last executing test programs: 9m58.957949933s ago: executing program 3 (id=5129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) 9m58.74080167s ago: executing program 3 (id=5132): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 9m58.355369887s ago: executing program 3 (id=5136): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 9m58.108951221s ago: executing program 3 (id=5140): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 9m57.865075733s ago: executing program 3 (id=5142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}]}, 0x20}}, 0x0) 9m57.013177337s ago: executing program 3 (id=5147): unshare(0x28020480) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) 9m56.356246707s ago: executing program 32 (id=5147): unshare(0x28020480) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) 7m40.430884955s ago: executing program 5 (id=6753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a6663706", 0x2d) 7m40.144107394s ago: executing program 5 (id=6759): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1008e98, &(0x7f0000000000)={[{@i_version}]}, 0x6, 0x66d, &(0x7f0000000bc0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsivkEx4KEvSNOkFqtebOvBHgoW7EHEQ0OT1NDtD5oUbC00AQ8KCiJei/TiP9C79O5BEEG9eRaqSMWClq7Mzmyy2eyvpMluk/l8YHefmXk2z/Pd2SfzPLvz7ARQWrPZXRrxccTb60nEdNO2qcg3zhb5Xv3r8Y3slkSt9t1/JpEU6xr5k+LxRLEwHhF/vBTx6cructcePrq1WK3lnkScWb9978zaw0enV28v3ly+uXxn4ezXzp2f//rCuYWmivZhtP3qE8Xj5Svf+fwvfvLDr678qXo6iQtxbfTHS9ESx0GZjdl4W4TYvH4kIs5niTavy1FzDEIotUrxfsyazWdjOir1pdx0rP58qJUDDlWtElHrLumVATiqNG8oq0Y/oDG2728cfO2QeyWD8/JiPgDaHf9I8ZHDeH1sNPkqaRoZ5Z9tnDyA8rMy3jwef/rm8czT2PE5xOutvTNyAOV0srEZEZ9rF39Sr9vJeqRZ/OmOsX4SEfMRMVbU71vvUIekKX0Yn8N002f8lSz+5v2QRsSF4jFbf2mf5bd+rDXo+AEopxcXiwP5Rra0ffzL+h6N/k9s93+eNJ43tYevZLoZ9vGvc/+vcbwfr/d70pZ+WNZnudr+T+76BupvP7v8q07l5/2/maeNW1Z+oy84CC83I2Za4v9pFmzR/8niT9r0f7Ms1y/0V8a3//yPy522DTv+2rOIU23HP9u90izV5fvJMyur1eX5/L5tGb/7/Q9+26n89vF/cAiRtpft/8kO8Tft/7T1edlrcq/9n9xsXfH86rPbncqf6rn/07+PJfl4c6xY86PN9fX7CxFjyZUiS7F+cX39/tnu8eZ5Xtfqjwt5/J98qX373/H+b4lqovEvsw/3vnfrVadt+3n/N32Z/LbWZx06yeJf6r3/t9v/RGNrxC/7LOM/33/whU7b2se/1fYOc+gLAAAAAAAAx05a/w42See20mk6N5fPl/1MTKbVu2vrX165++DOUsQn9fMhR9NIk/opI9P5crKyWl1eKM6HbSyfbVn+SkR8FBG/rkzUl+du3K0uDTt4AAAAAAAAAAAAAAAAAAAAeE+cKOb/N65T/e9KPv8fKInev7K/6/oPwDHhKhtQXvX23+0Q/+Hg6gIMluM/lJf2D+Wl/UN5af9QXto/lJf2D+Wl/UN5Ze0/GXYlAAAAAICD9tEXX/w1iYiNb0zUb5mxYptJv3C8je4pd+XQ6gEMnhYN5bV16o/OPpROX/3//xY/Dnj41QGGoO3pf/XOQa1743/R48TBzXevGwAAAAAAAAAAAACQO/Vx5/n/e5sbDBw1+5r2l/i9YDgO3mH+v58OgCNu35f+GDvYegCDZ4wP9BrOj3fa0Gv+PwAAAAAAAAAAAABwYKbqtySdK+YCT0Wazs1FfCoiTsZosrJaXZ6PiA8j4i+V0Q+y5YVhVxoAAAAAAAAAAAAAAAAAAACOmbWHj24tVqvL95sT/9u1ZhiJdGBlNa6C2jtzrY88XRPfjD0+K5LBv/ITEfEevAGaEs+Ly83u+el/KN7nTZtGmvIkERvZ5qEHmCfi/ahGPTGs/0gAAAAAAAAAAAAAAAAAAFBeTXOPdzmV3c38Zgi1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDB2r7+f4/E0mT+hL4y70wMO0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Gj6fwAAAP//D9g2YA==") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000e40)=ANY=[]) 7m39.70695692s ago: executing program 5 (id=6764): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0x3c0, 0x10, 0x10000, 0x1, 0x14000000, 0x3cffd, 0xfffffffc, 0x2f00, 0x3, 0x3, 0x3, 0x10001, 0x400, 0x6, 0x13, 0x100, 0xffffffa3, 0x5, 0x7, 0x1, 0xa2, 0x2, 0x8f, 0x10040be, 0xaa14, 0xfffffffe, 0x20000008, 0x8000000, 0x7, 0x8, 0xb0f]}) 7m39.51611765s ago: executing program 5 (id=6769): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7m39.050539095s ago: executing program 5 (id=6777): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000063c0)={0x130, 0x0, r1, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0xa, 0x6, 0x0, r2, 0xc000, '\x00', 0x401, 0x8, 0xd64b, 0x0, {0x4002009, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x10000000040c, 0x72}, {0x4, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x7fff}}}, 0x130) 7m38.219724983s ago: executing program 5 (id=6787): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 7m37.943016292s ago: executing program 33 (id=6787): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 4m32.241171824s ago: executing program 2 (id=9003): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x5, 0x4) 4m31.954756066s ago: executing program 2 (id=9009): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 4m31.775653702s ago: executing program 2 (id=9013): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4m31.614447188s ago: executing program 2 (id=9017): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) 4m31.163400112s ago: executing program 2 (id=9022): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x407, 0x200000}, &(0x7f000009de80), 0x0) 4m29.703619331s ago: executing program 2 (id=9039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4804) 4m29.094130383s ago: executing program 34 (id=9039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4804) 3m45.033499426s ago: executing program 6 (id=9453): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 3m44.882493236s ago: executing program 6 (id=9456): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) 3m43.736355718s ago: executing program 6 (id=9465): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x3, 0x9fd, 0x84, 0x91}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 3m43.59379438s ago: executing program 6 (id=9467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 3m43.366104807s ago: executing program 6 (id=9471): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 3m43.159853812s ago: executing program 6 (id=9473): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,part=0x0000000\x000000o8859-6,\x00'/49], 0x1, 0x608, &(0x7f00000011c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 3m27.971531281s ago: executing program 35 (id=9473): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,part=0x0000000\x000000o8859-6,\x00'/49], 0x1, 0x608, &(0x7f00000011c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1m11.090038807s ago: executing program 7 (id=11073): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 1m10.89736187s ago: executing program 7 (id=11075): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0xc31, 0x2, 0x0) 1m10.75774167s ago: executing program 7 (id=11079): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x4, 0x11}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 1m10.608730561s ago: executing program 7 (id=11082): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@discard}, {@barrier}]}, 0x3, 0x481, &(0x7f00000004c0)="$eJzs3M1vG0UbAPBnN3Hy5m0hoZSvlo9AQVQIkqYt0AMHQCBxKAIJDnC0klCVpgU1QaJVJFIO5YQQEnfEkX+BE1wQ4oTEFe6oUoVyacvJaL27ie04bt3acYt/P8n1zH5k5vHu2M/u2A1gaE1n/yQRuyPij4iYzKvNG0znT1fXV+evra/OJ1GrvfN3Ut/uyvrqfLlpud+uxkoksb9Nu8vnzp+qLi0tni3qsyunP55dPnf+uZOnqycWTyyeOXzs2NEjcy++cPj5W4xwz1v5c1rU33j/6zePf9kUf0scPTLdaeVTtVqPmxusuxrKowPsB90ZKY5XpT7+J2Ok4ehNxuufb1Q+G1AHgb6p1Wq1XduvXqsB/2FJNNcNeRgW5Qd9ef1bPI83JgEv9zUDGazLr+QXQFncV4tHvmZ0445BpeX6tpemI+K9tX++zR7R8T5E0qceAADD5scs/3k2y3ZW57PcYzP/SOP+hu3uLuaGpiLinojYExH3xpnYGxH3RdS3fSAiHuyy/YZJknqaeWV9rCX/SS/ddHA3IMv/XirmtprzvzL7i6mReu1cXolK8sHJpcVDxWtyMCrjWX2uQxs/vfb7V9uta8z/skfWfpkLFv24NDrevM9CdaV68xE3u3whYt9ou/iTjZmALPN8KCL2tfsD6fXbOPnM9w9vt+768XfQg4mm2ncRT+fHfy1a4i8lnecnZ/8XS4uHZsuzYqtff7v49nbt31L8PZAd//+3Pf834p9KGudrl7tv4+KfX2w7tzpdKQpdnP9r1ZXqWPJuvTxWLPu0urJydi5iLDmed7px+eHNfct6uX0W/8ED7cf/nth8JfZHRHYSPxIRj0bEY8WxezwinoiIAx3i/+XVJz9sXTZRxn8bHP+Fro7/ZmEsmpekbbbJCiOnfv6hqdGpzWIR/7XO739H66WDxZIbef/b2ov2hVt9/QAAAOBOkEbE7kjSmY1yms7M5N/h35tPfWc+ObOQ/0ZgKippeadrsuF+6FxxWZ/XL0RE/tWCcv2RSOv3jb8ZmajXZ+Y/WloYaOTArm3Gf+avkUH3Dug7P9iC4WX8w/DqOP4rO9cPYOdtGf8dx/x4X/sC7Kw2n/8Tg+gHsPPa5f/+vx8YDi3j37QfDBH3/2F4Gf8wvIx/GErLE3H9H8lvFCoR0bqq/Es3sPvNFCYjuunh7VOIym3Rjb4VIu17E2P9PbX6VkjuwD5vKQzuPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCX/g0AAP//uvzMag==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m9.773019443s ago: executing program 7 (id=11087): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m9.160995995s ago: executing program 7 (id=11089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32], 0x22c}}, 0x0) 1m8.261097875s ago: executing program 36 (id=11089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32], 0x22c}}, 0x0) 9.390878162s ago: executing program 1 (id=11706): r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(r0, &(0x7f0000000340)={0x1, 0x6}, &(0x7f0000000380), 0x0) 9.129187681s ago: executing program 1 (id=11712): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 8.970633331s ago: executing program 1 (id=11714): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a", 0x23}, {&(0x7f0000000300)="6a6f8e5e60ad7da410840328c2db404298cd2a9bdbee1f998e", 0x19}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 8.667218122s ago: executing program 1 (id=11718): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000022ac0)={[{@sys_tz}, {@keep_last_dots}, {@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@time_offset={'time_offset', 0x3d, 0x8}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@discard}, {@zero_size_dir}, {@zero_size_dir}]}, 0x1, 0x1531, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x4c91, 0x0) 8.080026648s ago: executing program 1 (id=11724): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x10bb41) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) 7.697362814s ago: executing program 0 (id=11728): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xf, {"6852ad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4ed134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d558ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427bf6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769777c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dc2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec0300068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b67804cfa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a020000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) 7.632399312s ago: executing program 1 (id=11729): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f626172726965722c747970653de6c0539c2c6e6c733d63703933322c706172743d3078303030303030303030303030303030332c63726561746f723d84913b122c706172743d3078303030303030303030303030303030362c6769643d", @ANYRESOCT=0x0, @ANYBLOB], 0x1, 0x61b, &(0x7f0000000680)="$eJzs3c1vXFfdB/DvHY8dO4+e1G2TNqBKWI1UEBaJ7VEKZuOAEPKiQlVZsLYSR7EySSt7itwKIfO+YMOif0BZeINYIbGPVBasYNetl5WQ2HRliUXRvXPHmTqTyZi4ngl8PtG555x77j33nN998dyxIgf4n7W+mOaDFFlffGO3rB/st9oH+617vXKSc0kaSbObpbifFB8lN9JN+VK5su6ueNxxPthafevjTw8+6daadaq2bwzbbzR7dcpCkqk6P63+bj51f8XRDMuAXekFDsbts0fsnWT3p7xvgUlQJFNzA9bPJ+eTzNafA1I/HRpnPLxTd6KnHAAAAEy+fw1a+dxhDrObC2c/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHj2tKa6eZFMdbMqNXrlhRS9v/8/U69LXX6mPRj3AAAAAAAAAADgFHzlMIfZzYW6WqSofuf/alW7WC3/L+9mJ5vZztXsZiOddLKd5STzfR3N7G50OtvLI+y5MnDPlTOaMAAAAAAAAAA8y5qPbfl51o9+/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOhSKa6WZUu9srzaTSTzCaZKbfbS/7eK0+sP3SeuMmDMxkIAAAAjNdzhznMbi706p8V1Tv/S9V7/2zezf10spVO2tnMreq7gO5bf+Ngv9U+2G/dK9Oj/X7nnycaRtVjut89DD7y5WqLudzOVrXmam7m7bRzK41qz9Ll3ngGj+tn5ZiKtbW1v06vra2NOLJbdV7O/Hd1fmbODV79/9VyvorI9FFEluqxldF4fngkTnh2jh9pOY2jb34ujhjzyojHO1/n5Xx+fdYxH+p4JFb6rr6Xhkci+eqf//ijO+37d+/c3lmcnCkNM/34puORaPVF4uX/vkgMsVRF4tJRfT3fzw+zmIW8me1s5cfZSCebWcj3qtJGfT2Xy/nhkbrxudqbTxrJTH1euk/Rk43p1WrfC9nKD/J2bmUzr1f/VrKcb+Z6rme17wxfGuGub5zsrr/ytbowl+Q3dX7Mb0fr6rSVcX2+L679z9z5qq1/zcMovXD6z8bml+tCeYxf1PlkOB6J5b5IvDg8Er+vljvt+3e372y8M+LxXqvz8j761UT9lCivlxfKk1XVPn91lG0vDmxbrtouHrU1Hmm7dNT2pDt1pv4M92hPK1XbywPbWlXb5b62QZ+3AJh4579+fmbuH3N/m/tw7pdzd+bemP3uuW+de2Um03+Z/nZzaeq1xivFn/Jhfvrw/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjP7bz3/t2NdntzW2EsheZkDGMshekkp9BP7y8SjnE6sxl7ME+9MPy5sXcWDyfgC3Wtc++dazvvvf+NrXsbvZt6dWn1+uuta7e32ptL3eW4Rwl8ER7+0B/3SAAAAAAAAAAAAIBRncV/Jxj3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBn2/pimg9SZHnp6lJZP9hvtcvUKydFvWUzSSNJ8ZOk+Ci5kW7KfF93xbHup3qFD7ZW3/r404NPHvbV7G3fGLDfCe3VKQv1MRdOsb+bT91fcTTDMmBXeoGDcft3AAAA///6Xgjb") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80c000, 0x0, 0x1, 0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 7.054738406s ago: executing program 37 (id=11729): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f626172726965722c747970653de6c0539c2c6e6c733d63703933322c706172743d3078303030303030303030303030303030332c63726561746f723d84913b122c706172743d3078303030303030303030303030303030362c6769643d", @ANYRESOCT=0x0, @ANYBLOB], 0x1, 0x61b, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80c000, 0x0, 0x1, 0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 7.049289112s ago: executing program 0 (id=11731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x225, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x8, 0xc2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x28, {0x28, 0xe, "c706291d6cbcb6ee151807c9013e0fbdc09670e197f77a7f2c48bcb200083f406fd7efdccf8b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.908616853s ago: executing program 0 (id=11751): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000c80)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRES8], 0x3, 0x300, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) 3.627469785s ago: executing program 0 (id=11753): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffe, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.545335818s ago: executing program 9 (id=11755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xd4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 3.248249264s ago: executing program 9 (id=11757): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000b40)={0x0, 0x23, 0x37, {0x37, 0x30, "d0269c69d59d984dcce5238cdcd74ef82d71bc78e9d61a9f86c4d508a78d3f8b545de2ae05385622fbeee0356c662d3e03c207fd2a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.015443917s ago: executing program 8 (id=11760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)) 2.863279484s ago: executing program 8 (id=11762): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2.593565453s ago: executing program 8 (id=11766): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 2.410582192s ago: executing program 8 (id=11767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2.232343026s ago: executing program 8 (id=11768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.498529457s ago: executing program 8 (id=11769): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1.414007308s ago: executing program 9 (id=11770): r0 = io_uring_setup(0x1136, &(0x7f0000000240)={0x0, 0x9071, 0x10000, 0x0, 0x100025}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000002140)={0xa, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0x4, 0xa, 0x2, '\x00', 0x6c}, 0x1) 1.262250415s ago: executing program 9 (id=11772): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x1, 0x4) 1.119775811s ago: executing program 9 (id=11773): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) 960.359868ms ago: executing program 9 (id=11774): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 939.809639ms ago: executing program 4 (id=11775): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b=A|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 833.578129ms ago: executing program 4 (id=11776): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000160, 0x0, 0x0) 765.382563ms ago: executing program 4 (id=11777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 696.38139ms ago: executing program 4 (id=11778): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x81, 0xfffffffb}) r0 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000002040)=@known='security.apparmor\x00') 616.235665ms ago: executing program 4 (id=11779): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, 0x0) 240.888175ms ago: executing program 4 (id=11780): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1cff02, 0x0) 233.788417ms ago: executing program 0 (id=11781): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x3ff, {{0x202, 0x200000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f1, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) 0s ago: executing program 0 (id=11782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050326c07000000000000700000008000300", @ANYRES32], 0x1c}}, 0x24044080) kernel console output (not intermixed with test programs): t filesystem [ 896.846962][T31042] loop4: lost filesystem error report for type 5 error -117 [ 896.879695][T31042] EXT4-fs (loop4): 1 truncate cleaned up [ 896.946577][T31042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.946900][T31042] ext4 filesystem being mounted at /2148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.075097][T31051] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.10629: lblock 2 mapped to illegal pblock 2 (length 1) [ 897.076260][T31051] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 897.076496][T31051] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.10629: Invalid inode table block 1 in block_group 0 [ 897.076580][T31051] loop1: lost filesystem error report for type 5 error -117 [ 897.081690][T31051] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 897.085821][T31051] loop1: lost filesystem error report for type 5 error -117 [ 897.088298][T31051] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.10629: mark_inode_dirty error [ 897.092121][T31051] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 897.092206][T31051] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.10629: Failed to acquire dquot type 0 [ 897.092277][T31051] loop1: lost filesystem error report for type 5 error -117 [ 897.097417][ C0] EXT4-fs (loop1): error count since last fsck: 5 [ 897.097473][ C0] EXT4-fs (loop1): initial error at time 1787926125: ext4_map_blocks:790: inode 3: block 2 [ 897.097574][ C0] EXT4-fs (loop1): last error at time 1787926125: ext4_acquire_dquot:7069 [ 897.106118][T31051] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 897.106205][T31051] loop1: lost filesystem error report for type 5 error -117 [ 897.108739][T31051] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.10629: mark_inode_dirty error [ 897.111183][T31051] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 897.111429][T31051] EXT4-fs (loop1): 1 orphan inode deleted [ 897.140205][ T1014] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 897.141574][T31051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.151435][ T1014] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 897.151565][ T1014] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 897.313518][T31051] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.10629: Invalid inode table block 1 in block_group 0 [ 897.330137][T31051] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 897.396451][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.434341][ T31] audit: type=1326 audit(1787926125.928:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.8.10633" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff79eb9e159 code=0x0 [ 897.508450][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.520140][ T5619] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 897.534229][ T5619] loop1: lost filesystem error report for type 5 error -117 [ 897.534668][ T5619] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 897.534690][ T5619] loop1: lost filesystem error report for type 5 error -117 [ 897.534915][ T5619] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 897.544013][ T5619] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 897.544046][ T5619] loop1: lost filesystem error report for type 5 error -117 [ 897.766010][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10634'. [ 897.863976][T31066] loop7: detected capacity change from 0 to 2048 [ 897.939086][T31066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.096276][T26761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.470779][T31087] loop4: detected capacity change from 0 to 4096 [ 898.484811][T31087] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 898.601542][T31087] ntfs3(loop4): ino=1a, mi_enum_attr [ 898.601601][T31087] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 898.610148][T31087] ntfs3(loop4): ino=1a, mi_enum_attr [ 898.610221][T31087] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 898.738744][ T25] kernel read not supported for file /comedi2 (pid: 25 comm: kworker/1:0) [ 898.948856][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 898.968251][ T5726] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 899.054427][T31107] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 899.114394][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 899.122256][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 899.125083][ T5726] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 899.132822][ T5726] usb 9-1: config 0 interface 0 has no altsetting 0 [ 899.132927][ T5726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.156494][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.170362][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.170454][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.198782][ T5726] usb 9-1: config 0 descriptor?? [ 899.204095][ T9] usb 2-1: config 0 descriptor?? [ 899.665143][ T9] konepure 0003:1E7D:2DB4.0035: item fetching failed at offset 0/4 [ 899.677523][ T9] konepure 0003:1E7D:2DB4.0035: parse failed [ 899.677616][ T9] konepure 0003:1E7D:2DB4.0035: probe with driver konepure failed with error -22 [ 899.702778][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x1 [ 899.702950][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x5 [ 899.703048][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x6 [ 899.703142][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.703215][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.703287][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.703376][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.703455][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.703527][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.703601][ T5726] hid-led 0003:0FC5:B080.0034: unknown main item tag 0x0 [ 899.864102][ T5726] hid-led 0003:0FC5:B080.0034: probe with driver hid-led failed with error -71 [ 899.892509][ T5726] usb 9-1: USB disconnect, device number 7 [ 899.934886][ T25] usb 2-1: USB disconnect, device number 65 [ 900.029838][T31133] netlink: 'syz.0.10666': attribute type 1 has an invalid length. [ 900.139738][T31123] loop7: detected capacity change from 0 to 40427 [ 900.149663][T31123] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 900.157069][T31123] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 900.167783][T31123] F2FS-fs (loop7): Image doesn't support compression [ 900.175433][T31123] F2FS-fs (loop7): invalid crc value [ 900.259011][T31123] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 900.275133][T31123] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 900.283029][T31123] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 900.294097][T31123] F2FS-fs (loop7): Start checkpoint disabled! [ 900.331337][T31123] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 900.343186][T31123] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 900.343277][T31123] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 900.629063][ T12] kworker/u8:0: attempt to access beyond end of device [ 900.629063][ T12] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 900.629226][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.629332][ T12] Tainted: [L]=SOFTLOCKUP [ 900.629348][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.629434][ T12] Workqueue: writeback wb_workfn (flush-7:7) [ 900.629532][ T12] Call Trace: [ 900.629560][ T12] [ 900.629595][ T12] dump_stack_lvl+0xe8/0x150 [ 900.629687][ T12] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 900.629778][ T12] f2fs_write_end_bio+0x1211/0x16e0 [ 900.629868][ T12] ? blkg_put+0x22/0x240 [ 900.629998][ T12] __submit_merged_bio+0x258/0x6a0 [ 900.630076][ T12] ? rcu_is_watching+0x16/0xb0 [ 900.630168][ T12] __submit_merged_write_cond+0x3c9/0x4e0 [ 900.630276][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 900.630432][ T12] f2fs_write_data_pages+0x2a27/0x36f0 [ 900.630633][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 900.630796][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 900.630964][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 900.631144][ T12] ? __lock_acquire+0x6df/0x2e50 [ 900.631254][ T12] ? set_shrinker_bit+0x7c/0x350 [ 900.631337][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 900.631420][ T12] do_writepages+0x338/0x560 [ 900.631505][ T12] ? reacquire_held_locks+0x117/0x1a0 [ 900.631567][ T12] ? writeback_sb_inodes+0x450/0x1b00 [ 900.631659][ T12] __writeback_single_inode+0x136/0x1220 [ 900.631754][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 900.631858][ T12] writeback_sb_inodes+0x9de/0x1b00 [ 900.631930][ T12] ? __lock_acquire+0x6df/0x2e50 [ 900.632050][ T12] ? lock_acquire+0x115/0x350 [ 900.632159][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 900.632391][ T12] ? rcu_is_watching+0x16/0xb0 [ 900.632463][ T12] ? queue_io+0x2d3/0x470 [ 900.632556][ T12] wb_writeback+0x41c/0xad0 [ 900.632632][ T12] ? queue_io+0x1e1/0x470 [ 900.632737][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 900.632810][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 900.632947][ T12] wb_workfn+0x431/0x10f0 [ 900.633083][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 900.633155][ T12] ? rcu_is_watching+0x16/0xb0 [ 900.633230][ T12] ? trace_hrtimer_start+0x82/0x200 [ 900.633362][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 900.633499][ T12] ? lock_acquire+0x115/0x350 [ 900.633602][ T12] ? rcu_is_watching+0x16/0xb0 [ 900.633683][ T12] ? process_scheduled_works+0x97a/0x1630 [ 900.633766][ T12] process_scheduled_works+0xc3d/0x1630 [ 900.633953][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 900.634051][ T12] ? assign_work+0x3cf/0x5d0 [ 900.634133][ T12] worker_thread+0xa47/0xfb0 [ 900.634310][ T12] kthread+0x38b/0x480 [ 900.634370][ T12] ? __pfx_worker_thread+0x10/0x10 [ 900.634439][ T12] ? __pfx_kthread+0x10/0x10 [ 900.634506][ T12] ret_from_fork+0x514/0xb70 [ 900.634575][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 900.634629][ T12] ? __switch_to+0xc89/0x1420 [ 900.634728][ T12] ? __pfx_kthread+0x10/0x10 [ 900.634799][ T12] ret_from_fork_asm+0x1a/0x30 [ 900.634927][ T12] [ 900.675714][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 901.208177][T31148] loop4: detected capacity change from 0 to 512 [ 901.233013][T31148] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 901.314473][T31148] EXT4-fs (loop4): invalid journal inode [ 901.314700][T31148] EXT4-fs (loop4): can't get journal size [ 901.342607][T31148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 901.343118][T31148] System zones: 1-12, 13-13 [ 901.370566][T31148] EXT4-fs (loop4): 1 truncate cleaned up [ 901.396589][T31148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.457041][T31148] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 901.845326][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.090933][T31171] loop8: detected capacity change from 0 to 2048 [ 902.136669][T31171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.349972][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.445288][T31188] Bluetooth: hci0: unsupported parameter 5161 [ 902.445329][T31188] Bluetooth: hci0: unsupported parameter 8192 [ 902.445367][T31188] Bluetooth: hci0: unsupported parameter 5161 [ 902.445386][T31188] Bluetooth: hci0: unsupported parameter 8192 [ 902.603552][T31194] loop7: detected capacity change from 0 to 1024 [ 902.620313][T31194] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 903.157561][T31218] scsi_nl_rcv_msg: discarding partial message [ 903.406849][T31226] loop1: detected capacity change from 0 to 1024 [ 903.545356][T31226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.564094][T31213] loop8: detected capacity change from 0 to 32768 [ 903.613691][T31213] ialloc: diAlloc returned -5! [ 903.865519][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.515152][T31252] loop4: detected capacity change from 0 to 4096 [ 904.559101][T31252] NILFS (loop4): invalid segment: Checksum error in segment payload [ 904.559162][T31252] NILFS (loop4): trying rollback from an earlier position [ 904.721211][T31252] NILFS (loop4): recovery complete [ 904.734269][T31259] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 905.525978][T31280] loop7: detected capacity change from 0 to 2048 [ 905.896695][T31296] loop1: detected capacity change from 0 to 4096 [ 905.975027][T31296] ntfs3(loop1): Failed to load $Extend (-22). [ 905.976128][T31296] ntfs3(loop1): Failed to initialize $Extend. [ 906.024300][T31305] tmpfs: Cannot change global quota limit on remount [ 906.039505][T31307] syz_tun: entered allmulticast mode [ 906.045703][T31307] syz_tun: left allmulticast mode [ 906.240925][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 906.411650][ T10] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 906.431720][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.431768][ T10] usb 8-1: Product: syz [ 906.431801][ T10] usb 8-1: Manufacturer: syz [ 906.431823][ T10] usb 8-1: SerialNumber: syz [ 906.465258][ T10] usb 8-1: config 0 descriptor?? [ 906.476185][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 906.509246][T31319] loop1: detected capacity change from 0 to 1024 [ 906.531189][T31319] EXT4-fs: Ignoring removed bh option [ 906.531371][T31319] EXT4-fs: Ignoring removed bh option [ 906.548090][T31319] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 906.581163][T31319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.705466][ T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 906.705508][ T10] sq905c 8-1:0.0: Get version command failed [ 906.705604][ T10] sq905c 8-1:0.0: probe with driver sq905c failed with error -71 [ 906.753446][ T10] usb 8-1: USB disconnect, device number 5 [ 906.860595][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.998574][ T31] audit: type=1326 audit(1787926135.498:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31333 comm="syz.0.10757" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02f699e159 code=0x0 [ 907.109609][T31340] loop4: detected capacity change from 0 to 2048 [ 907.160887][T31344] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.739495][T31362] loop8: detected capacity change from 0 to 8 [ 908.293283][T31382] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 908.561772][T31364] loop4: detected capacity change from 0 to 32768 [ 908.620794][T31364] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 908.788680][ T5726] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 908.805347][ T5616] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 908.966197][T31404] loop8: detected capacity change from 0 to 512 [ 908.982979][ T5726] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 908.994409][T31376] loop7: detected capacity change from 0 to 32768 [ 908.995937][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 908.996100][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.031110][ T5726] usb 2-1: config 0 descriptor?? [ 909.032015][T31388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 909.092019][T31404] EXT4-fs (loop8): 1 truncate cleaned up [ 909.164945][T31404] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.474756][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.578867][ T5726] hid (null): global environment stack underflow [ 909.592200][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592258][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592293][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592326][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592359][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592390][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592422][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592454][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592486][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.592518][ T5726] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 909.668309][ T5726] asus 0003:0B05:1ABE.0036: unexpected long global item [ 909.670380][ T5726] asus 0003:0B05:1ABE.0036: Asus hid parse failed: -22 [ 909.670700][ T5726] asus 0003:0B05:1ABE.0036: probe with driver asus failed with error -22 [ 909.791079][ T25] usb 2-1: USB disconnect, device number 66 [ 909.834959][T31418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10793'. [ 909.942244][T31421] loop4: detected capacity change from 0 to 128 [ 909.966493][T31421] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 909.981592][T31421] ext4 filesystem being mounted at /2181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 910.029204][T31413] loop7: detected capacity change from 0 to 32768 [ 910.040028][T31413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10790 (31413) [ 910.066373][T31413] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 910.066701][T31413] BTRFS info (device loop7): using crc32c checksum algorithm [ 910.185061][ T5616] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.282209][T31413] BTRFS info (device loop7): enabling ssd optimizations [ 910.282286][T31413] BTRFS info (device loop7): turning on flush-on-commit [ 910.282325][T31413] BTRFS info (device loop7): enabling free space tree [ 910.282374][T31413] BTRFS info (device loop7): enabling auto defrag [ 910.282460][T31413] BTRFS info (device loop7): use lzo compression, level 1 [ 910.282509][T31413] BTRFS info (device loop7): max_inline set to 4096 [ 910.548012][T26761] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 911.809758][T31495] netlink: 296 bytes leftover after parsing attributes in process `syz.7.10823'. [ 912.442084][T31521] loop8: detected capacity change from 0 to 512 [ 912.465258][T31521] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 912.495934][T31521] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #17: comm syz.8.10835: corrupted in-inode xattr: invalid ea_ino [ 912.495991][T31521] fserror_report: 6 callbacks suppressed [ 912.496033][T31521] loop8: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 912.509656][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 912.509684][ C0] EXT4-fs (loop8): initial error at time 1787926140: ext4_iget_extra_inode:5210: inode 17 [ 912.509719][ C0] EXT4-fs (loop8): last error at time 1787926140: ext4_iget_extra_inode:5210: inode 17 [ 912.571449][T31521] EXT4-fs (loop8): Remounting filesystem read-only [ 912.584060][T31521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.674843][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.210933][T31552] loop4: detected capacity change from 0 to 1024 [ 913.222957][T31551] loop1: detected capacity change from 0 to 4096 [ 913.308425][T31557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 913.441668][T31551] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 913.591391][T31565] loop7: detected capacity change from 0 to 2048 [ 913.739362][T31567] loop1: detected capacity change from 0 to 512 [ 913.746592][T31565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.861816][T31567] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.10858: bg 0: block 393: padding at end of block bitmap is not set [ 913.861909][T31567] fserror_report: 1 callbacks suppressed [ 913.861942][T31567] loop1: lost filesystem error report for type 5 error -117 [ 913.867388][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 913.867475][ C1] EXT4-fs (loop1): initial error at time 1787926142: ext4_validate_block_bitmap:445 [ 913.867540][ C1] EXT4-fs (loop1): last error at time 1787926142: ext4_validate_block_bitmap:445 [ 913.881373][T31567] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 913.881432][T31567] loop1: lost filesystem error report for type 5 error -117 [ 913.891628][T31567] EXT4-fs (loop1): 2 truncates cleaned up [ 913.925361][T31567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.954708][T31565] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 913.954763][T31565] EXT4-fs: journaled quota format not specified [ 913.988623][ T31] audit: type=1800 audit(1787926142.478:875): pid=31567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10858" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 914.079712][T26761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.237091][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.681381][T31574] loop8: detected capacity change from 0 to 40427 [ 914.725743][T31574] F2FS-fs (loop8): invalid crc value [ 914.821899][T31574] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 914.861311][T31574] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 914.861363][T31574] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 914.880881][T31574] F2FS-fs (loop8): Start checkpoint disabled! [ 915.007596][T31574] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 915.017401][T31574] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 915.211462][T31607] pim6reg: entered allmulticast mode [ 915.229832][T31607] pim6reg: left allmulticast mode [ 915.267662][T31609] loop1: detected capacity change from 0 to 1024 [ 915.302913][T31609] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 916.128813][T31638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10888'. [ 916.128883][T31638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10888'. [ 916.453560][T31644] loop8: detected capacity change from 0 to 1024 [ 916.600143][T31652] hfsplus: catalog searching failed [ 916.664050][T31655] netlink: 'syz.4.10894': attribute type 219 has an invalid length. [ 917.035510][T31665] loop4: detected capacity change from 0 to 512 [ 917.095760][T31667] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10901'. [ 917.172693][T31669] loop1: detected capacity change from 0 to 64 [ 917.193531][T31669] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 917.224382][T31669] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 917.613394][T31673] ALSA: seq fatal error: cannot create timer (-19) [ 918.132917][T31693] batadv0: entered promiscuous mode [ 918.161323][T31693] macsec1: entered promiscuous mode [ 918.167103][T31693] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 918.180766][T31693] batadv0: left promiscuous mode [ 918.249249][ T5726] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 918.301331][T31141] Bluetooth: hci1: command 0x0406 tx timeout [ 918.338123][T31699] Bluetooth: hci0: unsupported parameter 5135 [ 918.345597][T31699] Bluetooth: hci0: unsupported parameter 8192 [ 918.352056][T31699] Bluetooth: hci0: unsupported parameter 5135 [ 918.358275][T31699] Bluetooth: hci0: unsupported parameter 8192 [ 918.371941][T31697] loop7: detected capacity change from 0 to 4096 [ 918.400035][ T5726] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 918.404763][ T5726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.404855][ T5726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.404921][ T5726] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 918.405119][ T5726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.466395][ T5726] usb 9-1: config 0 descriptor?? [ 918.485134][T31701] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.500945][T31702] ALSA: mixer_oss: invalid OSS volume '' [ 918.565161][T31704] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10918'. [ 918.962866][ T5726] plantronics 0003:047F:FFFF.0037: report_id 0 is invalid [ 918.962921][ T5726] plantronics 0003:047F:FFFF.0037: item 0 2 1 8 parsing failed [ 918.964113][ T5726] plantronics 0003:047F:FFFF.0037: parse failed [ 918.964243][ T5726] plantronics 0003:047F:FFFF.0037: probe with driver plantronics failed with error -22 [ 919.154644][ T5726] usb 9-1: USB disconnect, device number 8 [ 919.255411][T31709] loop1: detected capacity change from 0 to 40427 [ 919.307495][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 919.382149][T31709] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 919.409746][T31709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 919.469569][ T9] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 919.482167][ T9] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 919.482219][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 919.482280][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.513555][ T9] usb 8-1: config 0 descriptor?? [ 919.943656][ T9] hid_parser_main: 386 callbacks suppressed [ 919.943716][ T9] nti 0003:0757:0A00.0038: unknown main item tag 0x0 [ 919.943754][ T9] nti 0003:0757:0A00.0038: unknown main item tag 0x1 [ 919.943840][ T9] nti 0003:0757:0A00.0038: invalid report_count 1591645534 [ 919.943864][ T9] nti 0003:0757:0A00.0038: item 0 4 1 9 parsing failed [ 919.944617][ T9] nti 0003:0757:0A00.0038: probe with driver nti failed with error -22 [ 920.160457][ T9] usb 8-1: USB disconnect, device number 6 [ 920.591320][T31734] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 920.591401][T31733] IPVS: stopping backup sync thread 31734 ... [ 921.029833][T31722] loop4: detected capacity change from 0 to 65536 [ 921.064738][T31722] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 921.140021][T31722] XFS (loop4): Ending clean mount [ 921.158991][T31730] loop1: detected capacity change from 0 to 32768 [ 921.161698][T31730] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 921.171809][T31730] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10925 (31730) [ 921.192229][T31730] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 921.192297][T31730] BTRFS info (device loop1): using crc32c checksum algorithm [ 921.318666][ T5616] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 921.430620][T31730] BTRFS info (device loop1): rebuilding free space tree [ 921.625281][T31774] loop7: detected capacity change from 0 to 512 [ 921.750170][T31774] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 921.764263][T31738] loop8: detected capacity change from 0 to 40427 [ 921.799539][T31738] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 921.831315][T31738] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 921.837814][T31738] F2FS-fs (loop8): build fault injection rate: 27487 [ 921.849795][T31730] BTRFS info (device loop1): disabling free space tree [ 921.849927][T31730] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 921.850007][T31730] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 921.869946][T31738] F2FS-fs (loop8): invalid crc value [ 922.231464][T31730] BTRFS info (device loop1): enabling ssd optimizations [ 922.231511][T31730] BTRFS info (device loop1): turning on async discard [ 922.231548][T31730] BTRFS info (device loop1): force clearing of disk cache [ 922.231573][T31730] BTRFS info (device loop1): use zstd compression, level 3 [ 922.291876][T31782] overlayfs: overlapping lowerdir path [ 922.370946][T31738] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 922.492569][T31738] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 922.492633][T31738] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 922.710949][T31794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10944'. [ 922.727752][T31794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10944'. [ 922.920325][T31798] netlink: 192 bytes leftover after parsing attributes in process `syz.4.10947'. [ 923.239132][ T5619] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 923.969115][ T5726] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 924.151194][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 924.159879][ T5726] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 924.174449][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.183788][ T5726] usb 8-1: Product: syz [ 924.188777][ T5726] usb 8-1: Manufacturer: syz [ 924.193499][ T5726] usb 8-1: SerialNumber: syz [ 924.209184][ T5726] usb 8-1: config 0 descriptor?? [ 924.219289][ T5726] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 924.228835][ T5726] dvb-usb: bulk message failed: -22 (4/0) [ 924.258692][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 924.269273][ T5726] dvb-usb: bulk message failed: -22 (5/0) [ 924.275210][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 924.291868][ T5726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 924.325842][ T5726] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 924.325953][ T5726] usb 8-1: media controller created [ 924.370390][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.426754][ T5726] usb 8-1: selecting invalid altsetting 3 [ 924.433604][ T5726] ttusb2: set interface to alts=3 failed [ 924.576272][ T31] audit: type=1326 audit(1787926153.068:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.603003][ T31] audit: type=1326 audit(1787926153.068:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.635058][ T31] audit: type=1326 audit(1787926153.128:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.645547][ T31] audit: type=1326 audit(1787926153.128:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.645690][ T31] audit: type=1326 audit(1787926153.128:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.691916][ T31] audit: type=1326 audit(1787926153.188:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.692086][ T31] audit: type=1326 audit(1787926153.188:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.692209][ T31] audit: type=1326 audit(1787926153.188:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31828 comm="syz.4.10961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2d9e159 code=0x7ffc0000 [ 924.797218][ T5726] DVB: Unable to find symbol tda10086_attach() [ 924.797899][ T5726] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 924.814385][ T5726] dvb-usb: bulk message failed: -22 (4/0) [ 924.814409][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 924.814538][ T5726] dvb-usb: bulk message failed: -22 (5/0) [ 924.814554][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 924.814626][ T5726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 924.869820][ T5726] usb 8-1: USB disconnect, device number 7 [ 924.989617][ T5726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 925.097097][T31825] loop1: detected capacity change from 0 to 40427 [ 925.132719][T31825] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 925.132786][T31825] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 925.439537][ T5726] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 925.466905][T31825] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 925.573124][T31825] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 925.573174][T31825] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 925.618714][ T5726] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 925.629750][ T5726] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.629817][ T5726] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.629874][ T5726] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.671153][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.671200][ T5726] usb 9-1: Product: syz [ 925.671239][ T5726] usb 9-1: Manufacturer: syz [ 925.671260][ T5726] usb 9-1: SerialNumber: syz [ 926.495133][T31859] loop1: detected capacity change from 0 to 512 [ 926.522510][T31859] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 926.588773][T31859] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.10972: Allocating blocks 41-42 which overlap fs metadata [ 926.588931][T31859] loop1: lost filesystem error report for type 5 error -117 [ 926.593510][T31859] EXT4-fs (loop1): Remounting filesystem read-only [ 926.593815][T31859] Quota error (device loop1): write_blk: dquota write failed [ 926.599005][T31859] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 926.600098][T31859] EXT4-fs (loop1): 1 truncate cleaned up [ 926.619307][T31859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.683233][T31855] loop7: detected capacity change from 0 to 32768 [ 926.856025][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.192927][ T5726] usb 9-1: USB disconnect, device number 9 [ 927.199610][ C1] usb 9-1: comm data receiver aborted. [ 927.646010][ T82] IPVS: starting estimator thread 0... [ 927.738289][T31882] IPVS: using max 28 ests per chain, 67200 per kthread [ 927.999206][T26771] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 928.069326][T31892] loop4: detected capacity change from 0 to 1024 [ 928.110424][T31892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.133482][T31894] udevd[31894]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.188143][T26771] usb 8-1: Using ep0 maxpacket: 16 [ 928.200277][T26771] usb 8-1: unable to get BOS descriptor or descriptor too short [ 928.200349][T26771] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.209344][T26771] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.209373][T26771] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 928.209426][T26771] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 928.209454][T26771] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 109, changing to 10 [ 928.209483][T26771] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25712, setting to 1024 [ 928.225696][T26771] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.225848][T26771] usb 8-1: Product: syz [ 928.225891][T26771] usb 8-1: Manufacturer: syz [ 928.225927][T26771] usb 8-1: SerialNumber: syz [ 928.285164][T31883] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 928.373915][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.541558][T26771] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 928.541640][T26771] cdc_ncm 8-1:1.0: bind() failure [ 928.581928][T26771] usb 8-1: USB disconnect, device number 8 [ 928.776980][T31897] loop1: detected capacity change from 0 to 40427 [ 928.789941][T31897] F2FS-fs (loop1): Wrong CP boundary, start(512) end(2048) blocks(1024) [ 928.799203][T31897] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 928.836533][T31897] F2FS-fs (loop1): invalid crc value [ 929.012713][T31897] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 929.078496][T31897] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 929.078559][T31897] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 929.985180][T31913] loop8: detected capacity change from 0 to 4096 [ 930.274212][T31913] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 930.455765][T31913] ntfs3(loop8): Failed to load $Extend (-22). [ 930.462705][T31913] ntfs3(loop8): Failed to initialize $Extend. [ 930.688965][T31923] loop4: detected capacity change from 0 to 256 [ 930.740941][T31923] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 930.804009][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 930.804060][ T31] audit: type=1800 audit(1787926159.298:884): pid=31923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10999" name="file1" dev="loop4" ino=1048782 res=0 errno=0 [ 931.164304][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11003'. [ 931.176396][T31934] netlink: 'syz.0.11003': attribute type 22 has an invalid length. [ 931.185585][T31934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11003'. [ 931.436689][T31933] loop4: detected capacity change from 0 to 4096 [ 931.583477][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.592199][T31933] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 931.638594][T31933] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 932.292366][T31957] loop7: detected capacity change from 0 to 256 [ 932.305503][T31957] exfat: Deprecated parameter 'utf8' [ 932.312451][T31957] exfat: Deprecated parameter 'namecase' [ 932.402207][T31957] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 932.429501][T31931] loop1: detected capacity change from 0 to 32768 [ 932.489265][T31931] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 932.640634][T31971] tipc: Enabling of bearer rejected, already enabled [ 932.674866][T31931] XFS (loop1): Ending clean mount [ 932.866629][ T5619] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 933.581858][T31995] loop4: detected capacity change from 0 to 4096 [ 933.741929][T32004] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 934.119848][T31993] loop7: detected capacity change from 0 to 32768 [ 934.186291][T31993] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 934.295647][T31993] XFS (loop7): Ending clean mount [ 934.384446][T32031] loop4: detected capacity change from 0 to 16 [ 934.402184][T32031] erofs (device loop4): mounted with root inode @ nid 36. [ 934.466397][ T31] audit: type=1800 audit(1787926162.958:885): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11042" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 934.520673][T32037] batadv0: Device is already in use. [ 934.558657][T32036] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 934.558657][T32036] program syz.1.11045 not setting count and/or reply_len properly [ 934.623597][T26761] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 935.236417][T32049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11052'. [ 935.922875][T32075] loop4: detected capacity change from 0 to 4096 [ 936.074806][T32080] macvtap1: entered promiscuous mode [ 936.074855][T32080] bridge0: entered promiscuous mode [ 936.123968][T32080] bridge0: port 3(macvtap1) entered blocking state [ 936.124437][T32080] bridge0: port 3(macvtap1) entered disabled state [ 936.125879][T32080] macvtap1: entered allmulticast mode [ 936.125941][T32080] bridge0: entered allmulticast mode [ 936.196399][T32085] loop7: detected capacity change from 0 to 164 [ 936.205844][T32080] macvtap1: left allmulticast mode [ 936.205885][T32080] bridge0: left allmulticast mode [ 936.314140][T32085] Unsupported NM flag settings (8) [ 936.368816][T27188] bridge0: left promiscuous mode [ 936.843176][T32106] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 936.843176][T32106] program syz.1.11078 not setting count and/or reply_len properly [ 937.130863][T32120] loop7: detected capacity change from 0 to 512 [ 937.169791][T32120] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 937.226258][T32120] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.11082: bad orphan inode 131072 [ 937.226310][T32120] loop7: lost filesystem error report for type 5 error -117 [ 937.227286][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 937.227313][ C1] EXT4-fs (loop7): initial error at time 1787926165: ext4_orphan_get:1429 [ 937.227345][ C1] EXT4-fs (loop7): last error at time 1787926165: ext4_orphan_get:1429 [ 937.254907][T32120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.348931][ T5726] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 937.421142][T32120] overlayfs: upper fs needs to support d_type. [ 937.512023][ T5726] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 937.522677][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.533354][ T5726] usb 2-1: config 0 descriptor?? [ 937.567554][T32114] loop4: detected capacity change from 0 to 40427 [ 937.654607][ T5726] cp210x 2-1:0.0: cp210x converter detected [ 937.952712][T32114] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 938.005712][T32126] loop8: detected capacity change from 0 to 40427 [ 938.047037][T32126] F2FS-fs (loop8): Small segment_count (20 < 1 * 24) [ 938.047085][T32126] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 938.062812][T32126] F2FS-fs (loop8): build fault injection rate: 25 [ 938.062853][T32126] F2FS-fs (loop8): build fault injection type: 0x7698c [ 938.077778][T32114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 938.090444][T32126] F2FS-fs (loop8): invalid crc value [ 938.101686][T32126] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd00 [ 938.120522][T32126] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 938.174783][ T5726] usb 2-1: cp210x converter now attached to ttyUSB0 [ 938.235884][ T5726] usb 2-1: USB disconnect, device number 67 [ 938.351636][T26761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.372811][T32126] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 938.391525][ T5726] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 938.489723][T32126] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 938.489774][T32126] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 938.511782][T32126] syz.8.11086: attempt to access beyond end of device [ 938.511782][T32126] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 938.534796][T32126] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of f2fs_get_read_data_folio+0xe19/0xfd0 [ 938.564938][ T5616] syz-executor: attempt to access beyond end of device [ 938.564938][ T5616] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 938.616445][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 938.616478][ T5616] Tainted: [L]=SOFTLOCKUP [ 938.616485][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.616496][ T5616] Call Trace: [ 938.616505][ T5616] [ 938.616514][ T5616] dump_stack_lvl+0xe8/0x150 [ 938.616549][ T5616] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 938.616580][ T5616] f2fs_write_end_bio+0x1211/0x16e0 [ 938.616615][ T5616] ? blkg_put+0x22/0x240 [ 938.616652][ T5616] __submit_merged_bio+0x258/0x6a0 [ 938.616674][ T5616] ? rcu_is_watching+0x16/0xb0 [ 938.616701][ T5616] __submit_merged_write_cond+0x3c9/0x4e0 [ 938.616735][ T5616] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 938.616782][ T5616] f2fs_write_data_pages+0x2a27/0x36f0 [ 938.616844][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 938.616870][ T5616] ? is_bpf_text_address+0x26/0x2b0 [ 938.616907][ T5616] ? arch_stack_walk+0xfb/0x150 [ 938.616961][ T5616] ? add_lock_to_list+0xc7/0x100 [ 938.616987][ T5616] ? lockdep_unlock+0x5c/0xd0 [ 938.617002][ T5616] ? __lock_acquire+0x14b9/0x2e50 [ 938.617047][ T5616] ? do_raw_spin_lock+0x12b/0x2f0 [ 938.617083][ T5616] ? do_raw_spin_unlock+0xf5/0x200 [ 938.617111][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 938.617141][ T5616] do_writepages+0x338/0x560 [ 938.617166][ T5616] ? preempt_schedule_common+0x7f/0xd0 [ 938.617198][ T5616] ? preempt_schedule_thunk+0x16/0x40 [ 938.617231][ T5616] filemap_fdatawrite+0x1e9/0x2f0 [ 938.617255][ T5616] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 938.617312][ T5616] ? do_raw_spin_unlock+0xf5/0x200 [ 938.617343][ T5616] f2fs_sync_dirty_inodes+0x30e/0x830 [ 938.617387][ T5616] f2fs_write_checkpoint+0xa3d/0x2710 [ 938.617426][ T5616] ? __lock_acquire+0x6df/0x2e50 [ 938.617471][ T5616] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 938.617548][ T5616] kill_f2fs_super+0x2dd/0x700 [ 938.617588][ T5616] ? __pfx_kill_f2fs_super+0x10/0x10 [ 938.617628][ T5616] ? call_rcu+0x64d/0x8b0 [ 938.617656][ T5616] ? lockdep_hardirqs_on+0x7b/0x110 [ 938.617700][ T5616] deactivate_locked_super+0xbc/0x110 [ 938.617732][ T5616] cleanup_mnt+0x3d3/0x460 [ 938.617755][ T5616] task_work_run+0x1d9/0x270 [ 938.617779][ T5616] ? __pfx_task_work_run+0x10/0x10 [ 938.617808][ T5616] exit_to_user_mode_loop+0x204/0x770 [ 938.617829][ T5616] ? rcu_is_watching+0x16/0xb0 [ 938.617855][ T5616] do_syscall_64+0x328/0x520 [ 938.617872][ T5616] ? trace_irq_disable+0x3b/0x140 [ 938.617892][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.617914][ T5616] ? clear_bhb_loop+0x70/0xc0 [ 938.617938][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.617958][ T5616] RIP: 0033:0x7ff4f2d9f397 [ 938.617980][ T5616] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 938.617996][ T5616] RSP: 002b:00007ffd2a760438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 938.618015][ T5616] RAX: 0000000000000000 RBX: 00007ff4f2e34474 RCX: 00007ff4f2d9f397 [ 938.618027][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2a7604f0 [ 938.618038][ T5616] RBP: 00007ffd2a7604f0 R08: 00007ffd2a7614f0 R09: 00000000ffffffff [ 938.618050][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2a761580 [ 938.618061][ T5616] R13: 00007ff4f2e34474 R14: 00000000000e50a0 R15: 00007ffd2a7615c0 [ 938.618089][ T5616] [ 938.716045][ T5726] cp210x 2-1:0.0: device disconnected [ 938.820468][ T5616] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 939.029538][ T1014] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.029595][ T1014] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.184474][T28359] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x58c/0x2360 [ 939.184560][T28359] F2FS-fs (loop8): invalid blkaddr: 512, type: 10, run fsck to fix. [ 939.421461][T28359] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x58c/0x2360 [ 939.421534][T28359] F2FS-fs (loop8): invalid blkaddr: 1029, type: 10, run fsck to fix. [ 939.492283][T32140] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11094'. [ 939.661848][T31141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 939.694935][T31141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 939.705354][T31141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 939.716839][T31141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 939.728463][T31141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 940.039756][ T1014] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.082526][ T1014] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.390254][ T1014] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.394703][ T1014] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.621791][ T1014] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.621888][ T1014] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.674210][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11100'. [ 940.674269][T32167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11100'. [ 940.674315][T32167] netlink: 'syz.8.11100': attribute type 18 has an invalid length. [ 940.674392][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11100'. [ 940.930761][T32171] loop8: detected capacity change from 0 to 4096 [ 941.033982][T32177] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 941.392351][T32184] loop1: detected capacity change from 0 to 512 [ 941.405693][T32184] EXT4-fs: Ignoring removed mblk_io_submit option [ 941.552622][T32184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.552828][T32184] ext4 filesystem being mounted at /2312/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.624710][T32184] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: comm syz.1.11108: invalid size [ 941.784260][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.897762][ T5622] Bluetooth: hci1: command tx timeout [ 942.058733][T32200] vlan0: entered promiscuous mode [ 942.063982][T32200] bridge0: entered promiscuous mode [ 942.231281][ T1014] bridge_slave_1: left allmulticast mode [ 942.250311][ T1014] bridge_slave_1: left promiscuous mode [ 942.250593][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.350642][ T1014] bridge_slave_0: left allmulticast mode [ 942.356464][ T1014] bridge_slave_0: left promiscuous mode [ 942.365338][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.385354][ T1014] pimreg: left allmulticast mode [ 942.868216][T27188] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 943.028858][T27188] usb 2-1: Using ep0 maxpacket: 32 [ 943.034822][T27188] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 943.047166][T27188] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.047211][T27188] usb 2-1: config 0 has no interface number 0 [ 943.074303][T27188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.074364][T27188] usb 2-1: Product: syz [ 943.074393][T27188] usb 2-1: Manufacturer: syz [ 943.074415][T27188] usb 2-1: SerialNumber: syz [ 943.172891][T27188] usb 2-1: config 0 descriptor?? [ 943.216786][T27188] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 943.226744][T27188] usb 2-1: selecting invalid altsetting 1 [ 943.234637][T27188] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 943.252694][T27188] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 943.265174][T27188] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 943.274892][T27188] usb 2-1: media controller created [ 943.329371][T27188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.421003][T27188] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 943.421078][T27188] zl10353_read_register: readreg error (reg=127, ret==-71) [ 943.447989][T27188] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 943.541662][T27188] usb 2-1: USB disconnect, device number 68 [ 943.813845][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.829488][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.841838][ T1014] bond0 (unregistering): Released all slaves [ 943.898230][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 943.995846][ T5622] Bluetooth: hci1: command tx timeout [ 944.096863][T32239] vlan2: entered allmulticast mode [ 944.096928][T32239] bond0: entered allmulticast mode [ 944.096986][T32239] bond_slave_0: entered allmulticast mode [ 944.097009][T32239] bond_slave_1: entered allmulticast mode [ 944.097029][T32239] macvlan1: entered allmulticast mode [ 944.097057][T32239] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 944.172779][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 944.229835][ T1014] tipc: Left network mode [ 944.486813][T32263] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11135'. [ 944.499716][T32263] unsupported nlmsg_type 40 [ 944.623388][T26771] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 944.797542][T26771] usb 5-1: Using ep0 maxpacket: 8 [ 944.806431][T26771] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.806518][T26771] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 944.824929][T26771] usb 5-1: config 4 interface 0 has no altsetting 0 [ 944.836663][T26771] usb 5-1: string descriptor 0 read error: -22 [ 944.843532][T26771] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 944.883859][T26771] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 944.900652][T26771] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 944.931621][T26771] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 944.931722][T26771] usb 5-1: media controller created [ 944.962187][T26771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.257530][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 945.408021][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 945.414238][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 945.433033][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 945.433107][ T10] usb 9-1: config 0 has no interface number 0 [ 945.451816][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.460288][ T10] usb 9-1: Product: syz [ 945.464629][ T10] usb 9-1: Manufacturer: syz [ 945.469456][ T10] usb 9-1: SerialNumber: syz [ 945.478463][ T10] usb 9-1: config 0 descriptor?? [ 945.491216][ T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 945.774554][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 945.797687][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 945.893994][ T1014] hsr_slave_0: left promiscuous mode [ 945.903632][ T1014] hsr_slave_1: left promiscuous mode [ 945.915420][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.915478][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.936689][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.936741][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.042984][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 231 [ 946.058064][T32257] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 946.063689][T31141] Bluetooth: hci1: command tx timeout [ 946.070151][T26771] zl10353_read_register: readreg error (reg=127, ret==0) [ 946.098718][ T1014] veth1_macvtap: left promiscuous mode [ 946.099245][ T1014] veth0_macvtap: left promiscuous mode [ 946.099603][ T1014] veth1_vlan: left promiscuous mode [ 946.099803][ T1014] veth0_vlan: left promiscuous mode [ 946.171914][T26771] usb 5-1: USB disconnect, device number 48 [ 946.256379][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 946.265333][ T5734] usb 9-1: USB disconnect, device number 10 [ 946.335487][ T5734] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 946.370817][ T5734] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 946.375284][ T5734] quatech2 9-1:0.51: device disconnected [ 946.925321][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 947.038688][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 947.243336][T32318] loop8: detected capacity change from 0 to 256 [ 947.342095][T32319] loop1: detected capacity change from 0 to 1024 [ 947.406207][T32319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.559580][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.743441][T32143] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.743856][T32143] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.744331][T32143] bridge_slave_0: entered allmulticast mode [ 947.764148][T32143] bridge_slave_0: entered promiscuous mode [ 947.786922][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 947.811805][T32143] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.811931][T32143] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.812138][T32143] bridge_slave_1: entered allmulticast mode [ 947.833534][T32143] bridge_slave_1: entered promiscuous mode [ 947.922181][T32330] loop8: detected capacity change from 0 to 256 [ 947.953442][T32330] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 948.087764][T32334] exFAT-fs (loop8): valid_size(150994954) is greater than size(10) [ 948.140151][T31141] Bluetooth: hci1: command tx timeout [ 948.163016][T32143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.199167][T32143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.213077][T32332] can0: slcan on ttynull. [ 948.410717][T32143] team0: Port device team_slave_0 added [ 948.429896][T32143] team0: Port device team_slave_1 added [ 948.854370][T32331] can0 (unregistered): slcan off ttynull. [ 948.868509][T32143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.868551][T32143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.868582][T32143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.884099][T32143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.884148][T32143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.884221][T32143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.255581][T32143] hsr_slave_0: entered promiscuous mode [ 949.262515][T32143] hsr_slave_1: entered promiscuous mode [ 949.269963][T32143] debugfs: 'hsr0' already exists in 'hsr' [ 949.276285][T32143] Cannot create hsr debugfs directory [ 949.880261][T32382] loop1: detected capacity change from 0 to 512 [ 949.931786][T32382] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 949.959487][T32382] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 949.959615][T32382] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.11176: inode has both inline data and extents flags [ 949.959648][T32382] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 949.968418][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 949.968447][ C1] EXT4-fs (loop1): initial error at time 1787926178: ext4_orphan_get:1403: inode 13 [ 949.968482][ C1] EXT4-fs (loop1): last error at time 1787926178: ext4_orphan_get:1403: inode 13 [ 950.053022][T32382] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.11176: couldn't read orphan inode 13 (err -117) [ 950.053090][T32382] loop1: lost filesystem error report for type 5 error -117 [ 950.082255][T32382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.176768][T32382] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 950.194295][T32389] loop8: detected capacity change from 0 to 16 [ 950.205058][T32389] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 950.336561][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.583684][ T5279] 8021q: adding VLAN 0 to HW filter on device eth19 [ 951.201441][T32417] bond1: (slave bond_slave_1): Device is not our slave [ 951.212097][T32417] bond1: option active_slave: invalid value (bond_slave_1) [ 951.240967][T32417] bond1 (unregistering): Released all slaves [ 951.430161][T32434] scsi_nl_rcv_msg: discarding partial message [ 951.440586][T32434] scsi_nl_rcv_msg: discarding partial skb [ 951.543872][T32143] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 951.565454][T32143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.574857][T32143] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 951.776247][T32143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.847327][T32143] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 951.912230][T32143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.990786][T32143] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 952.015401][T32143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.057546][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 952.207766][ T5279] 8021q: adding VLAN 0 to HW filter on device eth20 [ 952.488407][T32143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.595120][T32143] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.626732][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.626964][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.669736][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.669863][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.476347][T32490] loop1: detected capacity change from 0 to 512 [ 953.491711][T32490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 953.532425][T32490] EXT4-fs (loop1): 1 truncate cleaned up [ 953.556649][T32490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.705208][T32496] futex_wake_op: syz.0.11211 tries to shift op by 144; fix this program [ 953.705758][T32496] futex_wake_op: syz.0.11211 tries to shift op by 144; fix this program [ 953.733683][T32490] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 953.914680][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.380494][T32143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.666447][T32532] loop8: detected capacity change from 0 to 1024 [ 954.680525][T32528] loop1: detected capacity change from 0 to 4096 [ 954.773340][T32536] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 955.153039][T32545] loop4: detected capacity change from 0 to 2048 [ 955.166746][T32545] udf: Bad value for 'dmode' [ 955.284173][T32552] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 955.531621][T32563] loop4: detected capacity change from 0 to 256 [ 955.543165][T32563] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 955.709264][T32569] rdma_op ffff88807aef8238 conn xmit_rdma 0000000000000000 [ 955.725192][T32143] veth0_vlan: entered promiscuous mode [ 955.780464][T32143] veth1_vlan: entered promiscuous mode [ 955.938774][T32143] veth0_macvtap: entered promiscuous mode [ 955.965700][T32143] veth1_macvtap: entered promiscuous mode [ 956.045663][T32143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.061192][T32579] loop1: detected capacity change from 0 to 128 [ 956.084188][T32579] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 956.098467][T32143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.122279][T32579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.284797][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.284881][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.285025][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.285147][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.663387][T32591] netlink: 'syz.8.11249': attribute type 12 has an invalid length. [ 956.692041][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.692097][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.778186][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.778229][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.178183][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 957.471969][T32596] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 957.472036][T32596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.508774][T32598] loop8: detected capacity change from 0 to 128 [ 957.929307][ T189] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 958.089026][ T189] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 958.100541][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.111920][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.111952][ T189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.112004][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.150777][ T189] usb 5-1: config 0 descriptor?? [ 958.342759][T32626] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11263'. [ 958.736518][T32639] bridge1: entered promiscuous mode [ 958.736616][T32639] bridge1: entered allmulticast mode [ 958.818655][ T189] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0039/input/input48 [ 958.930801][ T189] sony 0003:054C:03D5.0039: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 958.959268][ T189] usb 5-1: USB disconnect, device number 49 [ 959.114409][T32646] fido_id[32646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 960.172156][T32685] loop9: detected capacity change from 0 to 64 [ 960.303042][T32685] hfs: unable to locate alternate MDB [ 960.303080][T32685] hfs: continuing without an alternate MDB [ 960.781088][T32696] loop9: detected capacity change from 0 to 512 [ 960.804051][T32696] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 960.814872][T32696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 960.814988][T32696] System zones: 0-1, 15-15, 18-18, 34-34 [ 960.815300][T32696] EXT4-fs (loop9): orphan cleanup on readonly fs [ 960.815390][T32696] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 960.815470][T32696] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 960.815503][T32696] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 960.830582][T32696] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.11287: bad orphan inode 16 [ 960.830617][T32696] loop9: lost filesystem error report for type 5 error -117 [ 960.847503][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 960.847530][ C0] EXT4-fs (loop9): initial error at time 1787926189: ext4_orphan_get:1429 [ 960.847556][ C0] EXT4-fs (loop9): last error at time 1787926189: ext4_orphan_get:1429 [ 960.863191][T32696] ext4_test_bit(bit=15, block=18) = 1 [ 960.863218][T32696] is_bad_inode(inode)=0 [ 960.863229][T32696] NEXT_ORPHAN(inode)=0 [ 960.863239][T32696] max_ino=32 [ 960.863249][T32696] i_nlink=2 [ 960.936215][T32696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 960.969830][T32696] EXT4-fs error (device loop9): ext4_lookup:1791: inode #12: comm syz.9.11287: deleted inode referenced: 14 [ 961.045664][T32143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.129291][T32684] loop8: detected capacity change from 0 to 32768 [ 961.144685][T32684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11282 (32684) [ 961.168822][T32684] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 961.179820][T32684] BTRFS info (device loop8): using crc32c checksum algorithm [ 961.293850][T32684] BTRFS info (device loop8): enabling ssd optimizations [ 961.293902][T32684] BTRFS info (device loop8): turning on flush-on-commit [ 961.293940][T32684] BTRFS info (device loop8): enabling free space tree [ 961.293962][T32684] BTRFS info (device loop8): enabling auto defrag [ 961.294003][T32684] BTRFS info (device loop8): use lzo compression, level 1 [ 961.294030][T32684] BTRFS info (device loop8): max_inline set to 4096 [ 961.536707][T28359] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 962.297494][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 962.381639][T32750] loop1: detected capacity change from 0 to 64 [ 962.705476][T32761] netlink: 'syz.0.11309': attribute type 1 has an invalid length. [ 962.705519][T32761] netlink: 200 bytes leftover after parsing attributes in process `syz.0.11309'. [ 962.705560][T32761] netlink: 41 bytes leftover after parsing attributes in process `syz.0.11309'. [ 962.904100][T32760] loop4: detected capacity change from 0 to 4096 [ 962.929247][T32760] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 963.205975][ T307] loop8: detected capacity change from 0 to 128 [ 963.240094][ T307] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 963.492875][ T1014] ntfs3(loop4): ino=1e, ni_find_attr [ 963.622177][ T310] loop1: detected capacity change from 0 to 2048 [ 963.710253][ T315] loop9: detected capacity change from 0 to 512 [ 963.755671][ T318] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 963.767892][ T315] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 964.184935][ T324] loop8: detected capacity change from 0 to 1024 [ 964.273592][ T324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.354576][ T324] EXT4-fs error (device loop8): ext4_readdir:280: inode #2: block 16: comm syz.8.11321: path /339/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 964.384765][ T324] EXT4-fs (loop8): Remounting filesystem read-only [ 964.550175][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.109202][ T355] loop8: detected capacity change from 0 to 1024 [ 965.129115][ T355] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 965.217805][ T358] loop1: detected capacity change from 0 to 512 [ 965.240094][ T358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 965.263638][ T361] netlink: 'syz.4.11334': attribute type 1 has an invalid length. [ 965.326032][ T358] EXT4-fs (loop1): 1 orphan inode deleted [ 965.326077][ T358] EXT4-fs (loop1): 1 truncate cleaned up [ 965.355103][ T358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.493498][ T369] EXT4-fs error (device loop1): ext4_search_dir:1476: inode #12: block 7: comm syz.1.11333: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 965.834813][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.332217][ T397] loop4: detected capacity change from 0 to 64 [ 966.765230][ T405] loop4: detected capacity change from 0 to 4096 [ 967.069380][ T405] ntfs3(loop4): failed to convert "0000" to iso8859-9 [ 967.252775][ T405] ntfs3(loop4): failed to convert name for inode 1e. [ 967.257065][ T405] ntfs3(loop4): ino=1f, mi_enum_attr [ 967.390533][ T391] loop1: detected capacity change from 0 to 32768 [ 967.404455][ T391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11339 (391) [ 967.466250][ T391] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 967.466313][ T391] BTRFS info (device loop1): using sha256 checksum algorithm [ 967.764097][ T391] BTRFS info (device loop1 state E): enabling free space tree [ 967.764157][ T391] BTRFS info (device loop1 state E): force clearing of disk cache [ 967.764179][ T391] BTRFS info (device loop1 state E): ignoring unknown super block flags [ 967.957800][ T457] Bluetooth: MGMT ver 1.23 [ 968.221040][ T5619] BTRFS info (device loop1 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 969.138004][ T5726] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 969.310429][ T5726] usb 10-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 969.346722][ T5726] usb 10-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 969.346779][ T5726] usb 10-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 969.346831][ T5726] usb 10-1: config 0 interface 0 has no altsetting 0 [ 969.346873][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.385281][ T5726] usb 10-1: config 0 descriptor?? [ 969.406140][ T486] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 969.429334][ T490] loop1: detected capacity change from 0 to 4096 [ 969.557592][ T501] loop4: detected capacity change from 0 to 2048 [ 969.569744][ T490] ntfs3(loop1): Failed to load $Extend (-22). [ 969.575985][ T490] ntfs3(loop1): Failed to initialize $Extend. [ 969.662010][ T506] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 969.841927][ T5726] hid (null): unknown global tag 0xe [ 969.862874][ T5726] uclogic 0003:5543:0003.003A: unknown main item tag 0x2 [ 969.873988][ T5726] uclogic 0003:5543:0003.003A: unknown global tag 0xe [ 969.882582][ T5726] uclogic 0003:5543:0003.003A: item 0 2 1 14 parsing failed [ 969.891551][ T5726] uclogic 0003:5543:0003.003A: parse failed [ 969.898596][ T5726] uclogic 0003:5543:0003.003A: probe with driver uclogic failed with error -22 [ 970.134928][ T25] usb 10-1: USB disconnect, device number 2 [ 970.262273][ T517] binder: binder_mmap: 516 0-800000 bad vm_flags failed -1 [ 970.498978][ T524] loop8: detected capacity change from 0 to 64 [ 971.398800][ T536] loop4: detected capacity change from 0 to 4096 [ 971.411979][ T536] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 971.528841][ T536] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 972.059126][ T540] loop8: detected capacity change from 0 to 40427 [ 972.088483][ T540] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 972.088529][ T540] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 972.212050][ T540] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 972.234359][ T540] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 972.241813][ T540] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 972.516764][ T540] syz.8.11389: attempt to access beyond end of device [ 972.516764][ T540] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 972.855120][ T551] loop9: detected capacity change from 0 to 32768 [ 972.933394][ T575] netlink: 'syz.4.11406': attribute type 1 has an invalid length. [ 973.053803][T28761] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 973.217462][T28761] usb 2-1: Using ep0 maxpacket: 8 [ 973.218864][T28761] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 973.221715][T28761] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 973.221788][T28761] usb 2-1: config 2 has no interface number 0 [ 973.221920][T28761] usb 2-1: config 2 interface 31 has no altsetting 0 [ 973.232892][T28761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.232966][T28761] usb 2-1: Product: syz [ 973.233008][T28761] usb 2-1: Manufacturer: syz [ 973.233050][T28761] usb 2-1: SerialNumber: syz [ 973.457181][ T585] netlink: 'syz.4.11411': attribute type 5 has an invalid length. [ 973.823804][ T25] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 973.978856][ T25] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 973.981432][T28761] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 974.000581][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.012649][ T25] usb 5-1: config 0 descriptor?? [ 974.028269][T28761] usb 2-1: USB disconnect, device number 69 [ 974.227851][ T25] usb 5-1: Cannot read MAC address [ 974.233569][ T25] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 974.257728][ T25] usb 5-1: USB disconnect, device number 50 [ 974.352822][ T597] xt_hashlimit: size too large, truncated to 1048576 [ 974.534578][ T591] loop8: detected capacity change from 0 to 32768 [ 974.640765][ T591] non-latin1 character 0x466c found in JFS file name [ 974.704987][ T591] mount with iocharset=utf8 to access [ 974.753768][ T31] audit: type=1326 audit(1787926203.248:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.753857][ T31] audit: type=1326 audit(1787926203.248:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.809937][ T31] audit: type=1326 audit(1787926203.308:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.850689][ T31] audit: type=1326 audit(1787926203.308:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.850782][ T31] audit: type=1326 audit(1787926203.338:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.850890][ T31] audit: type=1326 audit(1787926203.338:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.851017][ T31] audit: type=1326 audit(1787926203.338:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.851142][ T31] audit: type=1326 audit(1787926203.338:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.851266][ T31] audit: type=1326 audit(1787926203.338:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 974.851388][ T31] audit: type=1326 audit(1787926203.338:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.1.11418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f099559e159 code=0x7ffc0000 [ 975.832793][ T634] loop8: detected capacity change from 0 to 2048 [ 975.855277][ T634] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 975.882686][ T639] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11435'. [ 975.894500][ T634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 976.518937][ T665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11442'. [ 976.538289][T28761] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 976.720958][T28761] usb 5-1: Using ep0 maxpacket: 32 [ 976.723703][T28761] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 976.740560][T28761] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 976.740628][T28761] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.740660][T28761] usb 5-1: config 0 interface 0 has no altsetting 0 [ 976.740763][T28761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.784720][T28761] usb 5-1: config 0 descriptor?? [ 976.828970][ T677] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 976.829003][ T677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 976.846123][ T677] vhci_hcd vhci_hcd.0: Device attached [ 977.077403][ T25] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 977.099669][T27188] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 977.220675][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.220763][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224117][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224210][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224276][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224348][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224430][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224508][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224580][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224646][T28761] hid-alps 0003:044E:120B.003B: unknown main item tag 0x0 [ 977.224821][T28761] hid-alps 0003:044E:120B.003B: unbalanced collection at end of report description [ 977.231024][T28761] hid-alps 0003:044E:120B.003B: parse failed [ 977.231327][T28761] hid-alps 0003:044E:120B.003B: probe with driver hid-alps failed with error -22 [ 977.258761][T27188] usb 10-1: Using ep0 maxpacket: 16 [ 977.319227][ T678] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 977.322874][ T1176] vhci_hcd vhci_hcd.9: stop threads [ 977.322946][ T1176] vhci_hcd vhci_hcd.9: release socket [ 977.348022][T27188] usb 10-1: unable to get BOS descriptor or descriptor too short [ 977.355906][T27188] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 977.365371][T27188] usb 10-1: no configurations [ 977.370852][T27188] usb 10-1: can't read configurations, error -22 [ 977.378281][ T1176] vhci_hcd vhci_hcd.9: disconnect device [ 977.435307][ T5726] usb 5-1: USB disconnect, device number 51 [ 977.568599][ T689] loop8: detected capacity change from 0 to 32768 [ 977.576812][ T689] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 977.591877][ T689] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11452 (689) [ 977.624757][ T689] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 977.624819][ T689] BTRFS info (device loop8): using crc32c checksum algorithm [ 977.657582][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.767730][ T689] BTRFS info (device loop8): rebuilding free space tree [ 977.811661][ T689] BTRFS info (device loop8): disabling free space tree [ 977.811751][ T689] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 977.811802][ T689] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 977.885131][ T689] BTRFS info (device loop8): enabling ssd optimizations [ 977.885192][ T689] BTRFS info (device loop8): turning on async discard [ 977.885230][ T689] BTRFS info (device loop8): force clearing of disk cache [ 977.885306][ T689] BTRFS info (device loop8): use zstd compression, level 3 [ 978.224704][ T721] netlink: 'syz.1.11460': attribute type 4 has an invalid length. [ 978.224751][ T721] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11460'. [ 978.312865][ T723] loop9: detected capacity change from 0 to 512 [ 978.365216][ T723] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 978.600628][ T730] netlink: 'syz.1.11463': attribute type 178 has an invalid length. [ 978.995321][T28359] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 979.389093][ T755] ip_tables: iptables: counters copy to user failed while replacing table [ 979.543251][ T759] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11478'. [ 979.543408][ T759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11478'. [ 979.543472][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11478'. [ 979.768540][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11481'. [ 980.141118][ T769] loop8: detected capacity change from 0 to 8192 [ 980.168286][ T769] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 980.232818][ T778] loop1: detected capacity change from 0 to 128 [ 980.260344][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 980.260398][ T31] audit: type=1800 audit(1787926208.758:900): pid=769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11471" name="file1" dev="loop8" ino=1048797 res=0 errno=0 [ 980.292555][ T778] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 980.306769][ T778] ext4 filesystem being mounted at /2402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.353239][ T778] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz.1.11487: No space for directory leaf checksum. Please run e2fsck -D. [ 980.369086][ T778] EXT4-fs error (device loop1): __ext4_find_entry:1628: inode #11: comm syz.1.11487: checksumming directory block 0 [ 980.591784][ T5619] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 980.838193][ T791] loop1: detected capacity change from 0 to 4096 [ 980.892447][ T795] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 981.429720][ T812] loop9: detected capacity change from 0 to 16 [ 981.451921][ T812] erofs (device loop9): mounted with root inode @ nid 36. [ 981.507019][ T812] erofs (device loop9): inline data across blocks @ nid 86 [ 981.539881][ T812] erofs (device loop9): inline data across blocks @ nid 86 [ 982.208138][ T25] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 982.595456][ T847] jffs2: notice: (847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 982.751491][ T853] netlink: 112 bytes leftover after parsing attributes in process `syz.9.11518'. [ 982.951316][ T836] loop1: detected capacity change from 0 to 40427 [ 982.966090][ T836] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 982.966160][ T836] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 982.993984][ T836] F2FS-fs (loop1): invalid crc value [ 983.146224][ T863] netlink: 'syz.0.11522': attribute type 3 has an invalid length. [ 983.146275][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11522'. [ 983.174893][ T836] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 983.220178][ T836] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 983.220234][ T836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 983.538273][ T877] Bluetooth: hci0: unsupported parameter 5135 [ 983.538318][ T877] Bluetooth: hci0: unsupported parameter 8192 [ 983.540394][ T877] Bluetooth: hci0: unsupported parameter 5135 [ 983.540438][ T877] Bluetooth: hci0: unsupported parameter 8192 [ 983.625197][ T879] loop8: detected capacity change from 0 to 2048 [ 983.681907][ T879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.708441][ T882] overlayfs: unescaped trailing colons in lowerdir mount option. [ 984.011153][ T889] usb usb7: usbfs: process 889 (syz.0.11535) did not claim interface 32 before use [ 984.055708][ T891] xt_hashlimit: size too large, truncated to 1048576 [ 984.463656][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11540'. [ 985.470938][ T951] loop8: detected capacity change from 0 to 256 [ 985.668909][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 985.773795][ T960] loop1: detected capacity change from 0 to 1024 [ 985.783455][ T960] EXT4-fs: Ignoring removed orlov option [ 985.789350][ T960] EXT4-fs: Ignoring removed i_version option [ 985.829375][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 985.834657][ T960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.835818][ T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 985.854659][ T10] usb 5-1: config 0 has too many interfaces: 149, using maximum allowed: 32 [ 985.854783][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 149 [ 985.854908][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.854979][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.855040][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.855142][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.901759][ T10] usb 5-1: config 0 descriptor?? [ 985.953495][ T965] loop8: detected capacity change from 0 to 64 [ 986.044360][ T969] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1303 [ 986.141002][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.337111][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11566'. [ 986.371107][ T976] macvtap1: entered allmulticast mode [ 986.371159][ T976] dummy0: entered allmulticast mode [ 986.371760][ T976] dummy0: entered promiscuous mode [ 986.388678][ T10] hid_parser_main: 4 callbacks suppressed [ 986.389602][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.389705][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.389769][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.389838][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.389922][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.389985][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.390056][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.390126][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.390195][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.390277][ T10] chicony 0003:04F2:0418.003C: unknown main item tag 0x0 [ 986.485825][ T10] chicony 0003:04F2:0418.003C: hidraw0: USB HID v0.03 Device [HID 04f2:0418] on usb-dummy_hcd.4-1/input0 [ 986.518808][ T976] dummy0: left allmulticast mode [ 986.625788][ T983] loop9: detected capacity change from 0 to 256 [ 986.636482][ T983] exfat: Deprecated parameter 'namecase' [ 986.642550][ T983] exfat: Deprecated parameter 'namecase' [ 986.686164][ T980] loop1: detected capacity change from 0 to 4096 [ 986.716220][ T10] usb 5-1: USB disconnect, device number 52 [ 986.731759][ T978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11567'. [ 986.731802][ T978] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 986.732493][ T5812] dummy0: left promiscuous mode [ 986.736361][ T983] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8d6134a9, utbl_chksum : 0xe619d30d) [ 986.880027][ T980] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 986.992861][ T980] ntfs3(loop1): failed to convert "0080" to cp857 [ 987.013627][ T980] ntfs3(loop1): failed to convert name for inode 1e. [ 987.026416][ T980] ntfs3(loop1): ino=1f, mi_enum_attr [ 987.282137][ T998] netlink: 332 bytes leftover after parsing attributes in process `syz.9.11574'. [ 987.282222][ T998] netlink: 'syz.9.11574': attribute type 9 has an invalid length. [ 987.282255][ T998] netlink: 152 bytes leftover after parsing attributes in process `syz.9.11574'. [ 987.593760][ T1010] IPVS: Error connecting to the multicast addr [ 987.633800][ T1016] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11582'. [ 987.634117][ T1016] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 987.737080][ T1018] loop4: detected capacity change from 0 to 1024 [ 987.841930][ T31] audit: type=1800 audit(1787926216.338:901): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11585" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 987.957643][ T1029] loop1: detected capacity change from 0 to 2048 [ 987.973787][ T1029] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 988.002315][ T1026] loop8: detected capacity change from 0 to 1764 [ 988.023290][ T1031] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 988.024460][ T1029] syz.1.11589: attempt to access beyond end of device [ 988.024460][ T1029] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 988.082357][ T1029] syz.1.11589: attempt to access beyond end of device [ 988.082357][ T1029] loop1: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 988.164091][ T1029] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 988.180671][ T1029] NILFS (loop1): error -5 reading inode: ino=12 [ 988.332983][ T1038] loop8: detected capacity change from 0 to 1764 [ 988.374853][ T1041] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 988.504059][ T1038] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 988.813596][ T1066] xt_hashlimit: size too large, truncated to 1048576 [ 988.868100][ T1071] loop1: detected capacity change from 0 to 64 [ 989.694567][ T1096] random: crng reseeded on system resumption [ 989.732509][ T1098] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 989.880097][ T1081] loop4: detected capacity change from 0 to 32768 [ 989.940839][ T1081] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 990.040315][ T1118] loop8: detected capacity change from 0 to 512 [ 990.051770][ T1118] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 990.076103][ T1118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 990.076249][ T1118] System zones: 1-12 [ 990.076556][ T1118] EXT4-fs (loop8): orphan cleanup on readonly fs [ 990.100179][ T1081] XFS (loop4): Ending clean mount [ 990.100269][ T1118] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.11619: attempt to clear invalid blocks 1024 len 1 [ 990.100305][ T1118] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 990.127278][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 990.127332][ C0] EXT4-fs (loop8): initial error at time 1787926218: ext4_clear_blocks:876: inode 11 [ 990.127369][ C0] EXT4-fs (loop8): last error at time 1787926218: ext4_clear_blocks:876: inode 11 [ 990.139852][ T1118] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.11619: bg 0: block 361: padding at end of block bitmap is not set [ 990.139953][ T1118] loop8: lost filesystem error report for type 5 error -117 [ 990.141123][ T1118] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 990.141230][ T1118] loop8: lost filesystem error report for type 5 error -117 [ 990.148789][ T1118] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11619: invalid indirect mapped block 1811939328 (level 0) [ 990.148915][ T1118] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 990.153938][ T1118] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11619: invalid indirect mapped block 2 (level 2) [ 990.153977][ T1118] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 990.168452][ T1118] EXT4-fs (loop8): 1 truncate cleaned up [ 990.262029][ T1118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 990.482505][ T5616] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 990.564919][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 990.844066][ T1132] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 990.867041][ T1127] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 990.910201][ T1121] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 991.027604][ T25] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 991.173812][ T1121] XFS (loop9): Ending clean mount [ 991.189840][ T25] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 991.216876][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.216931][ T25] usb 9-1: Product: syz [ 991.216962][ T25] usb 9-1: Manufacturer: syz [ 991.216981][ T25] usb 9-1: SerialNumber: syz [ 991.220457][ T25] usb 9-1: config 0 descriptor?? [ 991.252642][ T25] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 991.298648][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 991.309734][ T25] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 991.319587][ T25] usb 9-1: media controller created [ 991.353787][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.423244][ T25] DVB: Unable to find symbol mt352_attach() [ 991.445798][T32143] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 991.458433][ T1129] dvb-usb: bulk message failed: -22 (7/0) [ 991.580259][ T1153] set_capacity_and_notify: 1 callbacks suppressed [ 991.586944][ T1153] loop4: detected capacity change from 0 to 512 [ 991.596218][ T1153] EXT4-fs: Ignoring removed nobh option [ 991.616996][ T1153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 991.694248][ T1153] EXT4-fs (loop4): 1 truncate cleaned up [ 991.705678][ T1153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.732041][ T25] DVB: Unable to find symbol nxt6000_attach() [ 991.738377][ T25] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 991.756954][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input49 [ 991.796960][ T25] dvb-usb: schedule remote query interval to 1000 msecs. [ 991.805837][ T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 991.816766][ T25] dvb-usb: bulk message failed: -22 (7/0) [ 991.829881][ T25] dvb-usb: bulk message failed: -22 (7/0) [ 991.843949][ T25] usb 9-1: USB disconnect, device number 11 [ 991.859032][ T1153] EXT4-fs warning (device loop4): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 991.860161][ T1153] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 991.999845][ T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 992.053308][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.303736][ T1165] netlink: 'syz.8.11636': attribute type 34 has an invalid length. [ 992.312591][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11636'. [ 992.333276][ T1169] loop4: detected capacity change from 0 to 256 [ 992.349979][ T1168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11637'. [ 992.405430][ T1168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11637'. [ 992.406591][ T1168] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 992.484669][ T1165] bond2: option lacp_strict: invalid value (64) [ 992.525642][ T1165] bond2 (unregistering): Released all slaves [ 993.027862][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.123733][ T1199] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x2160 (0x47425247, 3, 0, 0, 0) [ 993.460892][ T1197] loop9: detected capacity change from 0 to 32768 [ 993.758923][ T1216] loop4: detected capacity change from 0 to 4096 [ 993.830202][ T1195] loop8: detected capacity change from 0 to 40427 [ 993.847057][ T1195] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 993.853948][ T1195] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 993.896100][ T1222] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 994.157970][ T1195] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 994.314608][ T1195] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 994.314661][ T1195] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 994.484767][T28359] syz-executor: attempt to access beyond end of device [ 994.484767][T28359] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 994.537503][T28359] CPU: 1 UID: 0 PID: 28359 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 994.537545][T28359] Tainted: [L]=SOFTLOCKUP [ 994.537555][T28359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 994.537578][T28359] Call Trace: [ 994.537588][T28359] [ 994.537598][T28359] dump_stack_lvl+0xe8/0x150 [ 994.537636][T28359] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 994.537668][T28359] f2fs_write_end_bio+0x1211/0x16e0 [ 994.537698][T28359] ? blkg_put+0x22/0x240 [ 994.537732][T28359] __submit_merged_bio+0x258/0x6a0 [ 994.537754][T28359] ? rcu_is_watching+0x16/0xb0 [ 994.537781][T28359] __submit_merged_write_cond+0x3c9/0x4e0 [ 994.537811][T28359] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 994.537854][T28359] f2fs_write_data_pages+0x2a27/0x36f0 [ 994.537896][T28359] ? __lock_acquire+0x6df/0x2e50 [ 994.537945][T28359] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 994.537969][T28359] ? is_bpf_text_address+0x26/0x2b0 [ 994.538003][T28359] ? arch_stack_walk+0xfb/0x150 [ 994.538049][T28359] ? add_lock_to_list+0xc7/0x100 [ 994.538075][T28359] ? lockdep_unlock+0x5c/0xd0 [ 994.538090][T28359] ? __lock_acquire+0x14b9/0x2e50 [ 994.538133][T28359] ? do_raw_spin_lock+0x12b/0x2f0 [ 994.538168][T28359] ? do_raw_spin_unlock+0xf5/0x200 [ 994.538194][T28359] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 994.538221][T28359] do_writepages+0x338/0x560 [ 994.538249][T28359] ? do_raw_spin_unlock+0xf5/0x200 [ 994.538278][T28359] filemap_fdatawrite+0x1e9/0x2f0 [ 994.538302][T28359] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 994.538360][T28359] ? do_raw_spin_unlock+0xf5/0x200 [ 994.538389][T28359] f2fs_sync_dirty_inodes+0x30e/0x830 [ 994.538431][T28359] f2fs_write_checkpoint+0xa3d/0x2710 [ 994.538457][T28359] ? __lock_acquire+0x6df/0x2e50 [ 994.538503][T28359] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 994.538583][T28359] kill_f2fs_super+0x2dd/0x700 [ 994.538620][T28359] ? __pfx_kill_f2fs_super+0x10/0x10 [ 994.538660][T28359] ? call_rcu+0x64d/0x8b0 [ 994.538686][T28359] ? lockdep_hardirqs_on+0x7b/0x110 [ 994.538727][T28359] deactivate_locked_super+0xbc/0x110 [ 994.538756][T28359] cleanup_mnt+0x3d3/0x460 [ 994.538777][T28359] task_work_run+0x1d9/0x270 [ 994.538801][T28359] ? __pfx_task_work_run+0x10/0x10 [ 994.538830][T28359] exit_to_user_mode_loop+0x204/0x770 [ 994.538850][T28359] ? rcu_is_watching+0x16/0xb0 [ 994.538876][T28359] do_syscall_64+0x328/0x520 [ 994.538892][T28359] ? trace_irq_disable+0x3b/0x140 [ 994.538910][T28359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.538929][T28359] ? clear_bhb_loop+0x70/0xc0 [ 994.538951][T28359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.538969][T28359] RIP: 0033:0x7ff79eb9f397 [ 994.538987][T28359] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 994.539006][T28359] RSP: 002b:00007fffefcd80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 994.539032][T28359] RAX: 0000000000000000 RBX: 00007ff79ec34474 RCX: 00007ff79eb9f397 [ 994.539047][T28359] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffefcd8180 [ 994.539062][T28359] RBP: 00007fffefcd8180 R08: 00007fffefcd9180 R09: 00000000ffffffff [ 994.539078][T28359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffefcd9210 [ 994.539092][T28359] R13: 00007ff79ec34474 R14: 00000000000f2c33 R15: 00007fffefcd9250 [ 994.539129][T28359] [ 994.609985][T28359] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 995.033036][ T1224] loop1: detected capacity change from 0 to 32768 [ 995.393183][ T1230] loop4: detected capacity change from 0 to 32768 [ 995.406508][ T1230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11661 (1230) [ 995.441333][ T1230] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 995.441397][ T1230] BTRFS info (device loop4): using crc32c checksum algorithm [ 995.622275][ T1230] BTRFS info (device loop4): enabling ssd optimizations [ 995.622334][ T1230] BTRFS info (device loop4): turning on flush-on-commit [ 995.622373][ T1230] BTRFS info (device loop4): enabling free space tree [ 995.622438][ T1230] BTRFS info (device loop4): enabling auto defrag [ 995.622500][ T1230] BTRFS info (device loop4): use lzo compression, level 1 [ 995.622585][ T1230] BTRFS info (device loop4): max_inline set to 4096 [ 995.675554][ T1264] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11670'. [ 995.684856][ T1264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11670'. [ 995.694861][ T1264] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11670'. [ 995.804752][ T1268] loop1: detected capacity change from 0 to 64 [ 995.862412][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 996.103263][ T1275] loop9: detected capacity change from 0 to 512 [ 996.116629][ T1275] EXT4-fs error (device loop9): ext4_get_journal_inode:5927: comm syz.9.11674: inode #2147418112: comm syz.9.11674: iget: illegal inode # [ 996.116684][ T1275] loop9: lost filesystem error report for type 5 error -117 [ 996.131022][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 996.131051][ C1] EXT4-fs (loop9): initial error at time 1787926224: ext4_get_journal_inode:5927 [ 996.131081][ C1] EXT4-fs (loop9): last error at time 1787926224: ext4_get_journal_inode:5927 [ 996.157655][ T1275] EXT4-fs (loop9): no journal found [ 996.157717][ T1275] EXT4-fs (loop9): can't get journal size [ 996.192245][ T1275] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 996.193630][ T1275] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 996.310023][ T1275] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.355124][ T1275] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.11674: Invalid inode bitmap blk 4 in block_group 0 [ 996.573096][T32143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.868955][ T1295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11683'. [ 996.875508][ T1295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11683'. [ 997.249203][ T1305] netlink: Failed to add ¦â helper -22 [ 997.249276][ T1305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.442024][ T1318] loop8: detected capacity change from 0 to 512 [ 997.479770][ T1318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.499417][ T1318] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.613469][ T1324] CIFS: Attempting to mount //127.0.0.1/share [ 997.695499][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.741492][ T1324] CIFS: VFS: Error connecting to socket. Aborting operation. [ 997.749589][ T1324] CIFS: VFS: cifs_mount failed w/return code = -111 [ 997.957712][ T1334] loop8: detected capacity change from 0 to 1024 [ 998.573700][ T1356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 998.696459][ T1367] netlink: 'syz.1.11714': attribute type 10 has an invalid length. [ 998.716432][ T1367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.857618][ T5812] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 999.009651][ T5812] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 999.020550][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.034795][ T5812] usb 9-1: config 0 descriptor?? [ 999.048710][ T1376] loop1: detected capacity change from 0 to 256 [ 999.056855][ T1376] exfat: Deprecated parameter 'namecase' [ 999.077594][ T5812] cp210x 9-1:0.0: cp210x converter detected [ 999.118131][ T1376] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 999.298998][ T1382] trusted_key: encrypted_key: key trusted:syz not found [ 999.407386][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 999.588336][ T10] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 999.598794][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.610383][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.620454][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.639425][ T10] usb 10-1: config 0 descriptor?? [ 999.691436][ T5812] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 999.691541][ T5812] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 999.719653][ T5812] usb 9-1: cp210x converter now attached to ttyUSB0 [ 999.740527][ T5812] usb 9-1: USB disconnect, device number 12 [ 999.780625][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 999.789347][ T5812] cp210x 9-1:0.0: device disconnected [ 1000.133751][ T10] cp2112 0003:10C4:EA90.003D: item fetching failed at offset 5/7 [ 1000.145846][ T10] cp2112 0003:10C4:EA90.003D: parse failed [ 1000.152101][ T10] cp2112 0003:10C4:EA90.003D: probe with driver cp2112 failed with error -22 [ 1000.211003][ T1014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.361915][ T25] usb 10-1: USB disconnect, device number 5 [ 1000.476297][ T1014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.621816][ T1398] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11732'. [ 1000.696502][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1000.716186][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1000.736119][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1000.746726][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1000.762063][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1000.780543][ T1014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.082910][ T1014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.658515][ T5726] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1001.673741][ T5812] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1001.810147][ T5726] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1001.832168][ T5726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.837128][ T5726] usb 10-1: Product: syz [ 1001.837175][ T5726] usb 10-1: Manufacturer: syz [ 1001.837193][ T5726] usb 10-1: SerialNumber: syz [ 1001.861659][ T5812] usb 5-1: Using ep0 maxpacket: 16 [ 1001.869128][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1001.869198][ T5812] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1001.887696][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.887822][ T5812] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1001.911924][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.911973][ T5812] usb 5-1: Product: syz [ 1001.912007][ T5812] usb 5-1: Manufacturer: syz [ 1001.912027][ T5812] usb 5-1: SerialNumber: syz [ 1001.984765][ T1014] bridge_slave_1: left allmulticast mode [ 1001.991828][ T1014] bridge_slave_1: left promiscuous mode [ 1001.997843][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.029683][ T1014] bridge_slave_0: left allmulticast mode [ 1002.037162][ T1014] bridge_slave_0: left promiscuous mode [ 1002.043320][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.087424][ T1014] pim6reg: left allmulticast mode [ 1002.120604][ T1014] tipc: Resetting bearer [ 1002.181210][ T5812] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1002.194711][ T5812] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1002.242413][ T1442] loop8: detected capacity change from 0 to 512 [ 1002.282013][ T1442] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13 [ 1002.283719][ T1442] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.11744: inode #15: comm syz.8.11744: iget: illegal inode # [ 1002.283775][ T1442] loop8: lost filesystem error report for type 5 error -117 [ 1002.287332][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1002.287373][ C1] EXT4-fs (loop8): initial error at time 1787926230: ext4_orphan_get:1403 [ 1002.287444][ C1] EXT4-fs (loop8): last error at time 1787926230: ext4_orphan_get:1403 [ 1002.295493][ T1442] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.11744: couldn't read orphan inode 15 (err -117) [ 1002.295640][ T1442] loop8: lost filesystem error report for type 5 error -117 [ 1002.368423][ T1442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.397691][ T5812] usb 5-1: 2:1 : can't get High Capability descriptor [ 1002.566771][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.711909][ T5726] rtl8150 10-1:1.0: couldn't reset the device [ 1002.712846][ T5726] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1002.728018][ T10] usb 5-1: USB disconnect, device number 53 [ 1002.759982][ T5726] usb 10-1: USB disconnect, device number 6 [ 1002.858807][T31141] Bluetooth: hci3: command tx timeout [ 1003.026138][ T1454] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1003.031960][ T1454] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 1003.044155][ T1454] cramfs: wrong magic [ 1003.210582][ T1457] loop8: detected capacity change from 0 to 512 [ 1003.255127][ T1457] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.11747: bg 0: block 5: invalid block bitmap [ 1003.255186][ T1457] loop8: lost filesystem error report for type 5 error -117 [ 1003.268071][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1003.268097][ C0] EXT4-fs (loop8): initial error at time 1787926231: ext4_validate_block_bitmap:436 [ 1003.268124][ C0] EXT4-fs (loop8): last error at time 1787926231: ext4_validate_block_bitmap:436 [ 1003.301661][ T1457] EXT4-fs (loop8): Remounting filesystem read-only [ 1003.301820][ T1457] EXT4-fs (loop8): 2 truncates cleaned up [ 1003.317037][ T1457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.532093][T28359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.659069][ T1461] loop9: detected capacity change from 0 to 4096 [ 1003.713403][ T1461] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1003.880646][ T1461] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1004.022021][ T38] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1004.022211][T32143] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1004.022256][T32143] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1004.022279][T32143] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1004.100557][ T12] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1004.628495][ T5812] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1004.789582][ T5812] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1004.800816][ T5812] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1004.809191][ T5812] usb 10-1: config 0 has no interface number 0 [ 1004.815578][ T5812] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.826794][ T5812] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.836937][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.854811][ T5812] usb 10-1: config 0 descriptor?? [ 1004.938314][T31141] Bluetooth: hci3: command tx timeout [ 1005.308740][ T5812] prodikeys 0003:041E:2801.003E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.9-1/input1 [ 1005.349129][ T5812] hid_prodikeys: hid-prodikeys: failed to find output report [ 1005.349129][ T5812] [ 1005.448113][ T1496] loop4: detected capacity change from 0 to 32768 [ 1005.466618][ T1496] (syz.4.11765,1496,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1005.467953][ T1496] (syz.4.11765,1496,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1005.565704][ T5726] usb 10-1: USB disconnect, device number 7 [ 1005.629222][ T1496] JBD2: Ignoring recovery information on journal [ 1005.644096][ T1501] fido_id[1501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1005.746897][ T1496] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1006.263881][ T5616] ocfs2: Unmounting device (7,4) on (node local) [ 1006.927344][ T5726] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1006.998426][ T1527] loop4: detected capacity change from 0 to 512 [ 1007.017489][T31141] Bluetooth: hci3: command tx timeout [ 1007.050934][ T1527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.051058][ T1527] ext4 filesystem being mounted at /2403/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.079962][ T5726] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1007.087988][ T5726] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1007.088113][ T5726] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1007.088188][ T5726] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1007.088259][ T5726] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1007.088374][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.154561][ T1519] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1007.336075][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.520478][ T5726] ims_pcu 10-1:1.0: Failed to set line coding, error: -71 [ 1007.525777][ T5726] ims_pcu 10-1:1.0: probe with driver ims_pcu failed with error -71 [ 1007.570696][ T5726] usb 10-1: USB disconnect, device number 8 [ 1007.608557][ T1014] BUG: MAX_LOCKDEP_KEYS too low! [ 1007.613576][ T1014] turning off the locking correctness validator. [ 1007.619946][ T1014] CPU: 0 UID: 0 PID: 1014 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.631010][ T1014] Tainted: [L]=SOFTLOCKUP [ 1007.635365][ T1014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1007.645458][ T1014] Workqueue: netns cleanup_net [ 1007.650281][ T1014] Call Trace: [ 1007.653597][ T1014] [ 1007.656556][ T1014] dump_stack_lvl+0xe8/0x150 [ 1007.661229][ T1014] register_lock_class+0x2aa/0x2e0 [ 1007.666391][ T1014] ? add_lock_to_list+0xc7/0x100 [ 1007.671378][ T1014] __lock_acquire+0xaf/0x2e50 [ 1007.676106][ T1014] lock_acquire+0x115/0x350 [ 1007.680645][ T1014] ? dev_reset_queue+0x138/0x1b0 [ 1007.685624][ T1014] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1007.691028][ T1014] ? dev_reset_queue+0x138/0x1b0 [ 1007.695993][ T1014] _raw_spin_lock_bh+0x36/0x50 [ 1007.700781][ T1014] ? dev_reset_queue+0x138/0x1b0 [ 1007.705743][ T1014] dev_reset_queue+0x138/0x1b0 [ 1007.710534][ T1014] dev_deactivate_many+0x778/0xda0 [ 1007.715697][ T1014] ? dev_deactivate_many+0x25d/0xda0 [ 1007.721023][ T1014] __dev_close_many+0x180/0x6e0 [ 1007.725912][ T1014] ? kasan_save_stack+0x3e/0x60 [ 1007.730795][ T1014] ? kasan_record_aux_stack+0xbd/0xd0 [ 1007.736204][ T1014] ? call_rcu+0xee/0x8b0 [ 1007.740480][ T1014] ? ip_fib_net_exit+0x2c6/0x330 [ 1007.745491][ T1014] ? process_scheduled_works+0xc3d/0x1630 [ 1007.751260][ T1014] ? worker_thread+0xa47/0xfb0 [ 1007.756059][ T1014] ? __pfx___dev_close_many+0x10/0x10 [ 1007.761480][ T1014] netif_close_many+0x249/0x660 [ 1007.766821][ T1014] ? __pfx_netif_close_many+0x10/0x10 [ 1007.772252][ T1014] unregister_netdevice_many_notify+0xb76/0x2140 [ 1007.778712][ T1014] ? lockdep_hardirqs_on+0x7b/0x110 [ 1007.783950][ T1014] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1007.790752][ T1014] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 1007.796600][ T1014] ? rtnl_is_locked+0x15/0x20 [ 1007.801310][ T1014] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 1007.806810][ T1014] ops_undo_list+0x391/0x8d0 [ 1007.811435][ T1014] ? __pfx_ops_undo_list+0x10/0x10 [ 1007.816582][ T1014] ? idr_destroy+0x218/0x290 [ 1007.821212][ T1014] ? do_raw_spin_unlock+0xf5/0x200 [ 1007.826376][ T1014] cleanup_net+0x572/0x810 [ 1007.830822][ T1014] ? __pfx_cleanup_net+0x10/0x10 [ 1007.835889][ T1014] ? rcu_is_watching+0x16/0xb0 [ 1007.840682][ T1014] ? process_scheduled_works+0x97a/0x1630 [ 1007.846444][ T1014] process_scheduled_works+0xc3d/0x1630 [ 1007.852045][ T1014] ? __pfx_process_scheduled_works+0x10/0x10 [ 1007.858079][ T1014] ? assign_work+0x3cf/0x5d0 [ 1007.862719][ T1014] worker_thread+0xa47/0xfb0 [ 1007.867350][ T1014] ? __kthread_parkme+0x71/0x1f0 [ 1007.872332][ T1014] kthread+0x38b/0x480 [ 1007.876423][ T1014] ? __pfx_worker_thread+0x10/0x10 [ 1007.881571][ T1014] ? __pfx_kthread+0x10/0x10 [ 1007.886193][ T1014] ret_from_fork+0x514/0xb70 [ 1007.890818][ T1014] ? __pfx_ret_from_fork+0x10/0x10 [ 1007.895954][ T1014] ? __switch_to+0xc89/0x1420 [ 1007.900674][ T1014] ? __pfx_kthread+0x10/0x10 [ 1007.905303][ T1014] ret_from_fork_asm+0x1a/0x30 [ 1007.910100][ T1014] [ 1008.131047][ T1014] tipc: Disabling bearer [ 1009.100380][T31141] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.1.155 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.155" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255