last executing test programs: 1m38.528728145s ago: executing program 0 (id=80): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfef4, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m38.320110484s ago: executing program 0 (id=84): r0 = socket$inet6(0xa, 0x80002, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 1m38.194885357s ago: executing program 0 (id=86): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x76fc, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 1m36.899102507s ago: executing program 0 (id=90): syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f0000002f00)='./file0\x00', 0x400000, &(0x7f0000003040)={[{@noload}, {@abort}, {@data_err_ignore}, {@acl}, {@oldalloc}, {@inlinecrypt}]}, 0xfb, 0x467, &(0x7f0000003080)="$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") mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000002f40)) 1m36.327462763s ago: executing program 0 (id=92): rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m35.31733999s ago: executing program 0 (id=108): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$eJzs3M9vFFUcAPDvbLulgNiK+AMEqSKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM2KX7oy3dsoX9fJLdvrfzuu99Z+bNvJk3bQBdayh9SyIeiIg/ImIgy95eYCj7cfP6xYl/rl+cSKJSefvvpFruxvWLE0XR4ve2ZplKJc9valDvpfcixmdmps7l+ZH5Mx+OzJ2/8OL0mfFTU6emzo4dO3b40J6+o2NH2hJnGteNXZ/M7t55/N3Lb06cuPz+z0kpsrhjSRztMpSt3Yb2t7uyDttWk0560/f+PLf318UljfYEOqknItLNVa72/4Hoic3/LxuI1z/vaOOAdVWpVCotjsoLFeA+lkSnWwB0RnGiT69/i9ddGnpsCNdeyS6A0rhv5q9sSW+UssTe8pLr23YaiogTC7eupK9Yp/sQAAC1vk/HPy80Gv+V4tEs0Ze+PZjPoQxGxEMRsT0iHo6IHRHxSES17GMR8fgq6186Q1I//ildvePgViAd/72cz23dPv4rFUUGe/Lctmr85eTk9MzUwXydHIjyppPTydRoizp+eO33L5stq47/isH4wq0raf3FWDBvx9XeJTfoJsfnx9cSc61rn0Xs6m0Uf1KdF4h8Xm9nROy6wzqmn+ttuqx2/HuiYfwtNP/aFat8HfFstv0XYkn8haTp/OToS0fHjoz0x8zUwZFir6j3y2+X3mpW/5rib4N0+2+pxl9cC9bFP5j0R8ydv3C6Ol87t/o6Lv35RdNrmuXjv23/P74t3//7kneqH/TlCz4en58/NxrRl7xR//nY4rcV+aJ8Gv+BfY37//ZYXBNPRMTuiNgTEU+mF4V525+KiKcjYl+L+H969ZkPVh9/47vy5Rb13Ik0/smGx7+a7R+123/1iZ7TP363fPz9EdFs+x+upg7kn6zk+LfSBq5l3QEAAMC9InsGPikNL6aT4eHsGf4dsaU0Mzs3//zJ2Y/OTmbPyg9GuVTc6RqouR86mt8bLvJjS/KH8vvGX/VsruaHJ2ZnJjsdPHS5rXX9v1RK+3/qr55Otw5Yd22YRwPuUfo/dC/9H7pTsmz/b/cjR8BG4vwP3atR//+0aenhb9e1McBd5fwP3WsF/X8h+9F8VADcm5z/oXvp/9CVmv5tfGlNf/Lf1sSeb7K2tirzb/4vVDZKm+//RJQ2RDPu/0Rv639msT8ilvmecn1frgxkfSr9ZFPD3+roYQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/gsAAP//90bgLQ==") r0 = open(&(0x7f00000007c0)='.\x00', 0x80000, 0x103) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 1m34.695957645s ago: executing program 32 (id=108): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") r0 = open(&(0x7f00000007c0)='.\x00', 0x80000, 0x103) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 44.234112769s ago: executing program 5 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='myd', 0x3) 44.179398725s ago: executing program 5 (id=692): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x90}}, 0x20000000) 43.941688429s ago: executing program 5 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 43.538389112s ago: executing program 5 (id=697): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2008802, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=macgreek,errors=remount-ro,iocharset=macturkish,keep_last_dots,iocharset=macinuit,fmask=00000000000000000001774,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303430303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c66756e633d504154485f434845434b2c00d68f80963e992f7a790f2a9437a29f8b4d470ae365120a367f816615bab1a73bcb0b34104466f040377b3f4ab5a9da23044717ccad042e8ceab3e5ee0a02b86bf4f8cd552aad29ee2912615d138189a059cae1a9f0c650f76fbda44cada54fb491e9ccd6856997ae44d04073d95a4780d15efe4ceeca4c12c9682120298580b5e8c054c336f3b7d648880a653348c06c67adacbad7c26ba9e6cb5357"], 0x7, 0x1532, &(0x7f0000004d00)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkulSRJktwSkiY5kpAYcksakpBchuQyhOQyMWnc7/dLQpI0SZJbbsn6f6bMX506n3PO73SO3+/M8/189sd69trP2s+7n73f/b7vjPm2y9BajWtXb0hE8C/BX/5JBIBYABgIANcAQAAA5ePKx2XO55SY+K89CftzPZxypStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebpxe8lm/Z98bX/7Mz/v7/L5JReuyXa0tf3xUg5h9N4f7/34f/Qi73/79W8I88iPufvXH/s6vYK10A+1+AP//ZQY6/OcP9z964/4xlZ7++FhwLV/569H/6BpHs/TOQK/3+Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWPZz1lykAyBpf6boYY4wxxhhjjDH25/E5rnQFjDHGGGOMMcYY+/dDECBBQQAxkANiISfkAgEQkzV/LcTBdZAXrod8kB8KQEGIh0JQGDQYsEAQQhEoClG4AYrBjVAcSkBJKAUOSkMZuAnKws1QDm6B8nArVIDboCJUgspQBW6HqnAHVIM7oTrcBTWgJtSC2nA33AP3Qh24D+rC/VAPHoD68CA0gIegITwMjeARaAyPQhN4DJpCM2gOLaDl/yj/RegBL0FP6AWJ0Bv6wMvQF/pBfxgAA+EVGASvwmB4DZJgCAyF12EYvAHD4U0YASNhFLwFo+FtGANjYRyMh2SYABPhHZgE78JkmAJTYRqkwHSYAe/BTJgFs+F9mAMfwFyYB/NhAaTCh7AQFkEafASL4WNIhyWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF22AE74RPYBZ/CbtgDe+Ez2Aef/5P5Z/4qvysCAgoUqFBhDMZgLMZiLsyFuTE35sE8GMEIxmEc5sW8mA/zYQEsgPEYj4WxMBo0SEhYBItgFKNYDIthcSyOJbEkOnRYBstgWbwZy2E5LI/lsQJWwIpYCSthFayCVbEqVsNqWB2rYw2sgbWwFt6Nd2NvrIN1sC7WxXpYL+vyFDbEhtgIG2FjbIxNsAk2xabYHJtjS2yJrbAVtsbW2BbbYjtsh+2xPSZgAnbADtgRO2In7ISdsTN2wS7YFbtht4wXcwC+hC9hL6whemMf7IN9MSlHfxyAA/AVHISv4qv4GibhEByKr+Pr+AYOx9M4AkfiKByFVcXbOAbHIonxmIzJOBEn4iSchJNxCk7BaZiC03EGzsCZOAtn4fs4Bz/AD3AezsMFmIqpuBAXYRqm4WI8g+m4BJfiMlyOK3A5rsLVuArX4jpcixtwA27CTbgFt+A23IY7cAd+ggoAP8U9uAeTcB/uw/24Hw/gATyIBzEDM/AQHsLDeBiP4BE8ikfxGB7HE3gcT+EpPI1n8CyexfN4Hi/g8/FfN/qkxJokEJmUUCJGxIhYEStyiVwit8gt8og8IiIiIk7Eibwir8gn8okCooCIF/GisCgsjDCCRJi5pxBRERXFRDFRXBQXJUVJ4YQTZUQZUVaUFeVEOVFe3CoqiNtERVFJtHFVRBVRVbR11cSdorqoLmqImqKWqC1qi3vEPaKOqCPqirqinqgn6osHRQPRG/vjwyKzM43FEGwihmJT0UzIS3uoVmI4thZtRFvxpBiJI7C9aOUSxDOigxiDHcVfxFh8TnQW47GLeEF0Fd1Ed/Gi6CFau56il5iMvUUfMQ37in6ivxggZmJN8T7OyVlLvCaSxBAxVLwuFuAbYrh4U4wQI8Uo8ZYYLd4WY8RYMU6MF8ligpgo3hGTxLtispgipoppIkVMFzPEe2KmmCVmi/fFHPGBmCvmifligUgVH4qFYpFIEx+JxeJjkS6WiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIneITsUt8KnaLPWKv+EzsE5+L/eILcUB8KQ6Kr0SG+FocEt+Iw+JbcUR8J46K78UxcVycECfFKfGDOC3OiLPinDgvfhQXxE/iovACJEohpVQykDEyh4yVOWUueZXMLYOs/b+Mk9fJvPJ6mU/mlwVkQRkvC8nCUksjrSQZyiKyqIzKG2QxeaMsLkvIkrKUdLK0LCNvkmXlzbKcvEWWl7fKCvI2WVFWkpVlFXm7rCrvkBD55TlqyJqylqwt75aJcK+sI++TdeX9sp58QNaXD8oG8iHZUD4sG8lHZGP5qGwiH5NNZTPZXLaQLeXjspV8QraWbWRb+aRsJ5+S7eXTMkE+IztIf+kt8pzsLJ+XXeQLsqvsJrvLn+RF6WVP2UtCb5B95Muyr+wn+8sBcqB8RQ6Sr8rB8jWZJIfIofJ1OUy+IYfLN+UIOVKOkm/J0fJtOUaOlePkeJksJ8iJ8h05Sb4rJ8spcqqcJlPkdNn/0kqzpfy7+e/8Qf7gn599k9wst8itcpvcLnfInfITuUvukrvlbrlX7pX75D65X+6XB+QBeVAelBkyQx6Sh+RheVgekUfkUXlUHpPH5Tl5Up6SP8jT8ow8I8/J8/K8vHDpNQCFSiiplApUjMqhYlVOlUtdpXKrq1UedY2KqGtVnLpO5VXXq3wqvyqgCqp4VUgVVloZZRWpUBVRRVVU3YCX3jCqpCqlnCqtyqib/pl8VUzdqIqrEr/Jz6ov8W/U11K1VK1UK9VatVZtVVvVTrVT7VV7laASVAfVQXVUHVUn1Ul1Vp1VF9VFdVVdVXfVXfVQPVRP1VMlqkTVR72s+qp+qr8aoAaqV0TmNgxWg1WSSlJD1VA1TA1Tw9VwNUKNUKPUKDVajVZj1Bg1To1TySpZTVQT1SQ1SU1Wk9VUNVWlqBQ1Q81QM9VMNVvNVnPUHDVXzVXz1XyVqlLVQrVQpak0tVgtVulqiVqilqllaoVaoVapVWqNWqPWqXVqg9qg0tVmtVltVVvVdrVd7VQ71S61S2S9zvvUPrVf7VcH1AF1UB1UGSpDHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx87AvEIEIVKCCmCAmiA1ig1xBriB3kDvIE+QJIkEkiAvigrzB9UG+IH9QICgYxAeFgsKBDkxgg6xiosENQbHgxqB4UCIoGZQKXFA6KBPcFJQNbg7KBbcE5YNbgwrBbUHFoFJQOagS3B5UDe4IqgV3BtWDu4IaQc2gVlA7uDu4J7g3qBPcF9QN7g/qBQ8E9YMHgwbBQ0HD4OGgUfBI0Dh4NGgSPBY0DZoFzYMWQcs/dX3vT+d/wvXUvXSi7q376Jd1X91P99cD9ED9ih6kX9WD9Ws6SQ/RQ/Xreph+Qw/Xb+oReqQepd/So/Xbeoweq8fp8TpZT9AT9Tt6kn5XT9ZT9FQ9Tafo6XqGfk/P1LP0bP2+nqM/0HP1PD1fL9Cp+kO9UC/SafojvVh/rNP1Er1UL9PL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Ra9VW/T2/UOvVN/onfpT/VuvUfv1Z/pffpzvV9/oQ/oL/VB/ZXO0F/rQ/obfVh/q4/o7/RR/b0+po/rE/qkPqV/0Kf1GX1Wn9Pn9Y/6gv5JX9Q+8+A+8+vdKKNMjIkxsSbW5DK5TG6T2+QxeUzEREyciTN5TV6Tz+QzBUwBE2/iTWFT2GQiQ6aIKWKiJmqKmWKmuCluSpqSxhlnypgypqwpa8qZcqa8KW8qmAqmoqloKpvK5nZzu7nD3GHuNHeau8xdpqapaWqb51IB7jF1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1Nc9PStDStTCvT2rQ2bU1b0860M+1Ne5NgEkwH08F0NB1NJ9PJdDadTRfTxXQ1XU130930MD1MT9PTJJpE08f0MX1NX9Pf9DcDzUAzyAwyg81gk2SSzFAz1Awzw8xwM9yMMCPNqMwDVfO2GWPGmnFmvEk2yWaimWgmmUlmsplsppqpJsWkmBlmhplpZprZZraZY+aYuWaumW/mm1STahaahSbNpJnFZrFJN+lmqVlqlpvlZqVZaVab1WatWWvWw3qz0Ww0m81ms9VsNdvNdrPT7DS7zC6z2+w2e81es8/sM/vNfnPAHDAHzUGTYTLMIXPIHDaHzRFzxBw1R80xc8ycMCfMKXPKnDanzVlz1pw3+S99X3oTa3PaXPYqm9tebfPYa+xfxwVsQRtvC9nCVtt8Nv9vYmOtLW5L2JK2lHW2tC1jb/pdXNFWspVtFXu7rWrvsNV+F99j77V17H22rr3f1rZ3/yauZx+w9e2jtgEigG1mG9kWtrF91Daxj9mmtpltblvYdvYp294+bRPsM7aDffZ38UK7yK62a+xau87utnvsWXvOHrbf2vP2R9vT9rID7St2kH3VDrav2SQ75HfxKPuWHW3ftmPsWDvOjv9dPNVOsyl2up1h37Mz7azfxan2QzvHptm5dp6dbxf8HGfWlGY/sovtxzbdBrDULrPL7Qq70q76/7UusxvsRrvJ7rKf2q12m91ud9idWQfCdo/daz+z++zn9pD9xh6wX9qD9ojNsF//HGdu3xH7nT1qv7fH7HF7wp60p+wPKis7c9tP2p/sRestEBKQJEUBxVAOiqWclIuuotx0NeWhayhC11IcXUd56XrKR/mpABWkeCpEhUmTIUtEIRWhohSlGyirvJJUihyVpjJ0E5Wlm6kc3ULl6VaqQLdRRapElakK3U5V6Q6qRndSdbqLalBNqkW16W66h+6lOnQf1aX7qR49QPXpQWpAD1FDepga0SPUmB6lJvQYNaVm1JxaUEt6nFrRE9Sa2lBbepLa0VPUnp6mBHqGOtCz1JH+Qp3oOepMz1MXeoG6UjfqTi9SD3qJelIvSqTe1Idepr7Uj/rTABpIr9AgepUG02uURENoKL1Ow+gNGk5v0ggaSaPoLRpNb9MYGkvjaDwl0wSaSO/QJHqXJtMUmkrTKIWm0wx6j2bSLJpN79Mc+oDm0jyaTwsolT6khbSI0ugjWkwfUzotoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO2kmf0C76lHbTHtpLn9E++pz20xd0gL6kg/QVZdDXdIi+ocP0LR2h73wv+p6O0XE6QSfpFP1Ap+kMnaVzdJ5+pAv0E10kTxBiKEIZqjAIY8IcYWyYM8wVXhXmDq8O84TXhJHw2jAuvC7MG14f5gvzhwXCgmF8WCgsHOrQhDakMAyLhEXDaHhDWCy8MSwelghLhqVCF5YOy4Q3hWXDm8Ny4S1h+fDWsEJ4W1gxrBQ+en+V8PawanhHWC28M6we3hXWCGuGtcLa4d3hPeG9YZ3wvrBueH9YLnwgrB8+GDYIHwobhg+HjcJHwsbho2GT8LGwadgsbB62CFuGj4etwifC1mGbsG14VdgufCpsHz4dJoTPhB3CZ3+ef2BR1vyTv5tPDHuHfcKXw5dD7++T86MLoqnRD6MLo4uiadGPooujH0fTo0uiS6PLosujK6Iro6uiq6Nromuj66LroxuiG6Obot7XzgEOnXDSKRe4GJfDxbqcLpe7yuV2V7s87hoXcde6OHedy+uud/lcflfAFXTxrpAr7LQzzjpyoSviirqou8EVcze64q6EK+lKOedKuzKuhWvpWrpW7gnX2rVxbd2T7kn3lHvKPe2eds+4Du5Z19H9xXVyz7nO7nn3vHvBdXXdXHf3ouvhJuT55TOZ6Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJckhvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdsluopvoJrlJbrKb7Ka6qS7FpbgZboab6Wa6qrN+eZa5bq6b7+a7VJfqFrrMY8Y0t9gtduku3S11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XQ73S63y+321/yyqNvn9rv97oA74A66r1yG+9odct+4w+5bd8R95466790xd9ydcCfdKfeDO+3OuLPunDvvfnQX3E/uovMuOTIhMjHyTmRS5N3I5MiUyNTItEhKZHpkRuS9yMzIrMjsyPuROZEPInMj8yLzIwsiqZEPIwsjiyJpkY8iiyMfR9IjSyJLI8siyyMrIt4X2hr6Ir6oj/obfDF/oy/uS/iSvpR3vrQv42/yZf3Nvpy/xZf3t/oK/jZf0Vfylf1jvqlv5pv7Fr6lf9y38k/41r6Nb+uf9O38U769f9on+Gd8B/+s7+j/4jv553xn/7zv4l/wXX03392/6Hv4l3xP38sn+t6+j3/Z9/X9fH8/wA/0r/hB/lU/2L/mk/wQP9S/7of5N/xw/6Yf4Uf6UTFv+dFZp8gw3if7CX6if8dP8u/6yX6Kn+qn+RQ/3c/w7/mZfpaf7d/3c/wHfq6f5+f7BT7Vf+gX+kU+zX/kF/uPfbpfknXR2K/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2v8Pv9J/4Xf5Tv9vv8Xv9Z36f/9zv91/4A/5Lf9B/5TP81/6Q/8Yf9t/6I/47f9R/74/54/6EP+lP+R/8aX/Gn/Xn/Hn/o7/gf/IX+f+sMcYYY4z9QyZcHorfzvxyOb/3H+SIXz24DwBcva1gxq/nM48o1+f7ZdxPxLeLAMAzvbo8nHWrUSMxMfHSY9MlBEXnAWT9JCjTz796cCleAm3hKUiANlD2D+vvJ7qdp7+zfvRWgFy/yomFy/Hl9b8AwMQ/WP/xJ0ctrBCejfvt+vDr9ecBFC96OScnXI6XQNufr6+0gXJ/o/78rf5O/Tm/TAZo/auc3HA5vlx/GXgCnoWE3zySMcYYY4wxxhj7RT9RuVPW+WfWb3z+0fl5vLqckwMux3/v/JwxxhhjjDHGGGNX3nPduj/9eEJCm07//KDa/yjrHx40gX/Xyjz4w4H3AFn3KAD4FxcEyBzIf2PNJ733v7lny3/khUq69NH566nl53wA/zta+WcMrvCOiTHGGGOMMfanu3zQ/9v71ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4b+E39O7EpvI2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMXal/b8AAAD//4Tz/qI=") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 43.046236689s ago: executing program 5 (id=703): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x100, 0x7fc0, 0x1b1f}, 'syz1\x00', 0x3f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 42.567672179s ago: executing program 5 (id=716): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000007c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYBLOB="9d8e71f74affcf6eef907609c35d9a6f2e197aa4d3a9094d0bf2720451dea8d63d8266ceb218f463a184a963930274a7007579b0d85afd1b254400e3e5710a4081e092a1d8cff382842fdde4b2bc7f3235087d2162556b12d374f8d2f6af1f89ddb8f1546ed6ab44b2aaefe5a1370ac610a61b6f852de103f1a296d9b55a5106c8297f87cc5d2d9a33f4e43b9597f76167723db142885f6b4b1921b1822a6be6041f2f09ccb00f7efc89271d26a190c4ff834005c5ca19b5f57572c6e7057e9aa63dc4298133f1a0086762b15b09db", @ANYRESHEX, @ANYRES8, @ANYRESOCT=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX], 0x1, 0x29e, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 42.123446585s ago: executing program 33 (id=716): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000007c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYBLOB="9d8e71f74affcf6eef907609c35d9a6f2e197aa4d3a9094d0bf2720451dea8d63d8266ceb218f463a184a963930274a7007579b0d85afd1b254400e3e5710a4081e092a1d8cff382842fdde4b2bc7f3235087d2162556b12d374f8d2f6af1f89ddb8f1546ed6ab44b2aaefe5a1370ac610a61b6f852de103f1a296d9b55a5106c8297f87cc5d2d9a33f4e43b9597f76167723db142885f6b4b1921b1822a6be6041f2f09ccb00f7efc89271d26a190c4ff834005c5ca19b5f57572c6e7057e9aa63dc4298133f1a0086762b15b09db", @ANYRESHEX, @ANYRES8, @ANYRESOCT=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX], 0x1, 0x29e, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 2.765368866s ago: executing program 7 (id=1223): syz_mount_image$ext4(&(0x7f00000028c0)='ext4\x00', &(0x7f0000002900)='./bus\x00', 0x400e, &(0x7f0000002940)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f00000029c0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000002e40)={0xd2f0, 0x2000, 0x3, 0xadea}) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./bus\x00') 2.437498544s ago: executing program 3 (id=1230): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="00b353014e617992f2a4279c89e5", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.359996609s ago: executing program 1 (id=1231): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x800, 0x0, 0x88, 'crypt\x00', {'aes-cbc-benbi', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '8'}, ' 0'}}]}) 2.328877205s ago: executing program 7 (id=1234): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000cc0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000d00)={&(0x7f0000000d40)=[{0x4, 0x2000, 0x1c, &(0x7f0000000d80)="35153533d48e4afff3324036352d5cec75314d3453621514b5ac6d68"}], 0x1}) 1.973335259s ago: executing program 6 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000720a00ff000000007900400000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x51) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004a0001002bbd7000fddbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) 1.905803363s ago: executing program 3 (id=1241): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB="757466382c73686f776173736f632c696f636861727365743d69736f383835392d322c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c63727566742c6d61703d6f66662c6e6f726f636b2c6d61703d61636f726e2c6d61703d6f66662c636865636b3d72656c617865642c6d61703d6f66662c696f636861727365743d64656661756c742c6d6f64653d3078303030303030303030303030303166662c00122b283f78031c611daf7f0bf36a5c73e646912be408e7a81c99d07535d0fafeda084c3f6f8a0495c3d0ab05005e15a482afaff7a92f6c342f7316073712"], 0x4, 0xa07, &(0x7f0000001f80)="$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") shmctl$IPC_RMID(0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 1.823172697s ago: executing program 6 (id=1243): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.816404403s ago: executing program 1 (id=1244): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x49, 0x0, &(0x7f0000001000)="ce090000009a697f65360c5686dd", 0x0, 0x5dce, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.641683555s ago: executing program 6 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004d00)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x4008, 0x80000002) 1.575715962s ago: executing program 3 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f0000000040)="007f1f000000bb44bff5cc105117", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.519463259s ago: executing program 6 (id=1249): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xb}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="35ab2788d003", @random="ff10c0832c01", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010100, @broadcast=0xe0000001}, {0x4e22, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x1, 0x0, @void}}}}}}}, 0x0) 1.452567056s ago: executing program 2 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x40, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x0, 0x3a7]}}]}]}]}, 0x40}}, 0x0) 1.325986324s ago: executing program 1 (id=1251): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x8aa, 0x66d5, 0x80000002, 0x0, 0x80, "00000000000000000000abfdc3c100", 0x8, 0x8}) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000200)="976ac3f89a8a32b59a42124e66305108dc70c6169d67b1b1d80a64d8c21f623e0b56614b29c2f23dd04e7bd61fa3559243ba0174a3e5da70a0ba61698c1231acc0a1c784aa50a2a415141d674a3449ca911d978f4effe6a7014c806f18960f7575a93ee5a8bf6155619b13acab2922f815c7f7b4379634cc66c5b7cb5520fae18d5138c8d1db771bbcad30475e27bdd030685e5302d6204198dcfdb090020d0d", 0xa0}], 0x1) 1.222179293s ago: executing program 3 (id=1252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x300, 0x1, 0x2, 0x2, 0x6, 0xb}, 0x20) 1.210964911s ago: executing program 2 (id=1253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 1.152802484s ago: executing program 1 (id=1254): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0x7, 0x4) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.090596289s ago: executing program 6 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='sub:', 0x4) 1.032087152s ago: executing program 4 (id=1256): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001540)={&(0x7f0000000540)=[0x0, 0xfffff00e, 0x40, 0x3, 0x8, 0x5, 0xf, 0x6, 0x8, 0x7, 0x1, 0x7, 0x5, 0x3, 0xb6c, 0x5, 0xffff1f9e, 0x8000, 0x401, 0xffff9664, 0x2, 0x1, 0xfffffffb, 0xdc1a, 0xc, 0x9, 0xffffff43, 0xa, 0x7f, 0x101, 0x0, 0xf, 0x1, 0x8, 0xffffffff, 0x6, 0x1, 0xffff, 0x9, 0xdf8b, 0x1f, 0x9, 0x1d3e, 0x0, 0x8, 0x9, 0xfff, 0x2, 0xa3, 0x1, 0xf, 0xaa, 0x1, 0x6, 0xfffffffc, 0x1, 0x1, 0x1, 0x6, 0x394c, 0x2, 0x62ec, 0x6, 0x0, 0x28000000, 0x7fffffff, 0xfffffffa, 0xff, 0x9, 0x7, 0x200, 0x7, 0x7, 0xfd, 0x9, 0x0, 0x7ff, 0x4, 0x5, 0xfffffff9, 0x5, 0x819f, 0x9, 0xfffff289, 0x2, 0x3, 0x5, 0x7, 0x8, 0x7fff, 0xff, 0x0, 0x80000001, 0x80000, 0x58d, 0x8, 0x5, 0x1, 0x1, 0x11, 0x3, 0x1ff, 0x10000, 0x10001, 0x7, 0x4, 0x7, 0x0, 0x1ca, 0xf, 0xffff0001, 0x9, 0x6, 0x8, 0x8001, 0xb9b0, 0x0, 0x81, 0x0, 0x8001, 0x66c042f8, 0x3, 0x80000001, 0x1, 0x2, 0xc, 0x3, 0x400, 0x10001, 0x101, 0x3, 0x2, 0x2, 0xfffff04f, 0x9, 0x1, 0x4, 0x2, 0x7, 0xf5d, 0x1, 0x3, 0x400, 0x761, 0x3, 0x4, 0xf, 0x7, 0x1, 0x9, 0x3ff, 0x3, 0x4, 0xe7b, 0x80000001, 0x7fff, 0x2, 0x8, 0x4, 0x8df4, 0x4, 0x699ded4, 0x6, 0x7, 0x0, 0x9, 0x10, 0x5, 0x80, 0x8001, 0x5, 0x9, 0x6, 0x81, 0x3, 0xffffff68, 0x0, 0x6, 0x9, 0x200, 0x9, 0xfffffff8, 0x0, 0x6, 0x7, 0x7, 0x0, 0x401, 0x9, 0x8, 0x1, 0x1, 0xe, 0x8, 0x9, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x2, 0x7, 0xfffffff7, 0xffffffff, 0x0, 0x5, 0x10000, 0x351, 0x1, 0x2, 0x8, 0x0, 0x4, 0x6b69, 0x3, 0x9, 0x5b, 0x8, 0xa53, 0x4, 0x2c00, 0x9, 0xffff, 0x4, 0xffff96f1, 0x7f, 0x7, 0xffffffff, 0x7, 0x0, 0x80000001, 0x4, 0x4214, 0x0, 0x4, 0x7, 0x9, 0x3, 0x0, 0x1, 0x5, 0x2, 0xf, 0x7, 0xda20, 0x2, 0x9, 0x0, 0x8000, 0xffff, 0x0, 0x8001, 0x1, 0x2, 0xbc, 0x7, 0xc9c1, 0xc, 0x1, 0x6, 0x4, 0x5, 0x0, 0x4, 0x1, 0x5, 0x0, 0x7fff, 0x0, 0x4, 0x2, 0x10001, 0x624, 0x1, 0x992, 0x8000, 0x45, 0x5, 0x5, 0x7, 0xff, 0x5, 0x3ff, 0x7, 0x200, 0xb1da, 0x100, 0x3, 0x4, 0x2, 0x1, 0x6, 0x100, 0xd2000000, 0x3c, 0x9, 0x5, 0x7, 0x0, 0x0, 0x5, 0x7, 0x587a, 0x10001, 0x5bd, 0x7382, 0x7, 0x0, 0xfffffffb, 0x4, 0x1000, 0xdb, 0x9, 0x4, 0xfff, 0x5, 0x2, 0x5, 0x51, 0x9, 0x1, 0x6, 0x6, 0x6, 0xff, 0x6, 0x800, 0x9, 0x3, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x2074, 0x3, 0xfff, 0x3, 0x9, 0x9, 0x2, 0x9, 0xffffffff, 0x0, 0x1, 0x0, 0x100, 0x296, 0x0, 0x77c, 0xffffffff, 0x2, 0x10, 0x2, 0x58, 0x5, 0x5, 0x1, 0x8, 0xfffffffe, 0x2, 0x6, 0x2, 0x7ff, 0x12000000, 0xffffffff, 0x0, 0x5, 0x1234, 0x6, 0x6, 0x8, 0x4, 0x9cd, 0x2000000, 0x8001, 0x7f, 0x4, 0xc, 0xffff, 0x5, 0x80, 0x3, 0x38d1, 0x3, 0x6, 0xb0, 0x4, 0x10000000, 0x9f, 0x60a6, 0xbfb, 0x6, 0x9, 0x1, 0x401, 0x7, 0x73, 0x6, 0x5, 0x80000001, 0x3, 0x8, 0xd5, 0x9, 0x7f, 0x8, 0x1, 0x9, 0x4, 0x3, 0x5, 0x0, 0x6, 0x8, 0x2, 0x2, 0x697, 0xc3, 0x68b, 0xff, 0x0, 0x7, 0x0, 0xffff, 0x2, 0x3, 0x2, 0xf72, 0x4, 0x200, 0x10, 0x7ff, 0x3, 0x1ff, 0x6, 0x6, 0x5, 0x2a6, 0x4, 0xffff4339, 0x4, 0xfffffffc, 0x7fff, 0x6, 0x80, 0x5, 0x6, 0xfffffffc, 0x6, 0x5, 0x4, 0x8, 0x1, 0x7f, 0x4, 0x5, 0xaa97, 0xfffffff9, 0x3, 0x8, 0x7, 0xcd67, 0xff, 0x100, 0x1, 0x4, 0x6, 0x2786, 0x40000000, 0x401, 0x8, 0x3286, 0x4, 0x155d, 0x5, 0x3, 0x9, 0x10, 0x1bc0, 0xf, 0x4, 0x3, 0x66465bc0, 0x5, 0x3ff, 0x6, 0x69, 0x3, 0x0, 0x2, 0x2e68, 0x49e9, 0x4, 0xe3a, 0x2, 0x100, 0x9, 0xbd, 0x5, 0x2, 0x13d0, 0x200, 0x8, 0x10, 0x400, 0x7, 0x10, 0x8001, 0x6, 0x7, 0x0, 0x1, 0x2, 0x0, 0x3, 0xf, 0x9, 0x2, 0x6, 0x1, 0x8, 0x1, 0x4, 0x8, 0xe0, 0x80000000, 0xf0ef, 0x80000000, 0x0, 0x3, 0x6, 0x8000, 0x3ff, 0xffff7fff, 0x5, 0x7, 0xc7, 0x8, 0x0, 0x9, 0xc3, 0x81, 0x5, 0x8, 0x0, 0x7, 0x7, 0x0, 0x1, 0x4, 0x6, 0x5, 0x3, 0xfffffffd, 0x8, 0x6, 0x4, 0x3, 0x9, 0x5, 0x0, 0x4, 0x61b048b0, 0x6, 0x9, 0x9, 0x1, 0x43cd, 0x6, 0x8, 0x80000000, 0xa8c, 0x5, 0x5, 0xffffffff, 0x7, 0x545, 0x62, 0xfc, 0x6, 0x81, 0x401, 0x2, 0xa, 0x2, 0x6, 0x8d, 0x50ac, 0x6b, 0x800, 0x2, 0x7fffffff, 0xe, 0xfffffffc, 0x8, 0x60e19ceb, 0xff, 0x4, 0xe, 0xa261, 0x1, 0x0, 0x8, 0x4, 0xe9, 0x2, 0x6, 0xfffffffb, 0x0, 0x2, 0x1, 0x6, 0x0, 0x4, 0x3, 0x1, 0x9, 0x7, 0xf, 0x6, 0xffff, 0x7ff, 0xfffffff7, 0x2, 0x4, 0x0, 0x200, 0x1, 0x3, 0x401, 0x74, 0x1, 0x8, 0x400, 0x4, 0x6, 0xed, 0x80000001, 0x3, 0x0, 0x81, 0x80000001, 0x8, 0x5, 0x9, 0xadb, 0x7, 0x101, 0xfbb, 0x1ff, 0x10000, 0xb, 0x0, 0x200, 0x4, 0x32532eb3, 0x8001, 0x7, 0x6, 0x800, 0x8, 0x5, 0x9, 0x2ad, 0x80000000, 0x2, 0x80, 0x1000, 0x8000, 0x7, 0x6, 0x0, 0x9, 0x5, 0xd, 0x1c446000, 0x401, 0x8, 0xfffffffe, 0x34, 0x4, 0x7fff, 0x10000, 0x9, 0x8, 0xf, 0x3, 0x4, 0x80000001, 0x9, 0x7fff, 0x300000, 0x6, 0x7fffffff, 0x0, 0x9, 0x0, 0x6, 0x0, 0xa, 0x3, 0x0, 0x5, 0x2, 0x3, 0x10000, 0x5, 0x7ff, 0x3ff, 0x7, 0x80000001, 0x8, 0xd, 0x6, 0x0, 0x5, 0x3, 0x3, 0x40, 0x237, 0x4, 0x7fffffff, 0x8, 0x85, 0x5, 0x7, 0xb, 0x7, 0xfff, 0x2, 0xd, 0x40, 0x2, 0x78966851, 0xa35d, 0x9, 0x0, 0x8001, 0x23d, 0x7ff, 0xffff4710, 0x1ff, 0x2, 0x10000, 0xea1f, 0x2, 0xc15, 0x9, 0x5473f727, 0x3, 0x7f, 0x80, 0x7, 0x9, 0x8, 0x8, 0xc, 0xfffffffa, 0x3f2, 0x2, 0xffff, 0x9, 0x6, 0x5, 0x4, 0x2, 0x1, 0xffff, 0xfffffffc, 0x5170, 0x5, 0xc34c, 0x8, 0x200, 0x7ff, 0x0, 0x9, 0xaf, 0xbc64, 0x9cf0, 0x3ff, 0x9, 0x0, 0x8001, 0x0, 0x800, 0x9, 0x101, 0x2, 0x9, 0x2b5, 0x8, 0x1, 0x30, 0x3, 0x7, 0x2, 0x5, 0x8, 0x6, 0x6, 0x9, 0xc59f, 0x0, 0x7915, 0x5, 0x8000, 0x2, 0x9, 0x7fff, 0x7ff, 0xff, 0xe13, 0x3, 0xf5, 0x10, 0x7, 0xc, 0x6, 0x28, 0x0, 0x3, 0xfffffff9, 0x6, 0x0, 0xfffff914, 0x5, 0x0, 0x8, 0x497, 0x1, 0x80, 0xe, 0xa228, 0x3, 0x9, 0x400, 0x0, 0xa37, 0x6, 0x100, 0x3, 0xfafb, 0x3, 0x2, 0x3d77, 0x8, 0xd, 0x94, 0x2, 0x70d, 0x3, 0x3, 0x7fff, 0x8, 0x1000, 0x9, 0x2, 0x200, 0x3, 0x9, 0x7fd885e3, 0xe, 0x1, 0x0, 0x4, 0x9, 0x3ff, 0x3, 0xfbf, 0x4, 0x0, 0x3, 0x0, 0x3, 0x9, 0x2, 0x10000, 0x1, 0x6, 0xffffffff, 0x2, 0x80, 0xd9f4, 0x4, 0x5800, 0x0, 0x6, 0x2, 0x1aee, 0x10, 0x9, 0x0, 0x0, 0x3, 0xc, 0x2, 0x8, 0x9, 0xf66, 0x8, 0x0, 0x4, 0x5611b84a, 0xe, 0x6, 0x6, 0x8, 0x8, 0x1, 0x4, 0x1, 0x9f, 0xd, 0x4, 0x800, 0x2, 0x7, 0x3, 0x7, 0x7, 0x101, 0x4, 0x8, 0x9, 0x0, 0x7, 0x2fa6, 0xf2, 0x6, 0x4, 0x8, 0xd, 0x2, 0x800, 0x401, 0x80000000, 0x0, 0x4, 0x6, 0x7ff, 0x5, 0xfffffffc, 0x400000, 0x0, 0x400, 0x4, 0x40, 0x3, 0x81, 0x3ff, 0xfffffffa, 0x0, 0x3bbccf97, 0x8, 0x8001, 0x7, 0xe, 0x1ebb, 0x4, 0x80, 0x7, 0x8001, 0x8, 0x7fffffff, 0x0, 0x2, 0x4, 0xc, 0x4, 0x8, 0x4, 0x7, 0x3, 0x9, 0x4, 0x401, 0x5, 0x7, 0xfff, 0x7, 0x27, 0xfffffffa, 0x7fffffff, 0x36d1, 0x3acb, 0x1, 0x0, 0x0, 0x2, 0x10000, 0x40d, 0x2, 0x11b1200, 0x7fff, 0x9, 0xfffffff7, 0xa9, 0x81, 0x7d2754a, 0x8, 0x9, 0x2, 0x5, 0xdf20, 0x7, 0x800, 0x8, 0x98d2, 0x7, 0x1, 0x1, 0x5, 0xee, 0x9, 0x6, 0x7, 0x1, 0xee, 0x80000001, 0x317, 0x2], 0x2, 0x400, 0x7}) 967.747072ms ago: executing program 3 (id=1257): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 942.266199ms ago: executing program 2 (id=1258): r0 = socket$inet6(0xa, 0x80802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r0, 0x0) ppoll(&(0x7f0000000ac0)=[{r0, 0x25}], 0x1, 0x0, 0x0, 0x0) 862.116778ms ago: executing program 6 (id=1259): syz_usb_connect(0x0, 0x32, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000a80), 0x1, 0x802) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 802.018319ms ago: executing program 4 (id=1260): io_setup(0x202, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000001c0)='{-\x00', 0x5) r2 = eventfd(0xffff5a79) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffe, r1, 0x0, 0x0, 0x4b, 0x0, 0x1, r2}]) 791.264623ms ago: executing program 2 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x300}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 790.929003ms ago: executing program 3 (id=1262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000001c40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)='X', 0xfee4, 0x0, &(0x7f0000001d00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001dc0)="af", 0x1}], 0x1}}, {{&(0x7f0000001580)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9a70561a}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000001a80)="1c", 0x1}], 0x1}}], 0x2, 0x0) 697.826285ms ago: executing program 7 (id=1263): r0 = fsopen(&(0x7f0000000140)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[:ew\xeb:1]', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 651.926867ms ago: executing program 4 (id=1264): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000340)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000380)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x8000000, 0x4}) 548.990443ms ago: executing program 2 (id=1265): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000680), 0x4) 548.54596ms ago: executing program 4 (id=1266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x20000004) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 547.662941ms ago: executing program 7 (id=1267): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000740)={[{@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@fat=@nfs_stale_rw}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000002fc0)=""/4109, 0x100d) 457.919986ms ago: executing program 4 (id=1268): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x1200080, &(0x7f0000000200)=ANY=[], 0x5, 0x144, &(0x7f0000000640)="$eJzs2z9rE2EcB/Bf/qhRl8zicODiFNRXoEgE8UBRbtBJIbokEmiWa6e8lL7BQsmU7SntlaQ9mqFDctD7fJZ84csDzzPkfjwH9/vl/+lkvvg3/7aKQacT/feRxboTw+hGLyrLAAAeknVKcZ5SSk+W8fQ0UkpN7wgA2DfzHwDax/wHgPYx/wGgfX78/PXlQ56Pv2fZIOJsWRZlUf1W/afP+fhNdmW4XbUqy6K36d9WfXa7fxTPrvt39b4bZVk8jtevqv6y+/g1r61/HpMDnB8AAADaYJRt3Hm/H4129VW68X6gdn/vx4v+wY4BANzD4vhk+mc2+3skCIKwCU0/mYB92/7pm94JAAAAAAAAAAAAAACwyyE+J2r6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFB3EQAA//8ju1E5") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x1cd042, 0x224) io_setup(0x20fe, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x100600}]) 376.33813ms ago: executing program 1 (id=1269): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r0, 0x289e0cb5, 0x0) 260.308725ms ago: executing program 7 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/devices/system/memory/memory0/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='online', 0x6) 178.273434ms ago: executing program 4 (id=1271): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) setuid(0xee01) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) 177.918749ms ago: executing program 2 (id=1272): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x1000001, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 31.887405ms ago: executing program 7 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) preadv(r0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/77, 0x4d}], 0x1, 0xa, 0x4) 0s ago: executing program 1 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) kernel console output (not intermixed with test programs): , device number 2 [ 129.199045][ T6705] loop5: detected capacity change from 0 to 512 [ 130.280322][ T6709] loop4: detected capacity change from 0 to 32768 [ 130.382904][ T6709] add_index: next_index = 0. Resetting! [ 130.382926][ T6709] find_entry called with index >= next_index [ 130.382937][ T6709] find_entry called with index >= next_index [ 130.382946][ T6709] find_entry called with index >= next_index [ 130.382956][ T6709] find_entry called with index >= next_index [ 130.928675][ T6713] loop5: detected capacity change from 0 to 40427 [ 130.959456][ T6713] F2FS-fs (loop5): build fault injection rate: 174 [ 130.959484][ T6713] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 130.977475][ T6713] F2FS-fs (loop5): invalid crc value [ 131.266014][ T6755] cougar: G6 mapped to space [ 131.328268][ T6713] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 131.343903][ T6713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 131.391552][ T6713] syz.5.329: attempt to access beyond end of device [ 131.391552][ T6713] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.497586][ T5620] syz-executor: attempt to access beyond end of device [ 131.497586][ T5620] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 131.500498][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 131.500530][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 131.500546][ T5620] Call Trace: [ 131.500556][ T5620] [ 131.500567][ T5620] dump_stack_lvl+0xe8/0x150 [ 131.500613][ T5620] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 131.500654][ T5620] f2fs_write_end_bio+0x1211/0x16e0 [ 131.500700][ T5620] ? blkg_put+0x22/0x240 [ 131.500757][ T5620] __submit_merged_bio+0x258/0x6a0 [ 131.500790][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.500822][ T5620] ? rcu_is_watching+0x16/0xb0 [ 131.500872][ T5620] __submit_merged_write_cond+0x3c9/0x4e0 [ 131.500919][ T5620] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 131.500970][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501012][ T5620] f2fs_write_data_pages+0x2a1d/0x36f0 [ 131.501060][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501091][ T5620] ? __lock_acquire+0x747/0x2de0 [ 131.501162][ T5620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.501254][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501285][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501316][ T5620] ? __bfs+0x153/0x290 [ 131.501344][ T5620] ? __pfx_hlock_conflict+0x10/0x10 [ 131.501386][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501434][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501465][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501496][ T5620] ? __lock_acquire+0x1511/0x2de0 [ 131.501558][ T5620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.501599][ T5620] do_writepages+0x338/0x560 [ 131.501637][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501671][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501707][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501738][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 131.501784][ T5620] filemap_fdatawrite+0x1e9/0x2f0 [ 131.501826][ T5620] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 131.501937][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.501971][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.502008][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 131.502055][ T5620] f2fs_sync_dirty_inodes+0x30e/0x830 [ 131.502115][ T5620] f2fs_write_checkpoint+0xa38/0x2710 [ 131.502157][ T5620] ? __lock_acquire+0x747/0x2de0 [ 131.502224][ T5620] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 131.502265][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.502361][ T5620] kill_f2fs_super+0x2dd/0x700 [ 131.502408][ T5620] ? rcu_do_enqueue+0x616/0x870 [ 131.502437][ T5620] ? lockdep_hardirqs_on+0x7b/0x110 [ 131.502473][ T5620] ? __pfx_kill_f2fs_super+0x10/0x10 [ 131.502534][ T5620] ? __pfx_call_rcu+0x10/0x10 [ 131.502578][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.502609][ T5620] ? shrinker_free+0x2a7/0x3b0 [ 131.502650][ T5620] deactivate_locked_super+0xbe/0x110 [ 131.502682][ T5620] cleanup_mnt+0x204/0x2a0 [ 131.502722][ T5620] task_work_run+0x1d9/0x260 [ 131.502756][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 131.502799][ T5620] exit_to_user_mode_loop+0x204/0x770 [ 131.502831][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.502868][ T5620] ? rcu_is_watching+0x16/0xb0 [ 131.502910][ T5620] do_syscall_64+0x328/0x520 [ 131.502945][ T5620] ? trace_irq_disable+0x3b/0x140 [ 131.502978][ T5620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.503012][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.503039][ T5620] RIP: 0033:0x7fe8021a0797 [ 131.503062][ T5620] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 131.503084][ T5620] RSP: 002b:00007ffc3072b8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.503111][ T5620] RAX: 0000000000000000 RBX: 00007fe802235f63 RCX: 00007fe8021a0797 [ 131.503129][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3072b980 [ 131.503146][ T5620] RBP: 00007ffc3072b980 R08: 00007ffc3072c980 R09: 00000000ffffffff [ 131.503165][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3072ca10 [ 131.503182][ T5620] R13: 00007fe802235f63 R14: 0000000000020127 R15: 00007ffc3072ca50 [ 131.503223][ T5620] [ 131.506425][ T5620] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 132.191701][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.279577][ T6763] tipc: Started in network mode [ 132.279616][ T6763] tipc: Node identity 7f000001, cluster identity 4711 [ 132.280455][ T6763] tipc: New replicast peer: 127.0.0.1 [ 132.281797][ T6763] tipc: Enabled bearer , priority 10 [ 132.282594][ T6763] tipc: Disabling bearer [ 132.804700][ T6777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.295651][ T6791] program syz.4.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.646026][ T6783] loop2: detected capacity change from 0 to 32768 [ 133.661734][ T6783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.360 (6783) [ 133.698316][ T6783] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.698354][ T6783] BTRFS info (device loop2): using crc32c checksum algorithm [ 133.737529][ T6809] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 133.814043][ T6783] BTRFS info (device loop2): enabling ssd optimizations [ 133.814076][ T6783] BTRFS info (device loop2): turning on flush-on-commit [ 133.814097][ T6783] BTRFS info (device loop2): enabling free space tree [ 133.814117][ T6783] BTRFS info (device loop2): enabling auto defrag [ 133.814139][ T6783] BTRFS info (device loop2): use lzo compression, level 1 [ 133.814163][ T6783] BTRFS info (device loop2): max_inline set to 4096 [ 133.955556][ T6781] loop3: detected capacity change from 0 to 32768 [ 133.956436][ T30] audit: type=1800 audit(1792757876.463:14): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.360" name="file2" dev="loop2" ino=261 res=0 errno=-22 [ 133.983395][ T6828] capability: warning: `syz.5.374' uses deprecated v2 capabilities in a way that may be insecure [ 134.026130][ T6781] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.092990][ T6781] XFS (loop3): Ending clean mount [ 134.406254][ T5623] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.697377][ T6847] netlink: 884 bytes leftover after parsing attributes in process `syz.3.377'. [ 134.699460][ T5625] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.916655][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.067716][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 135.069127][ T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 135.069155][ T9] usb 6-1: config 1 has no interface number 0 [ 135.069198][ T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.069225][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.069254][ T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 1463, setting to 1024 [ 135.069285][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 135.071870][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.071900][ T9] usb 6-1: Product: syz [ 135.071918][ T9] usb 6-1: Manufacturer: syz [ 135.071936][ T9] usb 6-1: SerialNumber: syz [ 135.112593][ T6845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.203742][ T9] usb 6-1: Error in usbnet_get_endpoints (-22) [ 135.455303][ T5873] usb 6-1: USB disconnect, device number 3 [ 135.576798][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 135.746766][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 135.747600][ T29] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 135.750960][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.750987][ T29] usb 7-1: Product: syz [ 135.751006][ T29] usb 7-1: Manufacturer: syz [ 135.751024][ T29] usb 7-1: SerialNumber: syz [ 135.792485][ T29] usb 7-1: config 0 descriptor?? [ 135.812054][ T29] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 136.052033][ T6874] loop1: detected capacity change from 0 to 128 [ 136.120948][ T6874] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.143400][ T6874] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.194289][ T6880] loop5: detected capacity change from 0 to 512 [ 136.405957][ T6886] loop2: detected capacity change from 0 to 128 [ 136.457322][ T6886] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.459172][ T6886] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.541414][ T5624] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.631984][ T29] gspca_stk1135: reg_w 0x5 err -71 [ 136.633042][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633058][ T29] gspca_stk1135: Sensor write failed [ 136.633100][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633112][ T29] gspca_stk1135: Sensor write failed [ 136.633154][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633166][ T29] gspca_stk1135: Sensor read failed [ 136.633208][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633220][ T29] gspca_stk1135: Sensor read failed [ 136.633229][ T29] gspca_stk1135: Detected sensor type unknown (0x0) [ 136.633276][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633288][ T29] gspca_stk1135: Sensor read failed [ 136.633330][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633341][ T29] gspca_stk1135: Sensor read failed [ 136.633381][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633393][ T29] gspca_stk1135: Sensor write failed [ 136.633433][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 136.633444][ T29] gspca_stk1135: Sensor write failed [ 136.633524][ T29] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 136.669474][ T5625] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.777248][ T29] usb 7-1: USB disconnect, device number 3 [ 136.984014][ T6901] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 137.434219][ T6923] loop5: detected capacity change from 0 to 128 [ 137.467218][ T6923] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 137.485575][ T6923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.561005][ T30] audit: type=1800 audit(1792757880.073:15): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.413" name="file2" dev="loop5" ino=95 res=0 errno=-22 [ 137.709518][ T5873] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 137.760557][ T6929] loop6: detected capacity change from 0 to 4096 [ 137.794799][ T6929] EXT4-fs (loop6): Test dummy encryption mode enabled [ 137.854430][ T6929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.858459][ T5873] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 137.859675][ T5873] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.859709][ T5873] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 137.859741][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.859777][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.906063][ T5873] usb 2-1: config 0 descriptor?? [ 137.915571][ T6925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.000221][ T6929] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 138.172488][ T6929] fscrypt: AES-256-XTS using blk-crypto-fallback [ 138.262806][ T6953] process 'syz.5.427' launched './file2' with NULL argv: empty string added [ 138.296376][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.384683][ T5873] hid_parser_main: 117 callbacks suppressed [ 138.384715][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384750][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384774][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384799][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384824][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384849][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384875][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384901][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384925][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.384950][ T5873] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 138.600257][ T5873] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 138.672910][ T5873] usb 2-1: USB disconnect, device number 4 [ 138.772845][ T6964] loop3: detected capacity change from 0 to 1024 [ 138.881050][ T6964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.974182][ T6964] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 139.020730][ T6964] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 139.020765][ T6964] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.020765][ T6964] [ 139.020782][ T6964] EXT4-fs (loop3): Total free blocks count 0 [ 139.020797][ T6964] EXT4-fs (loop3): Free/Dirty block details [ 139.021131][ T6964] EXT4-fs (loop3): free_blocks=68451041280 [ 139.031603][ T6964] EXT4-fs (loop3): dirty_blocks=64 [ 139.045184][ T6964] EXT4-fs (loop3): Block reservation details [ 139.045207][ T6964] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 139.065817][ T6961] fido_id[6961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 139.149271][ T6974] loop5: detected capacity change from 0 to 128 [ 139.155327][ T6974] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 139.192590][ T6974] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 139.209227][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.384257][ T6978] loop2: detected capacity change from 0 to 4096 [ 139.416374][ T6978] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 139.441249][ T6978] ntfs3(loop2): ino=1a, mi_enum_attr [ 139.441420][ T6978] ntfs3(loop2): ino=1a, mi_enum_attr [ 139.441443][ T6978] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 139.516804][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.677873][ T5877] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 139.679017][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.679050][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.682823][ T5877] usb 5-1: config 0 descriptor?? [ 140.093218][ T5877] hid (null): unknown global tag 0xfd [ 140.105567][ T5877] waltop 0003:172F:0034.0003: unexpected long global item [ 140.106158][ T5877] waltop 0003:172F:0034.0003: probe with driver waltop failed with error -22 [ 140.299737][ T5760] usb 5-1: USB disconnect, device number 4 [ 141.068499][ T6993] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 141.068526][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.6.450 Not tainted syzkaller #0 PREEMPT(full) [ 141.068555][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 141.068572][ T6993] Call Trace: [ 141.068582][ T6993] [ 141.068594][ T6993] dump_stack_lvl+0xe8/0x150 [ 141.068641][ T6993] sysfs_create_dir_ns+0x271/0x2a0 [ 141.068681][ T6993] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.068721][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.068753][ T6993] ? do_raw_spin_unlock+0xf5/0x200 [ 141.068801][ T6993] kobject_add_internal+0x622/0xcd0 [ 141.068839][ T6993] kobject_add+0x163/0x240 [ 141.068871][ T6993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.068915][ T6993] ? __pfx_kobject_add+0x10/0x10 [ 141.068939][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.068980][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.069011][ T6993] ? get_device_parent+0x366/0x3a0 [ 141.069051][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.069088][ T6993] device_add+0x3fa/0xb80 [ 141.069128][ T6993] tty_register_device_attr+0x428/0x9b0 [ 141.069176][ T6993] ? __pfx_tty_register_device_attr+0x10/0x10 [ 141.069223][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.069255][ T6993] ? tty_port_init+0x136/0x1a0 [ 141.069290][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.069322][ T6993] ? gsm_dlci_alloc+0x330/0x640 [ 141.069365][ T6993] gsm_activate_mux+0x110/0x2a0 [ 141.069411][ T6993] gsmld_ioctl+0x12d3/0x1930 [ 141.069458][ T6993] ? __pfx_gsmld_ioctl+0x10/0x10 [ 141.069512][ T6993] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 141.069556][ T6993] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.069598][ T6993] ? ldsem_down_read+0x12/0x40 [ 141.069635][ T6993] ? __pfx_gsmld_ioctl+0x10/0x10 [ 141.069669][ T6993] tty_ioctl+0x9bd/0xde0 [ 141.069705][ T6993] ? __pfx_tty_ioctl+0x10/0x10 [ 141.069739][ T6993] __se_sys_ioctl+0xfc/0x170 [ 141.069781][ T6993] do_syscall_64+0x166/0x520 [ 141.069817][ T6993] ? trace_irq_disable+0x3b/0x140 [ 141.069875][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.069910][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.069937][ T6993] RIP: 0033:0x7f5c9cb9f559 [ 141.069961][ T6993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.069983][ T6993] RSP: 002b:00007f5c9da31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.070010][ T6993] RAX: ffffffffffffffda RBX: 00007f5c9ce26090 RCX: 00007f5c9cb9f559 [ 141.070030][ T6993] RDX: 00002000000000c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 141.070048][ T6993] RBP: 00007f5c9cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 141.070065][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.070081][ T6993] R13: 00007f5c9ce26128 R14: 00007f5c9ce26090 R15: 00007ffcbd231688 [ 141.070123][ T6993] [ 141.123312][ T6993] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.675772][ T7007] loop2: detected capacity change from 0 to 512 [ 141.693026][ T7007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.447: bg 0: block 7: invalid block bitmap [ 141.693064][ T7007] loop2: lost filesystem error report for type 5 error -117 [ 141.696695][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 141.696719][ C1] EXT4-fs (loop2): initial error at time 1792757884: ext4_validate_block_bitmap:436 [ 141.696747][ C1] EXT4-fs (loop2): last error at time 1792757884: ext4_validate_block_bitmap:436 [ 141.714553][ T7009] loop1: detected capacity change from 0 to 1024 [ 141.715125][ T7007] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 141.715148][ T7007] loop2: lost filesystem error report for type 5 error -117 [ 141.721561][ T7007] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #11: comm syz.2.447: corrupted xattr block 95: invalid header [ 141.721600][ T7007] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 141.723412][ T7007] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 141.723660][ T7007] EXT4-fs (loop2): 1 orphan inode deleted [ 141.726060][ T7007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.734688][ T7007] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.749793][ T7009] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.749940][ T7009] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.771718][ T7009] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.449: lblock 3 mapped to illegal pblock 3 (length 2) [ 141.774137][ T7009] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.449: lblock 0 mapped to illegal pblock 0 (length 3) [ 141.779826][ T7009] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 141.779859][ T7009] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.779859][ T7009] [ 141.788538][ T30] audit: type=1326 audit(1792757884.303:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 141.790337][ T30] audit: type=1326 audit(1792757884.303:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 141.793572][ T30] audit: type=1326 audit(1792757884.303:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 141.795884][ T30] audit: type=1326 audit(1792757884.303:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 141.795945][ T30] audit: type=1326 audit(1792757884.303:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 141.805416][ T30] audit: type=1326 audit(1792757884.313:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b8f75fd8e code=0x7ffc0000 [ 141.807030][ T30] audit: type=1326 audit(1792757884.313:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b8f75fd8e code=0x7ffc0000 [ 141.808789][ T30] audit: type=1326 audit(1792757884.323:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b8f75fd8e code=0x7ffc0000 [ 141.811052][ T30] audit: type=1326 audit(1792757884.323:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b8f75fd8e code=0x7ffc0000 [ 141.812342][ T30] audit: type=1326 audit(1792757884.323:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b8f75fd8e code=0x7ffc0000 [ 141.864185][ T1008] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 141.897955][ T1008] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 141.897991][ T1008] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.897991][ T1008] [ 141.970364][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 142.305430][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.407463][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.106660][ T5628] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.256732][ T5628] usb 5-1: Using ep0 maxpacket: 16 [ 143.263057][ T5628] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 143.273519][ T5628] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.273557][ T5628] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.273595][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.319317][ T5628] usb 5-1: config 0 descriptor?? [ 143.745824][ T5628] hid_parser_main: 11 callbacks suppressed [ 143.745852][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.745883][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.745909][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.745935][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.745960][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.745986][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.746011][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.746037][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.746062][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.746088][ T5628] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 143.831123][ T5628] hid_mf 0003:0079:1846.0004: collection stack underflow [ 143.831154][ T5628] hid_mf 0003:0079:1846.0004: item 0 0 0 12 parsing failed [ 143.834947][ T5628] hid_mf 0003:0079:1846.0004: HID parse failed. [ 143.835026][ T5628] hid_mf 0003:0079:1846.0004: probe with driver hid_mf failed with error -22 [ 143.945287][ T5628] usb 5-1: USB disconnect, device number 5 [ 144.059023][ T7074] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 144.064246][ T139] IPVS: starting estimator thread 0... [ 144.078295][ T7075] loop6: detected capacity change from 0 to 256 [ 144.144437][ T7075] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.144587][ T7075] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.144620][ T7075] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.148945][ T7076] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.285814][ T7085] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.484'. [ 144.285884][ T7085] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.484'. [ 144.695444][ T7103] loop3: detected capacity change from 0 to 164 [ 144.780566][ T7103] isofs: isofs_export_get_parent(): child directory not normalized! [ 145.009159][ T5628] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 145.100033][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 145.156689][ T5628] usb 7-1: Using ep0 maxpacket: 16 [ 145.157511][ T5628] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 145.159324][ T5628] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.159351][ T5628] usb 7-1: config 0 has no interface number 0 [ 145.159405][ T5628] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.159435][ T5628] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.159477][ T5628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.166171][ T5628] usb 7-1: config 0 descriptor?? [ 145.200972][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.4.503'. [ 145.202600][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.4.503'. [ 145.281163][ T7130] batadv_slave_1: entered promiscuous mode [ 145.281912][ T7129] batadv_slave_1: left promiscuous mode [ 145.380104][ T7134] kAFS: Invalid Command on /proc/fs/afs/cells file [ 145.708158][ T7150] kAFS: Invalid Command on /proc/fs/afs/cells file [ 145.807879][ T7156] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 145.831750][ T5628] uclogic 0003:28BD:0071.0005: pen parameters not found [ 145.831778][ T5628] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 145.857112][ T5628] usb 7-1: USB disconnect, device number 4 [ 146.495274][ T7184] misc userio: Begin command sent, but we're already running [ 146.573063][ T7192] loop6: detected capacity change from 0 to 256 [ 146.616345][ T7192] exFAT-fs (loop6): error, no upcase table entry. Please run fsck [ 146.616370][ T7192] exFAT-fs (loop6): Filesystem has been set read-only [ 146.617318][ T7192] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 146.736066][ T7196] loop1: detected capacity change from 0 to 4096 [ 146.794853][ T7197] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.103918][ T7207] capability: warning: `syz.1.538' uses 32-bit capabilities (legacy support in use) [ 147.115119][ T7207] program syz.1.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.475142][ T7223] loop3: detected capacity change from 0 to 2048 [ 147.513011][ T7223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.727647][ T7232] loop2: detected capacity change from 0 to 1024 [ 147.805174][ T7232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.045848][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.048173][ T7244] loop1: detected capacity change from 0 to 512 [ 148.075756][ T7244] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 148.075778][ T7244] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.110818][ T7244] EXT4-fs (loop1): 1 truncate cleaned up [ 148.120596][ T7244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.441067][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.582554][ T7227] loop4: detected capacity change from 0 to 32768 [ 148.607620][ T7227] [ 148.607620][ T7227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.607620][ T7227] [ 148.668726][ T7227] ERROR: (device loop4): diWrite: ixpxd invalid [ 148.668726][ T7227] [ 148.692214][ T7227] ERROR: (device loop4): txCommit: [ 148.692214][ T7227] [ 148.713151][ T7227] ERROR: (device loop4): dtSearch: stack overrun! [ 148.713151][ T7227] [ 148.713196][ T7227] btstack dump: [ 148.713204][ T7227] bn = 0, index = 0 [ 148.713218][ T7227] bn = 0, index = 0 [ 148.713229][ T7227] bn = 0, index = 0 [ 148.713241][ T7227] bn = 0, index = 0 [ 148.713252][ T7227] bn = 0, index = 0 [ 148.713264][ T7227] bn = 0, index = 0 [ 148.713276][ T7227] bn = 0, index = 0 [ 148.713287][ T7227] bn = 0, index = 0 [ 148.891475][ T5622] [ 148.891475][ T5622] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.891475][ T5622] [ 148.891747][ T5622] [ 148.891747][ T5622] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.891747][ T5622] [ 148.977678][ T7272] xt_hashlimit: size too large, truncated to 1048576 [ 149.247271][ T7285] loop4: detected capacity change from 0 to 8 [ 149.359849][ T7285] SQUASHFS error: zlib decompression failed, data probably corrupt [ 149.359888][ T7285] SQUASHFS error: Failed to read block 0x9b: -5 [ 149.359910][ T7285] SQUASHFS error: Unable to read metadata cache entry [99] [ 149.359926][ T7285] SQUASHFS error: Unable to read inode 0x127 [ 149.551986][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 149.552049][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 149.552735][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 149.554820][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 149.631695][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.581'. [ 149.632484][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.581'. [ 150.009801][ T7312] loop3: detected capacity change from 0 to 512 [ 150.101739][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.101883][ T7312] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.299787][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.362728][ T7326] loop4: detected capacity change from 0 to 2048 [ 150.428654][ T7326] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 150.450085][ T7326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.593944][ T7334] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.774760][ T7341] netlink: 'syz.6.598': attribute type 21 has an invalid length. [ 150.774914][ T7341] netlink: 156 bytes leftover after parsing attributes in process `syz.6.598'. [ 150.797024][ T7341] netlink: 'syz.6.598': attribute type 21 has an invalid length. [ 150.797094][ T7341] netlink: 156 bytes leftover after parsing attributes in process `syz.6.598'. [ 151.024294][ T7322] loop1: detected capacity change from 0 to 32768 [ 151.050931][ T7322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.589 (7322) [ 151.157896][ T7322] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.157935][ T7322] BTRFS info (device loop1): using crc32c checksum algorithm [ 151.305912][ T7322] BTRFS info (device loop1): enabling ssd optimizations [ 151.305945][ T7322] BTRFS info (device loop1): turning on flush-on-commit [ 151.305965][ T7322] BTRFS info (device loop1): enabling free space tree [ 151.305984][ T7322] BTRFS info (device loop1): enabling auto defrag [ 151.306005][ T7322] BTRFS info (device loop1): use lzo compression, level 1 [ 151.306029][ T7322] BTRFS info (device loop1): max_inline set to 4096 [ 151.426638][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.427286][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.572662][ T7374] loop5: detected capacity change from 0 to 128 [ 151.589997][ T7374] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.610643][ T7374] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.631142][ T5624] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.811653][ T63] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.104979][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.168320][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.569912][ T1008] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.572236][ T63] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.572284][ T63] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.572326][ T63] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.735171][ T7392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.934634][ T7402] loop5: detected capacity change from 0 to 16 [ 152.973487][ T7402] erofs (device loop5): mounted with root inode @ nid 36. [ 153.038708][ T7402] erofs (device loop5): bogus i_mode (0) @ nid 0 [ 153.189175][ T7405] loop4: detected capacity change from 0 to 8 [ 153.237784][ T7405] SQUASHFS error: Failed to read block 0x2d7: -5 [ 153.237809][ T7405] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 153.922453][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 154.417385][ T7436] loop2: detected capacity change from 0 to 40427 [ 154.438567][ T7436] F2FS-fs (loop2): invalid crc value [ 154.456814][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.619823][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 154.624090][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.648572][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.648629][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.648663][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.648689][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.648718][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.653142][ T5873] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.653171][ T5873] usb 5-1: Manufacturer: syz [ 154.757237][ T5873] usb 5-1: config 0 descriptor?? [ 154.783089][ T7436] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.809934][ T7436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.875857][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 154.875909][ T30] audit: type=1800 audit(1792757898.384:56): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.632" name="bus" dev="loop2" ino=10 res=0 errno=-22 [ 154.911106][ T7436] syz.2.632: attempt to access beyond end of device [ 154.911106][ T7436] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.950538][ T7436] CPU: 1 UID: 0 PID: 7436 Comm: syz.2.632 Not tainted syzkaller #0 PREEMPT(full) [ 154.950575][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 154.950591][ T7436] Call Trace: [ 154.950601][ T7436] [ 154.950612][ T7436] dump_stack_lvl+0xe8/0x150 [ 154.950660][ T7436] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 154.950701][ T7436] f2fs_write_end_bio+0x1211/0x16e0 [ 154.950747][ T7436] ? blkg_put+0x22/0x240 [ 154.950804][ T7436] __submit_merged_bio+0x258/0x6a0 [ 154.950837][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.950869][ T7436] ? rcu_is_watching+0x16/0xb0 [ 154.950912][ T7436] __submit_merged_write_cond+0x3c9/0x4e0 [ 154.950959][ T7436] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 154.951010][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951052][ T7436] f2fs_write_data_pages+0x2a1d/0x36f0 [ 154.951140][ T7436] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.951178][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951225][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951256][ T7436] ? __dequeue_entity+0xbab/0x10b0 [ 154.951335][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951366][ T7436] ? __lock_acquire+0x747/0x2de0 [ 154.951419][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951450][ T7436] ? __lock_acquire+0x747/0x2de0 [ 154.951490][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951521][ T7436] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.951568][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951604][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951635][ T7436] ? do_raw_spin_unlock+0xf5/0x200 [ 154.951676][ T7436] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.951718][ T7436] do_writepages+0x338/0x560 [ 154.951756][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951794][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951829][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.951860][ T7436] ? do_raw_spin_unlock+0xf5/0x200 [ 154.951906][ T7436] filemap_write_and_wait_range+0x335/0x3f0 [ 154.951946][ T7436] ? arch_stack_walk+0xfb/0x150 [ 154.951982][ T7436] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 154.952076][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.952107][ T7436] ? __lock_acquire+0x747/0x2de0 [ 154.952136][ T7436] ? fiemap_prep+0x1c7/0x250 [ 154.952179][ T7436] f2fs_fiemap+0x19a/0x1880 [ 154.952235][ T7436] ? __pfx_f2fs_fiemap+0x10/0x10 [ 154.952268][ T7436] ? lock_acquire+0x115/0x350 [ 154.952311][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.952359][ T7436] do_vfs_ioctl+0x1263/0x1530 [ 154.952407][ T7436] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.952460][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.952491][ T7436] ? do_futex+0x3e7/0x4e0 [ 154.952530][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.952574][ T7436] ? irqentry_exit+0x2a0/0x9b0 [ 154.952610][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.952641][ T7436] ? lockdep_hardirqs_on+0x7b/0x110 [ 154.952675][ T7436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.952706][ T7436] ? irqentry_exit+0x2a0/0x9b0 [ 154.952771][ T7436] __se_sys_ioctl+0x82/0x170 [ 154.952811][ T7436] do_syscall_64+0x166/0x520 [ 154.952846][ T7436] ? trace_irq_disable+0x3b/0x140 [ 154.952879][ T7436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.952913][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.952940][ T7436] RIP: 0033:0x7f164f79f559 [ 154.952964][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.952985][ T7436] RSP: 002b:00007f165065b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.953012][ T7436] RAX: ffffffffffffffda RBX: 00007f164fa25fa0 RCX: 00007f164f79f559 [ 154.953032][ T7436] RDX: 0000200000000bc0 RSI: 00000000c020660b RDI: 0000000000000005 [ 154.953049][ T7436] RBP: 00007f164f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 154.953066][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.953082][ T7436] R13: 00007f164fa26038 R14: 00007f164fa25fa0 R15: 00007fff4bd3fef8 [ 154.953124][ T7436] [ 154.956456][ T7436] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 154.956514][ T7435] loop5: detected capacity change from 0 to 131072 [ 154.963967][ T7435] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 154.963998][ T7435] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 154.970956][ T7435] F2FS-fs (loop5): invalid crc value [ 155.050354][ T5628] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 155.060985][ T7435] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.077174][ T7435] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 155.077204][ T7435] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 155.222340][ T5628] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.236092][ T5628] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.236120][ T5628] usb 7-1: config 0 has no interface number 0 [ 155.256447][ T5628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.256478][ T5628] usb 7-1: Product: syz [ 155.256496][ T5628] usb 7-1: Manufacturer: syz [ 155.256514][ T5628] usb 7-1: SerialNumber: syz [ 155.280289][ T5628] usb 7-1: config 0 descriptor?? [ 155.531331][ T5628] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 155.546903][ T5873] rc_core: IR keymap rc-hauppauge not found [ 155.546921][ T5873] Registered IR keymap rc-empty [ 155.547295][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.568655][ T5628] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.569006][ T5628] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 155.569055][ T5628] usb 7-1: media controller created [ 155.598740][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.618489][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 155.641676][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 155.647144][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.655924][ T5628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.676159][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.686816][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.708414][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.726961][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.746780][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.777321][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.796784][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.816721][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.836765][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.871220][ T5873] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 155.871250][ T5873] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 155.983440][ T10] usb 5-1: USB disconnect, device number 6 [ 156.322140][ T7464] loop3: detected capacity change from 0 to 64 [ 156.377001][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.541488][ T5873] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 156.561157][ T5873] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 156.561188][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.561210][ T5873] usb 2-1: config 0 has no interface number 0 [ 156.561261][ T5873] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 156.561296][ T5873] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 156.561324][ T5873] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.564045][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.564075][ T5873] usb 2-1: Product: syz [ 156.564092][ T5873] usb 2-1: Manufacturer: syz [ 156.564109][ T5873] usb 2-1: SerialNumber: syz [ 156.653213][ T5873] usb 2-1: config 0 descriptor?? [ 156.858863][ T5628] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 156.878747][ T7472] loop2: detected capacity change from 0 to 256 [ 157.060310][ T5628] usb 7-1: USB disconnect, device number 5 [ 157.073993][ T5873] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 157.099095][ T5873] usb 2-1: USB disconnect, device number 5 [ 157.227917][ T7481] loop4: detected capacity change from 0 to 512 [ 157.250891][ T7481] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.649: missing EA_INODE flag [ 157.250938][ T7481] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 157.251855][ T7481] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.649: error while reading EA inode 12 err=-117 [ 157.251889][ T7481] loop4: lost filesystem error report for type 5 error -117 [ 157.254772][ T7481] EXT4-fs (loop4): 1 orphan inode deleted [ 157.314112][ T7481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.365562][ T7483] loop5: detected capacity change from 0 to 4096 [ 157.378057][ T30] audit: type=1800 audit(1792757900.884:57): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.649" name="file2" dev="loop4" ino=15 res=0 errno=-22 [ 157.511228][ T7483] ntfs3(loop5): Failed to load $Extend (-22). [ 157.511258][ T7483] ntfs3(loop5): Failed to initialize $Extend. [ 157.538675][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.572542][ T7491] netlink: 'syz.3.653': attribute type 6 has an invalid length. [ 157.953275][ T30] audit: type=1400 audit(1792757901.464:58): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7505 comm="syz.3.660" name="p" offset=48 [ 158.751248][ T7550] loop6: detected capacity change from 0 to 16 [ 158.767572][ T7550] erofs (device loop6): invalid ishare xattr prefix id 0 [ 159.196060][ T7566] loop1: detected capacity change from 0 to 512 [ 159.217722][ T7566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 159.217860][ T7566] System zones: 1-12 [ 159.229308][ T7546] loop2: detected capacity change from 0 to 32768 [ 159.244022][ T7566] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.687: Directory hole found for htree index block 0 [ 159.244062][ T7566] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 159.246624][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 159.246648][ C1] EXT4-fs (loop1): initial error at time 1792757902: dx_probe:791: inode 2 [ 159.246682][ C1] EXT4-fs (loop1): last error at time 1792757902: dx_probe:791: inode 2 [ 159.309090][ T7546] (syz.2.676,7546,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.314827][ T7566] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 159.314901][ T7566] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.687: Directory hole found for htree index block 0 [ 159.314933][ T7566] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 159.316294][ T7566] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 159.342725][ T7566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.381934][ T7566] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.687: Directory hole found for htree index block 0 [ 159.404148][ T7546] (syz.2.676,7546,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.423363][ T7566] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.687: Directory hole found for htree index block 0 [ 159.500316][ T7546] JBD2: Ignoring recovery information on journal [ 159.603541][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.621813][ T7546] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.744359][ T7546] (syz.2.676,7546,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 159.744408][ T7546] (syz.2.676,7546,1):update_backups:196 ERROR: status = -12 [ 159.744436][ T7546] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 159.799983][ T5636] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 159.892967][ T7583] program syz.4.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.911597][ T5625] ocfs2: Unmounting device (7,2) on (node local) [ 159.949265][ T5636] usb 7-1: Using ep0 maxpacket: 32 [ 159.961148][ T5636] usb 7-1: unable to get BOS descriptor or descriptor too short [ 159.961200][ T5636] usb 7-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice= 0.40 [ 159.962788][ T5636] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 159.970913][ T5636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.970940][ T5636] usb 7-1: Product: syz [ 159.970958][ T5636] usb 7-1: Manufacturer: syz [ 159.970976][ T5636] usb 7-1: SerialNumber: syz [ 160.035725][ T7587] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 160.160175][ T1008] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 160.234692][ T5636] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.291967][ T7587] rtrs_client L2656: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 160.411858][ T7595] loop5: detected capacity change from 0 to 256 [ 160.463620][ T5636] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 160.502472][ T7595] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 160.518243][ T5636] usb 7-1: USB disconnect, device number 6 [ 160.587377][ T5626] Bluetooth: hci6: command 0x1003 tx timeout [ 160.589054][ T5639] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 160.644275][ T6090] udevd[6090]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.838083][ T7605] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.238176][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 161.388200][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 161.390241][ T10] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 161.391572][ T10] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.391607][ T10] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 161.391641][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 161.391696][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.460754][ T7627] loop1: detected capacity change from 0 to 128 [ 161.483350][ T7627] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 161.483413][ T7627] hpfs: filesystem error: improperly stopped [ 161.483431][ T7627] hpfs: You really don't want any checks? You are crazy... [ 161.483797][ T7627] hpfs: hpfs_map_sector(): read error [ 161.483811][ T7627] hpfs: code page support is disabled [ 161.485599][ T10] usb 7-1: config 0 descriptor?? [ 161.491024][ T7627] hpfs: hpfs_map_4sectors(): unaligned read [ 161.493703][ T7627] hpfs: hpfs_map_4sectors(): unaligned read [ 161.493718][ T7627] hpfs: filesystem error: unable to find root dir [ 162.045017][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.051540][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.053265][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.060825][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.063279][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.436811][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.597023][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 162.599290][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 162.600501][ T5877] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.600537][ T5877] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.645826][ T5877] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 162.645862][ T5877] usb 2-1: Product: syz [ 162.645881][ T5877] usb 2-1: Manufacturer: syz [ 162.708762][ T5877] hub 2-1:4.0: USB hub found [ 162.773119][ T7638] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.829141][ T10] hid_parser_main: 365 callbacks suppressed [ 162.830324][ T10] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 162.830361][ T10] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 162.830387][ T10] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 162.830422][ T10] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 162.830447][ T10] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 162.830473][ T10] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 162.830550][ T10] petalynx 0003:18B1:0037.0006: unbalanced collection at end of report description [ 162.831360][ T10] petalynx 0003:18B1:0037.0006: parse failed [ 162.831440][ T10] petalynx 0003:18B1:0037.0006: probe with driver petalynx failed with error -22 [ 162.836514][ T10] usb 7-1: USB disconnect, device number 7 [ 162.940760][ T7635] loop2: detected capacity change from 0 to 131072 [ 162.944358][ T7635] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 162.944386][ T7635] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.949730][ T7635] F2FS-fs (loop2): invalid crc value [ 163.081445][ T7635] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 163.094451][ T7635] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.094480][ T7635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 163.110822][ T5877] hub 2-1:4.0: 5 ports detected [ 163.111306][ T5877] hub 2-1:4.0: insufficient power available to use all downstream ports [ 163.313960][ T5877] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 163.369063][ T5877] usb 2-1: USB disconnect, device number 6 [ 163.551952][ T7668] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 164.107039][ T5626] Bluetooth: hci2: command tx timeout [ 164.181207][ T7686] loop6: detected capacity change from 0 to 1024 [ 164.219034][ T7687] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 164.219061][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 164.219080][ T7687] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 164.219096][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 164.219179][ T7687] iwpm_send_hello: Unable to send a nlmsg [ 164.983237][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.983427][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.983577][ T7638] bridge_slave_0: entered allmulticast mode [ 164.991138][ T7638] bridge_slave_0: entered promiscuous mode [ 164.999085][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.999197][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.999351][ T7638] bridge_slave_1: entered allmulticast mode [ 165.002760][ T7638] bridge_slave_1: entered promiscuous mode [ 165.065234][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.069360][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.108777][ T7638] team0: Port device team_slave_0 added [ 165.112073][ T7638] team0: Port device team_slave_1 added [ 165.155174][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.155196][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.155229][ T7638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.161612][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.161630][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.161662][ T7638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.294249][ T7638] hsr_slave_0: entered promiscuous mode [ 165.298757][ T7638] hsr_slave_1: entered promiscuous mode [ 165.299540][ T7638] debugfs: 'hsr0' already exists in 'hsr' [ 165.299562][ T7638] Cannot create hsr debugfs directory [ 165.574475][ T7638] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.579577][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.580951][ T7638] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.594559][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.598318][ T7638] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.613459][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.616511][ T7638] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.637299][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.725359][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.749338][ T7638] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.756013][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.756096][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.781172][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.781292][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.186857][ T5626] Bluetooth: hci2: command tx timeout [ 166.218367][ T7638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.473002][ T7638] veth0_vlan: entered promiscuous mode [ 166.487448][ T7638] veth1_vlan: entered promiscuous mode [ 166.520481][ T7638] veth0_macvtap: entered promiscuous mode [ 166.525102][ T7638] veth1_macvtap: entered promiscuous mode [ 166.553299][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.568834][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.588189][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.627649][ T139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.648194][ T1008] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.649547][ T1008] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.688197][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.688222][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.728433][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.728463][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.087894][ T5877] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.152062][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.749'. [ 167.246700][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 167.247446][ T5877] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 167.248498][ T5877] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.248533][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 167.248569][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.301993][ T5877] usb 3-1: config 0 descriptor?? [ 167.726818][ T5760] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.734392][ T5877] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 167.880085][ T5760] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 167.881235][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.881271][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.881315][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.885164][ T5760] usb 2-1: config 0 descriptor?? [ 168.130648][ T5877] usb 3-1: USB disconnect, device number 4 [ 168.287967][ T5626] Bluetooth: hci2: command tx timeout [ 168.372842][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.372883][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.372910][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.372936][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.372961][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.372988][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.373014][ T5760] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 168.390392][ T5760] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 168.606170][ T5760] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 168.800654][ T5760] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 168.812214][ T5760] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 168.822973][ T5760] usb 2-1: USB disconnect, device number 7 [ 168.886701][ T5877] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 169.037374][ T5877] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 169.038466][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.038501][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.038544][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.043021][ T5877] usb 8-1: config 0 descriptor?? [ 169.302084][ T7790] [ 169.474977][ T5877] cp2112 0003:10C4:EA90.0009: unbalanced collection at end of report description [ 169.477522][ T5877] cp2112 0003:10C4:EA90.0009: parse failed [ 169.477699][ T5877] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -22 [ 169.679644][ T5877] usb 8-1: USB disconnect, device number 2 [ 169.933607][ T7816] loop6: detected capacity change from 0 to 4096 [ 169.975543][ T7816] NILFS (loop6): invalid segment: Checksum error in segment payload [ 169.975575][ T7816] NILFS (loop6): trying rollback from an earlier position [ 170.049978][ T7816] NILFS (loop6): recovery complete [ 170.056775][ T7819] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.096728][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.141586][ T7816] NILFS (loop6): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 170.207716][ T7824] loop3: detected capacity change from 0 to 1024 [ 170.209601][ T7824] EXT4-fs: Ignoring removed bh option [ 170.247622][ T29] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 170.249021][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.249059][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.249102][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.254457][ T29] usb 2-1: config 0 descriptor?? [ 170.346275][ T7824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.364676][ T5626] Bluetooth: hci2: command tx timeout [ 170.575942][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.692984][ T29] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 170.693022][ T29] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 170.693050][ T29] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 170.723404][ T29] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 170.885059][ T29] playstation 0003:054C:0DF2.000A: Invalid reportID received, expected 9 got 0 [ 170.885092][ T29] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 170.885148][ T29] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 170.885167][ T29] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 170.924171][ T29] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 171.006951][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.007802][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.094609][ T29] usb 2-1: USB disconnect, device number 8 [ 171.299241][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.306052][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.584763][ T7856] tap0: tun_chr_ioctl cmd 1074025677 [ 171.584853][ T7856] tap0: linktype set to 776 [ 171.587535][ T51] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.588480][ T51] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.588524][ T51] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.588566][ T51] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.753719][ T7869] loop2: detected capacity change from 0 to 256 [ 171.811070][ T7869] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 171.823180][ T7872] netlink: 27 bytes leftover after parsing attributes in process `syz.6.804'. [ 172.240381][ T919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.250950][ T7886] loop6: detected capacity change from 0 to 2048 [ 172.277649][ T7886] loop6: p2 p3 < > p4 < p5 > [ 172.277683][ T7886] loop6: partition table partially beyond EOD, truncated [ 172.300217][ T7886] loop6: p3 start 4225 is beyond EOD, truncated [ 172.318494][ T7890] loop1: detected capacity change from 0 to 256 [ 172.350396][ T5760] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 172.383529][ T7886] hfsplus: unable to find HFS+ superblock [ 172.388371][ T919] usb 5-1: Using ep0 maxpacket: 16 [ 172.389491][ T919] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 172.418566][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.418601][ T919] usb 5-1: Product: syz [ 172.418620][ T919] usb 5-1: Manufacturer: syz [ 172.418638][ T919] usb 5-1: SerialNumber: syz [ 172.502125][ T5760] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.505544][ T5760] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.505577][ T5760] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.519519][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.519550][ T5760] usb 4-1: SerialNumber: syz [ 172.575535][ T5760] hub 4-1:1.0: bad descriptor, ignoring hub [ 172.575566][ T5760] hub 4-1:1.0: probe with driver hub failed with error -5 [ 172.593740][ T5760] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.725867][ T919] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 172.746340][ T7898] loop6: detected capacity change from 0 to 512 [ 172.752893][ T7899] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 172.766800][ T919] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.767165][ T919] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 172.767215][ T919] usb 5-1: media controller created [ 172.780719][ T7898] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 172.780740][ T7898] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 172.824211][ T7898] EXT4-fs (loop6): 1 truncate cleaned up [ 172.843689][ T7898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.885385][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.014444][ T919] zl10353_read_register: readreg error (reg=127, ret==-71) [ 173.017997][ T5628] usb 4-1: USB disconnect, device number 2 [ 173.156667][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 173.247930][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.251323][ T919] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 173.282896][ T919] usb 5-1: USB disconnect, device number 7 [ 173.541890][ T7924] loop2: detected capacity change from 0 to 2048 [ 173.627462][ T7929] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.805458][ T7929] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 173.805494][ T7929] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 173.848377][ T7929] Remounting filesystem read-only [ 173.852947][ T5625] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 173.991867][ T7941] loop7: detected capacity change from 0 to 512 [ 173.996523][ T7941] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 173.996539][ T7941] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 174.031911][ T7944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.062766][ T7941] EXT4-fs (loop7): 1 truncate cleaned up [ 174.067838][ T7941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.200552][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.283453][ T7638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.360753][ T29] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 174.363082][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.363118][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.363162][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.377686][ T29] usb 3-1: config 0 descriptor?? [ 174.429183][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.843'. [ 174.460481][ T7961] tipc: Started in network mode [ 174.460521][ T7961] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 174.843972][ T29] hid_parser_main: 2 callbacks suppressed [ 174.844000][ T29] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 174.844030][ T29] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 174.844057][ T29] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 174.844083][ T29] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 174.844110][ T29] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 174.902099][ T29] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 174.946978][ T919] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 175.097208][ T919] usb 8-1: Using ep0 maxpacket: 8 [ 175.098986][ T919] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.100078][ T919] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 175.100117][ T919] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.100148][ T919] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.100178][ T919] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.100228][ T919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.233710][ T29] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71 [ 175.233746][ T29] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71 [ 175.233802][ T29] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 175.233822][ T29] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 175.277696][ T29] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 175.286469][ T29] usb 3-1: USB disconnect, device number 5 [ 175.331488][ T919] usb 8-1: GET_CAPABILITIES returned 0 [ 175.331543][ T919] usbtmc 8-1:16.0: can't read capabilities [ 175.548665][ T919] usb 8-1: USB disconnect, device number 3 [ 175.710184][ T63] rpcbind: server 127.0.0.1 not responding, timed out [ 175.894356][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 176.128649][ T8022] loop1: detected capacity change from 0 to 4096 [ 176.141669][ T8022] EXT4-fs (loop1): Test dummy encryption mode enabled [ 176.164373][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.250292][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.495819][ T8037] loop4: detected capacity change from 0 to 512 [ 176.512913][ T8037] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 176.512934][ T8037] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.559931][ T8037] EXT4-fs (loop4): 1 truncate cleaned up [ 176.571798][ T8037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.680595][ T8040] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.825885][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 176.825927][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 176.886270][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.914022][ T8050] loop2: detected capacity change from 0 to 4096 [ 176.947404][ T139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.947821][ T139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.947863][ T139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.957013][ T139] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.013667][ T8050] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 177.091903][ T8050] ntfs3(loop2): ino=1a, mi_enum_attr [ 177.092045][ T8050] ntfs3(loop2): ino=1a, mi_enum_attr [ 177.092069][ T8050] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 177.345760][ T8050] ntfs3(loop2): ino=1a, mi_enum_attr [ 177.850186][ T8082] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 177.945368][ T8090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.897'. [ 177.960273][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 177.960338][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'. [ 178.096936][ T5877] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 178.249391][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 178.252594][ T5877] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 178.255029][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.255069][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.307881][ T5877] usb 7-1: config 0 descriptor?? [ 178.386849][ T29] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 178.568975][ T29] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 178.571372][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.571438][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.721494][ T5877] kye 0003:0458:4018.000C: unknown main item tag 0x0 [ 178.721544][ T5877] kye 0003:0458:4018.000C: unknown main item tag 0x0 [ 178.721563][ T5877] kye 0003:0458:4018.000C: unknown main item tag 0x0 [ 178.721580][ T5877] kye 0003:0458:4018.000C: unknown main item tag 0x0 [ 178.721597][ T5877] kye 0003:0458:4018.000C: unknown main item tag 0x0 [ 178.729438][ T5877] kye 0003:0458:4018.000C: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.6-1/input0 [ 178.787958][ T29] dvb_ttusb_budget: ttusb_init_controller: error [ 178.787981][ T29] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.873839][ T29] DVB: Unable to find symbol stv0299_attach() [ 178.916232][ T29] DVB: Unable to find symbol tda8083_attach() [ 178.916267][ T29] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 178.934410][ T29] usb 7-1: USB disconnect, device number 8 [ 178.991229][ T919] usb 4-1: USB disconnect, device number 3 [ 179.997874][ T5873] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 180.150432][ T5873] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.156413][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.167431][ T5873] usb 2-1: config 0 descriptor?? [ 180.190450][ T5873] cp210x 2-1:0.0: cp210x converter detected [ 180.247417][ T8132] ip_tables: iptables: counters copy to user failed while replacing table [ 180.304455][ T8141] loop4: detected capacity change from 0 to 512 [ 180.308541][ T8141] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 180.308560][ T8141] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.326948][ T8141] EXT4-fs (loop4): 1 truncate cleaned up [ 180.334604][ T8141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.385586][ T8141] EXT4-fs (loop4): shut down requested (1) [ 180.496696][ T919] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 180.505158][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.540034][ T8149] loop3: detected capacity change from 0 to 256 [ 180.653874][ T919] usb 7-1: unable to get BOS descriptor or descriptor too short [ 180.653931][ T919] usb 7-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 180.655305][ T919] usb 7-1: config 2 has an invalid interface number: 69 but max is 0 [ 180.655334][ T919] usb 7-1: config 2 has no interface number 0 [ 180.655365][ T919] usb 7-1: config 2 interface 69 has no altsetting 0 [ 180.694078][ T5873] usb 2-1: cp210x converter now attached to ttyUSB0 [ 180.703854][ T5628] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 180.716688][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.716720][ T919] usb 7-1: Product: syz [ 180.716738][ T919] usb 7-1: Manufacturer: syz [ 180.716757][ T919] usb 7-1: SerialNumber: syz [ 180.818284][ T5760] usb 2-1: USB disconnect, device number 9 [ 180.847049][ T5628] usb 8-1: Using ep0 maxpacket: 32 [ 180.848438][ T5628] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 180.849798][ T5628] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 180.849827][ T5628] usb 8-1: config 0 has no interface number 0 [ 180.849898][ T5628] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.849951][ T5628] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 180.849983][ T5628] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.850044][ T5628] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.855408][ T5628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.855437][ T5628] usb 8-1: Product: syz [ 180.855484][ T5628] usb 8-1: Manufacturer: syz [ 180.855501][ T5628] usb 8-1: SerialNumber: syz [ 180.914581][ T5760] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.976484][ T5760] cp210x 2-1:0.0: device disconnected [ 181.008688][ T5628] usb 8-1: config 0 descriptor?? [ 181.038084][ T5628] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input14 [ 181.120162][ T8161] loop4: detected capacity change from 0 to 256 [ 181.210562][ T919] snd_usb_podhd 7-1:2.69: Line 6 POD HD300 found [ 181.268375][ T5873] usb 8-1: USB disconnect, device number 4 [ 181.401026][ T919] snd_usb_podhd 7-1:2.69: cannot get proper max packet size [ 181.401356][ T919] snd_usb_podhd 7-1:2.69: Line 6 POD HD300 now disconnected [ 181.405482][ T919] snd_usb_podhd 7-1:2.69: probe with driver snd_usb_podhd failed with error -22 [ 181.555782][ T8175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.606211][ T8178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.620963][ T5877] usb 7-1: USB disconnect, device number 9 [ 181.697136][ T8181] loop3: detected capacity change from 0 to 512 [ 181.701095][ T8181] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 181.701115][ T8181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.746385][ T8181] EXT4-fs (loop3): 1 truncate cleaned up [ 181.757071][ T8181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.808602][ T919] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 181.967463][ T919] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.968732][ T919] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x3B, changing to 0xB [ 181.968768][ T919] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 181.968801][ T919] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid maxpacket 246, setting to 64 [ 181.968833][ T919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.974754][ T919] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.974785][ T919] usb 3-1: Product: syz [ 181.974804][ T919] usb 3-1: Manufacturer: syz [ 181.974822][ T919] usb 3-1: SerialNumber: syz [ 182.061080][ T919] usb 3-1: config 0 descriptor?? [ 182.061853][ T8173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.096409][ T919] usb 3-1: selecting invalid altsetting 0 [ 182.104537][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.303988][ T919] usb 3-1: USB disconnect, device number 6 [ 182.426450][ T8206] veth0: entered promiscuous mode [ 182.431495][ T8205] veth0: left promiscuous mode [ 182.591998][ T8208] loop4: detected capacity change from 0 to 4096 [ 182.675913][ T8216] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.908793][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.954'. [ 182.911151][ T13] IPVS: starting estimator thread 0... [ 182.996737][ T8225] IPVS: using max 23 ests per chain, 55200 per kthread [ 183.011278][ T8227] block2mtd: illegal erase size [ 183.091129][ T8229] input: syz0 as /devices/virtual/input/input15 [ 183.182518][ T8232] scsi_strcpy_devinfo: model string 'mo劌rrdel' is too long [ 183.598696][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 183.598736][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 183.640666][ T8253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.968'. [ 183.654497][ T8254] loop3: detected capacity change from 0 to 7 [ 183.658798][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.658983][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.661316][ T8250] ip6gretap1: entered allmulticast mode [ 183.661478][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.661553][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.661749][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.661819][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.662114][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.662184][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.672395][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.672479][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.679299][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.679379][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.682584][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.682680][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.684677][ T8254] ldm_validate_partition_table(): Disk read failed. [ 183.685131][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.685205][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.686094][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.686196][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.687460][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.687534][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.688518][ T8254] Dev loop3: unable to read RDB block 0 [ 183.689397][ T8254] loop3: unable to read partition table [ 183.689643][ T8254] loop3: partition table beyond EOD, truncated [ 183.693155][ T8254] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 183.990675][ T8264] program syz.2.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.135478][ T8268] loop3: detected capacity change from 0 to 2048 [ 184.199756][ T8268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.549202][ T919] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.696699][ T919] usb 5-1: Using ep0 maxpacket: 16 [ 184.698954][ T919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.699038][ T919] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 184.700374][ T919] usb 5-1: config 2 has an invalid interface number: 200 but max is 0 [ 184.700402][ T919] usb 5-1: config 2 has no interface number 0 [ 184.700435][ T919] usb 5-1: config 2 interface 200 has no altsetting 0 [ 184.704004][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.704032][ T919] usb 5-1: Product: syz [ 184.704051][ T919] usb 5-1: Manufacturer: syz [ 184.704069][ T919] usb 5-1: SerialNumber: syz [ 184.763866][ T30] audit: type=1400 audit(1792757928.274:59): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8293 comm="syz.6.986" [ 185.056738][ T5877] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 185.208520][ T5877] usb 8-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 185.210696][ T5877] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.210750][ T5877] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 185.210775][ T5877] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 185.210800][ T5877] usb 8-1: config 1 interface 1 has no altsetting 0 [ 185.210833][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.212459][ T8307] loop2: detected capacity change from 0 to 512 [ 185.223489][ T8307] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 185.223510][ T8307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.237218][ T919] gspca_main: pac7311-2.14.0 probing 093a:260e [ 185.241863][ T8298] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 185.242022][ T8298] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 185.274471][ T8307] EXT4-fs (loop2): 1 truncate cleaned up [ 185.283619][ T8307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.486419][ T5626] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 185.500369][ T5877] usb 8-1: USB disconnect, device number 5 [ 185.647923][ T919] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 185.648027][ T919] pac7311 5-1:2.200: probe with driver pac7311 failed with error -71 [ 185.681682][ T919] usb 5-1: USB disconnect, device number 8 [ 185.835728][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.356222][ T8345] loop4: detected capacity change from 0 to 1024 [ 186.360486][ T8345] EXT4-fs: quotafile must be on filesystem root [ 186.472620][ T8350] loop2: detected capacity change from 0 to 512 [ 186.495021][ T8350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 186.495154][ T8350] System zones: 1-12 [ 186.514271][ T8350] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1008: missing EA_INODE flag [ 186.514305][ T8350] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 186.529465][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 186.529491][ C0] EXT4-fs (loop2): initial error at time 1792757930: ext4_xattr_inode_iget:437: inode 12 [ 186.529526][ C0] EXT4-fs (loop2): last error at time 1792757930: ext4_xattr_inode_iget:437: inode 12 [ 186.568562][ T8350] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1008: error while reading EA inode 12 err=-117 [ 186.568684][ T8350] loop2: lost filesystem error report for type 5 error -117 [ 186.569665][ T8350] EXT4-fs (loop2): 1 orphan inode deleted [ 186.571666][ T8350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.643552][ T8350] fscrypt (loop2, inode 15): Mutually exclusive encryption flags (0x1a) [ 186.725992][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.008135][ T8361] loop2: detected capacity change from 0 to 512 [ 187.042397][ T8361] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 187.042420][ T8361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.072428][ T8361] EXT4-fs (loop2): 1 truncate cleaned up [ 187.131780][ T8361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.501388][ T8379] loop6: detected capacity change from 0 to 8 [ 187.621010][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.252143][ T8414] loop3: detected capacity change from 0 to 256 [ 188.521641][ T8421] loop1: detected capacity change from 0 to 512 [ 188.539009][ T8421] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 188.539032][ T8421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.586092][ T8421] EXT4-fs (loop1): 1 truncate cleaned up [ 188.603880][ T8421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.016121][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.646878][ T8465] netlink: 'syz.7.1056': attribute type 6 has an invalid length. [ 190.168796][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.319178][ T5873] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 190.320437][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.320486][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.320515][ T5873] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.320562][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.342548][ T5873] pn533_usb 3-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint syzkaller syzkaller login: [ 190.596053][ T5636] usb 3-1: USB disconnect, device number 7 [ 190.712124][ T8498] loop4: detected capacity change from 0 to 1024 [ 190.828410][ T8498] hfsplus: invalid length 1280 has been corrected to 255 [ 190.906381][ T8501] hfsplus: invalid length 1280 has been corrected to 255 [ 191.078417][ T5636] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.228868][ T5636] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 191.231558][ T5636] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 191.231590][ T5636] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 191.231613][ T5636] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 191.231637][ T5636] usb 3-1: config 220 has no interface number 2 [ 191.231735][ T5636] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.231764][ T5636] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 191.231798][ T5636] usb 3-1: config 220 interface 0 has no altsetting 0 [ 191.231821][ T5636] usb 3-1: config 220 interface 76 has no altsetting 0 [ 191.231845][ T5636] usb 3-1: config 220 interface 1 has no altsetting 0 [ 191.245911][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.245958][ T5636] usb 3-1: Product: syz [ 191.245976][ T5636] usb 3-1: Manufacturer: syz [ 191.245994][ T5636] usb 3-1: SerialNumber: syz [ 191.544535][ T5636] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 191.544577][ T5636] uvcvideo 3-1:220.0: No valid video chain found. [ 191.544648][ T5636] usb 3-1: selecting invalid altsetting 0 [ 191.658861][ T5636] usb 3-1: selecting invalid altsetting 0 [ 191.658899][ T5636] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 191.687590][ T5636] usb 3-1: USB disconnect, device number 8 [ 191.817478][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 192.128353][ T8534] loop1: detected capacity change from 0 to 64 [ 192.272527][ T1008] IPVS: starting estimator thread 0... [ 192.288370][ T8534] hfs: request for non-existent node 65538 in B*Tree [ 192.288392][ T8534] hfs: request for non-existent node 65538 in B*Tree [ 192.304223][ T8534] hfs: fail to find leaf node: node ID 65538 [ 192.356760][ T8539] IPVS: using max 25 ests per chain, 60000 per kthread [ 192.467972][ T30] audit: type=1326 audit(1792757935.984:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.468134][ T30] audit: type=1326 audit(1792757935.984:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.470579][ T30] audit: type=1326 audit(1792757935.984:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.471083][ T30] audit: type=1326 audit(1792757935.984:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.471139][ T30] audit: type=1326 audit(1792757935.984:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.472766][ T30] audit: type=1326 audit(1792757935.984:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.472819][ T30] audit: type=1326 audit(1792757935.984:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.472868][ T30] audit: type=1326 audit(1792757935.984:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.472920][ T30] audit: type=1326 audit(1792757935.984:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.472972][ T30] audit: type=1326 audit(1792757935.984:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8f79f559 code=0x7ffc0000 [ 192.792093][ T8551] program syz.6.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.932022][ T8529] loop3: detected capacity change from 0 to 40427 [ 192.943274][ T8529] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 192.943302][ T8529] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 192.945224][ T8529] F2FS-fs (loop3): build fault injection rate: 2 [ 192.945245][ T8529] F2FS-fs (loop3): build fault injection type: 0x1f8 [ 192.970980][ T8529] F2FS-fs (loop3): invalid crc value [ 193.189762][ T8567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.214716][ T8529] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 193.243122][ T8529] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.243155][ T8529] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.352215][ T8558] f2fs_ckpt-7:3: attempt to access beyond end of device [ 193.352215][ T8558] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.362410][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: f2fs_ckpt-7:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.362451][ T8558] Tainted: [L]=SOFTLOCKUP [ 193.362461][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 193.362477][ T8558] Call Trace: [ 193.362487][ T8558] [ 193.362498][ T8558] dump_stack_lvl+0xe8/0x150 [ 193.362545][ T8558] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 193.362587][ T8558] f2fs_write_end_bio+0x1211/0x16e0 [ 193.362632][ T8558] ? blkg_put+0x22/0x240 [ 193.362689][ T8558] __submit_merged_bio+0x258/0x6a0 [ 193.362722][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.362754][ T8558] ? rcu_is_watching+0x16/0xb0 [ 193.362799][ T8558] __submit_merged_write_cond+0x3c9/0x4e0 [ 193.362845][ T8558] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 193.362897][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.362940][ T8558] f2fs_write_data_pages+0x2a1d/0x36f0 [ 193.363032][ T8558] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.363087][ T8558] ? arch_stack_walk+0x11b/0x150 [ 193.363156][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363186][ T8558] ? add_lock_to_list+0xc7/0x100 [ 193.363226][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363257][ T8558] ? __lock_acquire+0x1511/0x2de0 [ 193.363319][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363350][ T8558] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.363397][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363433][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363464][ T8558] ? do_raw_spin_unlock+0xf5/0x200 [ 193.363505][ T8558] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.363546][ T8558] do_writepages+0x338/0x560 [ 193.363584][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363618][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363654][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363684][ T8558] ? do_raw_spin_unlock+0xf5/0x200 [ 193.363730][ T8558] filemap_fdatawrite+0x1e9/0x2f0 [ 193.363772][ T8558] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 193.363854][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363888][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.363925][ T8558] ? do_raw_spin_unlock+0xf5/0x200 [ 193.363976][ T8558] f2fs_sync_dirty_inodes+0x30e/0x830 [ 193.364037][ T8558] f2fs_write_checkpoint+0xa38/0x2710 [ 193.364119][ T8558] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 193.364159][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364236][ T8558] ? __pfx_down_write+0x10/0x10 [ 193.364277][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364315][ T8558] ? rcu_is_watching+0x16/0xb0 [ 193.364351][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364388][ T8558] __checkpoint_and_complete_reqs+0x135/0x480 [ 193.364430][ T8558] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 193.364476][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364511][ T8558] ? schedule+0x90/0x2b0 [ 193.364555][ T8558] issue_checkpoint_thread+0xd5/0x270 [ 193.364596][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364632][ T8558] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 193.364673][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364706][ T8558] ? __pfx_autoremove_wake_function+0x10/0x10 [ 193.364745][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.364776][ T8558] ? __kthread_parkme+0x71/0x1f0 [ 193.364818][ T8558] ? __kthread_parkme+0x199/0x1f0 [ 193.364865][ T8558] kthread+0x38b/0x480 [ 193.364893][ T8558] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 193.364934][ T8558] ? __pfx_kthread+0x10/0x10 [ 193.364963][ T8558] ret_from_fork+0x514/0xb70 [ 193.365001][ T8558] ? __pfx_ret_from_fork+0x10/0x10 [ 193.365029][ T8558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.365060][ T8558] ? __switch_to+0xc78/0x1410 [ 193.365104][ T8558] ? __pfx_kthread+0x10/0x10 [ 193.365133][ T8558] ret_from_fork_asm+0x1a/0x30 [ 193.365181][ T8558] [ 193.386104][ T8558] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 193.629588][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.736753][ T5873] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 193.890019][ T5873] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 193.896384][ T5873] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 66, using maximum allowed: 30 [ 193.896433][ T5873] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.896461][ T5873] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 193.896502][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.896539][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.909447][ T5873] usb 5-1: config 0 descriptor?? [ 194.134367][ T8591] loop7: detected capacity change from 0 to 256 [ 194.283185][ T8594] loop1: detected capacity change from 0 to 1024 [ 194.300691][ T8594] hfsplus: failed to load extents file [ 194.340662][ T5873] hid_parser_main: 19 callbacks suppressed [ 194.342278][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342315][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342342][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342368][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342394][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342420][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342445][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342471][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342504][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.342530][ T5873] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 194.361657][ T5873] elecom 0003:056E:00FE.000D: hidraw0: USB HID vff.ff Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 194.592167][ T5873] usb 5-1: USB disconnect, device number 9 [ 194.684227][ T8601] fido_id[8601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.896887][ T8612] loop2: detected capacity change from 0 to 4096 [ 194.930719][ T8616] loop6: detected capacity change from 0 to 512 [ 194.943410][ T8616] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 194.943431][ T8616] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.999177][ T8612] NILFS (loop2): invalid segment: Checksum error in segment payload [ 194.999207][ T8612] NILFS (loop2): trying rollback from an earlier position [ 195.004173][ T8616] EXT4-fs (loop6): 1 truncate cleaned up [ 195.021257][ T8612] NILFS (loop2): recovery complete [ 195.022465][ T8622] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.038333][ T8616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.071251][ T8616] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.1121: Logical block already allocated [ 195.072096][ T8616] EXT4-fs (loop6): Remounting filesystem read-only [ 195.101106][ T8612] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 4096 [ 195.101138][ T8612] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=12) [ 195.214241][ T8612] Remounting filesystem read-only [ 195.214301][ T8612] NILFS (loop2): error -5 cleaning segments [ 195.331878][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.634154][ T8612] NILFS (loop2): error -30 cleaning segments [ 195.726010][ T8640] overlayfs: fs on './proc' does not support file handles, falling back to index=off,nfs_export=off. [ 195.726038][ T8640] overlayfs: maximum fs stacking depth exceeded [ 195.753284][ T5625] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 195.779886][ T8644] tap0: tun_chr_ioctl cmd 1074025678 [ 195.779913][ T8644] tap0: group set to 8388641 [ 196.066025][ T8655] random: crng reseeded on system resumption [ 196.574269][ T8647] loop7: detected capacity change from 0 to 40427 [ 196.581453][ T8647] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 196.581486][ T8647] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 196.585599][ T8647] F2FS-fs (loop7): invalid crc value [ 196.655311][ T8683] loop6: detected capacity change from 0 to 16 [ 196.668719][ T8683] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 196.717693][ T5634] udevd[5634]: incorrect cramfs checksum on /dev/loop6 [ 196.750966][ T8647] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 196.774805][ T8647] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 196.774837][ T8647] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 196.830379][ T5634] udevd[5634]: incorrect cramfs checksum on /dev/loop6 [ 196.893026][ T7638] syz-executor: attempt to access beyond end of device [ 196.893026][ T7638] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.901618][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 196.901657][ T7638] Tainted: [L]=SOFTLOCKUP [ 196.901667][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 196.901683][ T7638] Call Trace: [ 196.901694][ T7638] [ 196.901705][ T7638] dump_stack_lvl+0xe8/0x150 [ 196.901751][ T7638] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 196.901794][ T7638] f2fs_write_end_bio+0x1211/0x16e0 [ 196.901840][ T7638] ? blkg_put+0x22/0x240 [ 196.901898][ T7638] __submit_merged_bio+0x258/0x6a0 [ 196.901931][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.901963][ T7638] ? rcu_is_watching+0x16/0xb0 [ 196.902007][ T7638] __submit_merged_write_cond+0x3c9/0x4e0 [ 196.902054][ T7638] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 196.902106][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902148][ T7638] f2fs_write_data_pages+0x2a1d/0x36f0 [ 196.902234][ T7638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.902270][ T7638] ? is_bpf_text_address+0x26/0x2b0 [ 196.902325][ T7638] ? arch_stack_walk+0xfb/0x150 [ 196.902397][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902428][ T7638] ? add_lock_to_list+0xc7/0x100 [ 196.902468][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902503][ T7638] ? __lock_acquire+0x1511/0x2de0 [ 196.902566][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902598][ T7638] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.902646][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902682][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902713][ T7638] ? do_raw_spin_unlock+0xf5/0x200 [ 196.902755][ T7638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.902796][ T7638] do_writepages+0x338/0x560 [ 196.902834][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902868][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902904][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.902936][ T7638] ? do_raw_spin_unlock+0xf5/0x200 [ 196.902982][ T7638] filemap_fdatawrite+0x1e9/0x2f0 [ 196.903024][ T7638] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 196.903106][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.903140][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.903178][ T7638] ? do_raw_spin_unlock+0xf5/0x200 [ 196.903224][ T7638] f2fs_sync_dirty_inodes+0x30e/0x830 [ 196.903285][ T7638] f2fs_write_checkpoint+0xa38/0x2710 [ 196.903326][ T7638] ? __lock_acquire+0x747/0x2de0 [ 196.903395][ T7638] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 196.903435][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.903537][ T7638] kill_f2fs_super+0x2dd/0x700 [ 196.903584][ T7638] ? rcu_do_enqueue+0x616/0x870 [ 196.903614][ T7638] ? lockdep_hardirqs_on+0x7b/0x110 [ 196.903651][ T7638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 196.903712][ T7638] ? __pfx_call_rcu+0x10/0x10 [ 196.903756][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.903787][ T7638] ? shrinker_free+0x2a7/0x3b0 [ 196.903828][ T7638] deactivate_locked_super+0xbe/0x110 [ 196.903861][ T7638] cleanup_mnt+0x204/0x2a0 [ 196.903902][ T7638] task_work_run+0x1d9/0x260 [ 196.903937][ T7638] ? __pfx_task_work_run+0x10/0x10 [ 196.903980][ T7638] exit_to_user_mode_loop+0x204/0x770 [ 196.904012][ T7638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.904044][ T7638] ? rcu_is_watching+0x16/0xb0 [ 196.904085][ T7638] do_syscall_64+0x328/0x520 [ 196.904122][ T7638] ? trace_irq_disable+0x3b/0x140 [ 196.904154][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.904190][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.904217][ T7638] RIP: 0033:0x7fda689a0797 [ 196.904242][ T7638] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 196.904264][ T7638] RSP: 002b:00007ffea173ebb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 196.904292][ T7638] RAX: 0000000000000000 RBX: 00007fda68a35f63 RCX: 00007fda689a0797 [ 196.904311][ T7638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea173ec70 [ 196.904328][ T7638] RBP: 00007ffea173ec70 R08: 00007ffea173fc70 R09: 00000000ffffffff [ 196.904347][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea173fd00 [ 196.904364][ T7638] R13: 00007fda68a35f63 R14: 00000000000300ad R15: 00007ffea173fd40 [ 196.904407][ T7638] [ 196.924797][ T7638] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 197.621800][ T919] kernel write not supported for file /snd/seq (pid: 919 comm: kworker/0:2) [ 197.821934][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'. [ 197.833937][ T8709] ip6gretap1: entered allmulticast mode [ 197.835579][ T8709] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 197.836351][ T8709] batman_adv: batadv0: Adding interface: ip6gretap1 [ 197.836366][ T8709] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.836403][ T8709] batman_adv: batadv0: Interface activated: ip6gretap1 [ 197.920636][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 197.920659][ T30] audit: type=1400 audit(1792757941.434:80): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8711 comm="syz.7.1152" name="p" offset=58 [ 197.986762][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.105915][ T8721] program syz.1.1168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.137002][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 198.137821][ T29] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 198.139389][ T29] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 198.139419][ T29] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 198.139444][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 198.139477][ T29] usb 3-1: config 1 has no interface number 0 [ 198.139520][ T29] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.139552][ T29] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 198.139599][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.162590][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 198.400640][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 198.768378][ T8752] loop7: detected capacity change from 0 to 7 [ 198.817549][ T5877] usb 3-1: USB disconnect, device number 9 [ 198.836085][ T5877] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 198.944145][ T8752] Dev loop7: unable to read RDB block 7 [ 198.944189][ T8752] loop7: unable to read partition table [ 198.944400][ T8752] loop7: partition table beyond EOD, truncated [ 198.944442][ T8752] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 199.027527][ T6090] buffer_io_error: 10 callbacks suppressed [ 199.027553][ T6090] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.627928][ T5639] Bluetooth: hci2: command tx timeout [ 199.764311][ T8788] loop7: detected capacity change from 0 to 64 [ 199.777255][ T5877] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 199.926657][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 199.927523][ T5877] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 199.931155][ T5877] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.931184][ T5877] usb 7-1: config 0 has no interface number 0 [ 199.935018][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.935047][ T5877] usb 7-1: Product: syz [ 199.935066][ T5877] usb 7-1: Manufacturer: syz [ 199.935084][ T5877] usb 7-1: SerialNumber: syz [ 199.993021][ T5877] usb 7-1: config 0 descriptor?? [ 200.005125][ T5877] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.232542][ T5877] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.255708][ T5877] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 200.562108][ T8822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 200.562583][ T8822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1212'. [ 200.649222][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 200.652427][ T5877] usb 7-1: USB disconnect, device number 10 [ 200.675971][ T5877] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.704872][ T5877] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 200.718310][ T5877] quatech2 7-1:0.51: device disconnected [ 200.718900][ T8824] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.813712][ T8828] loop1: detected capacity change from 0 to 22 [ 200.816001][ T8828] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 200.853847][ T8828] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 201.314810][ T8847] loop7: detected capacity change from 0 to 512 [ 201.323269][ T8847] EXT4-fs: Ignoring removed i_version option [ 201.323294][ T8847] EXT4-fs: Ignoring removed nobh option [ 201.327881][ T8847] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 201.327897][ T8847] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 201.359913][ T8847] EXT4-fs (loop7): 1 truncate cleaned up [ 201.364294][ T8847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.430619][ T1008] IPVS: stopping estimator thread 0... [ 201.581523][ T7638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.916719][ T5628] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 202.044053][ T8888] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1242'. [ 202.044087][ T8888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1242'. [ 202.068488][ T5628] usb 8-1: Using ep0 maxpacket: 8 [ 202.076647][ T5628] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 202.084440][ T5628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.125176][ T5628] pvrusb2: Hardware description: Terratec Grabster AV400 [ 202.125197][ T5628] pvrusb2: ********** [ 202.125206][ T5628] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 202.125221][ T5628] pvrusb2: Important functionality might not be entirely working. [ 202.125233][ T5628] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 202.125247][ T5628] pvrusb2: ********** [ 202.220255][ T8890] loop3: detected capacity change from 0 to 1764 [ 202.327390][ T2362] pvrusb2: Invalid write control endpoint [ 202.554391][ T2362] pvrusb2: Invalid write control endpoint [ 202.554411][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 202.554424][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 202.554435][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 202.554448][ T2362] pvrusb2: Device being rendered inoperable [ 202.564696][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 202.564793][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 202.567284][ T8868] pvrusb2: Attempted to execute control transfer when device not ok [ 202.578282][ T5628] usb 8-1: USB disconnect, device number 6 [ 202.625209][ T2362] pvrusb2: Attached sub-driver cx25840 [ 202.625229][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 202.625242][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 202.960984][ T8919] Attempt to restore checkpoint with obsolete wellknown handles [ 203.161576][ T8929] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 203.397166][ T5628] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 203.421291][ T8941] loop4: detected capacity change from 0 to 128 [ 203.452319][ T8945] loop7: detected capacity change from 0 to 256 [ 203.464384][ T30] audit: type=1800 audit(1792757946.974:81): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1268" name="file1" dev="loop4" ino=1048738 res=0 errno=-22 [ 203.569728][ T5628] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 203.571415][ T5628] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.571472][ T5628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.678430][ T5628] as10x_usb: device has been detected [ 203.679309][ T5628] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 203.760711][ T8949] loop2: detected capacity change from 0 to 256 [ 203.789617][ T5628] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 203.839060][ T8930] ------------[ cut here ]------------ [ 203.839079][ T8930] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 203.839089][ T8930] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: syz.6.1259/8930 [ 203.860923][ T8930] Modules linked in: [ 203.864840][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.6.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.877798][ T8930] Tainted: [L]=SOFTLOCKUP [ 203.882128][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 203.892402][ T8930] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 203.898048][ T8930] Code: fb 7c 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 83 e9 83 05 00 75 13 48 8d 3d 06 e7 86 05 48 c7 c6 e0 24 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 203.918672][ T8930] RSP: 0018:ffffc9000336f6a0 EFLAGS: 00010246 [ 203.924757][ T8930] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 203.933325][ T8930] RDX: ffffc90003511000 RSI: ffffffff8c0d24e0 RDI: ffffffff917ff970 [ 203.941601][ T8930] RBP: ffffc9000336f840 R08: ffffffff917cfbe3 R09: 1ffffffff22f9f7c [ 203.950363][ T8930] R10: dffffc0000000000 R11: fffffbfff22f9f7d R12: ffff88802174c010 [ 203.958674][ T8930] R13: 0000000000000000 R14: 1ffff9200066dee8 R15: 0000000000000000 [ 203.966808][ T8930] FS: 00007f5c9da526c0(0000) GS:ffff888123a52000(0000) knlGS:0000000000000000 [ 203.975846][ T8930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.976518][ T8953] loop4: detected capacity change from 0 to 128 [ 203.988763][ T8930] CR2: 00007f4437fba000 CR3: 0000000055b41000 CR4: 0000000000350ef0 [ 203.996800][ T8930] Call Trace: [ 204.000073][ T8930] [ 204.003016][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.008687][ T8930] ? __lock_acquire+0x747/0x2de0 [ 204.013640][ T8930] ? as102_stream_ctrl+0x27/0xc0 [ 204.019706][ T8930] ? trace_contention_end+0x3d/0x140 [ 204.025411][ T8930] ? __pfx___mutex_lock+0x10/0x10 [ 204.030533][ T8930] ? __mutex_lock+0x305/0x15a0 [ 204.035328][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.041006][ T8930] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.046714][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.052369][ T8930] ? lock_acquire+0x115/0x350 [ 204.057121][ T8930] as102_stream_ctrl+0x27/0xc0 [ 204.061905][ T8930] __dvb_frontend_open+0x2e9/0xca0 [ 204.067094][ T8930] ? dvb_frontend_open+0x1ce/0x870 [ 204.072229][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.077911][ T8930] ? down_read+0x2b9/0x320 [ 204.082379][ T8930] ? __pfx_dvb_frontend_open+0x10/0x10 [ 204.087922][ T8930] dvb_device_open+0x24f/0x340 [ 204.092715][ T8930] chrdev_open+0x4d9/0x600 [ 204.097203][ T8930] ? __pfx_chrdev_open+0x10/0x10 [ 204.102161][ T8930] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 204.108663][ T8930] ? devcgroup_check_permission+0x31/0x8f0 [ 204.114500][ T8930] ? __pfx_chrdev_open+0x10/0x10 [ 204.119479][ T8930] do_dentry_open+0x80e/0x1360 [ 204.125416][ T8930] vfs_open_consume+0x4a/0x350 [ 204.130782][ T8930] ? path_openat+0x16e1/0x20f0 [ 204.135590][ T8930] path_openat+0x16fc/0x20f0 [ 204.140265][ T8930] do_file_open+0x23e/0x4a0 [ 204.144789][ T8930] ? __pfx_do_file_open+0x10/0x10 [ 204.149897][ T8930] ? _raw_spin_unlock+0x28/0x50 [ 204.154785][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.160493][ T8930] ? alloc_fd+0x6af/0x760 [ 204.164846][ T8930] do_sys_openat2+0x115/0x200 [ 204.169624][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.175287][ T8930] ? __se_sys_futex+0x3a8/0x450 [ 204.180229][ T8930] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.185511][ T8930] ? rcu_is_watching+0x16/0xb0 [ 204.190484][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.196149][ T8930] __x64_sys_openat+0x138/0x170 [ 204.201080][ T8930] do_syscall_64+0x166/0x520 [ 204.205694][ T8930] ? trace_irq_disable+0x3b/0x140 [ 204.208590][ T8953] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.208936][ T8953] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.234470][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.240587][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.246517][ T8930] RIP: 0033:0x7f5c9cb5fd8e [ 204.250997][ T8930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.270865][ T8930] RSP: 002b:00007f5c9da51b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.279332][ T8930] RAX: ffffffffffffffda RBX: 00007f5c9da526c0 RCX: 00007f5c9cb5fd8e [ 204.287338][ T8930] RDX: 0000000000000802 RSI: 00007f5c9da51c00 RDI: ffffffffffffff9c [ 204.295320][ T8930] RBP: 00007f5c9da51c00 R08: 0000000000000000 R09: 0000000000000000 [ 204.303339][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 204.311353][ T8930] R13: 00007f5c9ce26038 R14: 00007f5c9ce25fa0 R15: 00007ffcbd231688 [ 204.319400][ T8930] [ 204.322429][ T8930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.329713][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.6.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.340673][ T8930] Tainted: [L]=SOFTLOCKUP [ 204.344995][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 204.355083][ T8930] Call Trace: [ 204.358361][ T8930] [ 204.361288][ T8930] vpanic+0x56d/0xa60 [ 204.365287][ T8930] ? __pfx__printk+0x10/0x10 [ 204.369879][ T8930] ? __pfx_vpanic+0x10/0x10 [ 204.374393][ T8930] ? is_bpf_text_address+0x292/0x2b0 [ 204.379690][ T8930] ? is_bpf_text_address+0x26/0x2b0 [ 204.384907][ T8930] panic+0xc5/0xd0 [ 204.388646][ T8930] ? __pfx_panic+0x10/0x10 [ 204.393090][ T8930] __warn+0x315/0x4c0 [ 204.397091][ T8930] ? __mutex_lock+0x132a/0x15a0 [ 204.401962][ T8930] ? __mutex_lock+0x132a/0x15a0 [ 204.406828][ T8930] __report_bug+0x276/0x570 [ 204.411345][ T8930] ? __mutex_lock+0x132a/0x15a0 [ 204.416204][ T8930] ? __pfx___report_bug+0x10/0x10 [ 204.421243][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.426879][ T8930] ? __lock_acquire+0x747/0x2de0 [ 204.431820][ T8930] report_bug_entry+0x19b/0x290 [ 204.436679][ T8930] ? __mutex_lock+0x1331/0x15a0 [ 204.441627][ T8930] ? __mutex_lock+0x1336/0x15a0 [ 204.446485][ T8930] handle_bug+0xce/0x200 [ 204.450739][ T8930] exc_invalid_op+0x1a/0x50 [ 204.455252][ T8930] asm_exc_invalid_op+0x1a/0x20 [ 204.460103][ T8930] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 204.465569][ T8930] Code: fb 7c 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 83 e9 83 05 00 75 13 48 8d 3d 06 e7 86 05 48 c7 c6 e0 24 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 204.485173][ T8930] RSP: 0018:ffffc9000336f6a0 EFLAGS: 00010246 [ 204.491244][ T8930] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 204.499213][ T8930] RDX: ffffc90003511000 RSI: ffffffff8c0d24e0 RDI: ffffffff917ff970 [ 204.507184][ T8930] RBP: ffffc9000336f840 R08: ffffffff917cfbe3 R09: 1ffffffff22f9f7c [ 204.515163][ T8930] R10: dffffc0000000000 R11: fffffbfff22f9f7d R12: ffff88802174c010 [ 204.523138][ T8930] R13: 0000000000000000 R14: 1ffff9200066dee8 R15: 0000000000000000 [ 204.531121][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.536761][ T8930] ? __lock_acquire+0x747/0x2de0 [ 204.541705][ T8930] ? as102_stream_ctrl+0x27/0xc0 [ 204.546646][ T8930] ? trace_contention_end+0x3d/0x140 [ 204.551977][ T8930] ? __pfx___mutex_lock+0x10/0x10 [ 204.557014][ T8930] ? __mutex_lock+0x305/0x15a0 [ 204.561799][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.567434][ T8930] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.573098][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.578736][ T8930] ? lock_acquire+0x115/0x350 [ 204.583416][ T8930] as102_stream_ctrl+0x27/0xc0 [ 204.588187][ T8930] __dvb_frontend_open+0x2e9/0xca0 [ 204.593308][ T8930] ? dvb_frontend_open+0x1ce/0x870 [ 204.598421][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.604055][ T8930] ? down_read+0x2b9/0x320 [ 204.608480][ T8930] ? __pfx_dvb_frontend_open+0x10/0x10 [ 204.613950][ T8930] dvb_device_open+0x24f/0x340 [ 204.618731][ T8930] chrdev_open+0x4d9/0x600 [ 204.623163][ T8930] ? __pfx_chrdev_open+0x10/0x10 [ 204.628115][ T8930] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 204.634449][ T8930] ? devcgroup_check_permission+0x31/0x8f0 [ 204.640300][ T8930] ? __pfx_chrdev_open+0x10/0x10 [ 204.645245][ T8930] do_dentry_open+0x80e/0x1360 [ 204.650024][ T8930] vfs_open_consume+0x4a/0x350 [ 204.654796][ T8930] ? path_openat+0x16e1/0x20f0 [ 204.659561][ T8930] path_openat+0x16fc/0x20f0 [ 204.664167][ T8930] do_file_open+0x23e/0x4a0 [ 204.668675][ T8930] ? __pfx_do_file_open+0x10/0x10 [ 204.673714][ T8930] ? _raw_spin_unlock+0x28/0x50 [ 204.678561][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.684195][ T8930] ? alloc_fd+0x6af/0x760 [ 204.688527][ T8930] do_sys_openat2+0x115/0x200 [ 204.693213][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.698848][ T8930] ? __se_sys_futex+0x3a8/0x450 [ 204.703705][ T8930] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.708918][ T8930] ? rcu_is_watching+0x16/0xb0 [ 204.713694][ T8930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.719329][ T8930] __x64_sys_openat+0x138/0x170 [ 204.724196][ T8930] do_syscall_64+0x166/0x520 [ 204.728795][ T8930] ? trace_irq_disable+0x3b/0x140 [ 204.733822][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.739889][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.745781][ T8930] RIP: 0033:0x7f5c9cb5fd8e [ 204.750191][ T8930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.769883][ T8930] RSP: 002b:00007f5c9da51b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.778329][ T8930] RAX: ffffffffffffffda RBX: 00007f5c9da526c0 RCX: 00007f5c9cb5fd8e [ 204.786293][ T8930] RDX: 0000000000000802 RSI: 00007f5c9da51c00 RDI: ffffffffffffff9c [ 204.794259][ T8930] RBP: 00007f5c9da51c00 R08: 0000000000000000 R09: 0000000000000000 [ 204.802253][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 204.810220][ T8930] R13: 00007f5c9ce26038 R14: 00007f5c9ce25fa0 R15: 00007ffcbd231688 [ 204.818202][ T8930] [ 204.821224][ T8930] Kernel Offset: disabled [ 204.825536][ T8930] Rebooting in 86400 seconds..