last executing test programs: 14.945469587s ago: executing program 4 (id=635): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@errors_remount}, {@discard}, {@stripe}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") gettid() r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/QEMU0001:00/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='ohci-platform', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='QEMU0001:00', 0xb) fdatasync(r2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000003c0)=0xd000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r5, 0x1, 0xfd, 0x6, @multicast}, 0x14) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x4021, 0x800000000004, @thr={&(0x7f0000000b80), &(0x7f0000000cc0)="79b7c56b2abd8acc3c6b052a2579d07bf1de49b7a666f8b31c0795af04a7a6e18f48b971b7c288de705a039fde21b02c0090719e41784ef0b2b2b52106e50b2364ed4b3ca2f513c2da35cd6cd4629065d286b0ef1fa6e952eccc191ed58578685ba8872be8241a19a088d48c90f925af0f0819b91b09c2f25dc65bc69183f7aed89faab1efb0e5b4823925dea50ce9a2387332796b212b1cdf78b8622a59856a9c6d210eb301b0017b279bb9d582cc56e0a5698b7434b3e958e2ce6d167ca40a5dc96979cf657056effa04b8b5e806d7ebb2"}}, &(0x7f0000bbdffc)) r6 = syz_open_dev$admmidi(&(0x7f0000000000), 0x8, 0x725800) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000240)="3789397fe48612527ac3f9dab46e361cfefcb0d0b07d24938c634ed50f959003bed9847fcc5bc5c7d9504b07822cac564aa3eb6e4acb7c11a68df6c1bc2517739af99e897276998afaafa38d07908022d5e7d6036d3aef3f6f9a5ad233a8f96afa0851c86bfe44b017af10a1f79c77948add9039c4ebec62e2532858d52ab7944f5fa5de0c86f949403baca50b00cc73823207d97c62a2c43d796fb79473063c5c29434e6955d7b02f734fd51fb9d04844943c65cc787b433ccddc6f1ead5cc86c02f994996c61bd63800d7093f5a2ece984c232043fc544234142d931", 0xdd}, {&(0x7f0000000a00)="7f8d2fc4b78838bbd36d977c559a9451f98b8a6f2115daffe860720bbfea6f9b97689d0c5307a415292620504d5de375768964cd3ca02035f3d29deec93e6ce255efceec1c709af49313d672868590d2b9cd69923b3a6c3d4d941f219c2354a77d3858f16c75baa760bb9f0f683ea7ee7fe246d2721821a92734fe927ae57d2beae82504a7c353411bb5659e22e699094aee4a20de4284791d714d39c300a55719", 0xa1}], 0x2, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x90) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x60000000000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000040)='.\x02\x00', 0x84242, 0x1df2a23c5997fb6e) 14.612212399s ago: executing program 4 (id=637): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r2}, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x0) 12.817968321s ago: executing program 4 (id=644): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f0000001400)="6b6037bde5a4dcd95990b914778673f04f09705fc2a5b48e170e970c3a003f31b420cd97b832bc601772ab52e0b51b01c7e5fa252e3ad747b16d6f7b89a9d549093388c885eb837e961334a095822b40a5168b964efc93725c6c11eb34f3ae763921190c73aa893bc648e4e4db2dc5971e8d8f223252ce85763b20d7deb6d60b139b9eac2ff89a976dc3e0094bc0a1e82c8e6a9d8a071e5fe23b153b360d50f15d7e4c535937a4", &(0x7f00000024c0)="5d2a2f8d027fa355a92116d11f284b90c8a7226af0c3f25b0e96aee750c016a4ee75fbdd9d8d2a39e4ddd2ccc9b2b64980c4291d4bb83450f8af7acb277f70f0197750dbce8e9f353cfe217a48ec7a326e31563128655b229aa3b966df2427c22ac723de51e8d399f3bc2950d68d0a277416412a09861857a7a6a1935e6d37f8dd89e7438f0641922a859ceddc2da0c0e95ab4b57a0026a0f3246cf48dbf3dff17bf5c5f6037a6ad6e33aeb18052f597bb23c1467a301985ed1c567bfccf0f2c369c2c0c514f2c34f7cf29fd32d2391ef4f500b37898947e"}}, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000001180)="$eJzs3cFqE1EUBuDTNG1DN3YtLgbcuArqym3QCmJAiMxCVwaqm1aE6WZ0lcfwGXwkH6Or7kbs1CbqKIid3mTm+yDMgZ8L5xLI3ZybeXPn/fHRh9N31dfPMRplMYxYVFXEQQxiO2pbl8/BRb0bqxYBAGya2Ww+Sd0D7SqKyXwnIvZ+S/IvSRoCAAAAAAAAAADgvzXN/8e5+X8A6LIf8/+D1I3QmqKYzPcbv2Pz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA651V1q/rLJ3V/AMD1c/4DQP84/wGgf5z/ANA/L1+9fj6ZTg9nWTaKOFuUeZnXzzp/+mx6eD+7cLBcdVaW+fZV/qDOs5/zndi/zB825rtx726df88ev5j+ku/FUfvbBwAAAAAAAAAAAAAAAAAAgLUwzq403u8fj/+U19XK/wOs3N/fKst8GLeHN7YNAAAAAAAAAAAAAAAAAAAA2GinHz8dz09O3haKzhTx6J9WPRmtQc/XUESsRRtdKVL/MgEAAAAAAAAAAAAAAAAAQP8sL/2m7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0lm+/7+9IiIWVS31dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+xYAAP//OTyZRg==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) mkdir(0x0, 0x1ff) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002640)={&(0x7f0000002680)=[{0xfff8, 0x2401, 0x33, &(0x7f00000025c0)="13792ffeb295d2d6fb53daced10b9a12b93d8e2822cf82379b32a37243b65c142efa19056c40f96a96703fa3bb954df4cd9559"}], 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7b, 0xa840, 0x1, 0x34b}, 0x0, &(0x7f0000000600), 0x0) 12.515395013s ago: executing program 3 (id=646): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.25605857s ago: executing program 3 (id=651): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x1, "8a6035ceeae3ecc42317afadeeffffffffffff030020518d1a00"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r6}, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r9], 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 9.871485544s ago: executing program 0 (id=652): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000880)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x4, 0x802, 0x80, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0xfffffffffffffffd, 0x3, 0x8, 0x2, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000076000100000c00000000000407020000d5d6", @ANYRES32=0x0, @ANYBLOB="0c0001800500060009000000"], 0x24}, 0x1, 0x5502000000000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 9.315685871s ago: executing program 4 (id=654): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[{@adinicb}, {@umask={'umask', 0x3d, 0x39e6}}, {@gid}, {@uid_forget}, {@nostrict}, {@longad}, {@noadinicb}, {@bs={'bs', 0x3d, 0x3e8}}, {@shortad}, {@utf8}]}, 0xfc, 0xc44, &(0x7f0000000200)="$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") writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 8.624131275s ago: executing program 3 (id=655): unshare(0x22020600) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000440)=""/56, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0xa000200) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000002c0)={0xfffff2d4, 0x200ffffe, 0x9, 0xffffffff, 0x0, "4d6bd80d0800000000000000000800", 0x0, 0x2}) ppoll(&(0x7f0000000000)=[{r0, 0x200}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) semget$private(0x0, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x67, 0x2, 0x87, 0xffffffff, 0x40}) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x5, @none}, 0x46) unshare(0x20060400) unshare(0x6c000000) 8.580438291s ago: executing program 1 (id=656): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) unshare(0x8040480) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 8.047121833s ago: executing program 1 (id=657): r0 = io_uring_setup(0x6de0, &(0x7f0000000540)={0x0, 0xd612, 0x2000, 0x2, 0x28b}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0x7, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0x40, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x40, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x4}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0xaf}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x5, '\x00', 0xb}, {0xf, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x8, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x5, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000180)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 8.042651003s ago: executing program 3 (id=658): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x4c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.879610432s ago: executing program 0 (id=659): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25022000ff", @ANYRES32=r1, @ANYBLOB="0800040064010104080008000001000008000200ac1414aa080001000a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x800200, &(0x7f0000000140)={[{@nodecompose}, {@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}]}, 0x1, 0x5f7, &(0x7f0000000640)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000220a40308801b09e3401f010203010902240001010900060904a7a7025d81df0209058a01"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0x80000002}) ioctl$TCXONC(r3, 0x540a, 0x2) 7.638884999s ago: executing program 1 (id=660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xe}, &(0x7f0000000040)=0x8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000180)="14000000140005b7ffccca2d2d000000060860eb", 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x1f2) preadv(r2, 0x0, 0x0, 0x996, 0x7f) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYBLOB="1400000016003537c7aa8ef2733500000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22a81, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000240)={0x0, 0x400, 0x7f, 0xfffffffc, 0x1, 0x7d}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x286}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{', 0x20, 0x400}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ae17f36d87f40a239c353d06000000619c6c8400434e07e79fb501fdb3a6c8a837039cf2553efe11c54c08eff24a66f62d04000000000000003a367ba9f2bd8f460ed2500104404a7d12e71b29279367f8c224295b8e8dd802a5f00ff28b41", @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="140004006e6963766630000000000000000000000500530000000000"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x20020) 7.520348947s ago: executing program 4 (id=661): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.983819034s ago: executing program 3 (id=662): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000880)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x4, 0x802, 0x80, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0xfffffffffffffffd, 0x3, 0x8, 0x2, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000076000100000c00000000000407020000d5d6", @ANYRES32=0x0, @ANYBLOB="0c0001800500060009000000"], 0x24}, 0x1, 0x5502000000000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5.116695175s ago: executing program 4 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x14b400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x14}], 0x1}, 0x2000600d) 5.098514131s ago: executing program 0 (id=665): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x1, "8a6035ceeae3ecc42317afadeeffffffffffff030020518d1a00"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r6}, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r9], 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 5.000264821s ago: executing program 3 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000010000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES32=r0], 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000330001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c67"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) modify_ldt$read(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 4.871395081s ago: executing program 2 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) signalfd4(r0, &(0x7f0000000540)={[0x50]}, 0x8, 0x800) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, 0x0, 0x0, 0x700, 0x0, 0x0) r3 = accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10, 0x100000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_macvtap\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2840, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) bind$pptp(r4, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000000380)=""/171, 0xab) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x27, 0x7, 0x1, 0x0, "9e649f946cac6962cac02b2a17bd171db3b10d6ecaf6763561870502d087eb54231271"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}}, 0x20008840) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3.883058312s ago: executing program 1 (id=668): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) unshare(0x8040480) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 3.589613198s ago: executing program 1 (id=669): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.444165652s ago: executing program 0 (id=670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xe}, &(0x7f0000000040)=0x8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000180)="14000000140005b7ffccca2d2d000000060860eb", 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x1f2) preadv(r2, 0x0, 0x0, 0x996, 0x7f) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYBLOB="1400000016003537c7aa8ef2733500000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000240)={0x0, 0x400, 0x7f, 0xfffffffc, 0x1, 0x7d}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x286}]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{', 0x20, 0x400}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ae17f36d87f40a239c353d06000000619c6c8400434e07e79fb501fdb3a6c8a837039cf2553efe11c54c08eff24a66f62d04000000000000003a367ba9f2bd8f460ed2500104404a7d12e71b29279367f8c224295b8e8dd802a5f00ff28b41", @ANYRES16=r9, @ANYRES32=r10, @ANYBLOB="140004006e6963766630000000000000000000000500530000000000"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x20020) 3.292175899s ago: executing program 2 (id=671): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7beda18e355adf8636110f251ff757040047bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c8d8c9d924624781014d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x24044000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x5, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@resuid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@bsdgroups}, {@mb_optimize_scan}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 2.817918697s ago: executing program 1 (id=672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac400"/24], &(0x7f0000000480)='GPL\x00'}, 0x80) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x8915, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=@newtfilter={0x38, 0x2c, 0xf25, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x16, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x7, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) 2.099867085s ago: executing program 0 (id=673): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x1, "8a6035ceeae3ecc42317afadeeffffffffffff030020518d1a00"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r6}, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r9], 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 859.693201ms ago: executing program 2 (id=674): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) r0 = msgget(0x2, 0x229) msgctl$IPC_RMID(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0503000000000000fcff070000008c9a1822", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24044080) socket$inet_udp(0x2, 0x2, 0x0) 675.949659ms ago: executing program 2 (id=675): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 267.869623ms ago: executing program 2 (id=676): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x1, 0xfffffffd}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x150f, &(0x7f0000001980)="$eJzs3Au8TtXWMPAx5pyLTdKT5D7HHIsnuUySJJeEXJIkOZLklpAkSRKSW25JSELuSe4hucVO7vf7PUmOJEkOEpLM76c6r/e8vefrfOf0fd7z7fH//RZz7PWM8Yz1jL33s9b67b2/6TC4Sr2qFeswM/xL8Jf/ugNACgD0A4DrACACgBJZSmS5vD+Dxu7/2pOIP9ZD0652B+JqkvmnbTL/tE3mn7bJ/NM2mX/aJvNP22T+aZvMX4i0bOv0nNfLlna3f/z+v/vf75b7//+G5P3//1v/0FeazD9tk/mnbTL/tE3mn7bJ/NM2mX/aJvNP22T+QqRlV/v+87/B9teX6mr38Ttb9E/lXd3PPiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQacX5cIUBgL+ur3ZfQgghhBBCCCGE+OOE9Fe7AyGEEEIIIYQQQvzfhwBGg4EI0kF6SIEMkBGugUxwLWSG6yAB10MWuAGywo2QDbJDDsgJuSA35AELBA4YYsgL+SAJN0F+uBkKQEEoBIXBQxEoCrdAMbgVisNtUALmLAK4A0pBaSgDZeFOKAd3QXmoABXhbqgElaEKVIV7oBrcC9XhPqgB90NNeABqwYNQG/4EdeAhqAsPQz14BOrDo9AAGkIjaAxN/qn8F6ELvARdoRt0hx7QE16GXtAb+kBf6AevQH94FQbAazAQBsFgeB2GwBswFN6EYTAcRsBbMBJGwWgYA2NhHIyHt2ECvAMT4V2YBJNhCkyFaTAdZsB7MBNmwWx4H+bABzAX5sF8WAAL4UNYBIshFT6CJfAxLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu2FPhb3wCeyDT2E/fAYH4PP/w/xz8Lf5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jALJgFs2JWzIbZMAfmwFyYC/NgHiQkZGTMi3kxiUnMj/mxABbAQlgIPXosikWxGN6KxbE4lsASWBJLYiksjaWxLJbFclgOy2N5rHjHPACshFWwCt6D9+C9WB2rYw2sgTWxJtbCWlgba2MdrIN1sS7Ww3pYH+tjA2yAjbARNsEm2BSbYjNshi2wBbbEltgKW2FrbI1tsA22xbbYDtthe2yPHbADdsRO2AlfxBfxJXwJu2El1QN7Yk/shb2wD/bFvvgK9sdX8VV8DQfiIByMr+Pr+AYOxbM4DIfjCByB5dQoHI1jkNU4HI/jcQJOwIk4ESfhZJyMU3EaTscZOANn4iyche/jHPwAP8B5OA8X4EJciItwMaZiKi7Bc7gUl+FyXIErcRWuxDW4FtfgetyA63ETbsItuAW34TbcgTtwF+7CPbgHP8FP8FP8FAfiATyAB/EgHsJDeBgP4xE8gkfx6LZrAPA4HscTeAJP4ik8jafwDJ7Bs3gOz+N5vIAX8CI+n+urunsKrhsI6jKjjEqn0qkUlaIyqowqk8qkMqvMKqESKovKorKqrCqbyqZyqBwql8ql8qg8ihQpVrHKq/KqpEqq/Cq/KqAKqEKqkPLKq6KqqCqmiqniqrgqoW5XJdUdqpQqrZr7sqqsKqda+PKqgqqoKqpKqrKqoqqqqqqaqqaqq+qqhqqhaqqaqpZ6UNVWPbAPPqQuT6aeGoT11WBsoBqqRqqxegMfU03VUGymmqsW6gk1HIdhK9XUt1ZPqzZqNLZVz6ox+Jxqr8ZhB/WC6qg6qc7qRdVFNfNdVTc1CXuonmoq9lK9VR/VV83EyuryxKqo19RANUgNVq+rBfiGGqreVMPUcDVCvaVGqlFqtBqjxqpxarx6W01Q76iJ6l01SU1WU9RUNU1NVzPUe2qmmqVmq/fVHPWBmqvmqflqgVqoPlSL1GKVqj5SS9THaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr2qa2qx1qp9qldqs9aq/6RO1Tn6r96jN1QH2uDqo/q0PqC3VYfamOqK/UUfW1Oqa+UcfVt+qE6qZOqlPqtPpOnVHfq7PqnDqvflAX1I/qovpJXVJBgUattNZGRzqdTq9TdAadUV+jM+lrdWZ9nU7o63UWfYPOqm/U2XR2nUPn1Ll0bp1HW03aadaxzqvz6aS+SefXN+sCuqAupAtrr4voovoWXUzfqovr23QJfbsuqe/QpXRpXUaX1XfqcvouXV5X0BX13bqSrqyr6Kr6Hl1N36ur6/t0DX2/rqkf0LX0g7q2/pOuox/SdfXDup5+RNfXj+oGuqFupBvrJvox3VQ/rpvp5rqFfkK31E/qVvop3Vo/rdvoZ3Rb/axup5/T7fXzuoN+QXfUnXRn/ZO+pIPuqrvp7rqH7qlf1r10b91H99X99Cu6v35VD9Cv6YF6kB6sX9dD9Bt6qH5TD9PD9Qj9lh6pR+nReoweq8fp8fptPUG/oyfqd/UkPVlP0VP1ND1d9/m10ux/IP+d/yZ/wM/PvkVv1dv0dr1D79S79G69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Qp/Up/QP+jt9Rn+vz+pz+pz+QV/QF/TFX18DMGiU0caYyKQz6U2KyWAymmtMJnOtyWyuMwlzvclibjBZzY0mm8lucpicJpfJbfIYa8g4wyY2eU0+kzQ3mfzmZlPAFDSFTGHjTRFT1NzyL+f/nf5WTPnl5MU0MU1MU9PUNDPNTAvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0NB1NZ9PZdDFdTFcE0910Nz3Ny6aX6W36mL6mn3nF9Df9zQAzwAw0A81gM9gMMUPMUDPUDDPDjAGAkWakGW1Gm7FmrBlvxpsJZoKZaCaaSWaSmWKmmGlmmplhZpiZZqaZbWabOWaOmWvmmvlmvlloFppFZpFJNalmiVlilpplZplZYVaYVWaVWWPWmHVmndlgNphNZpNZaraarWa72W52mp1mt9lt9pq9Zp/ZZ/ab/eaAOWAOmoPmkDlkDpvD5og5Yo6ao+aYOWaOm+PmhDlhTpqT5rQ5bc6YM+asOWvOm/PmgrlgLpqL5pK5dPm0L1KRikxkonRRuiglSokyRhmjTFGmKHOUOUpEiShLlCXKGt0YZYuyRzminFGuKHeUJ7IRRS7iKI7yRvmiZHRTlD+6OSoQFYwKRYUjHxWJika3RMWiW6Pi0W1Riej2qGR0R1QqKh2VicpGd0blorui8lGFqGJ0d1QpqhxViapG90TVonuj6tF9UY3o/qhm9EBUK3owqh39KaoTPRTVjR6O6kWPRPWjR6MGUcOoUdQ4avKH1g/hbPbHfVfbzaaHHranfdn2sr1tH9vX9rOv2P72VTvAvvZ5NzvIDrav2yH2DTvUvmmH2eF2hH3LjrSj7Gg7xo614+x4+7adYN+xE+27dpKdbKfYqXaanW5n2PfsTDvLzrbv2zn2AzvXzrPz7QK70H5oF9nFNtV+ZJfYj+1Su8wutyvsSrvKrrZr7Fq7zq63G+xGu8lutlvsVrvNbrc77E67y+62e+xe+4ndZz+1++1n9oD93B60Kb+e339pj9iv7FH7tT1mv7HH7bf2hP2LPWlP2dP2O3vGfm/P2nP2vP3BXrA/2ov2J3vJhssn95ff3smQoXSUjlIohTJSRspEmSgzZaYEJSgLZaGslJWyUTbKQTkoF+WiPJSHLmNiykt5KUlJyk/5qQAVoEJUiDx5KkpFqRgVo+JUnEpQCSpJJakUlaIyVIbupDvpLrqLKlAFupvupspUmapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qD7VpwbUgBpRI2pCTagpNaVm1IxaUAtqSS2pFbWi1tSa2lAbakttqR21o/bUnjpQB+pIHakzdaYu1IW6UlfqTt2pJ/WkXtSL+lAf6kf9qD/1pwE0gAbSQBpMg2kIDaGhNJSG0XAaQW/RSBpFo2kMjaVxNJ7G0wSaQBNpIk2iSTSFptA0mkYzaAbNpJk0m2bTHJpDc2kuzaf5tJAW0iJaRKmUSktoCS2lpbScltNKWkmraTWtpbW0ntbTRtpIm2kzbaWttJ22007aSbtpN+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2kk3SaTtMZOkNn6Sydp/N0gX6ki/QTXaJAKS6Dy+iucZnctS6zu8791ziHy+lyudwuj7Mum8v+NzE55wq4gq6QK+y8K+KKult+E5dypV0ZV9bd6cq5u1z538TV1u785QfR3f2uqrvHVXP3uuruPlfD3e9qugdcLfeIq+0edXVcQ1fXNXb13COuvnvUNXANXSPX2LV0T7pW7inX2j3t2rhnfhMvcovdWrfOrXcb3D73qTvvfnDH3DfugvvRdXXdXD/3iuvvXnUD3GtuoBv0m3iEe8uNdKPcaDfGjXXjfhNPcVPdNDfdzXDvuZlu1m/ihe5DN8elurlunpvvFvwcX+4p1X3klriP3VK3zC13K9xKt8qtdmv+o9cVbpPb7La4ve4Tt93tcDvdLrfb7fk5vnwc+91n7oD73B11X7tD7gt32B13R9xXP8eXj++4+9adcH9xJ90pd9p95864791Zd+7n47987N+5n9wlFxwwsmLNhiNOx+k5hTNwRr6GM/G1nJmv4wRfz1n4Bs7KN3I2zs45OCfn4tychy0TO2aOOS/n4yTfxPn5Zi7ABbkQF2bPRbgo38LF+FYuzrdxCb6dS/IdXIpLcxkuy3dyOb6Ly3MFrsh3cyWuzFW4Kt/D1fhers73cQ2+n2vyA1yLH+Ta/Ceuww9xXX6Y6/EjXJ8f5QbckBtxY27Cj3FTfpybcXNuwU9wS36SW/FT3Jqf5jb8DLflZ7kdP8ft+XnuwC9wR+7EnflF7sIvcVfuxt25B/fkl7kX9+Y+3Jf78Svcn1/lAfwaD+RBPJhf5yH8Bg/lN3kYD+cR/BaP5FE8msfwWB7H4/ltnsDv8ER+lyfxZJ7CU3kaT+cZ/B7P5Fk8m9/nOfwBz+V5PJ8X8EL+kBfxYk7lj3gJf8xLeRkv5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G2/nHYy8i3fzHt7Ln/A+/pT382d8gD/ng/xnPsRf8GH+ko/wV3yUv+Zj/A0f52/5hAE+yaf4NH/HZ/h7Psvn+Dz/wBf4R77IP/ElDgwxxirWsYmjOF2cPk6JM8QZ42viTPG1ceb4ujgRXx9niW+Is8Y3xtni7HGOOGecK84d54ltTLGLOY7jvHG+OBnfFOePb44LxAXjQnHh2MdF4qLxLXGx+Na4eHxbXCK+PS4Z3xGXikvHj9xfNr4zLhffFZePK8QV47vjSnHluEpcNb4nrhbfG1eP74trxPfHxeMH4lrxg3Ht+E9xnfihuG78cFwvfiSuHz8aN4gbxo3ixnGT+LG4afx43CxuHreIn4hbxk/GreKn4tbx03Gb+Jnf3d897hH3jF+OX45DuE/PTy5ILkx+mFyUXJxMTX6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULV9ODRK6+98ZFP59P7FJ/BZ/TX+Ez+Wp/ZX+cT/nqfxd/gs/obfTaf3efwOX0un9vn8daTd5597PP6fD7pb/L5/c2+gC/oC/nC3vsivqhv7Jv4Jr6pf9w38819C/+Ef8I/6Z/0T/mn/NO+jX/Gt/XP+nb+Od/eP++f9y/4jr6T7+xf9F38S76r7+a7++6+p+/pe/levo/v4/v5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/vRfqwf68f78X6Cn+An+ol+kp/kp/gpfpqf5mf4GX6mn+ln+9l+ToE5fq6f6+f7+X6hX+gX+UU+1af6JX6JX+qX+uV+uV/pV/rVfrVf69f69X693+g3+s1+s9/qt/rtfrvf6Xf63X633+v3+n1+n9/v9/sD/oA/6A+eD/6QP+y/9Ef8V/6o/9of89/44/5bf8L/xZ/0p/xp/50/47/3Z/05f97/4C/4H/1F/5O/5IMfn3g7MSHxTmJi4t3EpMTkxJTE1MS0xPTEjMR7iZmJWYnZifcTcxIfJOYm5iXmJxYkFiY+TCxKLE6kJj5KLEl8nFiaWJZYnliRWJlYlQgh9/Y45A35QjLcFPKHm0OBUDAUCoWDD0VC0XBLKBZuDcXDbaFEuD2UDHeEUqF0KBMeDQ1Cw9AoNA5NwmOhaXg8NAvNQ4vwRGgZngytwlOhdXg6tAnPhLbh2dAuPBfah+dDh/BC6Bg6hc7hxdAlvBS6Bh26hx6hZ3g59Aq9Q5/QN/QLr4T+4dUwILwWBoZBYXB4PQwJb4Sh4c0wLAwPI8JbYWQYFUaHMWFsGBfGh7fDhPBOmBjeDZPC5DAlTA3TwvQwI7wXZoZZYXZ4P8wJH4S5YV6YHxaEheHDsCgsDqnho7AkfByWhmVheVgRIGVVWB3WhLVhXVgfNoSNYVPYHLaErWFb2B52hJ1hV9gd9oS94ZOwL3wa9ofPwoHweTgY/hwOhS/C4fBlOBK+CkfD1+FY+CYcD9+GE+Ev4WQ4FU6H78KZ8H04G86F8+GHcCH8GC6Gn8Klf+J31qI/+E66EEIIIcS/A/07+3v8TaT+41/160d6AsC1O3Ie+a81N2b7Zd1b5WqZAICnu3V46K9bpUrdu3f/9bFLNUT55gFA4kp+OrgSL4MW8CS0huZQ7L/tr7fqdIF/p37ydoCM/yknBa7EV+rf+nfqj5rzu/XnARTIdyUnA1yJr9Qv/pva0c/1szf9nfoZvhgP0Ow/5WWCK/GV+kXhcXgGWv/NI4UQQgghhBBCiF/0VmXa/d717eXr81zmSk56uBL/3vW5EEIIIYQQQgghrr7nOnV+6rHWrZu3+zuLCn9/lyzSyiLd/4w2/u0XAP8j2vjHFlf7O5MQQgghhBDij3blpP9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRd/y/+nNjVPkYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiavtfAQAA//918jFh") stat(&(0x7f000001a500)='./file0/../file0\x00', &(0x7f000001a540)) 90.27346ms ago: executing program 2 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000040900706f6c69637964620007040600616164666100061e0000001b5e783d0000000e00000000000000040002000000000000", 0x82) (fail_nth: 8) 0s ago: executing program 0 (id=678): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0x10000000, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x3a}, 0x28) (fail_nth: 4) kernel console output (not intermixed with test programs): table, not raw [ 217.712621][ T7142] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 217.744617][ T7142] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 217.773987][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 217.801951][ T5720] usb 5-1: USB disconnect, device number 25 [ 218.006681][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.028037][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.156494][ T7151] loop2: detected capacity change from 0 to 512 [ 218.236484][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.245683][ T10] usb 2-1: New USB device found, idVendor=0069, idProduct=2f6c, bcdDevice=65.64 [ 218.257255][ T10] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 218.270359][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 218.278086][ T10] usb 2-1: can't read configurations, error -71 [ 219.782651][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'. [ 221.545433][ T5348] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 221.761258][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.771870][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.903148][ T5348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.903229][ T5348] usb 3-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 221.903263][ T5348] usb 3-1: no configurations [ 221.903274][ T5348] usb 3-1: can't read configurations, error -22 [ 224.287918][ T7178] loop2: detected capacity change from 0 to 32768 [ 224.290913][ T7178] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.365 (7178) [ 224.325783][ T7178] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 224.325841][ T7178] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 224.412456][ T7178] BTRFS info (device loop2): setting nodatasum [ 224.423189][ T7178] BTRFS info (device loop2): allowing degraded mounts [ 224.430850][ T7178] BTRFS info (device loop2): turning on async discard [ 224.437971][ T7178] BTRFS info (device loop2): enabling free space tree [ 224.457851][ T7178] BTRFS info (device loop2): force zlib compression, level 3 [ 224.617219][ T5614] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 225.193791][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 225.542335][ T7201] loop0: detected capacity change from 0 to 1024 [ 225.880922][ T7201] hfsplus: failed to load catalog file [ 226.281785][ T5619] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 226.324025][ T7209] loop4: detected capacity change from 0 to 512 [ 226.325011][ T7209] EXT4-fs: Ignoring removed bh option [ 226.377919][ T7209] EXT4-fs (loop4): 1 truncate cleaned up [ 226.386315][ T7209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.457631][ T5619] usb 1-1: not running at top speed; connect to a high speed hub [ 226.457685][ T5619] usb 1-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 226.475838][ T5619] usb 1-1: config 1 has an invalid interface number: 167 but max is 0 [ 226.475868][ T5619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.475890][ T5619] usb 1-1: config 1 has no interface number 0 [ 226.475917][ T5619] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 226.475936][ T5619] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 226.475953][ T5619] usb 1-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.475971][ T5619] usb 1-1: config 1 interface 167 has no altsetting 0 [ 226.556719][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.556755][ T5619] usb 1-1: Product: syz [ 226.556780][ T5619] usb 1-1: Manufacturer: syz [ 226.556799][ T5619] usb 1-1: SerialNumber: syz [ 226.836634][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.839319][ T5808] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 226.872029][ T5619] em28xx 1-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 226.872094][ T5619] em28xx 1-1:1.167: Device initialization failed. [ 226.872128][ T5619] em28xx 1-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 226.903470][ T5619] usb 1-1: USB disconnect, device number 41 [ 227.267562][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.284021][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.894925][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.895010][ T5808] usb 2-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 227.895067][ T5808] usb 2-1: no configurations [ 227.895080][ T5808] usb 2-1: can't read configurations, error -22 [ 227.923338][ T5619] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 228.159414][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.168671][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.240651][ T10] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 228.365496][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.365570][ T5619] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 228.365629][ T5619] usb 5-1: no configurations [ 228.365648][ T5619] usb 5-1: can't read configurations, error -22 [ 228.391331][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 228.394200][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 228.394254][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.394281][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.394305][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.394329][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.396829][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 228.396874][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.396899][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.398081][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.398107][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.404613][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 228.404667][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.404695][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.404720][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.404746][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.418192][ T10] usb 3-1: string descriptor 0 read error: -22 [ 228.418326][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.477323][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 228.765551][ T7233] loop2: detected capacity change from 0 to 512 [ 231.526085][ T7277] loop3: detected capacity change from 0 to 1764 [ 231.568322][ T7277] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 231.699384][ T7266] loop1: detected capacity change from 0 to 32768 [ 231.720431][ T5808] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 231.896176][ T7266] non-latin1 character 0x200 found in JFS file name [ 231.896228][ T7266] mount with iocharset=utf8 to access [ 231.998502][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.999088][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.128313][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.128391][ T5808] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 232.128425][ T5808] usb 5-1: no configurations [ 232.128437][ T5808] usb 5-1: can't read configurations, error -22 [ 232.484283][ T7291] loop1: detected capacity change from 0 to 256 [ 232.541435][ T7291] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 232.590149][ T7291] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 233.194265][ T7293] loop0: detected capacity change from 0 to 2048 [ 233.205081][ T5720] usb 3-1: USB disconnect, device number 24 [ 233.379575][ T7293] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 233.412536][ T7293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.741154][ T7299] loop2: detected capacity change from 0 to 2048 [ 233.742152][ T7299] udf: Unknown parameter '0xffffffffffffffff' [ 233.812364][ T7299] loop2: detected capacity change from 0 to 512 [ 233.993826][ T7299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.993959][ T7299] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.484588][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.600015][ T7315] loop0: detected capacity change from 0 to 2048 [ 234.603389][ T7315] udf: Unknown parameter '0xffffffffffffffff' [ 234.812142][ T7325] loop4: detected capacity change from 0 to 256 [ 234.870196][ T7325] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 234.919542][ T7325] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 235.490430][ T7315] loop0: detected capacity change from 0 to 512 [ 235.566338][ T7315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.584162][ T7315] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.682340][ T5749] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 235.764076][ T7331] loop1: detected capacity change from 0 to 2048 [ 235.811875][ T7331] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 235.837376][ T7331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.852237][ T5749] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 235.853469][ T5749] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 235.853515][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.853539][ T5749] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.853562][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.853585][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.865512][ T5749] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 235.865565][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.865590][ T5749] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.865613][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.865636][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.879526][ T5749] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 235.879576][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.879601][ T5749] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.879623][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.879647][ T5749] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.894311][ T5749] usb 3-1: string descriptor 0 read error: -22 [ 235.894447][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.998369][ T5749] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 236.045984][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.155892][ T32] audit: type=1326 audit(1787274325.978:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.155980][ T32] audit: type=1326 audit(1787274325.978:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.156021][ T32] audit: type=1326 audit(1787274325.978:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.156061][ T32] audit: type=1326 audit(1787274325.978:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.156101][ T32] audit: type=1326 audit(1787274325.978:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.156140][ T32] audit: type=1326 audit(1787274325.978:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.156179][ T32] audit: type=1326 audit(1787274325.978:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.211767][ T32] audit: type=1326 audit(1787274325.978:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.211827][ T32] audit: type=1326 audit(1787274326.038:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eb9e0d9 code=0x7ffc0000 [ 236.211874][ T32] audit: type=1326 audit(1787274326.038:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.410" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e9eb5e90e code=0x7ffc0000 [ 236.430902][ T5749] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 236.446231][ T7341] ext4: Unknown parameter 'fsname' [ 236.479368][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 236.630625][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 236.646079][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.657288][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.657375][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.692514][ T10] usb 1-1: config 0 descriptor?? [ 236.718190][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.718879][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.869522][ T5749] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.869605][ T5749] usb 4-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 236.869639][ T5749] usb 4-1: no configurations [ 236.869650][ T5749] usb 4-1: can't read configurations, error -22 [ 237.384858][ T7350] set_capacity_and_notify: 2 callbacks suppressed [ 237.384937][ T7350] loop1: detected capacity change from 0 to 256 [ 238.170530][ T7350] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 238.175412][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 238.175458][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 238.175484][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 238.175508][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 238.175531][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 238.189127][ T7350] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 238.680544][ T10] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 240.190546][ T7370] loop3: detected capacity change from 0 to 256 [ 240.516583][ T7370] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 240.553992][ T7370] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 240.786820][ T5619] usb 3-1: USB disconnect, device number 25 [ 240.913441][ T5348] usb 1-1: USB disconnect, device number 42 [ 241.118124][ T7373] loop0: detected capacity change from 0 to 2048 [ 241.179632][ T7373] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 241.185889][ T7373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.242058][ T7376] loop2: detected capacity change from 0 to 2048 [ 241.251809][ T7376] udf: Unknown parameter '0xffffffffffffffff' [ 241.320613][ T7376] loop2: detected capacity change from 0 to 512 [ 242.845044][ T7376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.848357][ T7376] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.051027][ T7392] loop4: detected capacity change from 0 to 128 [ 243.075851][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.085667][ T7392] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.139631][ T7392] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.151479][ T7392] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.490882][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 243.586176][ T5348] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 243.735857][ T7397] loop0: detected capacity change from 0 to 2048 [ 243.861036][ T7397] udf: Unknown parameter '0xffffffffffffffff' [ 244.452447][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.546993][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.964733][ T7397] loop0: detected capacity change from 0 to 512 [ 245.124171][ T7397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.137636][ T7397] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.388870][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.558812][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.693555][ T5348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.693626][ T5348] usb 2-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 245.693676][ T5348] usb 2-1: no configurations [ 245.693690][ T5348] usb 2-1: can't read configurations, error -22 [ 247.541812][ T5619] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 247.860483][ T5619] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 247.871891][ T5619] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.872313][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 247.872359][ T5619] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.872391][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.872422][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.133542][ T7432] netlink: 'syz.0.438': attribute type 12 has an invalid length. [ 248.232426][ T5619] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 248.232979][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 248.233025][ T5619] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.233056][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.233087][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.234343][ T5619] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 248.234397][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 248.234427][ T5619] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.234458][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.234487][ T5619] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.254999][ T5619] usb 3-1: string descriptor 0 read error: -22 [ 248.255163][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.281147][ T5619] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 248.566709][ T7432] xt_CT: No such helper "syz0" [ 248.648095][ T7416] loop2: detected capacity change from 0 to 512 [ 248.912816][ T5808] usb 3-1: USB disconnect, device number 26 [ 249.749573][ T967] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 249.754985][ T7445] loop1: detected capacity change from 0 to 2048 [ 249.755943][ T7445] udf: Unknown parameter '0xffffffffffffffff' [ 249.832002][ T7445] loop1: detected capacity change from 0 to 512 [ 249.900956][ T7445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.920570][ T7445] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.952248][ T967] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.964992][ T967] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 249.965066][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.965125][ T967] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.965175][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.965203][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 250.026575][ T967] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 250.034419][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 250.034469][ T967] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.034499][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.034523][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 250.087749][ T967] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 250.087823][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 250.087868][ T967] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.087897][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.087925][ T967] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 250.152526][ T967] usb 4-1: string descriptor 0 read error: -22 [ 250.159078][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.197083][ T967] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 250.271008][ T7455] loop4: detected capacity change from 0 to 2048 [ 250.283362][ T7455] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 250.298326][ T7455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.362623][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.434052][ T7458] loop2: detected capacity change from 0 to 2048 [ 250.444937][ T7458] udf: Unknown parameter '0xffffffffffffffff' [ 250.533489][ T7458] loop2: detected capacity change from 0 to 512 [ 250.558729][ T7443] loop3: detected capacity change from 0 to 512 [ 250.621738][ T7458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.635790][ T7458] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.651783][ T5742] usb 4-1: USB disconnect, device number 28 [ 251.749301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.336914][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.386271][ T5619] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 252.638041][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.638650][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.657155][ T32] kauditd_printk_skb: 194 callbacks suppressed [ 252.657235][ T32] audit: type=1326 audit(1787274342.478:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.2.450" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe93d9e0d9 code=0x0 [ 252.863743][ T5619] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.863833][ T5619] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 252.863868][ T5619] usb 1-1: no configurations [ 252.863887][ T5619] usb 1-1: can't read configurations, error -22 [ 253.153963][ T7490] loop3: detected capacity change from 0 to 256 [ 253.232978][ T7490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 253.260853][ T7490] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 253.962908][ T7495] loop4: detected capacity change from 0 to 256 [ 254.063244][ T7495] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 254.114419][ T7495] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 255.101471][ T7502] loop1: detected capacity change from 0 to 2048 [ 255.134781][ T7502] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 255.175051][ T7502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.589308][ T967] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 256.033085][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.033926][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.099890][ T7514] loop2: detected capacity change from 0 to 256 [ 256.232981][ T7514] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 256.293495][ T7514] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 256.455237][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.522330][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.118310][ T967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.118385][ T967] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 257.118439][ T967] usb 1-1: no configurations [ 257.118457][ T967] usb 1-1: can't read configurations, error -22 [ 257.768760][ T7534] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 258.637461][ T7540] loop0: detected capacity change from 0 to 256 [ 259.292029][ T7540] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 259.316312][ T7539] exFAT-fs (loop0): valid_size(562949953421322) is greater than size(10) [ 259.405925][ T7544] loop4: detected capacity change from 0 to 128 [ 259.427901][ T7544] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.546544][ T7544] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.578733][ T7544] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 259.710300][ T7549] loop3: detected capacity change from 0 to 512 [ 259.740094][ T7549] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.006460][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 260.470463][ T7549] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 260.578535][ T7549] EXT4-fs (loop3): mount failed [ 261.747863][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.097127][ T7565] loop4: detected capacity change from 0 to 512 [ 262.122194][ T7565] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.472: bg 0: block 7: invalid block bitmap [ 262.143620][ T7565] loop4: lost filesystem error report for type 5 error -117 [ 262.149240][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 262.149295][ C0] EXT4-fs (loop4): initial error at time 1787274351: ext4_validate_block_bitmap:436 [ 262.149339][ C0] EXT4-fs (loop4): last error at time 1787274351: ext4_validate_block_bitmap:436 [ 262.151769][ T7565] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 262.151797][ T7565] loop4: lost filesystem error report for type 5 error -117 [ 262.225314][ T7565] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.472: corrupted xattr block 95: invalid header [ 262.225378][ T7565] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.230075][ T7565] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 262.230218][ T7565] EXT4-fs (loop4): 1 orphan inode deleted [ 262.241121][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.376046][ T7565] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 262.495933][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 262.682544][ T7576] loop0: detected capacity change from 0 to 2048 [ 262.730860][ T7576] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 262.773509][ T7576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.885085][ T7579] loop2: detected capacity change from 0 to 128 [ 262.918025][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.945520][ T7579] EXT4-fs (loop2): Test dummy encryption mode enabled [ 262.995173][ T7579] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.027074][ T7579] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.404284][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 263.429088][ T5749] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 264.343400][ T7591] loop3: detected capacity change from 0 to 256 [ 264.982689][ T7591] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 264.993227][ T7590] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 265.297297][ T967] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 265.749438][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.771698][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.887762][ T967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.887838][ T967] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 265.887922][ T967] usb 1-1: no configurations [ 265.887941][ T967] usb 1-1: can't read configurations, error -22 [ 266.036712][ T5614] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.113491][ T5749] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.113566][ T5749] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.135875][ T5749] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 266.135940][ T5749] usb 5-1: can't read configurations, error -71 [ 266.301617][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.482'. [ 266.493586][ T7604] loop2: detected capacity change from 0 to 512 [ 266.561372][ T7605] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 266.630246][ T7604] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.332213][ T7604] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 267.351323][ T7604] EXT4-fs (loop2): mount failed [ 267.612170][ T7617] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 267.893288][ T5808] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 268.210238][ T5808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.249146][ T5808] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.405333][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.405402][ T5808] usb 5-1: SerialNumber: syz [ 268.508426][ T7620] loop1: detected capacity change from 0 to 2048 [ 268.547540][ T7620] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 268.625214][ T7620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.837665][ T5808] hub 5-1:1.0: bad descriptor, ignoring hub [ 268.837721][ T5808] hub 5-1:1.0: probe with driver hub failed with error -5 [ 269.069876][ T7634] loop3: detected capacity change from 0 to 256 [ 269.834980][ T7617] syz_tun: entered allmulticast mode [ 269.857503][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.868789][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.927266][ T7634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 269.938424][ T7633] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 270.070847][ T7638] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 270.768344][ T7641] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 270.798832][ T7625] loop2: detected capacity change from 0 to 32768 [ 270.829814][ T7614] syz_tun: left allmulticast mode [ 270.837958][ T7625] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.491 (7625) [ 270.856273][ T5808] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 270.888844][ T7625] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 270.893294][ T5808] usb 5-1: USB disconnect, device number 32 [ 270.911558][ T7625] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 270.974651][ T7656] loop0: detected capacity change from 0 to 128 [ 270.985114][ T7656] EXT4-fs (loop0): Test dummy encryption mode enabled [ 271.030471][ T7656] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.047466][ T7656] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.064775][ T7625] BTRFS info (device loop2): setting nodatasum [ 271.064810][ T7625] BTRFS info (device loop2): allowing degraded mounts [ 271.064826][ T7625] BTRFS info (device loop2): turning on async discard [ 271.064841][ T7625] BTRFS info (device loop2): enabling free space tree [ 271.064857][ T7625] BTRFS info (device loop2): force zlib compression, level 3 [ 271.080263][ T5734] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 271.280399][ T967] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 271.284171][ T5734] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.360061][ T5734] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.388210][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.388295][ T5734] usb 4-1: SerialNumber: syz [ 271.738867][ T5734] hub 4-1:1.0: bad descriptor, ignoring hub [ 271.739071][ T5734] hub 4-1:1.0: probe with driver hub failed with error -5 [ 272.575963][ T7641] syz_tun: entered allmulticast mode [ 272.826393][ T5614] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 273.216213][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.241296][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.418250][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.586041][ T7640] syz_tun: left allmulticast mode [ 273.602555][ T5734] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 273.655317][ T5734] usb 4-1: USB disconnect, device number 29 [ 273.701839][ T5619] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 274.209242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 274.269242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.379610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 275.841588][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.842085][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.083773][ T967] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.083867][ T967] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.092858][ T967] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 276.092931][ T967] usb 2-1: can't read configurations, error -71 [ 276.519823][ T5734] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 276.699460][ T5734] usb 4-1: Using ep0 maxpacket: 8 [ 276.710179][ T5734] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 276.724546][ T5734] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 276.732999][ T5734] usb 4-1: config 0 has no interface number 0 [ 276.749276][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.757567][ T5734] usb 4-1: Product: syz [ 276.757723][ T5734] usb 4-1: Manufacturer: syz [ 276.762458][ T5734] usb 4-1: SerialNumber: syz [ 276.850056][ T5734] usb 4-1: config 0 descriptor?? [ 277.148881][ T7684] loop3: detected capacity change from 0 to 4096 [ 277.165435][ T7684] ntfs3(loop3): ino=3, mi_enum_attr [ 277.588197][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.588302][ T5619] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 277.588367][ T5619] usb 5-1: no configurations [ 277.588386][ T5619] usb 5-1: can't read configurations, error -22 [ 277.876986][ T7697] ntfs3(loop3): ino=9, attr_set_size_ex [ 278.061761][ T7703] loop1: detected capacity change from 0 to 128 [ 278.094184][ T7703] EXT4-fs (loop1): Test dummy encryption mode enabled [ 278.177182][ T7703] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.207758][ T7703] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.627531][ T7684] ntfs3(loop3): ino=9, attr_set_size_ex [ 278.629498][ T7684] ntfs3(loop3): ino=9, attr_set_size_ex [ 278.993733][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 279.254759][ T7712] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 279.325515][ T5616] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.387217][ T5734] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 279.387350][ T5734] uvcvideo 4-1:0.31: No valid video chain found. [ 279.412546][ T5734] usb 4-1: USB disconnect, device number 30 [ 279.549535][ T5619] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 279.718148][ T5619] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.759076][ T5619] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.826066][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.836495][ T5619] usb 1-1: SerialNumber: syz [ 280.438703][ T5619] hub 1-1:1.0: bad descriptor, ignoring hub [ 280.438754][ T5619] hub 1-1:1.0: probe with driver hub failed with error -5 [ 281.008837][ T7723] batadv_slave_1: entered allmulticast mode [ 281.092193][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.093901][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.223473][ T7728] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 281.880356][ T7711] batadv_slave_1: left allmulticast mode [ 281.887181][ T5619] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 281.920668][ T5619] usb 1-1: USB disconnect, device number 49 [ 281.925003][ T5808] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 282.081000][ T5808] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 282.081974][ T5808] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.082020][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 282.082044][ T5808] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.082067][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 282.082090][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 282.086711][ T5808] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.086764][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 282.086789][ T5808] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.086812][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 282.086835][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 282.087880][ T5808] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.087921][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 282.087945][ T5808] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.087967][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 282.087990][ T5808] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 282.100001][ T5808] usb 3-1: string descriptor 0 read error: -22 [ 282.100155][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.126250][ T5808] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 282.324508][ T7726] loop2: detected capacity change from 0 to 512 [ 282.351356][ T7690] usb 3-1: USB disconnect, device number 27 [ 282.501951][ T5808] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 283.872135][ T5734] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 283.978300][ T5619] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 284.067344][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.069664][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.130447][ T5734] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 284.141988][ T5734] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 284.142067][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 284.142112][ T5734] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.142144][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 284.142176][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 284.195446][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.195506][ T5808] usb 2-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 284.195540][ T5808] usb 2-1: no configurations [ 284.195552][ T5808] usb 2-1: can't read configurations, error -22 [ 284.204987][ T5734] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 284.205075][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 284.205104][ T5734] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.205130][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 284.205157][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 284.281380][ T5734] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 284.281482][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 284.281531][ T5734] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.281563][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 284.281625][ T5734] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 284.348959][ T5734] usb 5-1: string descriptor 0 read error: -22 [ 284.355502][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.399781][ T5734] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 284.624505][ T10] usb 5-1: USB disconnect, device number 35 [ 285.106682][ T5619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.106761][ T5619] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.127968][ T5619] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 285.128029][ T5619] usb 4-1: can't read configurations, error -71 [ 285.308203][ T7757] loop0: detected capacity change from 0 to 256 [ 285.999943][ T7757] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 286.018509][ T7756] exFAT-fs (loop0): valid_size(562949953421322) is greater than size(10) [ 288.713879][ T7776] loop2: detected capacity change from 0 to 256 [ 288.763572][ T7778] loop3: detected capacity change from 0 to 128 [ 288.775151][ T7778] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.811035][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 288.831036][ T7778] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.846906][ T7778] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 291.060495][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.266975][ T7793] loop2: detected capacity change from 0 to 256 [ 291.298776][ T7793] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 291.338423][ T7793] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 292.354516][ T7795] loop3: detected capacity change from 0 to 512 [ 292.419316][ T7795] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.497979][ T7795] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 292.507738][ T7795] EXT4-fs (loop3): mount failed [ 292.785280][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.785362][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.786232][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 292.786264][ T10] usb 2-1: can't read configurations, error -71 [ 293.206162][ T5720] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 293.665900][ T7814] loop3: detected capacity change from 0 to 2048 [ 293.679340][ T7814] udf: Unknown parameter '0xffffffffffffffff' [ 293.777139][ T7814] loop3: detected capacity change from 0 to 512 [ 293.872056][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.872232][ T7814] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.108957][ T7825] loop1: detected capacity change from 0 to 256 [ 294.367936][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.956427][ T7837] loop3: detected capacity change from 0 to 128 [ 294.971530][ T7837] EXT4-fs (loop3): Test dummy encryption mode enabled [ 295.008207][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 295.008289][ T5720] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.009295][ T5720] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 295.009329][ T5720] usb 5-1: can't read configurations, error -71 [ 295.047935][ T7837] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.065637][ T7837] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.847110][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 298.284503][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.480372][ T5720] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 298.889288][ T5720] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 299.079076][ T5720] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 299.081657][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.081687][ T5720] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.081710][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 299.081734][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 299.097587][ T5720] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 299.097639][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.097664][ T5720] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.097687][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 299.097709][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 299.106974][ T5720] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 299.107024][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.107048][ T5720] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.107070][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 299.107094][ T5720] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 299.120902][ T5720] usb 5-1: string descriptor 0 read error: -22 [ 299.121038][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.148308][ T5720] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 299.461280][ T7860] loop1: detected capacity change from 0 to 128 [ 299.478179][ T7690] usb 5-1: USB disconnect, device number 38 [ 299.522728][ T7860] EXT4-fs (loop1): Test dummy encryption mode enabled [ 299.566769][ T7860] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.589757][ T7860] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.446135][ T7866] loop3: detected capacity change from 0 to 128 [ 300.606768][ T7866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 301.150051][ T7866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.233961][ T7866] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.567282][ T5616] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.169112][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.289067][ T7877] loop2: detected capacity change from 0 to 128 [ 302.315583][ T7877] EXT4-fs (loop2): Test dummy encryption mode enabled [ 302.460402][ T5808] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 302.502921][ T7877] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.506210][ T7877] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.302570][ T5808] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 303.373641][ T5808] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 303.383966][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.397337][ T5808] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.410949][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.437317][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.493599][ T5808] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 303.501558][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.501682][ T5808] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.525020][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.525137][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.647594][ T5808] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 303.647876][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.647978][ T5808] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.648046][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.648100][ T5808] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.827182][ T5808] usb 2-1: string descriptor 0 read error: -22 [ 303.827991][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.827716][ T5808] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 304.881929][ T5614] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.898335][ T5808] usb 2-1: USB disconnect, device number 39 [ 305.349331][ T189] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 305.358391][ T5720] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 305.499407][ T10] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 305.508312][ T189] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 305.523407][ T189] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 305.531273][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.531310][ T189] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.531337][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.531365][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.581832][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.583494][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.598854][ T189] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 305.599316][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.600058][ T189] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.600107][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.600141][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.655212][ T189] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 305.655329][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.655378][ T189] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.655406][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.655468][ T189] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.710907][ T5750] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 305.726122][ T189] usb 3-1: string descriptor 0 read error: -22 [ 305.726371][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.745121][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 305.756328][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 305.756432][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.756478][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.756508][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.756567][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.812693][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 305.812856][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.812933][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.812963][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.812994][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.844574][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.844632][ T5720] usb 4-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 305.844670][ T5720] usb 4-1: no configurations [ 305.844683][ T5720] usb 4-1: can't read configurations, error -22 [ 305.872373][ T5750] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 305.873351][ T5750] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 305.873396][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.873420][ T5750] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.873442][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.873467][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.874365][ T5750] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 305.874405][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.874429][ T5750] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.874452][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.874474][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.875754][ T5750] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 305.875801][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.875829][ T5750] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.875853][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.875878][ T5750] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.876198][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 305.876241][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 305.876268][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.876292][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 305.876318][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 305.882044][ T5750] usb 5-1: string descriptor 0 read error: -22 [ 305.882175][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.929654][ T5750] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 306.060887][ T7895] loop2: detected capacity change from 0 to 512 [ 306.078870][ T10] usb 1-1: string descriptor 0 read error: -22 [ 306.079023][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.181047][ T189] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 306.201586][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 306.209553][ T189] usb 3-1: USB disconnect, device number 28 [ 306.236358][ T7910] loop4: detected capacity change from 0 to 512 [ 306.320302][ T5619] usb 5-1: USB disconnect, device number 39 [ 306.467594][ T7908] loop0: detected capacity change from 0 to 512 [ 306.535208][ T7921] loop1: detected capacity change from 0 to 128 [ 306.564909][ T189] usb 1-1: USB disconnect, device number 50 [ 306.567748][ T7921] EXT4-fs (loop1): Test dummy encryption mode enabled [ 306.600937][ T7921] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.603457][ T7921] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 307.875334][ T5616] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.888489][ T7933] loop2: detected capacity change from 0 to 2048 [ 307.894581][ T7933] udf: Unknown parameter '0xffffffffffffffff' [ 308.764914][ T7942] loop3: detected capacity change from 0 to 2048 [ 308.808172][ T7942] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 308.836863][ T7942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.925578][ T7933] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 308.978734][ T7948] loop4: detected capacity change from 0 to 128 [ 308.996203][ T7948] EXT4-fs (loop4): Test dummy encryption mode enabled [ 309.037328][ T7948] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.516410][ T7948] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.875142][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.908921][ T7960] loop3: detected capacity change from 0 to 128 [ 310.942060][ T7960] EXT4-fs (loop3): Test dummy encryption mode enabled [ 310.974795][ T7960] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.984693][ T7960] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.288952][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 312.312332][ T7973] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 312.796711][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.867710][ T7985] tipc: Can't bind to reserved service type 1 [ 314.408710][ T7998] loop3: detected capacity change from 0 to 512 [ 314.438465][ T7998] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.459819][ T7987] kvm: pic: non byte write [ 314.481421][ T7998] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 314.489317][ T7690] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 314.506435][ T7998] EXT4-fs (loop3): mount failed [ 314.609752][ T7690] usb 1-1: device descriptor read/64, error -71 [ 314.849343][ T7690] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 314.859391][ T5720] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 314.989772][ T7690] usb 1-1: device descriptor read/64, error -71 [ 315.083224][ T8007] loop2: detected capacity change from 0 to 128 [ 315.086984][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.096373][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.108599][ T7690] usb usb1-port1: attempt power cycle [ 315.122766][ T8007] EXT4-fs (loop2): Test dummy encryption mode enabled [ 315.187786][ T8007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.204785][ T8007] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 315.545607][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 315.659518][ T7690] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 316.758586][ T7690] usb 1-1: device descriptor read/8, error -71 [ 316.820614][ T5614] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.021869][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.021953][ T5720] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 317.021988][ T5720] usb 5-1: no configurations [ 317.022000][ T5720] usb 5-1: can't read configurations, error -22 [ 317.359120][ T5750] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 317.486695][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.487111][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.596358][ T8029] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 317.619351][ T5750] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 317.635827][ T5750] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 317.644835][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.672772][ T5750] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.693765][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.695025][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.836287][ T5750] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 317.847962][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.860970][ T5750] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.861084][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.861164][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.133657][ T5750] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 318.133735][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.133782][ T5750] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.133813][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.133843][ T5750] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.199986][ T5750] usb 4-1: string descriptor 0 read error: -22 [ 318.200179][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.272705][ T5750] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 318.401755][ T8033] loop2: detected capacity change from 0 to 2048 [ 318.412504][ T8033] udf: Unknown parameter '0xffffffffffffffff' [ 318.476827][ T8033] loop2: detected capacity change from 0 to 512 [ 318.602792][ T5720] usb 4-1: USB disconnect, device number 35 [ 318.624355][ T8039] loop0: detected capacity change from 0 to 256 [ 318.634641][ T8033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.634785][ T8033] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.782512][ T8036] loop1: detected capacity change from 0 to 32768 [ 318.791282][ T8036] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.596 (8036) [ 318.851310][ T8036] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 318.851366][ T8036] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 318.967637][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.098224][ T8036] BTRFS info (device loop1): setting nodatasum [ 319.098271][ T8036] BTRFS info (device loop1): allowing degraded mounts [ 319.098307][ T8036] BTRFS info (device loop1): turning on async discard [ 319.098329][ T8036] BTRFS info (device loop1): enabling free space tree [ 319.098353][ T8036] BTRFS info (device loop1): force zlib compression, level 3 [ 319.796069][ T5616] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 319.932585][ T8073] loop3: detected capacity change from 0 to 1024 [ 319.967455][ T8073] hfsplus: failed to load catalog file [ 320.028087][ T8076] loop0: detected capacity change from 0 to 512 [ 320.319299][ T5720] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 320.491646][ T5720] usb 4-1: not running at top speed; connect to a high speed hub [ 320.491713][ T5720] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 320.492692][ T5720] usb 4-1: config 1 has an invalid interface number: 167 but max is 0 [ 320.492715][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.492733][ T5720] usb 4-1: config 1 has no interface number 0 [ 320.492770][ T5720] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 320.492794][ T5720] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 320.492815][ T5720] usb 4-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.492839][ T5720] usb 4-1: config 1 interface 167 has no altsetting 0 [ 320.494918][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.494939][ T5720] usb 4-1: Product: syz [ 320.494952][ T5720] usb 4-1: Manufacturer: syz [ 320.494965][ T5720] usb 4-1: SerialNumber: syz [ 320.810402][ T5720] em28xx 4-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 320.810494][ T5720] em28xx 4-1:1.167: Device initialization failed. [ 320.810861][ T5720] em28xx 4-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 320.822248][ T5720] usb 4-1: USB disconnect, device number 36 [ 320.859285][ T5750] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 321.042949][ T5750] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 321.231167][ T5750] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 321.231247][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.231300][ T5750] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.231331][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.231363][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.427026][ T5750] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 321.427097][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.427126][ T5750] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.427153][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.427180][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.620134][ T5750] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 321.620198][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.620226][ T5750] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.620380][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.620410][ T5750] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.640730][ T8092] loop2: detected capacity change from 0 to 2048 [ 321.655453][ T8092] udf: Unknown parameter '0xffffffffffffffff' [ 321.950446][ T5750] usb 1-1: string descriptor 0 read error: -22 [ 321.950622][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.008697][ T8092] loop2: detected capacity change from 0 to 512 [ 322.015364][ T5750] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 322.053314][ T8094] loop1: detected capacity change from 0 to 512 [ 322.066152][ T8092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.066794][ T8092] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.072932][ T8094] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.093920][ T8094] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 322.096693][ T8094] EXT4-fs (loop1): mount failed [ 322.333354][ T5750] usb 1-1: USB disconnect, device number 55 [ 322.526982][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.663980][ T8111] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 322.719321][ T7690] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 322.919374][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 323.092163][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.958230][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.958936][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.432568][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 324.475234][ T8124] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 324.526967][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 324.527636][ T10] usb 3-1: SerialNumber: syz [ 324.581326][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 324.581372][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 325.014890][ T7690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.022891][ T7690] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 325.032227][ T7690] usb 5-1: no configurations [ 325.032264][ T7690] usb 5-1: can't read configurations, error -22 [ 325.119413][ T8111] batadv_slave_1: entered allmulticast mode [ 325.145243][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.145902][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.179271][ T5734] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 325.330783][ T5734] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.333270][ T5734] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.333301][ T5734] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.333338][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.342724][ T8127] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 325.361695][ T5734] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.432557][ T5619] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 325.454900][ T8110] batadv_slave_1: left allmulticast mode [ 325.463101][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 325.501926][ T10] usb 3-1: USB disconnect, device number 29 [ 325.693702][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.704061][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.774885][ T8132] loop3: detected capacity change from 0 to 2048 [ 325.843695][ T8132] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 325.861596][ T8132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.953638][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.623'. [ 325.953696][ T8134] netlink: 'syz.4.623': attribute type 8 has an invalid length. [ 325.953759][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 326.142312][ T5619] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.142417][ T5619] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 326.142474][ T5619] usb 1-1: no configurations [ 326.142491][ T5619] usb 1-1: can't read configurations, error -22 [ 326.415355][ T8136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.620'. [ 326.493874][ T5734] usb 2-1: USB disconnect, device number 40 [ 326.536132][ T8142] loop2: detected capacity change from 0 to 128 [ 326.561201][ T8142] EXT4-fs (loop2): Test dummy encryption mode enabled [ 326.593837][ T8142] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.597814][ T8142] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.832371][ T8147] loop4: detected capacity change from 0 to 128 [ 326.852772][ T8147] EXT4-fs (loop4): Test dummy encryption mode enabled [ 326.880970][ T7690] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 326.898170][ T8147] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.919942][ T8147] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.048745][ T7690] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.066997][ T7690] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 327.067039][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.067059][ T7690] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.067076][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.067094][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.134114][ T7690] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 327.134194][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.134221][ T7690] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.134244][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.134268][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.209769][ T7690] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 327.209861][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.209886][ T7690] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.209909][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.209941][ T7690] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.356322][ T7690] usb 4-1: string descriptor 0 read error: -22 [ 327.356806][ T7690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.676954][ T7690] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 327.861591][ T8141] loop3: detected capacity change from 0 to 512 [ 328.370304][ T5742] usb 4-1: USB disconnect, device number 37 [ 328.525445][ T5614] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.996716][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.149663][ T5742] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 329.301229][ T5742] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.305985][ T5742] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 329.306035][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 329.306060][ T5742] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.306084][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.306108][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 329.307313][ T5742] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 329.307353][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 329.307377][ T5742] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.307399][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.307423][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 329.314062][ T5742] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 329.314107][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 329.314131][ T5742] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.314154][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.314178][ T5742] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 329.318937][ T5742] usb 3-1: string descriptor 0 read error: -22 [ 329.319067][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.362904][ T5742] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 329.620768][ T5742] usb 3-1: USB disconnect, device number 30 [ 329.686058][ T8175] loop4: detected capacity change from 0 to 2048 [ 329.693951][ T8175] udf: Unknown parameter '0xffffffffffffffff' [ 329.748740][ T8175] loop4: detected capacity change from 0 to 512 [ 329.796052][ T8175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.810680][ T8175] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.910585][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.962836][ T8179] loop3: detected capacity change from 0 to 2048 [ 329.975331][ T8179] udf: Unknown parameter '0xffffffffffffffff' [ 329.989803][ T189] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 330.041608][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 330.100736][ T8179] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 330.132581][ T8179] loop3: detected capacity change from 0 to 512 [ 330.133461][ T8179] ext2: Unknown parameter 'noacl' [ 330.231136][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.231775][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.275954][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.287539][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.339285][ T5619] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 330.504248][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.504384][ T10] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 330.504995][ T10] usb 1-1: no configurations [ 330.505010][ T10] usb 1-1: can't read configurations, error -22 [ 330.577141][ T8187] loop3: detected capacity change from 0 to 2048 [ 330.594327][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.594922][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.647875][ T8187] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 330.656781][ T8187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.682412][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.682499][ T189] usb 2-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 330.682577][ T189] usb 2-1: no configurations [ 330.682590][ T189] usb 2-1: can't read configurations, error -22 [ 330.845291][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 330.853204][ T5619] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 330.862654][ T5619] usb 5-1: no configurations [ 330.867442][ T5619] usb 5-1: can't read configurations, error -22 [ 331.055639][ T8185] loop2: detected capacity change from 0 to 32768 [ 331.068148][ T8185] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.638 (8185) [ 331.140209][ T8185] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 331.152719][ T8185] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 331.365916][ T8185] BTRFS info (device loop2): setting nodatasum [ 331.365979][ T8185] BTRFS info (device loop2): allowing degraded mounts [ 331.366016][ T8185] BTRFS info (device loop2): turning on async discard [ 331.366034][ T8185] BTRFS info (device loop2): enabling free space tree [ 331.366049][ T8185] BTRFS info (device loop2): force zlib compression, level 3 [ 331.481384][ T8207] loop0: detected capacity change from 0 to 512 [ 331.505197][ T8207] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.533657][ T8211] loop1: detected capacity change from 0 to 1024 [ 331.609287][ T8207] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 331.624596][ T8207] EXT4-fs (loop0): mount failed [ 331.632532][ T8211] hfsplus: failed to load catalog file [ 332.025359][ T5734] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 332.127569][ T5614] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 332.204332][ T5734] usb 2-1: not running at top speed; connect to a high speed hub [ 332.204390][ T5734] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 332.224030][ T5734] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 332.224080][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.224117][ T5734] usb 2-1: config 1 has no interface number 0 [ 332.224168][ T5734] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 332.224200][ T5734] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 332.224227][ T5734] usb 2-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.224258][ T5734] usb 2-1: config 1 interface 167 has no altsetting 0 [ 332.301475][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.309949][ T5734] usb 2-1: Product: syz [ 332.310255][ T5734] usb 2-1: Manufacturer: syz [ 332.310303][ T5734] usb 2-1: SerialNumber: syz [ 332.449380][ T189] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 332.610151][ T189] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 332.621174][ T189] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 332.621259][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 332.621302][ T189] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.621333][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 332.621363][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 332.718243][ T5734] em28xx 2-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 332.718281][ T5734] em28xx 2-1:1.167: Device initialization failed. [ 332.718294][ T5734] em28xx 2-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 332.725486][ T5734] usb 2-1: USB disconnect, device number 43 [ 332.766670][ T189] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 332.766751][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 332.766797][ T189] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.766827][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 332.766857][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 332.883597][ T8226] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 333.703703][ T189] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 333.703784][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.703830][ T189] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.703862][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.703892][ T189] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.790731][ T189] usb 5-1: string descriptor 0 read error: -22 [ 333.790900][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.869996][ T189] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 334.111860][ T8231] loop0: detected capacity change from 0 to 136 [ 334.161182][ T8231] Attempt to read inode for relocated directory [ 334.314758][ T8218] loop4: detected capacity change from 0 to 512 [ 334.457696][ T8237] kernel read not supported for file /file1 (pid: 8237 comm: syz.2.650) [ 334.495991][ T32] audit: type=1800 audit(1787274424.318:219): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.650" name="file1" dev="mqueue" ino=21952 res=0 errno=0 [ 334.543656][ T967] usb 5-1: USB disconnect, device number 46 [ 334.653672][ T8240] loop2: detected capacity change from 0 to 256 [ 334.693759][ T5734] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 334.735307][ T8240] FAT-fs (loop2): IO charset m not found [ 334.843122][ T5734] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 334.846185][ T5734] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 334.846235][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.846260][ T5734] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.846285][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.846309][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.848948][ T5734] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 334.848994][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.849018][ T5734] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.849040][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.849064][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.858293][ T5734] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 334.858345][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.858379][ T5734] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.858403][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.858426][ T5734] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.861588][ T8246] loop0: detected capacity change from 0 to 128 [ 334.872602][ T5734] usb 2-1: string descriptor 0 read error: -22 [ 334.872737][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.892273][ T5619] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 334.937977][ T5734] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 334.954963][ T8246] EXT4-fs (loop0): Test dummy encryption mode enabled [ 335.039119][ T8246] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.040991][ T8246] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 335.082394][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.088192][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.133413][ T5619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 335.133501][ T5619] usb 4-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 335.133557][ T5619] usb 4-1: no configurations [ 335.133568][ T5619] usb 4-1: can't read configurations, error -22 [ 335.157061][ T5734] usb 2-1: USB disconnect, device number 44 [ 336.633793][ T8259] loop1: detected capacity change from 0 to 512 [ 336.642459][ T8259] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.688624][ T8259] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 336.702955][ T8259] EXT4-fs (loop1): mount failed [ 336.742733][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.785354][ T8265] loop4: detected capacity change from 0 to 2048 [ 336.799277][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 336.816409][ T8265] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 336.823547][ T8265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.075620][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.098060][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.154760][ T8268] loop0: detected capacity change from 0 to 1024 [ 337.191359][ T8268] hfsplus: failed to load catalog file [ 337.357745][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.357820][ T10] usb 3-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 337.357876][ T10] usb 3-1: no configurations [ 337.357893][ T10] usb 3-1: can't read configurations, error -22 [ 337.479384][ T5734] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 337.638015][ T5734] usb 1-1: not running at top speed; connect to a high speed hub [ 337.638088][ T5734] usb 1-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 337.653156][ T5734] usb 1-1: config 1 has an invalid interface number: 167 but max is 0 [ 337.653185][ T5734] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.653203][ T5734] usb 1-1: config 1 has no interface number 0 [ 337.653240][ T5734] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 337.653264][ T5734] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 337.653286][ T5734] usb 1-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.653310][ T5734] usb 1-1: config 1 interface 167 has no altsetting 0 [ 337.661939][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.673379][ T5734] usb 1-1: Product: syz [ 337.673399][ T5734] usb 1-1: Manufacturer: syz [ 337.673413][ T5734] usb 1-1: SerialNumber: syz [ 337.705430][ T8279] loop3: detected capacity change from 0 to 128 [ 337.718093][ T8279] EXT4-fs (loop3): Test dummy encryption mode enabled [ 337.770724][ T8279] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.772411][ T8279] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.049576][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 339.371675][ T5734] em28xx 1-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 339.371745][ T5734] em28xx 1-1:1.167: Device initialization failed. [ 339.371760][ T5734] em28xx 1-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 339.377631][ T5734] usb 1-1: USB disconnect, device number 60 [ 339.605845][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.013031][ T8292] syzkaller0: entered promiscuous mode [ 340.013081][ T8292] syzkaller0: entered allmulticast mode [ 340.039409][ T7690] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 340.059385][ T5734] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 340.089838][ T8294] loop2: detected capacity change from 0 to 40427 [ 340.126366][ T8294] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 340.126409][ T8294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 340.140005][ T8294] F2FS-fs (loop2): invalid crc value [ 340.230182][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 340.237918][ T5734] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.249705][ T5734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.249749][ T5734] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.251208][ T8294] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 340.265976][ T8294] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 340.266905][ T8294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 340.304771][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.312931][ T5734] usb 4-1: Product: syz [ 340.312956][ T5734] usb 4-1: Manufacturer: syz [ 340.312970][ T5734] usb 4-1: SerialNumber: syz [ 340.345454][ T5734] usb 4-1: 0:2 : does not exist [ 340.358299][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.367383][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.379396][ T7690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.379502][ T7690] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 340.379556][ T7690] usb 1-1: no configurations [ 340.379574][ T7690] usb 1-1: can't read configurations, error -22 [ 340.796294][ T8294] syz.2.667: attempt to access beyond end of device [ 340.796294][ T8294] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 340.796574][ T8294] syz.2.667: attempt to access beyond end of device [ 340.796574][ T8294] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 341.294172][ T5614] syz-executor: attempt to access beyond end of device [ 341.294172][ T5614] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 341.340966][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 341.341005][ T5614] Tainted: [L]=SOFTLOCKUP [ 341.341013][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.341026][ T5614] Call Trace: [ 341.341035][ T5614] [ 341.341044][ T5614] dump_stack_lvl+0xe8/0x150 [ 341.341081][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 341.341115][ T5614] f2fs_write_end_bio+0x1211/0x16e0 [ 341.341149][ T5614] ? blkg_put+0x22/0x240 [ 341.341192][ T5614] __submit_merged_bio+0x258/0x6a0 [ 341.341217][ T5614] ? rcu_is_watching+0x16/0xb0 [ 341.341248][ T5614] __submit_merged_write_cond+0x3c9/0x4e0 [ 341.341282][ T5614] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 341.341345][ T5614] f2fs_write_data_pages+0x2a27/0x36f0 [ 341.341374][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 341.341435][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.341516][ T5614] ? __bfs+0x153/0x290 [ 341.341535][ T5614] ? __pfx_hlock_conflict+0x10/0x10 [ 341.341580][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 341.341609][ T5614] ? __lock_acquire+0x14b9/0x2e50 [ 341.341650][ T5614] ? irqentry_exit+0x218/0x910 [ 341.341682][ T5614] ? irqentry_exit+0x218/0x910 [ 341.341706][ T5614] ? trace_irq_disable+0x3b/0x140 [ 341.341730][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.341768][ T5614] do_writepages+0x338/0x560 [ 341.341813][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 341.341847][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 341.341873][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 341.341948][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 341.341984][ T5614] f2fs_sync_dirty_inodes+0x30e/0x830 [ 341.342032][ T5614] f2fs_write_checkpoint+0xa3d/0x2710 [ 341.342061][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 341.342115][ T5614] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 341.342186][ T5614] ? try_to_wake_up+0x8b6/0x14d0 [ 341.342225][ T5614] kill_f2fs_super+0x2dd/0x700 [ 341.342264][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 341.342306][ T5614] ? call_rcu+0x64d/0x8b0 [ 341.342329][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 341.342369][ T5614] deactivate_locked_super+0xbc/0x110 [ 341.342402][ T5614] cleanup_mnt+0x3d3/0x460 [ 341.342437][ T5614] task_work_run+0x1d9/0x270 [ 341.342464][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 341.342498][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 341.342519][ T5614] ? rcu_is_watching+0x16/0xb0 [ 341.342549][ T5614] do_syscall_64+0x328/0x520 [ 341.342577][ T5614] ? trace_irq_disable+0x3b/0x140 [ 341.342596][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.342618][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 341.342644][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.342665][ T5614] RIP: 0033:0x7efe93d9f317 [ 341.342686][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 341.342703][ T5614] RSP: 002b:00007ffc283fcf78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 341.342726][ T5614] RAX: 0000000000000000 RBX: 00007efe93e34474 RCX: 00007efe93d9f317 [ 341.342739][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc283fd030 [ 341.342759][ T5614] RBP: 00007ffc283fd030 R08: 00007ffc283fe030 R09: 00000000ffffffff [ 341.342773][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc283fe0c0 [ 341.342786][ T5614] R13: 00007efe93e34474 R14: 0000000000053459 R15: 00007ffc283fe100 [ 341.342820][ T5614] [ 341.344820][ T5614] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 341.344948][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 341.344975][ T5614] Tainted: [L]=SOFTLOCKUP [ 341.344982][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.344993][ T5614] Call Trace: [ 341.345004][ T5614] [ 341.345079][ T5614] dump_stack_lvl+0xe8/0x150 [ 341.345114][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 341.345154][ T5614] f2fs_write_end_bio+0x1211/0x16e0 [ 341.345207][ T5614] __submit_merged_bio+0x258/0x6a0 [ 341.345236][ T5614] ? rcu_is_watching+0x16/0xb0 [ 341.345265][ T5614] __submit_merged_write_cond+0x3c9/0x4e0 [ 341.345299][ T5614] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 341.345348][ T5614] f2fs_write_data_pages+0x2a27/0x36f0 [ 341.345374][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 341.345434][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.345512][ T5614] ? __bfs+0x153/0x290 [ 341.345530][ T5614] ? __pfx_hlock_conflict+0x10/0x10 [ 341.345574][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 341.345600][ T5614] ? __lock_acquire+0x14b9/0x2e50 [ 341.345640][ T5614] ? irqentry_exit+0x218/0x910 [ 341.345670][ T5614] ? irqentry_exit+0x218/0x910 [ 341.345692][ T5614] ? trace_irq_disable+0x3b/0x140 [ 341.345714][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.345741][ T5614] do_writepages+0x338/0x560 [ 341.345791][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 341.345822][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 341.345859][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 341.345944][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 341.345975][ T5614] f2fs_sync_dirty_inodes+0x30e/0x830 [ 341.346019][ T5614] f2fs_write_checkpoint+0xa3d/0x2710 [ 341.346055][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 341.346116][ T5614] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 341.346185][ T5614] ? try_to_wake_up+0x8b6/0x14d0 [ 341.346223][ T5614] kill_f2fs_super+0x2dd/0x700 [ 341.346261][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 341.346302][ T5614] ? call_rcu+0x64d/0x8b0 [ 341.346324][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 341.346365][ T5614] deactivate_locked_super+0xbc/0x110 [ 341.346394][ T5614] cleanup_mnt+0x3d3/0x460 [ 341.346428][ T5614] task_work_run+0x1d9/0x270 [ 341.346452][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 341.346485][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 341.346505][ T5614] ? rcu_is_watching+0x16/0xb0 [ 341.346533][ T5614] do_syscall_64+0x328/0x520 [ 341.346557][ T5614] ? trace_irq_disable+0x3b/0x140 [ 341.346575][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.346595][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 341.346619][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.346638][ T5614] RIP: 0033:0x7efe93d9f317 [ 341.346657][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 341.346673][ T5614] RSP: 002b:00007ffc283fcf78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 341.346694][ T5614] RAX: 0000000000000000 RBX: 00007efe93e34474 RCX: 00007efe93d9f317 [ 341.346707][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc283fd030 [ 341.346719][ T5614] RBP: 00007ffc283fd030 R08: 00007ffc283fe030 R09: 00000000ffffffff [ 341.346731][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc283fe0c0 [ 341.346743][ T5614] R13: 00007efe93e34474 R14: 0000000000053459 R15: 00007ffc283fe100 [ 341.346785][ T5614] [ 341.354859][ T5614] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 341.354952][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 341.354981][ T5614] Tainted: [L]=SOFTLOCKUP [ 341.354989][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.355001][ T5614] Call Trace: [ 341.355010][ T5614] [ 341.355018][ T5614] dump_stack_lvl+0xe8/0x150 [ 341.355054][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 341.355085][ T5614] f2fs_write_end_bio+0x1211/0x16e0 [ 341.355137][ T5614] __submit_merged_bio+0x258/0x6a0 [ 341.355162][ T5614] ? rcu_is_watching+0x16/0xb0 [ 341.355195][ T5614] __submit_merged_write_cond+0x3c9/0x4e0 [ 341.355238][ T5614] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 341.355293][ T5614] f2fs_write_data_pages+0x2a27/0x36f0 [ 341.355321][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 341.355385][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.355471][ T5614] ? __bfs+0x153/0x290 [ 341.355491][ T5614] ? __pfx_hlock_conflict+0x10/0x10 [ 341.355539][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 341.355568][ T5614] ? __lock_acquire+0x14b9/0x2e50 [ 341.355611][ T5614] ? irqentry_exit+0x218/0x910 [ 341.355643][ T5614] ? irqentry_exit+0x218/0x910 [ 341.355667][ T5614] ? trace_irq_disable+0x3b/0x140 [ 341.355691][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 341.355721][ T5614] do_writepages+0x338/0x560 [ 341.355782][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 341.355818][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 341.355846][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 341.355924][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 341.355959][ T5614] f2fs_sync_dirty_inodes+0x30e/0x830 [ 341.356007][ T5614] f2fs_write_checkpoint+0xa3d/0x2710 [ 341.356034][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 341.356089][ T5614] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 341.356166][ T5614] ? try_to_wake_up+0x8b6/0x14d0 [ 341.356205][ T5614] kill_f2fs_super+0x2dd/0x700 [ 341.356243][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 341.356284][ T5614] ? call_rcu+0x64d/0x8b0 [ 341.356307][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 341.356348][ T5614] deactivate_locked_super+0xbc/0x110 [ 341.356377][ T5614] cleanup_mnt+0x3d3/0x460 [ 341.356410][ T5614] task_work_run+0x1d9/0x270 [ 341.356436][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 341.356468][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 341.356488][ T5614] ? rcu_is_watching+0x16/0xb0 [ 341.356516][ T5614] do_syscall_64+0x328/0x520 [ 341.356540][ T5614] ? trace_irq_disable+0x3b/0x140 [ 341.356558][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.356577][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 341.356602][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.356621][ T5614] RIP: 0033:0x7efe93d9f317 [ 341.356641][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 341.356656][ T5614] RSP: 002b:00007ffc283fcf78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 341.356678][ T5614] RAX: 0000000000000000 RBX: 00007efe93e34474 RCX: 00007efe93d9f317 [ 341.356691][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc283fd030 [ 341.356703][ T5614] RBP: 00007ffc283fd030 R08: 00007ffc283fe030 R09: 00000000ffffffff [ 341.356716][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc283fe0c0 [ 341.356728][ T5614] R13: 00007efe93e34474 R14: 0000000000053459 R15: 00007ffc283fe100 [ 341.356771][ T5614] [ 341.374671][ T5614] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 343.170408][ T5742] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 343.391116][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.391723][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.557767][ T8329] loop2: detected capacity change from 0 to 32768 [ 343.937306][ T5742] usb 1-1: unable to get BOS descriptor or descriptor too short [ 343.937414][ T5742] usb 1-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 343.937449][ T5742] usb 1-1: no configurations [ 343.937460][ T5742] usb 1-1: can't read configurations, error -22 [ 344.351477][ T8338] loop2: detected capacity change from 0 to 256 [ 344.354213][ T8338] exfat: Unknown parameter '' [ 344.588805][ T8340] FAULT_INJECTION: forcing a failure. [ 344.588805][ T8340] name failslab, interval 1, probability 0, space 0, times 0 [ 344.588881][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.588925][ T8340] Tainted: [L]=SOFTLOCKUP [ 344.588933][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.588945][ T8340] Call Trace: [ 344.588954][ T8340] [ 344.588963][ T8340] dump_stack_lvl+0xe8/0x150 [ 344.588998][ T8340] should_fail_ex+0x410/0x560 [ 344.589036][ T8340] should_failslab+0xa8/0x100 [ 344.589063][ T8340] __kmalloc_noprof+0xfe/0x720 [ 344.589095][ T8340] ? __kasan_kmalloc+0x93/0xb0 [ 344.589116][ T8340] ? aa_policy_init+0x75/0x300 [ 344.589142][ T8340] ? aa_policy_init+0x75/0x300 [ 344.589179][ T8340] aa_policy_init+0x75/0x300 [ 344.589217][ T8340] aa_alloc_profile+0xa7/0x3e0 [ 344.589251][ T8340] aa_unpack+0x17e8/0x7500 ** replaying previous printk message ** [ 344.589251][ T8340] aa_unpack+0x17e8/0x7500 [ 344.589316][ T8340] ? __pfx_aa_unpack+0x10/0x10 [ 344.589419][ T8340] ? rcu_is_watching+0x16/0xb0 [ 344.589450][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589481][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589513][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589542][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589566][ T8340] ? lock_acquire+0x115/0x350 [ 344.589596][ T8340] ? lock_acquire+0x115/0x350 [ 344.589629][ T8340] ? rcu_is_watching+0x16/0xb0 [ 344.589651][ T8340] ? __kasan_check_byte+0x12/0x40 [ 344.589677][ T8340] ? rcu_is_watching+0x16/0xb0 [ 344.589713][ T8340] ? rcu_is_watching+0x16/0xb0 [ 344.589734][ T8340] ? __kasan_check_byte+0x12/0x40 [ 344.589759][ T8340] ? rcu_is_watching+0x16/0xb0 [ 344.589783][ T8340] ? lock_release+0x4b/0x3c0 [ 344.589802][ T8340] ? lock_release+0x4b/0x3c0 [ 344.589836][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589866][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589905][ T8340] ? lock_acquire+0x115/0x350 [ 344.589934][ T8340] ? lock_acquire+0x115/0x350 [ 344.589957][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.589982][ T8340] ? is_bpf_text_address+0x26/0x2b0 [ 344.590017][ T8340] aa_replace_profiles+0x24a/0x2ab0 [ 344.590037][ T8340] ? kernel_text_address+0xa5/0xe0 [ 344.590064][ T8340] ? do_raw_spin_lock+0x12b/0x2f0 [ 344.590112][ T8340] ? lock_acquire+0x115/0x350 [ 344.590137][ T8340] ? __pfx_aa_replace_profiles+0x10/0x10 [ 344.590161][ T8340] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.590189][ T8340] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.590214][ T8340] ? stack_depot_save_flags+0x404/0x7f0 [ 344.590251][ T8340] ? kasan_save_track+0x4f/0x80 [ 344.590269][ T8340] ? kasan_save_track+0x3e/0x80 [ 344.590287][ T8340] ? __kasan_kmalloc+0x93/0xb0 [ 344.590308][ T8340] ? __kvmalloc_node_noprof+0x50f/0x820 [ 344.590328][ T8340] ? aa_loaddata_alloc+0x74/0x1e0 [ 344.590347][ T8340] ? aa_simple_write_to_buffer+0x80/0x1f0 [ 344.590368][ T8340] ? policy_update+0x36e/0x640 [ 344.590388][ T8340] ? profile_load+0x1cb/0x320 [ 344.590408][ T8340] ? vfs_write+0x296/0xba0 [ 344.590434][ T8340] ? ksys_write+0x150/0x270 [ 344.590460][ T8340] ? do_syscall_64+0x166/0x520 [ 344.590486][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.590520][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 344.590571][ T8340] ? lock_acquire+0x115/0x350 [ 344.590616][ T8340] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 344.590642][ T8340] policy_update+0x3a9/0x640 [ 344.590672][ T8340] ? __pfx_policy_update+0x10/0x10 [ 344.590737][ T8340] ? lock_acquire+0x115/0x350 [ 344.590772][ T8340] profile_load+0x1cb/0x320 [ 344.590798][ T8340] ? __pfx_profile_load+0x10/0x10 [ 344.590820][ T8340] vfs_write+0x296/0xba0 [ 344.590860][ T8340] ? __pfx_vfs_write+0x10/0x10 [ 344.590891][ T8340] ? __fget_files+0x2a/0x420 [ 344.590922][ T8340] ? __fget_files+0x3a2/0x420 [ 344.590947][ T8340] ? __fget_files+0x2a/0x420 [ 344.590984][ T8340] ksys_write+0x150/0x270 [ 344.591017][ T8340] ? __pfx_ksys_write+0x10/0x10 [ 344.591059][ T8340] do_syscall_64+0x166/0x520 [ 344.591086][ T8340] ? trace_irq_disable+0x3b/0x140 [ 344.591106][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.591127][ T8340] ? clear_bhb_loop+0x70/0xc0 [ 344.591153][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.591174][ T8340] RIP: 0033:0x7efe93d9e0d9 [ 344.591195][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.591211][ T8340] RSP: 002b:00007efe94c44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.591236][ T8340] RAX: ffffffffffffffda RBX: 00007efe94025fa0 RCX: 00007efe93d9e0d9 [ 344.591251][ T8340] RDX: 0000000000000082 RSI: 0000200000000400 RDI: 0000000000000003 [ 344.591264][ T8340] RBP: 00007efe94c44090 R08: 0000000000000000 R09: 0000000000000000 [ 344.591276][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.591289][ T8340] R13: 00007efe94026038 R14: 00007efe94025fa0 R15: 00007ffc283fdd08 [ 344.591324][ T8340] [ 344.688076][ T8340] ------------[ cut here ]------------ [ 344.688090][ T8340] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): [ 344.688104][ T8340] WARNING: security/apparmor/lib.c:508 at aa_policy_destroy+0x164/0x1b0, CPU#0: syz.2.677/8340 [ 345.132242][ T8340] Modules linked in: [ 345.136189][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.147999][ T8340] Tainted: [L]=SOFTLOCKUP [ 345.153094][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.163576][ T8340] RIP: 0010:aa_policy_destroy+0x16b/0x1b0 [ 345.169429][ T8340] Code: 85 ed 7e 4d e8 86 e6 33 fd 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc e8 73 e6 33 fd 48 8d 3d 8c 03 f1 0b 48 c7 c6 73 b0 5a 8e <67> 48 0f b9 3a e9 04 ff ff ff e8 56 e6 33 fd 48 8d 3d 7f 03 f1 0b [ 345.189232][ T8340] RSP: 0018:ffffc90004e9ea00 EFLAGS: 00010293 [ 345.195358][ T8340] RAX: ffffffff8493d8fd RBX: ffff888075ab5400 RCX: ffff88801e3ebe80 [ 345.203501][ T8340] RDX: 0000000000000000 RSI: ffffffff8e5ab073 RDI: ffffffff9084dc90 [ 345.211575][ T8340] RBP: 0000000000000000 R08: 0000000000000cc0 R09: 00000000ffffffff [ 345.219639][ T8340] R10: dffffc0000000000 R11: fffffbfff1dd5c67 R12: dead000000000122 [ 345.227650][ T8340] R13: ffff888075ab5400 R14: ffff888075ab5428 R15: dffffc0000000000 [ 345.235881][ T8340] FS: 00007efe94c446c0(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 345.245793][ T8340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.253276][ T8340] CR2: 00007f2e9f9556c8 CR3: 0000000077132000 CR4: 00000000003526f0 [ 345.261388][ T8340] Call Trace: [ 345.264791][ T8340] [ 345.267852][ T8340] aa_free_profile+0x9d/0x9f0 [ 345.272652][ T8340] ? aa_policy_init+0xed/0x300 [ 345.277458][ T8340] aa_alloc_profile+0x1e4/0x3e0 [ 345.282424][ T8340] aa_unpack+0x17e8/0x7500 [ 345.287089][ T8340] ? __pfx_aa_unpack+0x10/0x10 [ 345.292033][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.296840][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.301898][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.306876][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.311942][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.316921][ T8340] ? lock_acquire+0x115/0x350 [ 345.321712][ T8340] ? lock_acquire+0x115/0x350 [ 345.326557][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.331414][ T8340] ? __kasan_check_byte+0x12/0x40 [ 345.336478][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.341355][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.346834][ T8340] ? __kasan_check_byte+0x12/0x40 [ 345.352655][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.357654][ T8340] ? lock_release+0x4b/0x3c0 [ 345.362449][ T8340] ? lock_release+0x4b/0x3c0 [ 345.367095][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.372363][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.377359][ T8340] ? lock_acquire+0x115/0x350 [ 345.382231][ T8340] ? lock_acquire+0x115/0x350 [ 345.386959][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.391989][ T8340] ? is_bpf_text_address+0x26/0x2b0 [ 345.397242][ T8340] aa_replace_profiles+0x24a/0x2ab0 [ 345.401381][ T5734] usb 4-1: 5:0: failed to get current value for ch 0 (-110) [ 345.410218][ T8340] ? kernel_text_address+0xa5/0xe0 [ 345.415411][ T8340] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.420650][ T8340] ? lock_acquire+0x115/0x350 [ 345.425556][ T8340] ? __pfx_aa_replace_profiles+0x10/0x10 [ 345.431312][ T8340] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.437246][ T8340] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.443167][ T8340] ? stack_depot_save_flags+0x404/0x7f0 [ 345.449750][ T8340] ? kasan_save_track+0x4f/0x80 [ 345.455253][ T8340] ? kasan_save_track+0x3e/0x80 [ 345.460495][ T8340] ? __kasan_kmalloc+0x93/0xb0 [ 345.465298][ T8340] ? __kvmalloc_node_noprof+0x50f/0x820 [ 345.471319][ T8340] ? aa_loaddata_alloc+0x74/0x1e0 [ 345.476387][ T8340] ? aa_simple_write_to_buffer+0x80/0x1f0 [ 345.483970][ T8340] ? policy_update+0x36e/0x640 [ 345.488827][ T8340] ? profile_load+0x1cb/0x320 [ 345.493661][ T8340] ? vfs_write+0x296/0xba0 [ 345.498124][ T8340] ? ksys_write+0x150/0x270 [ 345.502963][ T8340] ? do_syscall_64+0x166/0x520 [ 345.507775][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.513993][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.519538][ T8340] ? lock_acquire+0x115/0x350 [ 345.524288][ T8340] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 345.530226][ T8340] policy_update+0x3a9/0x640 [ 345.534869][ T8340] ? __pfx_policy_update+0x10/0x10 [ 345.540094][ T8340] ? lock_acquire+0x115/0x350 [ 345.544845][ T8340] profile_load+0x1cb/0x320 [ 345.550485][ T8340] ? __pfx_profile_load+0x10/0x10 [ 345.555562][ T8340] vfs_write+0x296/0xba0 [ 345.560568][ T8340] ? __pfx_vfs_write+0x10/0x10 [ 345.565422][ T8340] ? __fget_files+0x2a/0x420 [ 345.570165][ T8340] ? __fget_files+0x3a2/0x420 [ 345.574901][ T8340] ? __fget_files+0x2a/0x420 [ 345.579592][ T8340] ksys_write+0x150/0x270 [ 345.583997][ T8340] ? __pfx_ksys_write+0x10/0x10 [ 345.588879][ T8340] do_syscall_64+0x166/0x520 [ 345.593621][ T8340] ? trace_irq_disable+0x3b/0x140 [ 345.598680][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.604863][ T8340] ? clear_bhb_loop+0x70/0xc0 [ 345.609620][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.615629][ T8340] RIP: 0033:0x7efe93d9e0d9 [ 345.620292][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.640557][ T8340] RSP: 002b:00007efe94c44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.649078][ T8340] RAX: ffffffffffffffda RBX: 00007efe94025fa0 RCX: 00007efe93d9e0d9 [ 345.658310][ T8340] RDX: 0000000000000082 RSI: 0000200000000400 RDI: 0000000000000003 [ 345.666956][ T8340] RBP: 00007efe94c44090 R08: 0000000000000000 R09: 0000000000000000 [ 345.675020][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.683075][ T8340] R13: 00007efe94026038 R14: 00007efe94025fa0 R15: 00007ffc283fdd08 [ 345.691175][ T8340] [ 345.694239][ T8340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.701622][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.712393][ T8340] Tainted: [L]=SOFTLOCKUP [ 345.716717][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.726783][ T8340] Call Trace: [ 345.730067][ T8340] [ 345.733013][ T8340] vpanic+0x56d/0xa60 [ 345.737033][ T8340] ? __pfx__printk+0x10/0x10 [ 345.741634][ T8340] ? __pfx_vpanic+0x10/0x10 [ 345.746251][ T8340] ? is_bpf_text_address+0x292/0x2b0 [ 345.751542][ T8340] ? is_bpf_text_address+0x26/0x2b0 [ 345.756780][ T8340] panic+0xc5/0xd0 [ 345.760526][ T8340] ? __pfx_panic+0x10/0x10 [ 345.764974][ T8340] __warn+0x315/0x4c0 [ 345.769058][ T8340] ? aa_policy_destroy+0x164/0x1b0 [ 345.774209][ T8340] ? aa_policy_destroy+0x164/0x1b0 [ 345.779359][ T8340] __report_bug+0x276/0x570 [ 345.783902][ T8340] ? aa_policy_destroy+0x164/0x1b0 [ 345.789069][ T8340] ? __pfx___report_bug+0x10/0x10 [ 345.794132][ T8340] report_bug_entry+0x19b/0x290 [ 345.799004][ T8340] ? aa_policy_destroy+0x16b/0x1b0 [ 345.804132][ T8340] ? aa_policy_destroy+0x170/0x1b0 [ 345.809286][ T8340] handle_bug+0xce/0x200 [ 345.813554][ T8340] exc_invalid_op+0x1a/0x50 [ 345.818092][ T8340] asm_exc_invalid_op+0x1a/0x20 [ 345.822956][ T8340] RIP: 0010:aa_policy_destroy+0x16b/0x1b0 [ 345.828691][ T8340] Code: 85 ed 7e 4d e8 86 e6 33 fd 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc e8 73 e6 33 fd 48 8d 3d 8c 03 f1 0b 48 c7 c6 73 b0 5a 8e <67> 48 0f b9 3a e9 04 ff ff ff e8 56 e6 33 fd 48 8d 3d 7f 03 f1 0b [ 345.848307][ T8340] RSP: 0018:ffffc90004e9ea00 EFLAGS: 00010293 [ 345.854492][ T8340] RAX: ffffffff8493d8fd RBX: ffff888075ab5400 RCX: ffff88801e3ebe80 [ 345.862490][ T8340] RDX: 0000000000000000 RSI: ffffffff8e5ab073 RDI: ffffffff9084dc90 [ 345.870474][ T8340] RBP: 0000000000000000 R08: 0000000000000cc0 R09: 00000000ffffffff [ 345.878464][ T8340] R10: dffffc0000000000 R11: fffffbfff1dd5c67 R12: dead000000000122 [ 345.886467][ T8340] R13: ffff888075ab5400 R14: ffff888075ab5428 R15: dffffc0000000000 [ 345.894818][ T8340] ? aa_policy_destroy+0x15d/0x1b0 [ 345.899979][ T8340] aa_free_profile+0x9d/0x9f0 [ 345.904689][ T8340] ? aa_policy_init+0xed/0x300 [ 345.909481][ T8340] aa_alloc_profile+0x1e4/0x3e0 [ 345.914358][ T8340] aa_unpack+0x17e8/0x7500 [ 345.918815][ T8340] ? __pfx_aa_unpack+0x10/0x10 [ 345.923740][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.928518][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.933477][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.938518][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.943470][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 345.948508][ T8340] ? lock_acquire+0x115/0x350 [ 345.953210][ T8340] ? lock_acquire+0x115/0x350 [ 345.957923][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.962705][ T8340] ? __kasan_check_byte+0x12/0x40 [ 345.967755][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.972557][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.977341][ T8340] ? __kasan_check_byte+0x12/0x40 [ 345.982391][ T8340] ? rcu_is_watching+0x16/0xb0 [ 345.987197][ T8340] ? lock_release+0x4b/0x3c0 [ 345.991814][ T8340] ? lock_release+0x4b/0x3c0 [ 345.996423][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 346.001378][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 346.006433][ T8340] ? lock_acquire+0x115/0x350 [ 346.011138][ T8340] ? lock_acquire+0x115/0x350 [ 346.015913][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 346.020875][ T8340] ? is_bpf_text_address+0x26/0x2b0 [ 346.026106][ T8340] aa_replace_profiles+0x24a/0x2ab0 [ 346.031317][ T8340] ? kernel_text_address+0xa5/0xe0 [ 346.036441][ T8340] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.041476][ T8340] ? lock_acquire+0x115/0x350 [ 346.046164][ T8340] ? __pfx_aa_replace_profiles+0x10/0x10 [ 346.051818][ T8340] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.057657][ T8340] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.063477][ T8340] ? stack_depot_save_flags+0x404/0x7f0 [ 346.069061][ T8340] ? kasan_save_track+0x4f/0x80 [ 346.073920][ T8340] ? kasan_save_track+0x3e/0x80 [ 346.078866][ T8340] ? __kasan_kmalloc+0x93/0xb0 [ 346.083722][ T8340] ? __kvmalloc_node_noprof+0x50f/0x820 [ 346.089307][ T8340] ? aa_loaddata_alloc+0x74/0x1e0 [ 346.094336][ T8340] ? aa_simple_write_to_buffer+0x80/0x1f0 [ 346.100068][ T8340] ? policy_update+0x36e/0x640 [ 346.104859][ T8340] ? profile_load+0x1cb/0x320 [ 346.109561][ T8340] ? vfs_write+0x296/0xba0 [ 346.114008][ T8340] ? ksys_write+0x150/0x270 [ 346.118793][ T8340] ? do_syscall_64+0x166/0x520 [ 346.123571][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.129658][ T8340] ? __lock_acquire+0x6df/0x2e50 [ 346.134624][ T8340] ? lock_acquire+0x115/0x350 [ 346.139418][ T8340] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 346.145238][ T8340] policy_update+0x3a9/0x640 [ 346.149860][ T8340] ? __pfx_policy_update+0x10/0x10 [ 346.154993][ T8340] ? lock_acquire+0x115/0x350 [ 346.159728][ T8340] profile_load+0x1cb/0x320 [ 346.164245][ T8340] ? __pfx_profile_load+0x10/0x10 [ 346.169285][ T8340] vfs_write+0x296/0xba0 [ 346.173639][ T8340] ? __pfx_vfs_write+0x10/0x10 [ 346.178421][ T8340] ? __fget_files+0x2a/0x420 [ 346.183041][ T8340] ? __fget_files+0x3a2/0x420 [ 346.187743][ T8340] ? __fget_files+0x2a/0x420 [ 346.192359][ T8340] ksys_write+0x150/0x270 [ 346.196709][ T8340] ? __pfx_ksys_write+0x10/0x10 [ 346.201597][ T8340] do_syscall_64+0x166/0x520 [ 346.206228][ T8340] ? trace_irq_disable+0x3b/0x140 [ 346.211264][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.217347][ T8340] ? clear_bhb_loop+0x70/0xc0 [ 346.222047][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.228056][ T8340] RIP: 0033:0x7efe93d9e0d9 [ 346.232499][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.252209][ T8340] RSP: 002b:00007efe94c44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.260651][ T8340] RAX: ffffffffffffffda RBX: 00007efe94025fa0 RCX: 00007efe93d9e0d9 [ 346.268650][ T8340] RDX: 0000000000000082 RSI: 0000200000000400 RDI: 0000000000000003 [ 346.276732][ T8340] RBP: 00007efe94c44090 R08: 0000000000000000 R09: 0000000000000000 [ 346.284816][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.292799][ T8340] R13: 00007efe94026038 R14: 00007efe94025fa0 R15: 00007ffc283fdd08 [ 346.300815][ T8340] [ 346.304152][ T8340] Kernel Offset: disabled [ 346.308479][ T8340] Rebooting in 86400 seconds..