last executing test programs: 8m36.143387329s ago: executing program 1 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x800, &(0x7f0000000180)={0x1, 0x70, 0x80000}, 0x20) 8m35.783709779s ago: executing program 1 (id=992): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000018c0)={0x2, 0x0, [{0xdddd1000, 0x62, &(0x7f00000016c0)=""/98}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 8m35.32760808s ago: executing program 1 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 8m35.086277539s ago: executing program 1 (id=996): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(r0, &(0x7f0000000380)='./file0/../file0\x00', r0, &(0x7f0000000400)='./file0/../file0\x00', 0x1) 8m34.529798775s ago: executing program 1 (id=999): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 8m33.08322478s ago: executing program 1 (id=1010): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) 8m31.097673653s ago: executing program 32 (id=1010): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) 5m21.206473398s ago: executing program 4 (id=2449): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='p', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @local, 0x8}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x6, 0x5, 0x7, 0x0, 0x2, 0x5, 0x6, {0x0, @in6={{0xa, 0x8e5, 0xd, @mcast2, 0x100}}, 0x3, 0x7, 0xfffffffb, 0x19, 0x2}}, &(0x7f0000000180)=0xb0) 5m21.005832759s ago: executing program 4 (id=2453): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 5m20.681383551s ago: executing program 4 (id=2456): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) 5m20.512569453s ago: executing program 4 (id=2459): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="fa150200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m18.641104755s ago: executing program 4 (id=2476): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 5m18.377451753s ago: executing program 4 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 5m3.260460973s ago: executing program 33 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 7.844291656s ago: executing program 6 (id=4644): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="74836a608a879c0f4933e2980e3c27227b44c5f674d374f685a7252ac48df7cbdb6cb4b24ef98291b83a501c8237790fe9dd1ab86749497a19e5823d8a30793254456ddc653c653fa808d834a5eb7d4d59ffb92952f1066a00bce07815b7b6d48a1722932d00dbdee09c36353b3109cdf5e573402fe43eed02728bedac7695eecc6592553d856ef5c81f3ac1aae42258794c093e644c10232030162346daaed7eb5035eeedc50977abe7153d2a693ed4a3808361052bbbd83cdd05d314de0d22a343bc438fb7d6cf3e96986d06662f1005a21a1a92a75cc0b9e59032f9cdeccd2d0ce9961ac063991b8adade53529e42a66e71cfe2898c62fea7a35048348ed3c1558f7dccf1d57ec1e04dce785f2b7d53a725bee3285c34c39c4bcfc7e78de0e2056ee113473335dff60475785116916d1f140a093a98912ab97185763da02e09aff786dabac1ecb508f44c729831afccd8127a432236ca799e232e24d6a432401121373560729431c07d280d5ddca29f8b090ba9fb342c0472dd41254696804d890335594dc908892b5b4141817d074e3d18f60fcc88a09d01167ebc34abe1fa88ad479b255fed991086555f6715611b75281c919e08295d7dce5a94354de0d3f9ab6a0ca20a76060b23caf7c18bf50d5cc1035f292394bf1be8640588918f692827dfdc1e4095c2b468a80b722b69e350e66c88c222bf1c357b3867d162e5e1d90777223b7dac6b9bd8fca2ee2019dbe35f7eb9f4562dd0d761adf16f1c2659aea0fe284602a4c188fae98d28f6bbe8c9928ecaa3ab282e4eb4480f8d26b1e38df368d808dc037350d13fd898638c1ffb13005709a6340fa4dec43307c7a53236399d02e03280fe5b37326b4bf920770607950aa957f73b56eb42b50428b80f533d57042b8cec67548f60789e557f5e68426b7ea3c7e2ed0c68e571bbb4d14dbb1a7e32750c30a97535bc6a398204e0b4b20038a2905fa97a899c0c153b9f783e08561d6d7ce9c593b20a8c9d0342c64639db4e4a900de891f9cf418caf585a9fb1fe88cd1febb3fadc934827e10adc73668c2bec4161c6d9d8af83b94916ba183fd4319139cea73173a5a2a5a50665643a0ca3de14b989706eecdbb010c45c9826ef368fc494c468446813208021c973c933a58507bc8a51baf3b77af624c8d15fad4e2d3cc7b2092c089baed0cd1f545cd6f1646bdaab17a11a74666c24e2af78dff22c8767155c7257235e851a4d57f51cc65e14f51c4a2afe1af92cdc25e5e71bdd3dde36ed40cb6393cc9696d7235e47929dbdb6a5d9d9059e19cd5e2e55ee1c25408f7deae259db7da26b81aa60365da1694085cfcda459930e6cc31501ece761aa36c12027a297f9e8b7da2b8149b251519a805ba3d5d850221e50ccc97b93281753193943d23b50be93fe957395c0ca116ebcedca7998c7f408dc938aba02b18ad9da724c2e3716981a658ce235d1723aba974c768c07dbef8678ff11cf46afae541ac5ac3a65ae67a51d201d9c8619592484afadcd4af0a4b0ea4af052a551e61bca70f2fac665e2e4d974ae3ee76f71ed58fc2e4194d9fd94b1a627cc7e116f11d67683144308947f4707422d31d4485a573e760963c74085dec9ed551d63c802d57e1633b82711b514a5b873b2be89660d84a188dbf1b97d7a23cb8b364f6ea031077718b19d01a6ed5942564525cb749e21c9a68ce245489db7e4fd383ed3e93ee006ff10a58c2fe3c91d97f790b8a271180c69589c21a0c72e68d84eddde3e01d5eb034e77a5a27cb80e34fa36f0fa4125a22944f60590e1b9b0f1c836d64217322286e3d24af8e991458af3a542ea8354fbe83a4d513893a39539523eef23802bff8019a5de324cbf39ec1e913fbb3cacbf7c7cf15ebfffbdd11c24543845d87e8b401671d2ae8d5db07d7e929248e1a348a17d80aff99ef1b3836f79a93f958a70d4e33a7f04fa15e1336f5c26289b46e470eff41958dce02e3163c199dd1ec083df1c8447624e529320fba36b848d27390aeb331d357de60465c2e0fb501916b1aa238ac1869dce80a17d9bba484c48a8928c170925889cd2224872ad328afb9321c9eb676096f5ad01c39652c906880b04190ad16855c9b03875356fef8fb2e470fc2432b878ea8daf6beb9b94e4dbaef0a1674403d1d2a72b593ac56de5237e7da7e662863b41f00e9332775c11e4d67c19f23e0d0eea7d2cec9ddb030baaf793e223052c6315ed478aa4d8707f2400d7d03bc32fff163acc1536e459f4807efacd3a855c55725392e635c3f432a2f724080a7aae411718b32f096c6dba2ed280b8169b1486812685f6aa34418b0b1777afd3c0f8030be528e31db140ee48814a1f56993678f97cb54abde61d8dcc8ecdcfc13531ac3fa53972e2be36f47f22ff6fce17f6a92c24ecd533ce544d47584683211e732dc49bffb3ecac90becf5dec9a2197512dcaca04f791cc04710105f7e80a704629834bca658c9928471cbcc32b2abfe50e0d3d63f7fe9b7c74313abf62b6a2addb4476c3ffd98ccc9c5bf3608da20d315d1428ed5025af648eafc90b5fec2fff3e1f3e284c661bb53c17e3e722a62122d62b8274bda4404d1b17144f2f04c3cc5bccee3b2568e2da456a284e4f76de40e70d4a34020530257e96a9c2f1d2ca661605641bc9bd78da275529dbf65203633f86a20b5971f3efc1b5160dcd0a4f2eb81bba79c3e6ceb46c8b8b301d8e050cb73df803b922d9edecadc4fd3c7d1598f44a16a0098202be9c180ca53fa26fc28f5dbd23cb052a9fda3d219f7f1fc8b5e85db094657f7263dfbe1b3c80022518890ff80b5bd91547d7a3404ce0b37974315cfc2dc6906eebc5f5e0227c2f6cbf98bda4466dd11026508026a8f7485f3ccb1273ff43f24fb49325db5e4a243d3f7c5ce6f35eb922d81544ed807897c896ce2f36705ffd58396022d093f6c74cc5f5eb2102bf9f2f213e471cfdf1f30f76ec8764f7a92d94cf00ff88107462bc3cb6e87c5926c0fdc6b5f45bcab6937ab0128f39a46fc8721548fd1451a9535905a70613f74d401989bffed243cd3560114ebcb38ea93474fe9ab948f930d236b244a562451d9c564dd86d635c6ce0bd0522f10a0d399e7bcd6e6ba89138c2da6b0b47dcfdd6cc773561943d15afb950b1d9a710ec2c3772e4ceacbddab61a344e360ee2a63e99c0fe6ef635cb0f40fa29246e37db290c1a038f59ee5fa379eaf26ead1146eaacaefbb753c3b0e3b16118ff3df617292c0705a6727f96770e3f0869effe493311469dfceb6c5f7f68976a04175b99df0b4ae0a8723188a210e9f66098332e022b02ca3a651ab99d660d764940b6868e59c7773efb0b4827b0d91d8429ea5bf545aa08013abfeac6160f97802cab7b32b38d9922a954e96cc4c5d7c43a7c89ca1e2d00c51208733dd8539724e62f5f5e69f556a1a3e5f4e9ee57363dd0317132e9829015ae0878fdf49e917f32e088ad00779cb801bcb2d34b21a5126d260c126ac3fa64182e9a640228f1707063a5bb4ea79f8b8b703367b31d8f387cb2695d1f27349ae5ba8ae40649ec6af188a68c0c4e2c8af927535a154db2661c71f0fd02fa07b154572addb912df3c844e1bc9ed6b4b14c4f802525374f075bc61c11c53cce143c812ffb53fc32766198464c8a574255b1727ec61a5812079fc23b773f4532284e9bf113c1b841b525dc6f9be7017c7bf1b8896e90925a633ee8724579f7f18f765a4029186eda52ff8292e4d44fa3d2edc99090e03568bf466200a35548ca3de102acd80355a9407fbabdb8722588d2396a5ff3b899e488346e9eeff8e8b349dbea0d6e8f86543bea1c8db9ec7b882909ebf7cdab930547afb8b0748abc72c9013cb72464dfb33354b1295d584800cf87869d7edbd07d0f88468b1e6d5d8679d5dce3d68c7c46b4cec0a5b9ed21ec1ede3deeb5c1bb98d92cd36a643e35a279aed569334181a70a37029ab8e79d0697359e58fecb7241e26188125e84123cde051d9a8bca2044e9786a88ef88e379a8e00a2c91ae98efa3649c0c2fe88a4e31c91e3372d5ccea58eb1d74cc48ef8e37b7248628b270df2c864a4b1a66d6ccf1b83cb6c484a2224e42905b0505fa5268a77fb1b10d08f57952e415c3f94e2f6299a3b1972a66e5aa34f000016803534160f99ccdd6a2cbb2c3b29ad078aec93f33d4f436549ffe88939cc7747c605c930a906c787c115ea6da9fcbd2148cfbabd4f88", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="050000000a0000000a0000000902000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 7.328685907s ago: executing program 6 (id=4647): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@gid}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@part={'part', 0x3d, 0xc}}]}, 0x2, 0x34b, &(0x7f00000008c0)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) 6.677222869s ago: executing program 0 (id=4650): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"a2e3ad21ed0d09f91b5f090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f090063090890e0878f0e1ac6e7049b334b959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3c2b802181acfc90c41bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e74130d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b12d94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14007693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x101) 6.176718986s ago: executing program 0 (id=4652): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 5.824787688s ago: executing program 6 (id=4655): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) statx(r1, 0x0, 0x1000, 0x0, &(0x7f0000000240)) 5.175954815s ago: executing program 6 (id=4658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040100010300000009210000800122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.110845113s ago: executing program 3 (id=4665): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0o', 0x2) 3.898642946s ago: executing program 0 (id=4666): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f0000002480)="$eJzs3M+LG2UYB/Cn29bWrftDrdUWpC960cvQ3YMXBVlkC9KA0naFVhCm7kRDxiRkwkJEjJ68+neIR2+CeNNLL/4N3vbisQdxxMTapsRDadkp4fO55CHv+w3PS0LgHeadw7e+/azbrrJ2PoqVY2/HyiAi3UmRYiXu+ipef/OXX1++duPmlZ1Wa/dqSpd3rm+9kVJav/jTh198/8rPozMf/LD+46m4vfnR4R/bv0/O3T5/+Nf1TztV6lSp1x+lPN3q90f5rbJI+52qm6X0flnkVZE6vaoYzo23y/5gME55b39tdTAsqirlvXHqFuM06qfRcJzyT/JOL2VZltZWg0ex992duq4j6vpkPBV1XddPx2qciWdiLdZjIzbj2Xguno+z8UKcixfjpTg/ndV03wAAAAAAAAAAAAAAAAAAALBcHun8/8WGmwcAAAAAAAAAAAAAAAAAAIAlce3GzSs7rdbu1ZROR5TfHOwd7M1eZ+M77ehEGUVcio34M6an/2dm9eV3W7uX0tRmfF1O/s1PDvaOz+e3po8TWJjfmuXTfP5UrN6f346NOLs4v70wfzpee/W+fBYb8dvH0Y8y9uOf7L38l1spvfNe64H8hek8AAAAWAZZ+s/C/XuW/d/4LP8Q1wce2F+fiAsnml07EdX4825elsWw8eJuR7N3JhHxhDS2xMXJJ6ONx1scn/shNd/PERfHIuJxfE5z/0kcnXtfetOdAAAAAAAAAAAA8DCO4rbEptcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//8Dzctd") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r0, 0x1, 0x7, 0x8010004) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=""/186) 3.596871525s ago: executing program 3 (id=4669): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0xc802, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x5fe0, &(0x7f00000023c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 3.34825133s ago: executing program 2 (id=4670): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4007dcfbb8e3352bca7fcbc29b4c583b54b8667fa57512d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) 3.123458464s ago: executing program 6 (id=4671): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in6=@local, 0x0, 0x0, 0x0, 0xd9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x6}, 0x1c) 2.707771627s ago: executing program 0 (id=4675): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r1}, 0x8) 2.396538085s ago: executing program 3 (id=4677): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x0, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x7fff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.269647723s ago: executing program 2 (id=4678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r1, 0x401, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0xfac0d]}]]}, 0x30}}, 0x0) 2.224486352s ago: executing program 5 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x148b83, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 2.125341089s ago: executing program 3 (id=4680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) 2.072419012s ago: executing program 2 (id=4681): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2.064184485s ago: executing program 6 (id=4682): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1ac, &(0x7f0000001980)="$eJzsmDFPIkEUx/+zy0K4XMK1d81dciRwxS27y93lKK6gvkITjcbOjawEXcTAFkBn/AzG2k9gaYgN30MLtbIQOyuLNbM7uAOKqAmK8f2Kt/9985h98wh/kgVBEO+Ws9Ork/1MOsn1R6SREPlzNapRpPpO6vrHUWXmcNe4PO50/xeG92MAfP/xz48B6BZVeOLe9wc/nRbXeSh9rcnri2DQhV6GggWhHTAsCb0m6Rqv1/XViuvoKzW3xIXBg8mDxUN+uL/eFkNJ6o9J641We912Xac+QTFufr2ign9Sf/L31Z+NEc0PJhSYQufBMCf0XyT6swlHIp3/SyzaX33h879t8Tk1pkbDZJ7OdriweYb/vKdjGs8XGqaijbGCgYuLJDAd/byWiPzJ32PISP4Uk/wj51U3c41W+2elapedsrNhWfk/xi/D+G3lAiMK4wP+lwz86YO0vzaiNs7iaNqeVzfDeHtvNRPw6tZ9jhsP/E9B9nvYNRM5meD/4BP7xi9ZFdiW1g5Gdk4QBEEQBEEQBEEQBEEQBPFUvoIFb0EHKNxJWbNB9U0AAAD//6Nob4A=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.929095374s ago: executing program 5 (id=4683): ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.717463198s ago: executing program 3 (id=4684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x6}, 0x8) 1.397127285s ago: executing program 0 (id=4685): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f000001fa40)="fc30", 0x2) 1.365633297s ago: executing program 3 (id=4686): r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008515090581fcffffff00000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x8, 0xb, 0x5, 0xfe01, 0x6, 0x3b, 0x4, 0x0, 0x2, 0x9, 0x8, 0xda}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x2c}, 0x0, 0x0, 0x0}) 1.300865216s ago: executing program 2 (id=4687): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7]}, &(0x7f0000000000)=0x100) 1.207860204s ago: executing program 0 (id=4688): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1.120887862s ago: executing program 5 (id=4689): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x13b, &(0x7f0000000200)="$eJzs2j9KO0EUB/D3+xkI5AhWgV0wCvtfY2EvCFaewCXZ3QzOOmFXkKQKXkCxGEtLWzvRziNs7Qn0EiObbIzZqWyikO+nmUfe8M2kyKuelYnUi3OLaHtye/L+PxNpuxvs92IvDmnmiIjaZVEodWeT5vSrX6iJrV0wXqqzk8jj55jxyNczAAAAAAAAAAAAAAAAAAAAAADWhPFRFa2BFA8x45H3rZuPxmch51GWzz8xqdrRoZ17cVDeD5byOg0ic7q/w+ThVdl3l/rmPGlrIMW/+vc5F+nQyUdji6VhEiXRue8HXXfXdfd8Z5rl1BPNm+pNVKinob5PZD4u9oneXH2fiFqzo7HJ5PVlPX3x+1GsWaE2/sQzUKyqaP7o/16fH9RvBsZrOT/snuD9Fc4PbaIB/JLPAAAA//+l/DbS") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 706.704026ms ago: executing program 5 (id=4690): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='./file1\x00', 0x1214080, &(0x7f0000000380)={[{@uid}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {}, {@uid}, {@part}]}, 0x1, 0x339, &(0x7f0000001300)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x4a438, &(0x7f0000000280)=ANY=[], 0x1, 0x0, &(0x7f0000000040)) rmdir(&(0x7f0000000000)='./bus\x00') 417.906495ms ago: executing program 5 (id=4691): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe122}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000000) 276.044581ms ago: executing program 2 (id=4692): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x77ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xae}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)="5a9e", 0x2}], 0x1}}], 0x1, 0x20004050) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @local, 0x7}}}, &(0x7f0000000180)=0x84) 102.90578ms ago: executing program 5 (id=4693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000000000000, 0x200000, &(0x7f0000000000/0x200000)=nil}) 0s ago: executing program 2 (id=4694): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) kernel console output (not intermixed with test programs): .435764][ T61] hsr_slave_1: left promiscuous mode [ 645.436396][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.436411][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.482929][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.482949][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.581508][ T61] veth1_macvtap: left promiscuous mode [ 645.581542][ T61] veth0_macvtap: left promiscuous mode [ 645.581611][ T61] veth1_vlan: left promiscuous mode [ 645.581654][ T61] veth0_vlan: left promiscuous mode [ 645.687238][T16933] loop0: detected capacity change from 0 to 128 [ 645.720633][T16933] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 645.720684][T16933] hpfs: filesystem error: improperly stopped [ 645.720694][T16933] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 645.720703][T16933] hpfs: You really don't want any checks? You are crazy... [ 645.720932][T16933] hpfs: hpfs_map_sector(): read error [ 645.720957][T16933] hpfs: code page support is disabled [ 645.751881][T16933] hpfs: hpfs_map_4sectors(): unaligned read [ 645.752002][T16933] hpfs: hpfs_map_4sectors(): unaligned read [ 645.752011][T16933] hpfs: filesystem error: unable to find root dir [ 645.867639][T16933] hpfs: hpfs_map_4sectors(): unaligned read [ 646.032319][T16908] loop3: detected capacity change from 0 to 32768 [ 646.055735][T16908] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4027 (16908) [ 646.084717][T16908] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 646.084743][T16908] BTRFS info (device loop3): using sha256 checksum algorithm [ 646.394865][T16908] BTRFS info (device loop3): turning off barriers [ 646.394887][T16908] BTRFS info (device loop3): enabling free space tree [ 646.503505][ T11] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 646.604678][ T5612] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 646.690988][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 646.693770][ T11] usb 1-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 646.700940][ T11] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.700966][ T11] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 646.700982][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 646.701005][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.782276][ T11] usb 1-1: config 0 descriptor?? [ 647.350451][ T14] smc: removing ib device syz1 [ 647.448162][ T11] hid-multitouch 0003:0EEF:72C4.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 647.778726][ T61] team0 (unregistering): Port device team_slave_1 removed [ 647.780154][ T11] usb 1-1: USB disconnect, device number 25 [ 647.866772][ T61] team0 (unregistering): Port device team_slave_0 removed [ 647.971227][T16972] loop2: detected capacity change from 0 to 16 [ 647.987290][T16972] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 648.717255][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 648.734454][T16982] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4051'. [ 648.757317][T16986] loop2: detected capacity change from 0 to 1024 [ 648.777655][T16986] EXT4-fs: Ignoring removed bh option [ 648.800631][T16986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.847561][T16991] loop0: detected capacity change from 0 to 8 [ 648.981306][ T5619] infiniband syz1: ib_query_port failed (-19) [ 649.006162][T16782] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.006231][T16782] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.006341][T16782] bridge_slave_0: entered allmulticast mode [ 649.041092][T16782] bridge_slave_0: entered promiscuous mode [ 649.082204][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.082354][T16782] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.082468][T16782] bridge_slave_1: entered allmulticast mode [ 649.134714][T16782] bridge_slave_1: entered promiscuous mode [ 649.197718][T16995] sock: sock_set_timeout: `syz.5.4054' (pid 16995) tries to set negative timeout [ 649.360146][T16782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.407815][T16782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.552519][T16999] i2c i2c-0: new_device: Can't parse I2C address [ 649.707200][T16782] team0: Port device team_slave_0 added [ 649.741381][T16782] team0: Port device team_slave_1 added [ 649.761158][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.825298][ T14] smbdirect: ib_dev[syz1] removed [ 650.041344][T16782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.041359][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.041375][T16782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.095886][T16782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.095903][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.095921][T16782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.247864][T17016] loop2: detected capacity change from 0 to 256 [ 650.248705][T17016] exfat: Deprecated parameter 'namecase' [ 650.248727][T17016] exfat: Deprecated parameter 'utf8' [ 650.326521][T17016] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 650.658788][T16782] hsr_slave_0: entered promiscuous mode [ 650.688244][T16782] hsr_slave_1: entered promiscuous mode [ 650.688774][T16782] debugfs: 'hsr0' already exists in 'hsr' [ 650.688791][T16782] Cannot create hsr debugfs directory [ 651.099241][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4066'. [ 651.798356][T17022] loop0: detected capacity change from 0 to 32768 [ 651.815612][T17022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4064 (17022) [ 652.012213][T17022] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.012241][T17022] BTRFS info (device loop0): using crc32c checksum algorithm [ 652.228608][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 652.369538][T17022] BTRFS info (device loop0): setting nodatasum [ 652.369560][T17022] BTRFS info (device loop0): enabling ssd optimizations [ 652.369571][T17022] BTRFS info (device loop0): disabling tree log [ 652.369581][T17022] BTRFS info (device loop0): turning on async discard [ 652.369590][T17022] BTRFS info (device loop0): enabling free space tree [ 652.369600][T17022] BTRFS info (device loop0): enabling auto defrag [ 652.498886][T17022] BTRFS critical (device loop0 state E): emergency shutdown [ 652.765066][ T5611] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 655.337142][T17111] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 655.734830][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 656.391956][T17121] loop5: detected capacity change from 0 to 2048 [ 656.416195][T17121] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 657.071467][T17137] loop0: detected capacity change from 0 to 1024 [ 657.119716][T17140] program syz.2.4100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.149469][T17137] hfsplus: invalid length 1280 has been corrected to 255 [ 657.168366][T17137] hfsplus: invalid length 1280 has been corrected to 255 [ 657.168387][T17137] hfsplus: invalid length 1280 has been corrected to 255 [ 657.168397][T17137] hfsplus: invalid length 1280 has been corrected to 255 [ 657.168406][T17137] hfsplus: invalid length 1280 has been corrected to 255 [ 657.420635][T17135] loop5: detected capacity change from 0 to 4096 [ 657.421396][T17135] ntfs3: Unknown parameter 'ﻺçm­½' [ 657.600375][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4097'. [ 658.974558][ T5619] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 659.063043][T17174] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 659.063069][T17174] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 659.063089][T17174] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 659.063100][T17174] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 659.063107][T17174] page dumped because: unmovable page [ 659.133284][ T5619] usb 1-1: Using ep0 maxpacket: 16 [ 659.133912][ T5619] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 659.135837][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.135860][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.135874][ T5619] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.135900][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.221062][T17174] page_owner info is not present (never set?) [ 659.281268][ T5619] usb 1-1: config 0 descriptor?? [ 659.742520][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742547][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742563][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742582][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742598][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742615][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742631][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742646][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742661][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.742677][ T5619] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 659.897852][ T5619] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 659.999255][ T5619] usb 1-1: USB disconnect, device number 26 [ 661.524111][T16782] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 661.578459][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.579244][T16782] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.637928][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.652857][T16782] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.691001][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.702300][T16782] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 661.727749][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.139232][T16782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.227151][T16782] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.279380][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.279448][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.321550][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.321618][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.567507][T17245] loop2: detected capacity change from 0 to 4096 [ 663.072037][T17245] ntfs3(loop2): ino=5, "/" indx_read_ra [ 663.072082][T17245] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 664.352095][T17285] program syz.0.4141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.425865][T17289] sd 0:0:1:0: PR command failed: 1026 [ 664.425905][T17289] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 664.425933][T17289] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 664.505364][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 664.804027][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4145'. [ 665.138243][T16782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.849753][T17331] loop3: detected capacity change from 0 to 128 [ 665.879208][T17331] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 665.879246][T17331] hpfs: filesystem error: improperly stopped [ 665.879256][T17331] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 665.879266][T17331] hpfs: You really don't want any checks? You are crazy... [ 665.879493][T17331] hpfs: hpfs_map_sector(): read error [ 665.879501][T17331] hpfs: code page support is disabled [ 665.879565][T17331] hpfs: hpfs_map_4sectors(): unaligned read [ 665.945840][T17331] hpfs: hpfs_map_4sectors(): unaligned read [ 665.945860][T17331] hpfs: filesystem error: unable to find root dir [ 666.212512][T17335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4156'. [ 666.764898][ T11] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 666.824396][T16782] veth0_vlan: entered promiscuous mode [ 666.858803][T16782] veth1_vlan: entered promiscuous mode [ 666.913796][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 666.914845][ T11] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 666.916565][ T11] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 666.916585][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.979117][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.979139][ T11] usb 3-1: Product: syz [ 666.979149][ T11] usb 3-1: Manufacturer: syz [ 666.979158][ T11] usb 3-1: SerialNumber: syz [ 667.072433][ T11] usb 3-1: 0:2 : does not exist [ 667.155430][T16782] veth0_macvtap: entered promiscuous mode [ 667.177786][T16782] veth1_macvtap: entered promiscuous mode [ 667.292046][T16782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.292199][ T11] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 667.354509][T16782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.436147][ T273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.436501][ T273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.436528][ T273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.436549][ T273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.887574][ T11] usb 3-1: USB disconnect, device number 37 [ 668.268264][T17367] loop2: detected capacity change from 0 to 24 [ 668.269022][T17367] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 668.328280][ T995] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 668.477743][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.477762][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.504979][ T995] usb 4-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 668.521911][ T995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 668.521958][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.552549][ T995] usb 4-1: config 0 descriptor?? [ 668.563987][T17364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.827972][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.827993][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.968990][T17367] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 669.087272][ T995] hid_parser_main: 4 callbacks suppressed [ 669.087296][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087330][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087346][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087362][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087377][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087392][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087407][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087422][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087438][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.087454][ T995] asus 0003:0B05:1ABE.0017: unknown main item tag 0x0 [ 669.441698][ T995] asus 0003:0B05:1ABE.0017: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 669.489855][ T995] usb 4-1: USB disconnect, device number 33 [ 670.481200][T17398] program syz.2.4176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.564423][ T5721] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 670.620650][ T32] audit: type=1326 audit(1790772390.922:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17402 comm="syz.3.4179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e819e159 code=0x0 [ 670.724418][ T5721] usb 7-1: Using ep0 maxpacket: 32 [ 670.725926][ T5721] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 670.726990][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.769054][ T5721] usb 7-1: config 0 descriptor?? [ 670.999793][ T5721] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 671.024964][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 671.029612][ T5721] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 671.029654][ T5721] usb 7-1: media controller created [ 671.083787][T17415] program syz.5.4184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.092504][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.127781][ T995] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 671.260357][ T5721] az6027: usb out operation failed. (-71) [ 671.275067][ T995] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 671.275963][ T995] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 671.275983][ T995] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 671.276010][ T995] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 671.279991][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 671.280011][ T995] usb 1-1: Product: syz [ 671.280021][ T995] usb 1-1: Manufacturer: syz [ 671.398720][ T5721] az6027: usb out operation failed. (-71) [ 671.398739][ T5721] stb0899_attach: Driver disabled by Kconfig [ 671.398746][ T5721] az6027: no front-end attached [ 671.398746][ T5721] [ 671.437452][ T5721] az6027: usb out operation failed. (-71) [ 671.437470][ T5721] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 671.441840][ T5721] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input52 [ 671.487108][ T5721] dvb-usb: schedule remote query interval to 400 msecs. [ 671.487132][ T5721] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 671.520221][ T5721] usb 7-1: USB disconnect, device number 12 [ 671.566050][ T9] kernel write not supported for file /input/mice (pid: 9 comm: kworker/0:0) [ 671.588028][T17412] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 671.588107][T17412] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 671.805343][ T5721] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 671.810332][ T32] audit: type=1326 audit(1790772392.112:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 671.810370][ T32] audit: type=1326 audit(1790772392.112:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 671.822172][ T32] audit: type=1326 audit(1790772392.112:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 671.881118][ T32] audit: type=1326 audit(1790772392.192:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 671.948754][ T32] audit: type=1326 audit(1790772392.252:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 671.948799][ T32] audit: type=1326 audit(1790772392.252:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 671.948828][ T32] audit: type=1326 audit(1790772392.252:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 672.048930][ T32] audit: type=1326 audit(1790772392.352:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 672.048972][ T32] audit: type=1326 audit(1790772392.352:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.5.4189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9aa819e159 code=0x7ffc0000 [ 672.367760][ T995] dvb_ttusb_budget: ttusb_init_controller: error [ 672.367778][ T995] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 672.557486][ T995] DVB: Unable to find symbol cx22700_attach() [ 672.742461][ T995] DVB: Unable to find symbol tda10046_attach() [ 672.742475][ T995] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 672.773471][ T995] usb 1-1: USB disconnect, device number 27 [ 673.637651][T17463] loop6: detected capacity change from 0 to 256 [ 673.751470][T17463] exFAT-fs (loop6): error, no upcase table entry. Please run fsck [ 673.751489][T17463] exFAT-fs (loop6): Filesystem has been set read-only [ 673.751657][T17463] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 673.906429][T17463] exFAT-fs (loop6): start_clu is invalid cluster(0x400) [ 673.970725][T17448] loop2: detected capacity change from 0 to 32768 [ 674.005015][T17448] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4199 (17448) [ 674.043764][T17448] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 674.043791][T17448] BTRFS info (device loop2): using blake2b checksum algorithm [ 674.182853][ T273] IPVS: starting estimator thread 0... [ 674.265242][T17486] IPVS: using max 51 ests per chain, 122400 per kthread [ 674.320148][T17448] BTRFS info (device loop2): enabling ssd optimizations [ 674.320170][T17448] BTRFS info (device loop2): enabling free space tree [ 674.493320][ T5721] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 674.497385][ T5614] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 674.653423][ T5721] usb 6-1: Using ep0 maxpacket: 8 [ 674.654069][ T5721] usb 6-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 674.655132][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 674.655153][ T5721] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 674.655179][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.663062][ T5721] usb 6-1: config 0 descriptor?? [ 675.197278][ T5721] hid_parser_main: 466 callbacks suppressed [ 675.197311][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197332][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197348][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197364][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197379][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197394][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197410][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.197425][ T5721] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 675.290096][ T5721] lenovo 0003:17EF:6047.0018: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 675.606371][ T5721] lenovo 0003:17EF:6047.0018: Failed to switch middle button: -71 [ 675.608267][ T5721] lenovo 0003:17EF:6047.0018: Fn-lock setting failed: -71 [ 675.613501][ T5721] lenovo 0003:17EF:6047.0018: Sensitivity setting failed: -71 [ 675.655840][ T5721] usb 6-1: USB disconnect, device number 23 [ 676.358218][T17508] loop6: detected capacity change from 0 to 32768 [ 676.384727][T17508] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4220 (17508) [ 676.402708][T17508] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 676.402739][T17508] BTRFS info (device loop6): using sha256 checksum algorithm [ 676.595942][T17508] BTRFS info (device loop6): rebuilding free space tree [ 676.737515][T17508] BTRFS info (device loop6): disabling free space tree [ 676.737574][T17508] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 676.737589][T17508] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 676.861549][T17508] BTRFS info (device loop6): setting nodatasum [ 676.861570][T17508] BTRFS info (device loop6): setting nodatacow [ 676.861581][T17508] BTRFS info (device loop6): turning off barriers [ 676.861591][T17508] BTRFS info (device loop6): force clearing of disk cache [ 677.425780][T16782] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 678.048800][T17569] loop3: detected capacity change from 0 to 512 [ 678.064262][T17569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 678.182346][T17569] EXT4-fs (loop3): 1 truncate cleaned up [ 678.184173][T17569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.381001][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.528354][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4241'. [ 680.040486][T17585] loop3: detected capacity change from 0 to 32768 [ 680.751525][T17605] tap0: tun_chr_ioctl cmd 2147767521 [ 681.019133][T17614] loop3: detected capacity change from 0 to 256 [ 681.052304][T17614] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 681.127501][T17614] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 681.655511][T17634] kAFS: bad VL server IP address [ 681.947460][ T5616] Bluetooth: hci5: command 0x1003 tx timeout [ 681.952819][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 682.057973][T17646] overlayfs: failed to clone lowerpath [ 682.838285][T17666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4282'. [ 683.307798][T17681] RDS: rds_bind could not find a transport for 4600::, load rds_tcp or rds_rdma? [ 683.503544][ T11] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 683.645983][T17659] loop6: detected capacity change from 0 to 40427 [ 683.661001][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 683.671071][ T11] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 683.672280][ T11] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 683.672299][ T11] usb 6-1: config 0 has no interface number 0 [ 683.717149][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.717172][ T11] usb 6-1: Product: syz [ 683.717181][ T11] usb 6-1: Manufacturer: syz [ 683.717191][ T11] usb 6-1: SerialNumber: syz [ 683.746503][T17659] F2FS-fs (loop6): invalid crc value [ 683.759357][ T11] usb 6-1: config 0 descriptor?? [ 683.791543][ T11] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 684.036878][ T11] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 684.074922][ T11] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 684.368852][T17659] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 684.506198][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 684.507262][ T11] usb 6-1: USB disconnect, device number 24 [ 684.539679][ T11] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 684.569946][ T11] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 684.570453][ T11] quatech2 6-1:0.51: device disconnected [ 684.618190][T17659] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 684.860744][T17685] loop0: detected capacity change from 0 to 40427 [ 684.888936][T17685] F2FS-fs (loop0): invalid crc value [ 684.929642][ T5619] kernel write not supported for file bpf-prog (pid: 5619 comm: kworker/0:4) [ 685.096224][T16782] syz-executor: attempt to access beyond end of device [ 685.096224][T16782] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 685.120914][ T292] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.122291][ T292] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.122320][ T292] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.122343][ T292] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.242428][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 685.242456][T16782] Tainted: [L]=SOFTLOCKUP [ 685.242461][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 685.242469][T16782] Call Trace: [ 685.242475][T16782] [ 685.242482][T16782] dump_stack_lvl+0xe8/0x150 [ 685.242512][T16782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 685.242535][T16782] f2fs_write_end_bio+0xda7/0x11c0 [ 685.242565][T16782] __submit_merged_bio+0x258/0x6a0 [ 685.242580][T16782] ? rcu_is_watching+0x16/0xb0 [ 685.242605][T16782] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 685.242623][T16782] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 685.242653][T16782] f2fs_write_data_pages+0x2a13/0x36e0 [ 685.242692][T16782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 685.242709][T16782] ? is_bpf_text_address+0x26/0x2b0 [ 685.242731][T16782] ? arch_stack_walk+0xfb/0x150 [ 685.242765][T16782] ? add_lock_to_list+0xc7/0x100 [ 685.242787][T16782] ? lockdep_unlock+0x5c/0xd0 [ 685.242801][T16782] ? __lock_acquire+0x1511/0x2de0 [ 685.242834][T16782] ? do_raw_spin_lock+0x12b/0x2f0 [ 685.242854][T16782] ? do_raw_spin_unlock+0xf5/0x200 [ 685.242869][T16782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 685.242888][T16782] do_writepages+0x338/0x560 [ 685.242912][T16782] ? do_raw_spin_unlock+0xf5/0x200 [ 685.242929][T16782] filemap_fdatawrite+0x1e9/0x2f0 [ 685.242947][T16782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 685.242991][T16782] ? do_raw_spin_unlock+0xf5/0x200 [ 685.243008][T16782] f2fs_sync_dirty_inodes+0x471/0x970 [ 685.243037][T16782] f2fs_write_checkpoint+0x860/0x24d0 [ 685.243079][T16782] kill_f2fs_super+0x2dc/0x700 [ 685.243101][T16782] ? rcu_do_enqueue+0x616/0x870 [ 685.243122][T16782] ? lockdep_hardirqs_on+0x7b/0x110 [ 685.243144][T16782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 685.243172][T16782] ? __pfx_call_rcu+0x10/0x10 [ 685.243196][T16782] ? shrinker_free+0x2a7/0x3b0 [ 685.243223][T16782] deactivate_locked_super+0xbe/0x110 [ 685.243243][T16782] cleanup_mnt+0x3d3/0x460 [ 685.243266][T16782] task_work_run+0x1d9/0x260 [ 685.243286][T16782] ? __pfx_task_work_run+0x10/0x10 [ 685.243309][T16782] exit_to_user_mode_loop+0x204/0x770 [ 685.243327][T16782] ? rcu_is_watching+0x16/0xb0 [ 685.243349][T16782] do_syscall_64+0x328/0x520 [ 685.243367][T16782] ? trace_irq_disable+0x3b/0x140 [ 685.243384][T16782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.243399][T16782] ? clear_bhb_loop+0x70/0xc0 [ 685.243416][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.243428][T16782] RIP: 0033:0x7fd3bdd9f397 [ 685.243444][T16782] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 685.243455][T16782] RSP: 002b:00007ffe46dd57f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 685.243472][T16782] RAX: 0000000000000000 RBX: 00007fd3bde344bb RCX: 00007fd3bdd9f397 [ 685.243482][T16782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe46dd58b0 [ 685.243490][T16782] RBP: 00007ffe46dd58b0 R08: 00007ffe46dd68b0 R09: 00000000ffffffff [ 685.243500][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe46dd6940 [ 685.243509][T16782] R13: 00007fd3bde344bb R14: 00000000000a74ab R15: 00007ffe46dd6980 [ 685.243531][T16782] [ 685.315027][T16782] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 685.678764][T17685] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 685.777924][T17725] loop2: detected capacity change from 0 to 512 [ 685.855528][T17725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 686.003891][T17725] EXT4-fs (loop2): 1 truncate cleaned up [ 686.005089][T17725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.084298][T17685] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 686.124533][T17730] sctp: Trying to GSO but underlying device doesn't support it. [ 686.333981][ T11] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 686.490959][ T5611] syz-executor: attempt to access beyond end of device [ 686.490959][ T5611] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 686.513617][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 686.516044][ T11] usb 6-1: New USB device found: idVendor=1038, idProduct=12c2, bcdDevice=0.00 [ 686.518677][ T11] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.518701][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 686.518723][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.522253][ T11] usb 6-1: config 0 descriptor?? [ 686.650047][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 686.650075][ T5611] Tainted: [L]=SOFTLOCKUP [ 686.650080][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 686.650088][ T5611] Call Trace: [ 686.650094][ T5611] [ 686.650101][ T5611] dump_stack_lvl+0xe8/0x150 [ 686.650125][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 686.650150][ T5611] f2fs_write_end_bio+0xda7/0x11c0 [ 686.650180][ T5611] __submit_merged_bio+0x258/0x6a0 [ 686.650204][ T5611] ? rcu_is_watching+0x16/0xb0 [ 686.650226][ T5611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 686.650243][ T5611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 686.650273][ T5611] f2fs_write_data_pages+0x2a13/0x36e0 [ 686.650313][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 686.650328][ T5611] ? is_bpf_text_address+0x26/0x2b0 [ 686.650349][ T5611] ? arch_stack_walk+0xfb/0x150 [ 686.650382][ T5611] ? add_lock_to_list+0xc7/0x100 [ 686.650402][ T5611] ? lockdep_unlock+0x5c/0xd0 [ 686.650414][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 686.650447][ T5611] ? do_raw_spin_lock+0x12b/0x2f0 [ 686.650467][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 686.650480][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 686.650498][ T5611] do_writepages+0x338/0x560 [ 686.650520][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 686.650535][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 686.650553][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 686.650596][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 686.650612][ T5611] f2fs_sync_dirty_inodes+0x471/0x970 [ 686.650640][ T5611] f2fs_write_checkpoint+0x860/0x24d0 [ 686.650681][ T5611] kill_f2fs_super+0x2dc/0x700 [ 686.650702][ T5611] ? rcu_do_enqueue+0x616/0x870 [ 686.650718][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 686.650736][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 686.650763][ T5611] ? __pfx_call_rcu+0x10/0x10 [ 686.650785][ T5611] ? shrinker_free+0x2a7/0x3b0 [ 686.650802][ T5611] deactivate_locked_super+0xbe/0x110 [ 686.650819][ T5611] cleanup_mnt+0x3d3/0x460 [ 686.650841][ T5611] task_work_run+0x1d9/0x260 [ 686.650859][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 686.650881][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 686.650897][ T5611] ? rcu_is_watching+0x16/0xb0 [ 686.650918][ T5611] do_syscall_64+0x328/0x520 [ 686.650935][ T5611] ? trace_irq_disable+0x3b/0x140 [ 686.650951][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.650964][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 686.650980][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.650992][ T5611] RIP: 0033:0x7fb356b9f397 [ 686.651006][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 686.651017][ T5611] RSP: 002b:00007ffd9b0d6ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 686.651033][ T5611] RAX: 0000000000000000 RBX: 00007fb356c344bb RCX: 00007fb356b9f397 [ 686.651042][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9b0d6b70 [ 686.651050][ T5611] RBP: 00007ffd9b0d6b70 R08: 00007ffd9b0d7b70 R09: 00000000ffffffff [ 686.651059][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9b0d7c00 [ 686.651067][ T5611] R13: 00007fb356c344bb R14: 00000000000a79b0 R15: 00007ffd9b0d7c40 [ 686.651088][ T5611] [ 686.651114][ T5611] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 686.910419][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.149363][T17741] loop6: detected capacity change from 0 to 512 [ 687.218900][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.278616][T17741] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.439784][ T11] hid-steelseries-arctis 0003:1038:12C2.0019: unknown main item tag 0x0 [ 687.439820][ T11] hid-steelseries-arctis 0003:1038:12C2.0019: unknown main item tag 0x0 [ 687.439836][ T11] hid-steelseries-arctis 0003:1038:12C2.0019: unexpected long global item [ 687.496175][ T11] hid-steelseries-arctis 0003:1038:12C2.0019: probe with driver hid-steelseries-arctis failed with error -22 [ 687.538460][ T11] usb 6-1: USB disconnect, device number 25 [ 687.910358][T17750] loop2: detected capacity change from 0 to 256 [ 687.947018][T17741] EXT4-fs error (device loop6): ext4_quota_enable:7256: comm syz.6.4303: Bad quota inum: 2, type: 1 [ 687.966863][T17741] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 688.009271][T17750] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 688.391027][T16782] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 688.465270][T17755] sctp: [Deprecated]: syz.5.4316 (pid 17755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 688.465270][T17755] Use struct sctp_sack_info instead [ 688.515988][T17750] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 688.834552][T17769] loop3: detected capacity change from 0 to 512 [ 688.852013][T17769] EXT4-fs: Ignoring removed mblk_io_submit option [ 688.910127][T17769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.910515][T17769] ext4 filesystem being mounted at /932/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.019798][ T995] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 689.164468][ T995] usb 1-1: Using ep0 maxpacket: 8 [ 689.168003][ T995] usb 1-1: New USB device found: idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 689.200126][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.200147][ T995] usb 1-1: Product: syz [ 689.200158][ T995] usb 1-1: Manufacturer: syz [ 689.200168][ T995] usb 1-1: SerialNumber: syz [ 689.237542][ T995] usb 1-1: config 0 descriptor?? [ 689.271507][ T995] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 689.466277][ T995] gspca_sonixj: reg_w1 err -71 [ 689.466373][ T995] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 689.521311][ T995] usb 1-1: USB disconnect, device number 28 [ 689.719184][T17780] tipc: Started in network mode [ 689.719208][T17780] tipc: Node identity 7f000001, cluster identity 4711 [ 689.719246][T17780] tipc: Enabling of bearer rejected, failed to enable media [ 689.766311][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.954487][T17783] loop2: detected capacity change from 0 to 256 [ 690.068000][T17775] loop5: detected capacity change from 0 to 32768 [ 690.112442][T17775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4323 (17775) [ 690.147411][T17775] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 690.147439][T17775] BTRFS info (device loop5): using sha256 checksum algorithm [ 690.313627][T17775] BTRFS info (device loop5): enabling ssd optimizations [ 690.313649][T17775] BTRFS info (device loop5): turning on async discard [ 690.313660][T17775] BTRFS info (device loop5): enabling free space tree [ 690.375047][T17776] loop6: detected capacity change from 0 to 32768 [ 690.440721][T17776] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.659948][T17776] XFS (loop6): Ending clean mount [ 690.996988][T16782] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 691.108375][T17823] usbcore.quirks: string doesn't fit in 127 chars. [ 691.184599][ T8948] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 691.365030][T17827] loop2: detected capacity change from 0 to 256 [ 691.448519][T17829] loop0: detected capacity change from 0 to 128 [ 691.469278][ T32] audit: type=1800 audit(1790772411.772:305): pid=17827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4338" name="file1" dev="loop2" ino=191 res=0 errno=-22 [ 691.680719][T17829] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 691.680759][T17829] hpfs: filesystem error: improperly stopped [ 691.680768][T17829] hpfs: You really don't want any checks? You are crazy... [ 691.680959][T17829] hpfs: hpfs_map_sector(): read error [ 691.680966][T17829] hpfs: code page support is disabled [ 691.681262][T17829] hpfs: hpfs_map_4sectors(): unaligned read [ 691.681312][T17829] hpfs: hpfs_map_4sectors(): unaligned read [ 691.681318][T17829] hpfs: filesystem error: unable to find root dir [ 692.034785][T17835] loop6: detected capacity change from 0 to 256 [ 692.058003][T17835] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 692.280105][ T61] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 692.404959][T17840] loop3: detected capacity change from 0 to 4096 [ 692.488865][T17846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 692.526169][T17844] loop2: detected capacity change from 0 to 512 [ 692.526893][T17844] EXT4-fs: Ignoring removed oldalloc option [ 692.617842][T17844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.617949][T17844] ext4 filesystem being mounted at /903/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.842881][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.346435][T17863] loop6: detected capacity change from 0 to 256 [ 693.367499][T17862] loop2: detected capacity change from 0 to 1024 [ 693.551340][T17838] loop5: detected capacity change from 0 to 32768 [ 693.572061][T17838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4342 (17838) [ 693.596663][T17838] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.596691][T17838] BTRFS info (device loop5): using sha256 checksum algorithm [ 693.851628][T17838] BTRFS info (device loop5): enabling ssd optimizations [ 693.851658][T17838] BTRFS info (device loop5): turning on async discard [ 693.851672][T17838] BTRFS info (device loop5): enabling free space tree [ 694.338499][ T8948] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 695.614371][ T11] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 695.764413][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 695.765152][ T11] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 695.766096][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.766127][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.905781][ T11] usb 1-1: config 0 descriptor?? [ 696.124997][ T5721] hid-generic 0005:15C2:0003.001A: item fetching failed at offset 0/1 [ 696.153528][ T5721] hid-generic 0005:15C2:0003.001A: probe with driver hid-generic failed with error -22 [ 696.206347][ T11] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 696.496204][T17908] loop5: detected capacity change from 0 to 2048 [ 696.522273][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 696.556591][T17908] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 696.560385][T17908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 696.614320][ T11] usb 1-1: USB disconnect, device number 29 [ 697.179574][T17922] loop5: detected capacity change from 0 to 512 [ 697.206160][T17922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 697.366990][T17922] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 697.411011][T17922] EXT4-fs (loop5): 1 truncate cleaned up [ 697.412048][T17922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.527401][T17922] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 697.614608][T17924] loop2: detected capacity change from 0 to 4096 [ 697.659868][T17930] loop0: detected capacity change from 0 to 16 [ 697.709454][ T8948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.722014][T17930] erofs (device loop0): mounted with root inode @ nid 36. [ 697.757018][T17931] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.106579][T17936] 0x000000000007-0x000000020000 : "" [ 698.129487][T17936] ftl_cs: FTL header corrupt! [ 699.092288][T17960] loop5: detected capacity change from 0 to 128 [ 699.293437][ T5721] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 699.401735][T17963] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 699.401735][T17963] program syz.3.4387 not setting count and/or reply_len properly [ 699.445741][ T5721] usb 1-1: New USB device found: idVendor=05c5, idProduct=0002, bcdDevice=1.00 [ 699.453776][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.453799][ T5721] usb 1-1: Product: syz [ 699.453808][ T5721] usb 1-1: Manufacturer: syz [ 699.453818][ T5721] usb 1-1: SerialNumber: syz [ 699.505516][ T5721] digi_acceleport 1-1:1.0: Digi 2 port USB adapter converter detected [ 699.558719][ T5721] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 699.580509][ T5721] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 699.598993][ T5721] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 699.831705][ T11] usb 1-1: USB disconnect, device number 30 [ 699.891364][ T11] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 700.018097][ T11] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 700.019347][T17947] loop2: detected capacity change from 0 to 32768 [ 700.051951][ T11] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 700.052794][ T11] digi_acceleport 1-1:1.0: device disconnected [ 700.095582][T17947] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 700.119780][ T32] audit: type=1800 audit(1790772420.422:306): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4385" name="file2" dev="loop5" ino=204 res=0 errno=-4 [ 700.121649][T17948] loop6: detected capacity change from 0 to 40427 [ 700.214080][T17947] XFS (loop2): Ending clean mount [ 700.689228][T17948] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 700.971626][ T5614] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 701.041051][T17985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4391'. [ 701.041076][T17985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4391'. [ 701.041086][T17985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4391'. [ 701.041403][T17985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4391'. [ 701.152536][T17948] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 701.178775][T17987] loop0: detected capacity change from 0 to 512 [ 701.208176][T17987] EXT4-fs (loop0): Test dummy encryption mode enabled [ 701.253054][T17987] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.4393: inode has both inline data and extents flags [ 701.253082][T17987] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 701.268793][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 701.268814][ C0] EXT4-fs (loop0): initial error at time 1790772421: ext4_orphan_get:1403: inode 15 [ 701.268834][ C0] EXT4-fs (loop0): last error at time 1790772421: ext4_orphan_get:1403: inode 15 [ 701.329646][T17987] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.4393: couldn't read orphan inode 15 (err -117) [ 701.329676][T17987] loop0: lost filesystem error report for type 5 error -117 [ 701.332616][T17987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.703799][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.053022][T16782] syz-executor: attempt to access beyond end of device [ 702.053022][T16782] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 702.142696][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 702.142723][T16782] Tainted: [L]=SOFTLOCKUP [ 702.142729][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 702.142736][T16782] Call Trace: [ 702.142742][T16782] [ 702.142749][T16782] dump_stack_lvl+0xe8/0x150 [ 702.142773][T16782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 702.142793][T16782] f2fs_write_end_bio+0xda7/0x11c0 [ 702.142822][T16782] __submit_merged_bio+0x258/0x6a0 [ 702.142837][T16782] ? rcu_is_watching+0x16/0xb0 [ 702.142859][T16782] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 702.142876][T16782] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 702.142905][T16782] f2fs_write_data_pages+0x2a13/0x36e0 [ 702.142943][T16782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 702.142959][T16782] ? is_bpf_text_address+0x26/0x2b0 [ 702.142979][T16782] ? arch_stack_walk+0xfb/0x150 [ 702.143011][T16782] ? add_lock_to_list+0xc7/0x100 [ 702.143031][T16782] ? lockdep_unlock+0x5c/0xd0 [ 702.143044][T16782] ? __lock_acquire+0x1511/0x2de0 [ 702.143075][T16782] ? do_raw_spin_lock+0x12b/0x2f0 [ 702.143095][T16782] ? do_raw_spin_unlock+0xf5/0x200 [ 702.143119][T16782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 702.143137][T16782] do_writepages+0x338/0x560 [ 702.143159][T16782] ? do_raw_spin_unlock+0xf5/0x200 [ 702.143175][T16782] filemap_fdatawrite+0x1e9/0x2f0 [ 702.143192][T16782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 702.143235][T16782] ? do_raw_spin_unlock+0xf5/0x200 [ 702.143251][T16782] f2fs_sync_dirty_inodes+0x471/0x970 [ 702.143279][T16782] f2fs_write_checkpoint+0x860/0x24d0 [ 702.143321][T16782] kill_f2fs_super+0x2dc/0x700 [ 702.143342][T16782] ? rcu_do_enqueue+0x616/0x870 [ 702.143357][T16782] ? lockdep_hardirqs_on+0x7b/0x110 [ 702.143375][T16782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 702.143403][T16782] ? __pfx_call_rcu+0x10/0x10 [ 702.143425][T16782] ? shrinker_free+0x2a7/0x3b0 [ 702.143442][T16782] deactivate_locked_super+0xbe/0x110 [ 702.143459][T16782] cleanup_mnt+0x3d3/0x460 [ 702.143481][T16782] task_work_run+0x1d9/0x260 [ 702.143499][T16782] ? __pfx_task_work_run+0x10/0x10 [ 702.143521][T16782] exit_to_user_mode_loop+0x204/0x770 [ 702.143538][T16782] ? rcu_is_watching+0x16/0xb0 [ 702.143559][T16782] do_syscall_64+0x328/0x520 [ 702.143576][T16782] ? trace_irq_disable+0x3b/0x140 [ 702.143592][T16782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.143605][T16782] ? clear_bhb_loop+0x70/0xc0 [ 702.143624][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.143637][T16782] RIP: 0033:0x7fd3bdd9f397 [ 702.143651][T16782] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 702.143661][T16782] RSP: 002b:00007ffe46dd57f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 702.143677][T16782] RAX: 0000000000000000 RBX: 00007fd3bde344bb RCX: 00007fd3bdd9f397 [ 702.143686][T16782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe46dd58b0 [ 702.143694][T16782] RBP: 00007ffe46dd58b0 R08: 00007ffe46dd68b0 R09: 00000000ffffffff [ 702.143703][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe46dd6940 [ 702.143711][T16782] R13: 00007fd3bde344bb R14: 00000000000ab6ad R15: 00007ffe46dd6980 [ 702.143732][T16782] [ 702.143861][T16782] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 702.148828][T18007] loop5: detected capacity change from 0 to 512 [ 702.669519][T18007] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 702.669544][T18007] EXT4-fs (loop5): inodes count not valid: 32 vs 800 [ 703.002477][T18007] loop5: detected capacity change from 0 to 4096 [ 703.036936][T18007] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 703.415956][T18018] loop2: detected capacity change from 0 to 2048 [ 703.523399][ T995] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 703.602898][T18018] loop2: p1 < > p3 [ 703.614655][T18018] loop2: p3 size 134217728 extends beyond EOD, truncated [ 703.673634][ T995] usb 4-1: Using ep0 maxpacket: 8 [ 703.675550][ T995] usb 4-1: unable to get BOS descriptor or descriptor too short [ 703.675584][ T995] usb 4-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 703.676452][ T995] usb 4-1: config 4 interface 0 has no altsetting 0 [ 703.678884][ T995] usb 4-1: string descriptor 0 read error: -22 [ 703.678945][ T995] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 703.750004][ T995] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 703.807197][ T995] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 703.807451][ T995] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 703.807482][ T995] usb 4-1: media controller created [ 703.922894][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.039076][T18026] kAFS: bad VL server IP address [ 704.167871][T18010] loop0: detected capacity change from 0 to 32768 [ 704.220667][T18010] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 704.450826][ T995] zl10353_read_register: readreg error (reg=127, ret==0) [ 704.515122][T18010] XFS (loop0): Ending clean mount [ 704.610210][ T995] usb 4-1: USB disconnect, device number 34 [ 704.654862][T18010] XFS (loop0): Quotacheck needed: Please wait. [ 704.725415][T18045] loop6: detected capacity change from 0 to 128 [ 704.800214][ T32] audit: type=1400 audit(1790772425.102:307): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=18044 comm="syz.5.4411" [ 705.057244][T18048] loop2: detected capacity change from 0 to 8192 [ 705.186419][T18010] XFS (loop0): Quotacheck: Done. [ 705.348419][ T5611] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 705.860128][T18065] loop3: detected capacity change from 0 to 256 [ 705.873254][T18065] exfat: Deprecated parameter 'utf8' [ 705.873291][T18065] exfat: Deprecated parameter 'namecase' [ 705.873352][T18065] exfat: Deprecated parameter 'namecase' [ 705.873366][T18065] exfat: Deprecated parameter 'utf8' [ 705.937130][T18065] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 705.937363][T18065] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 706.087167][ T5619] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 706.235955][ T5619] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 706.238362][ T5619] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 706.238381][ T5619] usb 6-1: config 1 has no interface number 0 [ 706.271547][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.271569][ T5619] usb 6-1: Product: syz [ 706.271579][ T5619] usb 6-1: Manufacturer: syz [ 706.271588][ T5619] usb 6-1: SerialNumber: syz [ 706.307408][ T5619] usb 6-1: 3:1 : does not exist [ 706.307427][ T5619] usb 6-1: 3:2 : does not exist [ 706.687410][ T5619] usb 6-1: USB disconnect, device number 26 [ 706.822588][T18078] loop3: detected capacity change from 0 to 2048 [ 706.898312][T18078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.091156][T18077] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 707.287079][T18090] loop6: detected capacity change from 0 to 512 [ 707.337457][T18090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.337545][T18090] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.414985][T18094] sd 0:0:1:0: PR command failed: 1026 [ 707.415034][T18094] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 707.415060][T18094] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 707.421833][T18090] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #2: comm syz.6.4430: corrupted inode contents [ 707.500079][T18090] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #2: comm syz.6.4430: mark_inode_dirty error [ 707.520315][T18090] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #2: comm syz.6.4430: corrupted inode contents [ 707.542753][T18090] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.4430: mark_inode_dirty error [ 707.576226][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.214946][T16782] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.266233][ T5619] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 708.337314][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4438'. [ 708.443298][ T5619] usb 1-1: Using ep0 maxpacket: 16 [ 708.444919][ T5619] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 708.445822][ T5619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.445853][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 708.445871][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 708.445884][ T5619] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 708.445897][ T5619] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.446831][ T5619] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 708.446847][ T5619] usb 1-1: Manufacturer: syz [ 708.448680][ T5619] usb 1-1: config 0 descriptor?? [ 708.618323][T18117] loop5: detected capacity change from 0 to 512 [ 708.781265][T18117] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 708.927168][ T5619] rc_core: IR keymap rc-hauppauge not found [ 708.927186][ T5619] Registered IR keymap rc-empty [ 708.927299][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.960618][T18105] loop3: detected capacity change from 0 to 32768 [ 708.960922][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.996915][ T5619] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 709.018157][ T5619] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input53 [ 709.040206][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.068358][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.088076][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.105471][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.124067][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.124155][ T5721] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 709.151902][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.163940][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.183879][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.208027][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.225237][ T5619] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.245906][T18117] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #17: comm syz.5.4440: iget: immutable or append flags not allowed on symlinks [ 709.245955][T18117] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 709.253170][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 709.253192][ C0] EXT4-fs (loop5): initial error at time 1790772429: ext4_orphan_get:1403: inode 17 [ 709.253212][ C0] EXT4-fs (loop5): last error at time 1790772429: ext4_orphan_get:1403: inode 17 [ 709.302214][ T5619] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 709.302236][ T5619] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 709.314643][ T5721] usb 3-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 709.356111][ T5721] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 709.356133][ T5721] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 709.356145][ T5721] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 709.356157][ T5721] usb 3-1: config 220 has no interface number 2 [ 709.356214][ T5721] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 709.356231][ T5721] usb 3-1: config 220 interface 0 has no altsetting 0 [ 709.356242][ T5721] usb 3-1: config 220 interface 76 has no altsetting 0 [ 709.356254][ T5721] usb 3-1: config 220 interface 1 has no altsetting 0 [ 709.447145][ T5619] usb 1-1: USB disconnect, device number 31 [ 709.451914][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.451935][ T5721] usb 3-1: Product: syz [ 709.451945][ T5721] usb 3-1: Manufacturer: syz [ 709.451955][ T5721] usb 3-1: SerialNumber: syz [ 709.491562][T18117] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.4440: couldn't read orphan inode 17 (err -117) [ 709.491589][T18117] loop5: lost filesystem error report for type 5 error -117 [ 709.779310][ T5721] usb 3-1: selecting invalid altsetting 0 [ 709.779751][ T5721] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 709.779774][ T5721] uvcvideo 3-1:220.0: No valid video chain found. [ 709.842359][T18117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.859514][ T5721] usb 3-1: selecting invalid altsetting 0 [ 709.859537][ T5721] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 709.878167][T18130] loop6: detected capacity change from 0 to 1764 [ 709.910643][ T5721] usb 3-1: USB disconnect, device number 38 [ 710.032245][T18130] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 710.140200][T18134] loop0: detected capacity change from 0 to 512 [ 710.154712][T18105] ea_get: invalid extended attribute [ 710.154726][T18105] ffff888058e3e460: 04 00 00 00 .... [ 710.185752][T18134] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.4445: bg 0: block 7: invalid block bitmap [ 710.185778][T18134] loop0: lost filesystem error report for type 5 error -117 [ 710.200147][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 710.200168][ C0] EXT4-fs (loop0): initial error at time 1790772430: ext4_validate_block_bitmap:436 [ 710.200219][ C0] EXT4-fs (loop0): last error at time 1790772430: ext4_validate_block_bitmap:436 [ 710.239581][T18134] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 710.239655][T18134] loop0: lost filesystem error report for type 5 error -117 [ 710.262079][T18127] ea_get: invalid extended attribute [ 710.262093][T18127] ffff888058e3e460: 04 00 00 00 .... [ 710.327899][T18128] ea_get: invalid extended attribute [ 710.327914][T18128] ffff888058e3e460: 04 00 00 00 .... [ 710.375114][T18134] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.4445: corrupted xattr block 95: invalid header [ 710.375145][T18134] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 710.390022][T18134] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 710.390145][T18134] EXT4-fs (loop0): 1 orphan inode deleted [ 710.423821][T18134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.729628][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.295597][ T11] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 711.446740][ T11] usb 3-1: New USB device found: idVendor=20a0, idProduct=4287, bcdDevice=0.00 [ 711.450099][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 711.450124][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.450151][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.511601][ T11] usb 3-1: config 0 descriptor?? [ 711.584956][ T8948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.913378][ T5619] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 711.998339][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998366][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998382][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998397][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998413][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998428][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998444][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998459][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998474][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998489][ T11] hid-u2fzero 0003:20A0:4287.001B: unknown main item tag 0x0 [ 711.998835][ T11] hid-u2fzero 0003:20A0:4287.001B: item fetching failed at offset 78/235 [ 711.999344][ T11] hid-u2fzero 0003:20A0:4287.001B: probe with driver hid-u2fzero failed with error -22 [ 712.070712][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 712.090838][ T5619] usb 1-1: unable to get BOS descriptor or descriptor too short [ 712.090877][ T5619] usb 1-1: New USB device found: idVendor=2a39, idProduct=3f8c, bcdDevice=0.40 [ 712.143344][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.143367][ T5619] usb 1-1: Product: syz [ 712.143376][ T5619] usb 1-1: Manufacturer: syz [ 712.143385][ T5619] usb 1-1: SerialNumber: syz [ 712.220829][ T11] usb 3-1: USB disconnect, device number 39 [ 712.480996][ T5619] usb 1-1: 1:1 : bogus bTerminalLink 5 [ 712.754970][ T5619] usb 1-1: USB disconnect, device number 32 [ 713.157995][T18188] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4470'. [ 713.803855][ T5619] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 713.906428][T18186] loop3: detected capacity change from 0 to 32768 [ 713.955445][ T5619] usb 7-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 713.981734][ T5619] usb 7-1: string descriptor 0 read error: -22 [ 713.981826][ T5619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.018150][T18186] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 714.039779][ T5619] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null)) [ 714.039896][ T5619] etas_es58x 7-1:1.0: could not retrieve the product info string [ 714.143640][T18186] XFS (loop3): Ending clean mount [ 714.349666][T18186] XFS (loop3): Quotacheck needed: Please wait. [ 714.493001][T18197] etas_es58x 7-1:1.0 can0: bit-timing not yet defined [ 714.786855][T18186] XFS (loop3): Quotacheck: Done. [ 714.853670][ T5619] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 714.857477][T18208] loop0: detected capacity change from 0 to 32768 [ 714.881957][T18208] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4478 (18208) [ 714.949137][T18208] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 714.949164][T18208] BTRFS info (device loop0): using blake2b checksum algorithm [ 715.004009][ T5619] usb 6-1: Using ep0 maxpacket: 32 [ 715.006663][ T5619] usb 6-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 715.007571][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.007592][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.007616][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.064308][ T5619] usb 6-1: config 0 descriptor?? [ 715.071289][ T5619] hub 6-1:0.0: USB hub found [ 715.263788][ T5612] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 715.305576][T18208] BTRFS info (device loop0): enabling ssd optimizations [ 715.305599][T18208] BTRFS info (device loop0): turning on async discard [ 715.305610][T18208] BTRFS info (device loop0): enabling free space tree [ 715.305645][T18208] BTRFS info (device loop0): use zstd compression, level 3 [ 715.306757][ T5619] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 715.411572][ T32] audit: type=1800 audit(1790772435.712:308): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4478" name="file1" dev="loop0" ino=260 res=0 errno=-22 [ 715.550760][T18197] etas_es58x 7-1:1.0: es58x_free_urbs: Timeout, some TX urbs still remain [ 715.551927][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 715.552149][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 715.552332][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 715.552523][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 715.552709][ C0] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 715.552823][T18197] etas_es58x 7-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL [ 715.669086][ T5611] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 715.694945][ T11] usb 7-1: USB disconnect, device number 13 [ 715.716006][ T11] etas_es58x 7-1:1.0: Disconnecting (null) (null) [ 717.103446][T18255] loop2: detected capacity change from 0 to 131072 [ 717.227050][T18255] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 717.227082][T18255] F2FS-fs (loop2): Test dummy encryption mode enabled [ 717.227820][T18255] F2FS-fs (loop2): invalid crc value [ 717.364171][T18255] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 717.364262][T18255] loop2: lost filesystem error report for type 5 error -117 [ 717.370836][T18255] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 717.390217][T18255] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 717.390242][T18255] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 717.390271][T18255] F2FS-fs (loop2): Start checkpoint disabled! [ 717.455728][T18255] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 717.470718][ T5619] hid-generic 0003:046D:C31C.001C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 717.496832][T18255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 717.534081][ T5619] usb 6-1: USB disconnect, device number 27 [ 718.109738][T18273] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4491'. [ 718.954668][ T5619] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 719.117975][ T5619] usb 6-1: Using ep0 maxpacket: 8 [ 719.121373][ T5619] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 719.141188][ T5619] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.141213][ T5619] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.141242][ T5619] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 719.141259][ T5619] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 719.141286][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.326507][ T5619] hub 6-1:1.0: bad descriptor, ignoring hub [ 719.326529][ T5619] hub 6-1:1.0: probe with driver hub failed with error -5 [ 719.326941][ T5619] cdc_wdm 6-1:1.0: skipping garbage [ 719.326952][ T5619] cdc_wdm 6-1:1.0: skipping garbage [ 719.359358][ T5619] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 719.359411][ T5619] cdc_wdm 6-1:1.0: Unknown control protocol [ 719.477253][T18299] loop0: detected capacity change from 0 to 16 [ 719.710510][T18299] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 719.710686][T18299] erofs (device loop0): mounted with root inode @ nid 36. [ 719.823803][T18299] erofs (device loop0): invalid de[0].nameoff 0 @ nid 36 [ 721.196924][T18331] block2mtd: illegal erase size [ 721.736424][T18343] loop0: detected capacity change from 0 to 1024 [ 721.887555][T18315] loop6: detected capacity change from 0 to 40427 [ 721.911097][T18315] F2FS-fs: heap/no_heap options were deprecated [ 721.972693][T18343] hfsplus: xattr search failed [ 722.190408][T18345] hfsplus: xattr search failed [ 722.201361][ T32] audit: type=1800 audit(1790772442.492:309): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4513" name="file1" dev="loop0" ino=20 res=0 errno=-22 [ 722.386423][T18315] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 722.559699][T18315] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 722.559721][T18315] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 722.559739][T18315] F2FS-fs (loop6): Start checkpoint disabled! [ 722.684428][T18355] kAFS: bad VL server IP address [ 722.705213][ T11] usb 6-1: USB disconnect, device number 28 [ 722.877307][T18362] loop3: detected capacity change from 0 to 512 [ 722.903535][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 722.903791][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 722.931535][T18362] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.4521: inode has both inline data and extents flags [ 722.931561][T18362] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 722.933176][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 722.933195][ C0] EXT4-fs (loop3): last error at time 1790772443: ext4_orphan_get:1403: inode 15 [ 722.977395][T18362] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4521: couldn't read orphan inode 15 (err -117) [ 722.977424][T18362] loop3: lost filesystem error report for type 5 error -117 [ 722.994262][T18362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.196289][T18315] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 723.196976][T18315] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 723.288232][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.528387][ T61] kworker/u8:4: attempt to access beyond end of device [ 723.528387][ T61] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 723.528449][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.528469][ T61] Tainted: [L]=SOFTLOCKUP [ 723.528474][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 723.528483][ T61] Workqueue: writeback wb_workfn (flush-7:6) [ 723.528560][ T61] Call Trace: [ 723.528566][ T61] [ 723.528573][ T61] dump_stack_lvl+0xe8/0x150 [ 723.528616][ T61] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 723.528658][ T61] f2fs_write_end_bio+0xda7/0x11c0 [ 723.528692][ T61] __submit_merged_bio+0x258/0x6a0 [ 723.528710][ T61] ? rcu_is_watching+0x16/0xb0 [ 723.528749][ T61] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 723.528766][ T61] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 723.528798][ T61] f2fs_write_data_pages+0x2a13/0x36e0 [ 723.528840][ T61] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 723.528906][ T61] ? __lock_acquire+0x747/0x2de0 [ 723.528944][ T61] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 723.528962][ T61] do_writepages+0x338/0x560 [ 723.528990][ T61] ? __lock_acquire+0x747/0x2de0 [ 723.529009][ T61] ? reacquire_held_locks+0x117/0x1a0 [ 723.529032][ T61] ? writeback_sb_inodes+0x450/0x1af0 [ 723.529051][ T61] __writeback_single_inode+0x136/0x1220 [ 723.529068][ T61] ? do_raw_spin_unlock+0xf5/0x200 [ 723.529085][ T61] writeback_sb_inodes+0x9de/0x1af0 [ 723.529099][ T61] ? __lock_acquire+0x747/0x2de0 [ 723.529131][ T61] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 723.529176][ T61] ? rcu_is_watching+0x16/0xb0 [ 723.529194][ T61] ? queue_io+0x2d3/0x470 [ 723.529211][ T61] wb_writeback+0x41c/0xad0 [ 723.529228][ T61] ? queue_io+0x251/0x470 [ 723.529247][ T61] ? __pfx_wb_writeback+0x10/0x10 [ 723.529260][ T61] ? do_raw_spin_lock+0x12b/0x2f0 [ 723.529284][ T61] wb_workfn+0x431/0x10f0 [ 723.529316][ T61] ? __pfx_wb_workfn+0x10/0x10 [ 723.529339][ T61] ? trace_hrtimer_start+0x82/0x200 [ 723.529366][ T61] ? do_raw_spin_lock+0x12b/0x2f0 [ 723.529386][ T61] ? lock_acquire+0x115/0x350 [ 723.529408][ T61] ? rcu_is_watching+0x16/0xb0 [ 723.529427][ T61] ? process_scheduled_works+0x97a/0x1630 [ 723.529459][ T61] process_scheduled_works+0xc3d/0x1630 [ 723.529502][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 723.529526][ T61] ? assign_work+0x3cf/0x5d0 [ 723.529549][ T61] worker_thread+0xa47/0xfb0 [ 723.529589][ T61] kthread+0x38b/0x480 [ 723.529605][ T61] ? __pfx_worker_thread+0x10/0x10 [ 723.529624][ T61] ? __pfx_kthread+0x10/0x10 [ 723.529641][ T61] ret_from_fork+0x514/0xb70 [ 723.529664][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 723.529678][ T61] ? __switch_to+0xc78/0x1410 [ 723.529706][ T61] ? __pfx_kthread+0x10/0x10 [ 723.529723][ T61] ret_from_fork_asm+0x1a/0x30 [ 723.529755][ T61] [ 723.777424][ T11] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 723.875502][ T61] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 723.948597][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 723.950076][ T11] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 723.951034][ T11] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 723.951053][ T11] usb 1-1: config 0 has no interface number 0 [ 723.951080][ T11] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 723.951096][ T11] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 724.022189][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.022223][ T11] usb 1-1: Product: syz [ 724.022233][ T11] usb 1-1: Manufacturer: syz [ 724.022243][ T11] usb 1-1: SerialNumber: syz [ 724.058088][ T11] usb 1-1: config 0 descriptor?? [ 724.059717][T18380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.059812][T18380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.196367][T18384] loop3: detected capacity change from 0 to 512 [ 724.239400][T18384] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.4530: iget: bad i_size value: 38620345925642 [ 724.239430][T18384] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 724.243197][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 724.243217][ C0] EXT4-fs (loop3): initial error at time 1790772444: ext4_orphan_get:1403: inode 15 [ 724.243238][ C0] EXT4-fs (loop3): last error at time 1790772444: ext4_orphan_get:1403: inode 15 [ 724.303368][T18384] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4530: couldn't read orphan inode 15 (err -117) [ 724.303398][T18384] loop3: lost filesystem error report for type 5 error -117 [ 724.321320][T18384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.434301][T18380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.434403][T18380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.463462][T18384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.4530: bg 0: block 5: invalid block bitmap [ 724.577190][T18384] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 724.577218][T18384] EXT4-fs (loop3): This should not happen!! Data will be lost [ 724.577218][T18384] [ 724.577227][T18384] EXT4-fs (loop3): Total free blocks count 0 [ 724.577237][T18384] EXT4-fs (loop3): Free/Dirty block details [ 724.577323][T18384] EXT4-fs (loop3): free_blocks=0 [ 724.577353][T18384] EXT4-fs (loop3): dirty_blocks=1 [ 724.577361][T18384] EXT4-fs (loop3): Block reservation details [ 724.577370][T18384] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 724.797117][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.932474][T18370] loop2: detected capacity change from 0 to 32768 [ 725.013496][T18370] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 725.046249][ T11] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 725.046403][ T11] asix 1-1:0.34: probe with driver asix failed with error -71 [ 725.050362][ T11] usb 1-1: USB disconnect, device number 33 [ 725.183838][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4531'. [ 725.900841][T18413] veth1_macvtap: left promiscuous mode [ 725.900870][T18413] macsec0: entered allmulticast mode [ 726.286175][T18416] veth1_macvtap: entered promiscuous mode [ 726.286195][T18416] veth1_macvtap: entered allmulticast mode [ 726.286266][T18416] macsec0: left allmulticast mode [ 726.286275][T18416] veth1_macvtap: left allmulticast mode [ 726.475578][ T5619] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 726.514274][ T5614] ocfs2: Unmounting device (7,2) on (node local) [ 726.649116][T18410] loop5: detected capacity change from 0 to 32768 [ 726.661074][ T5619] usb 7-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 726.673235][ T5619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.673259][ T5619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.673284][ T5619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.688307][ T5619] usb 7-1: config 0 descriptor?? [ 726.717826][ T11] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 726.741547][T18410] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4537 (18410) [ 726.776924][T18410] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 726.776952][T18410] BTRFS info (device loop5): using blake2b checksum algorithm [ 726.873825][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 726.875296][ T11] usb 4-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 726.877086][ T11] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 726.877105][ T11] usb 4-1: config 0 has no interface number 0 [ 726.881070][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.881090][ T11] usb 4-1: Product: syz [ 726.881100][ T11] usb 4-1: Manufacturer: syz [ 726.881109][ T11] usb 4-1: SerialNumber: syz [ 726.948912][ T11] usb 4-1: config 0 descriptor?? [ 726.991754][ T11] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 726.991844][ T11] usb 4-1: selecting invalid altsetting 1 [ 726.991856][ T11] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 727.028427][ T11] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 727.028677][ T11] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 727.028713][ T11] usb 4-1: media controller created [ 727.032546][T18410] BTRFS info (device loop5): enabling ssd optimizations [ 727.032568][T18410] BTRFS info (device loop5): turning on async discard [ 727.032579][T18410] BTRFS info (device loop5): enabling free space tree [ 727.032590][T18410] BTRFS info (device loop5): use zstd compression, level 3 [ 727.147574][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.246333][ T5619] hid_parser_main: 55 callbacks suppressed [ 727.246354][ T5619] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 727.246375][ T5619] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 727.246390][ T5619] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 727.246405][ T5619] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 727.246421][ T5619] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 727.311885][ T5619] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 727.451136][ T5619] playstation 0003:054C:0DF2.001D: Invalid reportID received, expected 9 got 176 [ 727.451179][ T5619] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense pairing info: -22 [ 727.451212][ T5619] playstation 0003:054C:0DF2.001D: Failed to get MAC address from DualSense [ 727.451223][ T5619] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 727.500793][ T5619] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -22 [ 727.655073][T18440] loop2: detected capacity change from 0 to 4096 [ 727.776840][ T5619] usb 7-1: USB disconnect, device number 14 [ 727.794780][T18441] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 727.977032][ T8948] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 728.222803][ T5614] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 728.265781][T18421] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 728.314054][ T11] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 728.314097][ T11] zl10353_read_register: readreg error (reg=127, ret==-71) [ 728.315860][ T11] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 728.519296][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.566125][T18444] loop5: detected capacity change from 0 to 2048 [ 728.591220][T18444] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 728.620759][T18444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.790073][ T11] usb 4-1: USB disconnect, device number 35 [ 728.993358][ T5619] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 729.155703][ T5619] usb 7-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 729.188669][ T5619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.188694][ T5619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.221811][ T5619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 729.221865][ T5619] usb 7-1: Product: syz [ 729.221875][ T5619] usb 7-1: Manufacturer: syz [ 729.270450][ T5619] navman 7-1:1.0: navman converter detected [ 729.290697][ T5619] usb 7-1: navman converter now attached to ttyUSB0 [ 729.514359][T18447] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 729.532851][ T5619] usb 7-1: USB disconnect, device number 15 [ 729.605160][ T5619] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 729.605828][ T5619] navman 7-1:1.0: device disconnected [ 729.774461][ T11] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 729.946760][ T11] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 729.951379][ T11] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 729.951403][ T11] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 729.951418][ T11] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 729.997602][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 729.997624][ T11] usb 6-1: Product: syz [ 729.997634][ T11] usb 6-1: Manufacturer: syz [ 730.056321][T18460] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 730.080916][T18462] loop0: detected capacity change from 0 to 128 [ 730.143633][T18462] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 730.143678][T18462] hpfs: filesystem error: improperly stopped [ 730.143687][T18462] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 730.143697][T18462] hpfs: You really don't want any checks? You are crazy... [ 730.143708][T18462] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 730.143716][T18462] hpfs: code page support is disabled [ 730.143981][T18462] hpfs: hpfs_map_4sectors(): unaligned read [ 730.144038][T18462] hpfs: hpfs_map_4sectors(): unaligned read [ 730.144045][T18462] hpfs: filesystem error: unable to find root dir [ 730.259040][T18456] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 730.259119][T18456] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 730.335987][ T11] dvb_ttusb_budget: ttusb_init_controller: error [ 730.336004][ T11] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 730.410786][T18465] loop3: detected capacity change from 0 to 512 [ 730.411521][T18465] EXT4-fs: Ignoring removed nobh option [ 730.433420][T18465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 730.485751][T18465] EXT4-fs (loop3): 1 truncate cleaned up [ 730.491726][T18465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.564809][ T32] audit: type=1800 audit(1790772450.872:310): pid=18465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4554" name="file2" dev="loop3" ino=16 res=0 errno=-22 [ 730.647282][ T11] DVB: Unable to find symbol cx22700_attach() [ 730.692647][T18456] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 730.750743][ T32] audit: type=1804 audit(1790772451.042:311): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4554" name="/newroot/983/file2/file2" dev="loop3" ino=16 res=1 errno=0 [ 730.834304][T18475] loop2: detected capacity change from 0 to 256 [ 730.874508][ T11] DVB: Unable to find symbol tda10046_attach() [ 730.874547][ T11] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 730.878705][ T11] usb 6-1: USB disconnect, device number 29 [ 730.998926][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.136991][T18469] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 731.137022][T18469] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 731.378357][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4560'. [ 731.433459][ T5721] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 731.516884][T18485] loop5: detected capacity change from 0 to 256 [ 731.556757][T18485] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 731.595346][ T5721] usb 1-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 731.597073][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.597096][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.597121][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.598947][ T5721] usb 1-1: config 0 descriptor?? [ 732.044463][ T5721] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 732.044492][ T5721] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 732.044508][ T5721] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 732.044523][ T5721] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 732.044539][ T5721] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 732.051941][ T5721] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 732.233620][ T5721] cp2112 0003:10C4:EA90.001E: Part Number: 0x00 Device Version: 0x00 [ 732.448073][ T5721] cp2112 0003:10C4:EA90.001E: error requesting SMBus config [ 732.464543][ T5721] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 732.505067][ T5721] usb 1-1: USB disconnect, device number 34 [ 732.974324][T18496] loop6: detected capacity change from 0 to 32768 [ 733.034110][T18496] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.099797][T18496] XFS (loop6): Ending clean mount [ 733.112242][T18496] XFS (loop6): Quotacheck needed: Please wait. [ 733.714827][T18496] XFS (loop6): Quotacheck: Done. [ 733.783482][ T11] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 733.886090][T16782] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.947895][ T11] usb 1-1: New USB device found: idVendor=046d, idProduct=c286, bcdDevice=0.00 [ 733.960816][ T11] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.960842][ T11] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.960858][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 733.960880][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.009351][ T11] usb 1-1: config 0 descriptor?? [ 734.073496][T18533] program syz.2.4578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.204576][T18527] loop5: detected capacity change from 0 to 40427 [ 734.254169][T18527] F2FS-fs (loop5): build fault injection rate: 14 [ 734.254190][T18527] F2FS-fs (loop5): build fault injection type: 0x30e4 [ 734.285327][T18527] F2FS-fs (loop5): invalid crc value [ 734.449141][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'. [ 734.530527][ T11] hid_parser_main: 2 callbacks suppressed [ 734.530547][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530572][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530587][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530602][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530617][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530632][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530648][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530664][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.530679][ T11] logitech 0003:046D:C286.001F: unknown main item tag 0x0 [ 734.620304][ T11] logitech 0003:046D:C286.001F: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 734.620387][ T11] logitech 0003:046D:C286.001F: no inputs found [ 734.750698][T18527] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 734.803808][ T11] usb 1-1: USB disconnect, device number 35 [ 734.991810][T18527] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 735.163890][T18527] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9d5/0x1ec0 [ 735.381300][ T8948] syz-executor: attempt to access beyond end of device [ 735.381300][ T8948] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 735.467230][ T8948] CPU: 0 UID: 0 PID: 8948 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 735.467255][ T8948] Tainted: [L]=SOFTLOCKUP [ 735.467260][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 735.467268][ T8948] Call Trace: [ 735.467274][ T8948] [ 735.467280][ T8948] dump_stack_lvl+0xe8/0x150 [ 735.467306][ T8948] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 735.467330][ T8948] f2fs_write_end_bio+0xda7/0x11c0 [ 735.467365][ T8948] __submit_merged_bio+0x258/0x6a0 [ 735.467380][ T8948] ? rcu_is_watching+0x16/0xb0 [ 735.467403][ T8948] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 735.467420][ T8948] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 735.467449][ T8948] f2fs_write_data_pages+0x2a13/0x36e0 [ 735.467465][ T8948] ? __lock_acquire+0x747/0x2de0 [ 735.467503][ T8948] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 735.467519][ T8948] ? is_bpf_text_address+0x26/0x2b0 [ 735.467553][ T8948] ? arch_stack_walk+0xfb/0x150 [ 735.467602][ T8948] ? add_lock_to_list+0xc7/0x100 [ 735.467622][ T8948] ? lockdep_unlock+0x5c/0xd0 [ 735.467635][ T8948] ? __lock_acquire+0x1511/0x2de0 [ 735.467667][ T8948] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.467687][ T8948] ? do_raw_spin_unlock+0xf5/0x200 [ 735.467700][ T8948] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 735.467718][ T8948] do_writepages+0x338/0x560 [ 735.467735][ T8948] ? preempt_schedule_common+0x7f/0xd0 [ 735.467781][ T8948] ? preempt_schedule_thunk+0x16/0x40 [ 735.467800][ T8948] filemap_fdatawrite+0x1e9/0x2f0 [ 735.467818][ T8948] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 735.467860][ T8948] ? do_raw_spin_unlock+0xf5/0x200 [ 735.467876][ T8948] f2fs_sync_dirty_inodes+0x471/0x970 [ 735.467904][ T8948] f2fs_write_checkpoint+0x860/0x24d0 [ 735.467944][ T8948] kill_f2fs_super+0x2dc/0x700 [ 735.467966][ T8948] ? rcu_do_enqueue+0x616/0x870 [ 735.467981][ T8948] ? lockdep_hardirqs_on+0x7b/0x110 [ 735.467997][ T8948] ? __pfx_kill_f2fs_super+0x10/0x10 [ 735.468025][ T8948] ? __pfx_call_rcu+0x10/0x10 [ 735.468047][ T8948] ? shrinker_free+0x2a7/0x3b0 [ 735.468071][ T8948] deactivate_locked_super+0xbe/0x110 [ 735.468095][ T8948] cleanup_mnt+0x3d3/0x460 [ 735.468120][ T8948] task_work_run+0x1d9/0x260 [ 735.468139][ T8948] ? __pfx_task_work_run+0x10/0x10 [ 735.468232][ T8948] exit_to_user_mode_loop+0x204/0x770 [ 735.468266][ T8948] ? rcu_is_watching+0x16/0xb0 [ 735.468294][ T8948] do_syscall_64+0x328/0x520 [ 735.468312][ T8948] ? trace_irq_disable+0x3b/0x140 [ 735.468329][ T8948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.468360][ T8948] ? clear_bhb_loop+0x70/0xc0 [ 735.468376][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.468389][ T8948] RIP: 0033:0x7f9aa819f397 [ 735.468409][ T8948] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 735.468423][ T8948] RSP: 002b:00007fff2bfd5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 735.468446][ T8948] RAX: 0000000000000000 RBX: 00007f9aa82344bb RCX: 00007f9aa819f397 [ 735.468455][ T8948] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2bfd5830 [ 735.468463][ T8948] RBP: 00007fff2bfd5830 R08: 00007fff2bfd6830 R09: 00000000ffffffff [ 735.468472][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2bfd68c0 [ 735.468480][ T8948] R13: 00007f9aa82344bb R14: 00000000000b3982 R15: 00007fff2bfd6900 [ 735.468512][ T8948] [ 735.559142][ T8948] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 736.149301][T18569] loop2: detected capacity change from 0 to 512 [ 736.183028][T18569] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.4593: corrupted in-inode xattr: bad e_name length [ 736.183069][T18569] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 736.201361][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 736.201383][ C0] EXT4-fs (loop2): initial error at time 1790772456: ext4_iget_extra_inode:5210: inode 15 [ 736.201404][ C0] EXT4-fs (loop2): last error at time 1790772456: ext4_iget_extra_inode:5210: inode 15 [ 736.213898][T18569] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.4593: couldn't read orphan inode 15 (err -117) [ 736.213927][T18569] loop2: lost filesystem error report for type 5 error -117 [ 736.266145][T18569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.411172][T18565] loop3: detected capacity change from 0 to 8192 [ 736.416778][ T32] audit: type=1800 audit(1790772456.722:312): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4593" name="file0" dev="loop2" ino=13 res=0 errno=-5 [ 736.641236][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.002367][T18576] loop2: detected capacity change from 0 to 4096 [ 737.028684][T18576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 737.028704][T18576] EXT4-fs (loop2): Test dummy encryption mode enabled [ 737.054935][T18576] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 737.055027][T18576] System zones: 0-5 [ 737.060090][T18576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.213819][ T11] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 737.241904][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.375258][ T11] usb 7-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 737.379904][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.379925][ T11] usb 7-1: Product: syz [ 737.379934][ T11] usb 7-1: Manufacturer: syz [ 737.379944][ T11] usb 7-1: SerialNumber: syz [ 737.395733][ T11] ums-karma 7-1:1.0: USB Mass Storage device detected [ 737.496284][T18583] loop2: detected capacity change from 0 to 1024 [ 737.539384][T18583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 737.539473][T18583] ext4 filesystem being mounted at /955/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.572833][ T11] ums-karma 7-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 737.572833][ T11] Please send a copy of this message to and [ 737.623719][ T5619] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 737.783346][ T5619] usb 6-1: Using ep0 maxpacket: 16 [ 737.784691][ T5619] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 737.785651][ T5619] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.785681][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.785699][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 737.785733][ T5619] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 737.785748][ T5619] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.787598][ T5619] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 737.787615][ T5619] usb 6-1: Manufacturer: syz [ 737.789624][ T5619] usb 6-1: config 0 descriptor?? [ 737.956218][ T11] ums-karma 7-1:1.0: probe with driver ums-karma failed with error -5 [ 737.984582][ T11] usb 7-1: USB disconnect, device number 16 [ 738.124274][T18582] loop5: detected capacity change from 0 to 2048 [ 738.126139][T18590] loop3: detected capacity change from 0 to 1024 [ 738.157109][T18590] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 738.199421][T18582] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 738.201033][T18582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 738.276845][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 738.545835][ T5619] rc_core: IR keymap rc-hauppauge not found [ 738.545850][ T5619] Registered IR keymap rc-empty [ 738.545946][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.567958][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.588813][ T5619] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 738.612582][ T5619] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 738.636055][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.655488][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.677347][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.693663][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.724074][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.748627][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.766903][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.785059][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.804777][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.823399][ T5619] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 738.855081][ T5619] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 738.855121][ T5619] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 738.990725][ T5619] usb 6-1: USB disconnect, device number 30 [ 739.254694][ T995] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 739.418973][ T995] usb 3-1: Using ep0 maxpacket: 8 [ 739.421783][ T995] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.440204][ T995] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 739.440228][ T995] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 739.440243][ T995] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 739.440258][ T995] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.440285][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.737775][ T995] usb 3-1: GET_CAPABILITIES returned 0 [ 739.737810][ T995] usbtmc 3-1:16.0: can't read capabilities [ 739.870492][T18626] loop0: detected capacity change from 0 to 4096 [ 739.924105][T18627] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.974286][ T5721] usb 3-1: USB disconnect, device number 40 [ 740.006610][ T995] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 740.047086][T18626] NILFS (loop0): Segment number 13903790157999918 to be freed is out of range [ 740.154965][ T995] usb 6-1: Using ep0 maxpacket: 32 [ 740.155493][ T995] usb 6-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 740.183538][ T995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.183560][ T995] usb 6-1: Product: syz [ 740.183570][ T995] usb 6-1: Manufacturer: syz [ 740.183579][ T995] usb 6-1: SerialNumber: syz [ 740.188970][ T995] usb 6-1: config 0 descriptor?? [ 740.249730][ T995] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 740.249798][ T995] dvb-usb: bulk message failed: -22 (4/0) [ 740.249810][ T995] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 740.249884][ T995] dvb-usb: bulk message failed: -22 (5/0) [ 740.249892][ T995] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 740.321142][ T995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.339417][ T995] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 740.339457][ T995] usb 6-1: media controller created [ 740.413794][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.442519][T18624] ttusb2: i2c wr len=245 too high [ 740.457927][T18624] dvb-usb: bulk message failed: -22 (7/0) [ 740.457949][T18624] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 740.458036][T18624] ttusb2: i2c transfer failed. [ 740.458132][T18624] ttusb2: i2c wr len=4096 too high [ 740.518629][T18629] loop0: detected capacity change from 0 to 256 [ 740.522043][ T995] usb 6-1: selecting invalid altsetting 3 [ 740.522058][ T995] ttusb2: set interface to alts=3 failed [ 740.707086][ T995] DVB: Unable to find symbol tda10086_attach() [ 740.707101][ T995] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 740.708437][ T995] dvb-usb: bulk message failed: -22 (4/0) [ 740.708452][ T995] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 740.708526][ T995] dvb-usb: bulk message failed: -22 (5/0) [ 740.708534][ T995] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 740.708574][ T995] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 740.794255][ T995] usb 6-1: USB disconnect, device number 31 [ 740.946630][ T995] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 741.076092][T18635] loop0: detected capacity change from 0 to 164 [ 741.258664][T18637] loop2: detected capacity change from 0 to 512 [ 741.311670][T18637] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.4616: Directory hole found for htree index block 0 [ 741.311701][T18637] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 741.314189][ C0] EXT4-fs (loop2): initial error at time 1790772461: dx_probe:791: inode 2 [ 741.314220][ C0] EXT4-fs (loop2): last error at time 1790772461: dx_probe:791: inode 2 [ 741.598411][T18637] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 741.617488][T18637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.682434][T18637] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.4616: Directory hole found for htree index block 0 [ 741.708560][T18637] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.4616: Directory hole found for htree index block 0 [ 741.802607][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.165317][T18647] loop2: detected capacity change from 0 to 4096 [ 742.305344][T18647] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 742.562891][T18657] sch_fq: defrate 0 ignored. [ 742.572186][T18641] loop0: detected capacity change from 0 to 32768 [ 742.638484][T18641] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 742.675823][T18641] VFS: Lookup of '' in ocfs2 loop0 would have caused loop [ 743.014540][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 743.108551][T18668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4629'. [ 743.492094][T18661] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 743.886116][T18692] loop3: detected capacity change from 0 to 4096 [ 743.941631][T18696] netlink: 'syz.5.4639': attribute type 8 has an invalid length. [ 743.976299][T18697] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 744.053825][T18692] NILFS (loop3): error -22 preparing GC: cannot mark copying blocks dirty [ 744.526676][T18704] loop6: detected capacity change from 0 to 512 [ 744.611808][T18704] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 744.611879][T18704] System zones: 0-2, 18-18, 34-35 [ 744.647309][T18704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.647391][T18704] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.763358][ T11] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 744.918885][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 744.921815][ T11] usb 6-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 744.923004][ T11] usb 6-1: config 0 has no interfaces? [ 744.957647][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.957671][ T11] usb 6-1: Product: syz [ 744.957681][ T11] usb 6-1: Manufacturer: syz [ 744.957690][ T11] usb 6-1: SerialNumber: syz [ 744.977265][ T11] usb 6-1: config 0 descriptor?? [ 745.022536][T16782] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.143362][T18323] Bluetooth: hci0: command 0x0406 tx timeout [ 745.237711][T18716] loop6: detected capacity change from 0 to 64 [ 745.295181][T18695] loop2: detected capacity change from 0 to 40427 [ 745.348399][T18695] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 745.348420][T18695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 745.382858][T18695] F2FS-fs (loop2): invalid crc value [ 745.465229][T18718] loop3: detected capacity change from 0 to 4096 [ 745.542155][T18722] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 745.849969][T18695] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 745.992237][T18695] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 745.992258][T18695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 746.123973][ T11] usb 6-1: USB disconnect, device number 32 [ 746.145114][ T32] audit: type=1800 audit(1790772466.452:313): pid=18695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4640" name="file1" dev="loop2" ino=10 res=0 errno=-22 [ 746.378872][ T5614] syz-executor: attempt to access beyond end of device [ 746.378872][ T5614] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 746.480773][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 746.480800][ T5614] Tainted: [L]=SOFTLOCKUP [ 746.480805][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 746.480813][ T5614] Call Trace: [ 746.480819][ T5614] [ 746.480825][ T5614] dump_stack_lvl+0xe8/0x150 [ 746.480851][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 746.480872][ T5614] f2fs_write_end_bio+0xda7/0x11c0 [ 746.480900][ T5614] __submit_merged_bio+0x258/0x6a0 [ 746.480915][ T5614] ? rcu_is_watching+0x16/0xb0 [ 746.480938][ T5614] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 746.480955][ T5614] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 746.480984][ T5614] f2fs_write_data_pages+0x2a13/0x36e0 [ 746.481039][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 746.481067][ T5614] ? is_bpf_text_address+0x292/0x2b0 [ 746.481081][ T5614] ? is_bpf_text_address+0x26/0x2b0 [ 746.481109][ T5614] ? stack_trace_save+0xa9/0x100 [ 746.481125][ T5614] ? __pfx_stack_trace_save+0x10/0x10 [ 746.481152][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 746.481164][ T5614] ? __lock_acquire+0x1511/0x2de0 [ 746.481197][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 746.481214][ T5614] do_writepages+0x338/0x560 [ 746.481235][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 746.481252][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 746.481270][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 746.481312][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 746.481327][ T5614] f2fs_sync_dirty_inodes+0x471/0x970 [ 746.481356][ T5614] f2fs_write_checkpoint+0x860/0x24d0 [ 746.481397][ T5614] kill_f2fs_super+0x2dc/0x700 [ 746.481418][ T5614] ? rcu_do_enqueue+0x616/0x870 [ 746.481432][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 746.481450][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 746.481478][ T5614] ? __pfx_call_rcu+0x10/0x10 [ 746.481500][ T5614] ? shrinker_free+0x2a7/0x3b0 [ 746.481517][ T5614] deactivate_locked_super+0xbe/0x110 [ 746.481535][ T5614] cleanup_mnt+0x3d3/0x460 [ 746.481556][ T5614] task_work_run+0x1d9/0x260 [ 746.481574][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 746.481596][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 746.481613][ T5614] ? rcu_is_watching+0x16/0xb0 [ 746.481634][ T5614] do_syscall_64+0x328/0x520 [ 746.481650][ T5614] ? trace_irq_disable+0x3b/0x140 [ 746.481667][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.481680][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 746.481696][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.481708][ T5614] RIP: 0033:0x7fa5a759f397 [ 746.481722][ T5614] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 746.481732][ T5614] RSP: 002b:00007ffdd952e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 746.481748][ T5614] RAX: 0000000000000000 RBX: 00007fa5a76344bb RCX: 00007fa5a759f397 [ 746.481757][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd952e110 [ 746.481765][ T5614] RBP: 00007ffdd952e110 R08: 00007ffdd952f110 R09: 00000000ffffffff [ 746.481774][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd952f1a0 [ 746.481783][ T5614] R13: 00007fa5a76344bb R14: 00000000000b646e R15: 00007ffdd952f1e0 [ 746.481803][ T5614] [ 746.481824][ T5614] F2FS-fs (loop2): Remounting filesystem read-only [ 747.503241][ T11] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 747.663245][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 747.665163][ T11] usb 7-1: New USB device found: idVendor=6161, idProduct=4d15, bcdDevice=0.00 [ 747.684847][ T11] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.684868][ T11] usb 7-1: config 0 has no interface number 0 [ 747.684896][ T11] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.684912][ T11] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.684938][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.738072][ T11] usb 7-1: config 0 descriptor?? [ 748.200257][ T11] hid (null): unknown global tag 0xc [ 748.200286][ T11] hid (null): unknown global tag 0xe [ 748.200323][ T11] hid (null): report_id 3323596431 is invalid [ 748.200334][ T11] hid (null): unknown global tag 0xe [ 748.200357][ T11] hid (null): unknown global tag 0xe [ 748.200372][ T11] hid (null): unknown global tag 0xe [ 748.200403][ T11] hid (null): unknown global tag 0xd [ 748.200452][ T11] hid (null): unknown global tag 0x63 [ 748.200627][ T11] hid (null): unknown global tag 0xc [ 748.269054][ T11] hid (null): unknown global tag 0xe4 [ 748.269075][ T11] hid (null): usage index exceeded [ 748.460214][ T5721] usb 7-1: USB disconnect, device number 17 [ 748.774072][T18765] loop0: detected capacity change from 0 to 8192 [ 749.599774][T18781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4674'. [ 749.619675][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4674'. [ 749.619703][T18781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4674'. [ 749.679337][T18769] loop3: detected capacity change from 0 to 32768 [ 749.875770][T18785] sctp: [Deprecated]: syz.0.4675 (pid 18785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.875770][T18785] Use struct sctp_sack_info instead [ 750.140094][T18792] tap0: tun_chr_ioctl cmd 1074025677 [ 750.140187][T18792] tap0: linktype set to 805 [ 750.328870][T18798] loop6: detected capacity change from 0 to 16 [ 750.351024][T18798] erofs (device loop6): mounted with root inode @ nid 36. [ 750.407469][T18798] syz.6.4682: attempt to access beyond end of device [ 750.407469][T18798] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 750.569122][T18804] loop5: detected capacity change from 0 to 256 [ 750.597454][T18798] erofs (device loop6): not enough plain data on disk @ la 20480 of nid 89 [ 750.597477][T18798] erofs (device loop6): readahead error at folio 4 @ nid 89 [ 750.597579][T18798] syz.6.4682: attempt to access beyond end of device [ 750.597579][T18798] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 750.670468][T18804] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 750.750306][T18804] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10) [ 750.750794][ T32] audit: type=1800 audit(1790772471.052:314): pid=18804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4683" name="file1" dev="loop5" ino=220 res=0 errno=-22 [ 750.987380][T18809] Format for deleting device is "id" (uint). [ 751.151181][T18798] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 751.151214][T18798] erofs (device loop6): read error -117 @ 1 of nid 89 [ 751.151556][ T32] audit: type=1800 audit(1790772471.452:315): pid=18798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4682" name="file2" dev="loop6" ino=89 res=0 errno=-117 [ 751.197607][ T995] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 751.282075][T18817] loop5: detected capacity change from 0 to 22 [ 751.295866][T18817] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 751.346106][ T995] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 751.348078][ T995] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.348119][ T995] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 751.349402][T18817] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 751.352786][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.352806][ T995] usb 4-1: Product: syz [ 751.352816][ T995] usb 4-1: Manufacturer: syz [ 751.352825][ T995] usb 4-1: SerialNumber: syz [ 751.444552][ T995] cdc_mbim 4-1:1.0: skipping garbage [ 751.657095][T18819] loop5: detected capacity change from 0 to 64 [ 752.057443][T18323] block nbd2: Receive control failed (result -32) [ 752.276387][ T995] cdc_mbim 4-1:1.0: SET_CRC_MODE failed [ 752.276701][ T995] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed [ 752.298172][ T995] cdc_mbim 4-1:1.0: bind() failure [ 752.317583][ T995] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 752.317616][ T995] cdc_ncm 4-1:1.1: bind() failure [ 752.355824][ T995] usb 4-1: USB disconnect, device number 36 [ 752.430959][T13757] [ 752.433423][T13757] ====================================================== [ 752.440474][T13757] WARNING: possible circular locking dependency detected [ 752.447534][T13757] syzkaller #0 Tainted: G L [ 752.453611][T13757] ------------------------------------------------------ [ 752.460689][T13757] udevd/13757 is trying to acquire lock: [ 752.466412][T13757] ffff8880794e22a0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 752.476661][T13757] [ 752.476661][T13757] but task is already holding lock: [ 752.484298][T13757] ffff888033e430d0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 752.494037][T13757] [ 752.494037][T13757] which lock already depends on the new lock. [ 752.494037][T13757] [ 752.504711][T13757] [ 752.504711][T13757] the existing dependency chain (in reverse order) is: [ 752.514097][T13757] [ 752.514097][T13757] -> #1 (&type->i_mutex_dir_key#3){++++}-{4:4}: [ 752.522723][T13757] down_read+0x45/0x320 [ 752.527404][T13757] lookup_slow+0x46/0x80 [ 752.532771][T13757] ovl_lookup_single+0x323/0xe90 [ 752.538480][T13757] ovl_lookup_layer+0x377/0x440 [ 752.543868][T13757] ovl_lookup+0x9ae/0x1c80 [ 752.548993][T13757] lookup_open+0x94b/0x1970 [ 752.554224][T13757] path_openat+0x673/0x1da0 [ 752.559482][T13757] do_file_open+0x23e/0x4a0 [ 752.564631][T13757] do_sys_openat2+0x115/0x200 [ 752.569882][T13757] __x64_sys_openat+0x138/0x170 [ 752.575340][T13757] do_syscall_64+0x166/0x520 [ 752.580552][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.587067][T13757] [ 752.587067][T13757] -> #0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 752.594896][T13757] __lock_acquire+0x164c/0x2de0 [ 752.600796][T13757] lock_acquire+0x115/0x350 [ 752.606054][T13757] __d_alloc_parallel+0xc32/0x1700 [ 752.611710][T13757] __lookup_slow+0x82/0x2f0 [ 752.617172][T13757] lookup_slow+0x59/0x80 [ 752.622043][T13757] link_path_walk+0xd22/0x1910 [ 752.627462][T13757] path_openat+0x1c4/0x1da0 [ 752.632615][T13757] do_file_open+0x23e/0x4a0 [ 752.638230][T13757] do_sys_openat2+0x115/0x200 [ 752.643918][T13757] __x64_sys_openat+0x138/0x170 [ 752.649317][T13757] do_syscall_64+0x166/0x520 [ 752.654535][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.661075][T13757] [ 752.661075][T13757] other info that might help us debug this: [ 752.661075][T13757] [ 752.671858][T13757] Possible unsafe locking scenario: [ 752.671858][T13757] [ 752.679617][T13757] CPU0 CPU1 [ 752.685494][T13757] ---- ---- [ 752.691405][T13757] rlock(&type->i_mutex_dir_key#3); [ 752.697145][T13757] lock(DCACHE_PAR_LOOKUP); [ 752.704765][T13757] lock(&type->i_mutex_dir_key#3); [ 752.713263][T13757] lock(DCACHE_PAR_LOOKUP); [ 752.718230][T13757] [ 752.718230][T13757] *** DEADLOCK *** [ 752.718230][T13757] [ 752.726479][T13757] locks held by udevd/13757: 1, last CPU#0: [ 752.732582][T13757] #0: ffff888033e430d0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 752.742839][T13757] [ 752.742839][T13757] stack backtrace: [ 752.749175][T13757] CPU: 0 UID: 0 PID: 13757 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 752.759789][T13757] Tainted: [L]=SOFTLOCKUP [ 752.764143][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 752.774214][T13757] Call Trace: [ 752.777525][T13757] [ 752.780465][T13757] dump_stack_lvl+0xe8/0x150 [ 752.785252][T13757] print_circular_bug+0x2e2/0x300 [ 752.790959][T13757] check_noncircular+0x12f/0x150 [ 752.795951][T13757] __lock_acquire+0x164c/0x2de0 [ 752.801028][T13757] ? rcu_is_watching+0x16/0xb0 [ 752.806160][T13757] lock_acquire+0x115/0x350 [ 752.810971][T13757] ? __d_alloc_parallel+0x39e/0x1700 [ 752.816499][T13757] ? __d_alloc_parallel+0x39e/0x1700 [ 752.821956][T13757] ? __d_alloc_parallel+0x39e/0x1700 [ 752.827281][T13757] __d_alloc_parallel+0xc32/0x1700 [ 752.832498][T13757] ? __d_alloc_parallel+0x39e/0x1700 [ 752.837865][T13757] ? __d_alloc_parallel+0x39e/0x1700 [ 752.843178][T13757] ? __pfx___d_alloc_parallel+0x10/0x10 [ 752.848976][T13757] ? lock_acquire+0x115/0x350 [ 752.853807][T13757] __lookup_slow+0x82/0x2f0 [ 752.858597][T13757] lookup_slow+0x59/0x80 [ 752.862889][T13757] link_path_walk+0xd22/0x1910 [ 752.867790][T13757] path_openat+0x1c4/0x1da0 [ 752.872359][T13757] do_file_open+0x23e/0x4a0 [ 752.876938][T13757] ? __pfx_do_file_open+0x10/0x10 [ 752.882174][T13757] ? _raw_spin_unlock+0x28/0x50 [ 752.887129][T13757] ? alloc_fd+0x6af/0x760 [ 752.891645][T13757] do_sys_openat2+0x115/0x200 [ 752.896761][T13757] ? __pfx_do_sys_openat2+0x10/0x10 [ 752.901957][T13757] ? __se_sys_rename+0x185/0x2c0 [ 752.907510][T13757] ? kmem_cache_free+0x182/0x650 [ 752.912670][T13757] __x64_sys_openat+0x138/0x170 [ 752.918072][T13757] do_syscall_64+0x166/0x520 [ 752.922794][T13757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.928958][T13757] ? clear_bhb_loop+0x70/0xc0 [ 752.933875][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.940926][T13757] RIP: 0033:0x7fd344aa7407 [ 752.945844][T13757] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 752.966080][T13757] RSP: 002b:00007ffdbac8d160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 752.974691][T13757] RAX: ffffffffffffffda RBX: 00007fd34520a880 RCX: 00007fd344aa7407 [ 752.984853][T13757] RDX: 0000000000080000 RSI: 00007ffdbac8d310 RDI: ffffffffffffff9c [ 752.993452][T13757] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 753.001558][T13757] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fd34529e53b [ 753.009539][T13757] R13: 00007fd34529e53b R14: 0000000000000001 R15: 00007fd3452a3920 [ 753.017515][T13757] SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 753.316665][T18802] syz.6.4682 (18802): drop_caches: 2 [ 754.058567][ T141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.077948][ T141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.096372][ T141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.116303][ T141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.187618][ T141] bridge_slave_1: left allmulticast mode [ 754.187638][ T141] bridge_slave_1: left promiscuous mode [ 754.187732][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.209858][ T141] bridge_slave_0: left allmulticast mode [ 754.209879][ T141] bridge_slave_0: left promiscuous mode [ 754.210008][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.289056][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.290058][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.290945][ T141] bond0 (unregistering): Released all slaves [ 754.404321][ T141] hsr_slave_0: left promiscuous mode [ 754.404837][ T141] hsr_slave_1: left promiscuous mode [ 754.405140][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.405152][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.405460][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.405471][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.407379][ T141] veth1_macvtap: left promiscuous mode [ 754.407400][ T141] veth0_macvtap: left promiscuous mode [ 754.407437][ T141] veth1_vlan: left promiscuous mode [ 754.407487][ T141] veth0_vlan: left promiscuous mode [ 754.553883][ T141] team0 (unregistering): Port device team_slave_1 removed [ 754.556677][ T141] team0 (unregistering): Port device team_slave_0 removed [ 760.503555][ T292] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)