe949b3fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.741509][ T5512] RAX: ffffffffffffffda RBX: 00007fe949b406c0 RCX: 00007fe94b8a704e [ 135.749473][ T5512] RDX: 0000000000004081 RSI: 00007fe949b3fc00 RDI: ffffffffffffff9c [ 135.757543][ T5512] RBP: 00007fe949b3fc00 R08: 0000000000000000 R09: 0000000000000000 [ 135.765515][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 135.773495][ T5512] R13: 00007fe94bb60038 R14: 00007fe94bb5ffa0 R15: 00007ffc314a3bf8 [ 135.781498][ T5512] [ 135.808569][ T5512] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.124530][ T5518] loop1: detected capacity change from 0 to 4096 [ 136.221669][ T5521] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.298324][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 136.356406][ T144] team0 (unregistering): Port device team_slave_1 removed [ 136.430194][ T144] team0 (unregistering): Port device team_slave_0 removed [ 136.466181][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.522966][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.608097][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.622093][ T5526] loop1: detected capacity change from 0 to 8192 [ 136.640281][ T5526] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 136.654721][ T5526] REISERFS (device loop1): using ordered data mode [ 136.664642][ T5526] reiserfs: using flush barriers [ 136.673146][ T5526] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.692008][ T5526] REISERFS (device loop1): checking transaction log (loop1) [ 136.704606][ T5526] REISERFS (device loop1): Using r5 hash to sort names [ 136.715615][ T5526] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.847580][ T144] bond0 (unregistering): Released all slaves [ 136.904642][ T5516] loop4: detected capacity change from 0 to 32768 [ 136.941400][ T5516] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.272 (5516) [ 137.004255][ T5516] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 137.058897][ T5516] BTRFS info (device loop4): setting nodatasum [ 137.065213][ T5516] BTRFS info (device loop4): force zlib compression, level 3 [ 137.131958][ T5516] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 137.178050][ T5516] BTRFS info (device loop4): use lzo compression, level 0 [ 137.227714][ T21] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 137.236808][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.248165][ T5516] BTRFS info (device loop4): turning on flush-on-commit [ 137.258375][ T21] usb 4-1: Product: syz [ 137.262580][ T21] usb 4-1: Manufacturer: syz [ 137.265436][ T5516] BTRFS info (device loop4): enabling auto defrag [ 137.277401][ T21] usb 4-1: SerialNumber: syz [ 137.294364][ T5516] BTRFS info (device loop4): max_inline at 4096 [ 137.320481][ T5516] BTRFS info (device loop4): using free space tree [ 137.325971][ T21] usb 4-1: config 0 descriptor?? [ 137.363089][ T5516] BTRFS info (device loop4): has skinny extents [ 137.404803][ T5365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.416727][ T5365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.463839][ T5365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.497777][ T5338] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.508793][ T5365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.526901][ T5548] loop1: detected capacity change from 0 to 2048 [ 137.586863][ T5516] BTRFS info (device loop4): enabling ssd optimizations [ 137.609480][ T21] usb 4-1: ignoring: probably an ADSL modem [ 137.806444][ T5569] loop1: detected capacity change from 0 to 128 [ 137.852249][ T5569] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 137.862498][ T5338] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 137.889239][ T5338] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 137.933410][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.940517][ T5338] usb 1-1: config 171 has no interface number 0 [ 137.946840][ T5338] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 137.988970][ T5338] usb 1-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 138.031793][ T4740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4740) [ 138.038391][ T21] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 138.068037][ T5569] loop1: detected capacity change from 0 to 512 [ 138.176953][ T5569] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=a842c018, mo2=0000] [ 138.185199][ T5338] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 138.194450][ T5569] System zones: 0-1 [ 138.204043][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.214902][ T5569] , 18-18, 34-34 [ 138.216250][ T5338] usb 1-1: Product: syz [ 138.216256][ T5569] , 40-40 [ 138.217234][ T5569] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.225153][ T5338] usb 1-1: Manufacturer: syz [ 138.249634][ T5338] usb 1-1: SerialNumber: syz [ 138.249990][ T5523] udc-core: couldn't find an available UDC or it's busy [ 138.278129][ T5533] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.312713][ T5569] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.279: pblk 0 bad header/extent: invalid magic - magic f380, entries 1, max 4(0), depth 0(0) [ 138.330030][ T5523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 138.394222][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.418370][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.450132][ T5569] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.279: Bad quota inode: 4, type: 1 [ 138.463189][ T5523] IPVS: Error connecting to the multicast addr [ 138.508112][ T5569] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.518107][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.578484][ T5569] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 138.581424][ T5580] usb 4-1: USB disconnect, device number 7 [ 138.585214][ T5569] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nolazytime,,errors=continue. Quota mode: writeback. [ 138.605129][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.654475][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.705342][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.712529][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.845243][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.885016][ T5585] loop4: detected capacity change from 0 to 8192 [ 138.892358][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.958157][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.965295][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.006379][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.018048][ T5581] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.018342][ T5585] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 139.079724][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.109166][ T5585] REISERFS (device loop4): using ordered data mode [ 139.147258][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.169475][ T5585] reiserfs: using flush barriers [ 139.186408][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.200263][ T5585] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.229258][ T5581] usb 2-1: device descriptor read/64, error -71 [ 139.237799][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.254991][ T5585] REISERFS (device loop4): checking transaction log (loop4) [ 139.272397][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.291319][ T5585] REISERFS (device loop4): Using r5 hash to sort names [ 139.301051][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.314085][ T5585] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 139.330007][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.339976][ T5338] ath6kl: Failed to submit usb control message: -110 [ 139.347074][ T5338] ath6kl: unable to send the bmi data to the device: -110 [ 139.367957][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.374842][ T5338] ath6kl: Unable to send get target info: -110 [ 139.401387][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.445312][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.484311][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.523102][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.530501][ T5581] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.628813][ T5338] ath6kl: Failed to init ath6kl core: -110 [ 139.737892][ T5581] usb 2-1: device descriptor read/64, error -71 [ 139.833430][ T5338] ath6kl_usb: probe of 1-1:171.109 failed with error -110 [ 139.877963][ T5581] usb usb2-port1: attempt power cycle [ 140.076428][ T5618] loop3: detected capacity change from 0 to 16 [ 140.173210][ T5618] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.227582][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.253111][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.283776][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.307789][ T5581] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 140.357049][ T4258] usb 1-1: USB disconnect, device number 8 [ 140.416537][ T5625] FAULT_INJECTION: forcing a failure. [ 140.416537][ T5625] name failslab, interval 1, probability 0, space 0, times 0 [ 140.429996][ T5581] usb 2-1: device descriptor read/8, error -71 [ 140.485441][ T5625] CPU: 0 PID: 5625 Comm: syz.3.284 Not tainted syzkaller #0 [ 140.492786][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.502888][ T5625] Call Trace: [ 140.506195][ T5625] [ 140.509148][ T5625] dump_stack_lvl+0x188/0x250 [ 140.513967][ T5625] ? show_regs_print_info+0x20/0x20 [ 140.519192][ T5625] ? load_image+0x400/0x400 [ 140.523752][ T5625] ? __might_sleep+0xf0/0xf0 [ 140.528372][ T5625] ? __lock_acquire+0x7d10/0x7d10 [ 140.533431][ T5625] ? mark_lock+0x94/0x320 [ 140.537801][ T5625] should_fail+0x38c/0x4c0 [ 140.542248][ T5625] should_failslab+0x5/0x20 [ 140.546941][ T5625] slab_pre_alloc_hook+0x51/0xc0 [ 140.552002][ T5625] __kmalloc+0x6b/0x330 [ 140.556190][ T5625] ? tomoyo_realpath_from_path+0x118/0x610 [ 140.562034][ T5625] tomoyo_realpath_from_path+0x118/0x610 [ 140.567791][ T5625] tomoyo_path_number_perm+0x242/0x660 [ 140.573290][ T5625] ? verify_lock_unused+0x140/0x140 [ 140.578628][ T5625] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 140.584133][ T5625] ? ksys_write+0x1c6/0x260 [ 140.588721][ T5625] security_file_ioctl+0x6c/0xa0 [ 140.593700][ T5625] __se_sys_ioctl+0x48/0x170 [ 140.598324][ T5625] do_syscall_64+0x4c/0xa0 [ 140.602851][ T5625] ? clear_bhb_loop+0x30/0x80 [ 140.607651][ T5625] ? clear_bhb_loop+0x30/0x80 [ 140.612356][ T5625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.618369][ T5625] RIP: 0033:0x7f3c204ce819 [ 140.622851][ T5625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.642489][ T5625] RSP: 002b:00007f3c1e728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.651052][ T5625] RAX: ffffffffffffffda RBX: 00007f3c20747fa0 RCX: 00007f3c204ce819 [ 140.659179][ T5625] RDX: 0000200000000600 RSI: 0000000000008983 RDI: 0000000000000004 [ 140.667194][ T5625] RBP: 00007f3c1e728090 R08: 0000000000000000 R09: 0000000000000000 [ 140.675284][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.683416][ T5625] R13: 00007f3c20748038 R14: 00007f3c20747fa0 R15: 00007ffcbff20fb8 [ 140.691590][ T5625] [ 140.851094][ T5625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.979066][ T5581] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.237784][ T5581] usb 2-1: device not accepting address 9, error -71 [ 141.253058][ T5581] usb usb2-port1: unable to enumerate USB device [ 141.320962][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.323530][ T5614] loop4: detected capacity change from 0 to 32768 [ 141.338661][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.415101][ T5614] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 141.419029][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.465229][ T5614] BTRFS info (device loop4): setting nodatasum [ 141.468623][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.481946][ T5652] loop1: detected capacity change from 0 to 128 [ 141.497528][ T5614] BTRFS info (device loop4): force zlib compression, level 3 [ 141.518835][ T5365] device veth0_vlan entered promiscuous mode [ 141.528660][ T5614] BTRFS info (device loop4): turning on sync discard [ 141.544903][ T5614] BTRFS info (device loop4): turning on flush-on-commit [ 141.546557][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.560565][ T5614] BTRFS info (device loop4): enabling auto defrag [ 141.611372][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.613639][ T5614] BTRFS info (device loop4): max_inline at 57 [ 141.647156][ T5365] device veth1_vlan entered promiscuous mode [ 141.700125][ T5365] device veth0_macvtap entered promiscuous mode [ 141.734099][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.742075][ T5614] BTRFS info (device loop4): turning off discard [ 141.749505][ T5652] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.768023][ T5652] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.786689][ T5614] BTRFS info (device loop4): using free space tree [ 141.787458][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.829340][ T5614] BTRFS info (device loop4): has skinny extents [ 141.871022][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.900427][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.935501][ T5652] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 141.948299][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.989064][ T5365] device veth1_macvtap entered promiscuous mode [ 142.037185][ T5649] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.289'. [ 142.080202][ T4875] BTRFS warning (device loop4): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x4e1ca9ef level 0 [ 142.105904][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.126863][ T5641] loop3: detected capacity change from 0 to 32768 [ 142.133931][ T4258] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.170912][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.171161][ T5614] BTRFS warning (device loop4): couldn't read tree root [ 142.227880][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.288435][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.307747][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.327767][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.353237][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.378119][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.405286][ T4258] usb 1-1: Using ep0 maxpacket: 32 [ 142.414321][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.440174][ T5614] BTRFS error (device loop4): open_ctree failed: -22 [ 142.447030][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.455966][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.480515][ T5641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.288 (5641) [ 142.543407][ T5641] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.546976][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.552659][ T4258] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 142.567562][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.600335][ T5641] BTRFS info (device loop3): force clearing of disk cache [ 142.614319][ T5641] BTRFS info (device loop3): force zlib compression, level 3 [ 142.622064][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.651579][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.652493][ T5641] BTRFS info (device loop3): enabling auto defrag [ 142.679848][ T4258] usb 1-1: config 0 descriptor?? [ 142.699109][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.712952][ T5641] BTRFS info (device loop3): max_inline at 0 [ 142.726918][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4176) [ 142.728079][ T5641] BTRFS info (device loop3): enabling disk space caching [ 142.744826][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.777888][ T5641] BTRFS info (device loop3): disk space caching is enabled [ 142.791742][ T5688] netlink: 104 bytes leftover after parsing attributes in process `syz.4.292'. [ 142.793742][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.834666][ T5641] BTRFS info (device loop3): has skinny extents [ 142.867768][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.908029][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.908341][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.909720][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.920857][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.921567][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.951583][ T5365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.951676][ T5365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.951706][ T5365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.951736][ T5365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.168619][ T4258] usb 1-1: string descriptor 0 read error: -32 [ 143.196352][ T4258] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 143.203949][ T5641] BTRFS info (device loop3): enabling ssd optimizations [ 143.231748][ T5641] BTRFS info (device loop3): clearing free space tree [ 143.254091][ T5641] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.303025][ T4875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.321096][ T5641] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.337771][ T4875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.380034][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.458196][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.501945][ T5661] loop0: detected capacity change from 0 to 4096 [ 143.539046][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.567603][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.579490][ T5661] ntfs3: Unknown parameter 'Y÷Ì:î»ÐÚSN?9?VIëw<¡ÖR¬ýC\ðüFØm“xœöÔ [ 143.579490][ T5661] éœ [ 143.579490][ T5661] ¶g`ÂŽÆçÿ´½»CîìI' [ 143.777851][ T4258] gspca_vc032x: reg_r err -110 [ 143.783058][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.803072][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.833470][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.867833][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.061508][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.067456][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.078750][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.084091][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.107294][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.113203][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.118857][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.124178][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.788855][ T5740] loop1: detected capacity change from 0 to 512 [ 144.859281][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.864624][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.870297][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.875609][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.881320][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.886662][ T4258] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.892503][ T4258] gspca_vc032x: Unknown sensor... [ 144.898127][ T4258] vc032x: probe of 1-1:0.0 failed with error -22 [ 144.980031][ T5583] usb 1-1: USB disconnect, device number 9 [ 145.240428][ T5740] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 145.296928][ T5740] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.392635][ T5740] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 145.418222][ T5740] EXT4-fs (loop1): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,grpquota,user_xattr,grpjquota=,data_err=ignore,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 145.438244][ T5757] loop0: detected capacity change from 0 to 256 [ 145.536427][ T5757] FAT-fs (loop0): Directory bread(block 64) failed [ 145.572079][ T5757] FAT-fs (loop0): Directory bread(block 65) failed [ 145.582273][ T5757] FAT-fs (loop0): Directory bread(block 66) failed [ 145.598851][ T5762] loop3: detected capacity change from 0 to 512 [ 145.605299][ T5757] FAT-fs (loop0): Directory bread(block 67) failed [ 145.668254][ T5765] FAULT_INJECTION: forcing a failure. [ 145.668254][ T5765] name failslab, interval 1, probability 0, space 0, times 0 [ 145.683115][ T5765] CPU: 0 PID: 5765 Comm: syz.4.304 Not tainted syzkaller #0 [ 145.690465][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.700637][ T5765] Call Trace: [ 145.703926][ T5765] [ 145.706858][ T5765] dump_stack_lvl+0x188/0x250 [ 145.711724][ T5765] ? show_regs_print_info+0x20/0x20 [ 145.716938][ T5765] ? load_image+0x400/0x400 [ 145.721449][ T5765] ? __lock_acquire+0x7d10/0x7d10 [ 145.726480][ T5765] should_fail+0x38c/0x4c0 [ 145.731008][ T5765] should_failslab+0x5/0x20 [ 145.735530][ T5765] slab_pre_alloc_hook+0x51/0xc0 [ 145.740537][ T5765] __kmalloc_node+0x6e/0x3b0 [ 145.745135][ T5765] ? kvmalloc_node+0x84/0x130 [ 145.749816][ T5765] kvmalloc_node+0x84/0x130 [ 145.754325][ T5765] __nf_hook_entries_try_shrink+0x322/0x720 [ 145.760423][ T5765] __nf_unregister_net_hook+0x465/0x620 [ 145.766006][ T5765] nf_unregister_net_hooks+0xc7/0x130 [ 145.771403][ T5765] ip_vs_unregister_hooks+0xb8/0x110 [ 145.776711][ T5765] ip_vs_unlink_service+0x40d/0xa30 [ 145.781926][ T5765] ip_vs_flush+0x169/0x1b0 [ 145.786349][ T5765] do_ip_vs_set_ctl+0x464/0x9f0 [ 145.791210][ T5765] ? local_bh_enable+0x20/0x20 [ 145.795996][ T5765] ? mutex_unlock+0x10/0x10 [ 145.800556][ T5765] ? __local_bh_enable_ip+0x136/0x1c0 [ 145.806053][ T5765] ? lockdep_hardirqs_on+0x94/0x140 [ 145.811259][ T5765] ? __local_bh_enable_ip+0x136/0x1c0 [ 145.816818][ T5765] nf_setsockopt+0x25f/0x280 [ 145.821431][ T5765] ip_setsockopt+0x207d/0x3130 [ 145.826213][ T5765] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 145.831585][ T5765] ? aa_sk_perm+0x7dc/0x910 [ 145.836096][ T5765] ? aa_af_perm+0x340/0x340 [ 145.840601][ T5765] ? __fget_files+0x40f/0x480 [ 145.845289][ T5765] ? aa_sock_opt_perm+0x74/0x100 [ 145.850231][ T5765] ? sctp_setsockopt+0xd8/0xf80 [ 145.855084][ T5765] ? sock_common_recvmsg+0x1c0/0x1c0 [ 145.860388][ T5765] __sys_setsockopt+0x2bf/0x3d0 [ 145.865276][ T5765] __x64_sys_setsockopt+0xb1/0xc0 [ 145.870321][ T5765] do_syscall_64+0x4c/0xa0 [ 145.874765][ T5765] ? clear_bhb_loop+0x30/0x80 [ 145.879477][ T5765] ? clear_bhb_loop+0x30/0x80 [ 145.884168][ T5765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.890266][ T5765] RIP: 0033:0x7fbcc3136819 [ 145.894703][ T5765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.914317][ T5765] RSP: 002b:00007fbcc134e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.922745][ T5765] RAX: ffffffffffffffda RBX: 00007fbcc33b0180 RCX: 00007fbcc3136819 [ 145.930719][ T5765] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 145.938863][ T5765] RBP: 00007fbcc134e090 R08: 0000000000000000 R09: 0000000000000000 [ 145.946831][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.954981][ T5765] R13: 00007fbcc33b0218 R14: 00007fbcc33b0180 R15: 00007ffd24896b58 [ 145.962966][ T5765] [ 146.060497][ T5757] FAT-fs (loop0): Directory bread(block 68) failed [ 146.104441][ T5762] EXT4-fs (loop3): Ignoring removed oldalloc option [ 146.184310][ T5762] EXT4-fs (loop3): 1 truncate cleaned up [ 146.200851][ T5757] FAT-fs (loop0): Directory bread(block 69) failed [ 146.238468][ T5762] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nombcache,sysvgroups,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 146.277480][ T5757] FAT-fs (loop0): Directory bread(block 70) failed [ 146.324871][ T5757] FAT-fs (loop0): Directory bread(block 71) failed [ 146.341636][ T5757] FAT-fs (loop0): Directory bread(block 72) failed [ 146.348354][ T5757] FAT-fs (loop0): Directory bread(block 73) failed [ 146.727802][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.759833][ T5783] device gre1 entered promiscuous mode [ 147.008710][ T5789] ALSA: mixer_oss: invalid OSS volume '' [ 147.737771][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 147.858006][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.906632][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.937145][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.997867][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 148.027795][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.065385][ T21] usb 5-1: config 0 descriptor?? [ 148.158540][ T5799] loop0: detected capacity change from 0 to 4096 [ 148.501304][ T5799] netlink: 'syz.0.312': attribute type 17 has an invalid length. [ 148.509400][ T5799] netlink: 148 bytes leftover after parsing attributes in process `syz.0.312'. [ 148.628995][ T4198] ntfs3: loop0: ino=5, "/" directory corrupted [ 148.671759][ T4198] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 148.703755][ T4198] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 148.731051][ T21] hid-generic 0003:045E:FC40.0005: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.4-1/input0 [ 148.791952][ T5794] loop3: detected capacity change from 0 to 32768 [ 149.025533][ T5794] XFS (loop3): Mounting V5 Filesystem [ 149.101467][ T5846] tipc: Started in network mode [ 149.145137][ T5846] tipc: Node identity 5eae0acdcc0c, cluster identity 4711 [ 149.145446][ T5794] XFS (loop3): Ending clean mount [ 149.173329][ T5846] tipc: Enabled bearer , priority 0 [ 149.174578][ T5794] XFS (loop3): Quotacheck needed: Please wait. [ 149.201486][ T5774] loop4: detected capacity change from 0 to 4096 [ 149.277273][ T5794] XFS (loop3): Quotacheck: Done. [ 149.289697][ T5853] device syzkaller0 entered promiscuous mode [ 149.424337][ T5845] tipc: Resetting bearer [ 149.483483][ T5774] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.496537][ T5845] tipc: Disabling bearer [ 149.508466][ T5774] ntfs3: loop4: Failed to load $MFT. [ 150.037242][ T4258] usb 5-1: USB disconnect, device number 10 [ 150.092901][ T5855] ALSA: mixer_oss: invalid OSS volume '' [ 150.130358][ T5794] dccp_invalid_packet: P.Data Offset(172) too large [ 150.358965][ T4185] XFS (loop3): Unmounting Filesystem [ 150.606852][ T5860] loop1: detected capacity change from 0 to 32768 [ 150.616882][ T5877] loop5: detected capacity change from 0 to 8 [ 150.912905][ T5875] loop4: detected capacity change from 0 to 32768 [ 151.118092][ T5877] squashfs image failed sanity check [ 151.176562][ T5860] JBD2: Ignoring recovery information on journal [ 151.285037][ T5875] XFS (loop4): Mounting V5 Filesystem [ 151.559601][ T5875] XFS (loop4): Ending clean mount [ 151.579047][ T5875] XFS (loop4): Quotacheck needed: Please wait. [ 151.597262][ T5860] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.825189][ T5875] XFS (loop4): Quotacheck: Done. [ 151.973087][ T4194] XFS (loop4): Unmounting Filesystem [ 152.270372][ T26] audit: type=1800 audit(1775261730.881:126): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.321" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 152.485800][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 152.515376][ T5868] loop0: detected capacity change from 0 to 32768 [ 152.666102][ T5868] JBD2: Ignoring recovery information on journal [ 152.704111][ T5906] loop3: detected capacity change from 0 to 1024 [ 152.809317][ T5868] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 153.061834][ T5913] tipc: Started in network mode [ 153.081856][ T5913] tipc: Node identity ce2d313881f6, cluster identity 4711 [ 153.101687][ T26] audit: type=1800 audit(1775261731.711:127): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.323" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 153.136225][ T5913] tipc: Enabled bearer , priority 0 [ 153.192653][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 153.795814][ T5911] ALSA: mixer_oss: invalid OSS volume '' [ 153.919554][ T5917] netlink: get zone limit has 8 unknown bytes [ 153.962902][ T5919] tipc: Disabling bearer [ 154.018953][ T4198] ocfs2: Unmounting device (7,0) on (node local) [ 154.271334][ T5931] loop5: detected capacity change from 0 to 164 [ 154.331098][ T5933] FAULT_INJECTION: forcing a failure. [ 154.331098][ T5933] name failslab, interval 1, probability 0, space 0, times 0 [ 154.408436][ T5933] CPU: 0 PID: 5933 Comm: syz.1.339 Not tainted syzkaller #0 [ 154.415784][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.425868][ T5933] Call Trace: [ 154.429174][ T5933] [ 154.432126][ T5933] dump_stack_lvl+0x188/0x250 [ 154.436831][ T5933] ? show_regs_print_info+0x20/0x20 [ 154.442059][ T5933] ? load_image+0x400/0x400 [ 154.446564][ T5933] ? __might_sleep+0xf0/0xf0 [ 154.451153][ T5933] ? __lock_acquire+0x7d10/0x7d10 [ 154.456196][ T5933] should_fail+0x38c/0x4c0 [ 154.460612][ T5933] should_failslab+0x5/0x20 [ 154.465121][ T5933] slab_pre_alloc_hook+0x51/0xc0 [ 154.470050][ T5933] ? shmem_match+0x160/0x160 [ 154.474811][ T5933] ? shmem_alloc_inode+0x16/0x30 [ 154.479839][ T5933] kmem_cache_alloc+0x3d/0x290 [ 154.484595][ T5933] ? shmem_match+0x160/0x160 [ 154.489174][ T5933] shmem_alloc_inode+0x16/0x30 [ 154.493928][ T5933] new_inode_pseudo+0x5f/0x210 [ 154.498683][ T5933] new_inode+0x25/0x1c0 [ 154.502943][ T5933] shmem_get_inode+0x334/0xa90 [ 154.507711][ T5933] ? _raw_spin_unlock+0x24/0x40 [ 154.512573][ T5933] __shmem_file_setup+0x10b/0x290 [ 154.517591][ T5933] ? shmem_file_setup+0x13/0x30 [ 154.522430][ T5933] __se_sys_memfd_create+0x290/0x450 [ 154.527715][ T5933] ? __x64_sys_memfd_create+0x60/0x60 [ 154.533100][ T5933] ? lockdep_hardirqs_on+0x94/0x140 [ 154.538303][ T5933] do_syscall_64+0x4c/0xa0 [ 154.542706][ T5933] ? clear_bhb_loop+0x30/0x80 [ 154.547459][ T5933] ? clear_bhb_loop+0x30/0x80 [ 154.552135][ T5933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.558015][ T5933] RIP: 0033:0x7fe94b8e6819 [ 154.562419][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.582201][ T5933] RSP: 002b:00007fe949b3fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 154.590965][ T5933] RAX: ffffffffffffffda RBX: 000000000000559e RCX: 00007fe94b8e6819 [ 154.598939][ T5933] RDX: 00007fe949b3fee0 RSI: 0000000000000000 RDI: 00007fe94b97ce71 [ 154.606933][ T5933] RBP: 00002000000103c0 R08: 00000000ffffffff R09: 0000000000000000 [ 154.614906][ T5933] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000015c0 [ 154.622876][ T5933] R13: 00007fe949b3fee0 R14: 00007fe949b3fea0 R15: 00002000000003c0 [ 154.630955][ T5933] [ 154.709985][ T5935] loop0: detected capacity change from 0 to 1024 [ 154.872883][ T144] hfsplus: b-tree write err: -5, ino 25 [ 154.882066][ T144] hfsplus: b-tree write err: -5, ino 4 [ 154.886482][ T5937] hub 8-0:1.0: USB hub found [ 154.897353][ T5937] hub 8-0:1.0: 1 port detected [ 154.906339][ T144] hfsplus: b-tree write err: -5, ino 2 [ 154.945314][ T4396] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.186200][ T5942] kvm: pic: non byte write [ 155.197814][ T5944] loop0: detected capacity change from 0 to 2048 [ 155.209332][ T4396] usb 6-1: Using ep0 maxpacket: 32 [ 155.313316][ T5944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.367958][ T4396] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.399092][ T4396] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.775723][ T5952] loop1: detected capacity change from 0 to 32768 [ 155.928177][ T5952] XFS (loop1): Mounting V5 Filesystem [ 156.146289][ T5952] XFS (loop1): Ending clean mount [ 156.160586][ T26] audit: type=1800 audit(1775261734.771:128): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 156.207885][ T4396] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 156.302215][ T4396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.402181][ T4396] usb 6-1: Product: syz [ 156.452494][ T4396] usb 6-1: Manufacturer: syz [ 156.490156][ T4396] usb 6-1: SerialNumber: syz [ 156.570250][ T26] audit: type=1800 audit(1775261735.181:129): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.342" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 156.613913][ T4184] XFS (loop1): Unmounting Filesystem [ 156.904269][ T4396] snd-ua101 6-1:1.1: sample format descriptor not found [ 157.043872][ T4396] snd-ua101 6-1:1.0: invalid num_altsetting [ 157.722762][ T5971] ALSA: mixer_oss: invalid OSS volume '' [ 158.009214][ T4396] usb 6-1: USB disconnect, device number 2 [ 158.140353][ T4325] failed to send hello msg [ 158.145096][ T4325] failed while handling packet from 1:60042 [ 158.157013][ T5995] loop5: detected capacity change from 0 to 1024 [ 158.292469][ T5985] loop0: detected capacity change from 0 to 4096 [ 158.442728][ T5985] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 158.565642][ T6003] loop1: detected capacity change from 0 to 2048 [ 158.592600][ T5437] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 158.642564][ T6003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.885634][ T5990] loop4: detected capacity change from 0 to 32768 [ 158.912601][ T5990] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.352 (5990) [ 158.972884][ T5990] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 158.983047][ T5990] BTRFS info (device loop4): force zlib compression, level 3 [ 158.995054][ T5990] BTRFS info (device loop4): force clearing of disk cache [ 159.014227][ T4258] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.029389][ T5990] BTRFS info (device loop4): setting nodatasum [ 159.045578][ T5990] BTRFS info (device loop4): allowing degraded mounts [ 159.079109][ T5990] BTRFS info (device loop4): enabling disk space caching [ 159.097980][ T5437] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 159.134871][ T5437] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 159.157941][ T5990] BTRFS info (device loop4): disk space caching is enabled [ 159.177795][ T5437] usb 6-1: Product: syz [ 159.182029][ T5437] usb 6-1: SerialNumber: syz [ 159.187576][ T5990] BTRFS info (device loop4): has skinny extents [ 159.195285][ T5437] usb 6-1: config 0 descriptor?? [ 159.377809][ T26] audit: type=1326 audit(1775261737.891:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3800527819 code=0x0 [ 159.419773][ T5437] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 159.446105][ T5437] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 159.541428][ T6031] loop0: detected capacity change from 0 to 4096 [ 160.250760][ T5437] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 160.271250][ T6031] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 160.287153][ T6031] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 160.471000][ T6058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.551028][ T5990] BTRFS info (device loop4): clearing free space tree [ 160.574729][ T5990] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.585491][ T6054] loop3: detected capacity change from 0 to 40427 [ 160.608036][ T5990] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.620036][ T6058] loop0: detected capacity change from 0 to 1024 [ 160.631048][ T4258] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.638979][ T6054] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 160.646711][ T6054] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 160.661186][ T6054] F2FS-fs (loop3): invalid crc value [ 160.679919][ T6054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 160.750985][ T6058] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 160.761868][ T6054] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 160.776058][ T6054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 160.784845][ T4258] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.805510][ T4258] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.820354][ T6054] attempt to access beyond end of device [ 160.820354][ T6054] loop3: rw=2051, want=45056, limit=40427 [ 160.833506][ T6054] attempt to access beyond end of device [ 160.833506][ T6054] loop3: rw=2051, want=131072, limit=40427 [ 160.844768][ T5990] BTRFS info (device loop4): balance: start -susage=8589934849,limit=1 [ 160.945273][ T6054] F2FS-fs (loop3): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 160.945323][ T6054] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 161.008227][ T4258] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 161.073873][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.096998][ T5990] BTRFS info (device loop4): relocating block group 1048576 flags system [ 161.111977][ T4258] usb 2-1: Product: syz [ 161.122294][ T4258] usb 2-1: Manufacturer: syz [ 161.136347][ T4258] usb 2-1: SerialNumber: syz [ 161.143754][ T4396] usb 6-1: USB disconnect, device number 3 [ 161.252282][ T5990] BTRFS info (device loop4): balance: ended with status: 0 [ 161.651310][ T6078] block device autoloading is deprecated and will be removed. [ 162.263622][ T4258] usb 2-1: 0:1 : does not exist [ 162.268655][ T4258] usb 2-1: unit 1 not found! [ 162.300048][ T4258] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 162.398986][ T6083] netlink: 260 bytes leftover after parsing attributes in process `syz.5.364'. [ 162.436614][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.609784][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.634756][ T4258] usb 2-1: USB disconnect, device number 10 [ 163.025786][ T6100] loop4: detected capacity change from 0 to 8 [ 163.512129][ T6100] SQUASHFS error: xz decompression failed, data probably corrupt [ 163.557820][ T6100] SQUASHFS error: Failed to read block 0x108: -5 [ 163.587629][ T6100] SQUASHFS error: Unable to read metadata cache entry [106] [ 163.655418][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.667783][ T6100] SQUASHFS error: Unable to read inode 0x11f [ 163.697879][ T5437] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 163.846625][ T6111] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 164.150180][ T6114] loop3: detected capacity change from 0 to 1024 [ 164.790692][ T6114] EXT4-fs (loop3): Ignoring removed orlov option [ 164.931522][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 164.974679][ T6114] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 165.055939][ T4298] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 165.424212][ T6123] loop1: detected capacity change from 0 to 1024 [ 165.483921][ T6128] device syzkaller0 entered promiscuous mode [ 165.487923][ T4298] usb 5-1: Using ep0 maxpacket: 32 [ 165.497496][ T6125] tipc: Started in network mode [ 165.506093][ T6128] 0: reclassify loop, rule prio 0, protocol 800 [ 165.513953][ T6125] tipc: Node identity 2a14b86763de, cluster identity 4711 [ 165.533043][ T6125] tipc: Enabled bearer , priority 0 [ 165.557906][ T6123] EXT4-fs (loop1): Ignoring removed orlov option [ 165.593542][ T6133] device syzkaller0 entered promiscuous mode [ 165.616895][ T6123] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000085,orlov,. Quota mode: writeback. [ 165.627218][ T6125] tipc: Resetting bearer [ 165.677973][ T4298] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.706409][ T6124] tipc: Resetting bearer [ 165.722642][ T6124] tipc: Disabling bearer [ 165.786607][ T4298] usb 5-1: config 240 has no interfaces? [ 165.831520][ T6121] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.371: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 165.858650][ T6142] loop5: detected capacity change from 0 to 128 [ 165.917532][ T6121] EXT4-fs (loop1): Remounting filesystem read-only [ 165.921307][ T6150] loop0: detected capacity change from 0 to 256 [ 165.968873][ T6142] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 165.985056][ T6121] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 165.988982][ T6142] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 166.008447][ T6150] exfat: Unknown parameter 'ÿ00000000000000000000000' [ 166.051301][ T6157] loop4: detected capacity change from 0 to 128 [ 166.077932][ T4298] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff73, bcdDevice=43.d9 [ 166.097207][ T6150] loop0: detected capacity change from 0 to 512 [ 166.097432][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.112829][ T6159] loop3: detected capacity change from 0 to 512 [ 166.141381][ T6157] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.148299][ T4298] usb 5-1: Product: 줔ⰿ棓退 [ 166.198300][ T4298] usb 5-1: can't set config #240, error -71 [ 166.203277][ T6150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.205695][ T4298] usb 5-1: USB disconnect, device number 11 [ 166.223282][ T6157] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.357896][ T6150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 166.429319][ T6150] System zones: 1-12 [ 166.454124][ T6150] EXT4-fs (loop0): 1 truncate cleaned up [ 166.477629][ T6163] loop1: detected capacity change from 0 to 4096 [ 166.526352][ T6150] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,debug,,errors=continue. Quota mode: none. [ 166.588298][ T6163] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 166.637940][ T6163] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 166.708323][ T6163] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 166.781212][ T6163] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 166.827802][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.835533][ T6163] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 166.882055][ T6163] ntfs: volume version 3.1. [ 166.911164][ T6181] loop5: detected capacity change from 0 to 1024 [ 166.927408][ T6163] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 166.972680][ T6163] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 167.004609][ T6163] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 167.040881][ T6181] EXT4-fs (loop5): Ignoring removed orlov option [ 167.047413][ T6184] EXT4-fs (loop3): Ignoring removed orlov option [ 167.087851][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 167.100379][ T6181] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 167.125751][ T6163] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 167.188309][ T6163] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 167.205738][ T6184] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 167.296273][ T6181] FAULT_INJECTION: forcing a failure. [ 167.296273][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 167.367864][ T6181] CPU: 0 PID: 6181 Comm: syz.5.383 Not tainted syzkaller #0 [ 167.375214][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.385300][ T6181] Call Trace: [ 167.388609][ T6181] [ 167.391588][ T6181] dump_stack_lvl+0x188/0x250 [ 167.396327][ T6181] ? show_regs_print_info+0x20/0x20 [ 167.401564][ T6181] ? load_image+0x400/0x400 [ 167.406104][ T6181] ? __might_sleep+0xf0/0xf0 [ 167.410723][ T6181] ? __lock_acquire+0x7d10/0x7d10 [ 167.415783][ T6181] should_fail+0x38c/0x4c0 [ 167.420239][ T6181] should_failslab+0x5/0x20 [ 167.424941][ T6181] slab_pre_alloc_hook+0x51/0xc0 [ 167.429994][ T6181] ? getname_flags+0xb5/0x500 [ 167.434697][ T6181] kmem_cache_alloc+0x3d/0x290 [ 167.439494][ T6181] getname_flags+0xb5/0x500 [ 167.444025][ T6181] user_path_at_empty+0x2a/0x190 [ 167.448992][ T6181] path_getxattr+0xad/0x200 [ 167.453532][ T6181] ? setxattr+0x390/0x390 [ 167.457891][ T6181] ? lockdep_hardirqs_on+0x94/0x140 [ 167.463124][ T6181] do_syscall_64+0x4c/0xa0 [ 167.467578][ T6181] ? clear_bhb_loop+0x30/0x80 [ 167.472286][ T6181] ? clear_bhb_loop+0x30/0x80 [ 167.477092][ T6181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.480924][ T4229] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 167.483007][ T6181] RIP: 0033:0x7fc0057af819 [ 167.496533][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.516165][ T6181] RSP: 002b:00007fc003a09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 167.520236][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.524604][ T6181] RAX: ffffffffffffffda RBX: 00007fc005a28fa0 RCX: 00007fc0057af819 [ 167.524625][ T6181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 167.524647][ T6181] RBP: 00007fc003a09090 R08: 0000000000000000 R09: 0000000000000000 [ 167.556848][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.562073][ T6198] tipc: Can't bind to reserved service type 1 [ 167.564928][ T6181] R13: 00007fc005a29038 R14: 00007fc005a28fa0 R15: 00007ffc51333b38 [ 167.564965][ T6181] [ 167.608324][ T4229] usb 5-1: Product: syz [ 167.629216][ T4229] usb 5-1: Manufacturer: syz [ 167.659365][ T4229] usb 5-1: SerialNumber: syz [ 167.964989][ T6211] tipc: Enabled bearer , priority 0 [ 167.994198][ T6211] device syzkaller0 entered promiscuous mode [ 168.043934][ T6211] tipc: Resetting bearer [ 168.074724][ T6213] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.388: bg 0: block 473: padding at end of block bitmap is not set [ 168.091836][ T6209] tipc: Resetting bearer [ 168.111489][ T6209] tipc: Disabling bearer [ 168.170022][ T6213] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 168.208896][ T6213] EXT4-fs (loop5): 1 orphan inode deleted [ 168.218900][ T6213] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.243586][ T6213] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.519860][ T4229] usb 5-1: MIDIStreaming interface descriptor not found [ 168.545209][ T4229] usb 5-1: USB disconnect, device number 12 [ 169.418246][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.520353][ T6238] set_capacity_and_notify: 2 callbacks suppressed [ 169.520371][ T6238] loop1: detected capacity change from 0 to 128 [ 169.667350][ T6244] device syzkaller0 entered promiscuous mode [ 169.679532][ T6244] 0: reclassify loop, rule prio 0, protocol 800 [ 169.742586][ T6238] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.836622][ T6238] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.837199][ T6207] loop3: detected capacity change from 0 to 32768 [ 169.979774][ T6207] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.987193][ T6238] Invalid argument reading file caps for ./file0 [ 170.027825][ T4229] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 170.246765][ T6252] loop4: detected capacity change from 0 to 32768 [ 170.306582][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 170.362397][ T6260] loop3: detected capacity change from 0 to 1024 [ 170.402626][ T6252] XFS (loop4): Mounting V5 Filesystem [ 170.457987][ T4229] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.466913][ T4229] usb 6-1: config 0 has no interface number 0 [ 170.473549][ T4229] usb 6-1: New USB device found, idVendor=16d8, idProduct=7253, bcdDevice=55.4d [ 170.483115][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.496526][ T4229] usb 6-1: config 0 descriptor?? [ 170.581977][ T6260] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.646279][ T6260] EXT4-fs (loop3): Mount option "data=journal" incompatible with ext2 [ 170.653649][ T6252] XFS (loop4): Ending clean mount [ 170.662342][ T6252] XFS (loop4): Quotacheck needed: Please wait. [ 170.744807][ T4298] usb 6-1: USB disconnect, device number 5 [ 170.768782][ T6252] XFS (loop4): Quotacheck: Done. [ 170.941085][ T6243] loop0: detected capacity change from 0 to 32768 [ 171.428355][ T6285] loop3: detected capacity change from 0 to 128 [ 171.511923][ T6243] XFS (loop0): Mounting V5 Filesystem [ 171.670638][ T4194] XFS (loop4): Unmounting Filesystem [ 171.798509][ T6295] FAULT_INJECTION: forcing a failure. [ 171.798509][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 171.814342][ T6243] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 171.828392][ T6296] autofs4:pid:6296:autofs_fill_super: called with bogus options [ 171.857863][ T6295] CPU: 1 PID: 6295 Comm: syz.5.401 Not tainted syzkaller #0 [ 171.865334][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.872666][ T6243] XFS (loop0): Starting recovery (logdev: internal) [ 171.875411][ T6295] Call Trace: [ 171.875423][ T6295] [ 171.875432][ T6295] dump_stack_lvl+0x188/0x250 [ 171.893068][ T6295] ? show_regs_print_info+0x20/0x20 [ 171.898314][ T6295] ? load_image+0x400/0x400 [ 171.902857][ T6295] ? __might_sleep+0xf0/0xf0 [ 171.907189][ T6243] XFS (loop0): Ending recovery (logdev: internal) [ 171.907472][ T6295] ? __lock_acquire+0x7d10/0x7d10 [ 171.918914][ T6295] ? netlink_insert+0xe95/0x11f0 [ 171.923897][ T6295] should_fail+0x38c/0x4c0 [ 171.928350][ T6295] should_failslab+0x5/0x20 [ 171.932877][ T6295] slab_pre_alloc_hook+0x51/0xc0 [ 171.937852][ T6295] kmem_cache_alloc_node+0x47/0x2d0 [ 171.943074][ T6295] ? __alloc_skb+0xf4/0x750 [ 171.947742][ T6295] __alloc_skb+0xf4/0x750 [ 171.952147][ T6295] netlink_sendmsg+0x654/0xbe0 [ 171.956962][ T6295] ? netlink_getsockopt+0x570/0x570 [ 171.962201][ T6295] ? aa_sock_msg_perm+0x94/0x150 [ 171.967172][ T6295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.972661][ T6295] ? security_socket_sendmsg+0x7c/0xa0 [ 171.974578][ T5580] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 171.978318][ T6295] ? netlink_getsockopt+0x570/0x570 [ 171.978344][ T6295] ____sys_sendmsg+0x5b7/0x8f0 [ 171.978376][ T6295] ? __sys_sendmsg_sock+0x30/0x30 [ 171.978402][ T6295] ? import_iovec+0x6f/0xa0 [ 171.978425][ T6295] ___sys_sendmsg+0x236/0x2e0 [ 171.978451][ T6295] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.978480][ T6295] ? vfs_write+0x8b2/0xd60 [ 171.978521][ T6295] __se_sys_sendmsg+0x1af/0x290 [ 171.978548][ T6295] ? __x64_sys_sendmsg+0x80/0x80 [ 171.978568][ T6295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 171.978603][ T6295] ? lockdep_hardirqs_on+0x94/0x140 [ 171.996159][ T5580] XFS (loop0): Unmount and run xfs_repair [ 171.999807][ T6295] do_syscall_64+0x4c/0xa0 [ 171.999838][ T6295] ? clear_bhb_loop+0x30/0x80 [ 171.999859][ T6295] ? clear_bhb_loop+0x30/0x80 [ 171.999879][ T6295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.015757][ T5580] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 172.018837][ T6295] RIP: 0033:0x7fc0057af819 [ 172.018862][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.018880][ T6295] RSP: 002b:00007fc003a09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.018904][ T6295] RAX: ffffffffffffffda RBX: 00007fc005a28fa0 RCX: 00007fc0057af819 [ 172.025863][ T5580] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 172.028338][ T6295] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 172.028356][ T6295] RBP: 00007fc003a09090 R08: 0000000000000000 R09: 0000000000000000 [ 172.028369][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.028383][ T6295] R13: 00007fc005a29038 R14: 00007fc005a28fa0 R15: 00007ffc51333b38 [ 172.028412][ T6295] [ 172.385363][ T6278] loop1: detected capacity change from 0 to 32768 [ 172.401001][ T5580] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 172.410532][ T5580] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 172.419641][ T5580] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 172.429110][ T5580] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 172.438060][ T5580] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.446945][ T5580] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.486051][ T6278] (syz.1.399,6278,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.505669][ T5580] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.675615][ T6243] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 172.979222][ T6278] (syz.1.399,6278,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.295905][ T4198] XFS (loop0): Unmounting Filesystem [ 173.511418][ T6313] loop5: detected capacity change from 0 to 256 [ 173.635331][ T6313] exfat: Deprecated parameter 'utf8' [ 173.659050][ T6278] JBD2: Ignoring recovery information on journal [ 173.811435][ T6313] exfat: Deprecated parameter 'utf8' [ 174.491720][ T6313] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 174.562036][ T6278] JBD2: recovery failed [ 174.566364][ T6278] (syz.1.399,6278,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 174.678305][ T6278] (syz.1.399,6278,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 174.743359][ T6278] (syz.1.399,6278,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 174.782014][ T6278] (syz.1.399,6278,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 174.843275][ T6278] (syz.1.399,6278,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 175.445687][ T6320] loop3: detected capacity change from 0 to 131072 [ 175.508297][ T6320] F2FS-fs (loop3): invalid crc value [ 175.528006][ T4229] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 175.562885][ T6320] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.608101][ T6320] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 175.648607][ T6320] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: value out of range 0 (89/830110067) at count 0 [ 175.659960][ T6320] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: access overflow [ 175.968021][ T4229] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 175.997788][ T4229] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 176.017933][ T5330] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 176.045987][ T4229] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 176.227773][ T5330] usb 2-1: device descriptor read/64, error -71 [ 176.341414][ T4229] usb 5-1: string descriptor 0 read error: -22 [ 176.351650][ T4229] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 176.369625][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.397791][ T5580] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.535235][ T5330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.568023][ T5437] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 176.640860][ T6331] udc-core: couldn't find an available UDC or it's busy [ 176.653243][ T6331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.671616][ T4229] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 176.767841][ T5580] usb 4-1: Using ep0 maxpacket: 32 [ 176.767933][ T5330] usb 2-1: device descriptor read/64, error -71 [ 176.947863][ T5437] usb 1-1: Using ep0 maxpacket: 16 [ 176.968527][ T5580] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.996557][ T5580] usb 4-1: config 0 has no interface number 0 [ 177.268904][ T5580] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 177.327341][ T5580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.338326][ T5437] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 177.364525][ T5437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.397116][ T5580] usb 4-1: Product: syz [ 177.415326][ T5437] usb 1-1: Product: syz [ 177.426097][ T5580] usb 4-1: Manufacturer: syz [ 177.515185][ T5437] usb 1-1: Manufacturer: syz [ 177.520550][ T5580] usb 4-1: SerialNumber: syz [ 177.526217][ T5437] usb 1-1: SerialNumber: syz [ 177.541374][ T4258] usb 5-1: USB disconnect, device number 13 [ 177.578751][ T5580] usb 4-1: config 0 descriptor?? [ 177.586916][ T5437] usb 1-1: config 0 descriptor?? [ 177.608706][ T5330] usb usb2-port1: attempt power cycle [ 177.634250][ T5580] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 177.653710][ T6376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.417'. [ 177.679337][ T5437] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 177.854473][ T5580] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 177.872129][ T5580] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 178.033853][ T6379] netlink: 76 bytes leftover after parsing attributes in process `syz.4.418'. [ 178.097937][ T5330] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 178.231174][ T6382] loop4: detected capacity change from 0 to 8192 [ 178.263473][ T6356] netlink: 104 bytes leftover after parsing attributes in process `syz.3.412'. [ 178.276321][ T4229] usb 4-1: USB disconnect, device number 8 [ 178.277767][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 178.287718][ T5330] usb 2-1: device descriptor read/8, error -71 [ 178.299934][ T6382] loop4: p1 p2 p3 p4 [ 178.305200][ T6382] loop4: partition table partially beyond EOD, truncated [ 178.317575][ T4229] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 178.320973][ T6382] loop4: p1 size 3523149824 extends beyond EOD, [ 178.340322][ T4229] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 178.343602][ T6382] truncated [ 178.352663][ T4229] quatech2 4-1:0.51: device disconnected [ 178.372872][ T6382] loop4: p2 start 4293394688 is beyond EOD, truncated [ 178.380534][ T6382] loop4: p3 start 150994944 is beyond EOD, truncated [ 178.409029][ T6382] loop4: p4 size 50331648 extends beyond EOD, truncated [ 178.421011][ T6359] udc-core: couldn't find an available UDC or it's busy [ 178.438251][ T6359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.459892][ T6359] Bluetooth: hci1: unsupported parameter 65535 [ 178.466109][ T6359] Bluetooth: hci1: invalid length 0, exp 2 for type 5 [ 178.537984][ T5437] ssu100: probe of 1-1:0.0 failed with error -110 [ 178.556517][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'. [ 178.566081][ T5330] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.598849][ T6387] tipc: Failed to remove unknown binding: 66,0,0/0:3972701839/3972701841 [ 178.625515][ T6387] tipc: Failed to remove unknown binding: 66,0,0/0:3972701839/3972701840 [ 178.636471][ T6387] tipc: Failed to remove unknown binding: 66,0,0/0:3972701839/3972701841 [ 178.657836][ T5330] usb 2-1: device descriptor read/8, error -71 [ 178.667399][ T6387] tipc: Failed to remove unknown binding: 66,0,0/0:3972701839/3972701840 [ 178.683414][ T6359] udc-core: couldn't find an available UDC or it's busy [ 178.699715][ T6391] loop5: detected capacity change from 0 to 128 [ 178.720846][ T6359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.772466][ T4298] usb 1-1: USB disconnect, device number 10 [ 178.778704][ T5330] usb usb2-port1: unable to enumerate USB device [ 178.828987][ T6391] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 178.833037][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 178.853170][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 178.890943][ T6391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.060711][ T6398] device syzkaller0 entered promiscuous mode [ 179.212582][ T6398] 0: reclassify loop, rule prio 0, protocol 800 [ 179.268169][ T6401] sctp: [Deprecated]: syz.4.425 (pid 6401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.268169][ T6401] Use struct sctp_sack_info instead [ 179.795951][ T6401] binder: 6399:6401 ioctl c0306201 2000000001c0 returned -14 [ 179.898591][ T6407] sctp: [Deprecated]: syz.5.426 (pid 6407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.898591][ T6407] Use struct sctp_sack_info instead [ 179.966364][ T6413] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.975999][ T6413] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.985118][ T6413] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.993909][ T6413] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.012745][ T6407] binder: 6405:6407 ioctl c0306201 2000000001c0 returned -14 [ 181.027776][ T5577] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 183.768346][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 183.828273][ T5580] Bluetooth: hci1: command 0x0406 tx timeout [ 183.861221][ T5580] Bluetooth: hci3: command 0x0406 tx timeout [ 184.799398][ T6438] device bridge1 entered promiscuous mode [ 184.884814][ T6448] loop1: detected capacity change from 0 to 128 [ 184.932866][ T5577] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.004950][ T6448] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.016301][ T6448] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.055286][ T6448] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 185.133505][ T6456] FAULT_INJECTION: forcing a failure. [ 185.133505][ T6456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.176372][ T6456] CPU: 0 PID: 6456 Comm: syz.5.441 Not tainted syzkaller #0 [ 185.183687][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.193872][ T6456] Call Trace: [ 185.197156][ T6456] [ 185.200101][ T6456] dump_stack_lvl+0x188/0x250 [ 185.204782][ T6456] ? show_regs_print_info+0x20/0x20 [ 185.209976][ T6456] ? load_image+0x400/0x400 [ 185.214475][ T6456] ? __lock_acquire+0x7d10/0x7d10 [ 185.219492][ T6456] should_fail+0x38c/0x4c0 [ 185.223905][ T6456] _copy_from_user+0x2e/0x170 [ 185.228570][ T6456] __copy_msghdr_from_user+0x48a/0x630 [ 185.234037][ T6456] ? verify_lock_unused+0x140/0x140 [ 185.239238][ T6456] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 185.244529][ T6456] ___sys_sendmsg+0x19a/0x2e0 [ 185.249199][ T6456] ? __sys_sendmsg+0x2a0/0x2a0 [ 185.253977][ T6456] ? vfs_write+0x8b2/0xd60 [ 185.258418][ T6456] __se_sys_sendmsg+0x1af/0x290 [ 185.263282][ T6456] ? __x64_sys_sendmsg+0x80/0x80 [ 185.268220][ T6456] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 185.274356][ T6456] ? lockdep_hardirqs_on+0x94/0x140 [ 185.279597][ T6456] do_syscall_64+0x4c/0xa0 [ 185.284012][ T6456] ? clear_bhb_loop+0x30/0x80 [ 185.288685][ T6456] ? clear_bhb_loop+0x30/0x80 [ 185.293360][ T6456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.299253][ T6456] RIP: 0033:0x7fc0057af819 [ 185.303690][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.323430][ T6456] RSP: 002b:00007fc003a09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.331850][ T6456] RAX: ffffffffffffffda RBX: 00007fc005a28fa0 RCX: 00007fc0057af819 [ 185.339821][ T6456] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 185.347787][ T6456] RBP: 00007fc003a09090 R08: 0000000000000000 R09: 0000000000000000 [ 185.355752][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.363712][ T6456] R13: 00007fc005a29038 R14: 00007fc005a28fa0 R15: 00007ffc51333b38 [ 185.371692][ T6456] [ 185.474267][ T6458] sctp: [Deprecated]: syz.4.442 (pid 6458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.474267][ T6458] Use struct sctp_sack_info instead [ 185.528265][ T5577] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.550726][ T5577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.656594][ T5577] usb 1-1: config 0 descriptor?? [ 185.773061][ T5577] cp210x 1-1:0.0: cp210x converter detected [ 186.145448][ T6463] netlink: 'syz.5.445': attribute type 25 has an invalid length. [ 186.237256][ T6463] netlink: 184 bytes leftover after parsing attributes in process `syz.5.445'. [ 187.098228][ T5577] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 187.133356][ T5577] cp210x 1-1:0.0: querying part number failed [ 187.337967][ T5577] usb 1-1: cp210x converter now attached to ttyUSB0 [ 187.539249][ T5577] usb 1-1: USB disconnect, device number 12 [ 187.722957][ T5577] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.798490][ T6459] loop3: detected capacity change from 0 to 65536 [ 187.819498][ T6470] loop5: detected capacity change from 0 to 164 [ 187.845723][ T6459] XFS (loop3): sunit and swidth must be specified together [ 187.913332][ T5577] cp210x 1-1:0.0: device disconnected [ 187.922562][ T6469] loop1: detected capacity change from 0 to 1024 [ 188.067627][ T6469] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.241045][ T6469] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.387810][ T6469] EXT4-fs (loop1): invalid journal inode [ 188.463184][ T6469] EXT4-fs (loop1): can't get journal size [ 188.488019][ T5577] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 188.600642][ T6469] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 188.670371][ T6469] EXT4-fs (loop1): mount failed [ 188.697819][ T5577] usb 1-1: device descriptor read/64, error -71 [ 188.987832][ T5577] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.645743][ T5577] usb 1-1: device descriptor read/64, error -71 [ 189.798639][ T5577] usb usb1-port1: attempt power cycle [ 190.277793][ T5577] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 191.187743][ T5577] usb 1-1: device not accepting address 15, error -71 [ 191.297756][ T5330] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.373276][ T6493] loop1: detected capacity change from 0 to 256 [ 191.460714][ T6493] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 191.678030][ T5330] usb 6-1: config 0 has no interfaces? [ 191.689454][ T5330] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.732143][ T5330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.740331][ T6495] sctp: [Deprecated]: syz.1.456 (pid 6495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.740331][ T6495] Use struct sctp_sack_info instead [ 191.850010][ T5330] usb 6-1: config 0 descriptor?? [ 192.013072][ T6488] loop0: detected capacity change from 0 to 32768 [ 192.066524][ T6488] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.452 (6488) [ 192.112783][ T4226] usb 6-1: USB disconnect, device number 6 [ 192.147824][ T6488] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 192.157798][ T4229] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.171918][ T6488] BTRFS info (device loop0): force clearing of disk cache [ 192.179736][ T6488] BTRFS info (device loop0): disabling tree log [ 192.184266][ T6491] loop4: detected capacity change from 0 to 32768 [ 192.186730][ T6488] BTRFS info (device loop0): enabling disk space caching [ 192.203921][ T6488] BTRFS info (device loop0): enabling auto defrag [ 192.263015][ T6488] BTRFS info (device loop0): max_inline at 0 [ 192.293920][ T6488] BTRFS info (device loop0): disk space caching is enabled [ 192.333257][ T6488] BTRFS info (device loop0): has skinny extents [ 192.413204][ T6509] loop3: detected capacity change from 0 to 164 [ 192.555785][ T6488] BTRFS info (device loop0): enabling ssd optimizations [ 192.564142][ T6488] BTRFS info (device loop0): clearing free space tree [ 192.571238][ T6488] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.571383][ T4229] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 192.590494][ T6488] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.664967][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.729755][ T4229] usb 2-1: config 0 descriptor?? [ 192.822264][ T6528] loop2: detected capacity change from 0 to 7 [ 192.867150][ T6528] Dev loop2: unable to read RDB block 7 [ 192.884114][ T6528] loop2: unable to read partition table [ 192.907945][ T6528] loop2: partition table beyond EOD, truncated [ 192.947776][ T6528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.997528][ T3561] Dev loop2: unable to read RDB block 7 [ 193.003559][ T3561] loop2: unable to read partition table [ 193.009065][ T4229] [drm] vendor descriptor length:6 data:06 5f 01 2f 66 73 00 00 00 00 00 [ 193.017905][ T4229] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 193.035096][ T6530] loop4: detected capacity change from 0 to 1024 [ 193.045038][ T3561] loop2: partition table beyond EOD, truncated [ 193.088498][ T6530] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 193.098970][ T6530] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 193.227898][ T4229] [drm:udl_init] *ERROR* Selecting channel failed [ 193.353165][ T4229] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 193.372081][ T4229] [drm] Initialized udl on minor 2 [ 193.418369][ T4229] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 193.465671][ T4229] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 193.565731][ T6525] loop3: detected capacity change from 0 to 32768 [ 194.019751][ T6525] JBD2: Ignoring recovery information on journal [ 194.278319][ T4298] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 194.301754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.329434][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335799][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.352768][ T4229] usb 2-1: USB disconnect, device number 15 [ 194.415855][ T4298] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 194.492232][ T4298] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 195.825168][ T6525] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 196.042859][ T6555] sctp: [Deprecated]: syz.4.467 (pid 6555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.042859][ T6555] Use struct sctp_sack_info instead [ 196.073946][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 196.497167][ T6573] loop3: detected capacity change from 0 to 8 [ 196.504307][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 196.550207][ T6574] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 196.632100][ T6573] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 196.714669][ T6579] loop0: detected capacity change from 0 to 164 [ 197.790383][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 197.859399][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 197.901204][ T6585] netlink: 'syz.1.479': attribute type 18 has an invalid length. [ 197.927772][ T4229] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 198.133060][ T6598] loop6: detected capacity change from 0 to 8 [ 198.161859][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.173061][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.206429][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.217437][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.233496][ T5328] Bluetooth: hci2: command 0x0405 tx timeout [ 198.241049][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 198.308698][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.319732][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.419601][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.430663][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.461172][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.472301][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.510238][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.521340][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.541284][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.547951][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.563091][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.563091][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.563138][ T4229] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 199.363639][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.374694][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.382752][ T6598] ldm_validate_partition_table(): Disk read failed. [ 199.426043][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.437156][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.465527][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.476126][ T4229] usb 4-1: config 0 descriptor?? [ 199.514155][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.525138][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.678856][ T4229] usb 4-1: can't set config #0, error -71 [ 199.693636][ T4229] usb 4-1: USB disconnect, device number 9 [ 199.711815][ T6598] Dev loop6: unable to read RDB block 0 [ 199.753324][ T6598] loop6: unable to read partition table [ 199.766519][ T6598] loop6: partition table beyond EOD, truncated [ 199.782408][ T6598] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 199.793949][ T6620] netlink: 56 bytes leftover after parsing attributes in process `syz.4.490'. [ 199.836949][ T4177] ldm_validate_partition_table(): Disk read failed. [ 201.997908][ T4177] Dev loop6: unable to read RDB block 0 [ 202.018559][ T4177] loop6: unable to read partition table [ 202.060140][ T4177] loop6: partition table beyond EOD, truncated [ 202.408659][ T6604] ldm_validate_partition_table(): Disk read failed. [ 202.433441][ T6604] Dev loop6: unable to read RDB block 0 [ 202.500870][ T6604] loop6: unable to read partition table [ 202.515160][ T6604] loop6: partition table beyond EOD, truncated [ 202.555860][ T6637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 202.586317][ T6631] loop4: detected capacity change from 0 to 32768 [ 202.588182][ T6604] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 202.648547][ T6637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.495'. [ 202.698167][ T6604] [ 202.700555][ T6604] ====================================================== [ 202.707672][ T6604] WARNING: possible circular locking dependency detected [ 202.714799][ T6604] syzkaller #0 Not tainted [ 202.719219][ T6604] ------------------------------------------------------ [ 202.726247][ T6604] syz.0.482/6604 is trying to acquire lock: [ 202.732196][ T6604] ffff8880743a7138 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 202.742094][ T6604] [ 202.742094][ T6604] but task is already holding lock: [ 202.749463][ T6604] ffff8881476ed468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 202.758256][ T6604] [ 202.758256][ T6604] which lock already depends on the new lock. [ 202.758256][ T6604] [ 202.768823][ T6604] [ 202.768823][ T6604] the existing dependency chain (in reverse order) is: [ 202.777830][ T6604] [ 202.777830][ T6604] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 202.785299][ T6604] __mutex_lock_common+0x1e3/0x2400 [ 202.791027][ T6604] mutex_lock_killable_nested+0x17/0x20 [ 202.797100][ T6604] lo_open+0x6a/0x100 [ 202.801600][ T6604] blkdev_get_whole+0x90/0x390 [ 202.806879][ T6604] blkdev_get_by_dev+0x2d0/0xa60 [ 202.812331][ T6604] blkdev_open+0x12d/0x2c0 [ 202.817268][ T6604] do_dentry_open+0x7ff/0xf80 [ 202.822569][ T6604] path_openat+0x26f5/0x2fa0 [ 202.827697][ T6604] do_filp_open+0x1e2/0x410 [ 202.832727][ T6604] do_sys_openat2+0x150/0x4b0 [ 202.837931][ T6604] __x64_sys_openat+0x135/0x160 [ 202.843321][ T6604] do_syscall_64+0x4c/0xa0 [ 202.848269][ T6604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.854686][ T6604] [ 202.854686][ T6604] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 202.862501][ T6604] __mutex_lock_common+0x1e3/0x2400 [ 202.868224][ T6604] mutex_lock_nested+0x17/0x20 [ 202.873519][ T6604] blkdev_get_by_dev+0x157/0xa60 [ 202.879000][ T6604] swsusp_check+0xa1/0x2b0 [ 202.883947][ T6604] software_resume+0xc6/0x3b0 [ 202.889148][ T6604] resume_store+0xe4/0x130 [ 202.894278][ T6604] kernfs_fop_write_iter+0x379/0x4c0 [ 202.900182][ T6604] vfs_write+0x745/0xd60 [ 202.904944][ T6604] ksys_write+0x152/0x260 [ 202.909788][ T6604] do_syscall_64+0x4c/0xa0 [ 202.914724][ T6604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.921155][ T6604] [ 202.921155][ T6604] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 202.929673][ T6604] __mutex_lock_common+0x1e3/0x2400 [ 202.935396][ T6604] mutex_lock_nested+0x17/0x20 [ 202.940770][ T6604] software_resume+0x7c/0x3b0 [ 202.945969][ T6604] resume_store+0xe4/0x130 [ 202.950903][ T6604] kernfs_fop_write_iter+0x379/0x4c0 [ 202.956709][ T6604] vfs_write+0x745/0xd60 [ 202.961466][ T6604] ksys_write+0x152/0x260 [ 202.966315][ T6604] do_syscall_64+0x4c/0xa0 [ 202.971250][ T6604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.977666][ T6604] [ 202.977666][ T6604] -> #3 (&of->mutex){+.+.}-{3:3}: [ 202.984872][ T6604] __mutex_lock_common+0x1e3/0x2400 [ 202.990591][ T6604] mutex_lock_nested+0x17/0x20 [ 202.995877][ T6604] kernfs_seq_start+0x51/0x3c0 [ 203.001163][ T6604] seq_read_iter+0x3c4/0xd50 [ 203.006274][ T6604] vfs_read+0x759/0xd60 [ 203.010951][ T6604] ksys_read+0x152/0x260 [ 203.015728][ T6604] do_syscall_64+0x4c/0xa0 [ 203.020673][ T6604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.027105][ T6604] [ 203.027105][ T6604] -> #2 (&p->lock){+.+.}-{3:3}: [ 203.034300][ T6604] __mutex_lock_common+0x1e3/0x2400 [ 203.040048][ T6604] mutex_lock_nested+0x17/0x20 [ 203.045442][ T6604] seq_read_iter+0xad/0xd50 [ 203.050470][ T6604] do_iter_readv_writev+0x47e/0x5f0 [ 203.056189][ T6604] do_iter_read+0x20b/0x7c0 [ 203.061213][ T6604] loop_process_work+0x16dd/0x24a0 [ 203.066930][ T6604] process_one_work+0x85f/0x1010 [ 203.072383][ T6604] worker_thread+0xaa6/0x1290 [ 203.077580][ T6604] kthread+0x436/0x520 [ 203.082160][ T6604] ret_from_fork+0x1f/0x30 [ 203.087092][ T6604] [ 203.087092][ T6604] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 203.096296][ T6604] process_one_work+0x7bb/0x1010 [ 203.101936][ T6604] worker_thread+0xaa6/0x1290 [ 203.107128][ T6604] kthread+0x436/0x520 [ 203.111724][ T6604] ret_from_fork+0x1f/0x30 [ 203.116659][ T6604] [ 203.116659][ T6604] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 203.124732][ T6604] __lock_acquire+0x2c42/0x7d10 [ 203.130101][ T6604] lock_acquire+0x19e/0x400 [ 203.135121][ T6604] flush_workqueue+0x16c/0x13d0 [ 203.140573][ T6604] drain_workqueue+0xcf/0x380 [ 203.145775][ T6604] destroy_workqueue+0x7b/0xb20 [ 203.151142][ T6604] __loop_clr_fd+0x234/0xb90 [ 203.156250][ T6604] blkdev_put+0x53f/0x7d0 [ 203.161175][ T6604] blkdev_close+0x76/0xa0 [ 203.166023][ T6604] __fput+0x234/0x930 [ 203.170529][ T6604] task_work_run+0x125/0x1a0 [ 203.175638][ T6604] get_signal+0x1222/0x12c0 [ 203.180659][ T6604] arch_do_signal_or_restart+0xe7/0x12c0 [ 203.186828][ T6604] exit_to_user_mode_loop+0x9e/0x130 [ 203.192630][ T6604] exit_to_user_mode_prepare+0xee/0x180 [ 203.198693][ T6604] syscall_exit_to_user_mode+0x16/0x40 [ 203.204704][ T6604] do_syscall_64+0x58/0xa0 [ 203.209659][ T6604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.216078][ T6604] [ 203.216078][ T6604] other info that might help us debug this: [ 203.216078][ T6604] [ 203.226306][ T6604] Chain exists of: [ 203.226306][ T6604] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 203.226306][ T6604] [ 203.239784][ T6604] Possible unsafe locking scenario: [ 203.239784][ T6604] [ 203.247322][ T6604] CPU0 CPU1 [ 203.252700][ T6604] ---- ---- [ 203.258066][ T6604] lock(&lo->lo_mutex); [ 203.262320][ T6604] lock(&disk->open_mutex); [ 203.269563][ T6604] lock(&lo->lo_mutex); [ 203.276339][ T6604] lock((wq_completion)loop6); [ 203.281194][ T6604] [ 203.281194][ T6604] *** DEADLOCK *** [ 203.281194][ T6604] [ 203.289334][ T6604] 2 locks held by syz.0.482/6604: [ 203.294351][ T6604] #0: ffff8880204de118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 203.303663][ T6604] #1: ffff8881476ed468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 203.312882][ T6604] [ 203.312882][ T6604] stack backtrace: [ 203.318765][ T6604] CPU: 1 PID: 6604 Comm: syz.0.482 Not tainted syzkaller #0 [ 203.326046][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.336363][ T6604] Call Trace: [ 203.339644][ T6604] [ 203.342586][ T6604] dump_stack_lvl+0x188/0x250 [ 203.347353][ T6604] ? load_image+0x400/0x400 [ 203.351862][ T6604] ? show_regs_print_info+0x20/0x20 [ 203.357066][ T6604] ? print_circular_bug+0x12b/0x1a0 [ 203.362274][ T6604] check_noncircular+0x296/0x330 [ 203.367212][ T6604] ? add_chain_block+0x940/0x940 [ 203.372144][ T6604] ? lockdep_lock+0xf1/0x1f0 [ 203.376736][ T6604] ? mark_lock+0x94/0x320 [ 203.381070][ T6604] __lock_acquire+0x2c42/0x7d10 [ 203.385939][ T6604] ? __lock_acquire+0x13bc/0x7d10 [ 203.390965][ T6604] ? verify_lock_unused+0x140/0x140 [ 203.396165][ T6604] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 203.402236][ T6604] ? verify_lock_unused+0x140/0x140 [ 203.407438][ T6604] ? memset+0x1e/0x40 [ 203.411508][ T6604] lock_acquire+0x19e/0x400 [ 203.416011][ T6604] ? flush_workqueue+0x150/0x13d0 [ 203.421040][ T6604] ? __mutex_trylock_common+0x155/0x260 [ 203.426589][ T6604] ? read_lock_is_recursive+0x10/0x10 [ 203.431965][ T6604] ? __init_swait_queue_head+0xa5/0x150 [ 203.437686][ T6604] flush_workqueue+0x16c/0x13d0 [ 203.442537][ T6604] ? flush_workqueue+0x150/0x13d0 [ 203.447577][ T6604] ? __lock_acquire+0x7d10/0x7d10 [ 203.452631][ T6604] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 203.458609][ T6604] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 203.464065][ T6604] ? rcu_work_rcufn+0x120/0x120 [ 203.468915][ T6604] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 203.474562][ T6604] ? finish_wait+0xc0/0x1d0 [ 203.479082][ T6604] drain_workqueue+0xcf/0x380 [ 203.483778][ T6604] destroy_workqueue+0x7b/0xb20 [ 203.488725][ T6604] __loop_clr_fd+0x234/0xb90 [ 203.493505][ T6604] ? lo_release+0x172/0x1f0 [ 203.498006][ T6604] ? lo_open+0x100/0x100 [ 203.502247][ T6604] blkdev_put+0x53f/0x7d0 [ 203.506576][ T6604] blkdev_close+0x76/0xa0 [ 203.511088][ T6604] ? blkdev_open+0x2c0/0x2c0 [ 203.515812][ T6604] __fput+0x234/0x930 [ 203.519804][ T6604] task_work_run+0x125/0x1a0 [ 203.524419][ T6604] get_signal+0x1222/0x12c0 [ 203.528925][ T6604] ? kasan_save_stack+0x4b/0x60 [ 203.533778][ T6604] ? kasan_save_stack+0x35/0x60 [ 203.538625][ T6604] ? kasan_record_aux_stack+0xb8/0x100 [ 203.544096][ T6604] ? task_work_add+0x2f/0x1d0 [ 203.548797][ T6604] ? fput_many+0xde/0x1a0 [ 203.553127][ T6604] ? __se_sys_ioctl+0x157/0x170 [ 203.557997][ T6604] ? do_syscall_64+0x4c/0xa0 [ 203.562597][ T6604] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.568662][ T6604] arch_do_signal_or_restart+0xe7/0x12c0 [ 203.574306][ T6604] ? get_sigframe_size+0x10/0x10 [ 203.579270][ T6604] ? kick_process+0xd4/0x140 [ 203.584214][ T6604] ? exit_to_user_mode_loop+0x3b/0x130 [ 203.589677][ T6604] exit_to_user_mode_loop+0x9e/0x130 [ 203.594957][ T6604] exit_to_user_mode_prepare+0xee/0x180 [ 203.600497][ T6604] syscall_exit_to_user_mode+0x16/0x40 [ 203.606060][ T6604] do_syscall_64+0x58/0xa0 [ 203.610474][ T6604] ? clear_bhb_loop+0x30/0x80 [ 203.615152][ T6604] ? clear_bhb_loop+0x30/0x80 [ 203.619823][ T6604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.625717][ T6604] RIP: 0033:0x7f3800527819 [ 203.630128][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.649828][ T6604] RSP: 002b:00007f37fe760028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.658244][ T6604] RAX: 0000000000000000 RBX: 00007f38007a1090 RCX: 00007f3800527819 [ 203.666212][ T6604] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 203.674188][ T6604] RBP: 00007f38005bdc91 R08: 0000000000000000 R09: 0000000000000000 [ 203.682246][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.690211][ T6604] R13: 00007f38007a1128 R14: 00007f38007a1090 R15: 00007ffc5077dd48 [ 203.698187][ T6604] [ 203.713874][ T6631] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 203.713874][ T6631] [ 203.724309][ T6631] ERROR: (device loop4): remounting filesystem as read-only [ 203.754773][ T6631] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.754773][ T6631] [ 203.764982][ T6631] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 203.764982][ T6631] [ 203.887857][ T4298] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 203.989609][ T6633] syz.1.494 sent an empty control message without MSG_MORE. [ 204.049389][ T6630] loop5: detected capacity change from 0 to 32768 [ 204.088594][ T6630] jfs: Unrecognized mount option "iocharsefWýž!=Fv™" or missing value [ 204.167792][ T4298] usb 4-1: Using ep0 maxpacket: 16 [ 204.287715][ T5328] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 204.297900][ T4298] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 204.306100][ T4298] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 204.309456][ T6630] loop5: detected capacity change from 0 to 40427 [ 204.324149][ T4298] usb 4-1: config 0 has no interface number 0 [ 204.336844][ T6630] F2FS-fs (loop5): Unrecognized mount option "actþqêg|ive_logs=4" or missing value [ 204.487889][ T4298] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 204.497451][ T4298] usb 4-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 204.505541][ T4298] usb 4-1: Product: syz [ 204.509757][ T4298] usb 4-1: Manufacturer: syz [ 204.514450][ T4298] usb 4-1: SerialNumber: syz [ 204.520511][ T4298] usb 4-1: config 0 descriptor?? [ 204.559858][ T4298] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 204.566218][ T4298] usb 4-1: No valid video chain found. [ 204.647855][ T5328] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 204.656071][ T5328] usb 2-1: config 0 has no interface number 0 [ 204.663176][ T5328] usb 2-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 204.673971][ T5328] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 128, setting to 64 [ 204.686740][ T5328] usb 2-1: config 0 interface 113 has no altsetting 0 [ 204.761687][ T5577] usb 4-1: USB disconnect, device number 10 [ 204.848335][ T5328] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 204.857430][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.865488][ T5328] usb 2-1: Product: syz [ 204.869673][ T5328] usb 2-1: Manufacturer: syz [ 204.874254][ T5328] usb 2-1: SerialNumber: syz [ 204.880323][ T5328] usb 2-1: config 0 descriptor?? [ 204.898036][ T6633] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.918369][ T5328] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 205.130773][ T5577] usb 2-1: USB disconnect, device number 16