last executing test programs: 26.12530869s ago: executing program 2 (id=1488): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000440)={[0xdddd1000, 0x80a0000, 0xdddd1000, 0xdddd0000], 0x0, 0x6e, 0x25f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[], 0xfffffe2b}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000060000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6(0xa, 0x2, 0x0) dup(0xffffffffffffffff) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 24.824785748s ago: executing program 2 (id=1490): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2}) 23.979892671s ago: executing program 2 (id=1495): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x3, 0x3, 0x3}, 0x3, 0x4}) 23.830427323s ago: executing program 2 (id=1496): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 23.055838765s ago: executing program 2 (id=1501): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x161802) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 22.415801914s ago: executing program 2 (id=1504): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x3, 0x3, 0x3}, 0x3, 0x4}) 22.081150728s ago: executing program 32 (id=1504): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x3, 0x3, 0x3}, 0x3, 0x4}) 4.797004961s ago: executing program 1 (id=1555): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000950000000000000002e983dd3bbc690437ed091a89eb59c6a015108721be84d13a67230adf1dcf5ca09eba60c8d2b3655c77d0c9b0eb986fba4728ccb132b8a809b6ca0b31c0739ed33c36fd0789c9bb019bc68a2e784b7c58a5ea4c0ff09b512538365d024dd803d45cd2f6604bae34071a78dc4ebbbd0ca443f82bed44352a3b746a8b7612bf"], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 3.607624098s ago: executing program 0 (id=1558): mkdir(0x0, 0x163) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}]}}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x4, 0x1) 3.568175708s ago: executing program 1 (id=1559): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xfffffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x583c, 0x6, 0xb, 0x4, 0x100, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xadd, 0x7f, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x4, 0xb0f, 0x22, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xf4, 0x4, 0xe, 0xfffffffc, 0x6, 0x2ee, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.350990121s ago: executing program 0 (id=1561): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)="6c0b546bc2", 0x5, 0x404042ffc) 3.272473002s ago: executing program 1 (id=1562): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}]}}, &(0x7f0000000000)=""/140, 0x26, 0x8c, 0x1}, 0x28) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4) 3.189337854s ago: executing program 3 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}]}, 0x50}}, 0x0) 2.947716277s ago: executing program 3 (id=1564): syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee2010203010902"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(0x0, 0x145142, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.831234219s ago: executing program 0 (id=1565): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x765, &(0x7f0000000840)="$eJzs3c1rHGUYAPBnJrtJv2xS8WAVteChBTFfFvxAoQWPIoJ68tKQbEvp9oMmgg0RWsSePBYELyIIXrwpXgQpPQnipRfpfyCVIkFoFQ+Rmcxut81uPsxuhjK/H0zyvvPu5n0nyzPP7MzLTACVdSj7kUYcjIjLScRosT6JiHpeqkUcW33dveWl2b+Xl2aTWFl5988kf83d5aXZ6HhPZm/xtl0RcfNGEo8Pre13/tLimZlms3GxqE8snL0wMX9p8cXTZ2dONU41zk1PT786fXTq5cnpvm3rJ8/88t2/V9/+9PP9t679cfOH/Ukci31FW+d29MuhONT+n3SqRcSb/e6sJEPF9qQd65JaiQNiS9KOz/DJGI2huP/hjcaN70sdHAAwECvZAgBUTCL/A0DFtM4D3F1emm0t5Z6RAHbKneORX6jP4v5esay21OJY/ntXPg9gz19JdF7WTVpzB7Yp+xvfflD/MltiQNfhge4uX8kv/HfJ/0ke/2P5LJ618T8UUewftufhfYj4h52znfh/pw/9i38AAAAAAADon+vHI+KVbtf/0vb8n+hy/W8kIib70P/G1//S233oBujizvGI14t7+zw4/699R5exoaL2WD4foJ6cPN1sZLG/PyKORH0kq0+t08f7V6d+6tXWOf8vW7L+W3MBi3Hcro08+J65mYWZ7WwzsOrOlYinat3iP2nn/6TH/N8Tm+zjx6Vvnu3VtnH8A4Oy8lXE4a75//6d65L17883kR8PTLSOCtZaPPHGx736F/9Qniz/71k//seSzvt1zm+9j8/uTn7Rq+3/Hv8PJ+/ldxUdLtZ9NLOwcHEqYjh5a+36/t1CFB5prXhoxUsW/0ee7/79f73j/3pEXNhkn1//XP+tV5v8D+XJ4n9uS/l/64V/fn26565ic/n/aJ7TjxRrnP+D9W02QMseJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9FMaEfsiScfb5TQdH4/YGxFPxJ60eX5+4YWT5z88N5e1RYxFPT15utmYjIjR1XqS1afy8v369EP1lyLiQERcG9md18dnzzfnyt54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjs7fH8/8zvI2WPDgAYmF1lDwAA2HHyPwBUj/wPANUj/wNA9cj/AFA98j8AAAAAAAAAAAAAAAAAAAAAAAAADNSB567fSiLi8mu78yUzXLTVSx0ZMGhp2QMASjNU9gCA0tTKHgBQGt/xgWSD9t6PCHEGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6jh80PP/oao8vQ+qy/P/obo8/x+qy3d8wPP/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgY/OXFs/MNJuNiwoKCgrtQtl7JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgX/BQAA///Gcg+K") write$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x1, 0xc73f, 0x81, 0x1}) 2.292564227s ago: executing program 0 (id=1566): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000950000000000000002e983dd3bbc690437ed091a89eb59c6a015108721be84d13a67230adf1dcf5ca09eba60c8d2b3655c77d0c9b0eb986fba4728ccb132b8a809b6ca0b31c0739ed33c36fd0789c9bb019bc68a2e784b7c58a5ea4c0ff09b512538365d024dd803d45cd2f6604bae34071a78dc4ebbbd0ca443f82bed44352a3b746a8b7612bf"], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 2.037758821s ago: executing program 3 (id=1567): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) rmdir(&(0x7f0000000000)='./bus/file0\x00') 1.745259235s ago: executing program 3 (id=1568): mkdir(0x0, 0x163) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}]}}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x4, 0x1) 1.135840504s ago: executing program 1 (id=1569): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd25404007cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f696c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8ac"], 0x270}}, 0x0) 1.058296685s ago: executing program 4 (id=1505): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884", 0x35}], 0x2}], 0x1, 0x40801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)=""/65, 0x41}], 0x2}, 0x0) 1.057496045s ago: executing program 0 (id=1577): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000950000000000000002e983dd3bbc690437ed091a89eb59c6a015108721be84d13a67230adf1dcf5ca09eba60c8d2b3655c77d0c9b0eb986fba4728ccb132b8a809b6ca0b31c0739ed33c36fd0789c9bb019bc68a2e784b7c58a5ea4c0ff09b512538365d024dd803d45cd2f6604bae34071a78dc4ebbbd0ca443f82bed44352a3b746a8b7612bf"], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 908.451777ms ago: executing program 1 (id=1570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x2b}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x2}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) preadv(r2, &(0x7f00000020c0)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1, 0x32, 0x80000001) 908.282687ms ago: executing program 3 (id=1571): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2128, r0}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 799.894389ms ago: executing program 4 (id=1572): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') r1 = getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x6, 0x1ed, &(0x7f0000000540)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) io_setup(0x40, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) creat(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0xfffc, 0xbad, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x63) setns(r3, 0x24020000) umount2(&(0x7f0000000000)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 31.73105ms ago: executing program 0 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x41045508, &(0x7f0000000000)={0x1ad, 0x8}) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzsz7GNwlAQBNCxz5LPEQXQB524CzIagE6IqYoKSCFikY1kqAAI3st253+NNnzVPl3Sp1u3+U9qlb9pe5izbXOtqmrbJOfn8275WH2SXb/MryTN23iry2acN9UMSY7D1Hmvqql2PH3mSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4bY8AAAD//8eLFLw=") ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.07537ms ago: executing program 3 (id=1574): syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee2010203010902"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") open(0x0, 0x145142, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 1 (id=1575): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1008040, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC], 0xd3, 0x599, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) write$UHID_INPUT(r0, &(0x7f0000001a40)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf7e7d6329df9831959a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4355f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d95ee62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9033c79d7083c629bf11a56527fe85a41c3d347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c402d97668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db302b848723b414bd192511f557f2a466822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980e0f4ef35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e597cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4a38900be369c27b285c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8cac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d38e1b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797f7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb1961961edfa959b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc04566d6e418713cc7e849b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcffffaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622049286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140eed1424db3cf2fafdd8a7d9059ab1141985376e7f9f46e712b4536ed4e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c326e7a2f642ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3fbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d505000000ed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f072a02578ab02b3209fe8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfe913d08c612387172aabc842c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b357382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d4577d6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38bab72ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987b8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d5230391c2e19aff36c390365cfd7a8434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7a9ae92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r1, r1, 0x0, 0x80000080000000d) kernel console output (not intermixed with test programs): ://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.950743][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.667306][ T6046] loop3: detected capacity change from 0 to 32768 [ 91.675590][ T6046] XFS: ikeep mount option is deprecated. [ 91.719813][ T6046] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.834050][ T6061] syz.0.32 (6061): drop_caches: 2 [ 92.971445][ T6046] XFS (loop3): Ending clean mount [ 92.996223][ T6046] XFS (loop3): Quotacheck needed: Please wait. [ 93.456087][ T6066] fuseblk: Bad value for 'fd' [ 93.696732][ T6046] XFS (loop3): Quotacheck: Done. [ 93.918157][ T6073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.26'. [ 95.325765][ T6077] loop2: detected capacity change from 0 to 1764 [ 96.765833][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.898612][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.968673][ T6084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.38'. [ 97.008037][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 97.374247][ T5814] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 97.589309][ T5814] usb 2-1: config 0 has no interface number 0 [ 97.610297][ T5814] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 97.622671][ T5814] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 97.636238][ T5814] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 97.652312][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.660449][ T5814] usb 2-1: Product: syz [ 97.665415][ T5814] usb 2-1: Manufacturer: syz [ 97.672443][ T5814] usb 2-1: SerialNumber: syz [ 97.693434][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.709324][ T5814] usb 2-1: config 0 descriptor?? [ 97.996382][ T5814] radio-si470x 2-1:0.35: this is not a si470x device. [ 98.482920][ T5814] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 98.530762][ T5814] usb 2-1: USB disconnect, device number 3 [ 101.096399][ T6109] loop3: detected capacity change from 0 to 16 [ 101.107121][ T6109] erofs: Unknown parameter '/dev/ppp' [ 102.895734][ T5989] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.380762][ T6122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.388497][ T6122] IPv6: NLM_F_CREATE should be set when creating new route [ 104.409749][ T6122] lo: entered allmulticast mode [ 104.658409][ T6127] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 104.668467][ T6127] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 104.675295][ T6127] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 104.683145][ T6127] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 104.690159][ T6127] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 104.699201][ T6127] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 104.720528][ T6128] netlink: 112 bytes leftover after parsing attributes in process `syz.1.48'. [ 104.731476][ T6127] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 104.738724][ T6127] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 104.747769][ T6127] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 105.334561][ T6122] tunl0: entered allmulticast mode [ 105.383175][ T6122] gre0: entered allmulticast mode [ 105.462747][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.776924][ T8] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 105.831322][ T8] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 105.877944][ T6122] gretap0: entered allmulticast mode [ 105.887479][ T8] usb 3-1: config 16 interface 0 has no altsetting 0 [ 105.946138][ T8] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 106.064698][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.082702][ T6122] erspan0: entered allmulticast mode [ 106.091638][ T6123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.141900][ T6122] ip_vti0: entered allmulticast mode [ 106.184580][ T6122] ip6_vti0: entered allmulticast mode [ 106.209027][ T6122] sit0: entered allmulticast mode [ 106.243945][ T6132] Zero length message leads to an empty skb [ 106.291837][ T6122] ip6tnl0: entered allmulticast mode [ 106.355516][ T8] usb 3-1: string descriptor 0 read error: -71 [ 106.380588][ T6122] ip6gre0: entered allmulticast mode [ 106.421904][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 106.427668][ T6139] process 'syz.3.52' launched '/dev/fd/13' with NULL argv: empty string added [ 106.442475][ T8] imon 3-1:16.0: unable to initialize intf0, err -19 [ 106.449213][ T8] imon:imon_probe: failed to initialize context! [ 106.454148][ T6122] syz_tun: entered allmulticast mode [ 106.477517][ T8] imon 3-1:16.0: unable to register, err -19 [ 106.527122][ T8] usb 3-1: USB disconnect, device number 4 [ 106.547350][ T6122] ip6gretap0: entered allmulticast mode [ 106.601984][ T6143] loop1: detected capacity change from 0 to 512 [ 106.644419][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.652750][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.698413][ T6122] bridge0: entered allmulticast mode [ 106.727668][ T6143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.746988][ T6122] vcan0: entered allmulticast mode [ 106.759000][ T6139] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.771292][ T6122] bond0: entered allmulticast mode [ 106.777050][ T6122] bond_slave_0: entered allmulticast mode [ 106.796759][ T6122] bond_slave_1: entered allmulticast mode [ 106.809116][ T6143] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.851185][ T6122] team0: entered allmulticast mode [ 106.881341][ T6122] team_slave_0: entered allmulticast mode [ 106.898099][ T6122] team_slave_1: entered allmulticast mode [ 107.110215][ T6122] dummy0: entered allmulticast mode [ 107.196936][ T6122] nlmon0: entered allmulticast mode [ 107.277432][ T6122] caif0: entered allmulticast mode [ 107.327102][ T6148] vivid-003: disconnect [ 107.336445][ T6122] batadv0: entered allmulticast mode [ 107.576805][ T6122] vxcan0: entered allmulticast mode [ 107.606104][ T6122] vxcan1: entered allmulticast mode [ 107.618308][ T6122] veth0: entered allmulticast mode [ 107.785056][ T6142] vivid-003: reconnect [ 107.821529][ T6122] veth1: entered allmulticast mode [ 107.821588][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.115665][ T6122] wg0: entered allmulticast mode [ 108.556615][ T6122] wg1: entered allmulticast mode [ 108.659401][ T6122] wg2: entered allmulticast mode [ 108.723297][ T6122] veth0_to_bridge: entered allmulticast mode [ 108.842801][ T6122] veth1_to_bridge: entered allmulticast mode [ 108.885423][ T6162] loop1: detected capacity change from 0 to 64 [ 108.969066][ T6122] veth0_to_bond: entered allmulticast mode [ 109.418121][ T6167] Bluetooth: MGMT ver 1.22 [ 109.776376][ T6122] veth1_to_bond: entered allmulticast mode [ 109.850334][ T6122] veth0_to_team: entered allmulticast mode [ 110.165127][ T6122] veth1_to_team: entered allmulticast mode [ 110.443419][ T6122] veth0_to_batadv: entered allmulticast mode [ 110.481084][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.492252][ T6122] batadv_slave_0: entered allmulticast mode [ 110.546911][ T6122] veth1_to_batadv: entered allmulticast mode [ 110.563463][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.571730][ T6122] batadv_slave_1: entered allmulticast mode [ 110.594873][ T6122] xfrm0: entered allmulticast mode [ 110.615591][ T6122] veth0_to_hsr: entered allmulticast mode [ 110.635984][ T6122] hsr_slave_0: entered allmulticast mode [ 110.652016][ T6122] veth1_to_hsr: entered allmulticast mode [ 110.672144][ T6122] hsr_slave_1: entered allmulticast mode [ 110.681477][ T6122] hsr0: entered allmulticast mode [ 110.695164][ T6122] veth1_virt_wifi: entered allmulticast mode [ 110.711329][ T6122] veth0_virt_wifi: entered allmulticast mode [ 110.727933][ T6122] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 110.737142][ T6122] veth1_vlan: entered allmulticast mode [ 110.775620][ T6122] veth0_vlan: entered allmulticast mode [ 110.826912][ T6122] vlan0: entered allmulticast mode [ 110.835594][ T6122] vlan1: entered allmulticast mode [ 110.856231][ T6122] macvlan0: entered allmulticast mode [ 110.886846][ T6122] macvlan1: entered allmulticast mode [ 110.900031][ T6122] ipvlan0: entered allmulticast mode [ 110.916398][ T6122] ipvlan1: entered allmulticast mode [ 110.926753][ T6122] veth1_macvtap: entered allmulticast mode [ 110.959420][ T6122] veth0_macvtap: entered allmulticast mode [ 110.994927][ T6122] macvtap0: entered allmulticast mode [ 111.027280][ T6122] macsec0: entered allmulticast mode [ 111.088416][ T6122] geneve0: entered allmulticast mode [ 111.098616][ T6122] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.108050][ T6122] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.119064][ T6122] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.129134][ T6122] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.146934][ T6122] geneve1: entered allmulticast mode [ 111.323963][ T6122] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 111.459670][ T6122] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 111.638391][ T6122] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 111.759334][ T6122] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 111.798110][ T6122] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 111.820656][ T6122] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 111.875433][ T6164] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 113.114484][ T6198] trusted_key: syz.0.65 sent an empty control message without MSG_MORE. [ 113.200610][ T5857] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 113.512778][ T5857] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 113.598900][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.769183][ T5857] usb 2-1: config 0 descriptor?? [ 114.617788][ T6211] loop2: detected capacity change from 0 to 2048 [ 114.667416][ T6211] loop2: p1 < > p3 [ 114.674579][ T6211] loop2: p3 size 134217728 extends beyond EOD, truncated [ 114.707058][ T5857] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.727837][ T5857] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 114.776033][ T5857] asix: probe of 2-1:0.0 failed with error -71 [ 114.818498][ T5857] usb 2-1: USB disconnect, device number 4 [ 114.858253][ T6215] kvm: emulating exchange as write [ 118.666830][ T6226] netlink: 84 bytes leftover after parsing attributes in process `syz.1.73'. [ 120.396629][ T6226] syz.1.73 (6226) used greatest stack depth: 17960 bytes left [ 120.819750][ T5858] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 120.832875][ T5858] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 120.840333][ T5858] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 120.897806][ T5858] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 121.969327][ T6247] fido_id[6247]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.549659][ T6265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.929550][ T6274] ubi31: attaching mtd0 [ 123.936474][ T6274] ubi31: scanning is finished [ 123.941195][ T6274] ubi31: empty MTD device detected [ 124.212517][ T6274] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 124.220132][ T6274] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 124.228322][ T6274] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 124.236436][ T6274] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 124.244815][ T6274] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 124.251676][ T6274] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 124.260268][ T6274] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 900968514 [ 124.270688][ T6274] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.283180][ T6276] ubi31: background thread "ubi_bgt31d" started, PID 6276 [ 126.972046][ T6285] xt_CT: No such helper "pptp" [ 127.928677][ T6298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.829998][ T6324] netlink: 44 bytes leftover after parsing attributes in process `syz.1.96'. [ 130.339431][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 132.623698][ T6352] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 133.227782][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.274482][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.527684][ T6376] 9pnet_fd: Insufficient options for proto=fd [ 138.367195][ T6178] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 138.411580][ T6178] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 138.511061][ T6178] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 139.290945][ T6178] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.569064][ T6400] fido_id[6400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.969580][ T6422] sched: RT throttling activated [ 147.152512][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 151.719577][ T6464] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 151.744892][ T6464] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 151.764303][ T6464] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.838913][ T6473] netlink: 44 bytes leftover after parsing attributes in process `syz.2.131'. [ 151.848528][ T6471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.131'. [ 156.798546][ T6518] syz.0.144[6518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.798744][ T6518] syz.0.144[6518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.849066][ T6516] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.284608][ T6178] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.744993][ T6525] mmap: syz.3.147 (6525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.781268][ T6525] CIFS: VFS: Malformed UNC in devname [ 158.199274][ T6532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.148'. [ 158.208749][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.148'. [ 158.432603][ T6178] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 159.263568][ T6178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.403105][ T6178] usb 3-1: config 0 descriptor?? [ 160.971069][ T6178] ath6kl: Failed to submit usb control message: -110 [ 161.093282][ T6178] ath6kl: unable to send the bmi data to the device: -110 [ 161.110015][ T6178] ath6kl: Unable to send get target info: -110 [ 161.174058][ T6178] ath6kl: Failed to init ath6kl core: -110 [ 161.233591][ T6178] ath6kl_usb: probe of 3-1:0.0 failed with error -110 [ 161.317226][ T6178] usb 3-1: USB disconnect, device number 5 [ 162.161609][ T6563] syz.1.158[6563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.161740][ T6563] syz.1.158[6563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.672864][ T6569] CIFS: VFS: Malformed UNC in devname [ 165.070693][ T6579] xt_CT: No such helper "pptp" [ 165.542155][ T6591] autofs4:pid:6591:autofs_fill_super: called with bogus options [ 165.648135][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 166.941846][ T6599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.639846][ T6616] syz.2.169[6616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.640831][ T6616] syz.2.169[6616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.168170][ T6617] CIFS: VFS: Malformed UNC in devname [ 171.818069][ T6650] autofs4:pid:6650:autofs_fill_super: called with bogus options [ 173.696727][ T6679] CIFS: VFS: Malformed UNC in devname [ 175.321668][ T6697] autofs4:pid:6697:autofs_fill_super: called with bogus options [ 176.681625][ T6710] loop1: detected capacity change from 0 to 1024 [ 176.930761][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.234480][ T6718] CIFS: VFS: Malformed UNC in devname [ 178.401900][ T6710] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.191: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 178.591648][ T6710] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 179.041321][ T6710] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.191: Deleting old file: nlink 4, error=-117 [ 179.477360][ T28] audit: type=1326 audit(1751934037.145:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.559264][ T28] audit: type=1326 audit(1751934037.175:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.660973][ T28] audit: type=1326 audit(1751934037.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.722002][ T28] audit: type=1326 audit(1751934037.175:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.789010][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.839269][ T28] audit: type=1326 audit(1751934037.175:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.866940][ T28] audit: type=1326 audit(1751934037.175:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.890385][ T28] audit: type=1326 audit(1751934037.175:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 179.929136][ T28] audit: type=1326 audit(1751934037.175:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c493858e7 code=0x7ffc0000 [ 180.231052][ T28] audit: type=1326 audit(1751934037.175:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c4932ab19 code=0x7ffc0000 [ 180.630723][ T28] audit: type=1326 audit(1751934037.175:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4938e929 code=0x7ffc0000 [ 183.677980][ T6766] tipc: Started in network mode [ 183.699091][ T6766] tipc: Node identity 4, cluster identity 4711 [ 183.708000][ T6766] tipc: Node number set to 4 [ 183.864843][ T6769] CIFS: VFS: Malformed UNC in devname [ 186.012675][ T6796] 9pnet_virtio: no channels available for device 127.0.0.1 [ 187.928627][ T6820] autofs4:pid:6820:autofs_fill_super: called with bogus options [ 188.109158][ T6822] loop3: detected capacity change from 0 to 2048 [ 188.247982][ T6822] loop3: p1 < > p3 [ 188.543212][ T6822] loop3: p3 size 134217728 extends beyond EOD, truncated [ 189.095066][ T5161] loop3: p1 < > p3 [ 189.132237][ T5161] loop3: p3 size 134217728 extends beyond EOD, truncated [ 189.578243][ T6465] udevd[6465]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 189.595762][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 191.550552][ T6849] CIFS: VFS: Malformed UNC in devname [ 191.618711][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 191.627062][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 191.650377][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 193.263469][ T6873] autofs4:pid:6873:autofs_fill_super: called with bogus options [ 194.181065][ T6882] loop2: detected capacity change from 0 to 2048 [ 194.295799][ T6882] loop2: p1 < > p3 [ 194.355403][ T6882] loop2: p3 size 134217728 extends beyond EOD, truncated [ 194.436132][ T5161] loop2: p1 < > p3 [ 194.445824][ T5161] loop2: p3 size 134217728 extends beyond EOD, truncated [ 194.669994][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.676810][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.276000][ T6898] loop3: detected capacity change from 0 to 512 [ 196.399078][ T6898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.698622][ T6898] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.674744][ T6898] vivid-002: disconnect [ 198.683223][ T6897] vivid-002: reconnect [ 198.823057][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.452704][ T6934] netlink: 112 bytes leftover after parsing attributes in process `syz.2.251'. [ 202.608965][ T6949] CIFS: VFS: Malformed UNC in devname [ 203.205764][ T6951] loop0: detected capacity change from 0 to 32768 [ 203.255605][ T6951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.257 (6951) [ 203.297109][ T6951] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.307597][ T6951] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 203.316583][ T6951] BTRFS info (device loop0): turning on sync discard [ 203.323570][ T6951] BTRFS info (device loop0): use zlib compression, level 3 [ 203.331631][ T6951] BTRFS info (device loop0): turning off barriers [ 203.339211][ T6951] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 203.349866][ T6951] BTRFS info (device loop0): trying to use backup root at mount time [ 203.357996][ T6951] BTRFS info (device loop0): enabling auto defrag [ 203.364459][ T6951] BTRFS info (device loop0): max_inline at 0 [ 203.370616][ T6951] BTRFS info (device loop0): using free space tree [ 203.499577][ T3542] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 203.698264][ T6951] BTRFS error (device loop0): failed to load root extent [ 203.705561][ T6951] BTRFS warning (device loop0): try to load backup roots slot 1 [ 203.713773][ T3542] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 203.836181][ T6951] BTRFS warning (device loop0): couldn't read tree root [ 203.844991][ T6951] BTRFS warning (device loop0): try to load backup roots slot 2 [ 203.859828][ T3488] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 205.556157][ T6971] CIFS: VFS: Malformed UNC in devname [ 205.858130][ T6951] BTRFS warning (device loop0): couldn't read tree root [ 205.865130][ T6951] BTRFS warning (device loop0): try to load backup roots slot 3 [ 205.991386][ T6951] BTRFS error (device loop0): open_ctree failed: -4 [ 206.678353][ T6989] loop2: detected capacity change from 0 to 64 [ 208.310367][ T6994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 208.317507][ T6994] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.326784][ T6994] vhci_hcd vhci_hcd.0: Device attached [ 208.384555][ T6995] vhci_hcd: connection closed [ 208.444171][ T3542] vhci_hcd: stop threads [ 208.804536][ T3542] vhci_hcd: release socket [ 208.817814][ T3542] vhci_hcd: disconnect device [ 209.301570][ T7003] loop0: detected capacity change from 0 to 1764 [ 210.552037][ T7006] CIFS: VFS: Malformed UNC in devname [ 213.367515][ T7022] loop1: detected capacity change from 0 to 2048 [ 216.403825][ T7031] syz.2.274 (7031): drop_caches: 2 [ 216.411184][ T7031] syz.2.274 (7031): drop_caches: 2 [ 216.974320][ T5161] loop1: p1 < > p3 [ 217.043101][ T5161] loop1: p3 size 134217728 extends beyond EOD, truncated [ 217.264400][ T7034] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 217.271082][ T7034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.290579][ T7034] vhci_hcd vhci_hcd.0: Device attached [ 217.346220][ T7035] vhci_hcd: connection closed [ 218.317379][ T3488] vhci_hcd: stop threads [ 218.330293][ T3488] vhci_hcd: release socket [ 218.336139][ T3488] vhci_hcd: disconnect device [ 218.528105][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 220.460303][ T6465] udevd[6465]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 220.877461][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 220.906991][ T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 221.069180][ T5881] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 221.101897][ T5881] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 221.124773][ T5881] usb 2-1: config 16 interface 0 has no altsetting 0 [ 221.134185][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.152603][ T5881] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 221.164909][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.175863][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.186902][ T55] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.205960][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.241368][ T7051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.347908][ T55] usb 3-1: config 0 descriptor?? [ 221.574364][ T5881] usb 2-1: string descriptor 0 read error: -71 [ 221.612364][ T5881] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 221.622017][ T5881] imon 2-1:16.0: unable to initialize intf0, err -19 [ 221.666982][ T5881] imon:imon_probe: failed to initialize context! [ 221.680018][ T5881] imon 2-1:16.0: unable to register, err -19 [ 221.745327][ T5881] usb 2-1: USB disconnect, device number 5 [ 222.158205][ T55] usb 3-1: string descriptor 0 read error: -22 [ 222.388268][ T55] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input6 [ 222.517862][ T55] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 222.583481][ T55] usb 3-1: USB disconnect, device number 6 [ 222.707890][ T7073] fido_id[7073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 226.273550][ T7108] loop1: detected capacity change from 0 to 1024 [ 226.343423][ T7108] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 226.488577][ T7112] loop2: detected capacity change from 0 to 512 [ 226.507200][ T7112] EXT4-fs: Ignoring removed nobh option [ 226.634001][ T7112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.048441][ T7120] syz.1.298 (7120): drop_caches: 2 [ 228.056803][ T7120] syz.1.298 (7120): drop_caches: 2 [ 228.762637][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.921077][ T7123] loop1: detected capacity change from 0 to 2048 [ 229.025916][ T7123] loop1: p1 < > p3 [ 229.665363][ T7123] loop1: p3 size 134217728 extends beyond EOD, truncated [ 230.321927][ T7142] loop3: detected capacity change from 0 to 64 [ 231.970267][ T7146] CIFS: VFS: Malformed UNC in devname [ 232.841723][ T7154] syz.0.309 (7154): drop_caches: 2 [ 232.851447][ T7154] syz.0.309 (7154): drop_caches: 2 [ 234.512384][ T7168] loop0: detected capacity change from 0 to 2048 [ 234.558496][ T7168] loop0: p1 < > p3 [ 234.575171][ T7168] loop0: p3 size 134217728 extends beyond EOD, truncated [ 237.550721][ T7186] CIFS: VFS: Malformed UNC in devname [ 238.077913][ T7197] loop0: detected capacity change from 0 to 64 [ 240.217543][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 242.358147][ T7234] sctp: failed to load transform for md5: -2 [ 243.445665][ T7235] CIFS: VFS: Malformed UNC in devname [ 243.917519][ T7248] autofs4:pid:7248:autofs_fill_super: called with bogus options [ 245.133959][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.337'. [ 245.308397][ T7269] loop0: detected capacity change from 0 to 1024 [ 245.971287][ T7272] hfsplus: xattr searching failed [ 246.967285][ T7277] CIFS: VFS: Malformed UNC in devname [ 248.770560][ T7295] autofs4:pid:7295:autofs_fill_super: called with bogus options [ 248.971277][ T7301] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.348'. [ 248.995690][ T7300] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.348'. [ 249.485393][ T6178] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 249.550249][ T7309] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 249.726354][ T6178] usb 2-1: Using ep0 maxpacket: 8 [ 249.733866][ T6178] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 249.754856][ T7297] loop0: detected capacity change from 0 to 32768 [ 249.762812][ T6178] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.826433][ T6178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.845452][ T6178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.856067][ T6178] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.870233][ T6178] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.880049][ T6178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.910246][ T7297] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.095399][ T6178] usb 2-1: usb_control_msg returned -32 [ 250.101505][ T6178] usbtmc 2-1:16.0: can't read capabilities [ 250.278981][ T7297] XFS (loop0): Ending clean mount [ 250.534989][ T7297] XFS (loop0): Quotacheck needed: Please wait. [ 250.846243][ T7305] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 250.879112][ T7322] loop6: detected capacity change from 0 to 524287999 [ 251.000896][ T7297] XFS (loop0): Quotacheck: Done. [ 251.033446][ T5814] usb 2-1: USB disconnect, device number 6 [ 251.402305][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 251.402319][ T28] audit: type=1800 audit(1751934109.079:15): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 252.168511][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 252.470696][ T7332] CIFS: VFS: Malformed UNC in devname [ 253.510609][ T7337] loop1: detected capacity change from 0 to 1024 [ 254.180973][ T7346] hfsplus: xattr searching failed [ 255.684740][ T28] audit: type=1326 audit(1751934113.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 255.765924][ T28] audit: type=1326 audit(1751934113.360:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 255.855245][ T28] audit: type=1326 audit(1751934113.390:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 255.904958][ T28] audit: type=1326 audit(1751934113.390:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 257.546393][ T7366] CIFS: VFS: Malformed UNC in devname [ 257.907542][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.918071][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.025355][ T28] audit: type=1326 audit(1751934113.390:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 258.202866][ T7363] QAT: failed to copy from user cfg_data. [ 258.306642][ T28] audit: type=1326 audit(1751934113.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 258.377465][ T28] audit: type=1326 audit(1751934113.390:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 258.441632][ T28] audit: type=1326 audit(1751934113.390:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 258.525427][ T7377] autofs4:pid:7377:autofs_fill_super: called with bogus options [ 258.534909][ T28] audit: type=1326 audit(1751934113.390:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd17f38d290 code=0x7ffc0000 [ 258.608920][ T28] audit: type=1326 audit(1751934113.390:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 258.660798][ T28] audit: type=1326 audit(1751934113.390:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd17f38d290 code=0x7ffc0000 [ 258.744812][ T28] audit: type=1326 audit(1751934113.390:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd17f390157 code=0x7ffc0000 [ 258.833157][ T28] audit: type=1326 audit(1751934113.390:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd17f38e929 code=0x7ffc0000 [ 259.137626][ T28] audit: type=1326 audit(1751934113.390:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd17f390157 code=0x7ffc0000 [ 262.532048][ T7402] CIFS: VFS: Malformed UNC in devname [ 264.076351][ T7416] autofs4:pid:7416:autofs_fill_super: called with bogus options [ 267.284110][ T7454] CIFS: VFS: Malformed UNC in devname [ 268.334304][ T8] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 268.484546][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 268.544580][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.585322][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.629421][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.654424][ T5814] usb 4-1: device descriptor read/64, error -71 [ 268.664862][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 268.672485][ T8] usb 2-1: can't read configurations, error -71 [ 269.062007][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 269.915522][ T5814] usb 4-1: device descriptor read/64, error -71 [ 270.034391][ T5814] usb usb4-port1: attempt power cycle [ 270.314328][ T5858] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 270.444249][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 270.475166][ T5814] usb 4-1: device descriptor read/8, error -71 [ 270.545397][ T5858] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 270.569714][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.600726][ T5858] usb 3-1: config 0 descriptor?? [ 270.644425][ T5858] usb 3-1: selecting invalid altsetting 3 [ 270.651287][ T5858] comedi comedi4: could not set alternate setting 3 in high speed [ 270.671334][ T5858] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 270.698398][ T5858] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 270.744295][ T5814] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 270.775753][ T5814] usb 4-1: device descriptor read/8, error -71 [ 270.824393][ T8] usb 3-1: USB disconnect, device number 7 [ 270.905933][ T5814] usb usb4-port1: unable to enumerate USB device [ 270.971541][ T7484] loop0: detected capacity change from 0 to 1024 [ 270.987208][ T7484] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 272.547664][ T7488] CIFS: VFS: Malformed UNC in devname [ 273.804027][ T7507] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 273.810685][ T7507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.820133][ T7507] vhci_hcd vhci_hcd.0: Device attached [ 274.174042][ T55] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 274.730796][ T7508] vhci_hcd: connection reset by peer [ 275.063415][ T48] vhci_hcd: stop threads [ 275.084831][ T48] vhci_hcd: release socket [ 275.090777][ T48] vhci_hcd: disconnect device [ 275.162068][ T7513] loop2: detected capacity change from 0 to 1024 [ 275.280570][ T7513] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 276.223827][ T5814] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 276.300721][ T7522] loop2: detected capacity change from 0 to 2048 [ 276.497771][ T7522] loop2: p1 < > p3 [ 276.746334][ T7522] loop2: p3 size 134217728 extends beyond EOD, truncated [ 277.317344][ T5814] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 277.353375][ T5814] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 277.371379][ T5814] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 277.385312][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.134395][ T5814] usb 2-1: USB disconnect, device number 9 [ 278.582508][ T7545] autofs4:pid:7545:autofs_fill_super: called with bogus options [ 279.653848][ T55] vhci_hcd: vhci_device speed not set [ 279.725004][ T7554] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 279.732196][ T7554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.741086][ T7554] vhci_hcd vhci_hcd.0: Device attached [ 279.981138][ T7555] vhci_hcd: connection closed [ 279.982089][ T3488] vhci_hcd: stop threads [ 281.136483][ T3488] vhci_hcd: release socket [ 281.192748][ T3488] vhci_hcd: disconnect device [ 281.522005][ T7566] loop2: detected capacity change from 0 to 512 [ 281.556650][ T7566] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.589001][ T7566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.652810][ T7566] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.427: invalid indirect mapped block 4294967295 (level 1) [ 281.691835][ T7566] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.427: invalid indirect mapped block 4294967295 (level 1) [ 281.742441][ T7566] EXT4-fs (loop2): 2 truncates cleaned up [ 281.766059][ T7576] loop0: detected capacity change from 0 to 2048 [ 281.771944][ T7566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.929880][ T7576] loop0: p1 < > p3 [ 281.949257][ T7576] loop0: p3 size 134217728 extends beyond EOD, truncated [ 282.166947][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 282.405169][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.910058][ T7602] autofs4:pid:7602:autofs_fill_super: called with bogus options [ 288.827548][ T7647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.451'. [ 288.836799][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.451'. [ 292.611077][ T7700] loop3: detected capacity change from 0 to 256 [ 292.630209][ T7700] exfat: Deprecated parameter 'namecase' [ 292.664953][ T7700] exfat: Deprecated parameter 'namecase' [ 292.803922][ T7700] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 292.877599][ T7700] syz.3.472: attempt to access beyond end of device [ 292.877599][ T7700] loop3: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 292.919645][ T7700] syz.3.472: attempt to access beyond end of device [ 292.919645][ T7700] loop3: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 292.940417][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 292.940431][ T28] audit: type=1800 audit(1751934150.612:62): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.472" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 292.946371][ T7700] syz.3.472: attempt to access beyond end of device [ 292.946371][ T7700] loop3: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 293.449617][ T7720] loop3: detected capacity change from 0 to 64 [ 293.461114][ T7720] hfs: type requires a 4 character value [ 293.467343][ T7720] hfs: unable to parse mount options [ 293.630219][ T7720] loop3: detected capacity change from 0 to 64 [ 294.683838][ T7740] syz_tun: entered allmulticast mode [ 294.697852][ T7739] syz_tun: left allmulticast mode [ 295.130579][ T7756] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 295.223116][ T6178] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 295.430109][ T6178] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 295.449409][ T6178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.471362][ T6178] usb 4-1: config 0 descriptor?? [ 295.502401][ T6178] usb 4-1: selecting invalid altsetting 3 [ 295.510151][ T6178] comedi comedi4: could not set alternate setting 3 in high speed [ 295.557125][ T6178] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 295.714509][ T6178] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 295.870732][ T6178] usb 4-1: USB disconnect, device number 6 [ 296.213643][ T7771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.500'. [ 296.223467][ T7771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.500'. [ 296.931767][ T7779] loop3: detected capacity change from 0 to 1024 [ 297.057124][ T7779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.261783][ T7795] loop3: detected capacity change from 0 to 2048 [ 298.398494][ T7801] autofs4:pid:7801:autofs_fill_super: called with bogus options [ 298.410826][ T7795] loop3: p1 < > p3 [ 298.430779][ T7795] loop3: p3 size 134217728 extends beyond EOD, truncated [ 299.203876][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 299.230736][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 299.482496][ T6178] IPVS: starting estimator thread 0... [ 299.712748][ T7817] IPVS: using max 18 ests per chain, 43200 per kthread [ 300.270160][ T7830] loop2: detected capacity change from 0 to 2048 [ 300.371058][ T7830] loop2: p1 < > p3 [ 300.416421][ T7830] loop2: p3 size 134217728 extends beyond EOD, truncated [ 300.475383][ T5161] loop2: p1 < > p3 [ 300.490278][ T5161] loop2: p3 size 134217728 extends beyond EOD, truncated [ 302.557557][ T7846] CIFS: VFS: Malformed UNC in devname [ 303.008738][ T7251] udevd[7251]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 303.061137][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 303.091688][ T7856] autofs4:pid:7856:autofs_fill_super: called with bogus options [ 303.176714][ T7251] udevd[7251]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 303.177631][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 305.296565][ T7874] loop1: detected capacity change from 0 to 2048 [ 305.343477][ T7874] loop1: p1 < > p3 [ 305.369082][ T7874] loop1: p3 size 134217728 extends beyond EOD, truncated [ 306.162893][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 306.192683][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 306.662654][ T7895] fuse: Bad value for 'fd' [ 307.407452][ T7905] xt_TPROXY: Can be used only with -p tcp or -p udp [ 308.030886][ T7910] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 308.825651][ T7909] loop3: detected capacity change from 0 to 256 [ 309.148606][ T7913] loop2: detected capacity change from 0 to 2048 [ 309.211777][ T7909] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 309.534187][ T7913] loop2: p1 < > p3 [ 309.852219][ T7924] CIFS: VFS: Malformed UNC in devname [ 309.867765][ T7913] loop2: p3 size 134217728 extends beyond EOD, truncated [ 310.606514][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 310.618361][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 312.244514][ T7955] loop3: detected capacity change from 0 to 2048 [ 312.325111][ T7955] loop3: p1 < > p3 [ 312.336978][ T7955] loop3: p3 size 134217728 extends beyond EOD, truncated [ 314.032780][ T7968] loop2: detected capacity change from 0 to 16 [ 314.197409][ T7968] erofs: (device loop2): mounted with root inode @ nid 36. [ 314.272273][ T7953] loop1: detected capacity change from 0 to 32768 [ 315.461773][ T7972] CIFS: VFS: Malformed UNC in devname [ 315.661615][ T28] audit: type=1800 audit(1751934173.333:63): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.559" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 315.721830][ T7953] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 316.649276][ T7989] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 317.107644][ T7981] kvm: kvm [7978]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000a615 [ 317.165507][ T7987] loop3: detected capacity change from 0 to 2048 [ 317.246952][ T7981] kvm: kvm [7978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x10000a615 [ 317.308390][ T7987] loop3: p1 < > p3 [ 317.331290][ T7987] loop3: p3 size 134217728 extends beyond EOD, truncated [ 317.536201][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.543209][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.659938][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 317.672189][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 318.517862][ T8004] loop3: detected capacity change from 0 to 2048 [ 318.549110][ T8004] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 318.591008][ T8004] syz.3.569: attempt to access beyond end of device [ 318.591008][ T8004] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 318.591111][ T5858] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 318.622678][ T8005] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.737577][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 318.748644][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.751691][ T8007] loop2: detected capacity change from 0 to 256 [ 318.791547][ T8004] Remounting filesystem read-only [ 318.802410][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 318.808490][ T8008] NILFS (loop3): mounting fs with errors [ 318.812893][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.871835][ T5858] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 318.899650][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.915218][ T8004] Remounting filesystem read-only [ 318.921453][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 318.932600][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.946168][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 318.956530][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.967862][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 318.973170][ T5858] usb 2-1: config 0 descriptor?? [ 318.978995][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.997910][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.009630][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.020788][ T8007] FAT-fs (loop2): Directory bread(block 64) failed [ 319.029219][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.039567][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.048025][ T8007] FAT-fs (loop2): Directory bread(block 65) failed [ 319.068980][ T5858] usb 2-1: selecting invalid altsetting 3 [ 319.076218][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.087533][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.097756][ T5858] comedi comedi4: could not set alternate setting 3 in high speed [ 319.097816][ T5858] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 319.099346][ T8007] FAT-fs (loop2): Directory bread(block 66) failed [ 319.124446][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.137256][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.144341][ T5858] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 319.162878][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.173965][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.184683][ T8007] FAT-fs (loop2): Directory bread(block 67) failed [ 319.191850][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.202559][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.214171][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.224756][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.236924][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.245546][ T8007] FAT-fs (loop2): Directory bread(block 68) failed [ 319.247365][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.266555][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.277802][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.280563][ T8007] FAT-fs (loop2): Directory bread(block 69) failed [ 319.301003][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.311534][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.328663][ T5858] usb 2-1: USB disconnect, device number 10 [ 319.343663][ T8004] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 319.354105][ T8004] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 319.364632][ T28] audit: type=1800 audit(1751934177.043:64): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.569" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 319.390117][ T8007] FAT-fs (loop2): Directory bread(block 70) failed [ 319.401864][ T8007] FAT-fs (loop2): Directory bread(block 71) failed [ 319.408705][ T8007] FAT-fs (loop2): Directory bread(block 72) failed [ 319.443681][ T8007] FAT-fs (loop2): Directory bread(block 73) failed [ 322.411649][ T8026] loop2: detected capacity change from 0 to 2048 [ 324.755762][ T8054] loop2: detected capacity change from 0 to 32768 [ 325.076550][ T8054] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.769524][ T8054] XFS (loop2): Ending clean mount [ 325.852822][ T8054] XFS (loop2): Quotacheck needed: Please wait. [ 326.027288][ T8054] XFS (loop2): Quotacheck: Done. [ 326.472457][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.661045][ T5881] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 326.863443][ T5881] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 326.892255][ T5881] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 326.940982][ T5881] usb 2-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.970800][ T5881] usb 2-1: config 16 interface 0 has no altsetting 0 [ 326.980330][ T5881] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 327.000006][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.047907][ T8096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.304151][ T5881] usb 2-1: string descriptor 0 read error: -71 [ 327.322007][ T5881] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 327.340020][ T5881] imon 2-1:16.0: unable to initialize intf0, err -19 [ 327.383064][ T5881] imon:imon_probe: failed to initialize context! [ 327.421836][ T5881] imon 2-1:16.0: unable to register, err -19 [ 327.439679][ T5881] usb 2-1: USB disconnect, device number 11 [ 328.087257][ T8123] autofs4:pid:8123:autofs_fill_super: called with bogus options [ 328.469750][ T8121] loop2: detected capacity change from 0 to 32768 [ 328.497069][ T8121] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.602 (8121) [ 328.559528][ T8121] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.594882][ T8121] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 328.616943][ T8121] BTRFS info (device loop2): using free space tree [ 328.792451][ T8121] BTRFS info (device loop2): enabling ssd optimizations [ 328.799558][ T8121] BTRFS info (device loop2): auto enabling async discard [ 329.189670][ T8150] loop1: detected capacity change from 0 to 4096 [ 329.213100][ T5792] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.250079][ T8150] NILFS (loop1): invalid segment: Checksum error in segment payload [ 329.269358][ T8150] NILFS (loop1): trying rollback from an earlier position [ 329.357020][ T8150] NILFS (loop1): recovery complete [ 329.458765][ T8158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.770949][ T5814] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 330.562848][ T8170] loop0: detected capacity change from 0 to 2048 [ 330.571760][ T5814] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 330.607401][ T5814] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 330.637692][ T5814] usb 4-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.665209][ T8170] loop0: p1 < > p3 [ 330.679036][ T8170] loop0: p3 size 134217728 extends beyond EOD, truncated [ 330.698897][ T5814] usb 4-1: config 16 interface 0 has no altsetting 0 [ 330.723333][ T5814] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 330.802828][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.601172][ T8160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.830975][ T5814] usb 4-1: string descriptor 0 read error: -71 [ 331.852287][ T5814] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 331.897437][ T5814] imon 4-1:16.0: unable to initialize intf0, err -19 [ 331.940396][ T5814] imon:imon_probe: failed to initialize context! [ 331.976006][ T5814] imon 4-1:16.0: unable to register, err -19 [ 332.004904][ T5814] usb 4-1: USB disconnect, device number 7 [ 332.176044][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 332.212370][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 333.220892][ T8211] loop0: detected capacity change from 0 to 2048 [ 333.322769][ T8211] loop0: p1 < > p3 [ 333.329070][ T8211] loop0: p3 size 134217728 extends beyond EOD, truncated [ 334.820667][ T5857] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 335.054956][ T5857] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 335.098276][ T5857] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 335.150749][ T5857] usb 2-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.210003][ T5857] usb 2-1: config 16 interface 0 has no altsetting 0 [ 335.241980][ T5857] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 335.287368][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.347600][ T8227] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 335.648455][ T5857] usb 2-1: string descriptor 0 read error: -71 [ 335.702012][ T8241] syz.2.636 (8241): drop_caches: 2 [ 335.826987][ T8241] syz.2.636 (8241): drop_caches: 2 [ 336.318824][ T5857] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 336.327446][ T5857] imon 2-1:16.0: unable to initialize intf0, err -19 [ 336.334480][ T5857] imon:imon_probe: failed to initialize context! [ 336.341168][ T5857] imon 2-1:16.0: unable to register, err -19 [ 336.350186][ T5857] usb 2-1: USB disconnect, device number 12 [ 336.639598][ T8251] 9pnet_fd: Insufficient options for proto=fd [ 339.859020][ T8263] loop1: detected capacity change from 0 to 2048 [ 340.244702][ T8265] loop2: detected capacity change from 0 to 32768 [ 340.611773][ T8263] loop1: p1 < > p3 [ 341.178614][ T8263] loop1: p3 size 134217728 extends beyond EOD, truncated [ 341.859251][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 341.880393][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 342.402586][ T8295] block device autoloading is deprecated and will be removed. [ 342.419595][ T8295] syz.1.648: attempt to access beyond end of device [ 342.419595][ T8295] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 343.337576][ T8305] 9pnet_fd: Insufficient options for proto=fd [ 345.207539][ T8316] loop3: detected capacity change from 0 to 2048 [ 347.172874][ T8321] syz.2.656: attempt to access beyond end of device [ 347.172874][ T8321] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 347.590283][ T8316] loop3: p1 < > p3 [ 347.636391][ T8316] loop3: p3 size 134217728 extends beyond EOD, truncated [ 350.602402][ T8363] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.646112][ T8361] loop0: detected capacity change from 0 to 2048 [ 350.734512][ T8361] loop0: p1 < > p3 [ 350.755986][ T8361] loop0: p3 size 134217728 extends beyond EOD, truncated [ 352.430782][ T8363] loop3: detected capacity change from 0 to 32768 [ 352.537802][ T8363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.668 (8363) [ 352.623243][ T8363] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.679771][ T8363] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 352.689312][ T8363] BTRFS info (device loop3): setting nodatacow, compression disabled [ 352.708618][ T8363] BTRFS info (device loop3): max_inline at 0 [ 352.721371][ T8363] BTRFS info (device loop3): enabling disk space caching [ 352.736472][ T8363] BTRFS info (device loop3): turning off barriers [ 352.749736][ T8363] BTRFS info (device loop3): turning on flush-on-commit [ 352.764840][ T8363] BTRFS info (device loop3): doing ref verification [ 352.845536][ T8363] BTRFS info (device loop3): force clearing of disk cache [ 352.945646][ T8363] BTRFS info (device loop3): enabling ssd optimizations [ 353.009069][ T8363] BTRFS info (device loop3): max_inline at 4096 [ 353.076950][ T8363] BTRFS info (device loop3): disk space caching is enabled [ 353.300926][ T8363] BTRFS info (device loop3): auto enabling async discard [ 353.341675][ T8363] BTRFS info (device loop3): rebuilding free space tree [ 353.413431][ T8363] BTRFS info (device loop3): disabling free space tree [ 353.429757][ T8363] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 353.471687][ T8363] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 353.873040][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.391546][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 355.482387][ T8429] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 355.503949][ T8431] netlink: 96 bytes leftover after parsing attributes in process `syz.2.688'. [ 355.585442][ T8] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 355.653291][ T8] usb 2-1: config 16 interface 0 altsetting 75 has an invalid endpoint with address 0x0, skipping [ 355.731536][ T8] usb 2-1: config 16 interface 0 has no altsetting 0 [ 355.798560][ T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 355.864942][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.884380][ T8422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 356.210771][ T8] usb 2-1: string descriptor 0 read error: -71 [ 356.258519][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 356.293529][ T8] imon 2-1:16.0: unable to initialize intf0, err -19 [ 356.321299][ T8] imon:imon_probe: failed to initialize context! [ 356.338899][ T8] imon 2-1:16.0: unable to register, err -19 [ 356.364410][ T8] usb 2-1: USB disconnect, device number 13 [ 361.259701][ T8477] CIFS: VFS: Malformed UNC in devname [ 363.445942][ T8487] loop1: detected capacity change from 0 to 32768 [ 364.256602][ T8489] loop2: detected capacity change from 0 to 764 [ 364.708148][ T8489] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 365.672377][ T8500] loop0: detected capacity change from 0 to 2048 [ 365.710787][ T8500] loop0: p1 < > p3 [ 365.726502][ T8500] loop0: p3 size 134217728 extends beyond EOD, truncated [ 365.829438][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 365.889320][ T8503] vlan2: entered promiscuous mode [ 365.906284][ T8503] team0: entered promiscuous mode [ 366.048883][ T8503] team_slave_0: entered promiscuous mode [ 366.085793][ T8503] team_slave_1: entered promiscuous mode [ 366.474499][ T8505] loop1: detected capacity change from 0 to 65536 [ 366.537337][ T8505] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 366.690140][ T8505] XFS (loop1): Ending clean mount [ 366.779820][ T5791] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 368.369205][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 370.870047][ T8553] loop3: detected capacity change from 0 to 32768 [ 372.109779][ T8563] loop1: detected capacity change from 0 to 2048 [ 372.150218][ T8563] loop1: p1 < > p3 [ 372.156174][ T8563] loop1: p3 size 134217728 extends beyond EOD, truncated [ 373.131383][ T8571] CIFS: VFS: Malformed UNC in devname [ 373.677772][ T8577] kAFS: No cell specified [ 376.961582][ T8612] CIFS: VFS: Malformed UNC in devname [ 377.111930][ T8613] kAFS: No cell specified [ 377.453579][ T8619] loop3: detected capacity change from 0 to 8192 [ 377.483642][ T8619] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 377.517632][ T8619] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 377.546913][ T8619] REISERFS (device loop3): using ordered data mode [ 377.666539][ T8619] reiserfs: using flush barriers [ 377.688357][ T8619] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 377.717625][ T8619] REISERFS (device loop3): checking transaction log (loop3) [ 377.745949][ T8619] REISERFS (device loop3): Using r5 hash to sort names [ 377.766001][ T8619] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 378.403362][ T8628] loop2: detected capacity change from 0 to 256 [ 378.424239][ T8628] exfat: Bad value for 'uid' [ 378.549441][ T8630] loop1: detected capacity change from 0 to 256 [ 378.979547][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.028720][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.364413][ T8660] CIFS: VFS: Malformed UNC in devname [ 384.630411][ T8679] loop2: detected capacity change from 0 to 2048 [ 384.690362][ T8682] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 384.709806][ T8679] loop2: p1 < > p3 [ 384.721055][ T8679] loop2: p3 size 134217728 extends beyond EOD, truncated [ 384.817240][ T5161] loop2: p1 < > p3 [ 384.853964][ T5161] loop2: p3 size 134217728 extends beyond EOD, truncated [ 386.265341][ T8698] CIFS: VFS: Malformed UNC in devname [ 387.494422][ T8702] loop1: detected capacity change from 0 to 512 [ 387.541385][ T8702] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 387.615881][ T8702] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.719949][ T8702] EXT4-fs (loop1): 1 truncate cleaned up [ 387.763069][ T8702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.580606][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.901420][ T8737] loop1: detected capacity change from 0 to 256 [ 389.952295][ T8737] exfat: Deprecated parameter 'utf8' [ 389.985695][ T8737] exfat: Bad value for 'errors' [ 390.314647][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 390.330730][ T8743] block device autoloading is deprecated and will be removed. [ 390.945785][ T8747] loop3: detected capacity change from 0 to 128 [ 391.254992][ T8754] loop1: detected capacity change from 0 to 2048 [ 392.326009][ T8760] syz.3.772: attempt to access beyond end of device [ 392.326009][ T8760] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 393.183938][ T8763] loop0: detected capacity change from 0 to 256 [ 393.192203][ T8763] exfat: Bad value for 'uid' [ 393.235017][ T8707] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.747778][ T28] audit: type=1326 audit(1751934252.428:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.0.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e218e929 code=0x0 [ 397.410347][ T8804] loop0: detected capacity change from 0 to 2048 [ 397.709539][ T8804] loop0: p1 < > p3 [ 398.971208][ T8804] loop0: p3 size 134217728 extends beyond EOD, truncated [ 399.831291][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 399.846266][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 400.050080][ T8835] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 400.931128][ T8823] loop1: detected capacity change from 0 to 32768 [ 401.042273][ T8823] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.790 (8823) [ 401.166399][ T8823] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 401.222518][ T8823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 401.295750][ T8823] BTRFS info (device loop1): using free space tree [ 402.088614][ T8823] BTRFS info (device loop1): enabling ssd optimizations [ 402.135601][ T8823] BTRFS info (device loop1): auto enabling async discard [ 402.188534][ T8868] loop0: detected capacity change from 0 to 128 [ 403.020103][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.200116][ T8879] syz.0.799: attempt to access beyond end of device [ 403.200116][ T8879] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 404.163591][ T7250] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (7250) [ 405.128542][ T8885] loop0: detected capacity change from 0 to 8192 [ 405.361127][ T8885] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 405.411329][ T8885] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 405.494759][ T8885] REISERFS (device loop0): using ordered data mode [ 405.506500][ T8885] reiserfs: using flush barriers [ 405.521885][ T8885] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 405.563642][ T8885] REISERFS (device loop0): checking transaction log (loop0) [ 405.603319][ T8885] REISERFS (device loop0): Using r5 hash to sort names [ 405.633147][ T8885] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 410.406343][ T5844] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 410.598621][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 410.615373][ T5844] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 410.625513][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.670650][ T5844] usb 2-1: config 0 descriptor?? [ 410.681193][ T8932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.197401][ T5844] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 411.383687][ T5844] usb 2-1: USB disconnect, device number 14 [ 413.933893][ T8874] Set syz1 is full, maxelem 65536 reached [ 418.364890][ T8989] program syz.2.831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.984150][ T9004] loop3: detected capacity change from 0 to 32768 [ 421.566331][ T9015] loop0: detected capacity change from 0 to 64 [ 423.813459][ T9019] loop1: detected capacity change from 0 to 512 [ 423.834492][ T9019] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 423.854996][ T9019] syz.1.841: attempt to access beyond end of device [ 423.854996][ T9019] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 423.875011][ T9019] EXT4-fs (loop1): couldn't read superblock of external journal [ 424.080115][ T9023] syz.1.841 (9023): drop_caches: 2 [ 426.955114][ T9044] fuse: Unknown parameter 'group_i00000000000000000000' [ 427.975487][ T9045] loop2: detected capacity change from 0 to 32768 [ 430.948709][ T9071] loop2: detected capacity change from 0 to 512 [ 431.019636][ T9071] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 431.047231][ T9071] syz.2.854: attempt to access beyond end of device [ 431.047231][ T9071] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 431.072240][ T9071] EXT4-fs (loop2): couldn't read superblock of external journal [ 431.103525][ T9076] loop3: detected capacity change from 0 to 128 [ 431.159024][ T7250] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.647293][ T9085] syz.3.855: attempt to access beyond end of device [ 431.647293][ T9085] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 432.498562][ T9080] syz.2.854 (9080): drop_caches: 2 [ 434.835531][ T9113] ubi: mtd0 is already attached to ubi31 [ 436.346137][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 436.455059][ T9122] loop3: detected capacity change from 0 to 512 [ 436.506766][ T9122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 436.535030][ T9122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.557352][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 436.563241][ T9122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.867: invalid indirect mapped block 4294967295 (level 1) [ 436.575488][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.591525][ T9122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.867: invalid indirect mapped block 4294967295 (level 1) [ 436.612879][ T9122] EXT4-fs (loop3): 2 truncates cleaned up [ 436.616255][ T8] usb 2-1: config 0 descriptor?? [ 436.620280][ T9122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.647414][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 436.857395][ T8] gspca_sn9c20x: Write register 1000 failed -71 [ 436.864907][ T8] gspca_sn9c20x: Device initialization failed [ 436.885974][ T8] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71 [ 436.919888][ T8] usb 2-1: USB disconnect, device number 15 [ 437.365356][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.492036][ T9143] loop3: detected capacity change from 0 to 128 [ 438.075105][ T5881] Process accounting resumed [ 438.086875][ T5881] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 438.294702][ T5881] FAT-fs (loop3): Filesystem has been set read-only [ 439.626338][ T9174] tap0: tun_chr_ioctl cmd 1074025677 [ 439.632830][ T9174] tap0: linktype set to 0 [ 440.410861][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.420910][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.439451][ T5799] Bluetooth: hci3: Malformed LE Event: 0x0d [ 440.680930][ T9178] netlink: 'syz.2.883': attribute type 12 has an invalid length. [ 440.716760][ T9185] netlink: 856 bytes leftover after parsing attributes in process `syz.0.885'. [ 442.900025][ T9206] loop0: detected capacity change from 0 to 128 [ 443.556898][ T5858] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 444.180585][ T5858] usb 2-1: config 0 has no interfaces? [ 444.276505][ T5858] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 444.305588][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.314481][ T5858] usb 2-1: Product: syz [ 444.319469][ T5858] usb 2-1: Manufacturer: syz [ 444.329675][ T5858] usb 2-1: SerialNumber: syz [ 444.386222][ T5858] usb 2-1: config 0 descriptor?? [ 444.872429][ T9204] veth0_macvtap: left promiscuous mode [ 445.054036][ T9204] veth0_macvtap: entered promiscuous mode [ 445.102965][ T5857] usb 2-1: USB disconnect, device number 16 [ 447.358749][ T9247] ubi: mtd0 is already attached to ubi31 [ 447.975291][ T9257] loop0: detected capacity change from 0 to 128 [ 449.166516][ T9264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'. [ 449.239415][ T9264] vlan2: entered promiscuous mode [ 449.244699][ T9264] bond0: entered promiscuous mode [ 449.275573][ T9264] bond_slave_0: entered promiscuous mode [ 449.295735][ T9264] bond_slave_1: entered promiscuous mode [ 449.618778][ T9267] CIFS: VFS: Malformed UNC in devname [ 450.265924][ T12] veth0_macvtap: left promiscuous mode [ 451.598419][ T9295] kAFS: No cell specified [ 452.487970][ T9297] loop2: detected capacity change from 0 to 2048 [ 453.844426][ T9301] loop1: detected capacity change from 0 to 32768 [ 454.162846][ T9297] loop2: p1 < > p3 [ 454.914348][ T9297] loop2: p3 size 134217728 extends beyond EOD, truncated [ 455.395249][ T9308] loop0: detected capacity change from 0 to 128 [ 458.338014][ T9346] loop2: detected capacity change from 0 to 1764 [ 460.275677][ T7250] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.637733][ T9355] loop2: detected capacity change from 0 to 2048 [ 460.757202][ T9355] loop2: p1 < > p3 [ 460.763831][ T9355] loop2: p3 size 134217728 extends beyond EOD, truncated [ 466.069588][ T9395] loop0: detected capacity change from 0 to 32768 [ 466.303274][ T9395] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.745654][ T9395] XFS (loop0): Ending clean mount [ 467.783514][ T9395] XFS (loop0): Quotacheck needed: Please wait. [ 467.875071][ T9395] XFS (loop0): Quotacheck: Done. [ 467.908111][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.938029][ T9431] overlayfs: failed to resolve './file2': -2 [ 467.986292][ T9430] loop2: detected capacity change from 0 to 256 [ 468.050974][ T9430] FAT-fs (loop2): Directory bread(block 64) failed [ 468.060940][ T9430] FAT-fs (loop2): Directory bread(block 65) failed [ 468.084341][ T9430] FAT-fs (loop2): Directory bread(block 66) failed [ 468.110787][ T9430] FAT-fs (loop2): Directory bread(block 67) failed [ 468.130166][ T9430] FAT-fs (loop2): Directory bread(block 68) failed [ 468.160168][ T9430] FAT-fs (loop2): Directory bread(block 69) failed [ 468.235462][ T9430] FAT-fs (loop2): Directory bread(block 70) failed [ 468.243807][ T9430] FAT-fs (loop2): Directory bread(block 71) failed [ 468.294389][ T9430] FAT-fs (loop2): Directory bread(block 72) failed [ 468.325289][ T9430] FAT-fs (loop2): Directory bread(block 73) failed [ 470.244498][ T9453] loop2: detected capacity change from 0 to 128 [ 471.558176][ T9456] syz.2.960: attempt to access beyond end of device [ 471.558176][ T9456] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 473.625978][ T9477] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 475.928151][ T9565] loop2: detected capacity change from 0 to 1024 [ 477.204774][ T5844] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 477.446444][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.475930][ T5844] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 477.517516][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 477.559185][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.641914][ T9582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.757140][ T5844] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 479.428111][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.442592][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.764927][ T9595] loop0: detected capacity change from 0 to 32768 [ 481.446614][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 485.812518][ T5844] usb 2-1: USB disconnect, device number 17 [ 488.042188][ T9648] loop2: detected capacity change from 0 to 2048 [ 488.106931][ T9648] loop2: p1 < > p3 [ 488.154220][ T9648] loop2: p3 size 134217728 extends beyond EOD, truncated [ 489.240722][ T9664] fuse: Bad value for 'user_id' [ 491.154301][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 492.026057][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1011'. [ 492.280651][ T9688] loop2: detected capacity change from 0 to 2048 [ 492.362681][ T9688] loop2: p1 < > p3 [ 492.374329][ T9702] fuse: Bad value for 'user_id' [ 492.396200][ T9688] loop2: p3 size 134217728 extends beyond EOD, truncated [ 497.745036][ T9740] fuse: Bad value for 'user_id' [ 498.022334][ T9727] loop0: detected capacity change from 0 to 131072 [ 498.064308][ T9727] F2FS-fs (loop0): Test dummy encryption mode enabled [ 498.081330][ T9727] F2FS-fs (loop0): invalid crc value [ 498.206856][ T9727] F2FS-fs (loop0): Found nat_bits in checkpoint [ 498.617895][ T9727] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 498.912261][ T9751] loop1: detected capacity change from 0 to 2048 [ 499.048999][ T9751] loop1: p1 < > p3 [ 499.201610][ T9751] loop1: p3 size 134217728 extends beyond EOD, truncated [ 499.237790][ T5161] loop1: p1 < > p3 [ 499.256602][ T5161] loop1: p3 size 134217728 extends beyond EOD, truncated [ 499.616950][ T9768] overlayfs: failed to clone upperpath [ 500.609633][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 500.619203][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 500.877013][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 500.888445][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 501.346579][ T9777] CIFS: VFS: Malformed UNC in devname [ 501.556368][ T9782] fuse: Bad value for 'fd' [ 501.852344][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.859696][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.183067][ T9800] loop2: detected capacity change from 0 to 2048 [ 503.760166][ T9800] loop2: p1 < > p3 [ 503.813184][ T9800] loop2: p3 size 134217728 extends beyond EOD, truncated [ 504.601568][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 504.605059][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 505.377386][ T9833] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1047'. [ 506.554678][ T9846] netlink: 'syz.3.1049': attribute type 5 has an invalid length. [ 507.684555][ T9850] loop1: detected capacity change from 0 to 256 [ 509.180791][ T9870] CIFS: VFS: Malformed UNC in devname [ 512.986292][ T9895] loop1: detected capacity change from 0 to 32768 [ 515.929657][ T9914] CIFS: VFS: Malformed UNC in devname [ 516.327672][ T9927] loop2: detected capacity change from 0 to 128 [ 517.642721][ T9931] syz.2.1072: attempt to access beyond end of device [ 517.642721][ T9931] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 520.583824][ T9955] loop2: detected capacity change from 0 to 2048 [ 520.636345][ T9955] loop2: p1 < > p3 [ 520.651577][ T9955] loop2: p3 size 134217728 extends beyond EOD, truncated [ 521.157663][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 524.772147][ T9977] loop2: detected capacity change from 0 to 32768 [ 526.038400][ T9995] loop1: detected capacity change from 0 to 2048 [ 526.075144][ T9995] loop1: p1 < > p3 [ 526.088906][ T9995] loop1: p3 size 134217728 extends beyond EOD, truncated [ 526.159310][T10003] fuse: Invalid rootmode [ 526.447236][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 526.455730][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 528.489992][T10033] fuse: Invalid rootmode [ 529.108367][T10042] loop1: detected capacity change from 0 to 256 [ 529.159201][T10042] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.249901][T10045] loop2: detected capacity change from 0 to 2048 [ 529.333087][T10045] loop2: p1 < > p3 [ 529.348624][T10045] loop2: p3 size 134217728 extends beyond EOD, truncated [ 532.228841][ T28] audit: type=1800 audit(1751934645.919:66): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="bus" dev="ramfs" ino=24273 res=0 errno=0 [ 532.393583][T10075] fuse: Invalid rootmode [ 532.820488][T10086] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 536.160378][T10093] loop1: detected capacity change from 0 to 32768 [ 537.425591][T10116] fuse: Bad value for 'rootmode' [ 540.462827][T10121] loop1: detected capacity change from 0 to 32768 [ 540.618885][T10121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1129 (10121) [ 540.715741][T10150] CIFS: VFS: Malformed UNC in devname [ 540.761729][T10121] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 540.791217][T10121] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 540.825564][T10121] BTRFS info (device loop1): turning on sync discard [ 540.861591][T10121] BTRFS info (device loop1): disabling tree log [ 540.898574][T10121] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 540.948736][T10121] BTRFS info (device loop1): trying to use backup root at mount time [ 540.988974][T10121] BTRFS info (device loop1): enabling auto defrag [ 541.007756][T10121] BTRFS info (device loop1): max_inline at 0 [ 541.015215][T10121] BTRFS info (device loop1): using free space tree [ 541.119776][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 541.120540][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 541.136465][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 541.147495][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 541.159188][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 541.169861][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 541.182323][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 541.197107][T10121] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 541.257434][T10121] BTRFS error (device loop1): open_ctree failed: -12 [ 541.403271][ T7250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (7250) [ 542.938943][T10188] loop1: detected capacity change from 0 to 2048 [ 543.013025][T10188] loop1: p1 < > p3 [ 543.027681][T10188] loop1: p3 size 134217728 extends beyond EOD, truncated [ 543.091208][ T5161] loop1: p1 < > p3 [ 543.152680][ T5161] loop1: p3 size 134217728 extends beyond EOD, truncated [ 545.139523][T10210] random: crng reseeded on system resumption [ 546.945008][T10222] CIFS: VFS: Malformed UNC in devname [ 551.330497][T10274] CIFS: VFS: Malformed UNC in devname [ 553.489001][T10279] loop2: detected capacity change from 0 to 32768 [ 553.630585][T10279] JBD2: Ignoring recovery information on journal [ 553.854952][T10279] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 554.888552][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 555.543157][T10311] CIFS: VFS: Malformed UNC in devname [ 557.221912][T10316] loop1: detected capacity change from 0 to 32768 [ 557.584628][T10326] loop0: detected capacity change from 0 to 2048 [ 557.645017][T10326] loop0: p1 < > p3 [ 557.652655][T10326] loop0: p3 size 134217728 extends beyond EOD, truncated [ 559.449671][ T5881] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 559.670199][T10350] CIFS: VFS: Malformed UNC in devname [ 560.689858][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 560.702975][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 560.801745][T10365] ubi: mtd0 is already attached to ubi31 [ 560.845224][T10365] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 561.760728][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 561.774123][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.794688][ T5881] usb 3-1: config 0 descriptor?? [ 561.824452][ T5881] usb 3-1: can't set config #0, error -71 [ 561.885389][ T5881] usb 3-1: USB disconnect, device number 8 [ 561.973553][T10370] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 562.193704][T10378] fuse: Unknown parameter 'user_i00000000000000000000' [ 563.320373][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.327344][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.037427][T10384] loop1: detected capacity change from 0 to 32768 [ 564.777096][T10407] fuse: Unknown parameter 'user_i00000000000000000000' [ 565.431510][T10420] loop2: detected capacity change from 0 to 4096 [ 565.439045][T10420] ntfs3: Unknown parameter '00000000000000000000' [ 565.484536][ T7250] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 565.863041][T10427] loop2: detected capacity change from 0 to 256 [ 565.919154][T10427] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x364b98da, utbl_chksum : 0xe619d30d) [ 566.274031][ T7250] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 567.446264][T10439] fuse: Unknown parameter 'user_i00000000000000000000' [ 570.879503][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 571.266291][T10486] loop0: detected capacity change from 0 to 128 [ 571.591883][T10490] syz.0.1235: attempt to access beyond end of device [ 571.591883][T10490] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 572.201889][ T5814] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 572.399279][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 572.407053][ T5814] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.428794][ T5814] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 572.471669][ T5814] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 572.501585][ T5814] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 572.545056][ T5814] usb 2-1: config 1 interface 0 has no altsetting 0 [ 572.709431][ T5814] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.719364][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 572.728587][ T5814] usb 2-1: SerialNumber: syz [ 572.752011][T10498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 572.759735][T10498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.306716][ T5814] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 573.642743][ T5814] usb 2-1: USB disconnect, device number 18 [ 579.096830][T10580] fuse: Unknown parameter 'user_id00000000000000000000' [ 579.288975][T10582] CIFS: VFS: Malformed UNC in devname [ 582.936990][T10620] fuse: Bad value for 'fd' [ 584.687296][T10640] syz.2.1279 (10640): drop_caches: 2 [ 584.765675][T10640] syz.2.1279 (10640): drop_caches: 2 [ 586.514938][T10654] fuse: Bad value for 'fd' [ 586.651353][T10656] loop0: detected capacity change from 0 to 64 [ 587.061818][T10648] loop1: detected capacity change from 0 to 32768 [ 588.233570][T10667] CIFS: VFS: Malformed UNC in devname [ 588.989423][T10676] fuse: Bad value for 'fd' [ 590.229566][T10690] loop0: detected capacity change from 0 to 128 [ 590.340323][T10690] zonefs (loop0) ERROR: Not a zoned block device [ 591.185372][T10703] ubi: mtd0 is already attached to ubi31 [ 591.230888][T10703] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 594.386348][T10714] CIFS: VFS: Malformed UNC in devname [ 595.016671][T10722] fuse: Unknown parameter '0x0000000000000003' [ 595.240202][T10729] loop1: detected capacity change from 0 to 4096 [ 595.247272][T10729] ntfs3: Unknown parameter '00000000000000000000' [ 595.464157][ T7324] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 596.020995][T10734] loop1: detected capacity change from 0 to 256 [ 596.035189][T10734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x364b98da, utbl_chksum : 0xe619d30d) [ 596.906993][T10746] CIFS: VFS: Malformed UNC in devname [ 598.413060][T10763] fuse: Unknown parameter '0x0000000000000003' [ 599.021632][T10769] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 599.818925][T10771] loop0: detected capacity change from 0 to 4096 [ 599.828082][T10771] ntfs3: Unknown parameter '00000000000000000000' [ 599.862526][ T7250] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.355789][T10777] loop0: detected capacity change from 0 to 256 [ 600.845459][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.110696][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.121080][T10777] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x364b98da, utbl_chksum : 0xe619d30d) [ 601.308522][T10782] input: syz1 as /devices/virtual/input/input8 [ 602.772217][T10788] CIFS: VFS: Malformed UNC in devname [ 603.316045][T10794] fuse: Unknown parameter '0x0000000000000003' [ 603.502787][T10797] loop0: detected capacity change from 0 to 128 [ 604.640574][T10808] syz.0.1326: attempt to access beyond end of device [ 604.640574][T10808] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 605.279284][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 606.453797][T10819] loop0: detected capacity change from 0 to 128 [ 607.351650][T10826] syz.0.1338: attempt to access beyond end of device [ 607.351650][T10826] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 609.363140][T10830] CIFS: VFS: Malformed UNC in devname [ 609.804768][T10834] fuse: Unknown parameter '0x0000000000000003' [ 609.904957][T10837] kAFS: No cell specified [ 612.877357][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 612.893370][T10862] loop2: detected capacity change from 0 to 128 [ 613.322764][T10867] syz.2.1343: attempt to access beyond end of device [ 613.322764][T10867] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 613.411565][T10866] syz.0.1342 (10866): drop_caches: 2 [ 613.423788][T10866] syz.0.1342 (10866): drop_caches: 2 [ 615.392846][T10877] fuse: Unknown parameter '0xffffffffffffffff' [ 615.450571][T10873] CIFS: VFS: Malformed UNC in devname [ 616.185309][T10881] loop0: detected capacity change from 0 to 4096 [ 616.497986][T10888] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.519620][T10881] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 616.547865][T10881] NILFS (loop0): mounting fs with errors [ 617.069372][T10891] loop2: detected capacity change from 0 to 2048 [ 617.118040][T10891] EXT4-fs: Ignoring removed nobh option [ 617.220299][T10891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.253367][T10891] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.469830][T10891] fs-verity: sha512 using implementation "sha512-avx2" [ 617.652017][T10903] loop1: detected capacity change from 0 to 128 [ 618.034428][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.517672][T10912] syz.1.1354: attempt to access beyond end of device [ 618.517672][T10912] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 619.032928][T10918] loop2: detected capacity change from 0 to 256 [ 619.093322][T10918] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x364b98da, utbl_chksum : 0xe619d30d) [ 619.400244][T10927] hugetlbfs: syz.1.1359 (10927): Using mlock ulimits for SHM_HUGETLB is obsolete [ 620.487764][T10939] ubi: mtd0 is already attached to ubi31 [ 621.327763][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 623.356465][T10844] Bluetooth: hci4: command 0x1003 tx timeout [ 623.364937][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 624.720211][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.726835][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.384973][T10983] loop2: detected capacity change from 0 to 256 [ 626.480034][T10983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x364b98da, utbl_chksum : 0xe619d30d) [ 633.156865][T11023] loop1: detected capacity change from 0 to 32768 [ 634.411506][T11023] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop1": -EINTR [ 639.734203][T11084] CIFS: VFS: Malformed UNC in devname [ 640.022029][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 640.557168][T11096] vlan3: entered promiscuous mode [ 640.574452][T11096] team0: entered promiscuous mode [ 640.720777][T11096] team_slave_0: entered promiscuous mode [ 640.727033][T11096] team_slave_1: entered promiscuous mode [ 640.752719][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 641.021362][T11107] x_tables: unsorted underflow at hook 4 [ 641.269435][T11112] loop2: detected capacity change from 0 to 16 [ 641.284048][T11112] erofs: (device loop2): mounted with root inode @ nid 36. [ 641.368630][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 642.484795][T11120] CIFS: VFS: Malformed UNC in devname [ 643.132132][T11127] hub 9-0:1.0: USB hub found [ 643.145930][T11127] hub 9-0:1.0: 1 port detected [ 645.751079][T11159] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 647.266419][T11175] loop2: detected capacity change from 0 to 32768 [ 647.312620][T11175] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.323298][T11175] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 647.333665][T11175] BTRFS info (device loop2): setting nodatacow, compression disabled [ 647.342193][T11175] BTRFS info (device loop2): max_inline at 0 [ 647.348219][T11175] BTRFS info (device loop2): enabling disk space caching [ 647.355299][T11175] BTRFS info (device loop2): turning off barriers [ 647.361882][T11175] BTRFS info (device loop2): turning on flush-on-commit [ 647.369376][T11175] BTRFS info (device loop2): doing ref verification [ 647.376039][T11175] BTRFS info (device loop2): force clearing of disk cache [ 647.383439][T11175] BTRFS info (device loop2): enabling ssd optimizations [ 647.391314][T11175] BTRFS info (device loop2): max_inline at 4096 [ 647.397755][T11175] BTRFS info (device loop2): disk space caching is enabled [ 647.505904][T11175] BTRFS info (device loop2): auto enabling async discard [ 647.519503][T11175] BTRFS info (device loop2): rebuilding free space tree [ 647.577350][T11181] CIFS: VFS: Malformed UNC in devname [ 647.598462][T11175] BTRFS info (device loop2): disabling free space tree [ 647.605477][T11175] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 647.615630][T11175] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 647.812611][ T28] audit: type=1800 audit(1751934761.496:67): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1434" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 649.507091][ T5792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 649.543665][T11210] loop1: detected capacity change from 0 to 128 [ 650.330079][T11216] syz.1.1441: attempt to access beyond end of device [ 650.330079][T11216] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 651.329907][T11223] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 652.892430][T11240] 9pnet_fd: Insufficient options for proto=fd [ 653.048828][T11248] loop0: detected capacity change from 0 to 1024 [ 654.169390][ T9536] hfsplus: b-tree write err: -5, ino 8 [ 654.382768][T11257] CIFS: VFS: Malformed UNC in devname [ 655.063712][T11269] loop2: detected capacity change from 0 to 512 [ 655.095533][T11269] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 655.115507][T11269] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 655.140812][T11269] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 655.181349][T11269] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 655.211587][T11269] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 655.240511][T11269] EXT4-fs (loop2): orphan cleanup on readonly fs [ 655.259821][T11269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1456: bg 0: block 34: padding at end of block bitmap is not set [ 655.286624][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 655.286715][T10844] Bluetooth: hci4: command 0x1003 tx timeout [ 655.308128][T11269] Quota error (device loop2): write_blk: dquota write failed [ 655.337741][T11269] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 655.359098][T11269] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1456: Failed to acquire dquot type 1 [ 655.445165][T11269] EXT4-fs (loop2): 1 truncate cleaned up [ 655.457547][T11269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.588831][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.413094][T11284] loop2: detected capacity change from 0 to 2048 [ 656.443220][T11284] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 656.458180][T11284] UDF-fs: Scanning with blocksize 512 failed [ 656.561744][T11284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.570652][T11302] loop1: detected capacity change from 0 to 256 [ 657.605947][T11283] UDF-fs: error (device loop2): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 657.627721][T11302] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda2184db, utbl_chksum : 0xe619d30d) [ 657.805580][ T9522] kworker/u4:14: attempt to access beyond end of device [ 657.805580][ T9522] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 657.912612][ T9522] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 658.069505][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.069505][ T9522] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 658.261673][ T9522] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 658.377443][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.377443][ T9522] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 658.444495][ T9522] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 658.509567][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.509567][ T9522] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 658.523617][ T9522] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 658.533016][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.533016][ T9522] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 658.546848][ T9522] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 658.559686][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.559686][ T9522] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 658.573412][ T9522] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 658.582225][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.582225][ T9522] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 658.597524][ T9522] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 658.606616][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.606616][ T9522] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 658.620902][ T9522] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 658.630273][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.630273][ T9522] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 658.643944][ T9522] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 658.652767][ T9522] kworker/u4:14: attempt to access beyond end of device [ 658.652767][ T9522] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 658.666480][ T9522] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 660.369722][T11324] CIFS: VFS: Malformed UNC in devname [ 661.052956][T11341] loop1: detected capacity change from 0 to 1024 [ 661.143180][ T28] audit: type=1326 audit(1751934774.836:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.1.1482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd17f38e929 code=0x0 [ 661.920594][ T9533] hfsplus: bad catalog file entry [ 662.346230][T11356] loop1: detected capacity change from 0 to 32768 [ 662.376453][T11356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1487 (11356) [ 662.400497][T11356] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 662.410833][T11356] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 662.419590][T11356] BTRFS info (device loop1): setting nodatacow, compression disabled [ 662.427807][T11356] BTRFS info (device loop1): max_inline at 0 [ 662.433779][T11356] BTRFS info (device loop1): enabling disk space caching [ 662.440888][T11356] BTRFS info (device loop1): turning off barriers [ 662.447441][T11356] BTRFS info (device loop1): turning on flush-on-commit [ 662.454425][T11356] BTRFS info (device loop1): doing ref verification [ 662.461003][T11356] BTRFS info (device loop1): force clearing of disk cache [ 662.468213][T11356] BTRFS info (device loop1): enabling ssd optimizations [ 662.475206][T11356] BTRFS info (device loop1): max_inline at 4096 [ 662.481436][T11356] BTRFS info (device loop1): disk space caching is enabled [ 662.604169][T11356] BTRFS info (device loop1): auto enabling async discard [ 662.613624][T11356] BTRFS info (device loop1): rebuilding free space tree [ 662.651936][T11356] BTRFS info (device loop1): disabling free space tree [ 662.660248][T11356] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 662.670011][T11356] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 663.198396][T11376] CIFS: VFS: Malformed UNC in devname [ 663.853595][ T28] audit: type=1800 audit(1751934777.547:69): pid=11377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1487" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 664.547459][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 664.833799][T11393] loop0: detected capacity change from 0 to 2048 [ 664.918385][T11395] loop2: detected capacity change from 0 to 512 [ 664.936005][T11393] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 664.943734][T11393] UDF-fs: Scanning with blocksize 512 failed [ 664.999419][T11393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.021072][T11395] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.174140][T11395] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1496: invalid indirect mapped block 10 (level 1) [ 665.321374][T11395] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1496: invalid indirect mapped block 8 (level 1) [ 665.398323][T11395] EXT4-fs (loop2): 1 truncate cleaned up [ 665.420698][T11395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.543393][ T5792] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 665.568028][ T5792] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 665.607750][T11392] UDF-fs: error (device loop0): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 665.758511][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.758511][ T12] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 665.779093][ T12] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 665.788323][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.788323][ T12] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 665.808106][ T12] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 665.818607][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.818607][ T12] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 665.849194][ T12] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 665.859241][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.859241][ T12] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 665.878899][ T12] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 665.889329][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.889329][ T12] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 665.909384][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.910154][ T12] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 665.935199][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.935199][ T12] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 665.952974][ T12] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 665.967068][ T12] kworker/u4:1: attempt to access beyond end of device [ 665.967068][ T12] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 665.982128][ T12] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 666.003173][ T9515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.119954][ T12] kworker/u4:1: attempt to access beyond end of device [ 666.119954][ T12] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 666.144428][ T12] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 666.153172][ T12] kworker/u4:1: attempt to access beyond end of device [ 666.153172][ T12] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 666.213478][ T12] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 666.232860][ T12] kworker/u4:1: attempt to access beyond end of device [ 666.232860][ T12] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 666.292056][ T12] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 666.357434][ T9515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.504123][ T9515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.645255][ T9515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.021164][T11427] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 667.932492][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 667.960811][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 667.973291][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 667.984920][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 667.993494][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 668.002286][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.497538][T11435] chnl_net:caif_netlink_parms(): no params data found [ 668.714094][T11277] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 668.714594][ T5799] Bluetooth: hci3: command 0x1003 tx timeout [ 668.787198][T11457] loop1: detected capacity change from 0 to 512 [ 668.910095][T11457] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 669.184161][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.247773][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.256696][T11435] bridge_slave_0: entered allmulticast mode [ 669.265986][T11435] bridge_slave_0: entered promiscuous mode [ 669.765045][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.812560][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.862529][T11435] bridge_slave_1: entered allmulticast mode [ 669.917485][T11435] bridge_slave_1: entered promiscuous mode [ 670.214715][T11277] Bluetooth: hci4: command tx timeout [ 672.353175][T11277] Bluetooth: hci4: command tx timeout [ 672.364831][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.372452][T11483] CIFS: VFS: Malformed UNC in devname [ 672.627864][T11462] loop0: detected capacity change from 0 to 32768 [ 672.654805][T11462] read_mapping_page failed! [ 672.684633][T11482] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 672.763267][T11462] jfs_mount: Failed to read AGGREGATE_I [ 672.813252][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.857556][T11462] Mount JFS Failure: -5 [ 672.861779][T11462] jfs_mount failed w/return code = -5 [ 673.219282][T11499] input: syz0 as /devices/virtual/input/input9 [ 673.269433][T11435] team0: Port device team_slave_0 added [ 673.272827][T11435] team0: Port device team_slave_1 added [ 673.387253][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.387272][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.387295][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.511502][ T9515] hsr_slave_0: left promiscuous mode [ 673.514494][ T9515] hsr_slave_1: left promiscuous mode [ 673.517698][ T9515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.517800][ T9515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.542094][ T9515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.542127][ T9515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.543025][ T9515] bridge_slave_1: left allmulticast mode [ 673.543047][ T9515] bridge_slave_1: left promiscuous mode [ 673.547025][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.782716][ T9515] bridge_slave_0: left allmulticast mode [ 673.818121][ T9515] bridge_slave_0: left promiscuous mode [ 674.234187][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.309722][ T9515] veth1_macvtap: left promiscuous mode [ 674.316857][ T9515] veth0_macvtap: left promiscuous mode [ 674.322879][ T9515] veth1_vlan: left promiscuous mode [ 674.329983][ T9515] veth0_vlan: left promiscuous mode [ 674.393499][T11277] Bluetooth: hci4: command tx timeout [ 675.441026][ T28] audit: type=1326 audit(1751934789.127:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11526 comm="syz.0.1531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e218e929 code=0x0 [ 676.107700][ T9515] team0 (unregistering): Port device team_slave_1 removed [ 676.180605][ T9515] team0 (unregistering): Port device team_slave_0 removed [ 676.244862][ T9515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.345724][ T9515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.469968][T11536] input: syz0 as /devices/virtual/input/input10 [ 676.473506][T11277] Bluetooth: hci4: command tx timeout [ 676.802196][T11545] input: syz0 as /devices/virtual/input/input11 [ 677.428339][ T9515] bond0 (unregistering): Released all slaves [ 677.517167][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.524636][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.550898][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.578947][T11525] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 677.706688][T11435] hsr_slave_0: entered promiscuous mode [ 677.737983][T11435] hsr_slave_1: entered promiscuous mode [ 677.745322][T11435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.754877][T11435] Cannot create hsr debugfs directory [ 678.110974][ T5814] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 679.550094][T11560] CIFS: VFS: Malformed UNC in devname [ 679.683236][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 679.713780][ T5814] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 679.738948][ T5814] usb 2-1: config 0 has no interface number 0 [ 679.757783][ T5814] usb 2-1: config 0 interface 184 has no altsetting 0 [ 679.805393][ T5814] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 679.815340][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.823574][ T5814] usb 2-1: Product: syz [ 679.827800][ T5814] usb 2-1: Manufacturer: syz [ 679.832409][ T5814] usb 2-1: SerialNumber: syz [ 679.844745][ T5814] usb 2-1: config 0 descriptor?? [ 679.864741][ T5814] smsc75xx v1.0.0 [ 680.339753][T11574] loop0: detected capacity change from 0 to 1764 [ 680.480541][T11435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 680.490346][ T5814] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 680.520239][ T5814] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 680.549152][T11435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 680.583157][T11579] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 680.617989][T11435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 680.631310][T11435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 681.020500][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.051264][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.091122][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.099625][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.302379][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.309755][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.563251][T11609] CIFS: VFS: Malformed UNC in devname [ 683.779440][ T5814] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 683.862078][ T5814] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 683.931018][ T5814] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 684.023050][ T5814] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 684.063125][ T5814] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 684.116277][ T5814] usb 2-1: USB disconnect, device number 19 [ 685.104515][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.200628][T11635] input: syz0 as /devices/virtual/input/input12 [ 685.437807][T11646] loop0: detected capacity change from 0 to 512 [ 685.482972][T11646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 685.547304][T11652] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 685.571989][T11646] EXT4-fs (loop0): 1 truncate cleaned up [ 685.583804][T11646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.747172][T11435] veth0_vlan: entered promiscuous mode [ 685.762883][ T5844] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 685.771247][T11435] veth1_vlan: entered promiscuous mode [ 685.810465][T11435] veth0_macvtap: entered promiscuous mode [ 685.821820][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.837485][T11435] veth1_macvtap: entered promiscuous mode [ 685.930685][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.962805][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 685.970622][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.987985][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.009851][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.022870][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.022888][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.047732][ T5844] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 686.055406][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.069035][T11663] loop0: detected capacity change from 0 to 2048 [ 686.077274][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.098201][ T5844] usb 2-1: config 0 descriptor?? [ 686.107062][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.132371][T11663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.134436][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.168994][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.176729][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.178239][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.194619][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.207350][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.230536][T11435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.255214][T11435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.269749][T11435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.279579][T11435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.398049][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.433568][ T9507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.470789][ T9507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.545164][ T5844] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x5 [ 686.552274][ T5844] hid-rmi 0003:06CB:81A7.0005: item fetching failed at offset 9/11 [ 686.591304][ T9522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.612314][ T5844] hid-rmi 0003:06CB:81A7.0005: parse failed [ 686.631644][ T9522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.641898][ T5844] hid-rmi: probe of 0003:06CB:81A7.0005 failed with error -22 [ 686.754405][ T5844] usb 2-1: USB disconnect, device number 20 [ 688.612060][T11693] loop4: detected capacity change from 0 to 2048 [ 688.774028][T11693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.816629][T11709] loop1: detected capacity change from 0 to 512 [ 688.837843][T11709] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 689.050462][T11709] ------------[ cut here ]------------ [ 689.056809][T11709] WARNING: CPU: 0 PID: 11709 at fs/udf/truncate.c:224 udf_truncate_extents+0xd46/0xeb0 [ 689.066921][T11709] Modules linked in: [ 689.071058][T11709] CPU: 0 PID: 11709 Comm: syz.1.1575 Not tainted 6.6.96-syzkaller #0 [ 689.079227][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.089758][T11709] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 689.095938][T11709] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fa ef 8c fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 689.116252][T11709] RSP: 0018:ffffc90004d8f8e0 EFLAGS: 00010287 [ 689.123092][T11709] RAX: ffffffff82f8a666 RBX: 1ffff11003fd426f RCX: 0000000000080000 [ 689.131146][T11709] RDX: ffffc9000d432000 RSI: 00000000000111f9 RDI: 00000000000111fa [ 689.139646][T11709] RBP: ffffc90004d8fac0 R08: ffff88807a701e00 R09: 0000000000000002 [ 689.142429][T11699] loop0: detected capacity change from 0 to 8192 [ 689.147712][T11709] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 689.147777][T11709] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 689.147792][T11709] FS: 00007fd1801526c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 689.147811][T11709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.147826][T11709] CR2: 00007feb3ceb3f98 CR3: 000000002d3bb000 CR4: 00000000003526f0 [ 689.147844][T11709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 689.204043][T11709] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 689.212061][T11709] Call Trace: [ 689.215421][T11709] [ 689.218388][T11709] ? udf_discard_prealloc+0x570/0x570 [ 689.223867][T11709] ? udf_write_failed+0x178/0x1b0 [ 689.228916][T11709] ? __lock_acquire+0x7c80/0x7c80 [ 689.234241][T11709] ? __rwlock_init+0xf0/0x150 [ 689.239036][T11709] ? down_write+0x162/0x1f0 [ 689.243702][T11709] ? do_raw_spin_unlock+0x121/0x230 [ 689.248957][T11709] udf_write_failed+0x180/0x1b0 [ 689.253959][T11709] udf_write_begin+0x21f/0x430 [ 689.259533][T11709] generic_perform_write+0x2fb/0x5b0 [ 689.265033][T11709] ? generic_file_direct_write+0x3e0/0x3e0 [ 689.270871][T11709] ? __mnt_drop_write_file+0xc3/0x100 [ 689.276666][T11709] ? __generic_file_write_iter+0xf7/0x230 [ 689.282413][T11709] ? udf_file_write_iter+0x2b1/0x620 [ 689.287801][T11709] udf_file_write_iter+0x2c0/0x620 [ 689.293036][T11709] vfs_write+0x43b/0x940 [ 689.297410][T11709] ? file_end_write+0x250/0x250 [ 689.302562][T11709] ? __fget_files+0x44a/0x4d0 [ 689.306354][T11692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.307521][T11709] ? __fdget_pos+0x2a3/0x330 [ 689.321179][T11709] ? ksys_write+0x75/0x250 [ 689.325724][T11709] ksys_write+0x147/0x250 [ 689.330103][T11709] ? __ia32_sys_read+0x90/0x90 [ 689.334999][T11709] ? lockdep_hardirqs_on+0x98/0x150 [ 689.340386][T11709] do_syscall_64+0x55/0xb0 [ 689.344901][T11709] ? clear_bhb_loop+0x40/0x90 [ 689.349602][T11709] ? clear_bhb_loop+0x40/0x90 [ 689.354615][T11709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.360542][T11709] RIP: 0033:0x7fd17f38e929 [ 689.365053][T11709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.384807][T11709] RSP: 002b:00007fd180152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.393327][T11709] RAX: ffffffffffffffda RBX: 00007fd17f5b5fa0 RCX: 00007fd17f38e929 [ 689.401335][T11709] RDX: 0000000000001006 RSI: 0000200000001a40 RDI: 0000000000000004 [ 689.409715][T11709] RBP: 00007fd17f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 689.417924][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.426035][T11709] R13: 0000000000000000 R14: 00007fd17f5b5fa0 R15: 00007fff73e41368 [ 689.434292][T11709] [ 689.437356][T11709] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 689.444650][T11709] CPU: 0 PID: 11709 Comm: syz.1.1575 Not tainted 6.6.96-syzkaller #0 [ 689.452734][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.462815][T11709] Call Trace: [ 689.466118][T11709] [ 689.469067][T11709] dump_stack_lvl+0x16c/0x230 [ 689.473778][T11709] ? show_regs_print_info+0x20/0x20 [ 689.479012][T11709] ? load_image+0x3b0/0x3b0 [ 689.483557][T11709] panic+0x2c0/0x710 [ 689.487488][T11709] ? bpf_jit_dump+0xd0/0xd0 [ 689.492054][T11709] __warn+0x2e0/0x470 [ 689.496055][T11709] ? udf_truncate_extents+0xd46/0xeb0 [ 689.501446][T11709] ? udf_truncate_extents+0xd46/0xeb0 [ 689.506819][T11709] report_bug+0x2be/0x4f0 [ 689.511159][T11709] ? udf_truncate_extents+0xd46/0xeb0 [ 689.516529][T11709] ? udf_truncate_extents+0xd46/0xeb0 [ 689.521896][T11709] ? udf_truncate_extents+0xd48/0xeb0 [ 689.527263][T11709] handle_bug+0xcf/0x120 [ 689.531506][T11709] exc_invalid_op+0x1a/0x50 [ 689.536010][T11709] asm_exc_invalid_op+0x1a/0x20 [ 689.541302][T11709] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 689.547286][T11709] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fa ef 8c fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 689.566915][T11709] RSP: 0018:ffffc90004d8f8e0 EFLAGS: 00010287 [ 689.572980][T11709] RAX: ffffffff82f8a666 RBX: 1ffff11003fd426f RCX: 0000000000080000 [ 689.581060][T11709] RDX: ffffc9000d432000 RSI: 00000000000111f9 RDI: 00000000000111fa [ 689.589032][T11709] RBP: ffffc90004d8fac0 R08: ffff88807a701e00 R09: 0000000000000002 [ 689.597001][T11709] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 689.605084][T11709] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 689.613055][T11709] ? udf_truncate_extents+0xd46/0xeb0 [ 689.618464][T11709] ? udf_discard_prealloc+0x570/0x570 [ 689.623837][T11709] ? udf_write_failed+0x178/0x1b0 [ 689.628859][T11709] ? __lock_acquire+0x7c80/0x7c80 [ 689.633884][T11709] ? __rwlock_init+0xf0/0x150 [ 689.638560][T11709] ? down_write+0x162/0x1f0 [ 689.643071][T11709] ? do_raw_spin_unlock+0x121/0x230 [ 689.648448][T11709] udf_write_failed+0x180/0x1b0 [ 689.653300][T11709] udf_write_begin+0x21f/0x430 [ 689.658058][T11709] generic_perform_write+0x2fb/0x5b0 [ 689.663363][T11709] ? generic_file_direct_write+0x3e0/0x3e0 [ 689.669162][T11709] ? __mnt_drop_write_file+0xc3/0x100 [ 689.674628][T11709] ? __generic_file_write_iter+0xf7/0x230 [ 689.680348][T11709] ? udf_file_write_iter+0x2b1/0x620 [ 689.685825][T11709] udf_file_write_iter+0x2c0/0x620 [ 689.690956][T11709] vfs_write+0x43b/0x940 [ 689.695302][T11709] ? file_end_write+0x250/0x250 [ 689.700856][T11709] ? __fget_files+0x44a/0x4d0 [ 689.705547][T11709] ? __fdget_pos+0x2a3/0x330 [ 689.710139][T11709] ? ksys_write+0x75/0x250 [ 689.714566][T11709] ksys_write+0x147/0x250 [ 689.718910][T11709] ? __ia32_sys_read+0x90/0x90 [ 689.723696][T11709] ? lockdep_hardirqs_on+0x98/0x150 [ 689.728915][T11709] do_syscall_64+0x55/0xb0 [ 689.733359][T11709] ? clear_bhb_loop+0x40/0x90 [ 689.738041][T11709] ? clear_bhb_loop+0x40/0x90 [ 689.742723][T11709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.748617][T11709] RIP: 0033:0x7fd17f38e929 [ 689.753029][T11709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.772669][T11709] RSP: 002b:00007fd180152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.781083][T11709] RAX: ffffffffffffffda RBX: 00007fd17f5b5fa0 RCX: 00007fd17f38e929 [ 689.789050][T11709] RDX: 0000000000001006 RSI: 0000200000001a40 RDI: 0000000000000004 [ 689.797019][T11709] RBP: 00007fd17f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 689.804983][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.812944][T11709] R13: 0000000000000000 R14: 00007fd17f5b5fa0 R15: 00007fff73e41368 [ 689.820939][T11709] [ 689.824266][T11709] Kernel Offset: disabled [ 689.828676][T11709] Rebooting in 86400 seconds..