last executing test programs: 17.104264144s ago: executing program 0 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) 14.248241655s ago: executing program 0 (id=671): open(0x0, 0xc2802, 0x181) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 11.567984222s ago: executing program 3 (id=673): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x80000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) read$FUSE(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000100)={@private=0xa010100, @multicast2, 0x0, "125e43d51bec0a7ce21187a51fce2582334bf7b2cdea481fc30a363470b828a6", 0x1ff, 0x6, 0x1, 0xfffffff6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000002600)=0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x1, 0x4}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) fsopen(0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x140}) mmap(&(0x7f0000857000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 11.132089033s ago: executing program 2 (id=675): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e0000002000000080000000000000000ffffffff000000000000000000000000000329944e230020020000003c000000", @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d36c00000000000000000000000000ffffac141418000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 9.813420606s ago: executing program 0 (id=677): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$vbi(0x0, 0x2, 0x2) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 8.591098506s ago: executing program 0 (id=678): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 8.552032137s ago: executing program 2 (id=679): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT], 0x1, 0x1e9, &(0x7f0000000580)="$eJzslc1qU0EUx39z76RpNIuuXRUsthttcwviG9gH8AEM6bUWb/zoDWhCweimGxfiSxR8CheC7l2ICG7qQkEXFVcVicydM+OEBGKlCoX5Qzgfcz5z55y5Wd4r68DPw90OC1RQNHmvFBpYVlZ3NGfpN6EjwSdt5Zbonwv9KLTsD948sezgVrso8p2yP4NRCmbZFCMsI+kZN9JTkjnLmaFfPx7XKKYaJ8Af9XMijMk2cdRLbUuTXk/HNPVpNuLLfyj+75nFY9wb26llvjfHr8Tnky6sxr/uHbzmR3P2Z3r3zH7OqTapuDcmJuW0McmxvEpkfZVXHyV8rYS3h7sdw1yXLWZ0m/bnRqKyMcLLwOachiGolJGPo6ttCcvAaq97d7XsDy5ud9tb+VZ+O8vWL6+9OisjOnoI20W+poIyzFDj9hJg5rQRnNeAD7/PhwRQQWkGZ0DJzvUh3XJeOR84NiAJfMMYNu4Ln78uupQu17jAPHB/qBYhw/5bS5homhumtQ0UqQgtHdQJRyTMVweXOneKzT0Uyrnto32M1gE1L2QimET5+hXf/p7QJaEbQveFHgh1b5d7k3QV4YtIK0OY40G719upHi/LeV3mddmCz5xIVvcaKldJnYiIiIiIiIiIU4JfAQAA//9E3UGM") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 8.43377196s ago: executing program 1 (id=680): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40940, 0x0) close(0x3) r1 = socket(0x28, 0x801, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) chdir(&(0x7f0000000040)='./file0\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r8 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000040)={0xa0000019}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r0, &(0x7f0000000080)={0x2000}) 8.325146703s ago: executing program 2 (id=681): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 6.563983737s ago: executing program 0 (id=682): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x5b, 0x2010, 0x0, 0x0}], 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @empty, 0xb}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xc, 0x4, @tid=r3}, 0x0) r4 = syz_io_uring_setup(0x3e7e, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000001100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) read$FUSE(r2, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xe0c0, 0x0) 6.563661847s ago: executing program 2 (id=683): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a00000100000000000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 5.516199793s ago: executing program 3 (id=684): socket$l2tp6(0xa, 0x2, 0x73) r0 = getpgid(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 5.460694424s ago: executing program 1 (id=685): open(0x0, 0xc2802, 0x181) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3.984889921s ago: executing program 3 (id=686): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/bus/pci/devices/0000:00:01.3/irq\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0xa) 3.759609056s ago: executing program 1 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a302037", 0x2d) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/45) 3.61215449s ago: executing program 3 (id=688): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e0000002000000080000000000000000ffffffff000000000000000000000000000329944e230020020000003c000000", @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d36c00000000000000000000000000ffffac141418000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 3.61090731s ago: executing program 1 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sg(0x0, 0x9, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000180)={@rand_addr=0x640100ff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "fbd194a4a0c986ff21c1bac6917bf18aa114b0eb7cd0166f0d67d610e1b6f9f4", 0x0, 0x9, 0x3, 0xfffff001}, 0x3c) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2.594691095s ago: executing program 1 (id=690): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 2.593902106s ago: executing program 3 (id=691): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x8f) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) 1.61576236s ago: executing program 1 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x81000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00') 1.545816801s ago: executing program 0 (id=693): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40940, 0x0) close(0x3) r1 = socket(0x28, 0x801, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) chdir(&(0x7f0000000040)='./file0\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r8 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000040)={0xa0000019}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r0, &(0x7f0000000080)={0x2000}) 1.543754952s ago: executing program 2 (id=694): socket$l2tp6(0xa, 0x2, 0x73) r0 = getpgid(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.364082896s ago: executing program 3 (id=695): r0 = openat$mice(0xffffff9c, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r3, 0x0, 0x0) 0s ago: executing program 2 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/bus/pci/devices/0000:00:01.3/irq\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0xa) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 51.248647][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.261031][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. syzkaller login: [ 73.786400][ T5757] cgroup: Unknown subsys name 'net' [ 73.948202][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.355685][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.797599][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.846123][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.853702][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.864581][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.872641][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.873832][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.890258][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.898568][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.906809][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.914438][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.915695][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.923978][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.934085][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.939866][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.948476][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.968966][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.976356][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.976439][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.002016][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.018451][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.026180][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.034002][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.042057][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.042136][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.467343][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.491736][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 77.513286][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.584201][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.685674][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.694315][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.702729][ T5771] bridge_slave_0: entered allmulticast mode [ 77.709602][ T5771] bridge_slave_0: entered promiscuous mode [ 77.750019][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.757925][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.765603][ T5771] bridge_slave_1: entered allmulticast mode [ 77.772784][ T5771] bridge_slave_1: entered promiscuous mode [ 77.826660][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.834020][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.841201][ T5768] bridge_slave_0: entered allmulticast mode [ 77.848291][ T5768] bridge_slave_0: entered promiscuous mode [ 77.866752][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.874038][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.883933][ T5776] bridge_slave_0: entered allmulticast mode [ 77.890874][ T5776] bridge_slave_0: entered promiscuous mode [ 77.898763][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.906789][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.914143][ T5776] bridge_slave_1: entered allmulticast mode [ 77.921003][ T5776] bridge_slave_1: entered promiscuous mode [ 77.935824][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.945771][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.954232][ T5768] bridge_slave_1: entered allmulticast mode [ 77.961654][ T5768] bridge_slave_1: entered promiscuous mode [ 77.991103][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.005609][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.033017][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.040315][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.047843][ T5775] bridge_slave_0: entered allmulticast mode [ 78.055662][ T5775] bridge_slave_0: entered promiscuous mode [ 78.085180][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.098332][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.118614][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.126367][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.134625][ T5775] bridge_slave_1: entered allmulticast mode [ 78.142293][ T5775] bridge_slave_1: entered promiscuous mode [ 78.153126][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.193942][ T5768] team0: Port device team_slave_0 added [ 78.202507][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.229797][ T5771] team0: Port device team_slave_0 added [ 78.240671][ T5771] team0: Port device team_slave_1 added [ 78.259640][ T5768] team0: Port device team_slave_1 added [ 78.269324][ T5776] team0: Port device team_slave_0 added [ 78.288882][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.301878][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.321182][ T5776] team0: Port device team_slave_1 added [ 78.384845][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.392326][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.419069][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.432801][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.439864][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.466181][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.495251][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.502757][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.531598][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.544259][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.552876][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.579644][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.595148][ T5775] team0: Port device team_slave_0 added [ 78.602288][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.609361][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.639117][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.662045][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.669421][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.696558][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.709801][ T5775] team0: Port device team_slave_1 added [ 78.754252][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.762326][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.789068][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.806999][ T5771] hsr_slave_0: entered promiscuous mode [ 78.813788][ T5771] hsr_slave_1: entered promiscuous mode [ 78.844576][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.851868][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.878294][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.898513][ T5768] hsr_slave_0: entered promiscuous mode [ 78.905359][ T5768] hsr_slave_1: entered promiscuous mode [ 78.911916][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.919741][ T5768] Cannot create hsr debugfs directory [ 78.977613][ T5776] hsr_slave_0: entered promiscuous mode [ 78.984998][ T5776] hsr_slave_1: entered promiscuous mode [ 78.992480][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.000445][ T5776] Cannot create hsr debugfs directory [ 79.040098][ T5775] hsr_slave_0: entered promiscuous mode [ 79.047084][ T5775] hsr_slave_1: entered promiscuous mode [ 79.053594][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.061171][ T5775] Cannot create hsr debugfs directory [ 79.067330][ T5774] Bluetooth: hci0: command tx timeout [ 79.073221][ T51] Bluetooth: hci1: command tx timeout [ 79.141956][ T5774] Bluetooth: hci2: command tx timeout [ 79.142298][ T51] Bluetooth: hci3: command tx timeout [ 79.469283][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.486488][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.497509][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.507312][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.569514][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.579711][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.603940][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.634248][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.704597][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.717823][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.729448][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.739395][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.854887][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.865867][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.876519][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.890098][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.955662][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.003335][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.027304][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.053929][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.061861][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.085466][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.104750][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.112136][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.176340][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.190965][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.218147][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.225733][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.238494][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.245831][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.255329][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.262567][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.277040][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.306766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.314090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.366533][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.416539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.423958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.484042][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.491713][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.786151][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.924902][ T5771] veth0_vlan: entered promiscuous mode [ 80.937408][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.989181][ T5771] veth1_vlan: entered promiscuous mode [ 81.092265][ T5768] veth0_vlan: entered promiscuous mode [ 81.102104][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.110028][ T5771] veth0_macvtap: entered promiscuous mode [ 81.120420][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.135527][ T5771] veth1_macvtap: entered promiscuous mode [ 81.141751][ T51] Bluetooth: hci1: command tx timeout [ 81.153539][ T51] Bluetooth: hci0: command tx timeout [ 81.168023][ T5768] veth1_vlan: entered promiscuous mode [ 81.197854][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.222851][ T51] Bluetooth: hci2: command tx timeout [ 81.228404][ T51] Bluetooth: hci3: command tx timeout [ 81.240884][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.264765][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276390][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.286733][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.295847][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.339747][ T5775] veth0_vlan: entered promiscuous mode [ 81.377172][ T5776] veth0_vlan: entered promiscuous mode [ 81.387387][ T5768] veth0_macvtap: entered promiscuous mode [ 81.405516][ T5775] veth1_vlan: entered promiscuous mode [ 81.421149][ T5768] veth1_macvtap: entered promiscuous mode [ 81.450916][ T5776] veth1_vlan: entered promiscuous mode [ 81.536547][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.545525][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.563408][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.573039][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.586344][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.621073][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.633382][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.645703][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.654434][ T5776] veth0_macvtap: entered promiscuous mode [ 81.671175][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.672489][ T5776] veth1_macvtap: entered promiscuous mode [ 81.685055][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.704804][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.719342][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.730208][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.739544][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.770939][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.783183][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.793795][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.805005][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.817076][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.845399][ T5775] veth0_macvtap: entered promiscuous mode [ 81.887129][ T5775] veth1_macvtap: entered promiscuous mode [ 81.897724][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.909784][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.920556][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.931513][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.944958][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.982134][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.001707][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.010550][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.019759][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.243548][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.261878][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.277161][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.300872][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.311224][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.323406][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.335676][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.448471][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.460821][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.025589][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.046188][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.074386][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.077166][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.101494][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.112953][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.123795][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.135333][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.174328][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.232802][ T51] Bluetooth: hci0: command tx timeout [ 83.241165][ T5774] Bluetooth: hci1: command tx timeout [ 83.259425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.302147][ T5774] Bluetooth: hci3: command tx timeout [ 83.307847][ T51] Bluetooth: hci2: command tx timeout [ 83.314478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.336825][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.368235][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.401916][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.411038][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.585910][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.606545][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.629647][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.847521][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.978755][ T5810] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.987956][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.165245][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.193101][ T5847] syz.3.4[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.208392][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.258587][ T5847] loop3: detected capacity change from 0 to 512 [ 84.280741][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.325214][ T5810] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.361440][ T5810] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 84.400550][ T5810] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 84.444184][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.470649][ T5810] usb 1-1: Product: syz [ 84.490419][ T5810] usb 1-1: Manufacturer: syz [ 84.505814][ T5810] usb 1-1: SerialNumber: syz [ 85.315896][ T8] IPVS: starting estimator thread 0... [ 85.519229][ T5774] Bluetooth: hci1: command tx timeout [ 85.525344][ T51] Bluetooth: hci0: command tx timeout [ 85.532104][ T5857] IPVS: using max 34 ests per chain, 81600 per kthread [ 85.536859][ T5772] Bluetooth: hci3: command tx timeout [ 85.539498][ T5782] Bluetooth: hci2: command tx timeout [ 85.552875][ C0] usb 1-1: received EP1 urb->status = -2 [ 85.559042][ T5810] usb 1-1: unable to init card! (ret=-110) [ 85.566994][ T5810] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 86.001961][ T5870] loop3: detected capacity change from 0 to 1024 [ 86.058175][ T5873] jffs2: notice: (5873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.334602][ T5878] loop3: detected capacity change from 0 to 4096 [ 86.544958][ T5878] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 86.592728][ T5880] syzkaller0: entered promiscuous mode [ 86.598458][ T5880] syzkaller0: entered allmulticast mode [ 86.606859][ T5885] jffs2: notice: (5885) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.426879][ T5878] ntfs3: loop3: Failed to load $Extend (-22). [ 87.474649][ T5878] ntfs3: loop3: Failed to initialize $Extend. [ 87.511743][ T5845] usb 1-1: USB disconnect, device number 2 [ 89.075721][ T5911] loop3: detected capacity change from 0 to 1024 [ 89.141957][ T5911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.176518][ T5911] EXT4-fs: Ignoring removed i_version option [ 89.186700][ T5911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.231964][ T5911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.345827][ T5911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.410841][ T5911] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.851126][ T5920] syzkaller0: entered promiscuous mode [ 89.857258][ T5920] syzkaller0: entered allmulticast mode [ 90.383429][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.718040][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 90.878781][ T5932] loop2: detected capacity change from 0 to 4096 [ 90.953007][ T5933] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5933] [ 91.008940][ T5932] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 91.051429][ T5777] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 91.079962][ T5932] ntfs3: loop2: Failed to load $Extend (-22). [ 91.109069][ T5932] ntfs3: loop2: Failed to initialize $Extend. [ 91.276833][ T5929] loop0: detected capacity change from 0 to 32768 [ 91.291724][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.314327][ T5777] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.355319][ T5777] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 92.481631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 92.653370][ T788] cfg80211: failed to load regulatory.db [ 92.672565][ T5777] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 92.718522][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.777378][ T5777] usb 4-1: Product: syz [ 92.785720][ T5929] ======================================================= [ 92.785720][ T5929] WARNING: The mand mount option has been deprecated and [ 92.785720][ T5929] and is ignored by this kernel. Remove the mand [ 92.785720][ T5929] option from the mount to silence this warning. [ 92.785720][ T5929] ======================================================= [ 92.824633][ T5777] usb 4-1: Manufacturer: syz [ 92.829371][ T5777] usb 4-1: SerialNumber: syz [ 93.301869][ C1] usb 4-1: received EP1 urb->status = -2 [ 93.307819][ T5777] usb 4-1: unable to init card! (ret=-110) [ 93.314981][ T5777] snd-usb-caiaq: probe of 4-1:1.0 failed with error -110 [ 93.895114][ T5949] IPVS: dh: FWM 3 0x00000003 - no destination available [ 94.411701][ T5955] syzkaller0: entered promiscuous mode [ 94.417261][ T5955] syzkaller0: entered allmulticast mode [ 94.453120][ T5845] usb 4-1: USB disconnect, device number 2 [ 97.406105][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'. syzkaller syzkaller login: [ 97.821649][ T5988] syzkaller0: entered promiscuous mode [ 97.827285][ T5988] syzkaller0: entered allmulticast mode [ 98.578609][ T5777] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.646719][ T5990] Zero length message leads to an empty skb [ 98.945035][ T5777] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.986383][ T5777] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.027855][ T5777] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.106300][ T5777] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 99.129734][ T5777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.178045][ T5777] usb 2-1: Product: syz [ 99.196389][ T5777] usb 2-1: Manufacturer: syz [ 99.360303][ T5777] usb 2-1: SerialNumber: syz [ 99.801278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.681317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.331647][ T5777] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 101.338323][ T5777] usb 2-1: unable to init card! (ret=-5) [ 101.362465][ T5777] snd-usb-caiaq: probe of 2-1:1.0 failed with error -5 [ 101.394261][ T5777] usb 2-1: USB disconnect, device number 2 [ 101.476242][ T6004] loop0: detected capacity change from 0 to 512 [ 101.494416][ T6004] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 103.689764][ T6015] binder: 6013:6015 ioctl 4018620d 0 returned -22 [ 106.650785][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 107.081702][ T5808] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 107.356134][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.371859][ T5808] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.442780][ T5808] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 107.512348][ T5808] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 107.557277][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.570214][ T5808] usb 3-1: Product: syz [ 107.579356][ T5808] usb 3-1: Manufacturer: syz [ 107.585025][ T5808] usb 3-1: SerialNumber: syz [ 107.696843][ T6034] loop0: detected capacity change from 0 to 4096 [ 107.862171][ T6034] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 108.031904][ C0] usb 3-1: received EP1 urb->status = -2 [ 108.038096][ T5808] usb 3-1: unable to init card! (ret=-110) [ 108.054603][ T5808] snd-usb-caiaq: probe of 3-1:1.0 failed with error -110 [ 108.234609][ T6034] ntfs3: loop0: Failed to load $Extend (-22). [ 108.380465][ T6034] ntfs3: loop0: Failed to initialize $Extend. [ 108.609169][ T6041] loop3: detected capacity change from 0 to 2048 [ 109.877177][ T5777] usb 3-1: USB disconnect, device number 2 [ 109.954154][ T6041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.967574][ T6041] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.080422][ T6050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.66: bg 0: block 345: padding at end of block bitmap is not set [ 110.144385][ T6050] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 110.172727][ T6050] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.172727][ T6050] [ 110.202513][ T6041] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 254 with error 28 [ 110.239910][ T6041] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.239910][ T6041] [ 110.283929][ T6041] EXT4-fs (loop3): Total free blocks count 0 [ 110.326797][ T6041] EXT4-fs (loop3): Free/Dirty block details [ 110.347285][ T6041] EXT4-fs (loop3): free_blocks=0 [ 110.360595][ T6041] EXT4-fs (loop3): dirty_blocks=256 [ 110.367266][ T6041] EXT4-fs (loop3): Block reservation details [ 110.632376][ T6063] loop0: detected capacity change from 0 to 512 [ 110.648989][ T6063] EXT4-fs: inline encryption not supported [ 110.692047][ T6063] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.717240][ T6063] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.740554][ T6063] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.780487][ T6063] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.76: bad orphan inode 131083 [ 110.809601][ T6063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.789721][ T6079] netlink: 108 bytes leftover after parsing attributes in process `syz.1.71'. [ 111.865874][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.890914][ T6080] loop2: detected capacity change from 0 to 4096 [ 111.978620][ T6080] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 112.961520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 113.291795][ T51] Bluetooth: hci3: command tx timeout [ 113.325307][ T6080] ntfs3: loop2: Failed to load $Extend (-22). [ 113.331640][ T6080] ntfs3: loop2: Failed to initialize $Extend. [ 115.065073][ T6105] loop3: detected capacity change from 0 to 512 [ 115.086071][ T6105] EXT4-fs: inline encryption not supported [ 115.109506][ T6105] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.130048][ T6105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.168086][ T6105] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.88: bad orphan inode 131083 [ 115.195003][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.448131][ T6105] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 115.537554][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.843031][ T6132] binder: 6130:6132 ioctl 4018620d 0 returned -22 [ 120.231936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 120.718190][ T6138] loop0: detected capacity change from 0 to 512 [ 120.739586][ T6138] EXT4-fs: inline encryption not supported [ 122.003127][ T6138] EXT4-fs (loop0): Test dummy encryption mode enabled [ 122.010050][ T6138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.122476][ T6138] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.97: bad orphan inode 131083 [ 122.174377][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.318385][ T6148] loop2: detected capacity change from 0 to 512 [ 122.355582][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.392612][ T6148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 122.400886][ T6148] System zones: 1-12 [ 122.471215][ T6148] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.100: missing EA_INODE flag [ 122.563598][ T6148] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.100: error while reading EA inode 12 err=-117 [ 122.603163][ T6148] EXT4-fs (loop2): 1 orphan inode deleted [ 122.610236][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.148603][ T6160] overlayfs: missing 'lowerdir' [ 124.027087][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.091886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 125.365522][ T28] audit: type=1800 audit(1788399612.812:2): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="manufacturer" dev="configfs" ino=7096 res=0 errno=0 [ 128.004033][ T6180] loop1: detected capacity change from 0 to 512 [ 128.164009][ T6180] EXT4-fs: inline encryption not supported [ 128.300036][ T6180] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.408321][ T6180] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.639262][ T6180] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.109: bad orphan inode 131083 [ 128.945912][ T6180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.509159][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.881529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 130.998205][ T6195] loop1: detected capacity change from 0 to 4096 [ 132.355298][ T6195] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 132.408321][ T6195] ntfs3: loop1: Failed to load $Extend (-22). [ 132.431647][ T6195] ntfs3: loop1: Failed to initialize $Extend. [ 133.441484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 133.851468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 134.335778][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.348303][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.523819][ T6224] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 135.557829][ T6224] rtrs_client L2075: : Failed to resolve address, err: -19 [ 135.568924][ T6224] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 136.212635][ T6226] loop1: detected capacity change from 0 to 512 [ 136.331743][ T6226] EXT4-fs: inline encryption not supported [ 136.463554][ T6226] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.470902][ T6226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.504660][ T6226] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.123: bad orphan inode 131083 [ 136.538037][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.888856][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.030216][ T6260] loop0: detected capacity change from 0 to 512 [ 141.063016][ T6260] EXT4-fs: inline encryption not supported [ 141.102212][ T6260] EXT4-fs (loop0): Test dummy encryption mode enabled [ 141.109251][ T6260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.162316][ T6260] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.136: bad orphan inode 131083 [ 141.238786][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.304166][ T6264] loop3: detected capacity change from 0 to 2048 [ 141.362327][ T6264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.411785][ T6264] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.455697][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.609997][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.681406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.617769][ T6293] loop3: detected capacity change from 0 to 512 [ 144.658131][ T6293] EXT4-fs: inline encryption not supported [ 144.694321][ T6293] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.713931][ T6293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.751507][ T6293] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.146: bad orphan inode 131083 [ 144.816901][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.333034][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.300144][ T6344] syzkaller0: entered promiscuous mode [ 152.305830][ T6344] syzkaller0: entered allmulticast mode [ 155.208861][ T6358] loop0: detected capacity change from 0 to 512 [ 155.222820][ T6358] EXT4-fs: inline encryption not supported [ 155.251526][ T6358] EXT4-fs (loop0): Test dummy encryption mode enabled [ 155.259320][ T6358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.334812][ T6358] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.157: bad orphan inode 131083 [ 155.477949][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.582499][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.793405][ T6376] loop0: detected capacity change from 0 to 512 [ 158.851903][ T6376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 158.961400][ T6376] System zones: 1-12 [ 158.977570][ T6376] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.170: missing EA_INODE flag [ 159.081506][ T6376] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.170: error while reading EA inode 12 err=-117 [ 159.131531][ T6376] EXT4-fs (loop0): 1 orphan inode deleted [ 159.147220][ T6376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.433324][ T6384] overlayfs: missing 'lowerdir' [ 159.976401][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.465957][ T6389] binder: 6386:6389 ioctl 4018620d 0 returned -22 [ 166.029515][ T6412] sched: RT throttling activated [ 166.369300][ T6416] binder: 6414:6416 ioctl 4018620d 0 returned -22 [ 168.113514][ T6419] syzkaller0: entered promiscuous mode [ 168.119275][ T6419] syzkaller0: entered allmulticast mode [ 168.284716][ T6426] loop1: detected capacity change from 0 to 512 [ 168.324019][ T6426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 168.381614][ T6426] System zones: 1-12 [ 168.402667][ T6426] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.184: missing EA_INODE flag [ 168.446759][ T6426] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.184: error while reading EA inode 12 err=-117 [ 168.501809][ T6426] EXT4-fs (loop1): 1 orphan inode deleted [ 168.533660][ T6426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.827769][ T6439] overlayfs: missing 'lowerdir' [ 169.356501][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.683366][ T6449] FAULT_INJECTION: forcing a failure. [ 170.683366][ T6449] name failslab, interval 1, probability 0, space 0, times 1 [ 170.741487][ T6449] CPU: 0 PID: 6449 Comm: syz.1.192 Not tainted syzkaller #0 [ 170.749590][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.759733][ T6449] Call Trace: [ 170.763220][ T6449] [ 170.766459][ T6449] dump_stack_lvl+0x18c/0x250 [ 170.771195][ T6449] ? show_regs_print_info+0x20/0x20 [ 170.776591][ T6449] ? load_image+0x420/0x420 [ 170.781154][ T6449] ? __might_sleep+0xe0/0xe0 [ 170.785878][ T6449] ? __lock_acquire+0x7d80/0x7d80 [ 170.791650][ T6449] should_fail_ex+0x394/0x4c0 [ 170.796468][ T6449] should_failslab+0x9/0x20 [ 170.801195][ T6449] slab_pre_alloc_hook+0x59/0x300 [ 170.806627][ T6449] ? vb2_vmalloc_alloc+0xb2/0x330 [ 170.811800][ T6449] __kmem_cache_alloc_node+0x53/0x250 [ 170.818288][ T6449] ? vb2_vmalloc_alloc+0xb2/0x330 [ 170.823488][ T6449] kmalloc_trace+0x2a/0xe0 [ 170.828370][ T6449] vb2_vmalloc_alloc+0xb2/0x330 [ 170.833374][ T6449] ? __copy_timestamp+0x1f0/0x1f0 [ 170.838540][ T6449] __vb2_queue_alloc+0x78f/0x1410 [ 170.843636][ T6449] vb2_core_reqbufs+0x9e8/0x10d0 [ 170.848726][ T6449] ? vb2_verify_memory_type+0x570/0x570 [ 170.854412][ T6449] ? do_vfs_ioctl+0x156c/0x1cc0 [ 170.859422][ T6449] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 170.864949][ T6449] __video_do_ioctl+0xa34/0xde0 [ 170.870411][ T6449] ? video_ioctl2+0x30/0x30 [ 170.875183][ T6449] ? __might_fault+0xc6/0x120 [ 170.880165][ T6449] ? __might_fault+0xaa/0x120 [ 170.885062][ T6449] video_usercopy+0x889/0x1360 [ 170.890053][ T6449] ? video_ioctl2+0x30/0x30 [ 170.894712][ T6449] ? v4l_printk_ioctl+0x160/0x160 [ 170.899904][ T6449] v4l2_ioctl+0x18a/0x1e0 [ 170.904770][ T6449] ? v4l2_poll+0x2b0/0x2b0 [ 170.909250][ T6449] __se_sys_ioctl+0xfd/0x170 [ 170.913900][ T6449] do_syscall_64+0x55/0xb0 [ 170.918363][ T6449] ? clear_bhb_loop+0x40/0x90 [ 170.923176][ T6449] ? clear_bhb_loop+0x40/0x90 [ 170.927902][ T6449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.934030][ T6449] RIP: 0033:0x7feb7679e159 [ 170.938761][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.959221][ T6449] RSP: 002b:00007feb7763e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.968028][ T6449] RAX: ffffffffffffffda RBX: 00007feb76a25fa0 RCX: 00007feb7679e159 [ 170.976377][ T6449] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000004 [ 170.984997][ T6449] RBP: 00007feb76835024 R08: 0000000000000000 R09: 0000000000000000 [ 170.993407][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.001672][ T6449] R13: 00007feb76a26038 R14: 00007feb76a25fa0 R15: 00007fffe5cf64c8 [ 171.009699][ T6449] [ 171.061457][ T5777] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.253234][ T5777] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.271326][ T5777] usb 1-1: config 0 has no interface number 0 [ 171.284298][ T5777] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 171.305863][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.333961][ T5777] usb 1-1: Product: syz [ 171.338353][ T5777] usb 1-1: Manufacturer: syz [ 171.348031][ T5777] usb 1-1: SerialNumber: syz [ 171.621506][ T5777] usb 1-1: config 0 descriptor?? [ 172.030542][ T5777] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 172.078432][ T5777] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.158377][ T5777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 172.169342][ T5777] usb 1-1: media controller created [ 172.201174][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.722296][ T6463] binder: 6457:6463 ioctl 4018620d 0 returned -22 [ 173.612839][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.647848][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.332810][ T5777] usb 1-1: USB disconnect, device number 3 [ 174.658859][ T6480] loop2: detected capacity change from 0 to 512 [ 174.690266][ T6480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 174.700492][ T6480] System zones: 1-12 [ 174.722472][ T6480] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.198: missing EA_INODE flag [ 174.743535][ T6480] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.198: error while reading EA inode 12 err=-117 [ 174.767825][ T6480] EXT4-fs (loop2): 1 orphan inode deleted [ 174.775940][ T6480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.061693][ T6487] overlayfs: missing 'lowerdir' [ 175.714562][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.281679][ T6499] binder: 6498:6499 ioctl 4018620d 0 returned -22 [ 180.791395][ T5777] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 181.023350][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.032606][ T5777] usb 4-1: config 0 has no interface number 0 [ 181.057878][ T5777] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.067910][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.083369][ T5777] usb 4-1: Product: syz [ 181.087723][ T5777] usb 4-1: Manufacturer: syz [ 181.095128][ T5777] usb 4-1: SerialNumber: syz [ 181.122793][ T5777] usb 4-1: config 0 descriptor?? [ 181.345815][ T5777] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 181.407120][ T5777] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.441599][ T5777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 181.481433][ T5777] usb 4-1: media controller created [ 181.523877][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.780160][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.908086][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.927714][ T6526] loop2: detected capacity change from 0 to 512 [ 183.077326][ T5777] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 183.223612][ T6526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 183.301342][ T6526] System zones: 1-12 [ 183.309265][ T6526] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.213: missing EA_INODE flag [ 183.358348][ T6540] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 183.370329][ T6540] rtrs_client L2075: : Failed to resolve address, err: -19 [ 183.378654][ T6540] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 183.405097][ T6526] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.213: error while reading EA inode 12 err=-117 [ 183.875929][ T6526] EXT4-fs (loop2): 1 orphan inode deleted [ 184.052130][ T6526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.072734][ T6526] overlayfs: missing 'lowerdir' [ 184.197811][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.079226][ T5777] usb 4-1: USB disconnect, device number 3 [ 187.535003][ T6572] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 187.552050][ T6572] rtrs_client L2075: : Failed to resolve address, err: -19 [ 187.560226][ T6572] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 188.708384][ T6578] loop3: detected capacity change from 0 to 512 [ 188.733830][ T6578] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 188.921459][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.161862][ T6578] EXT4-fs (loop3): 1 truncate cleaned up [ 189.243298][ T5892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.303303][ T5892] usb 3-1: config 0 has no interface number 0 [ 189.397778][ T5892] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 189.453044][ T6578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.462339][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.478884][ T5892] usb 3-1: Product: syz [ 189.484395][ T5892] usb 3-1: Manufacturer: syz [ 189.489574][ T5892] usb 3-1: SerialNumber: syz [ 189.497277][ T5892] usb 3-1: config 0 descriptor?? [ 189.791886][ T6584] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 189.813823][ T6584] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 190.286194][ T5892] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 190.299850][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.321532][ T5892] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.372399][ T5892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 190.391428][ T5892] usb 3-1: media controller created [ 190.455884][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.662530][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.738787][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.068265][ T5892] usb 3-1: USB disconnect, device number 3 [ 193.544466][ T6619] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 194.792290][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.798865][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.146300][ T6638] syzkaller0: entered promiscuous mode [ 195.152234][ T6638] syzkaller0: entered allmulticast mode [ 195.461588][ T5777] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.684234][ T5777] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.476067][ T5777] usb 1-1: config 0 has no interface number 0 [ 196.495431][ T5777] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 196.505986][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.514729][ T5777] usb 1-1: Product: syz [ 196.519602][ T5777] usb 1-1: Manufacturer: syz [ 196.524868][ T5777] usb 1-1: SerialNumber: syz [ 196.533260][ T5777] usb 1-1: config 0 descriptor?? [ 196.728793][ T6656] syz.2.252 uses obsolete (PF_INET,SOCK_PACKET) [ 196.757589][ T5777] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 196.780080][ T5777] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.801759][ T5777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 196.811825][ T5777] usb 1-1: media controller created [ 196.838401][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.836772][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.853397][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.089418][ T5777] usb 1-1: USB disconnect, device number 4 [ 198.238460][ T1101] sl0: header compression turned on [ 199.671927][ T6691] syzkaller0: entered promiscuous mode [ 199.677602][ T6691] syzkaller0: entered allmulticast mode [ 201.577295][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 201.636048][ T6722] capability: warning: `syz.0.266' uses 32-bit capabilities (legacy support in use) [ 202.655101][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 202.661173][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 202.667503][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 203.001492][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 203.193667][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.211577][ T23] usb 4-1: config 0 has no interface number 0 [ 203.404243][ T23] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 203.424942][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.464997][ T23] usb 4-1: Product: syz [ 203.480786][ T23] usb 4-1: Manufacturer: syz [ 203.495201][ T23] usb 4-1: SerialNumber: syz [ 203.517148][ T23] usb 4-1: config 0 descriptor?? [ 203.659360][ T6743] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 203.672764][ T6743] rtrs_client L2075: : Failed to resolve address, err: -19 [ 203.680680][ T6743] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 203.744068][ T23] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 203.775166][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.801979][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 203.810180][ T23] usb 4-1: media controller created [ 203.901172][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.269272][ T6754] syzkaller0: entered promiscuous mode [ 204.275046][ T6754] syzkaller0: entered allmulticast mode [ 204.572104][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.885066][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.002034][ T6756] binder_alloc: 6755: pid 6755 spamming oneway? 1 buffers allocated for a total size of 4096 [ 205.150209][ T23] usb 4-1: USB disconnect, device number 4 [ 207.577793][ T6782] binder_alloc: 6781: pid 6781 spamming oneway? 1 buffers allocated for a total size of 4096 [ 209.119391][ T6791] syzkaller0: entered promiscuous mode [ 209.125297][ T6791] syzkaller0: entered allmulticast mode [ 211.051394][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.264324][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.281433][ T27] usb 2-1: config 0 has no interface number 0 [ 211.293297][ T27] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 211.321522][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.340725][ T27] usb 2-1: Product: syz [ 211.346886][ T27] usb 2-1: Manufacturer: syz [ 211.352053][ T27] usb 2-1: SerialNumber: syz [ 211.367878][ T27] usb 2-1: config 0 descriptor?? [ 211.597766][ T27] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 211.619603][ T27] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.639640][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 211.662122][ T27] usb 2-1: media controller created [ 211.718039][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.002813][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.048220][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.342108][ T27] usb 2-1: USB disconnect, device number 3 [ 215.242665][ T6836] syzkaller0: entered promiscuous mode [ 215.248515][ T6836] syzkaller0: entered allmulticast mode [ 215.921378][ T2198] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.493075][ T2198] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.512687][ T2198] usb 4-1: config 0 has no interface number 0 [ 217.539004][ T2198] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 217.561701][ T2198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.570229][ T2198] usb 4-1: Product: syz [ 217.581409][ T2198] usb 4-1: Manufacturer: syz [ 217.591345][ T2198] usb 4-1: SerialNumber: syz [ 217.604018][ T6853] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 217.615577][ T6853] rtrs_client L2075: : Failed to resolve address, err: -19 [ 217.623394][ T6853] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 217.642666][ T2198] usb 4-1: config 0 descriptor?? [ 217.862222][ T2198] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 217.914432][ T2198] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 217.951839][ T2198] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 217.960205][ T2198] usb 4-1: media controller created [ 218.033517][ T2198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.155209][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.212010][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.460851][ T2198] usb 4-1: USB disconnect, device number 5 [ 218.844153][ T6873] syzkaller0: entered promiscuous mode [ 218.849909][ T6873] syzkaller0: entered allmulticast mode [ 222.682034][ T2133] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.016869][ T2133] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.037207][ T2133] usb 1-1: config 0 has no interface number 0 [ 224.054131][ T2133] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 224.075238][ T2133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.094000][ T2133] usb 1-1: Product: syz [ 224.102924][ T2133] usb 1-1: Manufacturer: syz [ 224.118030][ T2133] usb 1-1: SerialNumber: syz [ 224.129031][ T2133] usb 1-1: config 0 descriptor?? [ 224.362406][ T2133] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 224.468502][ T2133] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.515495][ T2133] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 224.524436][ T2133] usb 1-1: media controller created [ 224.548639][ T2133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.693233][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.737724][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.319208][ T2133] usb 1-1: USB disconnect, device number 5 [ 230.184633][ T6945] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 230.196888][ T6945] rtrs_client L2075: : Failed to resolve address, err: -19 [ 230.204753][ T6945] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 230.471636][ T6949] netlink: 620 bytes leftover after parsing attributes in process `syz.3.342'. [ 230.981349][ T5777] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 232.425253][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.464610][ T5777] usb 4-1: config 0 has no interface number 0 [ 232.518727][ T5777] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 232.533311][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.548357][ T5777] usb 4-1: Product: syz [ 232.553109][ T5777] usb 4-1: Manufacturer: syz [ 232.558192][ T5777] usb 4-1: SerialNumber: syz [ 232.599365][ T5777] usb 4-1: config 0 descriptor?? [ 232.647416][ T6973] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 232.672670][ T6973] rtrs_client L2075: : Failed to resolve address, err: -19 [ 232.680800][ T6973] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 232.826846][ T5777] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 232.891861][ T5777] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.919750][ T5777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 232.946900][ T5777] usb 4-1: media controller created [ 233.050676][ T6977] netlink: 620 bytes leftover after parsing attributes in process `syz.1.353'. [ 233.113109][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.153354][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.187312][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.502048][ T5777] usb 4-1: USB disconnect, device number 6 [ 235.897744][ T7013] loop0: detected capacity change from 0 to 8 [ 238.591809][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 238.747504][ T7043] loop6: detected capacity change from 0 to 3904 [ 238.804902][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.831480][ T8] usb 1-1: config 0 has no interface number 0 [ 238.876572][ T8] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 238.896759][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.939232][ T8] usb 1-1: Product: syz [ 238.965838][ T8] usb 1-1: Manufacturer: syz [ 238.976119][ T8] usb 1-1: SerialNumber: syz [ 238.997185][ T8] usb 1-1: config 0 descriptor?? [ 238.998721][ T7047] FAULT_INJECTION: forcing a failure. [ 238.998721][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 239.046046][ T7047] CPU: 1 PID: 7047 Comm: syz.3.375 Not tainted syzkaller #0 [ 239.053411][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.063505][ T7047] Call Trace: [ 239.066906][ T7047] [ 239.069945][ T7047] dump_stack_lvl+0x18c/0x250 [ 239.074676][ T7047] ? show_regs_print_info+0x20/0x20 [ 239.080176][ T7047] ? load_image+0x420/0x420 [ 239.084987][ T7047] ? __lock_acquire+0x7d80/0x7d80 [ 239.090136][ T7047] should_fail_ex+0x394/0x4c0 [ 239.094960][ T7047] should_failslab+0x9/0x20 [ 239.099565][ T7047] slab_pre_alloc_hook+0x59/0x300 [ 239.104619][ T7047] ? _raw_spin_unlock+0x40/0x40 [ 239.109473][ T7047] ? nft_trans_table_add+0x52/0x270 [ 239.114785][ T7047] __kmem_cache_alloc_node+0x53/0x250 [ 239.120469][ T7047] ? nft_trans_table_add+0x52/0x270 [ 239.125895][ T7047] kmalloc_trace+0x2a/0xe0 [ 239.130497][ T7047] nft_trans_table_add+0x52/0x270 [ 239.135632][ T7047] nf_tables_newtable+0xcf5/0x17b0 [ 239.140773][ T7047] nfnetlink_rcv+0x1133/0x2490 [ 239.145768][ T7047] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 239.151557][ T7047] ? __lock_acquire+0x7d80/0x7d80 [ 239.156686][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.161896][ T7047] netlink_unicast+0x7b1/0x930 [ 239.166771][ T7047] netlink_sendmsg+0x8d0/0xbf0 [ 239.171662][ T7047] ? netlink_getsockopt+0x590/0x590 [ 239.177067][ T7047] ? apparmor_socket_sendmsg+0x8e/0x330 [ 239.182739][ T7047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.188037][ T7047] ? security_socket_sendmsg+0x80/0xa0 [ 239.193607][ T7047] ? netlink_getsockopt+0x590/0x590 [ 239.198812][ T7047] ____sys_sendmsg+0x61b/0x980 [ 239.203590][ T7047] ? __asan_memset+0x22/0x40 [ 239.208275][ T7047] ? __sys_sendmsg_sock+0x30/0x30 [ 239.213488][ T7047] ? __import_iovec+0x5f2/0x850 [ 239.218458][ T7047] ? import_iovec+0x73/0xa0 [ 239.222982][ T7047] ___sys_sendmsg+0x2a6/0x360 [ 239.227941][ T7047] ? __sys_sendmsg+0x2b0/0x2b0 [ 239.233011][ T7047] __se_sys_sendmsg+0x1d0/0x2c0 [ 239.237968][ T7047] ? __x64_sys_sendmsg+0x80/0x80 [ 239.243109][ T7047] ? lockdep_hardirqs_on+0x98/0x150 [ 239.248593][ T7047] do_syscall_64+0x55/0xb0 [ 239.253127][ T7047] ? clear_bhb_loop+0x40/0x90 [ 239.257917][ T7047] ? clear_bhb_loop+0x40/0x90 [ 239.262697][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.268862][ T7047] RIP: 0033:0x7f6266b9e159 [ 239.273521][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.293417][ T7047] RSP: 002b:00007f6264df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.301862][ T7047] RAX: ffffffffffffffda RBX: 00007f6266e25fa0 RCX: 00007f6266b9e159 [ 239.310059][ T7047] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 239.318151][ T7047] RBP: 00007f6266c35024 R08: 0000000000000000 R09: 0000000000000000 [ 239.326213][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.334192][ T7047] R13: 00007f6266e26038 R14: 00007f6266e25fa0 R15: 00007ffe372ba418 [ 239.342367][ T7047] [ 239.375479][ T8] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 239.402829][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.441687][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 239.460032][ T8] usb 1-1: media controller created [ 239.559991][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.796472][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.831187][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.246766][ T8] usb 1-1: USB disconnect, device number 6 [ 241.952802][ T7083] loop2: detected capacity change from 0 to 32768 [ 242.020061][ T7083] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 242.348856][ T7083] XFS (loop2): Ending clean mount [ 242.626745][ T7105] autofs4:pid:7105:autofs_fill_super: called with bogus options [ 243.169944][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.211781][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 245.404717][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.419823][ T9] usb 1-1: config 0 has no interface number 0 [ 245.436889][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 245.446990][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.489868][ T9] usb 1-1: Product: syz [ 245.497171][ T9] usb 1-1: Manufacturer: syz [ 245.518628][ T9] usb 1-1: SerialNumber: syz [ 245.521721][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 245.542920][ T9] usb 1-1: config 0 descriptor?? [ 245.721356][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.759100][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 245.834854][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 245.862151][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 245.891491][ T9] usb 1-1: media controller created [ 245.911482][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 245.919072][ T23] usb 4-1: config 0 has no interfaces? [ 245.939571][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 245.943557][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.964071][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.992374][ T23] usb 4-1: Product: syz [ 246.006880][ T23] usb 4-1: Manufacturer: syz [ 246.027180][ T23] usb 4-1: SerialNumber: syz [ 246.056704][ T23] usb 4-1: config 0 descriptor?? [ 246.092861][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.124444][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.280224][ T23] usb 4-1: USB disconnect, device number 7 [ 246.473419][ T9] usb 1-1: USB disconnect, device number 7 [ 246.562035][ T51] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 246.570468][ T51] Bluetooth: hci1: unexpected event for opcode 0x203e [ 246.775040][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 247.039229][ T7179] syzkaller0: entered promiscuous mode [ 247.044930][ T7179] syzkaller0: entered allmulticast mode [ 247.935922][ T51] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 247.943135][ T51] Bluetooth: hci1: unexpected event for opcode 0x203e [ 248.247425][ T7203] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 248.431943][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 248.626254][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.670550][ T8] usb 2-1: config 0 has no interface number 0 [ 248.700600][ T8] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 248.715868][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.724484][ T8] usb 2-1: Product: syz [ 248.728907][ T8] usb 2-1: Manufacturer: syz [ 248.884329][ T7220] syzkaller0: entered promiscuous mode [ 248.890032][ T7220] syzkaller0: entered allmulticast mode [ 249.368425][ T8] usb 2-1: SerialNumber: syz [ 249.393303][ T8] usb 2-1: config 0 descriptor?? [ 249.521734][ T7226] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 249.615942][ T8] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 249.652399][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.683195][ T7226] rtrs_client L2075: : Failed to resolve address, err: -19 [ 249.709732][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 249.720707][ T7228] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 249.731473][ T7226] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 249.884267][ T8] usb 2-1: media controller created [ 249.921608][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.014842][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.046231][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.153175][ T7237] netlink: 52 bytes leftover after parsing attributes in process `syz.3.432'. [ 250.584350][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 250.600619][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 250.613160][ T7246] binder: 7243:7246 ioctl 4018620d 0 returned -22 [ 250.622053][ T5782] Bluetooth: hci1: hardware error 0x00 [ 251.152052][ T8] usb 2-1: USB disconnect, device number 4 [ 251.282682][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.438'. [ 251.561478][ T2133] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 251.758460][ T2133] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.788147][ T2133] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.810896][ T2133] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 251.833966][ T2133] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 251.843520][ T2133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.855315][ T2133] usb 1-1: Product: syz [ 251.860048][ T2133] usb 1-1: Manufacturer: syz [ 251.866576][ T2133] usb 1-1: SerialNumber: syz [ 252.309263][ T7267] binder: 7265:7267 ioctl 4018620d 0 returned -22 [ 252.372231][ C0] usb 1-1: received EP1 urb->status = -2 [ 252.378434][ T2133] usb 1-1: unable to init card! (ret=-110) [ 252.787364][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 252.787563][ T2133] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 252.855846][ T2133] usb 1-1: USB disconnect, device number 8 [ 253.411527][ T2133] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 254.824751][ T2133] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.841448][ T7289] smc: net device vlan1 applied user defined pnetid SYZ2 [ 254.916889][ T2133] usb 3-1: config 0 has no interface number 0 [ 255.123766][ T2133] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 255.734207][ T7293] binder: 7290:7293 ioctl 4018620d 0 returned -22 [ 255.765024][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.778805][ T2133] usb 3-1: Product: syz [ 255.792395][ T2133] usb 3-1: Manufacturer: syz [ 255.797767][ T2133] usb 3-1: SerialNumber: syz [ 256.116653][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.177656][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.231377][ T2133] usb 3-1: config 0 descriptor?? [ 256.285314][ T2133] usb 3-1: can't set config #0, error -71 [ 256.294854][ T2133] usb 3-1: USB disconnect, device number 4 [ 257.876550][ T7305] process 'syz.1.460' launched './file0' with NULL argv: empty string added [ 258.251509][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 258.571625][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 260.471765][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.482429][ T8] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.494126][ T8] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 260.511384][ T8] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 260.543432][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.561432][ T8] usb 2-1: Product: syz [ 260.565930][ T8] usb 2-1: Manufacturer: syz [ 260.571116][ T8] usb 2-1: SerialNumber: syz [ 261.288900][ T7324] binder: 7321:7324 ioctl 4018620d 0 returned -22 [ 261.782170][ T8] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 261.788758][ T8] usb 2-1: unable to init card! (ret=-5) [ 261.795532][ T8] snd-usb-caiaq: probe of 2-1:1.0 failed with error -5 [ 261.841125][ T8] usb 2-1: USB disconnect, device number 5 [ 264.926699][ T7350] binder: 7347:7350 ioctl 4018620d 0 returned -22 [ 265.649254][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'. [ 265.761757][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 265.941476][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 265.983416][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.991734][ T9] usb 1-1: config 0 has no interface number 0 [ 266.027708][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 266.047545][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.076821][ T9] usb 1-1: Product: syz [ 266.091769][ T9] usb 1-1: Manufacturer: syz [ 266.096612][ T9] usb 1-1: SerialNumber: syz [ 266.122572][ T9] usb 1-1: config 0 descriptor?? [ 266.143417][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.175389][ T8] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.208860][ T8] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 266.243247][ T8] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 266.261367][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.272344][ T8] usb 3-1: Product: syz [ 266.276632][ T8] usb 3-1: Manufacturer: syz [ 266.281541][ T8] usb 3-1: SerialNumber: syz [ 266.349767][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 266.387671][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.419475][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 266.439394][ T9] usb 1-1: media controller created [ 266.488828][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.774689][ C0] usb 3-1: received EP1 urb->status = -71 [ 266.782630][ T8] usb 3-1: unable to init card! (ret=-71) [ 266.788892][ T8] snd-usb-caiaq: probe of 3-1:1.0 failed with error -71 [ 266.812535][ T8] usb 3-1: USB disconnect, device number 5 [ 266.966249][ T9] usb 1-1: USB disconnect, device number 9 [ 268.723446][ T7377] binder: 7376:7377 ioctl 4018620d 0 returned -22 [ 270.451440][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 272.881825][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.890511][ T8] usb 4-1: config 0 has no interface number 0 [ 272.962198][ T8] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 272.971820][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.980022][ T8] usb 4-1: Product: syz [ 273.021517][ T8] usb 4-1: Manufacturer: syz [ 273.026526][ T8] usb 4-1: SerialNumber: syz [ 273.054969][ T8] usb 4-1: config 0 descriptor?? [ 273.208953][ T7418] loop2: detected capacity change from 0 to 512 [ 273.221126][ T8] dvb_usb_ec168: probe of 4-1:0.1 failed with error -71 [ 273.269681][ T8] usb 4-1: USB disconnect, device number 8 [ 273.280445][ T7418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 273.302323][ T7418] System zones: 1-12 [ 273.352543][ T7418] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.497: missing EA_INODE flag [ 273.433333][ T7418] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.497: error while reading EA inode 12 err=-117 [ 273.476342][ T7418] EXT4-fs (loop2): 1 orphan inode deleted [ 273.502199][ T7418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.883951][ T7430] overlayfs: missing 'lowerdir' [ 274.448044][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.496'. [ 275.297327][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.313584][ T7431] binder: 7429:7431 ioctl 4018620d 0 returned -22 [ 275.673726][ T5892] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 276.594041][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.624055][ T5892] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.634388][ T5892] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 276.661743][ T5892] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 276.681430][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.689475][ T5892] usb 1-1: Product: syz [ 276.702242][ T5892] usb 1-1: Manufacturer: syz [ 276.708160][ T5892] usb 1-1: SerialNumber: syz [ 277.021700][ T5777] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 277.138674][ C1] usb 1-1: received EP1 urb->status = -71 [ 277.157293][ T5892] usb 1-1: unable to init card! (ret=-71) [ 277.176657][ T5892] snd-usb-caiaq: probe of 1-1:1.0 failed with error -71 [ 277.206876][ T5892] usb 1-1: USB disconnect, device number 10 [ 277.246177][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.266099][ T5777] usb 4-1: config 0 has no interface number 0 [ 277.285775][ T5777] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 277.297592][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.321387][ T5777] usb 4-1: Product: syz [ 277.325615][ T5777] usb 4-1: Manufacturer: syz [ 277.330507][ T5777] usb 4-1: SerialNumber: syz [ 277.362239][ T5777] usb 4-1: config 0 descriptor?? [ 277.495030][ T7455] loop1: detected capacity change from 0 to 512 [ 277.528542][ T7455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 277.572312][ T7455] System zones: 1-12 [ 277.598691][ T7455] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.504: missing EA_INODE flag [ 277.610754][ T5777] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 277.633594][ T5777] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.654792][ T7455] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.504: error while reading EA inode 12 err=-117 [ 277.680295][ T5777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 277.693805][ T7455] EXT4-fs (loop1): 1 orphan inode deleted [ 277.703830][ T7455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.717182][ T5777] usb 4-1: media controller created [ 277.790023][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.121602][ T7462] overlayfs: missing 'lowerdir' [ 278.215819][ T7463] 9pnet_fd: Insufficient options for proto=fd [ 279.827414][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.925067][ T5777] usb 4-1: USB disconnect, device number 9 [ 280.088304][ T7474] loop2: detected capacity change from 0 to 16 [ 280.105555][ T7473] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 280.166832][ T7474] erofs: (device loop2): mounted with root inode @ nid 36. [ 280.365190][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 281.275682][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 281.389683][ T7474] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 281.516766][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 281.606766][ T7474] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 281.740508][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 281.851479][ T7474] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 281.860712][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 281.908494][ T7474] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 281.940118][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 282.001410][ T7474] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 282.054632][ T7474] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 282.111387][ T28] audit: type=1800 audit(1788399769.562:3): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.511" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 283.607607][ T5782] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 283.615561][ T5782] Bluetooth: hci2: unexpected event for opcode 0x203e [ 285.480808][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 285.687147][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.731467][ T8] usb 3-1: config 0 has no interface number 0 [ 285.783156][ T8] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 285.801408][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.851485][ T8] usb 3-1: Product: syz [ 285.855810][ T8] usb 3-1: Manufacturer: syz [ 285.860454][ T8] usb 3-1: SerialNumber: syz [ 285.915843][ T8] usb 3-1: config 0 descriptor?? [ 286.937169][ T8] dvb_usb_ec168: probe of 3-1:0.1 failed with error -71 [ 286.948047][ T8] usb 3-1: USB disconnect, device number 6 [ 287.165445][ T7505] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 287.402443][ T7510] loop3: detected capacity change from 0 to 512 [ 288.628820][ T5782] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 288.641428][ T5782] Bluetooth: hci2: Injecting HCI hardware error event [ 288.650070][ T51] Bluetooth: hci2: hardware error 0x00 [ 288.732420][ T7510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 288.740765][ T7510] System zones: 1-12 [ 288.848963][ T7510] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.517: missing EA_INODE flag [ 288.933360][ T7510] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.517: error while reading EA inode 12 err=-117 [ 288.974593][ T7510] EXT4-fs (loop3): 1 orphan inode deleted [ 289.002423][ T7510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.498162][ T7526] overlayfs: missing 'lowerdir' [ 289.556835][ T7527] 9pnet_fd: Insufficient options for proto=fd [ 290.015955][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.070122][ T7534] loop3: detected capacity change from 0 to 512 [ 291.091887][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 292.443627][ T51] Bluetooth: hci3: unknown advertising packet type: 0x30 [ 292.443722][ T51] Bluetooth: hci3: unknown advertising packet type: 0x74 [ 292.454599][ T51] Bluetooth: hci3: unknown advertising packet type: 0x69 [ 292.469727][ T51] Bluetooth: hci3: unknown advertising packet type: 0x66 [ 292.491372][ T51] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 292.498892][ T51] Bluetooth: hci3: unknown advertising packet type: 0x5f [ 292.506403][ T51] Bluetooth: hci3: unknown advertising packet type: 0x30 [ 294.301945][ T5892] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 294.420921][ T7543] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 294.543113][ T5892] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.562475][ T5892] usb 4-1: config 0 has no interface number 0 [ 294.572709][ T5892] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.606787][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.629576][ T5892] usb 4-1: Product: syz [ 294.635039][ T5892] usb 4-1: Manufacturer: syz [ 294.639719][ T5892] usb 4-1: SerialNumber: syz [ 294.690448][ T5892] usb 4-1: config 0 descriptor?? [ 294.715789][ T7546] overlayfs: overlapping lowerdir path [ 295.157253][ T5892] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.286417][ T5892] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.367335][ T5892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.437147][ T5892] usb 4-1: media controller created [ 295.647548][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.659089][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.681574][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.011402][ T5892] usb 4-1: USB disconnect, device number 10 [ 298.377551][ T7572] loop3: detected capacity change from 0 to 64 [ 300.831357][ T7577] syzkaller0: entered promiscuous mode [ 300.837159][ T7577] syzkaller0: entered allmulticast mode [ 301.387402][ T5776] hfs: node 4:3 still has 1 user(s)! [ 302.050952][ T7587] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 303.886958][ T7593] loop2: detected capacity change from 0 to 512 [ 303.903094][ T7593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 303.911587][ T7593] System zones: 1-12 [ 303.937524][ T7593] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.534: missing EA_INODE flag [ 304.011821][ T7593] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.534: error while reading EA inode 12 err=-117 [ 304.072318][ T7593] EXT4-fs (loop2): 1 orphan inode deleted [ 304.092643][ T7593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.473802][ T7597] overlayfs: missing 'lowerdir' [ 304.569815][ T7598] 9pnet_fd: Insufficient options for proto=fd [ 305.055814][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.267306][ T7601] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 305.284838][ T7601] rtrs_client L2075: : Failed to resolve address, err: -19 [ 305.293400][ T7601] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 305.851524][ T2133] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 306.058087][ T7607] loop0: detected capacity change from 0 to 512 [ 306.083755][ T7607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 306.119684][ T7607] System zones: 1-12 [ 306.127078][ T7607] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.545: missing EA_INODE flag [ 306.174195][ T7607] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.545: error while reading EA inode 12 err=-117 [ 306.174610][ T2133] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.197112][ T7611] netlink: 608 bytes leftover after parsing attributes in process `syz.1.546'. [ 306.210405][ T7607] EXT4-fs (loop0): 1 orphan inode deleted [ 306.218302][ T2133] usb 3-1: config 0 has no interface number 0 [ 306.228373][ T2133] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 306.238952][ T7607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.251861][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.259974][ T2133] usb 3-1: Product: syz [ 306.265271][ T2133] usb 3-1: Manufacturer: syz [ 306.270008][ T2133] usb 3-1: SerialNumber: syz [ 306.277151][ T2133] usb 3-1: config 0 descriptor?? [ 306.804760][ T7620] overlayfs: missing 'lowerdir' [ 307.189062][ T7625] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 307.213094][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.245325][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.531213][ T2133] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 307.938760][ T2133] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.971233][ T2133] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 308.000390][ T2133] usb 3-1: media controller created [ 308.035623][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.124691][ T2133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.215917][ T7629] loop0: detected capacity change from 0 to 512 [ 308.246802][ T7629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 308.258671][ T7629] System zones: 1-12 [ 308.273297][ T7629] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.552: missing EA_INODE flag [ 308.304382][ T7629] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.552: error while reading EA inode 12 err=-117 [ 308.327103][ T7629] EXT4-fs (loop0): 1 orphan inode deleted [ 308.334433][ T7629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.451452][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 308.577061][ T2133] usb 3-1: USB disconnect, device number 7 [ 308.658672][ T7632] overlayfs: missing 'lowerdir' [ 308.665787][ T7632] 9pnet_fd: Insufficient options for proto=fd [ 309.331004][ T9] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 309.333448][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.342076][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 309.360440][ T9] usb 2-1: config 4 has no interface number 0 [ 309.371833][ T9] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.393858][ T9] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 309.407552][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.416645][ T9] usb 2-1: Product: syz [ 309.420852][ T9] usb 2-1: Manufacturer: syz [ 309.430413][ T9] usb 2-1: SerialNumber: syz [ 309.917632][ T9] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 309.927863][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 309.937667][ T9] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 309.946034][ T9] usb 2-1: media controller created [ 309.955295][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.036321][ T9] DVB: Unable to find symbol dib7000p_attach() [ 310.049100][ T9] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 310.132244][ T7650] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 310.151037][ T7650] rtrs_client L2075: : Failed to resolve address, err: -19 [ 310.159316][ T7650] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 310.923078][ T7653] netlink: 608 bytes leftover after parsing attributes in process `syz.3.556'. [ 310.981713][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 310.988085][ T9] Registered IR keymap rc-empty [ 311.051771][ T9] dvb-usb: could not initialize remote control. [ 311.093397][ T9] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 311.163480][ T9] usb 2-1: USB disconnect, device number 6 [ 311.280801][ T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 311.302216][ T51] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 311.310577][ T51] Bluetooth: hci3: unexpected event for opcode 0x203e [ 311.600016][ T7666] loop3: detected capacity change from 0 to 512 [ 311.692173][ T7666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 311.731181][ T7666] System zones: 1-12 [ 311.779170][ T7666] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.561: missing EA_INODE flag [ 311.848921][ T7666] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.561: error while reading EA inode 12 err=-117 [ 311.890689][ T7666] EXT4-fs (loop3): 1 orphan inode deleted [ 311.945407][ T7666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.841456][ T7678] overlayfs: missing 'lowerdir' [ 312.930632][ T7680] 9pnet_fd: Insufficient options for proto=fd [ 313.323081][ T2198] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 314.687077][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.873232][ T2198] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.891421][ T2198] usb 2-1: config 0 has no interface number 0 [ 314.922483][ T2198] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 314.941356][ T2198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.960390][ T2198] usb 2-1: Product: syz [ 314.990746][ T2198] usb 2-1: Manufacturer: syz [ 315.010940][ T2198] usb 2-1: SerialNumber: syz [ 315.034168][ T2198] usb 2-1: config 0 descriptor?? [ 315.895893][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 316.101512][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 316.108728][ T7684] binder: 7683:7684 ioctl 4018620d 0 returned -22 [ 316.226780][ T51] Bluetooth: hci3: hardware error 0x00 [ 316.346925][ T2198] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 316.402795][ T2198] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.422811][ T7690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.446403][ T2198] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 316.472549][ T7690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.500917][ T2198] usb 2-1: media controller created [ 316.569392][ T2198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.892042][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.898999][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.960514][ T2198] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 318.141850][ T2198] usb 2-1: USB disconnect, device number 7 [ 318.341489][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 318.500872][ T7703] netlink: 608 bytes leftover after parsing attributes in process `syz.0.566'. [ 320.179582][ T7709] loop0: detected capacity change from 0 to 512 [ 320.233860][ T7709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 320.261464][ T7709] System zones: 1-12 [ 320.271862][ T7709] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.575: missing EA_INODE flag [ 320.335427][ T7709] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.575: error while reading EA inode 12 err=-117 [ 320.348823][ T7709] EXT4-fs (loop0): 1 orphan inode deleted [ 320.360115][ T7709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.132062][ T7719] overlayfs: missing 'lowerdir' [ 321.312083][ T7720] 9pnet_fd: Insufficient options for proto=fd [ 321.972204][ T7721] binder: 7716:7721 ioctl 4018620d 0 returned -22 [ 323.226038][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.456668][ T7735] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 323.473586][ T7735] rtrs_client L2075: : Failed to resolve address, err: -19 [ 323.482282][ T7735] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 324.437951][ T7740] netlink: 608 bytes leftover after parsing attributes in process `syz.1.581'. [ 325.852257][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 325.881653][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 326.104429][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.121448][ T9] usb 1-1: config 0 has no interface number 0 [ 326.134015][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 326.143427][ T2133] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 326.153510][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.163875][ T9] usb 1-1: Product: syz [ 326.168091][ T9] usb 1-1: Manufacturer: syz [ 326.173407][ T9] usb 1-1: SerialNumber: syz [ 326.192066][ T9] usb 1-1: config 0 descriptor?? [ 326.358256][ T2133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.395901][ T2133] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.412971][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 326.432086][ T2133] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 326.457841][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 326.487032][ T2133] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 326.501609][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 326.529269][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.542052][ T9] usb 1-1: media controller created [ 326.551782][ T2133] usb 2-1: Product: syz [ 326.556203][ T2133] usb 2-1: Manufacturer: syz [ 326.588039][ T2133] usb 2-1: SerialNumber: syz [ 326.630876][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.676167][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.702442][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.023365][ C0] usb 2-1: received EP1 urb->status = -71 [ 327.047504][ T2133] usb 2-1: unable to init card! (ret=-71) [ 327.084046][ T9] usb 1-1: USB disconnect, device number 11 [ 327.098918][ T2133] snd-usb-caiaq: probe of 2-1:1.0 failed with error -71 [ 327.149796][ T2133] usb 2-1: USB disconnect, device number 8 [ 328.531681][ T7780] binder: 7779:7780 ioctl 4018620d 0 returned -22 [ 328.876485][ T7784] loop2: detected capacity change from 0 to 512 [ 328.943650][ T7784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 329.001588][ T7784] System zones: 1-12 [ 329.024387][ T7784] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.587: missing EA_INODE flag [ 329.081911][ T7784] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.587: error while reading EA inode 12 err=-117 [ 330.010805][ T7784] EXT4-fs (loop2): 1 orphan inode deleted [ 330.062608][ T7784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.447679][ T7802] overlayfs: missing 'lowerdir' [ 330.453924][ T7802] 9pnet_fd: Insufficient options for proto=fd [ 331.003681][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.578329][ T7825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 332.941781][ T7824] binder: 7822:7824 ioctl 4018620d 0 returned -22 [ 333.661401][ T2198] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 333.669160][ T2133] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 333.886574][ T2198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.907553][ T2133] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.920212][ T2198] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 333.941061][ T2133] usb 2-1: config 0 has no interface number 0 [ 333.962413][ T2198] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 333.983259][ T2133] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 334.001743][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.020118][ T2133] usb 2-1: Product: syz [ 334.025693][ T2198] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 334.045778][ T2198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.054374][ T2133] usb 2-1: Manufacturer: syz [ 334.061344][ T7835] loop0: detected capacity change from 0 to 512 [ 334.071591][ T2133] usb 2-1: SerialNumber: syz [ 334.081878][ T2198] usb 3-1: Product: syz [ 334.086186][ T2198] usb 3-1: Manufacturer: syz [ 334.090902][ T2198] usb 3-1: SerialNumber: syz [ 334.103879][ T2133] usb 2-1: config 0 descriptor?? [ 334.121333][ T7835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 334.137456][ T7835] System zones: 1-12 [ 334.159036][ T7835] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.603: missing EA_INODE flag [ 334.176720][ T7835] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.603: error while reading EA inode 12 err=-117 [ 334.189900][ T7835] EXT4-fs (loop0): 1 orphan inode deleted [ 334.201999][ T7835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.367140][ T2133] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 334.408783][ T2133] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.454631][ T2133] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 334.481545][ T2133] usb 2-1: media controller created [ 334.534710][ T7839] overlayfs: missing 'lowerdir' [ 334.564491][ T7839] 9pnet_fd: Insufficient options for proto=fd [ 334.606358][ T2133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.890165][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.906635][ C0] usb 3-1: received EP1 urb->status = -71 [ 335.069326][ T2198] usb 3-1: unable to init card! (ret=-71) [ 336.283448][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.292268][ T2198] snd-usb-caiaq: probe of 3-1:1.0 failed with error -71 [ 336.376440][ T2198] usb 3-1: USB disconnect, device number 8 [ 336.404350][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.435970][ T2133] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 337.546656][ T2133] usb 2-1: USB disconnect, device number 9 [ 337.932913][ T7857] binder: 7856:7857 ioctl 4018620d 0 returned -22 [ 338.933792][ T7869] loop0: detected capacity change from 0 to 512 [ 339.868584][ T7869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 339.909593][ T7869] System zones: 1-12 [ 339.928839][ T7869] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.612: missing EA_INODE flag [ 339.961780][ T7869] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.612: error while reading EA inode 12 err=-117 [ 340.016479][ T7869] EXT4-fs (loop0): 1 orphan inode deleted [ 340.028775][ T7869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.425788][ T7880] 9pnet_fd: Insufficient options for proto=fd [ 341.034005][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.274623][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 341.593851][ T7892] loop3: detected capacity change from 0 to 8 [ 341.650749][ T5777] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 342.382912][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.422788][ T5777] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.437774][ T5777] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 342.462939][ T5777] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 342.481817][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.500801][ T5777] usb 1-1: Product: syz [ 342.513735][ T5777] usb 1-1: Manufacturer: syz [ 342.519976][ T5777] usb 1-1: SerialNumber: syz [ 342.706844][ T7900] binder: 7899:7900 ioctl 4018620d 0 returned -22 [ 343.481842][ T5892] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 343.699167][ T5892] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 343.716368][ T5892] usb 2-1: config 0 has no interface number 0 [ 343.734662][ T5892] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 343.751867][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.760027][ T5892] usb 2-1: Product: syz [ 343.773069][ T5892] usb 2-1: Manufacturer: syz [ 343.781840][ T5892] usb 2-1: SerialNumber: syz [ 343.796599][ T5892] usb 2-1: config 0 descriptor?? [ 343.823927][ C1] usb 1-1: received EP1 urb->status = -71 [ 343.835399][ T5777] usb 1-1: unable to init card! (ret=-71) [ 344.732317][ T5777] snd-usb-caiaq: probe of 1-1:1.0 failed with error -71 [ 344.742281][ T5892] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 344.753043][ T5777] usb 1-1: USB disconnect, device number 12 [ 344.765361][ T5892] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.780486][ T5892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 344.808540][ T5892] usb 2-1: media controller created [ 344.860881][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.059647][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.089214][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.648317][ T7927] loop3: detected capacity change from 0 to 512 [ 345.710246][ T7927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 345.742254][ T7927] System zones: 1-12 [ 345.757362][ T7927] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.623: missing EA_INODE flag [ 345.882974][ T7927] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.623: error while reading EA inode 12 err=-117 [ 346.401674][ T7934] binder: 7933:7934 ioctl 4018620d 0 returned -22 [ 346.853284][ T7927] EXT4-fs (loop3): 1 orphan inode deleted [ 346.894035][ T7927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.097790][ T5892] usb 2-1: USB disconnect, device number 10 [ 348.322517][ T7941] 9pnet_fd: Insufficient options for proto=fd [ 349.248908][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.471950][ T5892] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.901550][ T5892] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.020823][ T5892] usb 2-1: config 0 has no interface number 0 [ 351.220796][ T5892] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 351.241201][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.251845][ T5892] usb 2-1: Product: syz [ 351.256065][ T5892] usb 2-1: Manufacturer: syz [ 351.260721][ T5892] usb 2-1: SerialNumber: syz [ 351.281786][ T5892] usb 2-1: config 0 descriptor?? [ 351.618541][ T7975] loop0: detected capacity change from 0 to 8 [ 352.161658][ T5892] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 352.190425][ T5892] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 352.204488][ T5892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 352.213921][ T5892] usb 2-1: media controller created [ 352.243569][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.553078][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.712716][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.971992][ T5892] usb 2-1: USB disconnect, device number 11 [ 354.957200][ T7995] loop0: detected capacity change from 0 to 512 [ 354.987909][ T7995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 355.002065][ T7995] System zones: 1-12 [ 355.012353][ T7995] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.644: missing EA_INODE flag [ 355.118191][ T7995] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.644: error while reading EA inode 12 err=-117 [ 355.246366][ T7995] EXT4-fs (loop0): 1 orphan inode deleted [ 355.374616][ T7995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.889571][ T8002] overlayfs: missing 'lowerdir' [ 355.948149][ T8003] 9pnet_fd: Insufficient options for proto=fd [ 356.434223][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.605516][ T8007] netlink: 72 bytes leftover after parsing attributes in process `syz.3.648'. [ 356.694995][ T8010] netlink: 72 bytes leftover after parsing attributes in process `syz.3.648'. [ 356.874138][ T8015] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 358.181666][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.653'. [ 358.318757][ T8035] loop3: detected capacity change from 0 to 64 [ 358.992802][ T2133] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 359.104803][ T8036] loop2: detected capacity change from 0 to 512 [ 359.926671][ T5776] hfs: node 4:3 still has 1 user(s)! [ 360.021637][ T2133] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.039034][ T8036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 360.047674][ T8036] System zones: 1-12 [ 360.054968][ T8036] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.656: missing EA_INODE flag [ 360.068356][ T8036] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.656: error while reading EA inode 12 err=-117 [ 360.073427][ T2133] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.103829][ T8036] EXT4-fs (loop2): 1 orphan inode deleted [ 360.112304][ T8036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.153315][ T2133] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 360.196475][ T2133] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 360.213596][ T2133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.241494][ T2133] usb 1-1: Product: syz [ 360.248945][ T2133] usb 1-1: Manufacturer: syz [ 360.271909][ T2133] usb 1-1: SerialNumber: syz [ 360.426816][ T8044] overlayfs: missing 'lowerdir' [ 360.486733][ T8045] 9pnet_fd: Insufficient options for proto=fd [ 360.921652][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.167458][ T8048] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 361.220462][ T2133] snd-usb-caiaq 1-1:1.0: can't set alt interface. [ 361.228565][ T2133] usb 1-1: unable to init card! (ret=-5) [ 361.246610][ T2133] snd-usb-caiaq: probe of 1-1:1.0 failed with error -5 [ 361.258524][ T2133] usb 1-1: USB disconnect, device number 13 [ 361.621575][ T8059] netlink: 72 bytes leftover after parsing attributes in process `syz.3.664'. [ 362.131588][ T8066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.664'. [ 362.499485][ T8072] loop2: detected capacity change from 0 to 64 [ 363.350459][ T5775] hfs: node 4:3 still has 1 user(s)! [ 363.522673][ T8078] loop3: detected capacity change from 0 to 512 [ 363.554573][ T8078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 363.801341][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 364.349857][ T8078] System zones: 1-12 [ 364.375238][ T8078] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.669: missing EA_INODE flag [ 364.412709][ T8078] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.669: error while reading EA inode 12 err=-117 [ 364.457461][ T8078] EXT4-fs (loop3): 1 orphan inode deleted [ 364.472444][ T8078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.171423][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.265473][ T23] usb 2-1: config 0 has no interface number 0 [ 365.416480][ T8089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.670'. [ 365.477014][ T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 365.490709][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.500272][ T23] usb 2-1: Product: syz [ 365.504867][ T23] usb 2-1: Manufacturer: syz [ 365.509511][ T23] usb 2-1: SerialNumber: syz [ 365.537159][ T23] usb 2-1: config 0 descriptor?? [ 365.591574][ T8091] overlayfs: missing 'lowerdir' [ 365.611337][ T8091] 9pnet_fd: Insufficient options for proto=fd [ 365.826626][ T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 365.852690][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.876048][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 365.900905][ T23] usb 2-1: media controller created [ 365.967207][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.088650][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.241607][ T8] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 366.258108][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.280155][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.885079][ T23] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 367.987889][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.011780][ T8] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.031655][ T8] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 368.063598][ T8] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 368.081367][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.093558][ T8] usb 3-1: Product: syz [ 368.097777][ T8] usb 3-1: Manufacturer: syz [ 368.117071][ T23] usb 2-1: USB disconnect, device number 12 [ 368.213004][ T8] usb 3-1: SerialNumber: syz [ 368.371602][ T8] usb 3-1: can't set config #1, error -71 [ 368.413641][ T8] usb 3-1: USB disconnect, device number 9 [ 369.675770][ T8112] netlink: 72 bytes leftover after parsing attributes in process `syz.2.675'. [ 369.748084][ T8113] netlink: 72 bytes leftover after parsing attributes in process `syz.2.675'. [ 369.932805][ T8119] loop0: detected capacity change from 0 to 64 [ 370.948500][ T5768] hfs: node 4:3 still has 1 user(s)! [ 370.992929][ T8125] loop2: detected capacity change from 0 to 8 [ 371.127988][ T8125] SQUASHFS error: zlib decompression failed, data probably corrupt [ 371.136689][ T8125] SQUASHFS error: Failed to read block 0x4e8: -5 [ 371.143975][ T28] audit: type=1800 audit(1788399858.612:4): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 371.576222][ T8128] loop1: detected capacity change from 0 to 512 [ 372.951837][ T8128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 373.011921][ T8128] System zones: 1-12 [ 373.080766][ T8128] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.680: missing EA_INODE flag [ 373.128050][ T8128] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.680: error while reading EA inode 12 err=-117 [ 373.180853][ T8128] EXT4-fs (loop1): 1 orphan inode deleted [ 373.192577][ T8128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.371472][ T5810] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 373.539595][ T8144] overlayfs: missing 'lowerdir' [ 373.870223][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.683'. [ 374.043686][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.066230][ T5810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.075707][ T5810] usb 1-1: config 0 has no interface number 0 [ 374.102757][ T5810] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.116830][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.125696][ T5810] usb 1-1: Product: syz [ 374.129901][ T5810] usb 1-1: Manufacturer: syz [ 374.139389][ T5810] usb 1-1: SerialNumber: syz [ 374.148263][ T5810] usb 1-1: config 0 descriptor?? [ 374.369250][ T5810] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 375.490192][ T5777] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 375.609734][ T5810] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 375.621819][ T5810] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 375.630545][ T5810] usb 1-1: media controller created [ 375.693614][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.705461][ T5777] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.716157][ T5777] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 375.747108][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.764426][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.788119][ T5777] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 375.798817][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.801367][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.828097][ T5777] usb 3-1: Product: syz [ 375.843563][ T5777] usb 3-1: Manufacturer: syz [ 375.848236][ T5777] usb 3-1: SerialNumber: syz [ 375.949845][ T8174] netlink: 72 bytes leftover after parsing attributes in process `syz.3.688'. [ 376.018928][ T8177] netlink: 72 bytes leftover after parsing attributes in process `syz.3.688'. [ 376.858902][ T5810] usb 1-1: USB disconnect, device number 14 [ 376.910967][ C1] usb 3-1: received EP1 urb->status = -71 [ 376.917112][ T5777] usb 3-1: unable to init card! (ret=-71) [ 376.925117][ T5777] snd-usb-caiaq: probe of 3-1:1.0 failed with error -71 [ 376.985216][ T5777] usb 3-1: USB disconnect, device number 10 [ 379.372163][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.378633][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.425963][ T8194] loop0: detected capacity change from 0 to 512 [ 379.577712][ T8194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 380.236437][ T8194] System zones: 1-12 [ 380.323578][ T8190] [ 380.325943][ T8190] ====================================================== [ 380.333039][ T8190] WARNING: possible circular locking dependency detected [ 380.340052][ T8190] syzkaller #0 Not tainted [ 380.344460][ T8190] ------------------------------------------------------ [ 380.351573][ T8190] syz.1.692/8190 is trying to acquire lock: [ 380.357554][ T8190] ffffffff8ddf70b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 380.367530][ T8190] [ 380.367530][ T8190] but task is already holding lock: [ 380.374966][ T8190] ffff888076915fc0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 380.384953][ T8190] [ 380.384953][ T8190] which lock already depends on the new lock. [ 380.384953][ T8190] [ 380.395787][ T8190] [ 380.395787][ T8190] the existing dependency chain (in reverse order) is: [ 380.404985][ T8190] [ 380.404985][ T8190] -> #2 (&sb->s_type->i_mutex_key#20){++++}-{3:3}: [ 380.414286][ T8190] down_write+0x97/0x200 [ 380.419201][ T8190] configfs_depend_item_unlocked+0x157/0x430 [ 380.425708][ T8190] usbg_make_tpg+0x1f7/0x580 [ 380.431718][ T8190] target_fabric_make_tpg+0xa4/0x6d0 [ 380.437650][ T8190] configfs_mkdir+0x515/0x9e0 [ 380.443243][ T8190] vfs_mkdir+0x2a5/0x470 [ 380.448022][ T8190] do_mkdirat+0x1dc/0x450 [ 380.452894][ T8190] __x64_sys_mkdir+0x6e/0x80 [ 380.458118][ T8190] do_syscall_64+0x55/0xb0 [ 380.463283][ T8190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.470032][ T8190] [ 380.470032][ T8190] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 380.477853][ T8190] __mutex_lock+0x135/0xc80 [ 380.483434][ T8190] tcm_set_name+0x2a/0x90 [ 380.488564][ T8190] function_make+0x199/0x350 [ 380.493975][ T8190] configfs_mkdir+0x515/0x9e0 [ 380.499579][ T8190] vfs_mkdir+0x2a5/0x470 [ 380.504356][ T8190] do_mkdirat+0x1dc/0x450 [ 380.509472][ T8190] __x64_sys_mkdir+0x6e/0x80 [ 380.514927][ T8190] do_syscall_64+0x55/0xb0 [ 380.519898][ T8190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.526442][ T8190] [ 380.526442][ T8190] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 380.534795][ T8190] __lock_acquire+0x37ef/0x7d80 [ 380.540220][ T8190] lock_acquire+0x19e/0x420 [ 380.545777][ T8190] __mutex_lock+0x135/0xc80 [ 380.550837][ T8190] configfs_rmdir+0x63c/0x980 [ 380.556049][ T8190] vfs_rmdir+0x352/0x4b0 [ 380.561171][ T8190] do_rmdir+0x29f/0x590 [ 380.566015][ T8190] __x64_sys_rmdir+0x49/0x50 [ 380.571226][ T8190] do_syscall_64+0x55/0xb0 [ 380.576182][ T8190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.582955][ T8190] [ 380.582955][ T8190] other info that might help us debug this: [ 380.582955][ T8190] [ 380.593462][ T8190] Chain exists of: [ 380.593462][ T8190] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#20 [ 380.593462][ T8190] [ 380.609619][ T8190] Possible unsafe locking scenario: [ 380.609619][ T8190] [ 380.617327][ T8190] CPU0 CPU1 [ 380.623038][ T8190] ---- ---- [ 380.628408][ T8190] lock(&sb->s_type->i_mutex_key#20); [ 380.634122][ T8190] lock(&opts->dep_lock); [ 380.641321][ T8190] lock(&sb->s_type->i_mutex_key#20); [ 380.649384][ T8190] lock(gadget_subsys.su_mutex); [ 380.654412][ T8190] [ 380.654412][ T8190] *** DEADLOCK *** [ 380.654412][ T8190] [ 380.663394][ T8190] 3 locks held by syz.1.692/8190: [ 380.669018][ T8190] #0: ffff8881446ac418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 380.678625][ T8190] #1: ffff88805db18160 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 380.690240][ T8190] #2: ffff888076915fc0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 380.700399][ T8190] [ 380.700399][ T8190] stack backtrace: [ 380.706505][ T8190] CPU: 0 PID: 8190 Comm: syz.1.692 Not tainted syzkaller #0 [ 380.714047][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.724681][ T8190] Call Trace: [ 380.728732][ T8190] [ 380.731816][ T8190] dump_stack_lvl+0x18c/0x250 [ 380.736733][ T8190] ? load_image+0x420/0x420 [ 380.741769][ T8190] ? show_regs_print_info+0x20/0x20 [ 380.747158][ T8190] ? print_circular_bug+0x12b/0x1a0 [ 380.752565][ T8190] check_noncircular+0x2fc/0x400 [ 380.757590][ T8190] ? print_deadlock_bug+0x5d0/0x5d0 [ 380.763586][ T8190] ? lockdep_lock+0xf5/0x230 [ 380.768372][ T8190] ? _find_first_zero_bit+0xd6/0x100 [ 380.774251][ T8190] __lock_acquire+0x37ef/0x7d80 [ 380.779481][ T8190] ? verify_lock_unused+0x140/0x140 [ 380.784776][ T8190] ? verify_lock_unused+0x140/0x140 [ 380.790067][ T8190] lock_acquire+0x19e/0x420 [ 380.794658][ T8190] ? configfs_rmdir+0x63c/0x980 [ 380.799501][ T8190] ? __might_sleep+0xe0/0xe0 [ 380.804374][ T8190] ? read_lock_is_recursive+0x20/0x20 [ 380.809826][ T8190] __mutex_lock+0x135/0xc80 [ 380.814368][ T8190] ? configfs_rmdir+0x63c/0x980 [ 380.819487][ T8190] ? configfs_rmdir+0x63c/0x980 [ 380.824574][ T8190] ? mutex_lock_nested+0x20/0x20 [ 380.829786][ T8190] ? __lock_acquire+0x7d80/0x7d80 [ 380.834806][ T8190] ? lockref_put_or_lock+0x72/0xb0 [ 380.840069][ T8190] ? dput+0x3b/0x1e0 [ 380.843969][ T8190] ? dput+0x3b/0x1e0 [ 380.847961][ T8190] configfs_rmdir+0x63c/0x980 [ 380.852647][ T8190] vfs_rmdir+0x352/0x4b0 [ 380.856901][ T8190] do_rmdir+0x29f/0x590 [ 380.861057][ T8190] ? __check_object_size+0x4fc/0xa40 [ 380.866333][ T8190] ? d_delete_notify+0x150/0x150 [ 380.871326][ T8190] ? getname_flags+0x20a/0x500 [ 380.876187][ T8190] __x64_sys_rmdir+0x49/0x50 [ 380.880926][ T8190] do_syscall_64+0x55/0xb0 [ 380.885366][ T8190] ? clear_bhb_loop+0x40/0x90 [ 380.890036][ T8190] ? clear_bhb_loop+0x40/0x90 [ 380.894981][ T8190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.900993][ T8190] RIP: 0033:0x7feb7679e159 [ 380.905745][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.925786][ T8190] RSP: 002b:00007feb7763e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 380.934561][ T8190] RAX: ffffffffffffffda RBX: 00007feb76a25fa0 RCX: 00007feb7679e159 [ 380.942709][ T8190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 380.950834][ T8190] RBP: 00007feb76835024 R08: 0000000000000000 R09: 0000000000000000 [ 380.958986][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.967072][ T8190] R13: 00007feb76a26038 R14: 00007feb76a25fa0 R15: 00007fffe5cf64c8 [ 380.975318][ T8190] [ 381.005409][ T8194] EXT4-fs: error -4 creating inode table initialization thread [ 381.091915][ T8194] EXT4-fs (loop0): mount failed