last executing test programs: 3m38.662588489s ago: executing program 0 (id=121): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x1020}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 3m37.589541872s ago: executing program 0 (id=131): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110f00100002010200010902190001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0f11 1', 0x6) 3m36.094398624s ago: executing program 0 (id=139): socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r0, &(0x7f0000000140)='0', 0x1) 3m35.900697825s ago: executing program 0 (id=142): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2) 3m35.223423716s ago: executing program 0 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x208008, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x545c) 3m34.691776557s ago: executing program 0 (id=149): bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3m34.00723397s ago: executing program 32 (id=149): bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3m11.828292895s ago: executing program 3 (id=269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 3m11.596739663s ago: executing program 3 (id=272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) 3m11.312209993s ago: executing program 3 (id=277): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) 3m11.024471502s ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 3m10.36448749s ago: executing program 3 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0xc, 0x4000, 0x2, r2, 0x2}) 3m9.860070935s ago: executing program 3 (id=287): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x27) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0xb}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 3m9.380308255s ago: executing program 33 (id=287): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x27) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0xb}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 2m14.389927373s ago: executing program 5 (id=590): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @broadcast}}}, 0x108) close(r0) 2m14.064467641s ago: executing program 5 (id=591): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2m13.944324526s ago: executing program 5 (id=592): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 2m13.724544922s ago: executing program 5 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 2m13.634472651s ago: executing program 5 (id=595): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, 0x0) 2m13.242169373s ago: executing program 5 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2m12.800282915s ago: executing program 34 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1m18.611790186s ago: executing program 1 (id=855): openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m18.499302969s ago: executing program 1 (id=848): socket$kcm(0x2, 0x3, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x4) 1m18.395670801s ago: executing program 1 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) move_mount(r0, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 1m18.235363584s ago: executing program 1 (id=851): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2) 1m17.372254914s ago: executing program 1 (id=856): r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x20, 0x1000) fanotify_mark(r2, 0x455, 0x8000008, r1, 0x0) fanotify_mark(r0, 0x7e, 0x800003a, r1, 0x0) 1m17.132841214s ago: executing program 1 (id=857): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x30b, &(0x7f00000202c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, r1) 1m16.656843194s ago: executing program 35 (id=857): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x30b, &(0x7f00000202c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, r1) 11.576202875s ago: executing program 7 (id=1163): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) close(r0) 11.46035342s ago: executing program 7 (id=1166): memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xa2\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\xd6\xdc\xb9\xaa\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x5) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e"], 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 11.207132712s ago: executing program 7 (id=1167): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x25d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 10.856497896s ago: executing program 7 (id=1168): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2) 10.052394743s ago: executing program 7 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0xb8c) 9.49254134s ago: executing program 7 (id=1171): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.105949911s ago: executing program 36 (id=1171): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.099972162s ago: executing program 6 (id=1173): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, 0x0) 8.91849075s ago: executing program 6 (id=1174): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x6, 0x0, 0x0, 0x22, 0x2, 0xb57, 0x8000, 0x43, 0x0, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x4, 0x3, 0x400, 0x4, "b8f4255d334ec87d0823df7b5043214f1ad2f6032406283ad14a687b58ebcedf756c567cc5efadad670841556234096adc80d4ee59c205b06b39064a14c6904ed5e55df6dafd1722847e87c0d6f1c576c1883b2349b687da682d9162ce4d9dc50a8aebc9372376c347c0c1512332aaff5181549a7bb915c792b1c361d03a076a"}) 8.185705602s ago: executing program 6 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 7.8630481s ago: executing program 6 (id=1178): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2) 7.034041923s ago: executing program 6 (id=1181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 6.151391827s ago: executing program 6 (id=1183): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f0000e08000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c80000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.75054909s ago: executing program 37 (id=1183): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f0000e08000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c80000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.233058187s ago: executing program 4 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 4.098777535s ago: executing program 4 (id=1186): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, 0x0) 3.649345319s ago: executing program 4 (id=1187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1400, 0x0) r1 = epoll_create1(0x80000) ppoll(&(0x7f0000000200)=[{r1, 0x2205}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xe000000f}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 3.264380289s ago: executing program 4 (id=1189): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2) 2.680304811s ago: executing program 4 (id=1190): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrjquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x282d800, 0x0, 0x0, 0x0, &(0x7f00000006c0)) chdir(&(0x7f0000000580)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 2.120430738s ago: executing program 4 (id=1194): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000780)='./file0\x00', 0x200) 1.711776053s ago: executing program 38 (id=1194): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000780)='./file0\x00', 0x200) 1.082409234s ago: executing program 2 (id=1199): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fanotify_init(0x200, 0x0) r0 = syz_io_uring_setup(0x156, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x2, 0x51}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 916.426229ms ago: executing program 2 (id=1200): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) read(r1, &(0x7f00000042c0)=""/4116, 0x1014) close_range(r0, 0xffffffffffffffff, 0x0) 546.221676ms ago: executing program 2 (id=1201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r1}) 204.288367ms ago: executing program 2 (id=1202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x4e21, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x7, 0x0, 0x3, 0xb, 0xfffffffffffffffb}, {0x1, 0xffffffffe, 0x2000000004053e5, 0x20}, 0xfffffffe, 0x80001, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@loopback, 0x3506, 0x1, 0x1, 0x0, 0x616a45e6, 0x8}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 138.735891ms ago: executing program 2 (id=1203): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 0s ago: executing program 2 (id=1204): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='test_pkt', 0x8, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 29.268884][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.268905][ T8911] R13: 00007fb93f626038 R14: 00007fb93f625fa0 R15: 00007ffc0c09d638 [ 229.268933][ T8911] [ 229.331275][ T8889] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 229.352003][ T8889] F2FS-fs (loop2): invalid crc value [ 229.360244][ T8889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.442276][ T8889] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 229.450173][ T8889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 229.565336][ T8889] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 230.003450][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.744'. [ 230.735319][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 230.878663][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 230.942095][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.953148][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.964974][ T2133] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 230.977664][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.992544][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 231.001134][ T23] usb 3-1: Product: syz [ 231.014850][ T23] usb 3-1: Manufacturer: syz [ 231.019526][ T23] usb 3-1: SerialNumber: syz [ 231.039166][ T23] usb 3-1: config 0 descriptor?? [ 231.059732][ T23] usb 3-1: selecting invalid altsetting 0 [ 231.075619][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 231.083505][ T8] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.105062][ T8] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.125098][ T8] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.163290][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 231.171262][ T8] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 231.181097][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.186641][ T2133] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 231.199199][ T8] usb 7-1: config 0 descriptor?? [ 231.213706][ T2133] usb 2-1: config 0 has no interface number 0 [ 231.230592][ T2133] usb 2-1: config 0 interface 41 has no altsetting 0 [ 231.274612][ T2133] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 231.289109][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.299061][ T2133] usb 2-1: Product: syz [ 231.303358][ T2133] usb 2-1: Manufacturer: syz [ 231.312281][ T2133] usb 2-1: SerialNumber: syz [ 231.326916][ T2133] usb 2-1: config 0 descriptor?? [ 231.394754][ T23] usb 3-1: USB disconnect, device number 11 [ 231.646444][ T8] prodikeys 0003:041E:2801.0013: collection stack underflow [ 231.661911][ T8] prodikeys 0003:041E:2801.0013: item 0 2 0 12 parsing failed [ 231.670873][ T8] prodikeys 0003:041E:2801.0013: hid parse failed [ 231.684644][ T8] prodikeys: probe of 0003:041E:2801.0013 failed with error -22 [ 231.902060][ T8] usb 7-1: USB disconnect, device number 4 [ 232.197970][ T8959] loop4: detected capacity change from 0 to 2048 [ 232.386828][ T2133] CoreChips: probe of 2-1:0.41 failed with error -71 [ 232.434405][ T2133] usb 2-1: USB disconnect, device number 19 [ 232.685231][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.725646][ T8969] loop6: detected capacity change from 0 to 8 [ 232.770919][ T8969] SQUASHFS error: lzo decompression failed, data probably corrupt [ 232.789503][ T8969] SQUASHFS error: Failed to read block 0x91: -5 [ 232.804992][ T8969] SQUASHFS error: Unable to read metadata cache entry [8f] [ 232.817988][ T8969] SQUASHFS error: Unable to read inode 0x11f [ 232.824695][ T8970] loop4: detected capacity change from 0 to 4096 [ 232.885564][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 232.897624][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.919798][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 232.939746][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.984265][ T23] usb 3-1: config 0 descriptor?? [ 233.218663][ T8964] device-mapper: ioctl: Invalid ioctl structure: name @, dev 8105090028220103 [ 233.245448][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 233.255322][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 233.293871][ T23] usb 3-1: USB disconnect, device number 12 [ 233.643099][ T8978] loop8: detected capacity change from 0 to 7 [ 233.669621][ T8978] Dev loop8: unable to read RDB block 7 [ 233.684988][ T8978] loop8: unable to read partition table [ 233.704126][ T8978] loop8: partition table beyond EOD, truncated [ 233.725294][ T8978] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 233.929545][ T8984] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(7) [ 234.401762][ T9001] loop1: detected capacity change from 0 to 256 [ 235.330130][ T27] audit: type=1800 audit(1790313488.746:33): pid=9025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.798" name="start_block" dev="configfs" ino=17829 res=0 errno=0 [ 235.441165][ T9027] loop1: detected capacity change from 0 to 512 [ 235.474953][ T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 235.538071][ T9027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.551572][ T9027] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.665069][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 235.689918][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 235.695260][ T9034] lo: entered allmulticast mode [ 235.704742][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.713329][ T9034] lo: left allmulticast mode [ 235.715743][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.734738][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.775170][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.801675][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.838047][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.865413][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.097846][ T8997] loop4: detected capacity change from 0 to 40427 [ 236.138139][ T8] usb 7-1: usb_control_msg returned -32 [ 236.143819][ T8] usbtmc 7-1:16.0: can't read capabilities [ 236.151292][ T8997] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 236.219160][ T8997] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.280863][ T8997] F2FS-fs (loop4): invalid crc value [ 236.346114][ T8997] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.456568][ T9052] loop2: detected capacity change from 0 to 512 [ 236.474654][ T9052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.501142][ T9052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 236.509576][ T9052] System zones: 1-12 [ 236.514337][ T9052] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.806: invalid indirect mapped block 8 (level 2) [ 236.545105][ T9052] EXT4-fs (loop2): 1 truncate cleaned up [ 236.552412][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.571987][ T8997] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 236.617930][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.631865][ T9054] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 236.636873][ T8997] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.679123][ T23] usb 7-1: USB disconnect, device number 5 [ 237.433749][ T9063] loop6: detected capacity change from 0 to 4096 [ 238.236205][ T56] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 238.305300][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 238.456907][ T56] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.481907][ T56] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 2.00 [ 238.505067][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 238.517763][ T56] usb 7-1: Product: syz [ 238.525185][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 238.525707][ T56] usb 7-1: Manufacturer: syz [ 238.542487][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.567336][ T56] ldusb 7-1:1.0: Interrupt in endpoint not found [ 238.574859][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.584667][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.624834][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.649413][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.660185][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.852090][ T5819] usb 7-1: USB disconnect, device number 6 [ 238.859715][ T9092] loop1: detected capacity change from 0 to 128 [ 238.871827][ T9092] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 238.912330][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 238.921938][ T9092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.926412][ T23] usbtmc 5-1:16.0: can't read capabilities [ 239.047188][ T2133] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 239.135020][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.150013][ T5819] usb 5-1: USB disconnect, device number 11 [ 239.266828][ T2133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.279072][ T2133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.288995][ T2133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.306454][ T2133] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.316279][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.335650][ T2133] usb 3-1: config 0 descriptor?? [ 239.637485][ T9103] loop6: detected capacity change from 0 to 128 [ 239.699332][ T9103] syz.6.826: attempt to access beyond end of device [ 239.699332][ T9103] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 239.772014][ T2133] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 239.773857][ T9106] loop1: detected capacity change from 0 to 128 [ 239.792287][ T2133] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 239.833569][ T9106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.834067][ T2133] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 239.859846][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 239.895581][ T9106] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.910819][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 240.096314][ T9113] loop4: detected capacity change from 0 to 1024 [ 240.103890][ T9113] EXT4-fs: Ignoring removed bh option [ 240.146527][ T9113] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.173559][ T5778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.206570][ T2133] usb 3-1: USB disconnect, device number 13 [ 240.249328][ T9113] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 1: comm syz.4.830: lblock 1 mapped to illegal pblock 1 (length 1) [ 240.267198][ T9113] EXT4-fs (loop4): Remounting filesystem read-only [ 240.344929][ T9113] Quota error (device loop4): write_blk: dquota write failed [ 240.398919][ T9113] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 240.441693][ T9113] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 240.475452][ T9113] EXT4-fs (loop4): 1 orphan inode deleted [ 240.482851][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.717618][ T6258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.832401][ T9130] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.121190][ T9141] netlink: 'syz.1.841': attribute type 3 has an invalid length. [ 241.131912][ T9141] netlink: 'syz.1.841': attribute type 3 has an invalid length. [ 241.147948][ T9141] netlink: 'syz.1.841': attribute type 3 has an invalid length. [ 241.156390][ T9141] netlink: 'syz.1.841': attribute type 3 has an invalid length. [ 241.259740][ T9145] netlink: 'syz.1.842': attribute type 6 has an invalid length. [ 241.985044][ T56] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 242.115725][ T9170] loop1: detected capacity change from 0 to 1024 [ 242.128260][ T9170] EXT4-fs: Ignoring removed bh option [ 242.152079][ T9170] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 242.175205][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 242.186128][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.210181][ T56] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.224504][ T9170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.240269][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.268962][ T56] usb 7-1: Product: syz [ 242.273299][ T56] usb 7-1: Manufacturer: syz [ 242.306347][ T56] usb 7-1: SerialNumber: syz [ 242.345280][ T56] usb 7-1: config 0 descriptor?? [ 242.403015][ T56] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.437257][ T56] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 242.577318][ T5778] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /237/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 242.626979][ T9168] loop4: detected capacity change from 0 to 40427 [ 242.651655][ T5778] EXT4-fs (loop1): Remounting filesystem read-only [ 242.661907][ T9168] F2FS-fs (loop4): invalid crc value [ 242.743091][ T9168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.929138][ T9168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 242.957584][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.010890][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'. [ 243.040509][ T56] em28xx 7-1:0.0: chip ID is em2874 [ 243.086571][ T9168] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 243.146701][ T1080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.185686][ T9190] loop2: detected capacity change from 0 to 512 [ 243.231473][ T9190] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 243.295229][ T9190] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.859: corrupted in-inode xattr: e_value size too large [ 243.405369][ T9190] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.859: couldn't read orphan inode 15 (err -117) [ 243.421947][ T1080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.435612][ T9190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.553731][ T56] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 243.585028][ T56] em28xx 7-1:0.0: board has no eeprom [ 243.647318][ T1080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.667072][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.684932][ T56] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.699076][ T56] em28xx 7-1:0.0: dvb set to bulk mode. [ 243.705839][ T9] em28xx 7-1:0.0: Binding DVB extension [ 243.761482][ T56] usb 7-1: USB disconnect, device number 7 [ 243.805924][ T56] em28xx 7-1:0.0: Disconnecting em28xx [ 243.974049][ T9] em28xx 7-1:0.0: Registering input extension [ 243.987794][ T1080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.183097][ T9203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.197644][ T9] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 244.225004][ T9] Registered IR keymap rc-empty [ 244.246977][ T9] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 244.280287][ T9] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input22 [ 244.326379][ T9] em28xx 7-1:0.0: Input extension successfully initialized [ 244.333734][ T56] em28xx 7-1:0.0: Closing input extension [ 244.448603][ T56] em28xx 7-1:0.0: Freeing device [ 244.856607][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.872687][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.882315][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.894091][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.902273][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.912516][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.155640][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 245.372659][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 245.401890][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.425368][ T9] usb 7-1: Product: syz [ 245.429719][ T9] usb 7-1: Manufacturer: syz [ 245.455326][ T9] usb 7-1: SerialNumber: syz [ 245.702888][ T9243] loop4: detected capacity change from 0 to 512 [ 245.734702][ T9243] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.777368][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 245.832294][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 245.899293][ T9243] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 245.985523][ T9243] Quota error (device loop4): write_blk: dquota write failed [ 246.022143][ T9243] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 246.033400][ T9243] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.877: Failed to acquire dquot type 0 [ 246.059555][ T9243] EXT4-fs (loop4): 1 truncate cleaned up [ 246.083631][ T9243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.090625][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 246.135078][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 246.155413][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 246.188157][ T9] lan78xx: probe of 7-1:1.0 failed with error -71 [ 246.240545][ T9] usb 7-1: USB disconnect, device number 8 [ 246.401644][ T9256] Quota error (device loop4): write_blk: dquota write failed [ 246.412079][ T9214] chnl_net:caif_netlink_parms(): no params data found [ 246.452538][ T9256] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 246.496050][ T9256] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.877: Failed to acquire dquot type 0 [ 246.660427][ T6258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.755049][ T9252] loop2: detected capacity change from 0 to 32768 [ 246.831681][ T9252] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.993314][ T9252] XFS (loop2): Ending clean mount [ 246.999163][ T5784] Bluetooth: hci0: command tx timeout [ 247.212542][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.232973][ T9281] loop4: detected capacity change from 0 to 128 [ 247.235080][ T27] audit: type=1800 audit(1790313500.646:34): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.879" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 247.265072][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.272465][ T9214] bridge_slave_0: entered allmulticast mode [ 247.281797][ T9281] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 247.316835][ T9214] bridge_slave_0: entered promiscuous mode [ 247.388439][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.440297][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.484106][ T9214] bridge_slave_1: entered allmulticast mode [ 247.506150][ T9214] bridge_slave_1: entered promiscuous mode [ 247.537814][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.804171][ T9214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.934754][ T1080] hsr_slave_0: left promiscuous mode [ 247.963601][ T1080] hsr_slave_1: left promiscuous mode [ 248.005141][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.021984][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.047356][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.071264][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.102187][ T1080] bridge_slave_1: left allmulticast mode [ 248.139186][ T1080] bridge_slave_1: left promiscuous mode [ 248.161612][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.217049][ T1080] bridge_slave_0: left allmulticast mode [ 248.233056][ T1080] bridge_slave_0: left promiscuous mode [ 248.246992][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.427357][ T1080] veth1_macvtap: left promiscuous mode [ 248.438022][ T1080] veth0_macvtap: left promiscuous mode [ 248.467211][ T1080] veth1_vlan: left promiscuous mode [ 248.481774][ T1080] veth0_vlan: left promiscuous mode [ 249.075492][ T5784] Bluetooth: hci0: command tx timeout [ 249.127293][ T9324] sctp: [Deprecated]: syz.4.897 (pid 9324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.127293][ T9324] Use struct sctp_sack_info instead [ 249.320305][ T27] audit: type=1326 audit(1790313502.736:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.4.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93f39e159 code=0x7ffc0000 [ 249.375093][ T27] audit: type=1326 audit(1790313502.736:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.4.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93f39e159 code=0x7ffc0000 [ 249.416834][ T27] audit: type=1326 audit(1790313502.766:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.4.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93f39e159 code=0x7ffc0000 [ 249.460867][ T27] audit: type=1326 audit(1790313502.776:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.4.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb93f39e159 code=0x7ffc0000 [ 249.510018][ T27] audit: type=1326 audit(1790313502.776:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.4.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93f39e159 code=0x7ffc0000 [ 250.007999][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 250.071721][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 250.139059][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.203086][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.706844][ T1080] bond0 (unregistering): Released all slaves [ 250.825480][ T9214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.144428][ T9214] team0: Port device team_slave_0 added [ 251.159876][ T5780] Bluetooth: hci0: command tx timeout [ 251.238548][ T9214] team0: Port device team_slave_1 added [ 251.407308][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.428770][ T9350] loop2: detected capacity change from 0 to 64 [ 251.435311][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.555632][ T9214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.603569][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.635028][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.673023][ T5781] hfs: node 4:3 still has 1 user(s)! [ 251.705108][ T9214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.900336][ T9214] hsr_slave_0: entered promiscuous mode [ 251.946802][ T9214] hsr_slave_1: entered promiscuous mode [ 252.385104][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 252.585160][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 252.612195][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.626153][ T9214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 252.637427][ T9] usb 7-1: config 0 has no interface number 0 [ 252.653900][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.678622][ T9214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 252.685610][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.712890][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 252.724406][ T9214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 252.745740][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.781471][ T9] usb 7-1: config 0 descriptor?? [ 252.787093][ T9214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 252.995492][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 253.038166][ T9390] loop4: detected capacity change from 0 to 4096 [ 253.056447][ T9214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.090527][ T9214] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.127783][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.135082][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.235184][ T5784] Bluetooth: hci0: command tx timeout [ 253.261176][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.268447][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.446052][ T9] uclogic 0003:28BD:0071.0015: pen parameters not found [ 253.453118][ T9] uclogic 0003:28BD:0071.0015: interface is invalid, ignoring [ 253.553424][ T1080] ntfs3: loop4: ino=5, mi_enum_attr [ 253.568057][ T1080] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 253.757470][ T9] usb 7-1: USB disconnect, device number 9 [ 253.813155][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.132857][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.260278][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.300229][ T9214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.589775][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.729261][ T9421] loop6: detected capacity change from 0 to 4096 [ 254.843630][ T9421] ntfs3: loop6: ino=19, mi_enum_attr [ 254.862889][ T9421] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 255.571681][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.588097][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.597405][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.620398][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.628423][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.640732][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.784445][ T9214] veth0_vlan: entered promiscuous mode [ 255.809704][ T9418] loop4: detected capacity change from 0 to 40427 [ 255.810401][ T9437] FAULT_INJECTION: forcing a failure. [ 255.810401][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 255.858996][ T9418] F2FS-fs (loop4): invalid crc value [ 255.862738][ T9437] CPU: 1 PID: 9437 Comm: syz.6.923 Not tainted syzkaller #0 [ 255.871684][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.881795][ T9437] Call Trace: [ 255.885125][ T9437] [ 255.888190][ T9437] dump_stack_lvl+0x18c/0x250 [ 255.892940][ T9437] ? show_regs_print_info+0x20/0x20 [ 255.898211][ T9437] ? load_image+0x420/0x420 [ 255.902773][ T9437] ? __might_sleep+0xe0/0xe0 [ 255.907502][ T9437] ? __lock_acquire+0x7d80/0x7d80 [ 255.912592][ T9437] should_fail_ex+0x394/0x4c0 [ 255.917335][ T9437] should_failslab+0x9/0x20 [ 255.921897][ T9437] slab_pre_alloc_hook+0x59/0x300 [ 255.926978][ T9437] ? get_callchain_buffers+0x1a2/0x360 [ 255.932513][ T9437] ? get_callchain_buffers+0x1a2/0x360 [ 255.938026][ T9437] __kmem_cache_alloc_node+0x53/0x250 [ 255.943450][ T9437] ? get_callchain_buffers+0x1a2/0x360 [ 255.948946][ T9437] __kmalloc_node+0xa6/0x240 [ 255.953596][ T9437] ? rcu_is_watching+0x15/0xb0 [ 255.958392][ T9437] get_callchain_buffers+0x1a2/0x360 [ 255.963720][ T9437] stack_map_alloc+0x2fc/0x4b0 [ 255.968498][ T9437] map_create+0x877/0x12f0 [ 255.972928][ T9437] __sys_bpf+0x651/0x890 [ 255.977197][ T9437] ? bpf_link_show_fdinfo+0x560/0x560 [ 255.982594][ T9437] ? lock_chain_count+0x20/0x20 [ 255.987477][ T9437] __x64_sys_bpf+0x7c/0x90 [ 255.991903][ T9437] do_syscall_64+0x55/0xb0 [ 255.996326][ T9437] ? clear_bhb_loop+0x40/0x90 [ 256.001012][ T9437] ? clear_bhb_loop+0x40/0x90 [ 256.005709][ T9437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.007472][ T9418] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.011626][ T9437] RIP: 0033:0x7f43af59e159 [ 256.011655][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.011673][ T9437] RSP: 002b:00007f43b0468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.050613][ T9437] RAX: ffffffffffffffda RBX: 00007f43af825fa0 RCX: 00007f43af59e159 [ 256.058729][ T9437] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 256.066736][ T9437] RBP: 00007f43af63506b R08: 0000000000000000 R09: 0000000000000000 [ 256.074759][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.082772][ T9437] R13: 00007f43af826038 R14: 00007f43af825fa0 R15: 00007ffc5334fec8 [ 256.090824][ T9437] [ 256.099250][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.106117][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.112698][ T9418] F2FS-fs (loop4): Start checkpoint disabled! [ 256.144469][ T9418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 256.307008][ T9418] syz.4.920: attempt to access beyond end of device [ 256.307008][ T9418] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 256.452754][ T9214] veth1_vlan: entered promiscuous mode [ 256.591594][ T1080] kworker/u4:6: attempt to access beyond end of device [ 256.591594][ T1080] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 256.619504][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 256.640092][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 256.692441][ T39] gretap0 (unregistering): left allmulticast mode [ 256.782245][ T9214] veth0_macvtap: entered promiscuous mode [ 256.911471][ T9214] veth1_macvtap: entered promiscuous mode [ 257.042459][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.064826][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.099482][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.135264][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.147564][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.177888][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.206677][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.398050][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.435358][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.464214][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.478451][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.494291][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.505318][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.519745][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.580117][ T9214] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.595682][ T9214] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.608854][ T9214] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.643966][ T9214] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.726314][ T5780] Bluetooth: hci1: command tx timeout [ 257.809604][ T9469] FAULT_INJECTION: forcing a failure. [ 257.809604][ T9469] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 257.843472][ T9469] CPU: 1 PID: 9469 Comm: syz.4.930 Not tainted syzkaller #0 [ 257.850842][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.860916][ T9469] Call Trace: [ 257.864212][ T9469] [ 257.867197][ T9469] dump_stack_lvl+0x18c/0x250 [ 257.871906][ T9469] ? show_regs_print_info+0x20/0x20 [ 257.877148][ T9469] ? load_image+0x420/0x420 [ 257.881671][ T9469] ? __lock_acquire+0x7d80/0x7d80 [ 257.886702][ T9469] should_fail_ex+0x394/0x4c0 [ 257.891578][ T9469] prepare_alloc_pages+0x1e1/0x5b0 [ 257.896700][ T9469] __alloc_pages+0x134/0x460 [ 257.901299][ T9469] ? zone_statistics+0x170/0x170 [ 257.906261][ T9469] ? alloc_pages+0x4e1/0x740 [ 257.910867][ T9469] __get_free_pages+0xc/0x30 [ 257.915459][ T9469] kasan_populate_vmalloc_pte+0x35/0x100 [ 257.921116][ T9469] __apply_to_page_range+0x860/0xdd0 [ 257.926413][ T9469] ? kasan_populate_vmalloc+0x70/0x70 [ 257.932329][ T9469] ? apply_to_page_range+0x50/0x50 [ 257.937548][ T9469] ? do_raw_spin_unlock+0x121/0x230 [ 257.942953][ T9469] alloc_vmap_area+0x1d26/0x1e50 [ 257.947952][ T9469] ? vm_map_ram+0xcf0/0xcf0 [ 257.952485][ T9469] ? rcu_is_watching+0x15/0xb0 [ 257.957380][ T9469] __get_vm_area_node+0x162/0x370 [ 257.962515][ T9469] __vmalloc_node_range+0x36f/0x1320 [ 257.967838][ T9469] ? htab_map_alloc+0x3d7/0xeb0 [ 257.972709][ T9469] ? _raw_spin_unlock+0x40/0x40 [ 257.977589][ T9469] ? pcpu_alloc+0x11e7/0x1880 [ 257.982365][ T9469] ? free_vm_area+0x50/0x50 [ 257.986905][ T9469] bpf_map_area_alloc+0xf1/0x110 [ 257.992067][ T9469] ? htab_map_alloc+0x3d7/0xeb0 [ 257.996944][ T9469] htab_map_alloc+0x3d7/0xeb0 [ 258.001656][ T9469] map_create+0x877/0x12f0 [ 258.006101][ T9469] __sys_bpf+0x651/0x890 [ 258.010377][ T9469] ? bpf_link_show_fdinfo+0x560/0x560 [ 258.015793][ T9469] ? lock_chain_count+0x20/0x20 [ 258.020653][ T9469] __x64_sys_bpf+0x7c/0x90 [ 258.025082][ T9469] do_syscall_64+0x55/0xb0 [ 258.029597][ T9469] ? clear_bhb_loop+0x40/0x90 [ 258.034470][ T9469] ? clear_bhb_loop+0x40/0x90 [ 258.039175][ T9469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.045090][ T9469] RIP: 0033:0x7fb93f39e159 [ 258.049510][ T9469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.069209][ T9469] RSP: 002b:00007fb9401d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.077627][ T9469] RAX: ffffffffffffffda RBX: 00007fb93f625fa0 RCX: 00007fb93f39e159 [ 258.085707][ T9469] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 258.093689][ T9469] RBP: 00007fb93f43506b R08: 0000000000000000 R09: 0000000000000000 [ 258.101674][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.109653][ T9469] R13: 00007fb93f626038 R14: 00007fb93f625fa0 R15: 00007ffc0c09d638 [ 258.117643][ T9469] [ 258.291254][ T39] hsr_slave_0: left promiscuous mode [ 258.305898][ T39] hsr_slave_1: left promiscuous mode [ 258.312836][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.327756][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.340024][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.350126][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.368588][ T39] bridge_slave_1: left allmulticast mode [ 258.374349][ T39] bridge_slave_1: left promiscuous mode [ 258.385426][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.405549][ T39] bridge_slave_0: left allmulticast mode [ 258.417090][ T39] bridge_slave_0: left promiscuous mode [ 258.422941][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.488970][ T39] veth1_macvtap: left promiscuous mode [ 258.494732][ T39] veth0_macvtap: left promiscuous mode [ 258.500957][ T39] veth1_vlan: left promiscuous mode [ 258.509034][ T39] veth0_vlan: left promiscuous mode [ 258.520134][ T9479] loop4: detected capacity change from 0 to 1024 [ 259.220783][ T9481] loop4: detected capacity change from 0 to 128 [ 259.252016][ T9481] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 259.271782][ T9483] loop6: detected capacity change from 0 to 2048 [ 259.322168][ T9481] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.328796][ T9483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.366392][ T9481] ext2 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.498465][ T9481] EXT4-fs error (device loop4): make_indexed_dir:2335: inode #2: block 63: comm syz.4.941: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=0, rec_len=5, size=1000 fake=1 [ 259.526180][ T9481] EXT4-fs (loop4): Remounting filesystem read-only [ 259.544502][ T8069] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.639420][ T6258] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.752198][ T9489] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 259.795150][ T5780] Bluetooth: hci1: command tx timeout [ 259.881562][ T9493] loop8: detected capacity change from 0 to 8 [ 259.942970][ T9493] Dev loop8: unable to read RDB block 8 [ 259.949304][ T9493] loop8: unable to read partition table [ 259.955885][ T9493] loop8: partition table beyond EOD, truncated [ 259.962254][ T9493] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 259.987984][ T39] team0 (unregistering): Port device team_slave_1 removed [ 260.099306][ T39] team0 (unregistering): Port device team_slave_0 removed [ 260.174725][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.240864][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.744286][ T39] bond0 (unregistering): Released all slaves [ 260.916477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.947969][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.993943][ T9434] chnl_net:caif_netlink_parms(): no params data found [ 261.376366][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.445081][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.473897][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.482130][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.490591][ T9434] bridge_slave_0: entered allmulticast mode [ 261.498363][ T9434] bridge_slave_0: entered promiscuous mode [ 261.528021][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.544081][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.552352][ T9434] bridge_slave_1: entered allmulticast mode [ 261.571297][ T9434] bridge_slave_1: entered promiscuous mode [ 261.684301][ T9434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.803228][ T9434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.807783][ T39] IPVS: stop unused estimator thread 0... [ 261.855410][ T9523] loop7: detected capacity change from 0 to 512 [ 261.876215][ T5780] Bluetooth: hci1: command tx timeout [ 261.941579][ T9523] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 262.026802][ T9523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 262.066606][ T9434] team0: Port device team_slave_0 added [ 262.077101][ T9523] System zones: 1-12 [ 262.095565][ T9523] EXT4-fs (loop7): 1 truncate cleaned up [ 262.102729][ T9523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.118137][ T9434] team0: Port device team_slave_1 added [ 262.255511][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.262632][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.290282][ T9434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.326636][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.338802][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.368293][ T9434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.397100][ T9214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.501487][ T9434] hsr_slave_0: entered promiscuous mode [ 262.542799][ T9434] hsr_slave_1: entered promiscuous mode [ 262.570593][ T9434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.593064][ T9434] Cannot create hsr debugfs directory [ 262.636251][ T9539] FAULT_INJECTION: forcing a failure. [ 262.636251][ T9539] name failslab, interval 1, probability 0, space 0, times 0 [ 262.662264][ T9539] CPU: 1 PID: 9539 Comm: syz.7.947 Not tainted syzkaller #0 [ 262.669733][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.679839][ T9539] Call Trace: [ 262.683161][ T9539] [ 262.686139][ T9539] dump_stack_lvl+0x18c/0x250 [ 262.690872][ T9539] ? show_regs_print_info+0x20/0x20 [ 262.696126][ T9539] ? load_image+0x420/0x420 [ 262.700816][ T9539] ? __might_sleep+0xe0/0xe0 [ 262.705576][ T9539] ? __lock_acquire+0x7d80/0x7d80 [ 262.710662][ T9539] should_fail_ex+0x394/0x4c0 [ 262.715407][ T9539] should_failslab+0x9/0x20 [ 262.720056][ T9539] slab_pre_alloc_hook+0x59/0x300 [ 262.725144][ T9539] ? d_instantiate+0x6f/0x90 [ 262.729782][ T9539] kmem_cache_alloc+0x5a/0x2c0 [ 262.734593][ T9539] ? alloc_empty_file+0x9e/0x1d0 [ 262.739585][ T9539] alloc_empty_file+0x9e/0x1d0 [ 262.744405][ T9539] alloc_file+0x5b/0x600 [ 262.748707][ T9539] alloc_file_pseudo+0x184/0x210 [ 262.753727][ T9539] ? fput+0x1a0/0x1a0 [ 262.757762][ T9539] ? alloc_fd+0x590/0x640 [ 262.762250][ T9539] sock_alloc_file+0xb7/0x280 [ 262.766983][ T9539] __sys_socket+0x140/0x1b0 [ 262.771524][ T9539] __x64_sys_socket+0x7a/0x90 [ 262.776223][ T9539] do_syscall_64+0x55/0xb0 [ 262.780660][ T9539] ? clear_bhb_loop+0x40/0x90 [ 262.785364][ T9539] ? clear_bhb_loop+0x40/0x90 [ 262.790064][ T9539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.795980][ T9539] RIP: 0033:0x7f3620f9e159 [ 262.800504][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.820304][ T9539] RSP: 002b:00007f3621ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.828824][ T9539] RAX: ffffffffffffffda RBX: 00007f3621225fa0 RCX: 00007f3620f9e159 [ 262.836811][ T9539] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 262.845055][ T9539] RBP: 00007f362103506b R08: 0000000000000000 R09: 0000000000000000 [ 262.853063][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.861137][ T9539] R13: 00007f3621226038 R14: 00007f3621225fa0 R15: 00007ffff02c95e8 [ 262.869137][ T9539] [ 263.012988][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 263.013005][ T27] audit: type=1326 audit(1790313516.426:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.6.950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43af59e159 code=0x0 [ 263.581010][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 263.695467][ T27] audit: type=1800 audit(1790313517.106:54): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.958" name="direction" dev="configfs" ino=20040 res=0 errno=0 [ 263.959047][ T5780] Bluetooth: hci1: command tx timeout [ 264.043224][ T9434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.145578][ T9434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.190686][ T9434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.254604][ T9434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.467324][ T9587] loop6: detected capacity change from 0 to 4096 [ 264.511928][ T9434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.626884][ T9434] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.706060][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.713351][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.739813][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.7.966'. [ 264.743641][ T9597] loop4: detected capacity change from 0 to 64 [ 264.758381][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.765605][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.825716][ T9597] hfs: keylen 1794 too large [ 264.838578][ T9597] hfs: keylen 1794 too large [ 264.900690][ T9597] hfs: keylen 1794 too large [ 265.048150][ T49] hfs: keylen 1794 too large [ 265.575459][ T9434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.595026][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 265.758698][ T9434] veth0_vlan: entered promiscuous mode [ 265.788963][ T23] usb 7-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 265.808496][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 265.811931][ T9434] veth1_vlan: entered promiscuous mode [ 265.836101][ T9623] loop7: detected capacity change from 0 to 256 [ 265.842782][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 265.877513][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 265.918800][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 265.957549][ T9434] veth0_macvtap: entered promiscuous mode [ 265.996524][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 266.002187][ T9434] veth1_macvtap: entered promiscuous mode [ 266.039044][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 266.079715][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 266.094718][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.121313][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 266.135358][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.143965][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 266.162594][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 266.168641][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.184640][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 266.214857][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.216818][ T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 266.238585][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.248178][ T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 58790, setting to 1024 [ 266.276264][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.280646][ T23] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 266.314450][ T23] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 266.321155][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.346841][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.356540][ T23] usb 7-1: Product: syz [ 266.360755][ T23] usb 7-1: Manufacturer: syz [ 266.370674][ T23] usb 7-1: SerialNumber: syz [ 266.387009][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.391910][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.397714][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.430324][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.448018][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.450845][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.480018][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.486423][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.510505][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.512686][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.545064][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.574538][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.577686][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.613132][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.632402][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.637377][ T9434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.649871][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.671726][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.685936][ T9434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.694718][ T9434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.696834][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.723675][ T9608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.734877][ T9434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.742085][ T23] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 266.818212][ T23] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 266.850840][ T23] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 266.888218][ T23] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 266.935899][ T23] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 267.067874][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.095734][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.169821][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.192624][ T9647] loop7: detected capacity change from 0 to 256 [ 267.215009][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.816755][ T23] usb 7-1: USB disconnect, device number 10 [ 267.866401][ T23] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 267.899195][ T23] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 267.940392][ T23] keyspan 7-1:1.0: device disconnected [ 268.026850][ T9668] dlm: non-version read from control device 4096 [ 268.795340][ T56] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 269.006923][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 269.020529][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.021388][ T9700] loop6: detected capacity change from 0 to 16 [ 269.039297][ T56] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 269.050771][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.075797][ T56] usb 5-1: config 0 descriptor?? [ 269.094709][ T9700] erofs: (device loop6): mounted with root inode @ nid 36. [ 269.155355][ T5819] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.355677][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 269.386248][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.423145][ T5819] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.445282][ T5819] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.458810][ T5819] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 269.473462][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.493220][ T5819] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 269.503529][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.527077][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.530711][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.555092][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.559614][ T5819] usb 3-1: config 0 descriptor?? [ 269.574942][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.582694][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.621575][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.644923][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.652668][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.684875][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.692626][ T56] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 269.724547][ T56] hid-multitouch 0003:1FD2:6007.0016: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 269.769413][ T56] usb 5-1: USB disconnect, device number 12 [ 269.790250][ T9699] loop7: detected capacity change from 0 to 32768 [ 269.905869][ T9699] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 270.050408][ T9707] fido_id[9707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 270.066997][ T5819] logitech-djreceiver 0003:046D:C53A.0017: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 270.102172][ T9705] loop6: detected capacity change from 0 to 32768 [ 270.209147][ T27] audit: type=1800 audit(1790313523.626:55): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1000" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 270.272663][ T27] audit: type=1800 audit(1790313523.656:56): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1000" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 270.295351][ T5159] usb 3-1: USB disconnect, device number 14 [ 270.302225][ T27] audit: type=1800 audit(1790313523.666:57): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1000" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 270.340005][ T9214] ocfs2: Unmounting device (7,7) on (node local) [ 270.381981][ T9710] fido_id[9710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 271.027379][ T9726] FAULT_INJECTION: forcing a failure. [ 271.027379][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 271.042823][ T9726] CPU: 0 PID: 9726 Comm: syz.2.1007 Not tainted syzkaller #0 [ 271.050265][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.060368][ T9726] Call Trace: [ 271.063653][ T9726] [ 271.066604][ T9726] dump_stack_lvl+0x18c/0x250 [ 271.071307][ T9726] ? show_regs_print_info+0x20/0x20 [ 271.076534][ T9726] ? load_image+0x420/0x420 [ 271.081101][ T9726] ? __might_sleep+0xe0/0xe0 [ 271.085752][ T9726] ? __lock_acquire+0x7d80/0x7d80 [ 271.090841][ T9726] ? percpu_ref_put+0x12/0x100 [ 271.095666][ T9726] should_fail_ex+0x394/0x4c0 [ 271.100409][ T9726] should_failslab+0x9/0x20 [ 271.104971][ T9726] slab_pre_alloc_hook+0x59/0x300 [ 271.110061][ T9726] kmem_cache_alloc+0x5a/0x2c0 [ 271.114877][ T9726] ? vm_area_dup+0x61/0x270 [ 271.119445][ T9726] vm_area_dup+0x61/0x270 [ 271.123827][ T9726] __split_vma+0x1a8/0xc20 [ 271.128278][ T9726] ? mmap_write_unlock+0x160/0x160 [ 271.133455][ T9726] ? split_vma+0x8f/0x110 [ 271.137796][ T9726] mprotect_fixup+0xa3b/0xcd0 [ 271.142504][ T9726] ? change_protection+0x31e0/0x31e0 [ 271.147879][ T9726] ? apparmor_file_mprotect+0xfe/0x120 [ 271.153502][ T9726] ? bpf_lsm_file_mprotect+0x9/0x10 [ 271.158867][ T9726] do_mprotect_pkey+0x7c3/0xcc0 [ 271.163883][ T9726] ? prot_none_test+0x10/0x10 [ 271.168617][ T9726] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.174672][ T9726] __x64_sys_mprotect+0x80/0x90 [ 271.179612][ T9726] do_syscall_64+0x55/0xb0 [ 271.184085][ T9726] ? clear_bhb_loop+0x40/0x90 [ 271.188824][ T9726] ? clear_bhb_loop+0x40/0x90 [ 271.193565][ T9726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.199596][ T9726] RIP: 0033:0x7f232eb9e159 [ 271.204060][ T9726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.223847][ T9726] RSP: 002b:00007f232fae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 271.232405][ T9726] RAX: ffffffffffffffda RBX: 00007f232ee25fa0 RCX: 00007f232eb9e159 [ 271.240426][ T9726] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 271.248434][ T9726] RBP: 00007f232ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 271.256430][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.264516][ T9726] R13: 00007f232ee26038 R14: 00007f232ee25fa0 R15: 00007fff217f6878 [ 271.272551][ T9726] [ 271.344986][ T2133] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.434876][ T5159] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 271.524960][ T2133] usb 5-1: Using ep0 maxpacket: 8 [ 271.536179][ T2133] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.552385][ T2133] usb 5-1: config 179 has no interface number 0 [ 271.560387][ T2133] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.565610][ T9737] FAULT_INJECTION: forcing a failure. [ 271.565610][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 271.576100][ T2133] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.600732][ T2133] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.612220][ T9737] CPU: 0 PID: 9737 Comm: syz.6.1011 Not tainted syzkaller #0 [ 271.615014][ T2133] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.619630][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.619646][ T9737] Call Trace: [ 271.619656][ T9737] [ 271.619666][ T9737] dump_stack_lvl+0x18c/0x250 [ 271.619702][ T9737] ? show_regs_print_info+0x20/0x20 [ 271.619729][ T9737] ? load_image+0x420/0x420 [ 271.619753][ T9737] ? __might_sleep+0xe0/0xe0 [ 271.619782][ T9737] ? __lock_acquire+0x7d80/0x7d80 [ 271.619804][ T9737] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.619843][ T9737] should_fail_ex+0x394/0x4c0 [ 271.619876][ T9737] should_failslab+0x9/0x20 [ 271.619906][ T9737] slab_pre_alloc_hook+0x59/0x300 [ 271.619940][ T9737] kmem_cache_alloc_lru+0x4d/0x2b0 [ 271.619970][ T9737] ? __d_alloc+0x31/0x710 [ 271.619994][ T9737] __d_alloc+0x31/0x710 [ 271.620014][ T9737] ? alloc_fd+0x590/0x640 [ 271.620042][ T9737] d_alloc_pseudo+0x1d/0x70 [ 271.620063][ T9737] alloc_file_pseudo+0xe4/0x210 [ 271.620087][ T9737] ? fput+0x1a0/0x1a0 [ 271.620114][ T9737] ? alloc_fd+0x590/0x640 [ 271.620145][ T9737] sock_alloc_file+0xb7/0x280 [ 271.620172][ T9737] __sys_socket+0x140/0x1b0 [ 271.620200][ T9737] __x64_sys_socket+0x7a/0x90 [ 271.620225][ T9737] do_syscall_64+0x55/0xb0 [ 271.620251][ T9737] ? clear_bhb_loop+0x40/0x90 [ 271.620278][ T9737] ? clear_bhb_loop+0x40/0x90 [ 271.620308][ T9737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.620333][ T9737] RIP: 0033:0x7f43af59e159 [ 271.620354][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.632758][ T2133] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.641786][ T9737] RSP: 002b:00007f43b0468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 271.641824][ T9737] RAX: ffffffffffffffda RBX: 00007f43af825fa0 RCX: 00007f43af59e159 [ 271.641838][ T9737] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 271.641851][ T9737] RBP: 00007f43af63506b R08: 0000000000000000 R09: 0000000000000000 [ 271.641864][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.645415][ T2133] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.648092][ T9737] R13: 00007f43af826038 R14: 00007f43af825fa0 R15: 00007ffc5334fec8 [ 271.648130][ T9737] [ 271.654735][ T2133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.915243][ T9724] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 271.954272][ T5159] usb 8-1: Using ep0 maxpacket: 32 [ 271.985759][ T5159] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.993945][ T5159] usb 8-1: config 0 has no interface number 0 [ 272.015525][ T5159] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.054436][ T5159] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.098710][ T5159] usb 8-1: Product: syz [ 272.116003][ T5159] usb 8-1: Manufacturer: syz [ 272.120691][ T5159] usb 8-1: SerialNumber: syz [ 272.160843][ T5159] usb 8-1: config 0 descriptor?? [ 272.193675][ T5159] smsc95xx v2.0.0 [ 272.211256][ T2133] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input24 [ 272.615798][ T2133] usb 5-1: USB disconnect, device number 13 [ 272.615863][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.630172][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.681588][ T2133] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 273.224991][ T5159] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 273.245278][ T5159] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 273.295455][ T5159] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 273.350069][ T5159] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 273.405638][ T5159] usb 8-1: USB disconnect, device number 2 [ 274.726377][ T9764] loop2: detected capacity change from 0 to 131072 [ 274.726651][ T9791] loop4: detected capacity change from 0 to 128 [ 274.735807][ T9764] F2FS-fs (loop2): invalid crc value [ 274.780659][ T9764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.884230][ T9764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 274.956334][ T9791] syz.4.1028: attempt to access beyond end of device [ 274.956334][ T9791] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 275.060805][ T9798] syz.4.1028: attempt to access beyond end of device [ 275.060805][ T9798] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 275.107947][ T9798] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 275.147950][ T9798] syz.4.1028: attempt to access beyond end of device [ 275.147950][ T9798] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 275.179858][ T9798] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 275.205090][ T9798] syz.4.1028: attempt to access beyond end of device [ 275.205090][ T9798] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 275.235481][ T9798] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 275.263344][ T9798] syz.4.1028: attempt to access beyond end of device [ 275.263344][ T9798] loop4: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 275.342349][ T9791] syz.4.1028: attempt to access beyond end of device [ 275.342349][ T9791] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 275.405344][ T9791] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 275.445045][ T9806] loop6: detected capacity change from 0 to 512 [ 275.490164][ T9806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.566184][ T9806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.624170][ T9806] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.838629][ T8069] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.992083][ T9819] loop7: detected capacity change from 0 to 16 [ 276.059912][ T5771] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.134908][ T56] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 276.351576][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.383248][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.408472][ T56] usb 5-1: config 1 has no interface number 0 [ 276.423928][ T56] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.456084][ T56] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 276.468365][ T56] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 276.480853][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.494603][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.495352][ T9834] sctp: [Deprecated]: syz.7.1038 (pid 9834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.495352][ T9834] Use struct sctp_sack_info instead [ 276.513433][ T56] usb 5-1: Product: syz [ 276.547401][ T56] usb 5-1: Manufacturer: syz [ 276.552176][ T56] usb 5-1: SerialNumber: syz [ 276.584108][ T9817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 277.005518][ T9817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 277.117568][ T9848] "syz.2.1041" (9848) uses obsolete ecb(arc4) skcipher [ 277.626310][ T56] cdc_ncm 5-1:1.1: bind() failure [ 277.634991][ T2133] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 277.665245][ T56] usb 5-1: USB disconnect, device number 14 [ 277.858316][ T2133] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 277.894860][ T2133] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 277.919737][ T2133] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 277.931449][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.947521][ T2133] usb 3-1: Product: syz [ 277.951764][ T2133] usb 3-1: Manufacturer: syz [ 277.975486][ T2133] usb 3-1: SerialNumber: syz [ 277.982934][ T2133] usb 3-1: config 0 descriptor?? [ 278.204894][ T5839] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 278.351757][ T9863] loop6: detected capacity change from 0 to 32768 [ 278.417532][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.434630][ T9863] [ 278.434630][ T9863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.434630][ T9863] [ 278.444738][ T5839] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.446922][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.464407][ T5839] usb 8-1: config 0 descriptor?? [ 278.570136][ T9863] ERROR: (device loop6): diWrite: ixpxd invalid [ 278.570136][ T9863] [ 278.641500][ T9863] ERROR: (device loop6): remounting filesystem as read-only [ 278.649087][ T2133] mos7840 3-1:0.0: required endpoints missing [ 278.653401][ T2133] usb 3-1: USB disconnect, device number 15 [ 278.678632][ T9863] ERROR: (device loop6): txCommit: [ 278.678632][ T9863] [ 278.748017][ T5839] usbhid 8-1:0.0: can't add hid device: -71 [ 278.769899][ T5839] usbhid: probe of 8-1:0.0 failed with error -71 [ 278.801091][ T5839] usb 8-1: USB disconnect, device number 3 [ 278.999779][ T9884] blkno = 0, nblocks = 40 [ 279.014935][ T9884] ERROR: (device loop6): dbFree: block to be freed is outside the map [ 279.014935][ T9884] [ 279.098049][ T8069] [ 279.098049][ T8069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.098049][ T8069] [ 279.143059][ T8069] [ 279.143059][ T8069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.143059][ T8069] [ 279.317182][ T9879] loop4: detected capacity change from 0 to 32768 [ 279.344944][ T5839] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 279.391756][ T9879] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.565295][ T5839] usb 8-1: Using ep0 maxpacket: 16 [ 279.615232][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.675020][ T5839] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 279.693073][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.711435][ T9879] XFS (loop4): Ending clean mount [ 279.723951][ T5839] usb 8-1: config 0 descriptor?? [ 279.753349][ T9879] XFS (loop4): Quotacheck needed: Please wait. [ 279.848361][ T9879] XFS (loop4): Quotacheck: Done. [ 279.958619][ T5839] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 280.007581][ T5839] input: Griffin PowerMate as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input25 [ 280.107129][ T6258] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.375191][ C1] powermate: config urb returned -71 [ 280.375620][ T56] usb 8-1: USB disconnect, device number 4 [ 280.380613][ C1] powermate: usb_submit_urb(config) failed [ 280.387001][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 281.395799][ T9927] loop6: detected capacity change from 0 to 40427 [ 281.451051][ T9927] F2FS-fs (loop6): invalid crc value [ 281.466381][ T9927] F2FS-fs (loop6): Found nat_bits in checkpoint [ 281.672014][ T9927] F2FS-fs (loop6): Start checkpoint disabled! [ 281.732711][ T9927] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 281.965980][ T9965] loop2: detected capacity change from 0 to 64 [ 282.017545][ T9965] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 282.568386][ T9943] loop7: detected capacity change from 0 to 40427 [ 282.580436][ T60] kworker/u4:4: attempt to access beyond end of device [ 282.580436][ T60] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 282.611993][ T9943] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 282.631209][ T60] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 282.644890][ T9943] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 282.673989][ T9943] F2FS-fs (loop7): Image doesn't support compression [ 282.713103][ T9943] F2FS-fs (loop7): Image doesn't support compression [ 282.765161][ T9943] F2FS-fs (loop7): invalid crc value [ 283.112716][ T9943] F2FS-fs (loop7): Start checkpoint disabled! [ 283.199011][ T9943] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 283.222797][ T9943] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 283.514665][ T9972] loop4: detected capacity change from 0 to 32768 [ 283.585140][ T9972] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1072 (9972) [ 283.629963][ T49] kworker/u4:3: attempt to access beyond end of device [ 283.629963][ T49] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 283.637254][ T9972] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 283.678879][ T49] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 283.697720][ T49] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 283.729868][ T9972] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 283.750605][ T9972] BTRFS info (device loop4): using free space tree [ 283.999585][ T9972] BTRFS info (device loop4): enabling ssd optimizations [ 284.064879][ T9972] BTRFS info (device loop4): auto enabling async discard [ 284.452055][ T6258] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 284.874140][ T7568] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop4 scanned by udevd (7568) [ 285.110357][T10039] loop2: detected capacity change from 0 to 512 [ 285.213835][T10044] loop7: detected capacity change from 0 to 512 [ 285.240002][T10039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.334953][T10039] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.453503][T10044] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.1076: iget: bad i_size value: 38620345925642 [ 285.582970][T10044] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1076: couldn't read orphan inode 15 (err -117) [ 285.642884][T10044] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.803493][ T9434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.829226][ T9214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 286.435158][ T27] audit: type=1326 audit(1790313539.846:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.6.1086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af59e159 code=0x7fc00000 [ 286.786823][T10053] loop4: detected capacity change from 0 to 40427 [ 286.840420][T10053] F2FS-fs (loop4): invalid crc value [ 286.863347][T10053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 287.073206][T10053] F2FS-fs (loop4): Start checkpoint disabled! [ 287.167592][T10053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 287.450010][T10077] loop2: detected capacity change from 0 to 32768 [ 287.514631][T10077] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 287.577770][T10077] JBD2: Ignoring recovery information on journal [ 287.746596][T10077] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 288.088621][ T2923] kworker/u4:9: attempt to access beyond end of device [ 288.088621][ T2923] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 288.126698][T10077] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 288.137008][ T2923] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 288.185014][T10077] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 288.211059][T10087] loop6: detected capacity change from 0 to 32768 [ 288.217931][T10077] OCFS2: File system is now read-only. [ 288.223459][T10077] (syz.2.1080,10077,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 288.265535][T10077] (syz.2.1080,10077,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 288.296557][T10077] (syz.2.1080,10077,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 288.344969][T10087] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 288.359221][T10087] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.371337][T10077] (syz.2.1080,10077,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 288.395715][T10077] (syz.2.1080,10077,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 288.456977][T10077] (syz.2.1080,10077,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 288.489995][T10077] (syz.2.1080,10077,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 288.510514][T10087] XFS (loop6): Ending clean mount [ 288.525306][T10077] (syz.2.1080,10077,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 288.534367][T10077] (syz.2.1080,10077,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 288.581402][T10087] XFS (loop6): Quotacheck needed: Please wait. [ 288.585436][T10077] (syz.2.1080,10077,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 288.607447][T10077] (syz.2.1080,10077,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 288.638031][T10077] (syz.2.1080,10077,1):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 288.653082][T10077] (syz.2.1080,10077,1):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 288.662613][T10077] (syz.2.1080,10077,1):ocfs2_dio_wr_get_block:2245 ERROR: status = -30 [ 288.681166][T10077] (syz.2.1080,10077,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 288.684967][ T5159] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 288.713340][T10077] syz.2.1080 (10077) used greatest stack depth: 18520 bytes left [ 288.758725][T10087] XFS (loop6): Quotacheck: Done. [ 288.799939][ T9434] ocfs2: Unmounting device (7,2) on (node local) [ 288.951017][ T5159] usb 8-1: Using ep0 maxpacket: 16 [ 288.992783][ T5159] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.022411][ T5159] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.048304][ T5159] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.073584][ T8069] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.082641][ T5159] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.098360][ T5159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.116182][ T5159] usb 8-1: config 0 descriptor?? [ 289.612358][T10137] loop4: detected capacity change from 0 to 512 [ 289.697527][ T5159] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0018/input/input26 [ 289.698846][T10137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.725628][T10137] ext4 filesystem being mounted at /223/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.859113][ T5159] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 289.935203][ T5159] usb 8-1: USB disconnect, device number 5 [ 289.978985][T10137] EXT4-fs (loop4): shut down requested (1) [ 290.105413][ T6258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.132301][T10143] fido_id[10143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 290.411224][T10133] loop2: detected capacity change from 0 to 32768 [ 290.458760][T10133] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.629467][T10133] XFS (loop2): Ending clean mount [ 290.814731][ T5159] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 290.852059][ T5159] XFS (loop2): Unmount and run xfs_repair [ 290.873964][ T5159] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 290.901438][ T5159] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 290.922378][ T5159] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 290.941619][ T5159] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 290.960799][ T5159] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 290.990952][ T5159] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 291.014590][ T5159] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 291.033915][ T5159] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 291.053462][ T5159] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 291.073684][ T60] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 291.125144][ T60] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 291.194836][ T60] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 291.327577][ T9434] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.910514][T10174] ip_tables: iptables: counters copy to user failed while replacing table [ 292.012109][T10164] loop7: detected capacity change from 0 to 40427 [ 292.024255][T10164] F2FS-fs (loop7): invalid crc value [ 292.054061][T10164] F2FS-fs (loop7): Found nat_bits in checkpoint [ 292.227601][T10164] F2FS-fs (loop7): Start checkpoint disabled! [ 292.302514][T10164] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 292.361412][ T2133] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 292.423711][ T2133] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.019820][T10191] loop4: detected capacity change from 0 to 512 [ 293.072924][T10191] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 293.126554][ T49] kworker/u4:3: attempt to access beyond end of device [ 293.126554][ T49] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 293.179119][ T49] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 293.278591][ T2914] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 293.884967][ T56] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 294.086917][ T56] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 294.102501][ T56] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 294.128208][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.156774][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 294.175010][ T56] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 294.204624][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.230840][T10195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.259090][T10195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.297141][ T56] pl2303 7-1:1.0: pl2303 converter detected [ 294.312427][ T56] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 294.659041][T10195] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 294.668856][T10195] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 294.677643][T10195] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 294.686770][T10195] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 294.695268][T10195] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 294.717815][ T56] usb 7-1: USB disconnect, device number 11 [ 294.733035][ T56] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 294.755881][ T56] pl2303 7-1:1.0: device disconnected [ 294.784023][T10207] loop4: detected capacity change from 0 to 65536 [ 294.807178][T10207] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 294.848611][T10207] XFS (loop4): Ending clean mount [ 294.857845][T10207] XFS (loop4): Quotacheck needed: Please wait. [ 294.914281][T10207] XFS (loop4): Quotacheck: Done. [ 294.997440][T10207] XFS (loop4): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 295.149458][ T6258] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 295.733387][T10219] loop2: detected capacity change from 0 to 32768 [ 295.777512][T10219] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.822441][T10219] XFS (loop2): Ending clean mount [ 295.839768][T10219] XFS (loop2): Quotacheck needed: Please wait. [ 295.894015][T10219] XFS (loop2): Quotacheck: Done. [ 295.939363][ T27] audit: type=1800 audit(1790313549.356:59): pid=10219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="bus" dev="loop2" ino=4428 res=0 errno=0 [ 296.131934][ T9434] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.193820][ T5820] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.233954][ T5820] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.895361][T10254] ecryptfs_mount: kern_path() failed [ 296.939015][T10254] Reading sb failed; rc = [-2] [ 298.490583][T10277] loop2: detected capacity change from 0 to 40427 [ 298.510733][T10277] F2FS-fs (loop2): invalid crc value [ 298.530956][ T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 298.552689][T10277] F2FS-fs (loop2): Found nat_bits in checkpoint [ 298.646077][T10277] F2FS-fs (loop2): Start checkpoint disabled! [ 298.671227][T10277] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 298.733320][ T56] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 298.759486][ T56] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 298.772357][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.794677][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.811182][ T56] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 298.821125][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.842332][T10281] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 298.861569][T10281] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 298.889751][ T56] pl2303 8-1:1.0: pl2303 converter detected [ 298.908960][ T56] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 299.099978][T10279] loop6: detected capacity change from 0 to 65536 [ 299.168463][ T49] kworker/u4:3: attempt to access beyond end of device [ 299.168463][ T49] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 299.179759][T10279] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 299.184718][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 299.238305][T10279] XFS (loop6): Ending clean mount [ 299.249258][T10279] XFS (loop6): Quotacheck needed: Please wait. [ 299.265427][T10281] pl2303 8-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 299.324898][T10281] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 299.333303][T10279] XFS (loop6): Quotacheck: Done. [ 299.352782][T10281] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 299.375905][T10281] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 299.396791][T10281] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 299.403859][T10279] XFS (loop6): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 299.421632][ T56] usb 8-1: USB disconnect, device number 6 [ 299.448674][ T56] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 299.464096][ T56] pl2303 8-1:1.0: device disconnected [ 299.592696][ T8069] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 300.402865][T10295] loop4: detected capacity change from 0 to 40427 [ 300.422141][T10295] F2FS-fs (loop4): invalid crc value [ 300.445723][T10295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.556632][T10295] F2FS-fs (loop4): Start checkpoint disabled! [ 300.614531][T10295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 300.741287][T10301] loop6: detected capacity change from 0 to 32768 [ 300.805944][T10301] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 300.878282][T10301] XFS (loop6): Ending clean mount [ 300.889315][T10301] XFS (loop6): Quotacheck needed: Please wait. [ 300.968984][T10301] XFS (loop6): Quotacheck: Done. [ 301.024855][ T27] audit: type=1800 audit(1790313554.426:60): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1125" name="bus" dev="loop6" ino=4428 res=0 errno=0 [ 301.101067][ T2914] kworker/u4:8: attempt to access beyond end of device [ 301.101067][ T2914] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 301.116804][ T2914] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 301.129396][ T8069] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.024294][T10315] loop2: detected capacity change from 0 to 32768 [ 302.094840][T10315] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 302.125773][T10315] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.228177][T10315] XFS (loop2): Ending clean mount [ 302.260204][T10315] XFS (loop2): Quotacheck needed: Please wait. [ 302.367536][T10315] XFS (loop2): Quotacheck: Done. [ 302.616889][ T9434] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.714901][ T5820] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 302.860150][T10325] loop4: detected capacity change from 0 to 40427 [ 302.924656][T10325] F2FS-fs (loop4): invalid crc value [ 302.936422][ T5820] usb 7-1: Using ep0 maxpacket: 16 [ 302.956903][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.973834][T10325] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.990897][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.015818][ T5820] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.065816][ T5820] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.095754][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.146091][ T5820] usb 7-1: config 0 descriptor?? [ 303.191410][T10325] F2FS-fs (loop4): Start checkpoint disabled! [ 303.285018][T10325] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 303.389124][T10349] loop7: detected capacity change from 0 to 128 [ 303.436851][T10349] EXT4-fs (loop7): Test dummy encryption mode enabled [ 303.442944][T10352] loop2: detected capacity change from 0 to 512 [ 303.458750][T10352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 303.528654][T10349] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.585065][T10352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 303.593316][T10352] System zones: 1-12 [ 303.641978][T10352] EXT4-fs (loop2): 1 truncate cleaned up [ 303.651271][T10349] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.694402][ T5820] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001B/input/input27 [ 303.695604][T10352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.822425][ T5820] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 303.907928][ T5820] usb 7-1: USB disconnect, device number 12 [ 303.985511][ T9214] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.991912][ T9434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.004173][ T5771] udevd[5771]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 304.029330][ T5771] udevd[5771]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 304.068905][T10359] fido_id[10359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 304.347021][ T39] kworker/u4:2: attempt to access beyond end of device [ 304.347021][ T39] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 304.397839][ T39] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 304.894207][T10377] loop2: detected capacity change from 0 to 1024 [ 304.979002][T10377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 305.033866][T10377] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.131770][T10386] loop4: detected capacity change from 0 to 128 [ 305.223967][T10363] loop7: detected capacity change from 0 to 32768 [ 305.241158][T10386] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.264458][ T49] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 305.297830][T10386] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.311336][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 305.364210][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 305.364210][ T49] [ 305.377746][T10363] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.379048][ T9434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.516904][ T6258] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.579265][T10363] XFS (loop7): Ending clean mount [ 305.588491][T10397] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 305.701186][T10363] XFS (loop7): Quotacheck needed: Please wait. [ 305.815239][T10399] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 305.861191][T10363] XFS (loop7): Quotacheck: Done. [ 305.913923][ T27] audit: type=1326 audit(1790313559.326:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.019781][ T27] audit: type=1326 audit(1790313559.326:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.142358][ T27] audit: type=1326 audit(1790313559.326:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.256461][ T27] audit: type=1326 audit(1790313559.326:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.333995][ T9214] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.421766][ T27] audit: type=1800 audit(1790313559.366:65): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1142" name="bus" dev="loop7" ino=4428 res=0 errno=0 [ 306.531689][ T27] audit: type=1326 audit(1790313559.366:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.654881][ T27] audit: type=1326 audit(1790313559.366:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.810235][ T27] audit: type=1326 audit(1790313559.366:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 306.941982][ T27] audit: type=1326 audit(1790313559.366:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 307.028657][ T27] audit: type=1326 audit(1790313559.366:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 307.134287][ T27] audit: type=1326 audit(1790313559.366:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 307.212496][ T27] audit: type=1326 audit(1790313559.366:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232eb9e159 code=0x7ffc0000 [ 307.310625][T10405] loop4: detected capacity change from 0 to 131072 [ 307.345071][T10405] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 307.354164][T10405] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 307.410981][T10405] F2FS-fs (loop4): invalid crc value [ 307.438079][T10405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 307.510202][T10405] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 307.517756][T10405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 307.687073][T10415] loop7: detected capacity change from 0 to 128 [ 307.731097][T10415] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 307.779250][T10415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.575400][T10426] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input28 [ 308.881870][T10433] loop7: detected capacity change from 0 to 512 [ 309.557810][T10439] loop7: detected capacity change from 0 to 1024 [ 309.589494][T10439] EXT4-fs: Ignoring removed bh option [ 309.620401][T10429] loop2: detected capacity change from 0 to 32768 [ 309.646263][T10439] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 309.712756][T10429] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 309.752725][T10439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.908769][T10429] (syz.2.1164,10429,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 309.950400][T10439] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #12: block 7: comm syz.7.1168: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 309.955154][T10429] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 310.013966][T10429] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 310.031719][T10439] EXT4-fs (loop7): Remounting filesystem read-only [ 310.054850][T10429] OCFS2: File system is now read-only. [ 310.060443][T10429] (syz.2.1164,10429,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 310.115230][T10429] (syz.2.1164,10429,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 310.124558][T10429] (syz.2.1164,10429,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 310.174902][T10429] (syz.2.1164,10429,1):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 310.206003][T10429] (syz.2.1164,10429,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 310.423287][ T9434] ocfs2: Unmounting device (7,2) on (node local) [ 310.581057][ T9214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.727808][ T2914] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.982268][ T2914] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.109199][ T2914] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.221816][ T2914] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.265103][ T5818] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.468814][ T5818] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 311.504852][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.512935][ T5818] usb 3-1: Product: syz [ 311.553108][ T5818] usb 3-1: Manufacturer: syz [ 311.585117][ T5818] usb 3-1: SerialNumber: syz [ 311.637078][ T5818] usb 3-1: config 0 descriptor?? [ 311.657211][ T5818] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 311.692347][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.746307][ T5818] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 311.770036][ T5818] usb 3-1: media controller created [ 311.838976][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.026792][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.043919][ T5818] DVB: Unable to find symbol mt352_attach() [ 312.057653][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.067735][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.092576][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.100761][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.110109][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.267875][ T5818] DVB: Unable to find symbol nxt6000_attach() [ 312.285180][ T5818] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 312.343798][ T5818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 312.424273][ T5818] dvb-usb: schedule remote query interval to 1000 msecs. [ 312.484830][ T5818] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 312.557215][ T5818] dvb-usb: bulk message failed: -22 (7/0) [ 312.571516][ T5818] dvb-usb: bulk message failed: -22 (7/0) [ 312.593047][T10478] loop6: detected capacity change from 0 to 1024 [ 312.611131][T10478] EXT4-fs: Ignoring removed bh option [ 312.655160][ T5818] usb 3-1: USB disconnect, device number 16 [ 312.674723][T10478] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 312.834090][ T5818] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 312.842411][T10478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.079169][T10478] EXT4-fs error (device loop6): ext4_find_dest_de:2117: inode #12: block 7: comm syz.6.1178: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 313.111744][T10478] EXT4-fs (loop6): Remounting filesystem read-only [ 313.354682][T10495] page:ffffea0001300000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c000 [ 313.355847][T10461] chnl_net:caif_netlink_parms(): no params data found [ 313.371496][T10495] head:ffffea0001300000 order:5 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 313.392617][T10495] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 313.419652][T10495] page_type: 0xffffffff() [ 313.435799][T10495] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 313.460438][T10495] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 313.489329][T10495] page dumped because: unmovable page [ 313.495780][T10495] page_owner tracks the page as allocated [ 313.507048][T10495] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 8861, tgid 8859 (syz.4.734), ts 227578984388, free_ts 210706157581 [ 313.528173][T10495] post_alloc_hook+0x1c1/0x200 [ 313.533078][T10495] get_page_from_freelist+0x2181/0x22a0 [ 313.540432][T10495] __alloc_pages+0x1f0/0x460 [ 313.545495][T10495] __kmalloc_large_node+0x8c/0x1f0 [ 313.550785][T10495] __kmalloc+0x114/0x240 [ 313.555652][T10495] ieee80211_txq_setup_flows+0x737/0xf20 [ 313.561355][T10495] ieee80211_register_hw+0x2924/0x3b30 [ 313.572093][T10495] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 313.578165][T10495] hwsim_new_radio_nl+0xdad/0x1a70 [ 313.583338][T10495] genl_family_rcv_msg_doit+0x21a/0x310 [ 313.591782][T10495] genl_rcv_msg+0x611/0x7a0 [ 313.596439][T10495] netlink_rcv_skb+0x235/0x4c0 [ 313.601972][T10495] genl_rcv+0x28/0x40 [ 313.609397][T10495] netlink_unicast+0x7b1/0x930 [ 313.614303][T10495] netlink_sendmsg+0x8d0/0xbf0 [ 313.619211][T10495] ____sys_sendmsg+0x61b/0x980 [ 313.624022][T10495] page last free stack trace: [ 313.628781][T10495] free_unref_page_prepare+0x7d7/0x8f0 [ 313.634275][T10495] free_unref_page+0x32/0x2e0 [ 313.640639][T10495] __unfreeze_partials+0x1cf/0x210 [ 313.648722][T10495] put_cpu_partial+0x17c/0x250 [ 313.653526][T10495] __slab_free+0x319/0x400 [ 313.658035][T10495] qlist_free_all+0x75/0xd0 [ 313.662599][T10495] kasan_quarantine_reduce+0x143/0x160 [ 313.668145][T10495] __kasan_slab_alloc+0x22/0x80 [ 313.673047][T10495] slab_post_alloc_hook+0x6a/0x4d0 [ 313.678285][T10495] kmem_cache_alloc+0x17e/0x2c0 [ 313.683193][T10495] vm_area_dup+0x27/0x270 [ 313.687603][T10495] copy_mm+0x11a6/0x1e30 [ 313.691890][T10495] copy_process+0x16c9/0x3da0 [ 313.696766][T10495] kernel_clone+0x24b/0x8a0 [ 313.701303][T10495] __x64_sys_clone+0x1b7/0x230 [ 313.706996][T10495] do_syscall_64+0x55/0xb0 [ 313.928120][T10497] syz.2.1182 (10497) used greatest stack depth: 17944 bytes left [ 313.970531][T10499] syz.2.1182 (10499) used greatest stack depth: 17896 bytes left [ 314.022226][ T9546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.205799][ T5784] Bluetooth: hci0: command tx timeout [ 314.265042][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.285009][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.292317][T10461] bridge_slave_0: entered allmulticast mode [ 314.306799][T10461] bridge_slave_0: entered promiscuous mode [ 314.400428][ T56] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 314.517292][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.529751][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.552103][T10461] bridge_slave_1: entered allmulticast mode [ 314.580727][T10461] bridge_slave_1: entered promiscuous mode [ 314.595116][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 314.611739][ T56] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.641810][ T56] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.688840][ T2914] hsr_slave_0: left promiscuous mode [ 314.704585][ T56] usb 5-1: config 0 interface 0 has no altsetting 0 [ 314.714073][ T2914] hsr_slave_1: left promiscuous mode [ 314.726613][ T56] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 314.736192][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.745623][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.753260][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.762060][ T56] usb 5-1: config 0 descriptor?? [ 314.776569][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.803630][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.825884][ T2914] bridge_slave_1: left allmulticast mode [ 314.832168][ T2914] bridge_slave_1: left promiscuous mode [ 314.846143][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.868546][ T2914] bridge_slave_0: left allmulticast mode [ 314.874508][ T2914] bridge_slave_0: left promiscuous mode [ 314.881167][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.968064][ T2914] veth1_macvtap: left promiscuous mode [ 314.984071][ T2914] veth0_macvtap: left promiscuous mode [ 315.001061][ T2914] veth1_vlan: left promiscuous mode [ 315.015401][ T2914] veth0_vlan: left promiscuous mode [ 315.208402][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.219739][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.228205][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.254223][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.256444][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.268883][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.272835][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.292314][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.293956][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.315638][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 315.326407][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.376800][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.384158][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.392034][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.431865][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.442241][ T56] saitek 0003:06A3:0CD7.001C: unknown main item tag 0x0 [ 315.454176][ T56] saitek 0003:06A3:0CD7.001C: collection stack underflow [ 315.462838][ T56] saitek 0003:06A3:0CD7.001C: item 0 0 0 12 parsing failed [ 315.477536][ T56] saitek 0003:06A3:0CD7.001C: parse failed [ 315.483590][ T56] saitek: probe of 0003:06A3:0CD7.001C failed with error -22 [ 315.515242][ T56] usb 5-1: USB disconnect, device number 15 [ 316.280050][ T5780] Bluetooth: hci0: command tx timeout [ 316.349974][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 316.471043][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 316.594547][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.689763][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.016844][T10532] loop4: detected capacity change from 0 to 1024 [ 317.024630][T10532] EXT4-fs: Ignoring removed bh option [ 317.043869][T10532] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 317.112311][T10532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.365881][T10532] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.1189: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 317.420362][ T5780] Bluetooth: hci3: command tx timeout [ 317.420881][T10532] EXT4-fs (loop4): Remounting filesystem read-only [ 317.484426][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.491284][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.493512][ T2914] bond0 (unregistering): Released all slaves [ 317.822375][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.841819][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.972621][ T6258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.097342][T10461] team0: Port device team_slave_0 added [ 318.216477][T10461] team0: Port device team_slave_1 added [ 318.302585][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.313310][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.369051][ T5780] Bluetooth: hci0: command tx timeout [ 318.381151][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.415462][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.422934][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.464570][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.739010][T10461] hsr_slave_0: entered promiscuous mode [ 318.802308][T10461] hsr_slave_1: entered promiscuous mode [ 318.864914][T10558] device-mapper: ioctl: Unable to rename non-existent device, to [ 319.138846][ T2914] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.313618][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.328227][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.338044][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.338225][T10521] chnl_net:caif_netlink_parms(): no params data found [ 319.376882][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.398561][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.406567][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.472666][ T2914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.475169][ T5790] Bluetooth: hci3: command tx timeout [ 319.601971][ T2914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.746139][T10580] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 319.888724][ T2914] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.155479][T10521] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.162786][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.187730][T10521] bridge_slave_0: entered allmulticast mode [ 320.195752][T10521] bridge_slave_0: entered promiscuous mode [ 320.216366][T10521] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.223911][T10521] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.240387][T10521] bridge_slave_1: entered allmulticast mode [ 320.272082][T10521] bridge_slave_1: entered promiscuous mode [ 320.324023][T10595] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.443581][ T5790] Bluetooth: hci0: command tx timeout [ 320.497230][T10521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.670790][T10521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.880677][ T2914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.920942][T10521] team0: Port device team_slave_0 added [ 320.927570][T10461] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 320.946453][T10461] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 320.959567][T10521] team0: Port device team_slave_1 added [ 321.010149][ T2914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.033182][T10569] chnl_net:caif_netlink_parms(): no params data found [ 321.049311][T10461] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 321.059068][T10461] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 321.115586][ T2914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.138677][T10521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.148348][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.182613][T10521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.195427][T10521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.202500][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.228790][T10521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.281075][ T2914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.377210][T10569] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.384693][T10569] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.392254][T10569] bridge_slave_0: entered allmulticast mode [ 321.400871][T10569] bridge_slave_0: entered promiscuous mode [ 321.410001][T10569] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.418517][T10569] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.426483][T10569] bridge_slave_1: entered allmulticast mode [ 321.433349][T10569] bridge_slave_1: entered promiscuous mode [ 321.470776][T10521] hsr_slave_0: entered promiscuous mode [ 321.476657][ T5790] Bluetooth: hci2: command tx timeout [ 321.492279][T10521] hsr_slave_1: entered promiscuous mode [ 321.498971][T10521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.506905][T10521] Cannot create hsr debugfs directory [ 321.546569][T10569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.565055][ T5790] Bluetooth: hci3: command tx timeout [ 321.584005][T10569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.648556][T10569] team0: Port device team_slave_0 added [ 321.727247][T10569] team0: Port device team_slave_1 added [ 321.869982][T10569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.877303][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.907581][T10569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.936012][T10569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.943036][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.972131][T10569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.230805][T10569] hsr_slave_0: entered promiscuous mode [ 322.238290][T10569] hsr_slave_1: entered promiscuous mode [ 322.248456][T10569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.256213][T10569] Cannot create hsr debugfs directory [ 322.373139][T10461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.661064][T10461] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.896448][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.903621][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.939673][T10521] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 323.007912][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.015142][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.031339][T10521] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 323.045385][T10521] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 323.139206][T10521] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 323.564929][ T5790] Bluetooth: hci2: command tx timeout [ 323.627737][T10521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.635048][ T5790] Bluetooth: hci3: command tx timeout [ 323.730961][T10521] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.778349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.785567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.920910][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.928142][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.319578][ T2914] hsr_slave_0: left promiscuous mode [ 324.327507][ T2914] hsr_slave_1: left promiscuous mode [ 324.333858][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.342597][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.351961][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.361097][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.369493][ T2914] bridge_slave_1: left allmulticast mode [ 324.377967][ T2914] bridge_slave_1: left promiscuous mode [ 324.383896][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.395645][ T2914] bridge_slave_0: left allmulticast mode [ 324.401357][ T2914] bridge_slave_0: left promiscuous mode [ 324.407871][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.427752][ T2914] hsr_slave_0: left promiscuous mode [ 324.437168][ T2914] hsr_slave_1: left promiscuous mode [ 324.443400][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.453526][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.461944][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.469785][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.480668][ T2914] bridge_slave_1: left allmulticast mode [ 324.486907][ T2914] bridge_slave_1: left promiscuous mode [ 324.492694][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.503015][ T2914] bridge_slave_0: left allmulticast mode [ 324.509340][ T2914] bridge_slave_0: left promiscuous mode [ 324.517060][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.524495][ T2914] general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] PREEMPT SMP KASAN [ 324.536231][ T2914] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 324.545505][ T2914] CPU: 1 PID: 2914 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 324.553040][ T2914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.563087][ T2914] Workqueue: netns cleanup_net [ 324.567878][ T2914] RIP: 0010:br_del_frame+0xd1/0x150 [ 324.573248][ T2914] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 79 88 75 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 00 89 75 f8 4d 89 37 4d 85 f6 74 [ 324.593023][ T2914] RSP: 0018:ffffc9000bb27870 EFLAGS: 00010a06 [ 324.599088][ T2914] RAX: 1bd5a00000000024 RBX: ffffffff8e8e1700 RCX: ffff88802be01e00 [ 324.607057][ T2914] RDX: 0000000000000000 RSI: ffffffff8e8e16e8 RDI: ffffffff8e8e16f8 [ 324.615042][ T2914] RBP: 000000000000001d R08: ffffffff911eb50f R09: 1ffffffff223d6a1 [ 324.623023][ T2914] R10: dffffc0000000000 R11: fffffbfff223d6a2 R12: dffffc0000000000 [ 324.630988][ T2914] R13: 1ffffffff1d1c2e0 R14: 0000000000000000 R15: dead000000000122 [ 324.638954][ T2914] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 324.647880][ T2914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.654460][ T2914] CR2: 00005596e0dda138 CR3: 000000002f613000 CR4: 00000000003506e0 [ 324.662459][ T2914] Call Trace: [ 324.665732][ T2914] [ 324.668656][ T2914] br_cfm_port_del+0x116/0x1b0 [ 324.673421][ T2914] del_nbp+0x167/0x9e0 [ 324.677490][ T2914] br_dev_delete+0x6e/0x130 [ 324.681991][ T2914] ? nbp_backup_change+0x390/0x390 [ 324.687096][ T2914] default_device_exit_batch+0x8c0/0xa00 [ 324.692750][ T2914] ? __might_sleep+0xe0/0xe0 [ 324.697343][ T2914] ? rdma_dev_exit_net+0x2b3/0x340 [ 324.702449][ T2914] ? netdev_exit+0xc0/0xc0 [ 324.707039][ T2914] ? rdma_dev_init_net+0x280/0x280 [ 324.712586][ T2914] ? netdev_exit+0xc0/0xc0 [ 324.717008][ T2914] cleanup_net+0x785/0xb00 [ 324.721419][ T2914] ? ops_free_list+0x3b0/0x3b0 [ 324.726183][ T2914] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.731374][ T2914] ? process_scheduled_works+0x975/0x1600 [ 324.737088][ T2914] ? process_scheduled_works+0x975/0x1600 [ 324.742803][ T2914] process_scheduled_works+0xa60/0x1600 [ 324.748367][ T2914] ? worker_attach_to_pool+0x370/0x370 [ 324.753872][ T2914] ? assign_work+0x3cc/0x5d0 [ 324.758482][ T2914] worker_thread+0xa5e/0xfe0 [ 324.763108][ T2914] kthread+0x2fa/0x390 [ 324.767188][ T2914] ? pr_cont_work+0x550/0x550 [ 324.771956][ T2914] ? kthread_blkcg+0xd0/0xd0 [ 324.776545][ T2914] ret_from_fork+0x48/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.780973][ T2914] ? kthread_blkcg+0xd0/0xd0 [ 324.785555][ T2914] ret_from_fork_asm+0x11/0x20 [ 324.790336][ T2914] [ 324.793348][ T2914] Modules linked in: [ 324.808854][ T2914] ---[ end trace 0000000000000000 ]--- [ 324.814532][ T2914] RIP: 0010:br_del_frame+0xd1/0x150 [ 324.857611][ T2914] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 79 88 75 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 00 89 75 f8 4d 89 37 4d 85 f6 74 [ 324.878040][ T2914] RSP: 0018:ffffc9000bb27870 EFLAGS: 00010a06 [ 324.884164][ T2914] RAX: 1bd5a00000000024 RBX: ffffffff8e8e1700 RCX: ffff88802be01e00 [ 324.893223][ T2914] RDX: 0000000000000000 RSI: ffffffff8e8e16e8 RDI: ffffffff8e8e16f8 [ 324.901632][ T2914] RBP: 000000000000001d R08: ffffffff911eb50f R09: 1ffffffff223d6a1 [ 324.911662][ T2914] R10: dffffc0000000000 R11: fffffbfff223d6a2 R12: dffffc0000000000 [ 324.920330][ T2914] R13: 1ffffffff1d1c2e0 R14: 0000000000000000 R15: dead000000000122 [ 324.928536][ T2914] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 324.937861][ T2914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.944492][ T2914] CR2: 00005573659dd000 CR3: 000000007df6e000 CR4: 00000000003506f0 [ 324.953016][ T2914] Kernel panic - not syncing: Fatal exception [ 324.959500][ T2914] Kernel Offset: disabled [ 324.963824][ T2914] Rebooting in 86400 seconds..