last executing test programs: 18.172987655s ago: executing program 2 (id=1924): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004e200000100000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000080), 0x0}, 0x20) 16.474602564s ago: executing program 1 (id=1928): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f00000000c0)={{0x2000, 0x100000, 0xf, 0x1, 0x7, 0x10, 0x8b, 0x1, 0x0, 0x25, 0x9, 0x9}, {0x80a0000, 0x54000, 0x0, 0xff, 0x3, 0x40, 0x17, 0x3, 0x41, 0x80, 0x90, 0x9}, {0x59000, 0x6000, 0xb, 0xc, 0x1, 0x10, 0x5, 0xd, 0x9, 0xe6, 0x4, 0xb4}, {0x100000, 0xe000, 0xb, 0x10, 0x7, 0x1, 0x80, 0x3, 0x2d, 0x54, 0x9, 0x4}, {0x8080000, 0x5000, 0x0, 0x57, 0x8, 0x10, 0x2, 0x6, 0xc0, 0x42, 0x4, 0xa}, {0xfec00000, 0xb000, 0xb, 0xe, 0x5, 0x3, 0x8, 0x7f, 0xff, 0xff, 0xfd, 0x3}, {0xdddd1000, 0x1, 0x9, 0x2, 0x1, 0xc, 0xc, 0x7, 0x5, 0xe, 0xd8, 0x4}, {0x26000, 0xb000, 0xc, 0x15, 0x7f, 0xb, 0x0, 0x64, 0x7, 0x0, 0x4, 0x1}, {0xdddd0000}, {0x8080000, 0x4}, 0x0, 0x0, 0xaa2dc1e93b886c23, 0x10400, 0xb, 0x1801, 0x9000, 0x1, [0x5, 0x0, 0x80, 0x5095800000000000]}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@', @ANYBLOB="010000000000000000003900000008"], 0x40}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000e40)='./cgroup.cpu/cpuset.cpus\x00') syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000600), &(0x7f0000000200)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fanotify_init(0x10, 0x101000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x7e, 0x800003a, r6, 0x0) 13.96894941s ago: executing program 3 (id=1931): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf8) 13.002472111s ago: executing program 3 (id=1933): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0xc0002009}) epoll_pwait(r3, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 12.827311752s ago: executing program 4 (id=1934): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1ef, &(0x7f0000000b80)="$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") mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000004ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x800, 0x0, 0x1ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x4, 0x0, 0xfffffffffffffffa, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f00000001c0)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1900040, &(0x7f00000003c0)={[{@namecase}, {@gid}, {@dmask={'dmask', 0x3d, 0x6}}, {@namecase}, {@keep_last_dots}, {@errors_continue}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") open(&(0x7f0000000140)='.\x00', 0x0, 0x112) 12.813018003s ago: executing program 2 (id=1935): socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) 11.16674065s ago: executing program 0 (id=1936): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2020) 10.560613627s ago: executing program 3 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(r6, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 10.094700352s ago: executing program 0 (id=1938): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r0, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x40) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xedcb, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESHEX]) 10.028148673s ago: executing program 0 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x6c6882, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 9.094955312s ago: executing program 3 (id=1940): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000002140)=0x30) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x142842, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$TCSETSF(r0, 0x5404, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x610202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 9.069884923s ago: executing program 4 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.947685484s ago: executing program 1 (id=1942): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000003c0)='d\x06\xac?\xb8\x9f\x15\xc26\x19\xfc\x9b\x1aL\xaa\xcaqI\x96r\x90Z\nJV#\x9c\xba\xc4\xdd@\xec\xa6Vt\x9d\xf3\\\xe7\xe8\a\xfb\xe7*p\xfej\xfb\xe5\xf4s<\x1c9\x7f1\xdd4\x11R\x1f~\xd30\xbb_v\x99\xfb\xa0\xb1\xda\xc3\xcc\x9d\xfd7S\x86\x9eE\x14\xc7\xe5f/\x84l\xd5\xd1\x1e\xe9\xd8\x16M5\xa6\x9c\x14\xd7\xee[\x0e\x05\xa4\xdc}\xa7\x1c1\xf4\x03\xcb\xfc\xb9r\'t\xef\xd3\xde\x1fs\x80\xf3\xdb\xd9\x9bN\xa8e\x81\xf4\x1f\xf4\xa9MiR\xabp\x83O\xfc\xb5\x05\xf1\xc7)7&$bVH5\xea\xf33', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mount_setattr(r4, 0x0, 0x1100, &(0x7f00000000c0)={0x100013, 0x74, 0x100000, {r4}}, 0x20) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x408200, 0x4) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x6, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) 7.434567961s ago: executing program 1 (id=1943): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf8) 6.210711204s ago: executing program 1 (id=1944): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x20200, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) listen(r2, 0xffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) shutdown(r3, 0x0) 6.209980674s ago: executing program 2 (id=1945): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2, 0x33, 0x9, 0x13, 0xb, 0x5, 0x4, 0x11b, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1cb, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 5.986528626s ago: executing program 3 (id=1946): mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x8, 0x0) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x6800) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000240)=0x401) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) 5.427257152s ago: executing program 2 (id=1947): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0xc0002009}) epoll_pwait(r3, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 5.278604273s ago: executing program 1 (id=1948): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2020) 5.198629605s ago: executing program 4 (id=1949): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r0, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x40) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xedcb, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000a00)}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESHEX]) 5.126564725s ago: executing program 0 (id=1950): socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 5.021955807s ago: executing program 4 (id=1951): mkdir(0x0, 0x110) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder-control\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x1021002, 0x0, 0xfa, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x4) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) 4.320888384s ago: executing program 1 (id=1952): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f00000000c0)={{0x2000, 0x100000, 0xf, 0x1, 0x7, 0x10, 0x8b, 0x1, 0x0, 0x25, 0x9, 0x9}, {0x80a0000, 0x54000, 0x0, 0xff, 0x3, 0x40, 0x17, 0x3, 0x41, 0x80, 0x90, 0x9}, {0x59000, 0x6000, 0xb, 0xc, 0x1, 0x10, 0x5, 0xd, 0x9, 0xe6, 0x4, 0xb4}, {0x100000, 0xe000, 0xb, 0x10, 0x7, 0x1, 0x80, 0x3, 0x2d, 0x54, 0x9, 0x4}, {0x8080000, 0x5000, 0x0, 0x57, 0x8, 0x10, 0x2, 0x6, 0xc0, 0x42, 0x4, 0xa}, {0xfec00000, 0xb000, 0xb, 0xe, 0x5, 0x3, 0x8, 0x7f, 0xff, 0xff, 0xfd, 0x3}, {0xdddd1000, 0x1, 0x9, 0x2, 0x1, 0xc, 0xc, 0x7, 0x5, 0xe, 0xd8, 0x4}, {0x26000, 0xb000, 0xc, 0x15, 0x7f, 0xb, 0x0, 0x64, 0x7, 0x0, 0x4, 0x1}, {0xdddd0000}, {0x8080000, 0x4}, 0x0, 0x0, 0xaa2dc1e93b886c23, 0x10400, 0xb, 0x1801, 0x9000, 0x1, [0x5, 0x0, 0x80, 0x5095800000000000]}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@', @ANYBLOB="010000000000000000003900000008"], 0x40}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000e40)='./cgroup.cpu/cpuset.cpus\x00') syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000600), &(0x7f0000000200)=0x14) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fanotify_init(0x10, 0x101000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x7e, 0x800003a, r7, 0x0) 4.058210537s ago: executing program 0 (id=1953): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000003c0)='d\x06\xac?\xb8\x9f\x15\xc26\x19\xfc\x9b\x1aL\xaa\xcaqI\x96r\x90Z\nJV#\x9c\xba\xc4\xdd@\xec\xa6Vt\x9d\xf3\\\xe7\xe8\a\xfb\xe7*p\xfej\xfb\xe5\xf4s<\x1c9\x7f1\xdd4\x11R\x1f~\xd30\xbb_v\x99\xfb\xa0\xb1\xda\xc3\xcc\x9d\xfd7S\x86\x9eE\x14\xc7\xe5f/\x84l\xd5\xd1\x1e\xe9\xd8\x16M5\xa6\x9c\x14\xd7\xee[\x0e\x05\xa4\xdc}\xa7\x1c1\xf4\x03\xcb\xfc\xb9r\'t\xef\xd3\xde\x1fs\x80\xf3\xdb\xd9\x9bN\xa8e\x81\xf4\x1f\xf4\xa9MiR\xabp\x83O\xfc\xb5\x05\xf1\xc7)7&$bVH5\xea\xf33', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mount_setattr(r4, 0x0, 0x1100, &(0x7f00000000c0)={0x100013, 0x74, 0x100000, {r4}}, 0x20) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x408200, 0x4) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x6, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) 4.057604827s ago: executing program 4 (id=1954): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf8) 4.002726957s ago: executing program 2 (id=1955): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_setup(0xc4, &(0x7f0000000100)={0x0, 0x4c69, 0x2000, 0x5, 0x38f}, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x40000, 0x7c6d, 0xffffffff, 0x8001, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x2, 0xd0, 0x0, 0xff}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) geteuid() shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) madvise(&(0x7f0000b52000/0x3000)=nil, 0x3000, 0x12) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) dup(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2.746804641s ago: executing program 3 (id=1956): socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) 2.073311688s ago: executing program 2 (id=1957): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000002140)=0x30) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x142842, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$TCSETSF(r0, 0x5404, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x610202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 1.88874793s ago: executing program 0 (id=1958): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x20200, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) listen(r2, 0xffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) shutdown(r3, 0x0) 0s ago: executing program 4 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) kernel console output (not intermixed with test programs): T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 493.183967][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 493.241046][ T7] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 493.339542][ T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 493.532832][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.566831][ T7] usb 4-1: can't set config #179, error -71 [ 493.649886][ T7] usb 4-1: USB disconnect, device number 11 [ 493.702715][ T7882] device syzkaller0 entered promiscuous mode [ 495.200810][ T7906] loop0: detected capacity change from 0 to 1024 [ 495.310084][ T7906] EXT4-fs (loop0): Ignoring removed nobh option [ 495.361297][ T7906] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 495.473298][ T7906] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 495.641522][ T7906] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 497.491658][ T7925] device syzkaller0 entered promiscuous mode [ 497.508816][ T7927] loop1: detected capacity change from 0 to 512 [ 497.663857][ T7927] FAT-fs (loop1): Directory bread(block 199916) failed [ 497.691547][ T7927] FAT-fs (loop1): Directory bread(block 199917) failed [ 497.698664][ T7927] FAT-fs (loop1): Directory bread(block 199918) failed [ 497.740966][ T7927] FAT-fs (loop1): Directory bread(block 199919) failed [ 497.747911][ T7927] FAT-fs (loop1): Directory bread(block 199920) failed [ 497.823657][ T7927] FAT-fs (loop1): Directory bread(block 199921) failed [ 497.850946][ T7927] FAT-fs (loop1): Directory bread(block 199922) failed [ 497.857981][ T7927] FAT-fs (loop1): Directory bread(block 199923) failed [ 497.861110][ T7931] ufs: You didn't specify the type of your ufs filesystem [ 497.861110][ T7931] [ 497.861110][ T7931] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 497.861110][ T7931] [ 497.861110][ T7931] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 497.897881][ T7931] ufs: ufstype=old is supported read-only [ 497.905140][ T7931] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.929404][ T7913] loop3: detected capacity change from 0 to 32768 [ 497.943087][ T7927] FAT-fs (loop1): Directory bread(block 199916) failed [ 497.991393][ T7927] FAT-fs (loop1): Directory bread(block 199917) failed [ 498.298354][ T7913] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 498.349774][ T7913] BTRFS info (device loop3): turning on async discard [ 498.358558][ T7913] BTRFS info (device loop3): metadata ratio 0 [ 498.369981][ T7913] BTRFS info (device loop3): setting nodatasum [ 498.431098][ T7913] BTRFS info (device loop3): use zlib compression, level 3 [ 498.463622][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 498.476126][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 498.483052][ T7936] __sock_release: fasync list not empty! [ 498.483731][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.493403][ T7913] BTRFS info (device loop3): force clearing of disk cache [ 498.500175][ T4195] Workqueue: hci2 hci_rx_work [ 498.512456][ T4195] Call Trace: [ 498.515847][ T4195] [ 498.518883][ T4195] dump_stack_lvl+0x188/0x250 [ 498.523679][ T4195] ? show_regs_print_info+0x20/0x20 [ 498.529067][ T4195] ? load_image+0x400/0x400 [ 498.534102][ T4195] sysfs_create_dir_ns+0x26a/0x290 [ 498.539433][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 498.544463][ T4195] ? mark_lock+0x94/0x320 [ 498.548814][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 498.554468][ T4195] kobject_add_internal+0x6e0/0xd90 [ 498.560267][ T4195] kobject_add+0x160/0x230 [ 498.565144][ T4195] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 498.570970][ T4195] ? kobject_init+0x1d0/0x1d0 [ 498.575750][ T4195] ? get_device_parent+0x8b/0x3f0 [ 498.580873][ T4195] ? get_device_parent+0x121/0x3f0 [ 498.586179][ T4195] device_add+0x483/0xfb0 [ 498.590652][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 498.595865][ T4195] le_conn_complete_evt+0xc48/0x15c0 [ 498.601195][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 498.606455][ T4195] ? __mutex_trylock_common+0x155/0x260 [ 498.612363][ T4195] hci_le_meta_evt+0x285/0x3c90 [ 498.617371][ T4195] ? hci_event_packet+0x37b/0x1370 [ 498.622692][ T4195] ? __lock_acquire+0x7d10/0x7d10 [ 498.627840][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 498.634153][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 498.639805][ T4195] ? mark_lock+0x94/0x320 [ 498.644213][ T4195] ? mutex_unlock+0x10/0x10 [ 498.649256][ T4195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 498.655439][ T4195] ? lock_chain_count+0x20/0x20 [ 498.660301][ T4195] ? __rwlock_init+0x140/0x140 [ 498.665162][ T4195] hci_event_packet+0xe48/0x1370 [ 498.670138][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 498.675604][ T4195] ? rcu_lock_release+0x20/0x20 [ 498.680607][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 498.685933][ T4195] hci_rx_work+0x255/0xa10 [ 498.690372][ T4195] process_one_work+0x85f/0x1010 [ 498.695419][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 498.701170][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 498.706467][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 498.712512][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 498.718283][ T4195] ? wq_worker_running+0x97/0x170 [ 498.723687][ T4195] worker_thread+0xaa6/0x1290 [ 498.728569][ T4195] kthread+0x436/0x520 [ 498.733045][ T4195] ? rcu_lock_release+0x20/0x20 [ 498.738007][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 498.742616][ T4195] ret_from_fork+0x1f/0x30 [ 498.747419][ T4195] [ 498.849807][ T4195] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 498.864136][ T4195] Bluetooth: hci2: failed to register connection device [ 498.896053][ T7913] BTRFS info (device loop3): enabling auto defrag [ 498.902973][ T7913] BTRFS info (device loop3): using free space tree [ 498.909997][ T7913] BTRFS info (device loop3): has skinny extents [ 501.086103][ T7913] BTRFS error (device loop3): open_ctree failed: -12 [ 501.603145][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.609794][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.701823][ T7974] loop4: detected capacity change from 0 to 1024 [ 501.753392][ T7974] EXT4-fs (loop4): Ignoring removed nobh option [ 501.825107][ T7974] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 501.894348][ T7974] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 502.026257][ T7974] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 503.898368][ T7988] binder: 7987:7988 unknown command 0 [ 503.918353][ T7988] binder: 7987:7988 ioctl c0306201 2000000001c0 returned -22 [ 505.109814][ T7990] device syzkaller0 entered promiscuous mode [ 505.161886][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 505.172115][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 505.179973][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.190332][ T4204] Workqueue: hci4 hci_rx_work [ 505.195066][ T4204] Call Trace: [ 505.198544][ T4204] [ 505.201589][ T4204] dump_stack_lvl+0x188/0x250 [ 505.206304][ T4204] ? show_regs_print_info+0x20/0x20 [ 505.211829][ T4204] ? load_image+0x400/0x400 [ 505.216478][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 505.221717][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 505.226423][ T4204] ? process_one_work+0x85f/0x1010 [ 505.231577][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 505.231660][ T8001] __sock_release: fasync list not empty! [ 505.237041][ T4204] kobject_add_internal+0x6e0/0xd90 [ 505.248156][ T4204] kobject_add+0x160/0x230 [ 505.252704][ T4204] ? kobject_init+0x1d0/0x1d0 [ 505.257737][ T4204] ? klist_children_get+0x50/0x50 [ 505.262883][ T4204] ? get_device_parent+0x121/0x3f0 [ 505.268156][ T4204] device_add+0x483/0xfb0 [ 505.272556][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 505.277545][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 505.283340][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 505.288626][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 505.294349][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 505.299347][ T4204] ? hci_event_packet+0x37b/0x1370 [ 505.304577][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 505.309847][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 505.316130][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 505.321926][ T4204] ? mark_lock+0x94/0x320 [ 505.326303][ T4204] ? mutex_unlock+0x10/0x10 [ 505.331112][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 505.337399][ T4204] ? lock_chain_count+0x20/0x20 [ 505.342461][ T4204] ? __rwlock_init+0x140/0x140 [ 505.347359][ T4204] hci_event_packet+0xe48/0x1370 [ 505.352426][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 505.357683][ T4204] ? rcu_lock_release+0x20/0x20 [ 505.362575][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 505.367989][ T4204] hci_rx_work+0x255/0xa10 [ 505.372476][ T4204] process_one_work+0x85f/0x1010 [ 505.377493][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 505.383251][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 505.388581][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 505.393999][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 505.399774][ T4204] ? wq_worker_running+0x97/0x170 [ 505.404923][ T4204] worker_thread+0xaa6/0x1290 [ 505.409836][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 505.415067][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 505.421008][ T4204] kthread+0x436/0x520 [ 505.425150][ T4204] ? rcu_lock_release+0x20/0x20 [ 505.430060][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 505.434686][ T4204] ret_from_fork+0x1f/0x30 [ 505.439159][ T4204] [ 505.442628][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.453029][ T4204] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 505.468638][ T4204] Bluetooth: hci4: failed to register connection device [ 505.477265][ T4204] Bluetooth: hci4: link tx timeout [ 505.483061][ T4204] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 505.490965][ T4204] Bluetooth: hci4: link tx timeout [ 505.496306][ T4204] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 505.930994][ T2301] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 506.276882][ T8007] loop0: detected capacity change from 0 to 32768 [ 506.355275][ T8007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1005 (8007) [ 506.550829][ T8014] ufs: You didn't specify the type of your ufs filesystem [ 506.550829][ T8014] [ 506.550829][ T8014] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 506.550829][ T8014] [ 506.550829][ T8014] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 506.582705][ T8014] ufs: ufstype=old is supported read-only [ 506.589035][ T8014] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.697924][ T8007] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 506.707710][ T8007] BTRFS info (device loop0): using free space tree [ 506.714918][ T8007] BTRFS info (device loop0): has skinny extents [ 506.793928][ T8018] autofs4:pid:8018:autofs_fill_super: called with bogus options [ 506.819557][ T8018] vivid-004: disconnect [ 506.841875][ T2301] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 506.884407][ T2301] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 507.012316][ T2301] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 507.471990][ T8015] vivid-004: reconnect [ 508.067346][ T2301] usb 4-1: config 220 has no interface number 2 [ 508.130717][ T2301] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 508.161018][ T2301] usb 4-1: config 220 interface 0 has no altsetting 0 [ 508.176099][ T2301] usb 4-1: config 220 interface 76 has no altsetting 0 [ 508.183370][ T8007] BTRFS info (device loop0): enabling ssd optimizations [ 508.191149][ T2301] usb 4-1: config 220 interface 1 has no altsetting 0 [ 508.323186][ T8044] loop2: detected capacity change from 0 to 1024 [ 508.391311][ T2301] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 508.424557][ T2301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.446331][ T8044] EXT4-fs (loop2): Ignoring removed nobh option [ 508.456402][ T8044] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 508.471743][ T8044] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 508.487801][ T2301] usb 4-1: Product: syz [ 508.506107][ T2301] usb 4-1: Manufacturer: syz [ 508.513440][ T8044] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 508.526668][ T2301] usb 4-1: SerialNumber: syz [ 508.811351][ T2301] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 509.262700][ T2301] usb 4-1: No valid video chain found. [ 509.300981][ T2301] usb 4-1: selecting invalid altsetting 0 [ 509.707951][ T7312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (7312) [ 510.221761][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 510.231944][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 510.239558][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.249746][ T4204] Workqueue: hci1 hci_rx_work [ 510.254473][ T4204] Call Trace: [ 510.257784][ T4204] [ 510.260737][ T4204] dump_stack_lvl+0x188/0x250 [ 510.265451][ T4204] ? show_regs_print_info+0x20/0x20 [ 510.270947][ T4204] ? load_image+0x400/0x400 [ 510.275498][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 510.280646][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 510.285353][ T4204] ? process_one_work+0x85f/0x1010 [ 510.290590][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 510.295832][ T4204] kobject_add_internal+0x6e0/0xd90 [ 510.301511][ T4204] kobject_add+0x160/0x230 [ 510.305970][ T4204] ? kobject_init+0x1d0/0x1d0 [ 510.310687][ T4204] ? klist_children_get+0x50/0x50 [ 510.315794][ T4204] ? get_device_parent+0x121/0x3f0 [ 510.320955][ T4204] device_add+0x483/0xfb0 [ 510.325335][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 510.330679][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 510.336123][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 510.341291][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 510.347060][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 510.352047][ T4204] ? hci_event_packet+0x37b/0x1370 [ 510.357281][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 510.362618][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 510.368723][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 510.374410][ T4204] ? mark_lock+0x94/0x320 [ 510.378782][ T4204] ? mutex_unlock+0x10/0x10 [ 510.383314][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 510.389413][ T4204] ? lock_chain_count+0x20/0x20 [ 510.394729][ T4204] ? __rwlock_init+0x140/0x140 [ 510.399875][ T4204] hci_event_packet+0xe48/0x1370 [ 510.404933][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 510.410168][ T4204] ? rcu_lock_release+0x20/0x20 [ 510.415144][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 510.420456][ T4204] hci_rx_work+0x255/0xa10 [ 510.425183][ T4204] process_one_work+0x85f/0x1010 [ 510.430245][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 510.436249][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 510.441569][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 510.446718][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 510.452297][ T4204] ? wq_worker_running+0x97/0x170 [ 510.457534][ T4204] worker_thread+0xaa6/0x1290 [ 510.462247][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 510.467498][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 510.473441][ T4204] kthread+0x436/0x520 [ 510.477628][ T4204] ? rcu_lock_release+0x20/0x20 [ 510.482686][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 510.487300][ T4204] ret_from_fork+0x1f/0x30 [ 510.491758][ T4204] [ 510.494803][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.519092][ T8061] __sock_release: fasync list not empty! [ 510.526968][ T4204] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 510.543098][ T4204] Bluetooth: hci1: failed to register connection device [ 510.852717][ T2301] usb 4-1: selecting invalid altsetting 0 [ 510.858615][ T2301] usbtest: probe of 4-1:220.1 failed with error -22 [ 510.960515][ T2301] usb 4-1: USB disconnect, device number 12 [ 511.618685][ T8076] ufs: You didn't specify the type of your ufs filesystem [ 511.618685][ T8076] [ 511.618685][ T8076] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 511.618685][ T8076] [ 511.618685][ T8076] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 511.649801][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.656041][ T8076] ufs: ufstype=old is supported read-only [ 511.662019][ T8076] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 512.888808][ T8088] autofs4:pid:8088:autofs_fill_super: called with bogus options [ 512.908081][ T8088] vivid-000: disconnect [ 513.642663][ T8082] vivid-000: reconnect [ 514.251113][ T4233] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 514.661989][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.681008][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.712164][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.785720][ T4233] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.830817][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.879182][ T4233] usb 4-1: config 0 descriptor?? [ 515.017808][ T8003] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 515.027615][ T8003] CPU: 1 PID: 8003 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 515.035304][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.045709][ T8003] Workqueue: hci2 hci_rx_work [ 515.050621][ T8003] Call Trace: [ 515.054006][ T8003] [ 515.056961][ T8003] dump_stack_lvl+0x188/0x250 [ 515.061758][ T8003] ? show_regs_print_info+0x20/0x20 [ 515.066989][ T8003] ? load_image+0x400/0x400 [ 515.071714][ T8003] sysfs_create_dir_ns+0x26a/0x290 [ 515.077147][ T8003] ? sysfs_warn_dup+0xa0/0xa0 [ 515.081961][ T8003] ? process_one_work+0x85f/0x1010 [ 515.082946][ T8105] __sock_release: fasync list not empty! [ 515.087326][ T8003] ? do_raw_spin_unlock+0x11d/0x230 [ 515.098305][ T8003] kobject_add_internal+0x6e0/0xd90 [ 515.103558][ T8003] kobject_add+0x160/0x230 [ 515.108018][ T8003] ? kobject_init+0x1d0/0x1d0 [ 515.112736][ T8003] ? klist_children_get+0x50/0x50 [ 515.118058][ T8003] ? get_device_parent+0x121/0x3f0 [ 515.123419][ T8003] device_add+0x483/0xfb0 [ 515.127792][ T8003] hci_conn_add_sysfs+0xd1/0x1e0 [ 515.132850][ T8003] le_conn_complete_evt+0xc48/0x15c0 [ 515.138327][ T8003] ? cs_le_create_conn+0x5e0/0x5e0 [ 515.144018][ T8003] ? __mutex_trylock_common+0x155/0x260 [ 515.149693][ T8003] hci_le_meta_evt+0x285/0x3c90 [ 515.154672][ T8003] ? hci_event_packet+0x37b/0x1370 [ 515.159834][ T8003] ? __lock_acquire+0x7d10/0x7d10 [ 515.165078][ T8003] ? hci_remote_host_features_evt+0x280/0x280 [ 515.171175][ T8003] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 515.176936][ T8003] ? mark_lock+0x94/0x320 [ 515.181474][ T8003] ? mutex_unlock+0x10/0x10 [ 515.186229][ T8003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 515.192250][ T8003] ? lock_chain_count+0x20/0x20 [ 515.197263][ T8003] ? __rwlock_init+0x140/0x140 [ 515.202147][ T8003] hci_event_packet+0xe48/0x1370 [ 515.207244][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 515.212665][ T8003] ? rcu_lock_release+0x20/0x20 [ 515.217730][ T8003] ? hci_send_to_monitor+0x9c/0x4a0 [ 515.220222][ T8111] ufs: You didn't specify the type of your ufs filesystem [ 515.220222][ T8111] [ 515.220222][ T8111] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 515.220222][ T8111] [ 515.220222][ T8111] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 515.223141][ T8003] hci_rx_work+0x255/0xa10 [ 515.223188][ T8003] process_one_work+0x85f/0x1010 [ 515.223226][ T8003] ? worker_detach_from_pool+0x240/0x240 [ 515.255353][ T8111] ufs: ufstype=old is supported read-only [ 515.259612][ T8003] ? lockdep_hardirqs_off+0x70/0x100 [ 515.264845][ T8111] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 515.270335][ T8003] ? _raw_spin_lock_irq+0xb7/0xf0 [ 515.298226][ T8003] ? _raw_spin_lock_irqsave+0x100/0x100 [ 515.303845][ T8003] ? wq_worker_running+0x97/0x170 [ 515.308877][ T8003] worker_thread+0xaa6/0x1290 [ 515.313805][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 515.319011][ T8003] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 515.325023][ T8003] kthread+0x436/0x520 [ 515.329099][ T8003] ? rcu_lock_release+0x20/0x20 [ 515.334047][ T8003] ? kthread_blkcg+0xd0/0xd0 [ 515.338739][ T8003] ret_from_fork+0x1f/0x30 [ 515.343367][ T8003] [ 515.346524][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.358239][ T8003] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 515.374843][ T8003] Bluetooth: hci2: failed to register connection device [ 515.544550][ T4233] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 516.049845][ T4233] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 516.291361][ T4233] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 516.326347][ T4233] usb 4-1: USB disconnect, device number 13 [ 516.375836][ T8116] loop1: detected capacity change from 0 to 1024 [ 516.452027][ T8124] binder: 8123:8124 unknown command 0 [ 516.457613][ T8124] binder: 8123:8124 ioctl c0306201 2000000001c0 returned -22 [ 516.495453][ T8125] autofs4:pid:8125:autofs_fill_super: called with bogus options [ 516.515116][ T8125] vivid-001: disconnect [ 516.557481][ T8116] EXT4-fs (loop1): Ignoring removed nobh option [ 517.279128][ T8119] vivid-001: reconnect [ 517.563645][ T8116] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 517.770413][ T8116] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 517.784946][ T8116] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 518.709985][ T8137] fido_id[8137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 519.219783][ T8138] loop3: detected capacity change from 0 to 131072 [ 519.405615][ T8138] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 519.414478][ T8138] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 519.442726][ T8138] F2FS-fs (loop3): invalid crc value [ 519.493519][ T8138] F2FS-fs (loop3): Found nat_bits in checkpoint [ 519.577094][ T8156] ufs: You didn't specify the type of your ufs filesystem [ 519.577094][ T8156] [ 519.577094][ T8156] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 519.577094][ T8156] [ 519.577094][ T8156] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 519.608097][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.616961][ T8156] ufs: ufstype=old is supported read-only [ 519.622892][ T8138] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 519.622949][ T8138] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 519.638507][ T8156] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 519.685549][ T8003] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 519.685634][ T8160] __sock_release: fasync list not empty! [ 519.695185][ T8003] CPU: 1 PID: 8003 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 519.695216][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.695229][ T8003] Workqueue: hci4 hci_rx_work [ 519.695260][ T8003] Call Trace: [ 519.695267][ T8003] [ 519.695276][ T8003] dump_stack_lvl+0x188/0x250 [ 519.695305][ T8003] ? show_regs_print_info+0x20/0x20 [ 519.695337][ T8003] ? load_image+0x400/0x400 [ 519.744790][ T8003] sysfs_create_dir_ns+0x26a/0x290 [ 519.750257][ T8003] ? sysfs_warn_dup+0xa0/0xa0 [ 519.755351][ T8003] ? process_one_work+0x85f/0x1010 [ 519.760709][ T8003] ? do_raw_spin_unlock+0x11d/0x230 [ 519.766042][ T8003] kobject_add_internal+0x6e0/0xd90 [ 519.771557][ T8003] kobject_add+0x160/0x230 [ 519.776085][ T8003] ? kobject_init+0x1d0/0x1d0 [ 519.780813][ T8003] ? klist_children_get+0x50/0x50 [ 519.785886][ T8003] ? get_device_parent+0x121/0x3f0 [ 519.789173][ T8161] overlayfs: failed to resolve './bus': -2 [ 519.791041][ T8003] device_add+0x483/0xfb0 [ 519.791090][ T8003] hci_conn_add_sysfs+0xd1/0x1e0 [ 519.791118][ T8003] le_conn_complete_evt+0xc48/0x15c0 [ 519.791164][ T8003] ? cs_le_create_conn+0x5e0/0x5e0 [ 519.791196][ T8003] ? __mutex_trylock_common+0x155/0x260 [ 519.791229][ T8003] hci_le_meta_evt+0x285/0x3c90 [ 519.791253][ T8003] ? hci_event_packet+0x37b/0x1370 [ 519.791277][ T8003] ? __lock_acquire+0x7d10/0x7d10 [ 519.791312][ T8003] ? hci_remote_host_features_evt+0x280/0x280 [ 519.791342][ T8003] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 519.791376][ T8003] ? mark_lock+0x94/0x320 [ 519.791394][ T8003] ? mutex_unlock+0x10/0x10 [ 519.791415][ T8003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 519.866791][ T8003] ? lock_chain_count+0x20/0x20 [ 519.871772][ T8003] ? __rwlock_init+0x140/0x140 [ 519.876594][ T8003] hci_event_packet+0xe48/0x1370 [ 519.881663][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 519.887002][ T8003] ? rcu_lock_release+0x20/0x20 [ 519.891917][ T8003] ? hci_send_to_monitor+0x9c/0x4a0 [ 519.897625][ T8003] hci_rx_work+0x255/0xa10 [ 519.902264][ T8003] process_one_work+0x85f/0x1010 [ 519.907439][ T8003] ? worker_detach_from_pool+0x240/0x240 [ 519.913196][ T8003] ? lockdep_hardirqs_off+0x70/0x100 [ 519.918727][ T8003] ? _raw_spin_lock_irq+0xb7/0xf0 [ 519.924243][ T8003] ? _raw_spin_lock_irqsave+0x100/0x100 [ 519.930338][ T8003] ? wq_worker_running+0x97/0x170 [ 519.935604][ T8003] worker_thread+0xaa6/0x1290 [ 519.940428][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 519.945936][ T8003] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 519.951979][ T8003] kthread+0x436/0x520 [ 519.956279][ T8003] ? rcu_lock_release+0x20/0x20 [ 519.961272][ T8003] ? kthread_blkcg+0xd0/0xd0 [ 519.966084][ T8003] ret_from_fork+0x1f/0x30 [ 519.970640][ T8003] [ 519.973770][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.987617][ T8003] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 520.012998][ T8003] Bluetooth: hci4: failed to register connection device [ 520.023427][ T8003] Bluetooth: hci4: link tx timeout [ 520.030206][ T8003] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 520.038610][ T8003] Bluetooth: hci4: link tx timeout [ 520.044216][ T8003] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 521.331404][ T8175] autofs4:pid:8175:autofs_fill_super: called with bogus options [ 521.447093][ T8175] vivid-002: disconnect [ 521.614423][ T8170] vivid-002: reconnect [ 522.030129][ T8179] binder: 8178:8179 unknown command 0 [ 522.060680][ T8179] binder: 8178:8179 ioctl c0306201 2000000001c0 returned -22 [ 523.383946][ T8199] loop1: detected capacity change from 0 to 1024 [ 523.483407][ T8199] EXT4-fs (loop1): Ignoring removed nobh option [ 523.595609][ T8199] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 523.634279][ T8199] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 523.661145][ T8199] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 526.924933][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 526.925129][ T8218] __sock_release: fasync list not empty! [ 526.935262][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 526.948952][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.959400][ T4204] Workqueue: hci1 hci_rx_work [ 526.964178][ T4204] Call Trace: [ 526.967696][ T4204] [ 526.970711][ T4204] dump_stack_lvl+0x188/0x250 [ 526.975576][ T4204] ? show_regs_print_info+0x20/0x20 [ 526.981033][ T4204] ? load_image+0x400/0x400 [ 526.985635][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 526.991094][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 526.995951][ T4204] ? process_one_work+0x85f/0x1010 [ 527.001093][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 527.006754][ T4204] kobject_add_internal+0x6e0/0xd90 [ 527.012042][ T4204] kobject_add+0x160/0x230 [ 527.016542][ T4204] ? kobject_init+0x1d0/0x1d0 [ 527.021405][ T4204] ? klist_children_get+0x50/0x50 [ 527.026779][ T4204] ? get_device_parent+0x121/0x3f0 [ 527.031897][ T4204] device_add+0x483/0xfb0 [ 527.036329][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 527.042391][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 527.047811][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 527.053285][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 527.059062][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 527.064281][ T4204] ? hci_event_packet+0x37b/0x1370 [ 527.069696][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 527.075153][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 527.081410][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 527.087196][ T4204] ? mark_lock+0x94/0x320 [ 527.091701][ T4204] ? mutex_unlock+0x10/0x10 [ 527.096234][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 527.102222][ T4204] ? lock_chain_count+0x20/0x20 [ 527.107264][ T4204] ? __rwlock_init+0x140/0x140 [ 527.112332][ T4204] hci_event_packet+0xe48/0x1370 [ 527.117958][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 527.123736][ T4204] ? rcu_lock_release+0x20/0x20 [ 527.129040][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 527.135140][ T4204] hci_rx_work+0x255/0xa10 [ 527.139880][ T4204] process_one_work+0x85f/0x1010 [ 527.144842][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 527.150653][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 527.156405][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 527.161443][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 527.167209][ T4204] ? wq_worker_running+0x97/0x170 [ 527.172843][ T4204] worker_thread+0xaa6/0x1290 [ 527.177539][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 527.183007][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 527.189304][ T4204] kthread+0x436/0x520 [ 527.193403][ T4204] ? rcu_lock_release+0x20/0x20 [ 527.198634][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 527.203256][ T4204] ret_from_fork+0x1f/0x30 [ 527.207974][ T4204] [ 527.214376][ T4204] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 527.229403][ T4204] Bluetooth: hci1: failed to register connection device [ 527.590978][ T4233] Bluetooth: hci4: command 0x0405 tx timeout [ 529.047828][ T8230] autofs4:pid:8230:autofs_fill_super: called with bogus options [ 529.067675][ T8230] vivid-003: disconnect [ 529.257186][ T8226] vivid-003: reconnect [ 530.723844][ T8240] overlayfs: failed to resolve './file0': -2 [ 531.306396][ T8246] loop2: detected capacity change from 0 to 1024 [ 531.391107][ T8246] EXT4-fs (loop2): Ignoring removed nobh option [ 531.441105][ T8246] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 531.484311][ T8246] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 531.543357][ T8246] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 533.489810][ T8254] binder: 8252:8254 unknown command 0 [ 533.490119][ T8255] binder: 8253:8255 unknown command 0 [ 533.521025][ T8255] binder: 8253:8255 ioctl c0306201 2000000001c0 returned -22 [ 533.559786][ T8254] binder: 8252:8254 ioctl c0306201 2000000001c0 returned -22 [ 534.732477][ T8267] ufs: You didn't specify the type of your ufs filesystem [ 534.732477][ T8267] [ 534.732477][ T8267] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 534.732477][ T8267] [ 534.732477][ T8267] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 534.765180][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 534.765232][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 534.765253][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.765266][ T4204] Workqueue: hci0 hci_rx_work [ 534.765297][ T4204] Call Trace: [ 534.765305][ T4204] [ 534.765314][ T4204] dump_stack_lvl+0x188/0x250 [ 534.765341][ T4204] ? show_regs_print_info+0x20/0x20 [ 534.765364][ T4204] ? load_image+0x400/0x400 [ 534.765399][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 534.765423][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 534.775057][ T8267] ufs: ufstype=old is supported read-only [ 534.782951][ T4204] ? process_one_work+0x85f/0x1010 [ 534.783030][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 534.793827][ T8267] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.798425][ T4204] kobject_add_internal+0x6e0/0xd90 [ 534.862707][ T4204] kobject_add+0x160/0x230 [ 534.867323][ T4204] ? kobject_init+0x1d0/0x1d0 [ 534.872008][ T4204] ? klist_children_get+0x50/0x50 [ 534.877417][ T4204] ? get_device_parent+0x121/0x3f0 [ 534.882812][ T4204] device_add+0x483/0xfb0 [ 534.887283][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 534.892244][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 534.897573][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 534.903363][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 534.909021][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 534.913967][ T4204] ? hci_event_packet+0x37b/0x1370 [ 534.919346][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 534.924490][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 534.930943][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 534.936807][ T4204] ? mark_lock+0x94/0x320 [ 534.941229][ T4204] ? mutex_unlock+0x10/0x10 [ 534.945751][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 534.951748][ T4204] ? lock_chain_count+0x20/0x20 [ 534.956692][ T4204] ? __rwlock_init+0x140/0x140 [ 534.961911][ T4204] hci_event_packet+0xe48/0x1370 [ 534.967108][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 534.972488][ T4204] ? rcu_lock_release+0x20/0x20 [ 534.977437][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 534.982817][ T4204] hci_rx_work+0x255/0xa10 [ 534.987380][ T4204] process_one_work+0x85f/0x1010 [ 534.992513][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 534.998237][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 535.003624][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 535.008653][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 535.014206][ T4204] ? wq_worker_running+0x97/0x170 [ 535.019330][ T4204] worker_thread+0xaa6/0x1290 [ 535.024108][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 535.029552][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 535.035550][ T4204] kthread+0x436/0x520 [ 535.039731][ T4204] ? rcu_lock_release+0x20/0x20 [ 535.044586][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 535.049189][ T4204] ret_from_fork+0x1f/0x30 [ 535.053963][ T4204] [ 535.057009][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.091158][ T4204] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 535.097691][ T8268] __sock_release: fasync list not empty! [ 535.104686][ T4204] Bluetooth: hci0: failed to register connection device [ 536.765733][ T4234] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 536.777561][ T8279] autofs4:pid:8279:autofs_fill_super: called with bogus options [ 536.798580][ T8279] vivid-002: disconnect [ 536.948528][ T8275] vivid-002: reconnect [ 536.992641][ T8285] loop3: detected capacity change from 0 to 1024 [ 537.099308][ T8285] EXT4-fs (loop3): Ignoring removed nobh option [ 537.133668][ T8285] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 537.329130][ T8290] overlayfs: failed to resolve './file1': -2 [ 537.349299][ T8285] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 537.670847][ T8285] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 538.061085][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 539.512424][ T8299] binder: BINDER_SET_CONTEXT_MGR already set [ 539.522520][ T4234] usb 1-1: unable to read config index 0 descriptor/all [ 539.530215][ T4234] usb 1-1: can't read configurations, error -71 [ 539.578840][ T8299] binder: 8296:8299 ioctl 4018620d 200000004a80 returned -16 [ 540.741441][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 540.751276][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 540.759303][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.770183][ T4204] Workqueue: hci2 hci_rx_work [ 540.774945][ T4204] Call Trace: [ 540.778352][ T4204] [ 540.781305][ T4204] dump_stack_lvl+0x188/0x250 [ 540.786300][ T4204] ? show_regs_print_info+0x20/0x20 [ 540.787168][ T8310] __sock_release: fasync list not empty! [ 540.791699][ T4204] ? load_image+0x400/0x400 [ 540.791741][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 540.791768][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 540.809603][ T8311] ufs: You didn't specify the type of your ufs filesystem [ 540.809603][ T8311] [ 540.809603][ T8311] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 540.809603][ T8311] [ 540.809603][ T8311] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 540.811719][ T4204] ? process_one_work+0x85f/0x1010 [ 540.811753][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 540.811779][ T4204] kobject_add_internal+0x6e0/0xd90 [ 540.811833][ T4204] kobject_add+0x160/0x230 [ 540.811860][ T4204] ? kobject_init+0x1d0/0x1d0 [ 540.811887][ T4204] ? klist_children_get+0x50/0x50 [ 540.811911][ T4204] ? get_device_parent+0x121/0x3f0 [ 540.811937][ T4204] device_add+0x483/0xfb0 [ 540.811970][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 540.812003][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 540.812039][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 540.843588][ T8311] ufs: ufstype=old is supported read-only [ 540.848858][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 540.854451][ T8311] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.859346][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 540.926059][ T4204] ? hci_event_packet+0x37b/0x1370 [ 540.931274][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 540.936401][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 540.942741][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 540.948378][ T4204] ? mark_lock+0x94/0x320 [ 540.952909][ T4204] ? mutex_unlock+0x10/0x10 [ 540.957502][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 540.963600][ T4204] ? lock_chain_count+0x20/0x20 [ 540.968626][ T4204] ? __rwlock_init+0x140/0x140 [ 540.973567][ T4204] hci_event_packet+0xe48/0x1370 [ 540.978594][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 540.983919][ T4204] ? rcu_lock_release+0x20/0x20 [ 540.988798][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 540.994215][ T4204] hci_rx_work+0x255/0xa10 [ 540.998766][ T4204] process_one_work+0x85f/0x1010 [ 541.003726][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 541.009528][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 541.014905][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 541.020084][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 541.025638][ T4204] ? wq_worker_running+0x97/0x170 [ 541.030683][ T4204] worker_thread+0xaa6/0x1290 [ 541.035472][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 541.041141][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 541.047379][ T4204] kthread+0x436/0x520 [ 541.051628][ T4204] ? rcu_lock_release+0x20/0x20 [ 541.056926][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 541.061517][ T4204] ret_from_fork+0x1f/0x30 [ 541.066054][ T4204] [ 541.072732][ T4204] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 541.086073][ T4204] Bluetooth: hci2: failed to register connection device [ 541.101034][ T4204] Bluetooth: hci2: link tx timeout [ 541.108406][ T4204] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 543.427468][ T8327] autofs4:pid:8327:autofs_fill_super: called with bogus options [ 543.447153][ T8327] vivid-004: disconnect [ 544.106000][ T8325] vivid-004: reconnect [ 545.092128][ T8333] overlayfs: failed to resolve './file1': -2 [ 545.967694][ T8339] loop0: detected capacity change from 0 to 1024 [ 546.215701][ T8342] binder: BINDER_SET_CONTEXT_MGR already set [ 546.233891][ T8339] EXT4-fs (loop0): Ignoring removed nobh option [ 546.253983][ T8344] binder_alloc: 8338: binder_alloc_buf, no vma [ 546.261170][ T8342] binder: 8340:8342 ioctl 4018620d 200000004a80 returned -16 [ 546.269905][ T8339] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 546.285049][ T8339] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 546.303259][ T8339] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 546.383302][ T8351] overlayfs: failed to resolve './file0': -2 [ 548.894049][ T8367] __sock_release: fasync list not empty! [ 550.442307][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 550.452765][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 550.460435][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.470965][ T4204] Workqueue: hci1 hci_rx_work [ 550.475780][ T4204] Call Trace: [ 550.479186][ T4204] [ 550.482518][ T4204] dump_stack_lvl+0x188/0x250 [ 550.487422][ T4204] ? show_regs_print_info+0x20/0x20 [ 550.492919][ T4204] ? load_image+0x400/0x400 [ 550.497765][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 550.502136][ T8363] ufs: You didn't specify the type of your ufs filesystem [ 550.502136][ T8363] [ 550.502136][ T8363] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 550.502136][ T8363] [ 550.502136][ T8363] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 550.502903][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 550.539054][ T4204] ? process_one_work+0x85f/0x1010 [ 550.544328][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 550.549666][ T4204] kobject_add_internal+0x6e0/0xd90 [ 550.555205][ T4204] kobject_add+0x160/0x230 [ 550.560190][ T4204] ? kobject_init+0x1d0/0x1d0 [ 550.565087][ T4204] ? klist_children_get+0x50/0x50 [ 550.570237][ T4204] ? get_device_parent+0x121/0x3f0 [ 550.575408][ T4204] device_add+0x483/0xfb0 [ 550.579884][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 550.584943][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 550.590456][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 550.595723][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 550.601410][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 550.606313][ T4204] ? hci_event_packet+0x37b/0x1370 [ 550.611610][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 550.616878][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 550.623351][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 550.629114][ T4204] ? mark_lock+0x94/0x320 [ 550.633665][ T4204] ? mutex_unlock+0x10/0x10 [ 550.638330][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 550.644351][ T4204] ? lock_chain_count+0x20/0x20 [ 550.649246][ T4204] ? __rwlock_init+0x140/0x140 [ 550.654141][ T4204] hci_event_packet+0xe48/0x1370 [ 550.659237][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 550.664742][ T4204] ? rcu_lock_release+0x20/0x20 [ 550.669738][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 550.675033][ T4204] hci_rx_work+0x255/0xa10 [ 550.676617][ T8363] ufs: ufstype=old is supported read-only [ 550.679734][ T4204] process_one_work+0x85f/0x1010 [ 550.679779][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 550.696363][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 550.701694][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 550.706760][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 550.712343][ T4204] ? wq_worker_running+0x97/0x170 [ 550.717575][ T4204] worker_thread+0xaa6/0x1290 [ 550.722377][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 550.727607][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 550.733642][ T4204] kthread+0x436/0x520 [ 550.737749][ T4204] ? rcu_lock_release+0x20/0x20 [ 550.742635][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 550.747266][ T4204] ret_from_fork+0x1f/0x30 [ 550.751898][ T4204] [ 550.762381][ T4204] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 550.776437][ T4204] Bluetooth: hci1: failed to register connection device [ 550.783807][ T4204] Bluetooth: hci1: link tx timeout [ 550.784223][ T8363] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 550.790995][ T4204] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 552.008049][ T8388] overlayfs: failed to resolve './file1': -2 [ 554.193360][ T8402] autofs4:pid:8402:autofs_fill_super: called with bogus options [ 554.211447][ T8402] vivid-002: disconnect [ 554.925552][ T8400] vivid-002: reconnect [ 555.116319][ T8409] netlink: 'syz.4.1107': attribute type 298 has an invalid length. [ 555.145364][ T8404] loop3: detected capacity change from 0 to 1024 [ 555.805340][ T8404] EXT4-fs (loop3): Ignoring removed nobh option [ 555.839630][ T8404] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 555.852151][ T8404] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 555.862946][ T8404] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 557.555609][ T8417] loop1: detected capacity change from 0 to 32768 [ 558.443144][ T8424] ufs: You didn't specify the type of your ufs filesystem [ 558.443144][ T8424] [ 558.443144][ T8424] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 558.443144][ T8424] [ 558.443144][ T8424] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 558.474488][ T8424] ufs: ufstype=old is supported read-only [ 558.481343][ T8424] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.493052][ T8417] sg_write: data in/out 156/78 bytes for SCSI command 0x0-- guessing data in; [ 558.493052][ T8417] program syz.1.1113 not setting count and/or reply_len properly [ 560.504230][ T8446] autofs4:pid:8446:autofs_fill_super: called with bogus options [ 561.065307][ T8445] vivid-004: disconnect [ 561.101993][ T8444] vivid-004: reconnect [ 561.270660][ T8451] loop2: detected capacity change from 0 to 1024 [ 561.314801][ T8451] EXT4-fs (loop2): Ignoring removed nobh option [ 561.344391][ T8451] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 561.371056][ T8451] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 561.398335][ T8451] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 563.483366][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.489800][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.066385][ T8465] netlink: 'syz.1.1126': attribute type 298 has an invalid length. [ 564.663411][ T8470] ufs: You didn't specify the type of your ufs filesystem [ 564.663411][ T8470] [ 564.663411][ T8470] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 564.663411][ T8470] [ 564.663411][ T8470] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 564.694881][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.701381][ T8470] ufs: ufstype=old is supported read-only [ 564.707501][ T8470] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 565.248247][ T8477] loop1: detected capacity change from 0 to 4096 [ 565.461153][ T8480] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 565.526179][ T8477] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 566.636054][ T8489] binder: 8488:8489 ioctl c0306201 200000000680 returned -14 [ 567.294186][ T8498] loop2: detected capacity change from 0 to 1024 [ 567.385977][ T8498] EXT4-fs (loop2): Ignoring removed nobh option [ 567.404733][ T8498] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 567.458933][ T8498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 567.488244][ T8498] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 568.970537][ T8507] ufs: You didn't specify the type of your ufs filesystem [ 568.970537][ T8507] [ 568.970537][ T8507] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 568.970537][ T8507] [ 568.970537][ T8507] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 569.049189][ T8507] ufs: ufstype=old is supported read-only [ 569.059851][ T8507] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.638318][ T26] audit: type=1326 audit(1778557387.522:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.0.1143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32479dbdd9 code=0x0 [ 571.909673][ T8522] binder: 8520:8522 unknown command 0 [ 571.991973][ T8522] binder: 8520:8522 ioctl c0306201 2000000001c0 returned -22 [ 572.051257][ T8527] binder_alloc: 8520: binder_alloc_buf, no vma [ 573.480143][ T8539] loop1: detected capacity change from 0 to 1024 [ 573.601673][ T8539] EXT4-fs (loop1): Ignoring removed nobh option [ 573.631441][ T8539] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 573.660977][ T8539] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 573.699218][ T8539] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 576.319714][ T8557] ufs: You didn't specify the type of your ufs filesystem [ 576.319714][ T8557] [ 576.319714][ T8557] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 576.319714][ T8557] [ 576.319714][ T8557] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 576.351471][ T8557] ufs: ufstype=old is supported read-only [ 576.357893][ T8557] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 578.522016][ T8578] netlink: 'syz.3.1158': attribute type 298 has an invalid length. [ 580.361913][ T8588] loop2: detected capacity change from 0 to 4096 [ 580.512368][ T8591] loop1: detected capacity change from 0 to 1024 [ 580.603501][ T8594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.717178][ T8591] EXT4-fs (loop1): Ignoring removed nobh option [ 580.822288][ T8591] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 580.991352][ T8591] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 581.006304][ T8591] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 584.833985][ T8608] ufs: You didn't specify the type of your ufs filesystem [ 584.833985][ T8608] [ 584.833985][ T8608] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 584.833985][ T8608] [ 584.833985][ T8608] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 584.865593][ T8608] ufs: ufstype=old is supported read-only [ 584.871814][ T8608] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.713635][ T8630] autofs4:pid:8630:autofs_fill_super: called with bogus options [ 586.739779][ T8630] vivid-002: disconnect [ 587.816539][ T8625] vivid-002: reconnect [ 587.890339][ T8635] loop0: detected capacity change from 0 to 1024 [ 588.234804][ T8635] EXT4-fs (loop0): Ignoring removed nobh option [ 588.257795][ T8635] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 588.350730][ T8635] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 588.411225][ T8635] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 590.162443][ T8651] ufs: You didn't specify the type of your ufs filesystem [ 590.162443][ T8651] [ 590.162443][ T8651] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 590.162443][ T8651] [ 590.162443][ T8651] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 590.193596][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.199988][ T8651] ufs: ufstype=old is supported read-only [ 590.206315][ T8651] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.833019][ T8657] ODEBUG: Out of memory. ODEBUG disabled [ 595.981515][ T8676] autofs4:pid:8676:autofs_fill_super: called with bogus options [ 596.008886][ T8676] vivid-004: disconnect [ 596.167377][ T8674] vivid-004: reconnect [ 596.662665][ T8691] autofs4:pid:8691:autofs_fill_super: called with bogus options [ 597.325323][ T8697] loop3: detected capacity change from 0 to 1024 [ 597.534432][ T8702] ufs: You didn't specify the type of your ufs filesystem [ 597.534432][ T8702] [ 597.534432][ T8702] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 597.534432][ T8702] [ 597.534432][ T8702] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 597.566333][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.572785][ T8702] ufs: ufstype=old is supported read-only [ 597.594941][ T8702] ufs: ufs_fill_super(): bad magic number [ 599.672315][ T8709] loop0: detected capacity change from 0 to 128 [ 599.700680][ T8710] process 'syz.4.1200' launched './file1' with NULL argv: empty string added [ 599.736525][ T8709] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 600.558802][ T8717] xt_hashlimit: max too large, truncated to 1048576 [ 601.562925][ T8730] autofs4:pid:8730:autofs_fill_super: called with bogus options [ 601.582973][ T8730] vivid-004: disconnect [ 601.754682][ T8719] vivid-004: reconnect [ 601.881322][ T8735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1206'. [ 602.507454][ T8740] loop0: detected capacity change from 0 to 32768 [ 602.571575][ T8743] loop1: detected capacity change from 0 to 1024 [ 603.221904][ T8743] EXT4-fs (loop1): Ignoring removed nobh option [ 603.531619][ T8743] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 603.691235][ T8743] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 603.717699][ T8740] XFS (loop0): Mounting V5 Filesystem [ 603.803590][ T8743] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 603.823185][ T8758] ufs: You didn't specify the type of your ufs filesystem [ 603.823185][ T8758] [ 603.823185][ T8758] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 603.823185][ T8758] [ 603.823185][ T8758] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 603.855171][ T8758] ufs: ufstype=old is supported read-only [ 603.861346][ T8758] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.064183][ T8740] XFS (loop0): Ending clean mount [ 606.075084][ T8740] XFS (loop0): Quotacheck needed: Please wait. [ 607.153801][ T8740] XFS (loop0): Quotacheck: Done. [ 607.244794][ T4188] XFS (loop0): Unmounting Filesystem [ 609.355950][ T8802] vivid-008: ================= START STATUS ================= [ 609.365209][ T8802] vivid-008: Generate PTS: true [ 609.371956][ T8802] vivid-008: Generate SCR: true [ 609.377194][ T8802] tpg source WxH: 640x360 (Y'CbCr) [ 609.382503][ T8802] tpg field: 1 [ 609.386220][ T8802] tpg crop: 640x360@0x0 [ 609.390578][ T8802] tpg compose: 640x360@0x0 [ 609.395258][ T8802] tpg colorspace: 8 [ 609.399215][ T8802] tpg transfer function: 0/0 [ 609.404067][ T8802] tpg Y'CbCr encoding: 0/0 [ 609.409753][ T8802] tpg quantization: 0/0 [ 609.414168][ T8802] tpg RGB range: 0/2 [ 609.421541][ T8802] vivid-008: ================== END STATUS ================== [ 610.087509][ T8804] loop0: detected capacity change from 0 to 1024 [ 610.328704][ T8804] EXT4-fs (loop0): Ignoring removed nobh option [ 611.512873][ T8812] netlink: 'syz.1.1225': attribute type 298 has an invalid length. [ 612.287250][ T8804] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 612.298784][ T8804] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 612.535569][ T8804] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 613.239940][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 613.240151][ T8823] __sock_release: fasync list not empty! [ 613.250029][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 613.263129][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.273414][ T4204] Workqueue: hci1 hci_rx_work [ 613.278229][ T4204] Call Trace: [ 613.281754][ T4204] [ 613.284724][ T4204] dump_stack_lvl+0x188/0x250 [ 613.289577][ T4204] ? show_regs_print_info+0x20/0x20 [ 613.294935][ T4204] ? load_image+0x400/0x400 [ 613.299654][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 613.305000][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 613.309910][ T4204] ? process_one_work+0x85f/0x1010 [ 613.315241][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 613.320467][ T4204] kobject_add_internal+0x6e0/0xd90 [ 613.325785][ T4204] kobject_add+0x160/0x230 [ 613.330536][ T4204] ? kobject_init+0x1d0/0x1d0 [ 613.335336][ T4204] ? klist_children_get+0x50/0x50 [ 613.340566][ T4204] ? get_device_parent+0x121/0x3f0 [ 613.345692][ T4204] device_add+0x483/0xfb0 [ 613.350129][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 613.355432][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 613.360738][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 613.365866][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 613.371634][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 613.376507][ T4204] ? hci_event_packet+0x37b/0x1370 [ 613.381649][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 613.386770][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 613.392853][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 613.398495][ T4204] ? mark_lock+0x94/0x320 [ 613.402833][ T4204] ? mutex_unlock+0x10/0x10 [ 613.407343][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 613.413337][ T4204] ? lock_chain_count+0x20/0x20 [ 613.418283][ T4204] ? __rwlock_init+0x140/0x140 [ 613.423318][ T4204] hci_event_packet+0xe48/0x1370 [ 613.428629][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 613.434014][ T4204] ? rcu_lock_release+0x20/0x20 [ 613.439053][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 613.444485][ T4204] hci_rx_work+0x255/0xa10 [ 613.449094][ T4204] process_one_work+0x85f/0x1010 [ 613.454152][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 613.460324][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 613.465622][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 613.470652][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 613.476205][ T4204] ? wq_worker_running+0x97/0x170 [ 613.481240][ T4204] worker_thread+0xaa6/0x1290 [ 613.485931][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 613.491223][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 613.497216][ T4204] kthread+0x436/0x520 [ 613.501418][ T4204] ? rcu_lock_release+0x20/0x20 [ 613.506293][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 613.510899][ T4204] ret_from_fork+0x1f/0x30 [ 613.516036][ T4204] [ 613.528811][ T4204] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 613.550949][ T4204] Bluetooth: hci1: failed to register connection device [ 613.558501][ T4204] Bluetooth: hci1: link tx timeout [ 613.564160][ T4204] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 613.573290][ T4204] Bluetooth: hci1: link tx timeout [ 613.578527][ T4204] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 613.587357][ T4204] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 613.595945][ T4204] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 615.531903][ T8850] tipc: Started in network mode [ 615.537006][ T8850] tipc: Node identity 7f000001, cluster identity 4711 [ 615.547246][ T8850] tipc: Enabling of bearer rejected, failed to enable media [ 615.864347][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 616.882202][ T8861] overlayfs: missing 'lowerdir' [ 618.540671][ T4177] Bluetooth: hci1: command 0x0406 tx timeout [ 619.628216][ T8883] loop4: detected capacity change from 0 to 16 [ 619.921121][ T8883] erofs: (device loop4): mounted with root inode @ nid 36. [ 619.980202][ T8883] attempt to access beyond end of device [ 619.980202][ T8883] loop4: rw=524288, want=32, limit=16 [ 619.995435][ T8883] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 620.128013][ T26] audit: type=1800 audit(1778557438.012:12): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1246" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 620.771215][ T4177] Bluetooth: hci1: command 0x0406 tx timeout [ 620.907520][ T8871] loop0: detected capacity change from 0 to 4096 [ 621.472446][ T8871] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 623.832661][ T8919] overlayfs: missing 'lowerdir' [ 624.501863][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.508889][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.432657][ T8934] autofs4:pid:8934:autofs_fill_super: called with bogus options [ 626.074817][ T8941] loop2: detected capacity change from 0 to 128 [ 626.108412][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.129550][ T8941] FAT-fs (loop2): Filesystem has been set read-only [ 626.137182][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.265315][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.276755][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.298111][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.413846][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.477675][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.488129][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.498999][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.588002][ T8951] __sock_release: fasync list not empty! [ 626.595511][ T8941] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 626.652037][ T8003] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 626.662272][ T8003] CPU: 0 PID: 8003 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 626.669868][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 626.680217][ T8003] Workqueue: hci1 hci_rx_work [ 626.684931][ T8003] Call Trace: [ 626.688329][ T8003] [ 626.691305][ T8003] dump_stack_lvl+0x188/0x250 [ 626.696288][ T8003] ? show_regs_print_info+0x20/0x20 [ 626.701802][ T8003] ? load_image+0x400/0x400 [ 626.706352][ T8003] sysfs_create_dir_ns+0x26a/0x290 [ 626.711499][ T8003] ? sysfs_warn_dup+0xa0/0xa0 [ 626.716456][ T8003] ? kobject_add_internal+0x60c/0xd90 [ 626.722033][ T8003] ? sysfs_create_dir_ns+0x1/0x290 [ 626.727346][ T8003] kobject_add_internal+0x6e0/0xd90 [ 626.732925][ T8003] kobject_add+0x160/0x230 [ 626.737565][ T8003] ? kobject_init+0x1d0/0x1d0 [ 626.742292][ T8003] ? klist_children_get+0x50/0x50 [ 626.747588][ T8003] ? get_device_parent+0x121/0x3f0 [ 626.753194][ T8003] device_add+0x483/0xfb0 [ 626.758209][ T8003] hci_conn_add_sysfs+0xd1/0x1e0 [ 626.763698][ T8003] le_conn_complete_evt+0xc48/0x15c0 [ 626.769060][ T8003] ? cs_le_create_conn+0x5e0/0x5e0 [ 626.774481][ T8003] ? preempt_schedule_common+0xa5/0xd0 [ 626.780586][ T8003] ? preempt_schedule+0xbc/0xd0 [ 626.785635][ T8003] ? schedule_preempt_disabled+0x20/0x20 [ 626.791594][ T8003] ? __mutex_trylock_common+0x155/0x260 [ 626.797609][ T8003] hci_le_meta_evt+0x285/0x3c90 [ 626.802592][ T8003] ? hci_event_packet+0x37b/0x1370 [ 626.808021][ T8003] ? __lock_acquire+0x7d10/0x7d10 [ 626.813173][ T8003] ? hci_remote_host_features_evt+0x280/0x280 [ 626.819265][ T8003] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 626.825032][ T8003] ? mark_lock+0x94/0x320 [ 626.829597][ T8003] ? mutex_unlock+0x10/0x10 [ 626.834498][ T8003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 626.840971][ T8003] ? lock_chain_count+0x20/0x20 [ 626.845961][ T8003] ? __rwlock_init+0x140/0x140 [ 626.850751][ T8003] hci_event_packet+0xe48/0x1370 [ 626.855708][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 626.860942][ T8003] ? rcu_lock_release+0x20/0x20 [ 626.865916][ T8003] ? hci_send_to_monitor+0x9c/0x4a0 [ 626.871146][ T8003] hci_rx_work+0x255/0xa10 [ 626.875775][ T8003] process_one_work+0x85f/0x1010 [ 626.880754][ T8003] ? worker_detach_from_pool+0x240/0x240 [ 626.886407][ T8003] ? lockdep_hardirqs_off+0x70/0x100 [ 626.892028][ T8003] ? _raw_spin_lock_irq+0xb7/0xf0 [ 626.897080][ T8003] ? _raw_spin_lock_irqsave+0x100/0x100 [ 626.902842][ T8003] ? wq_worker_running+0x97/0x170 [ 626.908336][ T8003] worker_thread+0xaa6/0x1290 [ 626.913588][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 626.919099][ T8003] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 626.925216][ T8003] kthread+0x436/0x520 [ 626.929405][ T8003] ? rcu_lock_release+0x20/0x20 [ 626.935350][ T8003] ? kthread_blkcg+0xd0/0xd0 [ 626.938090][ T26] audit: type=1800 audit(1778557444.812:13): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1263" name="file2" dev="loop2" ino=1048616 res=0 errno=0 [ 626.940153][ T8003] ret_from_fork+0x1f/0x30 [ 626.965752][ T8003] [ 626.969039][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.982761][ T8003] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 627.080995][ T8003] Bluetooth: hci1: failed to register connection device [ 627.090450][ T8003] Bluetooth: hci1: link tx timeout [ 627.095906][ T8003] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 627.293569][ T8003] Bluetooth: hci1: link tx timeout [ 627.299024][ T8003] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 627.306878][ T8003] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 627.314783][ T8003] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 628.759419][ T8969] overlayfs: missing 'lowerdir' [ 630.404122][ T8988] autofs4:pid:8988:autofs_fill_super: called with bogus options [ 631.384049][ T26] audit: type=1326 audit(1778557449.272:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 631.591354][ T26] audit: type=1326 audit(1778557449.342:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 631.818324][ T26] audit: type=1326 audit(1778557449.522:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 631.917298][ T26] audit: type=1326 audit(1778557449.522:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.393397][ T8989] syz.1.1276 (8989): /proc/8986/oom_adj is deprecated, please use /proc/8986/oom_score_adj instead. [ 632.436906][ T26] audit: type=1326 audit(1778557449.542:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.499549][ T26] audit: type=1326 audit(1778557449.692:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.554597][ T26] audit: type=1326 audit(1778557449.732:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.579245][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.606293][ T26] audit: type=1326 audit(1778557450.252:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.631171][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.711024][ T26] audit: type=1326 audit(1778557450.252:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.735928][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.776535][ T4234] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 632.785630][ T26] audit: type=1326 audit(1778557450.252:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.840927][ T26] audit: type=1326 audit(1778557450.252:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.884100][ T26] audit: type=1326 audit(1778557450.252:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 632.970968][ T9006] loop1: detected capacity change from 0 to 2048 [ 632.977828][ T26] audit: type=1326 audit(1778557450.252:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 633.020779][ T26] audit: type=1326 audit(1778557450.252:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc36f26add9 code=0x7ffc0000 [ 633.196700][ T9005] loop4: detected capacity change from 0 to 4096 [ 633.219727][ T9006] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,jqfmt=vfsv0,nombcache,,errors=continue. Quota mode: none. [ 633.501222][ T4234] usb 1-1: unable to get BOS descriptor or descriptor too short [ 633.517739][ T9005] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 634.421245][ T4234] usb 1-1: config 246 has an invalid interface number: 89 but max is 0 [ 634.471968][ T4234] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 634.479621][ T4234] usb 1-1: config 246 has no interface number 0 [ 634.509987][ T8992] loop3: detected capacity change from 0 to 32768 [ 634.535550][ T9018] loop2: detected capacity change from 0 to 2048 [ 634.557313][ T4234] usb 1-1: config 246 interface 89 altsetting 27 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 634.565309][ T8992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1277 (8992) [ 634.647572][ T9018] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 634.695150][ T4234] usb 1-1: config 246 interface 89 altsetting 27 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.937775][ T4234] usb 1-1: config 246 interface 89 has no altsetting 0 [ 635.046155][ T9026] netlink: 'syz.4.1287': attribute type 298 has an invalid length. [ 635.931729][ T8992] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 636.126959][ T8992] BTRFS info (device loop3): turning on sync discard [ 636.268373][ T8992] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 636.285823][ T8992] BTRFS info (device loop3): use zstd compression, level 3 [ 636.293507][ T4234] usb 1-1: string descriptor 0 read error: -71 [ 636.299803][ T4234] usb 1-1: New USB device found, idVendor=1bc7, idProduct=3001, bcdDevice=af.ac [ 636.310418][ T8992] BTRFS info (device loop3): turning on async discard [ 636.341498][ T8992] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 636.407386][ T8992] BTRFS info (device loop3): trying to use backup root at mount time [ 636.411294][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.427009][ T8992] BTRFS info (device loop3): enabling auto defrag [ 636.451248][ T8992] BTRFS info (device loop3): using free space tree [ 636.482260][ T8992] BTRFS info (device loop3): has skinny extents [ 637.163334][ T4234] usb 1-1: can't set config #246, error -71 [ 637.205315][ T4234] usb 1-1: USB disconnect, device number 23 [ 637.269818][ T9061] overlayfs: missing 'lowerdir' [ 637.418642][ T9055] autofs4:pid:9055:autofs_fill_super: called with bogus options [ 638.602699][ T8992] BTRFS error (device loop3): open_ctree failed: -12 [ 638.631712][ T7312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (7312) [ 642.031326][ T9098] overlayfs: missing 'lowerdir' [ 643.486900][ T9102] loop2: detected capacity change from 0 to 164 [ 643.863288][ T9106] loop1: detected capacity change from 0 to 64 [ 643.977792][ T9106] attempt to access beyond end of device [ 643.977792][ T9106] loop1: rw=0, want=16777218, limit=64 [ 644.101361][ T9106] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 644.136671][ T9106] attempt to access beyond end of device [ 644.136671][ T9106] loop1: rw=0, want=16777218, limit=64 [ 644.211542][ T9106] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 644.651127][ T9104] netlink: 'syz.3.1300': attribute type 298 has an invalid length. [ 644.666565][ T9114] loop1: detected capacity change from 0 to 512 [ 644.842770][ T9114] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 644.861193][ T9114] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.543983][ T9122] loop4: detected capacity change from 0 to 32768 [ 645.659185][ T9122] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 645.668528][ T9122] BTRFS info (device loop4): setting nodatasum [ 645.675365][ T9122] BTRFS info (device loop4): force zlib compression, level 3 [ 645.682819][ T9122] BTRFS info (device loop4): turning on flush-on-commit [ 645.690280][ T9122] BTRFS info (device loop4): max_inline at 4096 [ 645.696763][ T9122] BTRFS info (device loop4): using free space tree [ 645.703637][ T9122] BTRFS info (device loop4): has skinny extents [ 646.003145][ T9122] BTRFS info (device loop4): enabling ssd optimizations [ 646.401734][ T9148] autofs4:pid:9148:autofs_fill_super: called with bogus options [ 648.179352][ T9152] fuse: root generation should be zero [ 648.582932][ T9162] overlayfs: missing 'lowerdir' [ 649.251600][ T9164] overlayfs: missing 'lowerdir' [ 649.882610][ T9173] autofs4:pid:9173:autofs_fill_super: called with bogus options [ 649.900763][ T9173] vivid-003: disconnect [ 650.564194][ T9169] vivid-003: reconnect [ 650.609137][ T9179] __sock_release: fasync list not empty! [ 652.811632][ T9204] overlayfs: missing 'lowerdir' [ 652.953209][ T9203] autofs4:pid:9203:autofs_fill_super: called with bogus options [ 654.005783][ T9201] overlayfs: missing 'workdir' [ 655.460663][ T9226] __sock_release: fasync list not empty! [ 656.192977][ T9242] loop1: detected capacity change from 0 to 2048 [ 656.379854][ T9242] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 656.454201][ T9242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.351321][ T9250] overlayfs: missing 'lowerdir' [ 658.316143][ T9261] overlayfs: missing 'workdir' [ 659.917259][ T9281] __sock_release: fasync list not empty! [ 661.537407][ T9289] loop1: detected capacity change from 0 to 32768 [ 661.998616][ T9289] XFS (loop1): Mounting V5 Filesystem [ 662.336513][ T9289] XFS (loop1): Ending clean mount [ 662.354717][ T9289] XFS (loop1): Quotacheck needed: Please wait. [ 663.647444][ T9289] XFS (loop1): Quotacheck: Done. [ 664.444782][ T4198] XFS (loop1): Unmounting Filesystem [ 665.217651][ T9332] loop3: detected capacity change from 0 to 512 [ 665.305937][ T9328] device bridge1 entered promiscuous mode [ 665.325498][ T9328] team0: Port device bridge1 added [ 665.369800][ T9332] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 665.397238][ T9330] bridge0: port 3(team0) entered blocking state [ 665.446683][ T9332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 665.477154][ T9330] bridge0: port 3(team0) entered disabled state [ 665.500479][ T9332] EXT4-fs (loop3): 1 truncate cleaned up [ 665.511138][ T9332] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,grpid,dioread_nolock,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 665.543388][ T9330] device team0 entered promiscuous mode [ 665.549314][ T9330] device team_slave_0 entered promiscuous mode [ 665.558769][ T9330] device team_slave_1 entered promiscuous mode [ 665.574942][ T9330] bridge0: port 3(team0) entered blocking state [ 665.582093][ T9330] bridge0: port 3(team0) entered forwarding state [ 665.772068][ T9332] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 665.846617][ T9338] overlayfs: missing 'workdir' [ 667.267530][ T9347] __sock_release: fasync list not empty! [ 668.609127][ T9364] loop1: detected capacity change from 0 to 32768 [ 668.733572][ T9364] [ 668.733572][ T9364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.733572][ T9364] [ 669.447434][ T9364] [ 669.447434][ T9364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 669.447434][ T9364] [ 669.458997][ T9364] [ 669.458997][ T9364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 669.458997][ T9364] [ 669.469714][ T9364] [ 669.469714][ T9364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 669.469714][ T9364] [ 669.505693][ T277] [ 669.505693][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 669.505693][ T277] [ 669.704879][ T9375] loop0: detected capacity change from 0 to 32768 [ 669.784775][ T9375] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1372 (9375) [ 669.793656][ T4198] [ 669.793656][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 669.793656][ T4198] [ 669.814790][ T9375] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 669.824788][ T9375] BTRFS info (device loop0): setting nodatacow, compression disabled [ 669.833169][ T9375] BTRFS info (device loop0): force clearing of disk cache [ 669.840404][ T9375] BTRFS info (device loop0): enabling ssd optimizations [ 669.848147][ T9375] BTRFS info (device loop0): using spread ssd allocation scheme [ 669.855893][ T9375] BTRFS info (device loop0): turning off barriers [ 669.862483][ T9375] BTRFS info (device loop0): disabling free space tree [ 669.869569][ T9375] BTRFS info (device loop0): not using ssd optimizations [ 669.876831][ T9375] BTRFS info (device loop0): not using spread ssd allocation scheme [ 669.885335][ T9375] BTRFS info (device loop0): has skinny extents [ 669.896817][ T4198] [ 669.896817][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 669.896817][ T4198] [ 670.015045][ T9390] loop3: detected capacity change from 0 to 64 [ 671.655508][ T9375] BTRFS info (device loop0): clearing free space tree [ 671.662597][ T9375] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 671.673431][ T9375] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 673.225341][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 673.274726][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 673.300000][ T9434] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.313990][ T9434] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.323082][ T9434] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.332073][ T9434] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.345281][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 673.444043][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 674.785934][ T9452] loop2: detected capacity change from 0 to 32768 [ 681.539926][ T9510] loop1: detected capacity change from 0 to 16 [ 681.614818][ T9510] erofs: (device loop1): mounted with root inode @ nid 36. [ 681.653979][ T9510] attempt to access beyond end of device [ 681.653979][ T9510] loop1: rw=524288, want=32, limit=16 [ 681.705186][ T9510] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 681.773882][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 681.773899][ T26] audit: type=1800 audit(1778557499.662:55): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1398" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 681.931006][ T7767] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 682.461259][ T7767] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 682.481041][ T7767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.531881][ T7767] usb 4-1: Product: syz [ 682.536275][ T7767] usb 4-1: Manufacturer: syz [ 682.592840][ T7767] usb 4-1: SerialNumber: syz [ 682.952516][ T7767] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 682.999111][ T7767] usb 4-1: USB disconnect, device number 14 [ 683.115186][ T9522] loop0: detected capacity change from 0 to 16 [ 684.610500][ T9522] erofs: (device loop0): mounted with root inode @ nid 36. [ 684.627200][ T9522] attempt to access beyond end of device [ 684.627200][ T9522] loop0: rw=524288, want=32, limit=16 [ 684.642098][ T9522] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 684.659779][ T26] audit: type=1800 audit(1778557502.542:56): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1408" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 684.849181][ T7767] usblp0: removed [ 686.552669][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.559056][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.567217][ T9529] loop0: detected capacity change from 0 to 128 [ 687.033565][ T9529] loop0: detected capacity change from 0 to 4096 [ 687.738761][ T9537] loop0: detected capacity change from 0 to 32768 [ 687.802666][ T9538] loop2: detected capacity change from 0 to 40427 [ 687.886797][ T9537] XFS (loop0): Mounting V5 Filesystem [ 688.053103][ T9538] F2FS-fs (loop2): invalid crc value [ 688.079401][ T9538] F2FS-fs (loop2): Found nat_bits in checkpoint [ 688.127870][ T9538] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 688.150989][ T9537] XFS (loop0): Ending clean mount [ 688.165131][ T9549] loop4: detected capacity change from 0 to 256 [ 688.207965][ T9537] XFS (loop0): Quotacheck needed: Please wait. [ 688.300510][ T9537] XFS (loop0): Quotacheck: Done. [ 689.092761][ T4188] XFS (loop0): Unmounting Filesystem [ 689.571858][ T9562] loop2: detected capacity change from 0 to 1024 [ 689.939996][ T4235] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 690.060766][ T9566] loop3: detected capacity change from 0 to 16 [ 691.093086][ T9566] erofs: (device loop3): mounted with root inode @ nid 36. [ 691.111372][ T9565] attempt to access beyond end of device [ 691.111372][ T9565] loop3: rw=524288, want=32, limit=16 [ 691.131825][ T9565] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 691.149076][ T26] audit: type=1800 audit(1778557509.032:57): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1420" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 691.681015][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.751549][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.810966][ T4235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 691.968085][ T4235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.027918][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.076528][ T4235] usb 5-1: config 0 descriptor?? [ 692.530979][ T4235] usbhid 5-1:0.0: can't add hid device: -71 [ 692.537303][ T4235] usbhid: probe of 5-1:0.0 failed with error -71 [ 692.605490][ T4235] usb 5-1: USB disconnect, device number 17 [ 693.106503][ T9589] loop2: detected capacity change from 0 to 32768 [ 693.335264][ T9589] XFS (loop2): Mounting V5 Filesystem [ 693.582287][ T9589] XFS (loop2): Ending clean mount [ 693.590067][ T9589] XFS (loop2): Quotacheck needed: Please wait. [ 694.756600][ T9589] XFS (loop2): Quotacheck: Done. [ 696.136462][ T4193] XFS (loop2): Unmounting Filesystem [ 696.464003][ T9624] loop1: detected capacity change from 0 to 64 [ 700.296455][ T9661] loop2: detected capacity change from 0 to 16 [ 700.549598][ T9661] erofs: (device loop2): mounted with root inode @ nid 36. [ 700.616268][ T9658] attempt to access beyond end of device [ 700.616268][ T9658] loop2: rw=524288, want=32, limit=16 [ 700.795595][ T9658] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 701.043315][ T26] audit: type=1800 audit(1778557518.932:58): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1431" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 706.625792][ T9714] autofs4:pid:9714:autofs_fill_super: called with bogus options [ 707.485004][ T9719] loop2: detected capacity change from 0 to 16 [ 709.951188][ T9719] erofs: (device loop2): mounted with root inode @ nid 36. [ 710.220779][ T9729] loop3: detected capacity change from 0 to 512 [ 710.288436][ T9729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 710.301062][ T9729] System zones: 1-12 [ 710.330077][ T9729] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1469: missing EA_INODE flag [ 710.351104][ T9729] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1469: error while reading EA inode 12 err=-117 [ 710.476876][ T9729] EXT4-fs (loop3): 1 orphan inode deleted [ 710.532140][ T9729] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 711.292589][ T9744] overlayfs: missing 'workdir' [ 711.379723][ T26] audit: type=1800 audit(1778557529.202:59): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1469" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 713.292921][ T9754] loop4: detected capacity change from 0 to 2048 [ 713.420971][ T9754] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 713.539054][ T9771] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 713.552583][ T9754] attempt to access beyond end of device [ 713.552583][ T9754] loop4: rw=524288, want=33554432, limit=2048 [ 713.670736][ T9773] loop3: detected capacity change from 0 to 16 [ 714.001080][ T9775] attempt to access beyond end of device [ 714.001080][ T9775] loop4: rw=0, want=9437256, limit=2048 [ 714.013098][ T9775] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 714.052877][ T9774] attempt to access beyond end of device [ 714.052877][ T9774] loop4: rw=0, want=9437256, limit=2048 [ 714.067107][ T9774] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 714.173311][ T9773] erofs: (device loop3): mounted with root inode @ nid 36. [ 714.187859][ T9770] attempt to access beyond end of device [ 714.187859][ T9770] loop3: rw=524288, want=32, limit=16 [ 714.221375][ T9770] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 714.300554][ T26] audit: type=1800 audit(1778557532.182:60): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1480" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 714.580617][ T9780] autofs4:pid:9780:autofs_fill_super: called with bogus options [ 714.599519][ T9780] vivid-002: disconnect [ 715.388876][ T9776] vivid-002: reconnect [ 719.297493][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 721.645573][ T9840] Device name cannot be null; rc = [-22] [ 722.375785][ T9847] loop3: detected capacity change from 0 to 2048 [ 722.515587][ T9847] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 722.590887][ T26] audit: type=1800 audit(1778557540.472:61): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1503" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 722.611902][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.651780][ T9847] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 724.671121][ T9078] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 725.111298][ T9078] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 725.163685][ T9078] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.312242][ T9078] usb 2-1: config 0 has no interface number 0 [ 725.405194][ T9078] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 725.540229][ T9078] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 725.691903][ T9078] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 725.792205][ T9078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.980425][ T9078] usb 2-1: config 0 descriptor?? [ 726.192534][ T9078] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 727.291073][ T5101] usb 2-1: Failed to submit usb control message: -110 [ 727.306648][ T4231] usb 2-1: USB disconnect, device number 18 [ 727.340938][ T5101] usb 2-1: unable to send the bmi data to the device: -110 [ 727.348345][ T5101] usb 2-1: unable to get target info from device [ 727.577512][ T5101] usb 2-1: could not get target info (-110) [ 727.705433][ T5101] usb 2-1: could not probe fw (-110) [ 727.769770][ T9883] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 727.785143][ T9883] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 728.603763][ T9890] loop0: detected capacity change from 0 to 2048 [ 729.494481][ T9895] loop3: detected capacity change from 0 to 2048 [ 729.610038][ T9890] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 730.237261][ T26] audit: type=1800 audit(1778557548.122:62): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1517" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 730.312962][ T9895] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 730.368480][ T9895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 730.714266][ T9907] loop4: detected capacity change from 0 to 32768 [ 731.482002][ T9912] netlink: 5976 bytes leftover after parsing attributes in process `syz.3.1519'. [ 731.508585][ T9907] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1518 (9907) [ 731.527402][ T9907] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 731.536738][ T9907] BTRFS info (device loop4): setting nodatacow, compression disabled [ 731.545306][ T9907] BTRFS info (device loop4): force clearing of disk cache [ 731.553056][ T9907] BTRFS info (device loop4): enabling ssd optimizations [ 731.560703][ T9907] BTRFS info (device loop4): using spread ssd allocation scheme [ 731.568892][ T9907] BTRFS info (device loop4): turning off barriers [ 731.576623][ T9907] BTRFS info (device loop4): disabling free space tree [ 731.584235][ T9907] BTRFS info (device loop4): not using ssd optimizations [ 731.592172][ T9907] BTRFS info (device loop4): not using spread ssd allocation scheme [ 731.600413][ T9907] BTRFS info (device loop4): has skinny extents [ 732.867323][ T9907] BTRFS error (device loop4): open_ctree failed: -12 [ 734.491066][ T8057] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 735.491265][ T8057] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 735.517705][ T8057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.617372][ T6908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (6908) [ 735.637685][ T8057] usb 2-1: config 0 has no interface number 0 [ 735.773157][ T8057] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 736.649604][ T8057] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 736.663359][ T8057] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 736.673066][ T8057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.687495][ T8057] usb 2-1: config 0 descriptor?? [ 736.721019][ T8057] usb 2-1: can't set config #0, error -71 [ 736.775053][ T8057] usb 2-1: USB disconnect, device number 19 [ 737.215669][ T9956] binder: BINDER_SET_CONTEXT_MGR already set [ 737.265699][ T9956] binder: 9955:9956 ioctl 4018620d 200000004a80 returned -16 [ 739.042303][ T9976] loop0: detected capacity change from 0 to 128 [ 741.062985][ T9981] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by ""[9981] [ 741.350939][ T9079] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 741.600977][ T9079] usb 4-1: Using ep0 maxpacket: 32 [ 741.761451][ T9079] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 741.790737][ T9079] usb 4-1: config 0 has no interface number 0 [ 741.809656][T10007] binder: BINDER_SET_CONTEXT_MGR already set [ 741.820899][ T9079] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 741.897205][ T9079] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 741.918188][T10007] binder: 10006:10007 ioctl 4018620d 200000004a80 returned -16 [ 742.045643][ T9079] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.271209][ T9079] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 742.383702][ T9079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.410866][ T9079] usb 4-1: Product: syz [ 742.430578][ T9079] usb 4-1: Manufacturer: syz [ 743.179971][ T9079] usb 4-1: SerialNumber: syz [ 743.207089][ T9079] usb 4-1: config 0 descriptor?? [ 743.231405][ T9997] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 743.305367][ T9079] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input25 [ 744.170587][ T9079] usb 4-1: USB disconnect, device number 15 [ 744.601042][ T8057] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 746.041124][ T8057] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 746.086216][ T8057] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.375408][ T8057] usb 3-1: config 0 has no interface number 0 [ 746.453000][ T8057] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 746.591544][ T8057] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 746.812612][ T8057] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 746.947605][ T8057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.162406][ T8057] usb 3-1: config 0 descriptor?? [ 747.363179][ T8057] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 747.373805][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.380356][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.145165][ T9079] usb 3-1: USB disconnect, device number 13 [ 748.164656][ T9172] usb 3-1: Failed to submit usb control message: -71 [ 748.180172][ T9172] usb 3-1: unable to send the bmi data to the device: -71 [ 748.234384][ T9172] usb 3-1: unable to get target info from device [ 748.254231][ T9172] usb 3-1: could not get target info (-71) [ 748.272519][ T9172] usb 3-1: could not probe fw (-71) [ 748.563482][T10056] loop4: detected capacity change from 0 to 32768 [ 749.383907][T10056] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 749.394099][T10056] BTRFS info (device loop4): setting nodatacow, compression disabled [ 749.400057][T10063] __sock_release: fasync list not empty! [ 749.402512][T10056] BTRFS info (device loop4): force clearing of disk cache [ 749.416376][T10056] BTRFS info (device loop4): enabling ssd optimizations [ 749.423641][T10056] BTRFS info (device loop4): using spread ssd allocation scheme [ 749.431550][T10056] BTRFS info (device loop4): turning off barriers [ 749.438300][T10056] BTRFS info (device loop4): disabling free space tree [ 749.445364][T10056] BTRFS info (device loop4): not using ssd optimizations [ 749.452532][T10056] BTRFS info (device loop4): not using spread ssd allocation scheme [ 749.460638][T10056] BTRFS info (device loop4): has skinny extents [ 749.708513][T10056] BTRFS info (device loop4): clearing free space tree [ 749.715444][T10056] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 749.725367][T10056] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 750.032810][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 751.321124][T10110] autofs4:pid:10110:autofs_fill_super: called with bogus options [ 752.221097][ T5107] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 752.621192][ T5107] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 752.672946][ T5107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.841331][ T5107] usb 2-1: config 0 has no interface number 0 [ 752.953301][ T5107] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 753.108429][ T5107] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 753.295462][ T5107] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 753.416281][ T5107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.627173][ T5107] usb 2-1: config 0 descriptor?? [ 753.834893][ T5107] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 754.891267][ T5101] usb 2-1: Failed to submit usb control message: -110 [ 754.934855][ T5101] usb 2-1: unable to send the bmi data to the device: -110 [ 755.043862][ T5101] usb 2-1: unable to get target info from device [ 755.299503][ T5101] usb 2-1: could not get target info (-110) [ 755.417364][ T5101] usb 2-1: could not probe fw (-110) [ 756.022555][ T4519] usb 2-1: USB disconnect, device number 20 [ 756.619135][T10145] __sock_release: fasync list not empty! [ 762.081081][ T9449] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 762.541244][ T9449] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 762.583104][ T9449] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.722563][ T9449] usb 1-1: config 0 has no interface number 0 [ 762.809392][ T9449] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 762.943027][ T9449] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 763.166261][ T9449] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 763.343838][ T9449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.607625][ T9449] usb 1-1: config 0 descriptor?? [ 763.848171][ T9449] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 764.289143][ T8057] usb 1-1: USB disconnect, device number 24 [ 764.302728][ T4346] usb 1-1: Failed to submit usb control message: -71 [ 764.310603][ T4346] usb 1-1: unable to send the bmi data to the device: -71 [ 764.386382][ T4346] usb 1-1: unable to get target info from device [ 764.415347][ T4346] usb 1-1: could not get target info (-71) [ 764.489348][ T4346] usb 1-1: could not probe fw (-71) [ 765.064421][T10199] __sock_release: fasync list not empty! [ 766.759859][T10218] loop3: detected capacity change from 0 to 128 [ 766.989503][T10222] loop0: detected capacity change from 0 to 512 [ 767.159481][T10224] autofs4:pid:10224:autofs_fill_super: called with bogus options [ 769.670975][ T4264] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 770.111060][ T4264] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 770.164491][ T4264] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.339828][ T4264] usb 3-1: config 0 has no interface number 0 [ 770.435891][ T4264] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 770.608470][ T4264] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 770.855000][ T4264] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 771.017224][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.272093][ T4264] usb 3-1: config 0 descriptor?? [ 771.551821][ T4264] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 772.111305][ T4264] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 772.411048][ T4264] usb 4-1: Using ep0 maxpacket: 32 [ 772.551405][ T4264] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 772.583978][ T4264] usb 4-1: config 0 has no interface number 0 [ 772.653838][ T4264] usb 4-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 777 [ 772.665119][ T423] usb 3-1: Failed to submit usb control message: -110 [ 772.698022][ T423] usb 3-1: unable to send the bmi data to the device: -110 [ 772.787795][ T423] usb 3-1: unable to get target info from device [ 772.868229][ T423] usb 3-1: could not get target info (-110) [ 772.875034][ T423] usb 3-1: could not probe fw (-110) [ 772.980977][ T4264] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 773.893043][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.905838][ T4264] usb 4-1: Product: syz [ 773.910222][ T4264] usb 4-1: Manufacturer: syz [ 773.915687][ T4264] usb 4-1: SerialNumber: syz [ 773.921647][T10222] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 773.930565][ T4264] usb 4-1: config 0 descriptor?? [ 773.951379][T10240] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 773.968695][ T7] usb 3-1: USB disconnect, device number 14 [ 773.977151][ T4264] redrat3 4-1:0.83: Couldn't find all endpoints [ 775.080221][ T8057] usb 4-1: USB disconnect, device number 16 [ 775.228203][T10266] loop0: detected capacity change from 0 to 256 [ 776.046247][T10266] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 776.192148][T10278] __sock_release: fasync list not empty! [ 776.488663][T10282] capability: warning: `syz.0.1612' uses 32-bit capabilities (legacy support in use) [ 777.811154][T10281] loop4: detected capacity change from 0 to 16 [ 777.830713][T10281] erofs: (device loop4): mounted with root inode @ nid 36. [ 778.299745][T10292] loop3: detected capacity change from 0 to 16 [ 778.622306][T10292] erofs: (device loop3): mounted with root inode @ nid 36. [ 778.642366][T10292] attempt to access beyond end of device [ 778.642366][T10292] loop3: rw=524288, want=32, limit=16 [ 778.702870][T10292] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 778.719663][ T26] audit: type=1800 audit(1778557596.602:63): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1618" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 779.353043][T10301] loop4: detected capacity change from 0 to 128 [ 780.559490][T10301] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 780.575130][T10301] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 780.634698][T10297] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full [ 780.793336][T10322] __sock_release: fasync list not empty! [ 782.481352][T10333] loop2: detected capacity change from 0 to 131072 [ 782.537094][T10333] F2FS-fs (loop2): invalid crc value [ 783.434013][T10333] F2FS-fs (loop2): Found nat_bits in checkpoint [ 783.480398][T10333] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 783.544093][T10333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 786.561113][ T4264] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 787.053433][T10395] loop3: detected capacity change from 0 to 256 [ 787.237963][T10400] loop2: detected capacity change from 0 to 1024 [ 787.600992][ T4264] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 787.931377][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.966458][ T4264] usb 5-1: config 0 descriptor?? [ 787.975763][T10395] FAT-fs (loop3): Directory bread(block 64) failed [ 788.016493][T10395] FAT-fs (loop3): Directory bread(block 65) failed [ 788.027457][T10395] FAT-fs (loop3): Directory bread(block 66) failed [ 788.039123][T10395] FAT-fs (loop3): Directory bread(block 67) failed [ 788.185760][T10395] FAT-fs (loop3): Directory bread(block 68) failed [ 788.205963][T10395] FAT-fs (loop3): Directory bread(block 69) failed [ 788.248507][T10395] FAT-fs (loop3): Directory bread(block 70) failed [ 788.256608][T10395] FAT-fs (loop3): Directory bread(block 71) failed [ 788.273726][T10395] FAT-fs (loop3): Directory bread(block 72) failed [ 788.280426][T10395] FAT-fs (loop3): Directory bread(block 73) failed [ 788.682853][ T4264] ath6kl: Failed to submit usb control message: -71 [ 788.689631][ T4264] ath6kl: unable to send the bmi data to the device: -71 [ 788.697143][ T4264] ath6kl: Unable to send get target info: -71 [ 789.249279][T10424] loop2: detected capacity change from 0 to 64 [ 789.300458][T10426] loop4: detected capacity change from 0 to 512 [ 789.450935][T10424] hfs: unable to parse mount options [ 789.538516][T10426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 789.558564][T10426] System zones: 1-12 [ 789.576854][T10426] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1662: missing EA_INODE flag [ 789.633436][T10426] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1662: error while reading EA inode 12 err=-117 [ 789.655341][T10426] EXT4-fs (loop4): 1 orphan inode deleted [ 789.665997][T10426] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 789.685763][T10417] syz.2.1660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 790.665443][T10439] autofs4:pid:10439:autofs_fill_super: called with bogus options [ 796.227036][T10482] autofs4:pid:10482:autofs_fill_super: called with bogus options [ 800.075126][ T5107] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 800.378163][T10487] loop0: detected capacity change from 0 to 32768 [ 800.755636][T10504] binder: 10503:10504 unknown command 0 [ 800.764973][T10487] XFS (loop0): Mounting V5 Filesystem [ 800.817483][T10504] binder: 10503:10504 ioctl c0306201 2000000001c0 returned -22 [ 800.907254][T10487] XFS (loop0): log mount failed [ 801.117196][ T5107] usb 3-1: string descriptor 0 read error: -71 [ 801.124851][ T5107] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 801.141837][ T5107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.166813][ T5107] r8152-cfgselector 3-1: config 0 descriptor?? [ 801.281326][ T5107] r8152-cfgselector 3-1: can't set config #0, error -71 [ 801.851142][ T5107] r8152-cfgselector 3-1: Unknown version 0x0000 [ 801.938032][ T5107] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 802.070680][T10518] loop3: detected capacity change from 0 to 256 [ 802.546793][T10526] autofs4:pid:10526:autofs_fill_super: called with bogus options [ 803.046283][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 803.056407][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 804.768926][T10544] binder: BINDER_SET_CONTEXT_MGR already set [ 804.775204][T10544] binder: 10542:10544 ioctl 4018620d 200000004a80 returned -16 [ 806.601000][ T9156] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 807.543355][T10555] loop4: detected capacity change from 0 to 16 [ 807.561449][T10555] erofs: (device loop4): mounted with root inode @ nid 36. [ 807.571215][T10555] attempt to access beyond end of device [ 807.571215][T10555] loop4: rw=524288, want=32, limit=16 [ 807.585633][T10555] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 807.599578][ T26] audit: type=1800 audit(1778557625.482:64): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1698" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 808.061198][ T9156] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 808.114374][ T9156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.323890][ T9156] usb 2-1: config 0 has no interface number 0 [ 808.467166][ T9156] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 808.622125][ T9156] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 808.793108][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.804095][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.908803][ T9156] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 809.033978][ T9156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.225356][ T9156] usb 2-1: config 0 descriptor?? [ 809.461111][ T9156] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 809.550983][ T4422] usb 2-1: Failed to submit usb control message: -71 [ 809.559019][ T4422] usb 2-1: unable to send the bmi data to the device: -71 [ 810.423993][ T9156] usb 2-1: USB disconnect, device number 21 [ 810.457011][ T4422] usb 2-1: unable to get target info from device [ 810.464059][ T4422] usb 2-1: could not get target info (-71) [ 810.470111][ T4422] usb 2-1: could not probe fw (-71) [ 816.978659][T10610] loop2: detected capacity change from 0 to 128 [ 817.086897][T10610] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 818.247927][T10616] loop4: detected capacity change from 0 to 256 [ 818.260962][ T9078] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 818.424882][T10616] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 818.560923][ T9078] usb 1-1: Using ep0 maxpacket: 16 [ 818.701120][ T9078] usb 1-1: config 0 has no interfaces? [ 818.881972][ T9078] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 818.960627][ T9078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.099664][ T9078] usb 1-1: Product: syz [ 819.164570][ T9078] usb 1-1: Manufacturer: syz [ 819.247170][ T9078] usb 1-1: SerialNumber: syz [ 819.412271][ T9078] usb 1-1: config 0 descriptor?? [ 820.421487][ T9079] usb 1-1: USB disconnect, device number 25 [ 820.702835][T10627] device gre0 entered promiscuous mode [ 824.452990][T10667] netlink: 'syz.1.1723': attribute type 298 has an invalid length. [ 829.102890][T10688] loop0: detected capacity change from 0 to 32768 [ 829.271544][ T9078] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 829.332500][T10688] XFS (loop0): Mounting V5 Filesystem [ 829.436737][T10688] XFS (loop0): Ending clean mount [ 829.445183][T10688] XFS (loop0): Quotacheck needed: Please wait. [ 829.541193][ T9078] usb 4-1: Using ep0 maxpacket: 32 [ 829.591568][T10688] XFS (loop0): Quotacheck: Done. [ 829.691067][ T9078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.702894][ T9078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.712969][ T9078] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 829.744829][ T9078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.797195][ T9078] usb 4-1: config 0 descriptor?? [ 830.173449][ T9078] hub 4-1:0.0: USB hub found [ 830.391068][ T9078] hub 4-1:0.0: 1 port detected [ 830.504265][ T4188] XFS (loop0): Unmounting Filesystem [ 830.528082][T10704] loop1: detected capacity change from 0 to 8192 [ 830.591874][T10704] ntfs3: Unknown parameter '_«£'i0*-«5f™š˜l' [ 832.088560][ T9078] usb 4-1: USB disconnect, device number 17 [ 836.663478][ T9449] Bluetooth: hci5: command 0x1003 tx timeout [ 836.671822][T10733] Bluetooth: hci5: sending frame failed (-49) [ 837.329152][T10742] loop0: detected capacity change from 0 to 2048 [ 837.431104][T10742] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 838.321468][T10745] loop1: detected capacity change from 0 to 1024 [ 838.363723][T10742] attempt to access beyond end of device [ 838.363723][T10742] loop0: rw=524288, want=33554432, limit=2048 [ 838.376931][T10749] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 838.421527][T10745] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x0000000000000002,minixdf,,errors=continue. Quota mode: none. [ 838.568125][T10755] attempt to access beyond end of device [ 838.568125][T10755] loop0: rw=0, want=9437256, limit=2048 [ 838.579995][T10755] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 838.616765][T10754] attempt to access beyond end of device [ 838.616765][T10754] loop0: rw=0, want=9437256, limit=2048 [ 838.628370][T10754] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 838.711207][ T4377] Bluetooth: hci5: command 0x1001 tx timeout [ 838.717542][T10733] Bluetooth: hci5: sending frame failed (-49) [ 840.791212][ T8057] Bluetooth: hci5: command 0x1009 tx timeout [ 841.489432][T10769] loop4: detected capacity change from 0 to 128 [ 844.887463][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 846.834838][T10810] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1762'. [ 849.359282][T10816] netlink: 'syz.2.1764': attribute type 298 has an invalid length. [ 849.658276][T10826] autofs4:pid:10826:autofs_fill_super: called with bogus options [ 849.680714][T10826] vivid-001: disconnect [ 850.403039][T10824] vivid-001: reconnect [ 855.667035][T10854] loop4: detected capacity change from 0 to 512 [ 855.706597][T10854] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 855.726752][T10854] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 855.801915][T10854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c118, mo2=0002] [ 855.836732][T10854] System zones: 1-12 [ 855.913822][T10854] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 855.941237][T10854] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 856.652031][T10854] EXT4-fs (loop4): 1 truncate cleaned up [ 856.677568][T10854] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,debug,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 859.105593][T10873] loop1: detected capacity change from 0 to 32768 [ 860.079851][T10876] autofs4:pid:10876:autofs_fill_super: called with bogus options [ 860.109960][T10876] vivid-004: disconnect [ 860.125715][T10873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1781 (10873) [ 860.286243][T10874] vivid-004: reconnect [ 860.314173][T10873] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 860.323815][T10873] BTRFS info (device loop1): turning on sync discard [ 860.330706][T10873] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 860.340199][T10873] BTRFS info (device loop1): use zstd compression, level 3 [ 860.347558][T10873] BTRFS info (device loop1): turning on async discard [ 860.354356][T10873] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 860.365278][T10873] BTRFS info (device loop1): trying to use backup root at mount time [ 860.373727][T10873] BTRFS info (device loop1): enabling auto defrag [ 860.380962][T10873] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 860.392249][T10873] BTRFS info (device loop1): trying to use backup root at mount time [ 860.400593][T10873] BTRFS info (device loop1): using free space tree [ 860.407705][T10873] BTRFS info (device loop1): has skinny extents [ 862.451091][T10873] BTRFS error (device loop1): open_ctree failed: -12 [ 863.537522][ T7312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (7312) [ 869.601152][T10964] loop1: detected capacity change from 0 to 8 [ 869.837236][T10964] squashfs image failed sanity check [ 870.246217][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.254928][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.413302][T10973] loop4: detected capacity change from 0 to 2048 [ 878.843560][T11030] Bluetooth: hci0: invalid len left 7, exp >= 108 [ 881.514752][T11048] loop0: detected capacity change from 0 to 32768 [ 882.672902][T11048] XFS (loop0): Mounting V5 Filesystem [ 882.727947][T11061] netlink: 'syz.3.1822': attribute type 298 has an invalid length. [ 883.554382][T11048] XFS (loop0): Ending clean mount [ 883.569183][T11048] XFS (loop0): Quotacheck needed: Please wait. [ 883.637847][T11069] loop1: detected capacity change from 0 to 256 [ 883.739674][T11048] XFS (loop0): Quotacheck: Done. [ 883.858462][T11069] exfat: Deprecated parameter 'utf8' [ 883.905195][T11069] exfat: Deprecated parameter 'namecase' [ 884.064330][T11069] exfat: Deprecated parameter 'namecase' [ 884.142534][T11069] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 885.593287][T11083] loop4: detected capacity change from 0 to 128 [ 885.620527][ T4188] XFS (loop0): Unmounting Filesystem [ 892.653491][T11125] vivid-000: disconnect [ 892.660120][T11124] vivid-000: reconnect [ 897.127531][T11158] loop1: detected capacity change from 0 to 128 [ 901.539122][T11175] vivid-002: disconnect [ 901.592341][T11172] vivid-002: reconnect [ 905.013804][T11222] loop1: detected capacity change from 0 to 128 [ 907.923223][T11237] loop2: detected capacity change from 0 to 1024 [ 907.983553][T11237] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 915.093040][T11305] __sock_release: fasync list not empty! [ 920.000063][T11349] __sock_release: fasync list not empty! [ 920.598631][T11354] loop1: detected capacity change from 0 to 512 [ 920.648521][T11354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 920.667638][T11354] System zones: 1-12 [ 920.698355][T11354] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1903: missing EA_INODE flag [ 920.711888][T11354] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1903: error while reading EA inode 12 err=-117 [ 920.771776][T11354] EXT4-fs (loop1): 1 orphan inode deleted [ 920.823749][T11354] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 924.600003][T11400] __sock_release: fasync list not empty! [ 930.528589][T11446] __sock_release: fasync list not empty! [ 931.721736][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.728505][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.676455][T11461] loop4: detected capacity change from 0 to 128 [ 934.028648][T11466] autofs4:pid:11466:autofs_fill_super: called with bogus options [ 934.630983][T11470] loop3: detected capacity change from 0 to 256 [ 934.673084][T11470] exfat: Unknown parameter 'keep_last_dots' [ 935.018115][T11474] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 936.128767][T11480] autofs4:pid:11480:autofs_fill_super: called with bogus options [ 936.148579][T11480] vivid-002: disconnect [ 936.188459][T11478] loop0: detected capacity change from 0 to 32768 [ 937.417517][T11479] vivid-002: reconnect [ 937.431053][T11478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1939 (11478) [ 937.545444][T11478] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 937.554491][T11478] BTRFS info (device loop0): setting nodatacow, compression disabled [ 937.562837][T11478] BTRFS info (device loop0): force clearing of disk cache [ 937.569990][T11478] BTRFS info (device loop0): enabling ssd optimizations [ 937.577207][T11478] BTRFS info (device loop0): using spread ssd allocation scheme [ 937.585050][T11478] BTRFS info (device loop0): turning off barriers [ 937.591894][T11478] BTRFS info (device loop0): disabling free space tree [ 937.599698][T11478] BTRFS info (device loop0): not using ssd optimizations [ 937.607074][T11478] BTRFS info (device loop0): not using spread ssd allocation scheme [ 937.615714][T11478] BTRFS info (device loop0): has skinny extents [ 938.921235][T11520] __sock_release: fasync list not empty! [ 939.104594][T11521] loop2: detected capacity change from 0 to 16 [ 939.153723][T11478] BTRFS error (device loop0): open_ctree failed: -22 [ 939.192579][T11521] erofs: (device loop2): mounted with root inode @ nid 36. [ 939.235685][T11515] attempt to access beyond end of device [ 939.235685][T11515] loop2: rw=524288, want=32, limit=16 [ 939.303570][T11515] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -20 in[62, 4034] out[4096] [ 939.340656][ T26] audit: type=1800 audit(1778557757.212:65): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1945" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 939.570219][ T7312] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (7312) [ 939.967200][T11532] autofs4:pid:11532:autofs_fill_super: called with bogus options [ 939.984362][T11534] loop4: detected capacity change from 0 to 128 [ 940.278123][T11539] overlayfs: missing 'workdir' [ 942.871161][T11549] autofs4:pid:11549:autofs_fill_super: called with bogus options [ 942.923070][T11549] vivid-000: disconnect [ 942.930281][T11544] vivid-000: reconnect [ 944.944475][ T27] INFO: task kworker/0:7:4264 blocked for more than 144 seconds. [ 945.001680][ T27] Not tainted syzkaller #0 [ 945.127023][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 945.156115][T11564] __sock_release: fasync list not empty! [ 945.180426][ T27] task:kworker/0:7 state:D stack:22736 pid: 4264 ppid: 2 flags:0x00004000 [ 945.190466][ T27] Workqueue: usb_hub_wq hub_event [ 945.196337][ T27] Call Trace: [ 945.199647][ T27] [ 945.202669][ T27] __schedule+0x11ef/0x43c0 [ 945.207242][ T27] ? release_firmware_map_entry+0x190/0x190 [ 945.213727][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 945.218735][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 945.224051][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 945.229279][ T27] schedule+0x11b/0x1e0 [ 945.233901][ T27] schedule_timeout+0xbd/0x2d0 [ 945.238792][ T27] ? console_conditional_schedule+0x40/0x40 [ 945.270902][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 945.285438][ T27] ? lock_chain_count+0x20/0x20 [ 945.801951][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 945.879119][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 945.910011][ T27] do_wait_for_common+0x2a2/0x450 [ 945.957617][ T27] ? console_conditional_schedule+0x40/0x40 [ 945.993067][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 946.029118][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 946.045714][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 946.065699][ T27] ? kthread_data+0x4b/0xc0 [ 946.084559][ T27] wait_for_completion+0x48/0x60 [ 946.103401][ T27] flush_workqueue+0x664/0x13d0 [ 946.160030][ T27] ? rcu_work_rcufn+0x120/0x120 [ 946.165380][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 946.170468][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 946.175841][ T27] ? usb_kill_anchored_urbs+0x326/0x340 [ 946.182032][ T27] ath6kl_usb_power_off+0x34/0x40 [ 946.187281][ T27] ath6kl_core_init+0xac4/0x1090 [ 946.192400][ T27] ? lockdep_softirqs_off+0x430/0x430 [ 946.197822][ T27] ? ath6kl_core_rx_complete+0x70/0x70 [ 946.204361][ T27] ? memcpy+0x3c/0x60 [ 946.208468][ T27] ? ath6kl_core_create+0x7d6/0x980 [ 946.213837][ T27] ath6kl_usb_probe+0x1302/0x1410 [ 946.219177][ T27] usb_probe_interface+0x5c5/0xb20 [ 946.224733][ T27] ? usb_register_driver+0x3d0/0x3d0 [ 946.230231][ T27] really_probe+0x284/0xc80 [ 946.234826][ T27] __driver_probe_device+0x18c/0x330 [ 946.240233][ T27] driver_probe_device+0x4f/0x420 [ 946.245694][ T27] __device_attach_driver+0x2b0/0x500 [ 946.252527][ T27] ? deferred_probe_work_func+0x230/0x230 [ 946.258548][ T27] bus_for_each_drv+0x184/0x210 [ 946.263873][ T27] ? deferred_probe_work_func+0x230/0x230 [ 946.269629][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 946.275430][ T27] __device_attach+0x2a8/0x480 [ 946.280218][ T27] ? kobject_uevent_env+0x371/0x890 [ 946.285857][ T27] ? device_attach+0x20/0x20 [ 946.290483][ T27] ? kobject_uevent_env+0x371/0x890 [ 946.295756][ T27] bus_probe_device+0xbc/0x1e0 [ 946.301118][ T27] ? device_add+0x97c/0xfb0 [ 946.306325][ T27] device_add+0xa00/0xfb0 [ 946.310867][ T27] usb_set_configuration+0x1991/0x1fd0 [ 946.316570][ T27] usb_generic_driver_probe+0x89/0x150 [ 946.322562][ T27] usb_probe_device+0x139/0x270 [ 946.327637][ T27] ? usb_register_device_driver+0x230/0x230 [ 946.333795][ T27] really_probe+0x284/0xc80 [ 946.338599][ T27] __driver_probe_device+0x18c/0x330 [ 946.344381][ T27] driver_probe_device+0x4f/0x420 [ 946.349447][ T27] __device_attach_driver+0x2b0/0x500 [ 946.354940][ T27] ? deferred_probe_work_func+0x230/0x230 [ 946.362360][ T27] bus_for_each_drv+0x184/0x210 [ 946.367261][ T27] ? deferred_probe_work_func+0x230/0x230 [ 946.373074][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 946.379099][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 946.384848][ T27] __device_attach+0x2a8/0x480 [ 946.389844][ T27] ? device_attach+0x20/0x20 [ 946.394615][ T27] ? kobject_uevent_env+0x371/0x890 [ 946.400110][ T27] bus_probe_device+0xbc/0x1e0 [ 946.436740][ T27] ? device_add+0x97c/0xfb0 [ 946.442730][ T27] device_add+0xa00/0xfb0 [ 946.447134][ T27] usb_new_device+0xd65/0x1660 [ 946.458467][ T27] ? lock_chain_count+0x20/0x20 [ 946.464148][ T27] ? usb_disconnect+0x8a0/0x8a0 [ 946.469047][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 946.482592][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 946.487965][ T27] hub_event+0x2e4a/0x55e0 [ 946.504564][ T27] ? hub_post_resume+0x120/0x120 [ 946.524663][ T27] ? read_lock_is_recursive+0x10/0x10 [ 946.542997][ T27] ? __schedule+0x11f7/0x43c0 [ 946.553056][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 946.571515][ T27] process_one_work+0x85f/0x1010 [ 946.590993][ T27] ? worker_detach_from_pool+0x240/0x240 [ 946.606422][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 946.612890][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 946.618073][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 946.624106][ T27] ? wq_worker_running+0x97/0x170 [ 946.629378][ T27] worker_thread+0xaa6/0x1290 [ 946.634591][ T27] kthread+0x436/0x520 [ 946.638779][ T27] ? rcu_lock_release+0x20/0x20 [ 946.643947][ T27] ? kthread_blkcg+0xd0/0xd0 [ 946.648573][ T27] ret_from_fork+0x1f/0x30 [ 946.653306][ T27] [ 946.666655][ T27] INFO: task udevd:6908 blocked for more than 146 seconds. [ 946.674022][ T27] Not tainted syzkaller #0 [ 946.678991][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 946.688286][ T27] task:udevd state:D stack:23120 pid: 6908 ppid: 3560 flags:0x00004002 [ 946.697855][ T27] Call Trace: [ 946.702680][ T27] [ 946.705655][ T27] __schedule+0x11ef/0x43c0 [ 946.710255][ T27] ? rcu_lock_acquire+0x30/0x30 [ 946.717267][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 946.722862][ T27] ? release_firmware_map_entry+0x190/0x190 [ 946.728960][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 946.740327][ T27] ? __mutex_trylock_common+0x86/0x260 [ 946.745975][ T27] ? rcu_lock_release+0x20/0x20 [ 946.757244][ T27] schedule+0x11b/0x1e0 [ 946.761689][ T27] schedule_preempt_disabled+0xf/0x20 [ 946.767182][ T27] __mutex_lock_common+0xcfc/0x2400 [ 946.772949][ T27] ? uevent_show+0x17a/0x330 [ 946.777749][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 946.784108][ T27] mutex_lock_nested+0x17/0x20 [ 946.789264][ T27] uevent_show+0x17a/0x330 [ 946.794400][ T27] dev_attr_show+0x50/0xb0 [ 946.798963][ T27] ? device_get_ownership+0xa0/0xa0 [ 946.805065][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 946.810176][ T27] seq_read_iter+0x49b/0xd50 [ 946.820063][ T27] vfs_read+0x759/0xd60 [ 946.825038][ T27] ? kernel_read+0x1e0/0x1e0 [ 946.829931][ T27] ? __context_tracking_exit+0x4c/0x80 [ 946.842935][ T27] ? __fdget_pos+0x2c6/0x370 [ 946.848202][ T27] ksys_read+0x152/0x260 [ 946.857216][ T27] ? vfs_write+0xd60/0xd60 [ 946.864832][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 946.871611][ T27] do_syscall_64+0x4c/0xa0 [ 946.876179][ T27] ? clear_bhb_loop+0x30/0x80 [ 946.881048][ T27] ? clear_bhb_loop+0x30/0x80 [ 946.885973][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 946.893030][ T27] RIP: 0033:0x7fd12dd39407 [ 946.897544][ T27] RSP: 002b:00007ffefc125e00 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 946.906234][ T27] RAX: ffffffffffffffda RBX: 00007fd12dc4b880 RCX: 00007fd12dd39407 [ 946.914613][ T27] RDX: 0000000000001000 RSI: 000055b58e2cb4d0 RDI: 0000000000000008 [ 946.925290][ T27] RBP: 00007fd12de81ff0 R08: 0000000000000000 R09: 0000000000000000 [ 946.934606][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 946.943366][ T27] R13: 00007fd12de81ea0 R14: 0000000000000000 R15: 000055b58e2436d0 [ 946.952286][ T27] [ 946.955430][ T27] [ 946.955430][ T27] Showing all locks held in the system: [ 946.968086][ T27] 1 lock held by khungtaskd/27: [ 946.974201][ T27] #0: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 946.983805][ T27] 2 locks held by getty/3940: [ 946.988837][ T27] #0: ffff88802c62f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 946.998864][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 947.009254][ T27] 5 locks held by kworker/0:7/4264: [ 947.014517][ T27] #0: ffff88801bb84938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 947.025754][ T27] #1: ffffc9000320fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 947.040138][ T27] #2: ffff888147f55220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 947.050143][ T27] #3: ffff88802a3ad220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 947.059516][ T27] #4: ffff88802881f1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 947.069270][ T27] 2 locks held by kworker/u4:7/4345: [ 947.075545][ T27] 3 locks held by kworker/0:13/4519: [ 947.083028][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 947.093955][ T27] #1: ffffc900035ffd00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 947.103855][ T27] #2: ffffffff8c3235a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 947.115295][ T27] 4 locks held by udevd/6908: [ 947.120153][ T27] #0: ffff88805b4cf540 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 947.130329][ T27] #1: ffff88805fde3c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 947.140055][ T27] #2: ffff888060b320f0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 947.153063][ T27] #3: ffff88802a3ad220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 947.163417][ T27] 2 locks held by kworker/0:6/9068: [ 947.168744][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 947.179639][ T27] #1: ffffc9000345fd00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 947.191684][ T27] 3 locks held by kworker/0:15/9079: [ 947.197213][ T27] [ 947.199567][ T27] ============================================= [ 947.199567][ T27] [ 947.208883][ T27] NMI backtrace for cpu 1 [ 947.213355][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 947.220874][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.231151][ T27] Call Trace: [ 947.234622][ T27] [ 947.237749][ T27] dump_stack_lvl+0x188/0x250 [ 947.242461][ T27] ? show_regs_print_info+0x20/0x20 [ 947.247868][ T27] ? load_image+0x400/0x400 [ 947.252534][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 947.258141][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 947.263330][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 947.268388][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 947.274671][ T27] ? _printk+0xda/0x130 [ 947.278866][ T27] ? load_image+0x400/0x400 [ 947.283509][ T27] ? load_image+0x400/0x400 [ 947.288228][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 947.294960][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 947.301113][ T27] watchdog+0xe0f/0xe50 [ 947.305316][ T27] kthread+0x436/0x520 [ 947.309425][ T27] ? hungtask_pm_notify+0x40/0x40 [ 947.314486][ T27] ? kthread_blkcg+0xd0/0xd0 [ 947.319383][ T27] ret_from_fork+0x1f/0x30 [ 947.324000][ T27] [ 947.327692][ T27] Sending NMI from CPU 1 to CPUs 0: [ 947.333113][ C0] NMI backtrace for cpu 0 [ 947.333126][ C0] CPU: 0 PID: 423 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 947.333142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.333151][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 947.333174][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x26/0x770 [ 947.333196][ C0] Code: 00 00 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 44 24 60 <48> ba 00 00 00 00 00 fc ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44 [ 947.333208][ C0] RSP: 0018:ffffc900031ef2c0 EFLAGS: 00000086 [ 947.333221][ C0] RAX: fcc72596d9a2fe00 RBX: 0000000000000000 RCX: ffff88801f010000 [ 947.333233][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81494d76 [ 947.333242][ C0] RBP: ffffc900031ef380 R08: ffff88807d828153 R09: 1ffff1100fb0502a [ 947.333254][ C0] R10: dffffc0000000000 R11: ffffed100fb0502b R12: ffffffff892bce99 [ 947.333265][ C0] R13: ffffc900031ef6a0 R14: dffffc0000000000 R15: 1ffff9200063de74 [ 947.333276][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 947.333290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.333301][ C0] CR2: 000000110c37f80d CR3: 0000000023b07000 CR4: 00000000003506f0 [ 947.333323][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 947.333333][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 947.333342][ C0] Call Trace: [ 947.333348][ C0] [ 947.333355][ C0] ? lockdep_softirqs_on+0x303/0x580 [ 947.333374][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 947.333391][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 947.333407][ C0] ? cfg80211_bss_update+0x1c79/0x2250 [ 947.333423][ C0] trace_hardirqs_on+0x67/0x80 [ 947.333439][ C0] __local_bh_enable_ip+0x136/0x1c0 [ 947.333453][ C0] ? _local_bh_enable+0xa0/0xa0 [ 947.333467][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 947.333490][ C0] ? cfg80211_bss_update+0x1c79/0x2250 [ 947.333506][ C0] cfg80211_bss_update+0x1c79/0x2250 [ 947.333529][ C0] ? cfg80211_inform_bss_frame_data+0x6c0/0x1fc0 [ 947.333546][ C0] cfg80211_inform_bss_frame_data+0x89f/0x1fc0 [ 947.333568][ C0] ? verify_lock_unused+0x140/0x140 [ 947.333588][ C0] ? cfg80211_parse_mbssid_data+0x3160/0x3160 [ 947.333611][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 947.333632][ C0] ieee80211_bss_info_update+0x6be/0xa70 [ 947.333653][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 947.333673][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 947.333691][ C0] ieee80211_ibss_rx_queued_mgmt+0x1700/0x2ab0 [ 947.333717][ C0] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 947.333732][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 947.333747][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 947.333763][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 947.333778][ C0] ? _raw_spin_unlock+0x40/0x40 [ 947.333791][ C0] ? kcov_remote_start+0x6f/0x4a0 [ 947.333808][ C0] ? kcov_remote_start+0xea/0x4a0 [ 947.333823][ C0] ieee80211_iface_work+0x70e/0xc60 [ 947.333842][ C0] cfg80211_wiphy_work+0x221/0x260 [ 947.333861][ C0] process_one_work+0x85f/0x1010 [ 947.333882][ C0] ? worker_detach_from_pool+0x240/0x240 [ 947.333896][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 947.333914][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 947.333927][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 947.333942][ C0] ? wq_worker_running+0x97/0x170 [ 947.333957][ C0] worker_thread+0xaa6/0x1290 [ 947.333984][ C0] kthread+0x436/0x520 [ 947.333997][ C0] ? rcu_lock_release+0x20/0x20 [ 947.334010][ C0] ? kthread_blkcg+0xd0/0xd0 [ 947.334024][ C0] ret_from_fork+0x1f/0x30 [ 947.334046][ C0] [ 947.423015][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 947.710599][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 947.717832][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.728177][ T27] Call Trace: [ 947.731588][ T27] [ 947.734662][ T27] dump_stack_lvl+0x188/0x250 [ 947.739616][ T27] ? show_regs_print_info+0x20/0x20 [ 947.744887][ T27] ? load_image+0x400/0x400 [ 947.749426][ T27] panic+0x2e5/0x810 [ 947.753448][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 947.759132][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 947.763848][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 947.769490][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 947.775796][ T27] watchdog+0xe4e/0xe50 [ 947.780107][ T27] kthread+0x436/0x520 [ 947.784389][ T27] ? hungtask_pm_notify+0x40/0x40 [ 947.789597][ T27] ? kthread_blkcg+0xd0/0xd0 [ 947.794287][ T27] ret_from_fork+0x1f/0x30 [ 947.798994][ T27] [ 947.802644][ T27] Kernel Offset: disabled [ 947.807058][ T27] Rebooting in 86400 seconds..