last executing test programs:

6.73669676s ago: executing program 3 (id=445):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x142, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200))

6.506194756s ago: executing program 3 (id=447):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="200004000000001008007c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.696959025s ago: executing program 0 (id=467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @random="b92e35ac622e"}, 0x0, @default, 0xb, @void, @void, @val={0x3, 0x1, 0x95}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6, 0x3, 'Z*'}]}]]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0)

4.547777955s ago: executing program 0 (id=468):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setns(0xc9, 0x0)
bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x1, 0xdf}, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4, 0x1}, 0x10)

4.305498584s ago: executing program 0 (id=470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10683, &(0x7f0000011040)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0xfffffffe, 0x3)

4.155332205s ago: executing program 2 (id=472):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@random="85d2f2d1ab16", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "85701efab5280e45360878b97c399624d3787bff1a79d07ad4d2334b7c0f15fd", "eadc7a84acfc5dff8215cb452bee8ae1edb4c26af156c73df738e73f962de551a9592829acb1398ddb64698ac2563752", "a5cd4c0590b370f05b61e92bd2f39fc771db166d5b3d00", {"a2609f1e47eb252b06710f6949cd9d93", "e883ed5d0a7786428fd0d90fadee88ef"}}}}}}}, 0x0)

4.066391893s ago: executing program 2 (id=473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

3.958229025s ago: executing program 2 (id=474):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

3.83294593s ago: executing program 2 (id=475):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

3.754137477s ago: executing program 3 (id=476):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
cachestat(r0, &(0x7f0000000100)={0x9, 0x2}, &(0x7f0000000180), 0x0)

3.73726727s ago: executing program 1 (id=477):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x103042, 0x100)
ftruncate(r1, 0x2007fff)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}})

2.99889423s ago: executing program 3 (id=478):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x3, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)='.', 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0])
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.988533272s ago: executing program 2 (id=486):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)

2.70664324s ago: executing program 2 (id=479):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0)
ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000001")
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

2.704522001s ago: executing program 0 (id=488):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0xd6, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20)

2.583339955s ago: executing program 1 (id=480):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x40000)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)='P', 0x1}], 0x1}}], 0x1, 0x8041)

2.085057076s ago: executing program 3 (id=481):
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x12d)
write(r0, &(0x7f0000000000)='3', 0x1)

1.657061893s ago: executing program 3 (id=482):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12014d01020000402505a1a44000010203010902"], 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

1.194178118s ago: executing program 0 (id=483):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, &(0x7f0000000240)=0x8)

1.03534123s ago: executing program 0 (id=484):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0xfff, 0x2000003, 0xffff2ceb, 0x15, "0062ba7d821f000000000000000e00fffeff00"})
r2 = syz_open_pts(r1, 0x8182)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1.03510905s ago: executing program 1 (id=485):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
syz_emit_ethernet(0xfc2, &(0x7f0000002900)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "439620", 0xf8c, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, {[@srh={0x6c, 0x6, 0x4, 0x3, 0xf, 0x10, 0xbc7, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x33, 0x0, 0x61, 0x1, 0x0, 0x6, 0x66}, @hopopts={0xc, 0xb, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x7, 0x0, [0x3, 0xfffffffffffffffc, 0x0, 0x7654, 0x1af9, 0x10001, 0x7f]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xf, [0x5]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x0, 0x1ce, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @generic={0x9, 0xe30, "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"}]}], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "5eb41565e6aeae40c8115062055b32a89b314ddaa32d915c1032b0cde2e9b38b", "f0959e18e55d09c8fcf1ae591fd3903b", {"2accc39c7ff32b7ca8e2cfedd896d10e", "909aae652449ec5e43a8e7aae9452614"}}}}}}}}, 0x0)

375.738954ms ago: executing program 1 (id=487):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

249.53964ms ago: executing program 1 (id=489):
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x1, 0x0)
futex(0x0, 0x5, 0x0, &(0x7f0000000180), &(0x7f0000048000), 0x0)

0s ago: executing program 1 (id=490):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts.
[   77.929702][ T5763] cgroup: Unknown subsys name 'net'
[   78.032688][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.808656][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.903228][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.911553][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.914268][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.920172][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.934794][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.942916][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.946053][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.951227][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.965003][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.974099][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.981083][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.981807][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.988959][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.002854][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.003042][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.018065][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.018745][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.026089][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.041347][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.048830][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.056131][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.063373][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.071259][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.078974][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.530435][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   82.588050][ T5780] chnl_net:caif_netlink_parms(): no params data found
[   82.692881][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   82.758978][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.766678][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.773968][ T5777] bridge_slave_0: entered allmulticast mode
[   82.781779][ T5777] bridge_slave_0: entered promiscuous mode
[   82.799644][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   82.821222][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.828490][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.835974][ T5777] bridge_slave_1: entered allmulticast mode
[   82.842837][ T5777] bridge_slave_1: entered promiscuous mode
[   82.867185][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.874336][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.882077][ T5780] bridge_slave_0: entered allmulticast mode
[   82.889037][ T5780] bridge_slave_0: entered promiscuous mode
[   82.927597][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.934826][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.944744][ T5780] bridge_slave_1: entered allmulticast mode
[   82.951801][ T5780] bridge_slave_1: entered promiscuous mode
[   83.009627][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.021902][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.035768][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.063683][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.144156][ T5780] team0: Port device team_slave_0 added
[   83.150901][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.160536][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.168106][ T5784] bridge_slave_0: entered allmulticast mode
[   83.175230][ T5784] bridge_slave_0: entered promiscuous mode
[   83.194042][ T5777] team0: Port device team_slave_0 added
[   83.203568][ T5777] team0: Port device team_slave_1 added
[   83.212503][ T5780] team0: Port device team_slave_1 added
[   83.219003][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.226428][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.233602][ T5784] bridge_slave_1: entered allmulticast mode
[   83.240925][ T5784] bridge_slave_1: entered promiscuous mode
[   83.311229][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.318447][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.326032][ T5775] bridge_slave_0: entered allmulticast mode
[   83.332848][ T5775] bridge_slave_0: entered promiscuous mode
[   83.352222][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.359371][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.385714][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.400077][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.413051][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.422721][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.432666][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.440363][ T5775] bridge_slave_1: entered allmulticast mode
[   83.448237][ T5775] bridge_slave_1: entered promiscuous mode
[   83.457100][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.464069][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.490229][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.511367][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.518515][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.544654][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.607182][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.614170][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.640652][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.665788][ T5780] hsr_slave_0: entered promiscuous mode
[   83.672966][ T5780] hsr_slave_1: entered promiscuous mode
[   83.700249][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.712401][ T5784] team0: Port device team_slave_0 added
[   83.720963][ T5784] team0: Port device team_slave_1 added
[   83.743637][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.787313][ T5775] team0: Port device team_slave_0 added
[   83.818436][ T5777] hsr_slave_0: entered promiscuous mode
[   83.825338][ T5777] hsr_slave_1: entered promiscuous mode
[   83.831737][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.840469][ T5777] Cannot create hsr debugfs directory
[   83.859847][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.866989][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.893310][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.906986][ T5775] team0: Port device team_slave_1 added
[   83.913950][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.921066][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.949600][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.016484][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.023492][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.049719][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.060795][ T5788] Bluetooth: hci1: command tx timeout
[   84.091678][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.099019][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.125766][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.136697][ T5788] Bluetooth: hci3: command tx timeout
[   84.145963][ T5788] Bluetooth: hci0: command tx timeout
[   84.146010][ T5779] Bluetooth: hci2: command tx timeout
[   84.257710][ T5784] hsr_slave_0: entered promiscuous mode
[   84.264014][ T5784] hsr_slave_1: entered promiscuous mode
[   84.270706][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.278367][ T5784] Cannot create hsr debugfs directory
[   84.331222][ T5775] hsr_slave_0: entered promiscuous mode
[   84.338504][ T5775] hsr_slave_1: entered promiscuous mode
[   84.345780][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.353392][ T5775] Cannot create hsr debugfs directory
[   84.550063][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.602541][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.639354][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.650111][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.748432][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.764374][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.782936][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.794643][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.917443][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.937435][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.948028][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.990395][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.037604][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.078871][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.097462][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.123125][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[   85.130502][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.142407][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.194972][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.202411][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.213889][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.221101][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.252225][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.351382][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   85.382240][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.389402][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.421691][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.428964][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.457040][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.584126][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   85.623799][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.631049][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.654315][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.682035][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.689227][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.793543][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   85.809732][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.846439][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.853627][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.904380][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.911658][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.031929][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.100223][ T5780] veth0_vlan: entered promiscuous mode
[   86.114349][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.136555][ T5779] Bluetooth: hci1: command tx timeout
[   86.178967][ T5780] veth1_vlan: entered promiscuous mode
[   86.216534][ T5779] Bluetooth: hci2: command tx timeout
[   86.222025][ T5779] Bluetooth: hci0: command tx timeout
[   86.222213][ T5788] Bluetooth: hci3: command tx timeout
[   86.312077][ T5777] veth0_vlan: entered promiscuous mode
[   86.332436][ T5780] veth0_macvtap: entered promiscuous mode
[   86.344587][ T5780] veth1_macvtap: entered promiscuous mode
[   86.384820][ T5777] veth1_vlan: entered promiscuous mode
[   86.413387][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.482949][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.501146][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.530762][ T5777] veth0_macvtap: entered promiscuous mode
[   86.546398][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.559859][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.568697][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.577486][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.601491][ T5777] veth1_macvtap: entered promiscuous mode
[   86.661819][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.681174][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.692037][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.706371][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.746941][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.758317][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.771904][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.792018][ T5775] veth0_vlan: entered promiscuous mode
[   86.808932][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.818259][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.827314][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.836491][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.904346][ T5775] veth1_vlan: entered promiscuous mode
[   86.956490][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.964538][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.987878][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.006172][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.066780][ T5784] veth0_vlan: entered promiscuous mode
[   87.087122][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.104090][ T5784] veth1_vlan: entered promiscuous mode
[   87.115085][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.154421][ T5775] veth0_macvtap: entered promiscuous mode
[   87.181658][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.201081][ T5775] veth1_macvtap: entered promiscuous mode
[   87.221169][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.289108][ T5784] veth0_macvtap: entered promiscuous mode
[   87.314447][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.337176][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.347533][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.358257][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.372176][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.389354][ T5784] veth1_macvtap: entered promiscuous mode
[   87.420303][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.455114][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.485310][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.515590][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.527813][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.588899][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.616115][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.635621][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.644380][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.666644][ T5846] syz.0.1[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   87.711871][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.745340][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.775474][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.801578][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.844963][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.865187][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.893626][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.939533][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.973232][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.998871][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.023105][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.034714][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.059064][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.100773][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.158783][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.170092][ T5854] loop3: detected capacity change from 0 to 1024
[   88.197002][ T5854] =======================================================
[   88.197002][ T5854] WARNING: The mand mount option has been deprecated and
[   88.197002][ T5854]          and is ignored by this kernel. Remove the mand
[   88.197002][ T5854]          option from the mount to silence this warning.
[   88.197002][ T5854] =======================================================
[   88.227852][ T5788] Bluetooth: hci1: command tx timeout
[   88.232732][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.248285][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.257426][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.296120][ T5788] Bluetooth: hci3: command tx timeout
[   88.301686][ T5788] Bluetooth: hci2: command tx timeout
[   88.307281][ T5779] Bluetooth: hci0: command tx timeout
[   88.330499][ T5854] EXT4-fs: Ignoring removed oldalloc option
[   88.370393][ T5854] EXT4-fs: Ignoring removed orlov option
[   88.456855][ T5854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   88.494012][ T5854] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.503165][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.513024][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.553674][ T5846] loop0: detected capacity change from 0 to 32768
[   88.585161][ T5846] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5846)
[   88.658875][ T5846] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.683485][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.697670][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.715627][ T5846] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   88.724356][ T5846] BTRFS info (device loop0): force clearing of disk cache
[   88.753000][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.756825][ T5854] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.7: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.773121][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.787672][ T5846] BTRFS info (device loop0): enabling auto defrag
[   88.794250][ T5846] BTRFS info (device loop0): max_inline at 0
[   88.822497][ T5846] BTRFS info (device loop0): enabling disk space caching
[   88.840817][ T5854] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[   88.874073][ T5846] BTRFS info (device loop0): disk space caching is enabled
[   88.885018][ T5854] EXT4-fs (loop3): This should not happen!! Data will be lost
[   88.885018][ T5854] 
[   88.897008][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.919655][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.963002][   T49] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:3: lblock 4 mapped to illegal pblock 4 (length 2)
[   89.030449][   T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[   89.076749][   T49] EXT4-fs (loop3): This should not happen!! Data will be lost
[   89.076749][   T49] 
[   89.091331][   T49] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[   89.107980][ T5846] BTRFS info (device loop0): enabling ssd optimizations
[   89.141060][   T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   89.164572][ T5846] BTRFS info (device loop0): rebuilding free space tree
[   89.194206][   T49] EXT4-fs (loop3): This should not happen!! Data will be lost
[   89.194206][   T49] 
[   89.238546][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   89.296450][ T5846] BTRFS info (device loop0): disabling free space tree
[   89.303616][ T5846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.315152][ T5846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   89.474396][ T5883] loop1: detected capacity change from 0 to 256
[   89.487069][ T5882] bonding: no command found in bonding_masters - use +ifname or -ifname
[   89.573759][ T5883] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d)
[   89.798908][ T2962] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   89.990183][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.024157][   T42] kernel write not supported for file /gssd/clntXX/gssd (pid: 42 comm: kworker/1:1)
[   90.182788][ T5897] loop1: detected capacity change from 0 to 2048
[   90.254365][ T5897] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   90.295084][ T5788] Bluetooth: hci1: command tx timeout
[   90.350106][ T5897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.380457][ T5788] Bluetooth: hci3: command tx timeout
[   90.385997][ T5779] Bluetooth: hci2: command tx timeout
[   90.386061][ T5783] Bluetooth: hci0: command tx timeout
[   90.491517][   T42] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   90.496401][ T5903] netlink: 'syz.0.15': attribute type 3 has an invalid length.
[   90.758095][   T42] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   91.233973][ T5911] netlink: 'syz.1.20': attribute type 10 has an invalid length.
[   91.281477][ T5819] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   91.294354][ T5911] team0: Port device netdevsim0 added
[   91.310533][ T5905] ceph: No mds server is up or the cluster is laggy
[   91.326887][ T5912] netlink: 'syz.1.20': attribute type 10 has an invalid length.
[   91.459134][ T5912] team0: Port device netdevsim0 removed
[   91.470995][ T5912] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   91.484073][ T5916] hsr0: entered promiscuous mode
[   91.494794][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'.
[   91.519916][ T5916] hsr_slave_0: left promiscuous mode
[   91.536956][ T5916] hsr_slave_1: left promiscuous mode
[   91.539953][   T27] audit: type=1800 audit(1791038389.182:2): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.24" name="addr_adrfam" dev="configfs" ino=7621 res=0 errno=0
[   91.666461][ T5916] hsr0 (unregistering): left promiscuous mode
[   91.983648][ T5931] loop3: detected capacity change from 0 to 4096
[   92.009108][ T5931] EXT4-fs (loop3): Test dummy encryption mode enabled
[   92.053287][ T5931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.218456][    T9] cfg80211: failed to load regulatory.db
[   92.619900][ T5931] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   92.770815][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.906378][ T5956] loop1: detected capacity change from 0 to 128
[   93.075380][ T5958] syzkaller1: entered promiscuous mode
[   93.080974][ T5958] syzkaller1: entered allmulticast mode
[   93.300827][ T5964] loop2: detected capacity change from 0 to 512
[   93.354219][ T5949] loop0: detected capacity change from 0 to 32768
[   93.387082][ T5964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.400082][ T5964] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.506980][ T5949] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   93.654560][ T5949] XFS (loop0): Ending clean mount
[   93.723036][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.096604][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   94.318872][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.530528][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   94.559605][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   94.593456][    T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   94.615720][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.640944][    T9] usb 4-1: Product: syz
[   94.655365][    T9] usb 4-1: Manufacturer: syz
[   94.665340][    T9] usb 4-1: SerialNumber: syz
[   94.968522][    T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   95.396698][ T6014] FAULT_INJECTION: forcing a failure.
[   95.396698][ T6014] name failslab, interval 1, probability 0, space 0, times 1
[   95.424493][ T6014] CPU: 0 PID: 6014 Comm: syz.1.58 Not tainted syzkaller #0
[   95.431767][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   95.441866][ T6014] Call Trace:
[   95.445176][ T6014]  <TASK>
[   95.448142][ T6014]  dump_stack_lvl+0x18c/0x250
[   95.452881][ T6014]  ? show_regs_print_info+0x20/0x20
[   95.458128][ T6014]  ? load_image+0x420/0x420
[   95.462682][ T6014]  ? __lock_acquire+0x7eb0/0x7eb0
[   95.467751][ T6014]  should_fail_ex+0x394/0x4c0
[   95.472487][ T6014]  should_failslab+0x9/0x20
[   95.477033][ T6014]  slab_pre_alloc_hook+0x59/0x300
[   95.482115][ T6014]  kmem_cache_alloc_lru+0x4d/0x2b0
[   95.487278][ T6014]  ? sock_alloc_inode+0x28/0xc0
[   95.492184][ T6014]  sock_alloc_inode+0x28/0xc0
[   95.496918][ T6014]  ? sockfs_init_fs_context+0xb0/0xb0
[   95.502341][ T6014]  new_inode_pseudo+0x63/0x1d0
[   95.507152][ T6014]  __sock_create+0x12d/0x940
[   95.511794][ T6014]  ? smc_hash_sk+0x1f2/0x260
[   95.516428][ T6014]  __smc_create+0x19f/0x260
[   95.520981][ T6014]  __sock_create+0x49e/0x940
[   95.525625][ T6014]  __sys_socket+0xd7/0x1b0
[   95.530091][ T6014]  __x64_sys_socket+0x7a/0x90
[   95.534812][ T6014]  do_syscall_64+0x55/0xb0
[   95.539269][ T6014]  ? clear_bhb_loop+0x40/0x90
[   95.544008][ T6014]  ? clear_bhb_loop+0x40/0x90
[   95.548717][ T6014]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.554659][ T6014] RIP: 0033:0x7fdb5859e159
[   95.559137][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.578793][ T6014] RSP: 002b:00007fdb567f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   95.587270][ T6014] RAX: ffffffffffffffda RBX: 00007fdb58825fa0 RCX: 00007fdb5859e159
[   95.595507][ T6014] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[   95.603531][ T6014] RBP: 00007fdb5863506b R08: 0000000000000000 R09: 0000000000000000
[   95.611559][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.619580][ T6014] R13: 00007fdb58826038 R14: 00007fdb58825fa0 R15: 00007fffcf5197d8
[   95.627612][ T6014]  </TASK>
[   95.647656][ T6014] socket: no more sockets
[   95.654129][   T42] usb 4-1: USB disconnect, device number 2
[   95.718176][   T42] usblp0: removed
[   96.183135][ T6012] loop0: detected capacity change from 0 to 32768
[   96.260467][ T6012] JBD2: Ignoring recovery information on journal
[   96.325952][ T6022] loop2: detected capacity change from 0 to 512
[   96.345678][ T6012] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   96.378414][ T6022] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value
[   96.754166][ T6032] netlink: 'syz.1.65': attribute type 12 has an invalid length.
[   96.762425][ T6032] netlink: 'syz.1.65': attribute type 29 has an invalid length.
[   96.777881][ T6032] netlink: 148 bytes leftover after parsing attributes in process `syz.1.65'.
[   96.789086][ T6032] netlink: 'syz.1.65': attribute type 1 has an invalid length.
[   96.791776][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[   96.799439][ T6032] netlink: 'syz.1.65': attribute type 2 has an invalid length.
[   96.945320][ T2134] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.981278][ T6036] FAULT_INJECTION: forcing a failure.
[   96.981278][ T6036] name failslab, interval 1, probability 0, space 0, times 0
[   97.008686][ T6036] CPU: 0 PID: 6036 Comm: syz.1.68 Not tainted syzkaller #0
[   97.015982][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   97.026081][ T6036] Call Trace:
[   97.029407][ T6036]  <TASK>
[   97.032388][ T6036]  dump_stack_lvl+0x18c/0x250
[   97.037153][ T6036]  ? show_regs_print_info+0x20/0x20
[   97.042424][ T6036]  ? load_image+0x420/0x420
[   97.046984][ T6036]  ? __might_sleep+0xe0/0xe0
[   97.051620][ T6036]  ? __lock_acquire+0x7eb0/0x7eb0
[   97.056685][ T6036]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[   97.062718][ T6036]  should_fail_ex+0x394/0x4c0
[   97.067465][ T6036]  should_failslab+0x9/0x20
[   97.072029][ T6036]  slab_pre_alloc_hook+0x59/0x300
[   97.077122][ T6036]  kmem_cache_alloc_lru+0x4d/0x2b0
[   97.082299][ T6036]  ? __d_alloc+0x31/0x710
[   97.086676][ T6036]  __d_alloc+0x31/0x710
[   97.090870][ T6036]  ? alloc_fd+0x590/0x640
[   97.095269][ T6036]  d_alloc_pseudo+0x1d/0x70
[   97.099815][ T6036]  alloc_file_pseudo+0xe4/0x210
[   97.104711][ T6036]  ? fput+0x1a0/0x1a0
[   97.108743][ T6036]  ? alloc_fd+0x590/0x640
[   97.113117][ T6036]  sock_alloc_file+0xb7/0x280
[   97.117828][ T6036]  __sys_socket+0x140/0x1b0
[   97.122388][ T6036]  __x64_sys_socket+0x7a/0x90
[   97.127115][ T6036]  do_syscall_64+0x55/0xb0
[   97.131584][ T6036]  ? clear_bhb_loop+0x40/0x90
[   97.136306][ T6036]  ? clear_bhb_loop+0x40/0x90
[   97.141032][ T6036]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   97.145220][ T2134] usb 4-1: Using ep0 maxpacket: 16
[   97.146957][ T6036] RIP: 0033:0x7fdb5859e159
[   97.156532][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.176215][ T6036] RSP: 002b:00007fdb567f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   97.184656][ T6036] RAX: ffffffffffffffda RBX: 00007fdb58825fa0 RCX: 00007fdb5859e159
[   97.192644][ T6036] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
[   97.200625][ T6036] RBP: 00007fdb5863506b R08: 0000000000000000 R09: 0000000000000000
[   97.208610][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.216603][ T6036] R13: 00007fdb58826038 R14: 00007fdb58825fa0 R15: 00007fffcf5197d8
[   97.224604][ T6036]  </TASK>
[   97.250176][ T2134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.265599][ T2134] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.282944][ T2134] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.304232][ T2134] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   97.329087][ T2134] usb 4-1: config 0 interface 0 has no altsetting 0
[   97.356409][ T2134] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   97.375461][ T2134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.410143][ T2134] usb 4-1: config 0 descriptor??
[   97.921903][ T2134] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[   98.042188][ T6046] loop0: detected capacity change from 0 to 32768
[   98.170560][ T5821] usb 4-1: USB disconnect, device number 3
[   98.202794][ T6046] JBD2: Ignoring recovery information on journal
[   98.290501][ T6046] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   98.297259][ T6053] fido_id[6053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   98.323885][ T6057] dummy0: entered promiscuous mode
[   98.357658][ T6057] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   98.384306][ T6057] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   98.451841][ T6057] dummy0: left promiscuous mode
[   98.601262][ T6046] syz.0.71 (6046) used greatest stack depth: 18632 bytes left
[   98.707710][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[   98.712024][ T6062] ªªªªªª: renamed from vlan0 (while UP)
[   98.946116][ T6068] team_slave_0: entered promiscuous mode
[   98.952106][ T6068] team_slave_1: entered promiscuous mode
[   98.980607][ T6068] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   99.047694][ T6069] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   99.183858][ T6077] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by ""[6077]
[   99.394655][ T6073] ./file0: Can't open blockdev
[   99.553623][ T6090] capability: warning: `syz.0.89' uses deprecated v2 capabilities in a way that may be insecure
[   99.591237][ T6090] loop0: detected capacity change from 0 to 512
[   99.632465][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.649479][ T6090] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.735107][   T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   99.760402][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.937241][   T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   99.946218][   T42] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   99.963044][   T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   99.965569][ T6088] loop1: detected capacity change from 0 to 32768
[   99.972839][   T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  100.002046][ T6088] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  100.008929][   T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  100.033927][   T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  100.043711][   T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  100.052675][   T42] usb 4-1: Product: syz
[  100.063606][   T42] usb 4-1: Manufacturer: syz
[  100.073774][ T6088] XFS (loop1): Ending clean mount
[  100.086125][   T42] cdc_wdm 4-1:1.0: skipping garbage
[  100.091423][   T42] cdc_wdm 4-1:1.0: skipping garbage
[  100.113423][   T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  100.119722][   T42] cdc_wdm 4-1:1.0: Unknown control protocol
[  100.262529][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  100.296221][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.487743][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  100.498034][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  100.508935][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  100.520620][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  100.542163][    T9] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  100.557630][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.574836][ T6097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.585699][    C0] cdc_wdm 4-1:1.0: Unexpected error -71
[  100.592383][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  100.599129][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  100.611483][ T6097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.618893][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  100.625538][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  100.632991][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  100.639657][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  100.646224][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  100.652861][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  100.659208][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  100.665840][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  100.672213][    T8] usb 4-1: USB disconnect, device number 4
[  100.678250][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  100.678276][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  100.678292][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  100.703049][    T9] pl2303 1-1:1.0: pl2303 converter detected
[  100.716951][    T9] usb 1-1: pl2303 converter now attached to ttyUSB0
[  100.738537][ T6112] process 'syz.2.95' launched './file0' with NULL argv: empty string added
[  100.749677][ T6112] Invalid argument reading file caps for ./file0
[  101.069138][ T6097] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  101.083052][ T6097] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  101.091935][ T6097] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  101.106150][ T6097] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  101.114853][ T6097] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  101.137006][   T23] usb 1-1: USB disconnect, device number 2
[  101.157718][   T23] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  101.169395][   T23] pl2303 1-1:1.0: device disconnected
[  101.238765][ T6120] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  101.297654][ T6122] loop2: detected capacity change from 0 to 1024
[  101.326025][ T6122] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  101.360043][ T6122] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  101.406623][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.618332][ T6122] fscrypt (loop2, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  101.725814][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.061216][ T6125] loop3: detected capacity change from 0 to 32768
[  102.091924][ T6125] JBD2: Ignoring recovery information on journal
[  102.229143][ T6125] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  102.640140][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  102.931130][ T6155] loop2: detected capacity change from 0 to 128
[  103.046563][ T6158] loop3: detected capacity change from 0 to 8
[  103.188364][   T27] audit: type=1800 audit(1791038400.832:3): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.116" name="direction" dev="configfs" ino=8358 res=0 errno=0
[  103.205173][ T6162] FAULT_INJECTION: forcing a failure.
[  103.205173][ T6162] name failslab, interval 1, probability 0, space 0, times 0
[  103.254824][ T6162] CPU: 0 PID: 6162 Comm: syz.0.115 Not tainted syzkaller #0
[  103.262205][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  103.272308][ T6162] Call Trace:
[  103.275631][ T6162]  <TASK>
[  103.278602][ T6162]  dump_stack_lvl+0x18c/0x250
[  103.283344][ T6162]  ? show_regs_print_info+0x20/0x20
[  103.288607][ T6162]  ? load_image+0x420/0x420
[  103.293171][ T6162]  ? __might_sleep+0xe0/0xe0
[  103.297816][ T6162]  ? __lock_acquire+0x7eb0/0x7eb0
[  103.302901][ T6162]  should_fail_ex+0x394/0x4c0
[  103.307647][ T6162]  should_failslab+0x9/0x20
[  103.312205][ T6162]  slab_pre_alloc_hook+0x59/0x300
[  103.317293][ T6162]  ? __asan_memset+0x22/0x40
[  103.321934][ T6162]  ? __se_sys_fsopen+0x135/0x2c0
[  103.326935][ T6162]  __kmem_cache_alloc_node+0x53/0x250
[  103.332372][ T6162]  ? __se_sys_fsopen+0x135/0x2c0
[  103.337374][ T6162]  kmalloc_trace+0x2a/0xe0
[  103.341856][ T6162]  __se_sys_fsopen+0x135/0x2c0
[  103.346687][ T6162]  do_syscall_64+0x55/0xb0
[  103.351167][ T6162]  ? clear_bhb_loop+0x40/0x90
[  103.355895][ T6162]  ? clear_bhb_loop+0x40/0x90
[  103.355980][ T6158] zram0: detected capacity change from 0 to 2097152
[  103.360598][ T6162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.360632][ T6162] RIP: 0033:0x7f493539e159
[  103.360653][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.397406][ T6162] RSP: 002b:00007f49362f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  103.405881][ T6162] RAX: ffffffffffffffda RBX: 00007f4935625fa0 RCX: 00007f493539e159
[  103.413906][ T6162] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0
[  103.421920][ T6162] RBP: 00007f493543506b R08: 0000000000000000 R09: 0000000000000000
[  103.427400][   T23] wiimote 0005:057E:0330.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  103.429915][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.429934][ T6162] R13: 00007f4935626038 R14: 00007f4935625fa0 R15: 00007ffc695d7498
[  103.429968][ T6162]  </TASK>
[  103.530722][   T23] wiimote 0005:057E:0330.0002: New device registered
[  103.560700][ T6164] wiimote 0005:057E:0330.0002: Device removed
[  103.627923][ T6165] fido_id[6165]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  103.631861][ T6169] loop1: detected capacity change from 0 to 2048
[  103.750037][ T6172] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.845553][ T6171] loop0: detected capacity change from 0 to 4096
[  103.921929][ T6175] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.245634][    T8] IPVS: starting estimator thread 0...
[  104.345158][ T6182] IPVS: using max 18 ests per chain, 43200 per kthread
[  104.615211][   T42] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2)
[  104.663464][   T42] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input6
[  104.728883][   T42] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input7
[  104.757626][   T42] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input5
[  105.155244][ T6192] loop1: detected capacity change from 0 to 32768
[  105.173376][ T6192] JBD2: Ignoring recovery information on journal
[  105.202704][ T6195] loop0: detected capacity change from 0 to 32768
[  105.212287][ T6195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.130 (6195)
[  105.238290][ T6192] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  105.281869][ T6195] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.313032][   T27] audit: type=1800 audit(1791038402.952:4): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  105.325114][ T6195] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  105.333513][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.342338][ T6195] BTRFS info (device loop0): enabling auto defrag
[  105.365054][ T6195] BTRFS info (device loop0): max_inline at 4096
[  105.371388][ T6195] BTRFS info (device loop0): using free space tree
[  105.398658][   T27] audit: type=1800 audit(1791038402.952:5): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  105.447284][ T5775] ocfs2: Unmounting device (7,1) on (node local)
[  105.533343][ T6195] BTRFS info (device loop0): enabling ssd optimizations
[  105.540458][ T6195] BTRFS info (device loop0): auto enabling async discard
[  105.939682][ T5777] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.352534][ T6236] loop0: detected capacity change from 0 to 128
[  106.722862][ T6245] loop0: detected capacity change from 0 to 512
[  106.763974][ T6245] EXT4-fs: Ignoring removed bh option
[  106.786577][ T6245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002]
[  106.803294][ T6245] System zones: 1-12
[  106.820407][ T6245] EXT4-fs (loop0): 1 truncate cleaned up
[  106.854820][ T6245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.998484][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.377896][ T6262] loop3: detected capacity change from 0 to 128
[  107.398689][ T6262] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  107.484457][ T6262] FAT-fs (loop3): error, parent dir link count too low (2)
[  107.492262][ T6262] FAT-fs (loop3): Filesystem has been set read-only
[  107.535128][ T5780] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  107.750154][ T6269] FAULT_INJECTION: forcing a failure.
[  107.750154][ T6269] name failslab, interval 1, probability 0, space 0, times 0
[  107.764249][ T6269] CPU: 0 PID: 6269 Comm: syz.3.154 Not tainted syzkaller #0
[  107.771588][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  107.781658][ T6269] Call Trace:
[  107.784969][ T6269]  <TASK>
[  107.787926][ T6269]  dump_stack_lvl+0x18c/0x250
[  107.792628][ T6269]  ? show_regs_print_info+0x20/0x20
[  107.797869][ T6269]  ? load_image+0x420/0x420
[  107.802412][ T6269]  ? __might_sleep+0xe0/0xe0
[  107.807013][ T6269]  ? __lock_acquire+0x7eb0/0x7eb0
[  107.812037][ T6269]  ? ida_alloc_range+0x7d0/0x860
[  107.816988][ T6269]  should_fail_ex+0x394/0x4c0
[  107.821717][ T6269]  should_failslab+0x9/0x20
[  107.826246][ T6269]  slab_pre_alloc_hook+0x59/0x300
[  107.831312][ T6269]  ? alloc_vfsmnt+0x9d/0x450
[  107.835919][ T6269]  ? alloc_vfsmnt+0x9d/0x450
[  107.840547][ T6269]  __kmem_cache_alloc_node+0x53/0x250
[  107.845949][ T6269]  ? idr_replace+0x1b0/0x1b0
[  107.850577][ T6269]  ? alloc_vfsmnt+0x9d/0x450
[  107.855189][ T6269]  __kmalloc_node_track_caller+0xa4/0x230
[  107.860945][ T6269]  kstrdup+0x3b/0x80
[  107.864858][ T6269]  alloc_vfsmnt+0x9d/0x450
[  107.869293][ T6269]  clone_mnt+0x65/0xc60
[  107.873463][ T6269]  ? lockdep_softirqs_off+0x440/0x440
[  107.878856][ T6269]  copy_tree+0xe0/0x7e0
[  107.883034][ T6269]  ? down_write+0x16e/0x200
[  107.887556][ T6269]  ? down_read_killable+0x340/0x340
[  107.892776][ T6269]  __do_loopback+0x193/0x330
[  107.897387][ T6269]  __se_sys_open_tree+0x365/0x880
[  107.902438][ T6269]  ? lock_chain_count+0x20/0x20
[  107.907310][ T6269]  ? __x64_sys_open_tree+0x80/0x80
[  107.912440][ T6269]  ? lockdep_hardirqs_on+0x98/0x150
[  107.917662][ T6269]  do_syscall_64+0x55/0xb0
[  107.922101][ T6269]  ? clear_bhb_loop+0x40/0x90
[  107.926793][ T6269]  ? clear_bhb_loop+0x40/0x90
[  107.931486][ T6269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  107.937400][ T6269] RIP: 0033:0x7f50f179e159
[  107.941836][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.961461][ T6269] RSP: 002b:00007f50f257f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  107.969898][ T6269] RAX: ffffffffffffffda RBX: 00007f50f1a25fa0 RCX: 00007f50f179e159
[  107.977893][ T6269] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  107.985882][ T6269] RBP: 00007f50f183506b R08: 0000000000000000 R09: 0000000000000000
[  107.993871][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.001853][ T6269] R13: 00007f50f1a26038 R14: 00007f50f1a25fa0 R15: 00007ffe025666e8
[  108.009956][ T6269]  </TASK>
[  108.165196][ T2134] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  108.338004][ T6282] FAULT_INJECTION: forcing a failure.
[  108.338004][ T6282] name failslab, interval 1, probability 0, space 0, times 0
[  108.352031][ T6282] CPU: 1 PID: 6282 Comm: syz.0.161 Not tainted syzkaller #0
[  108.359380][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  108.369469][ T6282] Call Trace:
[  108.372765][ T6282]  <TASK>
[  108.375714][ T6282]  dump_stack_lvl+0x18c/0x250
[  108.380431][ T6282]  ? show_regs_print_info+0x20/0x20
[  108.385668][ T6282]  ? load_image+0x420/0x420
[  108.390188][ T6282]  ? __lock_acquire+0x7eb0/0x7eb0
[  108.395249][ T6282]  should_fail_ex+0x394/0x4c0
[  108.399943][ T6282]  should_failslab+0x9/0x20
[  108.404468][ T6282]  slab_pre_alloc_hook+0x59/0x300
[  108.409529][ T6282]  kmem_cache_alloc_lru+0x4d/0x2b0
[  108.414682][ T6282]  ? sock_alloc_inode+0x28/0xc0
[  108.419547][ T6282]  sock_alloc_inode+0x28/0xc0
[  108.424233][ T6282]  ? sockfs_init_fs_context+0xb0/0xb0
[  108.429628][ T6282]  new_inode_pseudo+0x63/0x1d0
[  108.434487][ T6282]  __sock_create+0x12d/0x940
[  108.439091][ T6282]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  108.445080][ T6282]  __sys_socket+0xd7/0x1b0
[  108.449522][ T6282]  __x64_sys_socket+0x7a/0x90
[  108.454216][ T6282]  do_syscall_64+0x55/0xb0
[  108.458676][ T6282]  ? clear_bhb_loop+0x40/0x90
[  108.463397][ T6282]  ? clear_bhb_loop+0x40/0x90
[  108.468108][ T6282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.474017][ T6282] RIP: 0033:0x7f493539e159
[  108.478435][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.498050][ T6282] RSP: 002b:00007f49362f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  108.506509][ T6282] RAX: ffffffffffffffda RBX: 00007f4935625fa0 RCX: 00007f493539e159
[  108.514507][ T6282] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  108.522500][ T6282] RBP: 00007f493543506b R08: 0000000000000000 R09: 0000000000000000
[  108.530473][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.538446][ T6282] R13: 00007f4935626038 R14: 00007f4935625fa0 R15: 00007ffc695d7498
[  108.546432][ T6282]  </TASK>
[  108.549604][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.563214][ T6282] socket: no more sockets
[  108.563891][ T2134] usb 2-1: config 4 has an invalid interface number: 44 but max is 0
[  108.576672][ T2134] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  108.587091][ T2134] usb 2-1: config 4 has no interface number 0
[  108.604998][ T2134] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  108.637794][ T2134] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  108.647214][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.665083][ T2134] usb 2-1: Product: syz
[  108.671942][ T2134] usb 2-1: Manufacturer: syz
[  108.683290][ T2134] usb 2-1: SerialNumber: syz
[  109.085379][ T5821] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  109.135082][ T2134] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  109.150196][ T2134] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  109.159953][ T2134] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  109.167332][ T2134] usb 2-1: media controller created
[  109.177096][ T2134] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.222181][ T2134] DVB: Unable to find symbol dib7000p_attach()
[  109.229221][ T2134] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  109.280111][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.291783][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.302123][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.306494][ T2134] rc_core: IR keymap rc-dib0700-rc5 not found
[  109.315490][ T5821] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.315523][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.318048][ T5821] usb 1-1: config 0 descriptor??
[  109.322755][ T2134] Registered IR keymap rc-empty
[  109.332467][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.371275][ T2134] dvb-usb: could not initialize remote control.
[  109.393164][ T2134] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  109.424677][ T2134] usb 2-1: USB disconnect, device number 2
[  109.452856][ T2134] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  109.595408][    T8] usb 4-1: Using ep0 maxpacket: 32
[  109.610659][    T8] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  109.619921][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.628290][    T8] usb 4-1: Product: syz
[  109.632516][    T8] usb 4-1: Manufacturer: syz
[  109.637236][    T8] usb 4-1: SerialNumber: syz
[  109.643910][    T8] usb 4-1: config 0 descriptor??
[  109.814650][ T5821] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  109.837004][ T5821] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  109.881413][    T8] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 005
[  110.144391][ T5842] usb 1-1: USB disconnect, device number 3
[  110.171681][ T5821] usb 4-1: USB disconnect, device number 5
[  110.182531][ T6292] i2c i2c-1: failure writing data
[  110.370780][ T6297] loop1: detected capacity change from 0 to 32768
[  110.428848][   T27] audit: type=1800 audit(1791038408.072:6): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="file1" dev="loop1" ino=4 res=0 errno=0
[  110.481814][   T27] audit: type=1800 audit(1791038408.092:7): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="file1" dev="loop1" ino=4 res=0 errno=0
[  110.506018][   T27] audit: type=1800 audit(1791038408.102:8): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="file1" dev="loop1" ino=4 res=0 errno=0
[  110.744582][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'.
[  110.848448][ T6304] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.169'.
[  110.862450][ T6304] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.169'.
[  111.111012][ T6316] input: syz0 as /devices/virtual/input/input9
[  111.339294][ T6322] Illegal XDP return value 4294967199 on prog  (id 14) dev syz_tun, expect packet loss!
[  111.713643][ T6333] Zero length message leads to an empty skb
[  111.725048][   T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  111.778269][ T6335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  111.925191][   T42] usb 2-1: Using ep0 maxpacket: 8
[  111.938604][   T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  111.964647][   T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  111.995562][   T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  112.019453][   T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  112.034596][   T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  112.045052][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.292246][   T42] usb 2-1: GET_CAPABILITIES returned 0
[  112.305012][   T42] usbtmc 2-1:16.0: can't read capabilities
[  112.446250][ T6345] overlayfs: failed to clone upperpath
[  112.516672][ T6338] loop3: detected capacity change from 0 to 32768
[  112.537875][ T6338] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.183 (6338)
[  112.555881][   T23] usb 2-1: USB disconnect, device number 3
[  112.608189][ T6338] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  112.644260][ T6338] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  112.672489][ T6338] BTRFS info (device loop3): using free space tree
[  112.789196][ T6338] BTRFS info (device loop3): enabling ssd optimizations
[  112.796466][ T6338] BTRFS info (device loop3): auto enabling async discard
[  112.839856][ T6366] input: syz1 as /devices/virtual/input/input10
[  113.037308][ T5780] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  113.307964][ T6378] loop0: detected capacity change from 0 to 1024
[  113.347700][ T6380] loop1: detected capacity change from 0 to 512
[  113.977067][   T42] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  114.004154][ T6396] syz.3.202 uses obsolete (PF_INET,SOCK_PACKET)
[  114.181567][   T42] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  114.200053][   T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.220571][   T42] usb 1-1: config 0 has no interface number 0
[  114.231345][   T42] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  114.245625][   T42] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  114.270973][   T42] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  114.287953][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.292309][ T6406] Line length is too long: Should be less than 4094
[  114.302192][   T42] usb 1-1: Product: syz
[  114.313590][   T42] usb 1-1: Manufacturer: syz
[  114.323482][   T42] usb 1-1: SerialNumber: syz
[  114.339431][   T42] usb 1-1: config 0 descriptor??
[  114.345843][ T6378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  114.381762][   T42] vmk80xx 1-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  114.394605][   T42] vmk80xx: probe of 1-1:0.6 failed with error -22
[  114.644496][   T23] usb 1-1: USB disconnect, device number 4
[  114.810924][ T6420] loop2: detected capacity change from 0 to 512
[  114.856689][ T6420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  114.902863][ T6420] System zones: 1-12
[  114.945479][ T6420] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.214: missing EA_INODE flag
[  115.017063][ T6420] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.214: error while reading EA inode 12 err=-117
[  115.067424][ T6420] EXT4-fs (loop2): 1 orphan inode deleted
[  115.074823][ T6420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.098611][ T6418] loop3: detected capacity change from 0 to 32768
[  115.163738][ T6420] syz.2.214 (pid 6420) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  115.352358][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.363838][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  115.600580][    T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  115.620714][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.643463][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  115.667773][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.701931][    T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  115.723321][    T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  115.733681][    T9] usb 2-1: Product: syz
[  115.752949][    T9] usb 2-1: Manufacturer: syz
[  115.763409][    T9] cdc_wdm 2-1:1.0: skipping garbage
[  115.779653][    T9] cdc_wdm 2-1:1.0: skipping garbage
[  115.801492][    T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  115.807621][    T9] cdc_wdm 2-1:1.0: Unknown control protocol
[  115.815311][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  115.864826][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'.
[  115.876517][ T6434] netlink: 'syz.0.220': attribute type 7 has an invalid length.
[  115.884231][ T6434] netlink: 'syz.0.220': attribute type 8 has an invalid length.
[  115.900083][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[  116.025181][   T23] usb 3-1: Using ep0 maxpacket: 16
[  116.034865][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.046020][   T23] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.059187][   T23] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.070830][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.077490][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.086852][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.093521][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.100066][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.106718][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.113079][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.119733][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.126243][   T23] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  116.139333][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.139356][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.146405][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.146427][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.152642][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.152669][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.159505][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.159530][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.165805][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.165830][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.172951][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  116.172973][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  116.220646][ T2134] usb 2-1: USB disconnect, device number 4
[  116.226581][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  116.252857][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  116.260670][   T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  116.270333][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.295786][   T23] usb 3-1: config 0 descriptor??
[  116.621866][ T6455] nbd3: detected capacity change from 0 to 127
[  116.639960][ T6455] block nbd3: NBD_DISCONNECT
[  116.646631][ T6455] block nbd3: Disconnected due to user request.
[  116.653235][ T6455] block nbd3: shutting down sockets
[  116.663780][    C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.673085][    C1] Buffer I/O error on dev nbd3, logical block 0, async page read
[  116.684153][    C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.685023][    C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.693237][    C1] Buffer I/O error on dev nbd3, logical block 1, async page read
[  116.704255][    C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.710054][    C0] Buffer I/O error on dev nbd3, logical block 2, async page read
[  116.727064][    C1] Buffer I/O error on dev nbd3, logical block 3, async page read
[  116.736664][   T56] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.747697][   T56] Buffer I/O error on dev nbd3, logical block 0, async page read
[  116.756623][   T56] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.766241][   T56] Buffer I/O error on dev nbd3, logical block 1, async page read
[  116.769378][   T23] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[  116.775487][   T56] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.796567][   T56] Buffer I/O error on dev nbd3, logical block 2, async page read
[  116.815397][ T1084] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.843270][ T1084] Buffer I/O error on dev nbd3, logical block 3, async page read
[  116.853830][ T1084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  116.863416][ T1084] Buffer I/O error on dev nbd3, logical block 0, async page read
[  116.871301][ T1084] Buffer I/O error on dev nbd3, logical block 1, async page read
[  116.879535][ T1084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  116.889991][ T6288] ldm_validate_partition_table(): Disk read failed.
[  116.901959][ T6288] Dev nbd3: unable to read RDB block 0
[  116.909844][ T6288]  nbd3: unable to read partition table
[  116.927171][ T6288] ldm_validate_partition_table(): Disk read failed.
[  116.936398][ T6288] Dev nbd3: unable to read RDB block 0
[  116.944029][ T6288]  nbd3: unable to read partition table
[  116.976205][    T8] usb 3-1: USB disconnect, device number 2
[  117.052963][ T6456] fido_id[6456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  117.121873][ T6462] loop1: detected capacity change from 0 to 512
[  117.259053][ T5821] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  117.471337][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  117.485124][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  117.496655][ T5821] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  117.506458][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.834539][ T6479] loop1: detected capacity change from 0 to 128
[  117.869806][ T6479] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.883405][ T6479] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.027100][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.052751][   T41] tipc: Subscription rejected, illegal request
[  118.150450][ T6483] loop2: detected capacity change from 0 to 4096
[  118.187444][ T6483] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  118.261881][ T6483] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  118.412965][ T6483] overlayfs: upper fs does not support tmpfile.
[  118.427144][ T6483] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  118.495856][   T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  118.602884][ T5821] pegasus: probe of 4-1:1.0 failed with error -71
[  118.641957][ T5821] usb 4-1: USB disconnect, device number 6
[  118.689710][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.735067][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.775051][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  118.805051][   T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  118.825213][   T23] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.846048][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.864986][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.877376][   T23] usb 2-1: Product: syz
[  118.881608][   T23] usb 2-1: Manufacturer: syz
[  118.888163][   T23] usb 2-1: SerialNumber: syz
[  118.926254][ T6488] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  118.936005][   T23] cdc_mbim 2-1:1.0: skipping garbage
[  119.182488][ T6488] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  119.485520][ T6520] loop0: detected capacity change from 0 to 512
[  119.501509][ T6520] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.547687][ T6520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.561969][ T6520] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.645308][   T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  119.661970][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.791274][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[  119.825829][ T6488] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  119.853609][   T42] usb 3-1: Using ep0 maxpacket: 8
[  119.870331][   T42] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  119.905160][   T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  119.925111][   T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  119.955033][   T42] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.970923][ T6518] loop3: detected capacity change from 0 to 40427
[  119.972141][   T42] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.987443][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.006737][ T6518] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  120.036325][ T6518] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  120.048321][   T23] cdc_mbim 2-1:1.0: bind() failure
[  120.075201][   T23] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  120.075325][ T6518] F2FS-fs (loop3): invalid crc value
[  120.084167][   T23] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  120.120926][   T23] usbtest: probe of 2-1:1.1 failed with error -71
[  120.123506][ T6518] F2FS-fs (loop3): Found nat_bits in checkpoint
[  120.184535][   T23] usb 2-1: USB disconnect, device number 5
[  120.225868][   T42] usb 3-1: GET_CAPABILITIES returned 0
[  120.235145][   T42] usbtmc 3-1:16.0: can't read capabilities
[  120.352178][ T6518] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  120.371990][ T6518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  120.493261][    C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  120.512077][   T23] usb 3-1: USB disconnect, device number 3
[  120.544173][ T6537] loop0: detected capacity change from 0 to 2048
[  120.591313][ T6537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  120.668086][ T6537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.090769][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'.
[  121.128906][ T6544] netlink: 492 bytes leftover after parsing attributes in process `syz.0.260'.
[  121.355188][ T6548] FAULT_INJECTION: forcing a failure.
[  121.355188][ T6548] name failslab, interval 1, probability 0, space 0, times 0
[  121.385016][ T6548] CPU: 1 PID: 6548 Comm: syz.0.262 Not tainted syzkaller #0
[  121.392423][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  121.402531][ T6548] Call Trace:
[  121.405854][ T6548]  <TASK>
[  121.408826][ T6548]  dump_stack_lvl+0x18c/0x250
[  121.413569][ T6548]  ? show_regs_print_info+0x20/0x20
[  121.418825][ T6548]  ? load_image+0x420/0x420
[  121.423385][ T6548]  ? __lock_acquire+0x7eb0/0x7eb0
[  121.428470][ T6548]  should_fail_ex+0x394/0x4c0
[  121.433201][ T6548]  should_failslab+0x9/0x20
[  121.437756][ T6548]  slab_pre_alloc_hook+0x59/0x300
[  121.439860][ T6540] loop1: detected capacity change from 0 to 32768
[  121.442811][ T6548]  ? __lock_acquire+0x7eb0/0x7eb0
[  121.454344][ T6548]  ? security_prepare_creds+0x4b/0x130
[  121.459858][ T6548]  ? security_prepare_creds+0x4b/0x130
[  121.465381][ T6548]  __kmem_cache_alloc_node+0x53/0x250
[  121.470814][ T6548]  ? security_prepare_creds+0x4b/0x130
[  121.476366][ T6548]  __kmalloc+0xa7/0x240
[  121.480583][ T6548]  security_prepare_creds+0x4b/0x130
[  121.485928][ T6548]  prepare_creds+0x427/0x5d0
[  121.490586][ T6548]  __sys_setfsgid+0xcd/0x370
[  121.495234][ T6548]  ? lockdep_hardirqs_on+0x98/0x150
[  121.500515][ T6548]  do_syscall_64+0x55/0xb0
[  121.504961][ T6548]  ? clear_bhb_loop+0x40/0x90
[  121.509653][ T6548]  ? clear_bhb_loop+0x40/0x90
[  121.514352][ T6548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.520267][ T6548] RIP: 0033:0x7f493539e159
[  121.524696][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.544359][ T6548] RSP: 002b:00007f49362f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b
[  121.552816][ T6548] RAX: ffffffffffffffda RBX: 00007f4935625fa0 RCX: 00007f493539e159
[  121.560822][ T6548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00
[  121.568813][ T6548] RBP: 00007f493543506b R08: 0000000000000000 R09: 0000000000000000
[  121.576796][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.584791][ T6548] R13: 00007f4935626038 R14: 00007f4935625fa0 R15: 00007ffc695d7498
[  121.592792][ T6548]  </TASK>
[  121.757277][ T6540] jfs_unlink: dtDelete returned -116
[  121.763417][ T6540] jfs_unlink: dtDelete returned -116
[  122.024007][ T6567] bridge0: port 3(bond0) entered blocking state
[  122.045438][ T6567] bridge0: port 3(bond0) entered disabled state
[  122.066508][ T6567] bond0: entered allmulticast mode
[  122.071730][ T6567] bond_slave_0: entered allmulticast mode
[  122.094305][ T6567] bond_slave_1: entered allmulticast mode
[  122.126001][ T6567] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  122.164071][ T6567] bond0: entered promiscuous mode
[  122.177313][ T6567] bond_slave_0: entered promiscuous mode
[  122.183210][ T6567] bond_slave_1: entered promiscuous mode
[  122.213818][ T6567] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  122.248329][ T6567] bridge0: port 3(bond0) entered blocking state
[  122.256185][ T6567] bridge0: port 3(bond0) entered forwarding state
[  122.276176][ T6569] bond0: left allmulticast mode
[  122.323958][ T6569] bond_slave_0: left allmulticast mode
[  122.329865][ T6569] bond_slave_1: left allmulticast mode
[  122.347858][ T6569] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  122.360201][ T6569] bond0: left promiscuous mode
[  122.368504][ T6569] bond_slave_0: left promiscuous mode
[  122.378836][ T6569] bond_slave_1: left promiscuous mode
[  122.388957][ T6569] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  122.404224][ T6569] bridge0: port 3(bond0) entered disabled state
[  122.822951][ T6571] loop3: detected capacity change from 0 to 32768
[  122.903320][ T6571] JBD2: Ignoring recovery information on journal
[  123.011233][ T6571] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  123.653554][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  124.105905][ T6599] warning: `syz.0.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  124.165130][ T6601] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800
[  124.567685][ T6613] loop0: detected capacity change from 0 to 2048
[  124.897365][ T6613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.964337][ T6613] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.134590][ T6597] loop3: detected capacity change from 0 to 32768
[  125.169371][ T6613] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  125.241181][ T6613] CacheFiles: File cache on CacheFiles registered
[  125.280436][ T6597] JBD2: Ignoring recovery information on journal
[  125.343026][ T6612] CacheFiles: File cache on CacheFiles unregistering
[  125.382842][ T6612] FS-Cache: Withdrawing cache "CacheFiles" (0 objs)
[  125.462760][ T6597] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  125.584915][    C1] sched: RT throttling activated
[  125.922042][ T6615] loop1: detected capacity change from 0 to 131072
[  125.934835][ T6615] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  125.941686][ T6615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  125.953862][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.964160][ T6615] F2FS-fs (loop1): invalid crc value
[  126.004458][ T6615] F2FS-fs (loop1): Found nat_bits in checkpoint
[  126.091490][ T6615] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  126.098727][ T6615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  126.191273][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  126.814748][ T6633] loop3: detected capacity change from 0 to 8192
[  126.861765][ T6633] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  126.940160][ T6633] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  126.995365][ T6633] REISERFS (device loop3): using ordered data mode
[  127.001939][ T6633] reiserfs: using flush barriers
[  127.045671][ T6633] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  127.068980][ T6633] REISERFS (device loop3): checking transaction log (loop3)
[  127.115502][ T6631] loop2: detected capacity change from 0 to 4096
[  127.374463][ T6633] REISERFS (device loop3): Using tea hash to sort names
[  127.417181][ T6633] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  127.612144][ T6629] loop0: detected capacity change from 0 to 32768
[  127.636842][ T6631] ntfs3: loop2: Failed to load $Extend (-22).
[  127.647863][ T6631] ntfs3: loop2: Failed to initialize $Extend.
[  127.804546][ T6629] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  128.038241][ T6629] (syz.0.291,6629,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  128.076642][ T6638] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256
[  128.147516][ T6638] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  128.185013][ T6638] OCFS2: File system is now read-only.
[  128.195130][ T6638] (syz.0.291,6638,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30
[  128.225129][ T6638] (syz.0.291,6638,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -30
[  128.275128][ T6638] (syz.0.291,6638,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30
[  128.315723][ T6638] (syz.0.291,6638,1):ocfs2_test_inode_bit:2896 ERROR: status = -30
[  128.324213][ T6638] (syz.0.291,6638,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30
[  128.535912][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[  128.885338][ T6649] FAULT_INJECTION: forcing a failure.
[  128.885338][ T6649] name failslab, interval 1, probability 0, space 0, times 0
[  128.938143][ T6649] CPU: 0 PID: 6649 Comm: syz.2.295 Not tainted syzkaller #0
[  128.945519][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  128.955627][ T6649] Call Trace:
[  128.958949][ T6649]  <TASK>
[  128.961923][ T6649]  dump_stack_lvl+0x18c/0x250
[  128.966664][ T6649]  ? show_regs_print_info+0x20/0x20
[  128.971936][ T6649]  ? load_image+0x420/0x420
[  128.976596][ T6649]  ? __might_sleep+0xe0/0xe0
[  128.981250][ T6649]  ? __lock_acquire+0x7eb0/0x7eb0
[  128.986335][ T6649]  should_fail_ex+0x394/0x4c0
[  128.991083][ T6649]  should_failslab+0x9/0x20
[  128.995728][ T6649]  slab_pre_alloc_hook+0x59/0x300
[  129.000813][ T6649]  ? seq_create_client1+0x56/0x6a0
[  129.006001][ T6649]  __kmem_cache_alloc_node+0x53/0x250
[  129.011429][ T6649]  ? mutex_lock_nested+0x20/0x20
[  129.016417][ T6649]  ? seq_create_client1+0x56/0x6a0
[  129.021580][ T6649]  kmalloc_trace+0x2a/0xe0
[  129.026063][ T6649]  seq_create_client1+0x56/0x6a0
[  129.031052][ T6649]  ? __asan_memset+0x22/0x40
[  129.035710][ T6649]  snd_seq_open+0x54/0x500
[  129.040197][ T6649]  chrdev_open+0x58c/0x600
[  129.044678][ T6649]  ? cd_forget+0x160/0x160
[  129.049157][ T6649]  ? fsnotify_perm+0x3ed/0x5e0
[  129.053984][ T6649]  do_dentry_open+0x880/0x14b0
[  129.058813][ T6649]  ? cd_forget+0x160/0x160
[  129.063295][ T6649]  path_openat+0x284f/0x3270
[  129.067961][ T6649]  ? do_sys_openat2+0xda/0x1d0
[  129.072773][ T6649]  ? __x64_sys_openat+0x139/0x160
[  129.077865][ T6649]  ? verify_lock_unused+0x140/0x140
[  129.083122][ T6649]  ? do_filp_open+0x430/0x430
[  129.087880][ T6649]  do_filp_open+0x1f2/0x430
[  129.092439][ T6649]  ? vfs_tmpfile+0x620/0x620
[  129.097100][ T6649]  ? _raw_spin_unlock+0x28/0x40
[  129.102001][ T6649]  ? alloc_fd+0x590/0x640
[  129.106389][ T6649]  do_sys_openat2+0x134/0x1d0
[  129.111119][ T6649]  ? do_sys_open+0xe0/0xe0
[  129.115589][ T6649]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  129.121624][ T6649]  ? lock_chain_count+0x20/0x20
[  129.126539][ T6649]  __x64_sys_openat+0x139/0x160
[  129.131446][ T6649]  do_syscall_64+0x55/0xb0
[  129.135918][ T6649]  ? clear_bhb_loop+0x40/0x90
[  129.140636][ T6649]  ? clear_bhb_loop+0x40/0x90
[  129.145365][ T6649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  129.151305][ T6649] RIP: 0033:0x7f31eeb9e159
[  129.155758][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.175407][ T6649] RSP: 002b:00007f31efa4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  129.183888][ T6649] RAX: ffffffffffffffda RBX: 00007f31eee25fa0 RCX: 00007f31eeb9e159
[  129.191913][ T6649] RDX: 0000000000062981 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  129.199935][ T6649] RBP: 00007f31eec3506b R08: 0000000000000000 R09: 0000000000000000
[  129.207949][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.215971][ T6649] R13: 00007f31eee26038 R14: 00007f31eee25fa0 R15: 00007ffca1dfc438
[  129.224010][ T6649]  </TASK>
[  130.076454][ T6665] loop2: detected capacity change from 0 to 4096
[  130.109291][ T6656] loop3: detected capacity change from 0 to 32768
[  130.212311][ T6656] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  130.380542][ T6680] loop0: detected capacity change from 0 to 2048
[  130.447324][ T6680] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  130.467062][ T6656] XFS (loop3): Ending clean mount
[  130.520136][ T6680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.892846][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  131.595129][ T5821] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  131.832704][ T5821] usb 1-1: config 0 has no interfaces?
[  131.841431][ T5821] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.856117][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.882359][ T5821] usb 1-1: Product: syz
[  131.888626][ T5821] usb 1-1: Manufacturer: syz
[  131.893312][ T5821] usb 1-1: SerialNumber: syz
[  131.921356][ T5821] usb 1-1: config 0 descriptor??
[  132.115080][ T5842] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  132.306548][ T6700] loop2: detected capacity change from 0 to 512
[  132.315170][ T5842] usb 4-1: Using ep0 maxpacket: 8
[  132.330270][ T5842] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  132.349961][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.373090][ T5842] usb 4-1: Product: syz
[  132.389625][ T5842] usb 4-1: Manufacturer: syz
[  132.394307][ T5842] usb 4-1: SerialNumber: syz
[  132.418495][ T5842] usb 4-1: config 0 descriptor??
[  132.433493][ T5842] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  132.889553][   T23] usb 1-1: USB disconnect, device number 5
[  133.086704][ T6702] loop2: detected capacity change from 0 to 512
[  133.183052][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.190105][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.314343][ T6702] EXT4-fs: Ignoring removed nobh option
[  133.338037][ T6702] EXT4-fs (loop2): Test dummy encryption mode enabled
[  133.363762][ T6702] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  133.402685][ T6702] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.315: attempt to clear invalid blocks 1 len 1
[  133.470605][ T6702] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  133.499994][ T5842] usb 4-1: USB disconnect, device number 7
[  133.565374][ T6702] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.315: invalid indirect mapped block 1819239214 (level 0)
[  133.615478][ T6702] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.315: invalid indirect mapped block 1819239214 (level 1)
[  133.664481][ T6711] loop0: detected capacity change from 0 to 256
[  133.697956][ T6702] EXT4-fs (loop2): 1 truncate cleaned up
[  133.720548][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.764065][ T6711] FAT-fs (loop0): Directory bread(block 64) failed
[  133.786694][ T6711] FAT-fs (loop0): Directory bread(block 65) failed
[  133.805274][ T6711] FAT-fs (loop0): Directory bread(block 66) failed
[  133.826142][ T6711] FAT-fs (loop0): Directory bread(block 67) failed
[  133.869396][ T6711] FAT-fs (loop0): Directory bread(block 68) failed
[  133.891289][ T6711] FAT-fs (loop0): Directory bread(block 69) failed
[  133.925440][ T6711] FAT-fs (loop0): Directory bread(block 70) failed
[  133.932037][ T6711] FAT-fs (loop0): Directory bread(block 71) failed
[  133.955478][ T6711] FAT-fs (loop0): Directory bread(block 72) failed
[  133.962111][ T6711] FAT-fs (loop0): Directory bread(block 73) failed
[  133.995240][ T6702] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.315: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  134.180004][ T6714] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.315: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  134.502726][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.805068][ T5765] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  134.994979][ T5765] usb 1-1: Using ep0 maxpacket: 16
[  135.011207][ T5765] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  135.031115][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.050978][ T5765] usb 1-1: Product: syz
[  135.057020][ T5765] usb 1-1: Manufacturer: syz
[  135.071891][ T5765] usb 1-1: SerialNumber: syz
[  135.135989][ T6722] loop1: detected capacity change from 0 to 32768
[  135.235407][ T6722] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.481286][ T6722] XFS (loop1): Ending clean mount
[  135.754825][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.168535][ T5765] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[  136.196242][ T5765] usb 1-1: USB disconnect, device number 6
[  136.458333][ T6740] loop3: detected capacity change from 0 to 40427
[  136.495461][ T6740] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  136.524276][ T6740] F2FS-fs (loop3): Image doesn't support compression
[  136.531462][ T6740] F2FS-fs (loop3): Image doesn't support compression
[  136.543028][ T6740] F2FS-fs (loop3): invalid crc value
[  136.575962][ T6740] F2FS-fs (loop3): Found nat_bits in checkpoint
[  136.695334][ T6740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  136.899363][ T6740] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x6bc/0x4080
[  136.964991][ T6740] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  137.190606][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'.
[  137.489543][ T6750] loop1: detected capacity change from 0 to 40427
[  137.547259][ T6750] F2FS-fs (loop1): invalid crc value
[  137.595041][ T6750] F2FS-fs (loop1): Found nat_bits in checkpoint
[  137.601448][ T6770] loop2: detected capacity change from 0 to 512
[  137.669611][ T6770] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  137.707954][ T6770] EXT4-fs (loop2): invalid journal inode
[  137.742191][ T6770] EXT4-fs (loop2): can't get journal size
[  137.761403][ T6750] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  137.850085][ T6770] EXT4-fs (loop2): 1 truncate cleaned up
[  137.893857][ T6750] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  137.910098][ T6770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.635139][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.705088][ T5765] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  138.917140][ T5765] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  138.927255][ T5765] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.945498][ T5765] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  138.957640][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.964544][ T6800] loop3: detected capacity change from 0 to 512
[  139.064527][ T6800] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  139.091397][ T6800] FAT-fs (loop3): Filesystem has been set read-only
[  139.212421][ T5765] usb 2-1: usb_control_msg returned -32
[  139.219241][ T5765] usbtmc 2-1:16.0: can't read capabilities
[  140.377498][ T6814] loop0: detected capacity change from 0 to 32768
[  140.408466][ T6814] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  140.464374][ T6814] JBD2: Ignoring recovery information on journal
[  140.611038][ T6814] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  140.951796][ T6828] netlink: 'syz.3.359': attribute type 75 has an invalid length.
[  140.982997][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[  141.026657][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[  141.367551][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'.
[  141.458295][    T9] usb 2-1: USB disconnect, device number 6
[  141.672022][ T6846] mmap: syz.1.367 (6846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  141.989356][ T6850] loop1: detected capacity change from 0 to 16
[  142.034663][ T6850] erofs: (device loop1): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block)
[  142.104006][ T6288] blk_print_req_error: 114 callbacks suppressed
[  142.104027][ T6288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  142.854769][ T6867] syzkaller1: entered promiscuous mode
[  142.863579][ T6867] syzkaller1: entered allmulticast mode
[  142.993937][ T6873] loop1: detected capacity change from 0 to 1024
[  143.765836][ T6889] loop0: detected capacity change from 0 to 128
[  144.068744][ T6894] loop2: detected capacity change from 0 to 1024
[  144.118010][ T6894] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  144.189390][ T6899] bond1: ARP target 1.0.0.0 is already present
[  144.196185][ T6899] bond1: option arp_ip_target: invalid value (1)
[  144.212779][ T6899] bond1 (unregistering): Released all slaves
[  144.945785][ T6913] loop1: detected capacity change from 0 to 64
[  145.344167][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'.
[  145.372287][ T6894] hfsplus: filesystem is marked journaled, leaving read-only.
[  145.386844][ T6918] netlink: 240 bytes leftover after parsing attributes in process `syz.1.399'.
[  145.538435][ T6921] loop0: detected capacity change from 0 to 256
[  145.936379][ T6927] input: syz0 as /devices/virtual/input/input11
[  146.789133][ T6948] ip6erspan0: entered allmulticast mode
[  146.957882][ T6930] loop3: detected capacity change from 0 to 32768
[  147.032109][ T6930] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  147.161366][ T6930] XFS (loop3): Ending clean mount
[  147.234778][   T27] audit: type=1800 audit(1791038444.872:9): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.405" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  147.490468][ T6970] loop1: detected capacity change from 0 to 2048
[  147.657415][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  147.875429][   T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  148.085052][   T42] usb 2-1: Using ep0 maxpacket: 8
[  148.111763][   T42] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.131888][   T42] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.150606][   T42] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.173857][   T42] usb 2-1: config 0 interface 0 has no altsetting 0
[  148.182604][   T23] kernel read not supported for file /kmsg (pid: 23 comm: kworker/1:0)
[  148.215236][   T42] usb 2-1: New USB device found, idVendor=045e, idProduct=073a, bcdDevice= 0.00
[  148.235092][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.255057][   T42] usb 2-1: config 0 descriptor??
[  148.681724][   T42] hid-generic 0003:045E:073A.0005: unknown main item tag 0x2
[  148.695049][   T42] hid-generic 0003:045E:073A.0005: unbalanced collection at end of report description
[  148.720732][   T42] hid-generic: probe of 0003:045E:073A.0005 failed with error -22
[  148.729717][ T6992] loop3: detected capacity change from 0 to 4096
[  148.765253][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  148.783542][ T6992] NILFS (loop3): invalid segment: Checksum error in segment payload
[  148.803659][ T6992] NILFS (loop3): trying rollback from an earlier position
[  148.844126][ T6992] NILFS (loop3): recovery complete
[  148.858266][ T6993] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.914569][    T9] usb 2-1: USB disconnect, device number 7
[  148.977837][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  148.993811][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.032464][ T6992] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 239 already freed
[  149.059819][ T6992] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  149.397916][    T8] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, d6:bb:a5:a0:a6:15
[  149.676624][ T7004] loop3: detected capacity change from 0 to 1024
[  149.721689][ T5821] usb 1-1: USB disconnect, device number 7
[  149.756664][ T5821] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT
[  149.783573][ T7004] hfsplus: failed to load root directory
[  150.242832][ T7018] loop3: detected capacity change from 0 to 512
[  150.281804][ T7018] EXT4-fs: Ignoring removed i_version option
[  150.321489][ T7018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.359679][ T7018] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  150.397939][ T7018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  150.538429][ T7018] EXT4-fs (loop3): 1 truncate cleaned up
[  150.549301][ T6582] syz.2.272 (6582) used greatest stack depth: 18408 bytes left
[  150.568399][ T7018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.814336][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.738884][ T7073] netlink: 'syz.0.448': attribute type 6 has an invalid length.
[  151.855016][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  152.042526][ T7085] FAULT_INJECTION: forcing a failure.
[  152.042526][ T7085] name failslab, interval 1, probability 0, space 0, times 0
[  152.061395][ T7085] CPU: 0 PID: 7085 Comm: syz.2.453 Not tainted syzkaller #0
[  152.068754][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  152.078863][ T7085] Call Trace:
[  152.082201][ T7085]  <TASK>
[  152.085185][ T7085]  dump_stack_lvl+0x18c/0x250
[  152.089315][ T7089] ip6erspan0: entered allmulticast mode
[  152.089908][ T7085]  ? show_regs_print_info+0x20/0x20
[  152.100816][ T7085]  ? load_image+0x420/0x420
[  152.105382][ T7085]  ? __might_sleep+0xe0/0xe0
[  152.110038][ T7085]  ? __lock_acquire+0x7eb0/0x7eb0
[  152.115109][ T7085]  ? do_futex+0x2ff/0x3e0
[  152.119491][ T7085]  should_fail_ex+0x394/0x4c0
[  152.124258][ T7085]  should_failslab+0x9/0x20
[  152.128813][ T7085]  slab_pre_alloc_hook+0x59/0x300
[  152.133911][ T7085]  kmem_cache_alloc+0x5a/0x2c0
[  152.138740][ T7085]  ? prepare_creds+0x30/0x5d0
[  152.143474][ T7085]  prepare_creds+0x30/0x5d0
[  152.148039][ T7085]  __sys_setfsuid+0xcd/0x370
[  152.152670][ T7085]  ? lockdep_hardirqs_on+0x98/0x150
[  152.157921][ T7085]  do_syscall_64+0x55/0xb0
[  152.162394][ T7085]  ? clear_bhb_loop+0x40/0x90
[  152.167119][ T7085]  ? clear_bhb_loop+0x40/0x90
[  152.171851][ T7085]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.177792][ T7085] RIP: 0033:0x7f31eeb9e159
[  152.182242][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.201870][ T7085] RSP: 002b:00007f31efa4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a
[  152.210317][ T7085] RAX: ffffffffffffffda RBX: 00007f31eee25fa0 RCX: 00007f31eeb9e159
[  152.218313][ T7085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  152.226331][ T7085] RBP: 00007f31eec3506b R08: 0000000000000000 R09: 0000000000000000
[  152.234326][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.242308][ T7085] R13: 00007f31eee26038 R14: 00007f31eee25fa0 R15: 00007ffca1dfc438
[  152.250308][ T7085]  </TASK>
[  152.264651][ T5821] usb 4-1: Using ep0 maxpacket: 32
[  152.275388][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.301169][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.321407][ T5821] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  152.341686][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.355134][   T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  152.366657][ T5821] usb 4-1: config 0 descriptor??
[  152.393176][ T5821] hub 4-1:0.0: USB hub found
[  152.545065][   T23] usb 2-1: Using ep0 maxpacket: 16
[  152.553033][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  152.562484][ T7099] loop2: detected capacity change from 0 to 512
[  152.571399][   T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  152.591216][   T23] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  152.605070][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.623440][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.628786][ T5821] hub 4-1:0.0: 1 port detected
[  152.641089][   T23] usb 2-1: Product: syz
[  152.655047][   T23] usb 2-1: Manufacturer: syz
[  152.659750][   T23] usb 2-1: SerialNumber: syz
[  152.665177][ T7099] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.726891][ T7103] "syz.0.461" (7103) uses obsolete ecb(arc4) skcipher
[  152.872062][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.951022][   T23] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  152.989335][   T23] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  153.125468][ T7111] loop0: detected capacity change from 0 to 256
[  153.160264][ T7111] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  153.361199][ T5821] hub 4-1:0.0: activate --> -90
[  153.440792][   T23] usb 2-1: USB disconnect, device number 8
[  153.564134][   T42] usb 4-1: USB disconnect, device number 8
[  153.574630][ T5821] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  154.630434][ T7135] loop1: detected capacity change from 0 to 8192
[  154.785683][ T7123] loop0: detected capacity change from 0 to 131072
[  154.795889][ T7123] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  154.802636][ T7123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  154.814289][ T7123] F2FS-fs (loop0): invalid crc value
[  154.862589][ T7123] F2FS-fs (loop0): Found nat_bits in checkpoint
[  154.922516][ T7123] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  154.929728][ T7123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  155.057385][   T27] audit: type=1800 audit(1791038452.702:10): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name="file1" dev="loop0" ino=7 res=0 errno=0
[  155.665062][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  155.884456][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  155.893874][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.185031][    T8] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, be:f9:e8:cc:bc:09
[  156.695497][    T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  156.917633][    T8] usb 4-1: config 0 has no interfaces?
[  156.945452][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  156.972699][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.996744][    T8] usb 4-1: Product: syz
[  157.000989][    T8] usb 4-1: Manufacturer: syz
[  157.013833][    T8] usb 4-1: SerialNumber: syz
[  157.026739][    T8] usb 4-1: config 0 descriptor??
[  157.037258][ T7180] FAULT_INJECTION: forcing a failure.
[  157.037258][ T7180] name failslab, interval 1, probability 0, space 0, times 0
[  157.050483][ T7180] CPU: 0 PID: 7180 Comm: syz.1.485 Not tainted syzkaller #0
[  157.057823][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  157.067926][ T7180] Call Trace:
[  157.071230][ T7180]  <TASK>
[  157.074185][ T7180]  dump_stack_lvl+0x18c/0x250
[  157.078902][ T7180]  ? show_regs_print_info+0x20/0x20
[  157.084131][ T7180]  ? load_image+0x420/0x420
[  157.088694][ T7180]  should_fail_ex+0x394/0x4c0
[  157.093485][ T7180]  should_failslab+0x9/0x20
[  157.098017][ T7180]  slab_pre_alloc_hook+0x59/0x300
[  157.103070][ T7180]  kmem_cache_alloc+0x5a/0x2c0
[  157.107859][ T7180]  ? __nf_conntrack_alloc+0x93/0x370
[  157.113186][ T7180]  __nf_conntrack_alloc+0x93/0x370
[  157.118325][ T7180]  init_conntrack+0x166/0xe20
[  157.123035][ T7180]  ? early_drop+0x7f0/0x7f0
[  157.127563][ T7180]  ? nf_conntrack_find_get+0x670/0x670
[  157.133040][ T7180]  ? __siphash_unaligned+0x25c/0x3d0
[  157.138351][ T7180]  nf_conntrack_in+0xc29/0x15b0
[  157.143243][ T7180]  ? nf_ct_pernet+0x270/0x270
[  157.147942][ T7180]  ? ip6t_do_table+0x1cb/0x1570
[  157.152812][ T7180]  ? ip6t_alloc_initial_table+0x640/0x640
[  157.158560][ T7180]  ? ipv6_defrag+0x2d6/0x3a0
[  157.163165][ T7180]  ? ipv4_conntrack_local+0x200/0x200
[  157.168556][ T7180]  nf_hook_slow+0xbd/0x200
[  157.172991][ T7180]  NF_HOOK+0x21d/0x3b0
[  157.177080][ T7180]  ? sock_wfree+0x24f/0x600
[  157.181595][ T7180]  ? ip6_rcv_core+0x1082/0x1700
[  157.186466][ T7180]  ? net_zcopy_put_abort+0x90/0x90
[  157.191592][ T7180]  ? NF_HOOK+0x9f/0x3b0
[  157.195765][ T7180]  ? ip6_rcv_core+0x1700/0x1700
[  157.200635][ T7180]  ? net_zcopy_put_abort+0x90/0x90
[  157.205770][ T7180]  ? ip6_rcv_finish_core+0x420/0x420
[  157.211069][ T7180]  __netif_receive_skb+0xcc/0x290
[  157.216118][ T7180]  ? netif_receive_skb+0x106/0x720
[  157.221249][ T7180]  netif_receive_skb+0x1bc/0x720
[  157.226201][ T7180]  ? __bpf_trace_tasklet+0x160/0x160
[  157.231501][ T7180]  ? enqueue_to_backlog+0xe90/0xe90
[  157.236722][ T7180]  ? tun_rx_batched+0x186/0x790
[  157.241599][ T7180]  tun_rx_batched+0x1df/0x790
[  157.246307][ T7180]  ? pskb_may_pull+0xf0/0xf0
[  157.250912][ T7180]  ? __local_bh_enable_ip+0x13a/0x1c0
[  157.256306][ T7180]  ? lockdep_hardirqs_on+0x98/0x150
[  157.261521][ T7180]  ? read_lock_is_recursive+0x20/0x20
[  157.266906][ T7180]  ? __local_bh_enable_ip+0x13a/0x1c0
[  157.272298][ T7180]  ? _local_bh_enable+0xa0/0xa0
[  157.277173][ T7180]  ? skb_copy_datagram_from_iter+0x63c/0x6f0
[  157.283180][ T7180]  tun_get_user+0x286c/0x3d30
[  157.287888][ T7180]  ? tun_get_user+0x2488/0x3d30
[  157.292762][ T7180]  ? aa_file_perm+0x3e3/0xee0
[  157.297464][ T7180]  ? rcu_read_unlock+0xa0/0xa0
[  157.302261][ T7180]  ? tun_get+0x1c/0x2e0
[  157.306441][ T7180]  ? __lock_acquire+0x7eb0/0x7eb0
[  157.311494][ T7180]  ? tun_get+0x1c/0x2e0
[  157.315674][ T7180]  tun_chr_write_iter+0x119/0x200
[  157.320723][ T7180]  vfs_write+0x474/0x9a0
[  157.324992][ T7180]  ? file_end_write+0x250/0x250
[  157.329864][ T7180]  ? __fget_files+0x3fc/0x460
[  157.334568][ T7180]  ? __fdget_pos+0x1d8/0x330
[  157.339176][ T7180]  ? ksys_write+0x74/0x260
[  157.343615][ T7180]  ksys_write+0x151/0x260
[  157.347973][ T7180]  ? __ia32_sys_read+0x90/0x90
[  157.352759][ T7180]  ? lockdep_hardirqs_on+0x98/0x150
[  157.357978][ T7180]  do_syscall_64+0x55/0xb0
[  157.362413][ T7180]  ? clear_bhb_loop+0x40/0x90
[  157.367109][ T7180]  ? clear_bhb_loop+0x40/0x90
[  157.371799][ T7180]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.377713][ T7180] RIP: 0033:0x7fdb5855e98e
[  157.382149][ T7180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  157.401773][ T7180] RSP: 002b:00007fdb567f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  157.410205][ T7180] RAX: ffffffffffffffda RBX: 00007fdb567f66c0 RCX: 00007fdb5855e98e
[  157.418191][ T7180] RDX: 0000000000000fc2 RSI: 0000200000002900 RDI: 00000000000000c8
[  157.426175][ T7180] RBP: 00007fdb5863506b R08: 0000000000000000 R09: 0000000000000000
[  157.434160][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.442142][ T7180] R13: 00007fdb58826038 R14: 00007fdb58825fa0 R15: 00007fffcf5197d8
[  157.450165][ T7180]  </TASK>
[  157.453293][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.791227][ T5765] usb 3-1: USB disconnect, device number 4
[  157.799072][ T5765] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT
[  158.146400][ T7195] ==================================================================
[  158.146415][ T7195] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0
[  158.146447][ T7195] Write of size 4 at addr ffffc90003cb1000 by task syz.1.490/7195
[  158.146465][ T7195] 
[  158.146470][ T7195] CPU: 0 PID: 7195 Comm: syz.1.490 Not tainted syzkaller #0
[  158.146489][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  158.146499][ T7195] Call Trace:
[  158.146508][ T7195]  <TASK>
[  158.146515][ T7195]  dump_stack_lvl+0x18c/0x250
[  158.146546][ T7195]  ? sys_imageblit+0x1bac/0x25d0
[  158.146568][ T7195]  ? show_regs_print_info+0x20/0x20
[  158.146597][ T7195]  ? load_image+0x420/0x420
[  158.146627][ T7195]  print_report+0xa8/0x210
[  158.146653][ T7195]  ? sys_imageblit+0x1bac/0x25d0
[  158.146674][ T7195]  kasan_report+0x117/0x150
[  158.146702][ T7195]  ? sys_imageblit+0x1bac/0x25d0
[  158.146727][ T7195]  sys_imageblit+0x1bac/0x25d0
[  158.146757][ T7195]  ? sys_copyarea+0x2530/0x2530
[  158.146782][ T7195]  ? __flush_work+0x120/0xac0
[  158.146804][ T7195]  ? __flush_work+0x9a1/0xac0
[  158.146826][ T7195]  ? __flush_work+0x120/0xac0
[  158.146849][ T7195]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  158.146881][ T7195]  soft_cursor+0xa01/0xc30
[  158.146907][ T7195]  bit_cursor+0x16dd/0x1f60
[  158.146941][ T7195]  ? bit_clear_margins+0x550/0x550
[  158.146964][ T7195]  ? get_color+0x2e8/0x4d0
[  158.146992][ T7195]  ? bit_clear_margins+0x550/0x550
[  158.147021][ T7195]  ? fbcon_cursor+0x430/0x640
[  158.147052][ T7195]  hide_cursor+0x7f/0x320
[  158.147080][ T7195]  do_con_write+0x1e1/0x70a0
[  158.147110][ T7195]  ? verify_lock_unused+0x140/0x140
[  158.147138][ T7195]  ? desc_read+0x1cf/0x3d0
[  158.147168][ T7195]  ? _prb_read_valid+0x921/0x9a0
[  158.147207][ T7195]  ? __mutex_trylock_common+0x160/0x270
[  158.147230][ T7195]  ? trace_raw_output_contention_end+0xd0/0xd0
[  158.147252][ T7195]  ? vt_resize+0xc0/0xc0
[  158.147281][ T7195]  ? rcu_is_watching+0x15/0xb0
[  158.147309][ T7195]  ? trace_contention_end+0x39/0xe0
[  158.147330][ T7195]  ? __mutex_lock+0x30d/0xc80
[  158.147356][ T7195]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  158.147380][ T7195]  ? n_tty_write+0x668/0x11e0
[  158.147411][ T7195]  ? mutex_lock_nested+0x20/0x20
[  158.147437][ T7195]  ? con_write+0x2e/0x40
[  158.147467][ T7195]  con_write+0x24/0x40
[  158.147496][ T7195]  n_tty_write+0xd3d/0x11e0
[  158.147534][ T7195]  ? n_tty_read+0x1370/0x1370
[  158.147564][ T7195]  ? wait_woken+0x180/0x180
[  158.147589][ T7195]  ? __virt_addr_valid+0x10c/0x380
[  158.147616][ T7195]  ? __check_object_size+0x4fc/0xa40
[  158.147636][ T7195]  ? n_tty_read+0x1370/0x1370
[  158.147666][ T7195]  file_tty_write+0x529/0x960
[  158.147697][ T7195]  vfs_write+0x474/0x9a0
[  158.147727][ T7195]  ? file_end_write+0x250/0x250
[  158.147757][ T7195]  ? __fget_files+0x3fc/0x460
[  158.147789][ T7195]  ? __fdget_pos+0x1d8/0x330
[  158.147815][ T7195]  ? ksys_write+0x74/0x260
[  158.147844][ T7195]  ksys_write+0x151/0x260
[  158.147872][ T7195]  ? __ia32_sys_read+0x90/0x90
[  158.147902][ T7195]  ? lockdep_hardirqs_on+0x98/0x150
[  158.147928][ T7195]  do_syscall_64+0x55/0xb0
[  158.147956][ T7195]  ? clear_bhb_loop+0x40/0x90
[  158.147977][ T7195]  ? clear_bhb_loop+0x40/0x90
[  158.147997][ T7195]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.148034][ T7195] RIP: 0033:0x7fdb5859e159
[  158.148053][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.148071][ T7195] RSP: 002b:00007fdb567f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  158.148095][ T7195] RAX: ffffffffffffffda RBX: 00007fdb58825fa0 RCX: 00007fdb5859e159
[  158.148112][ T7195] RDX: 0000000000001006 RSI: 0000200000000e00 RDI: 0000000000000005
[  158.148126][ T7195] RBP: 00007fdb5863506b R08: 0000000000000000 R09: 0000000000000000
[  158.148138][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.148151][ T7195] R13: 00007fdb58826038 R14: 00007fdb58825fa0 R15: 00007fffcf5197d8
[  158.148173][ T7195]  </TASK>
[  158.148180][ T7195] 
[  158.148185][ T7195] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc900039b1000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520
[  158.148231][ T7195] Memory state around the buggy address:
[  158.148242][ T7195]  ffffc90003cb0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  158.148254][ T7195]  ffffc90003cb0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  158.148267][ T7195] >ffffc90003cb1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  158.148276][ T7195]                    ^
[  158.148287][ T7195]  ffffc90003cb1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  158.148300][ T7195]  ffffc90003cb1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  158.148310][ T7195] ==================================================================
[  158.151229][ T7195] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  158.151242][ T7195] CPU: 0 PID: 7195 Comm: syz.1.490 Not tainted syzkaller #0
[  158.151263][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  158.151274][ T7195] Call Trace:
[  158.151282][ T7195]  <TASK>
[  158.151289][ T7195]  dump_stack_lvl+0x18c/0x250
[  158.151323][ T7195]  ? show_regs_print_info+0x20/0x20
[  158.151354][ T7195]  ? load_image+0x420/0x420
[  158.151386][ T7195]  panic+0x2ca/0x720
[  158.151412][ T7195]  ? bpf_jit_dump+0xd0/0xd0
[  158.151437][ T7195]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  158.151465][ T7195]  ? _raw_spin_unlock+0x40/0x40
[  158.151489][ T7195]  ? print_memory_metadata+0x314/0x400
[  158.151516][ T7195]  ? sys_imageblit+0x1bac/0x25d0
[  158.151537][ T7195]  check_panic_on_warn+0x84/0xa0
[  158.151564][ T7195]  ? sys_imageblit+0x1bac/0x25d0
[  158.151583][ T7195]  end_report+0x6f/0x130
[  158.151607][ T7195]  kasan_report+0x128/0x150
[  158.151633][ T7195]  ? sys_imageblit+0x1bac/0x25d0
[  158.151661][ T7195]  sys_imageblit+0x1bac/0x25d0
[  158.151689][ T7195]  ? sys_copyarea+0x2530/0x2530
[  158.151713][ T7195]  ? __flush_work+0x120/0xac0
[  158.151732][ T7195]  ? __flush_work+0x9a1/0xac0
[  158.151751][ T7195]  ? __flush_work+0x120/0xac0
[  158.151773][ T7195]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  158.151800][ T7195]  soft_cursor+0xa01/0xc30
[  158.151822][ T7195]  bit_cursor+0x16dd/0x1f60
[  158.151848][ T7195]  ? bit_clear_margins+0x550/0x550
[  158.151869][ T7195]  ? get_color+0x2e8/0x4d0
[  158.151894][ T7195]  ? bit_clear_margins+0x550/0x550
[  158.151912][ T7195]  ? fbcon_cursor+0x430/0x640
[  158.151938][ T7195]  hide_cursor+0x7f/0x320
[  158.151961][ T7195]  do_con_write+0x1e1/0x70a0
[  158.151987][ T7195]  ? verify_lock_unused+0x140/0x140
[  158.152019][ T7195]  ? desc_read+0x1cf/0x3d0
[  158.152046][ T7195]  ? _prb_read_valid+0x921/0x9a0
[  158.152080][ T7195]  ? __mutex_trylock_common+0x160/0x270
[  158.152101][ T7195]  ? trace_raw_output_contention_end+0xd0/0xd0
[  158.152121][ T7195]  ? vt_resize+0xc0/0xc0
[  158.152146][ T7195]  ? rcu_is_watching+0x15/0xb0
[  158.152170][ T7195]  ? trace_contention_end+0x39/0xe0
[  158.152187][ T7195]  ? __mutex_lock+0x30d/0xc80
[  158.152209][ T7195]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  158.152231][ T7195]  ? n_tty_write+0x668/0x11e0
[  158.152257][ T7195]  ? mutex_lock_nested+0x20/0x20
[  158.152281][ T7195]  ? con_write+0x2e/0x40
[  158.152309][ T7195]  con_write+0x24/0x40
[  158.152335][ T7195]  n_tty_write+0xd3d/0x11e0
[  158.152373][ T7195]  ? n_tty_read+0x1370/0x1370
[  158.152401][ T7195]  ? wait_woken+0x180/0x180
[  158.152423][ T7195]  ? __virt_addr_valid+0x10c/0x380
[  158.152448][ T7195]  ? __check_object_size+0x4fc/0xa40
[  158.152467][ T7195]  ? n_tty_read+0x1370/0x1370
[  158.152496][ T7195]  file_tty_write+0x529/0x960
[  158.152523][ T7195]  vfs_write+0x474/0x9a0
[  158.152550][ T7195]  ? file_end_write+0x250/0x250
[  158.152578][ T7195]  ? __fget_files+0x3fc/0x460
[  158.152610][ T7195]  ? __fdget_pos+0x1d8/0x330
[  158.152635][ T7195]  ? ksys_write+0x74/0x260
[  158.152663][ T7195]  ksys_write+0x151/0x260
[  158.152689][ T7195]  ? __ia32_sys_read+0x90/0x90
[  158.152715][ T7195]  ? lockdep_hardirqs_on+0x98/0x150
[  158.152736][ T7195]  do_syscall_64+0x55/0xb0
[  158.152762][ T7195]  ? clear_bhb_loop+0x40/0x90
[  158.152780][ T7195]  ? clear_bhb_loop+0x40/0x90
[  158.152799][ T7195]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.152827][ T7195] RIP: 0033:0x7fdb5859e159
[  158.152843][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.152858][ T7195] RSP: 002b:00007fdb567f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  158.152881][ T7195] RAX: ffffffffffffffda RBX: 00007fdb58825fa0 RCX: 00007fdb5859e159
[  158.152896][ T7195] RDX: 0000000000001006 RSI: 0000200000000e00 RDI: 0000000000000005
[  158.152909][ T7195] RBP: 00007fdb5863506b R08: 0000000000000000 R09: 0000000000000000
[  158.152922][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.152934][ T7195] R13: 00007fdb58826038 R14: 00007fdb58825fa0 R15: 00007fffcf5197d8
[  158.152956][ T7195]  </TASK>
[  158.153324][ T7195] Kernel Offset: disabled