last executing test programs: 52.681949618s ago: executing program 2 (id=1607): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x3c, 0x8, 0x1ff}) 52.412929333s ago: executing program 2 (id=1611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 52.174244363s ago: executing program 2 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 51.403796061s ago: executing program 2 (id=1618): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 51.098361082s ago: executing program 2 (id=1623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x40, 0x0, 0x0, 0xfffffffe}]}}]}]}, 0x34}}, 0x0) 50.542099125s ago: executing program 2 (id=1630): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) 50.099791619s ago: executing program 32 (id=1630): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) 9.095880424s ago: executing program 0 (id=1960): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 8.964268436s ago: executing program 0 (id=1961): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) 8.730710325s ago: executing program 0 (id=1962): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40025b0c, &(0x7f0000000000)={0x103, 0x200, 0x0, 0x101, 0x5, 0x7f77901d}) 6.666555749s ago: executing program 0 (id=1972): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0xa0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.576599204s ago: executing program 1 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 3.223321793s ago: executing program 3 (id=1983): r0 = epoll_create(0x7) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) 3.149138745s ago: executing program 0 (id=1984): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/716, @ANYRES16, @ANYRES64], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001240)={0x8, {"17688c8f3c83fd6c5bc6a268d3870543eb58170dc705033db3ef27406ccb9edaedd6dba02623375d0272a6bf092bc9c88b64a31c4f9907b6930ad0325e8120efcadd2404b5889e90c5e8a9aa7bc1b4b2f8a7954a956697b8c817c3530f58a1068036d2ad0cd8fd5338156d76b5dea234c72cb7a7462e45c690257d59f12907830fe9f80a8f7a630b29c3b317c4cb11c0b836402772cc017d2e90ae32345dc695b65dae457a9360bec768dcc8952944750b751a7721c13a18dcc3cd4ba3c914aa768518bd83d8906df9c8f1b08b42467175f6770efaa4fd6042ffc7f3fc20c2377b865d8e8da2b26e585ed1d44172c8afe950c09be83b24d2d0e045b79c7857020b4a6a5eb9142a25bdd706478dd12b7626588de3eac3b03b7a0bd883f625aafb53189952901c8e50075289c07cdaf85fa43d4912f17ce15f6aa048e6cea6c43f8b439e1844dcb1545d754b197b4da748288baf50a8e47a27a2e25c65bca00c0f6fe8c2279b38aa12cf11b1cbd2622c926ad9e637e84bfe8c59ba5290820bb2f652aa41555916489eb8de2a94a11fdde3bfd5033a04ed286711b918f85e5dce4185d198837dbfa5612e65b1171a81405192db776ee5984c050938bc1481a328012486cada830ada19b91d6f755f3de80ba2189c1b714707ffdd00d4c9f92e077d38d8378ad5e2a808bb3c409571b570d178acbecefe0a63507db6e3ad58d79dd94f15bf1adac1351300543544782c36f9e63041c3bc494ec954b90fe5ababb9ad0b5b9bcc01cc816d831f2e3021ea195d594bcf4b7271a60bea369cb7b20cae4db27c7baeec19491c735907bb7b7c7128d197cc9a45cebab3a94677732a2860bfb1b41becd4a551d5ed444b2fedc1e4f86787f5892c9e765e01f6511d96703d1a6945790c5a20a801ff007a5cbb4bd3255af5c690ee61ccdba888118915c20fa7c1e4dab9c3a37dee4fbb6494b91210c6e81b1c2dea14786d79f1b9c170bb87c08864888447e2ec841b77ae72f324d8f02ddb2d1009c8d06b3e3776619e66c1f7f59a222c95d55230c3911798940beebfb379ffaa56d65fd7986a6e74f3384a272e27f238625fc92bb8597f79d79c4ca84f6a8de0dc15da12d6ce9fd90e8cd7ad7efeedc49c4db7479145699a28f21d2fa4836a9670ff2dc36c4b122a50e42195e3b7da5ced25e0ff69bb0add297bbb979d721763ea11ec1afcb810a433d37e7d733cf585af70f4778bb08d0444569e87173f9805b084e1cbe1c5c7415598bd381101d985a6baef7db08bb7cdf88fcfe157b2586a883c7f13a147e74802808b5f81f90e0b6ca0b52a51f3a18cd7bd0b37337035829d3dca20d0ab202135c62180aeaa43b7659527477e2abd8b249d4ef29a6f9b70d0456f463f6d07317da51a2a9a6f3187275166884a69cc18807c4981cdf8d5271abd3c64eadb8976f6624c74914cfd7d69fb378d3d4a8288f6348add02a695d7d1ae64d263756e011c009d702f194410eab72e932f4543ff17f69879c51b1a5f0ca34d9448660f62c830705607db0e3f781907e9fface084e0c1b59a41a285d86650755db54d6962b5c6550aad5c8df2251f24ed6e32fd89d16acc65adb400b2cffd3a48309a9639b0fd03a9e2b20b9ad231f265ea0ff6e92c6ff51683e04c4cf74dc6dab34d426ad9a6dc825ed2614484d258f36da90363c474a85df64d9454d927535f70c966ccb4377cbdec4e5d0927ef12b7641bdb0ee319bf8907a4346f56dcf3283ecf4753fb61b7b738137bf69179466e46b9c9c37d51e3752061ff20e9f42d0e105bf2e1da8f230a65a7b198ca98ab8b1f4f70438906293490ad79e792e169b17ff60bf2447ef512418a2bddb9bd337f4a12e76126f4f1cb4c5d2a4dd8ba226dcaa6a7e265d8ed8d14e848b0345fd410255fffa36db6ef24cf07856415d8f1a0536e21d4bc2be8e4c133dae7372f7b2eb735c640fe016fa4743a3d6a08ff32fabb0d0c0b16a9174b649a789cff8645cc8e9934bf2bcd2da72d4c497c99fff45eb0fc3a47ce4d04d8cd5e3d3972d84c2f95bd2b6ce6943e79f575364b5570ec55ab7e4e373643f11b9aecd343c4cd9ede10fecdab2252be94fd84540d8e09baf47d2c5d31a6a051d08ae12ada2a4559a4b4f69d3fe3ca430f6a907e0432108de8b62e01cb4308b0646f2f6c6cc09f1e7e02b2e7c99fe6c6577b9a294fd594b87b374070a509ab86d8dfd365df7db929e7db3c81309093708f81dcfbfc22290372ec52436506411e8b3a7de5529f3f436cd697be275fae59ba86ea0f626d71c4beecafd6f505ba2a8170cd84ef604d662eead5f717094608ea8b570aac969c02dea42536e2419c719fbdb94b272136926140ff0d2301af22dc667ef985404c1b8d329dfcfdd99b2334823b8bc195a1e8f40b91801a0884e8467a5236a38ae735027dff1fe0333b9febd682685b6b7a5e5a87a8081fa103a89ecf9a9ea240fe15ce78a6377ea926fca046091e263e806ea404731689a09bb6d5b1d72e2127f01f0cf2f76177e6bf4da1e2cbd503d78b04fb92b991c640eb65a7b10383459313ff8e47697e9c001ca3b2a6d8a4513ee84c1d97134e54bec8348e7c1342bbbb70e268b7238f7c91484aa8a3fdd28c7569974a2bb615c0b6e9b63fed3a9dce46cc4d58c8c87899b783b9be613782dafb19fce30e5cf25ffc2eeebb2eeab516d1c9fee524f6c83b95fe594975b634c469c91c4df08b865cd73267bdfce80724e243a45d07e7e272fbee3c37c4ae2e2ee4145d41ed32406ab4dfc0f33c08a0a19a86413b622d653d46f068a97a553a6ed30616ed3743401ee1a2df142613ec705b9d74196893b41ec8b94e0c3948379e2885caa368ad66634bd6cd2aed9085b72532df1ea13ebae5d7a5748333ee10a0f97320b5ca1d63470c2539421719162b74c3e0af79e0f1c8093207ff938546481332f20f8d1514a1eebeb0a137fae5325af8ddc94af445f5f41099bf70a6ed6d011515965f54637347d458b4382102059d03524e782c8159c9664d266e59a65d6d654a5006af92187f7eda34598a86586eb39534247f01fc0a8307cd8e93c932d0fab1da21a62658cf068edb2671b257ed6c3b089f34f18d9df6bda23ae13aa66325b07bf4c60f412154a8c221d4119c9fa8d249f0c3274624df6030c0c0f701ef00b52b1059446f844edbf3018401d00ad6e5bb126d2681bb52429dcd723b0ea7edffb51875b7b5cdeb95b48b33cd77ea4413fd4165ab55ff6e0b506679511b580e26eaaf2259c269bfecefd66a929b882f759db5eafe9682ab1110c47f7582a5d21d685881ff92cbb1d1d79a3228874729006bb6c493bdc7eb5ff7aa552123b3c89de13d617ee691aae54b969ec8155d2121078dc0cb493395753b800e24d990a1fee4080af3c2442f0eff29f19f3a716df492b9854b92352331800cfddbc541bbd12c4873d3c0c53f1283e1d04f85a3b26368fdb123b7a119ae31d9f9fd28c185b667bfb5f5a7775435abdcd8b08172b17978446d5fc7c4da130afaa4ae0cb59c8ce0a5e3232475139a8e1a75d7c8cbeee5da22d995da6dde9851aa35496a9a2723d64799c9fdb323103e86d4961e514c4b069dfae7b2a30a225a63b961b28b4785002f81cf6034bf614759071beba29a49881715609fb3d269664410d865a19e1cade0f508df3962bf3724b1f0d01f1aeb86fc0ca0c74c19be0a20d2d1510d11cd69191c27df9495154c87300d465692e73f1ff746558c052e1939a73ec2897dd7ec25f007d76e6dd78d549739999c705177c5f9d2fcf4b398a2857039b26c647c81a8cd263a51e5c4687bf23036be1e851b218e68c7d05ffe8229ce3e509ab848c3bd60246b8cf9cee753dbfe9b2b13d42f94410ebe0ec57aa30482361ee6bd017f28d686df459f0f6d9481fc1dc04ad1b05fa7e02ea77ce12822e4a8a7c37cc90680483264e0fbb9bec25c8d37d7d530c30a382667f471c54b20c07afa4302c73fcdad3c08074ccd442f7555015a5e9175c357c7f43f95ef220850080aec57c55ae25c84e4ed8fc66aeb46e1e33b86592f1a0776c4327bff8ca95fbf98be1ecf04fbb3c16eb3e2ce493dee4abc95200f0ecfc472264e9fe67cc5d94b66557c7c976278bab01478f50483cb42c6f1ff1b8cd623878a837f7d9c0cca19de6bbad9a9f9c48c9daec523c9d5adf880db6dcf32453c8bee25b0dd6ebe9c15e3ff5cffc27c9f74fa71b6aa9520f1e49b71bcc0d68388aa570002344ef578b58f3d29f8dc39870353ed1cc4a494a4bca88bda50ba057468bb0277201b6a70463ed8917719243367a66dbaffc2f9726a4b5a27e5c6b7a400d37d8f2d93b8c0844ebd8d3def78ffe09dbb291ca123d141edabbd7b0bad2d7400e31b56c7e8dd820b9de73f3659e77b3d07da230a98df19d3f9d131e8347737f2c286e070a034b17b0a5f5ca0c8e40529e742ba8561407d11e409256dffe3666578d53c32039fa0d6031a203f8f9f24a7e6b0e63f83e0c5ed009e0594acc2176e827dde39145c31e3650eacfb81de02c0ec42b7a14dfd9a38f85640d5b6998cd8b76cd0449ca6fe0592a8d6e94f6d1b1f843bfd659ecce36b75e69b1fb9c2f40000a0d0e43c5fb36d1948a8e5c68a6019c5d78f89e62e1152ff8ea1bdd60c83f89f1cbf4914ce56280c085bf8882caebaa1c7e09b0d9ba7055c5dad98a78dfa38056c3c299137c20504a2eaa227dc0f8ccc4c77806eb75baf6291bdd13086bdee6235cc202459ef28aaac3da3e1330cbaa0f289eb49e5fb42566e989fde3a1523b9e80246ef4087dd50c2d8b23066db18ee7c44a3cc2d6c88513a2266d9ef4bf99aac8edb46db3ac114ab49f21a3bec6eb2461a6ca759a0fb349590e4965793643cd5d2ee908bebb144c6f9e7f031a705fe48e7ca80f63f6d6abf3ec603f7a3353bebcf61010d955857c85b3c8878073fba85b60e32e6629325a2b6a6adc19469be6bb7c23eea3238e8f27dfe9774730979f5a453b07e26a56d34d57e094e14e39942749c53ff0d7c0cd8389a8262aa32bdc3e694f70c4f3295dc3aa135131ad46a7e369e38237ea6615c2029371c876ceeaf015d1b75d334c1c4786d2bd234108f019b6cf9244698d95b6df65933daab0b27da61c4e1017b02fa6742174aef0f31c00ef35c8f24d3d4cd88bcd245e082deb8abfcb8598be10436898f56303959a71b0ffd63517b29168e299b66b98d0722b64db1ac88c9e57e8fb6f71f8e3ccf89090d034a2a643ee274cce9cb12949b3e60e06aceaa5fe58376ae2d5f2823698bdeb888fe31714acdc66006ab08218a78f57130a17e1f79627c355a1fefde8015f7b8b9add2bc66ad46e14645d2687a19a5ab3aa303d733d7ee862ac1afe2f586572fb9afe1628cb41930565d0c0e012551e4c299ed3805d34daeef340e3b619f8e07823af512e2db6cc5890e50329f1068e3d56a1b8ef48cfd7bd9ec2c1d870cbe933dbdcee3ec7d6aaa3ff88becf9e81e8a819a0a7645277a184302dd2b79c7ca71ee301b090e835ef3ef6ec60490d7115b1b8f0394803181663049cd7de5ee1be23c347b5e8f84eed9b16c66bd06a51e9c7db4be01debad3605a2124a7f03defd7710b9cb07392bb33982b2c49dcc112f557e9456cbbad7a13aa23e0364d8441a6cfab5587b0a75b28de943a4012e6d08185b56bbac285ef2d39f6f601bc3606d1b70cdc403325ac6f50950b5d90c62f6360134ecef0fb3d2b779ed837a450ec933cc68eb51cf9d1d6775b68b5e03d6e22afafef4fcc4bf2e0334e00414aecf5b2e5", 0x1000}}, 0x1006) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xdd5}) 3.000307531s ago: executing program 1 (id=1987): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800044, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x365, &(0x7f0000000440)="$eJzs3U9r1EwcB/DvJPv3aemTp+1DxZtVwVPZ1oMigiK9+QY8SLF2t1AaK7QVVBRXD55EvAmCR2+eRd+CXsQ3oKceiie9lCKNzC+TTXY7ye72T9rS7we63SYzyW9mMpOZ6jYgomPr2vT3d+fX9JcqAnABXAIcABWgAOB/jFXuLa0urPqNetaBXMmhvxTCnGpbmrmlhi2rzic5DE//VMBgchvtjyAIgh9dU/3KJRY6OCrs+9s4QNn0TtlfyT2yHWn2kKCcTyiHSKKF1QY27C1ORETHibn/O+YuMWjm744DnDXz8KN0/48kVxBtd7sN4NG/+cdzaMj9/z6GpMX1OkDp+pEaUfF6T5Zwug6daJVoO5b1mgji6i4hvLLaGkBZVpVtMzKJxanOL/iNiaYc4BmuGIlko/JaR1QQkRZtKfw2blmbZsgqe7YBKUNRl6GYEv9I32f8tI7X9tPNfCl1j0l9Vl/VjPLwBnUMmY2FQOnKkeweUDWbozpd8Bu19CNKKT0pZa2tlHHv+09OcjJqgY/v41JW0+q1AlfHYqOPojrn7yYC4FVKLcjm4fZBwbTOZHrpJNeINddU6+dNa67RzlzV+aLfmJi762f+KmXPWOf36qW6ocbxEx8w3Wp/3dSuHupTemZnL1eSMqyFWmZ5CpIypR3byMV2p6+eSdj8E4T6yuXhBW7jIoZWHjxcnPX9xnJub/RoYd0VdZUcwnB7SBNeiOZy1Fv090QaVPSbIoA9C2wrCALrroK9xvp7U4pCTYu5KEW98LZVZBlmza9Sdnd2NMM6TOy6mp44Hjal7EafJ5XsT1q59N2in+y/w7PrdremUXGEy6X97TLRqWZ9/0Sr4VyUe+op1R2c9PrjxVl/R6MRHTErz0+ZMQdjN9cvH3Q4lD8971Lh+i+xXqnJqKNfvIzVSNdZR+KIkykroGF5/SdebSigiXrmRHAgfQU3EL3xG1NZa67T54AziY26hA6iUj7tPKxn4sRh/FfJsi2salYONY1vuJWY/xMRERERERERERERERERERERERER0ZEQ/6d/b5cfJ9gyn0OyfxIjtnYM//AGEREREREREREREREREREREREREREREdHuJJ7/C7jyxJjSnj//N/rD3r0+/9ft4fm/qusjPomoi78BAAD//4wjXtY=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/169, 0xa9) 2.803862013s ago: executing program 3 (id=1988): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) 2.698028251s ago: executing program 1 (id=1990): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 1.953894615s ago: executing program 4 (id=1992): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xf2b, 0xaeb, 0xe57, 0x1, 0x7, "3ce6920887f0bbe1fffffff10c000000800004", 0x4, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xd) 1.539518874s ago: executing program 1 (id=1993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2], 0x144}}, 0x18) 1.539317794s ago: executing program 4 (id=1994): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) 1.528758056s ago: executing program 3 (id=1995): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000005600)={0xa, 0x4ea1, 0x3, @empty, 0x55}, 0x1c) write(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000010001, 0x1000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) 1.314931031s ago: executing program 4 (id=1996): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x1) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x22) 1.314329051s ago: executing program 3 (id=1997): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 1.270740529s ago: executing program 1 (id=1998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20008080) 1.039633237s ago: executing program 3 (id=1999): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000028c0)='asymmetric\x00', &(0x7f0000002980)=@keyring={'key_or_keyring:', r1}) keyctl$get_persistent(0x16, 0x0, r0) 973.907438ms ago: executing program 1 (id=2000): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xb, {"10421b0f4959410bcd694ee565560c26", "7f3db605e694f78760e7d6d6029ca25a", "943c27e0c76a1ef747add078a622e85b"}, 0x1, 0x4}) 791.327859ms ago: executing program 3 (id=2001): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@autodefrag}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7, 0x3a, ',', 0x3a, 'flushoncommit', 0x3a, './file1'}, 0x35) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f0000000200)="a9", 0x1}], 0x1, 0x5, 0x0, 0x2, 0xfffffffffffffffe, 0xf4e0, 0x5, 0x400}) 754.399465ms ago: executing program 4 (id=2002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 488.573529ms ago: executing program 0 (id=2003): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 329.251185ms ago: executing program 4 (id=2004): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061184a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) 0s ago: executing program 4 (id=2005): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) kernel console output (not intermixed with test programs): 20620][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.928964][ T5761] usb 2-1: Product: syz [ 188.934240][ T5761] usb 2-1: Manufacturer: syz [ 188.938940][ T5761] usb 2-1: SerialNumber: syz [ 188.946491][ T5761] usb 2-1: config 0 descriptor?? [ 188.957369][ T5761] usb 2-1: selecting invalid altsetting 0 [ 188.989657][ T7806] loop2: detected capacity change from 0 to 32768 [ 189.013576][ T7806] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.720 (7806) [ 189.048010][ T7806] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 189.095578][ T7806] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 189.105540][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 189.114571][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 189.123434][ T7806] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 189.132923][ T7806] BTRFS info (device loop2): use zstd compression, level 3 [ 189.153804][ T7806] BTRFS info (device loop2): using free space tree [ 189.354659][ T5761] usb 2-1: USB disconnect, device number 7 [ 189.436192][ T7806] BTRFS info (device loop2): enabling ssd optimizations [ 189.473486][ T7806] BTRFS info (device loop2): auto enabling async discard [ 189.653992][ T28] audit: type=1800 audit(1776260779.845:8): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.720" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 189.728183][ T5779] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 190.528622][ T7848] netlink: 'syz.2.731': attribute type 3 has an invalid length. [ 190.543951][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 191.333054][ T7870] use of bytesused == 0 is deprecated and will be removed in the future, [ 191.342875][ T7870] use the actual size instead. [ 192.393514][ T788] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 192.581359][ T7923] loop0: detected capacity change from 0 to 512 [ 192.608672][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.644384][ T7923] EXT4-fs (loop0): 1 truncate cleaned up [ 192.663409][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.690135][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.739674][ T788] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 192.776404][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.821589][ T788] usb 3-1: config 0 descriptor?? [ 192.873617][ T28] audit: type=1800 audit(1776260783.065:9): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.765" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 192.906695][ T7923] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.765: bg 0: block 465: padding at end of block bitmap is not set [ 192.969602][ T7923] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 192.993860][ T7923] EXT4-fs (loop0): This should not happen!! Data will be lost [ 192.993860][ T7923] [ 193.012645][ T7923] EXT4-fs (loop0): Total free blocks count 0 [ 193.019144][ T7923] EXT4-fs (loop0): Free/Dirty block details [ 193.025611][ T7923] EXT4-fs (loop0): free_blocks=0 [ 193.031154][ T7923] EXT4-fs (loop0): dirty_blocks=9 [ 193.036379][ T7923] EXT4-fs (loop0): Block reservation details [ 193.042623][ T7923] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 193.170091][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.268450][ T788] saitek 0003:06A3:0621.0005: ignoring exceeding usage max [ 193.286488][ T788] saitek 0003:06A3:0621.0005: unknown main item tag 0x1 [ 193.293761][ T788] saitek 0003:06A3:0621.0005: collection stack underflow [ 193.300866][ T788] saitek 0003:06A3:0621.0005: item 0 4 0 12 parsing failed [ 193.311079][ T788] saitek 0003:06A3:0621.0005: parse failed [ 193.317536][ T788] saitek: probe of 0003:06A3:0621.0005 failed with error -22 [ 193.575672][ T2128] usb 3-1: USB disconnect, device number 8 [ 193.759790][ T7939] pimreg: tun_chr_ioctl cmd 1074025676 [ 193.772065][ T7939] pimreg: owner set to 270 [ 194.368286][ T7950] loop1: detected capacity change from 0 to 128 [ 194.442428][ T7950] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 194.478771][ T7950] hpfs: filesystem error: improperly stopped [ 194.495494][ T7950] hpfs: You really don't want any checks? You are crazy... [ 194.522423][ T7950] hpfs: hpfs_map_sector(): read error [ 194.542294][ T7950] hpfs: code page support is disabled [ 194.562914][ T7950] hpfs: hpfs_map_4sectors(): unaligned read [ 194.579141][ T7950] hpfs: hpfs_map_4sectors(): unaligned read [ 194.586881][ T7950] hpfs: filesystem error: unable to find root dir [ 194.613563][ T5761] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.625291][ T7935] loop0: detected capacity change from 0 to 131072 [ 194.655149][ T7935] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 194.661926][ T7935] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 194.672991][ T7935] F2FS-fs (loop0): invalid crc value [ 194.710717][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.721375][ T7935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.726783][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780155][ T7935] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 194.787379][ T7935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 194.838891][ T5761] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.885240][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 194.910004][ T5761] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.932176][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.972041][ T5761] usb 3-1: Product: syz [ 194.979949][ T5761] usb 3-1: Manufacturer: syz [ 194.989721][ T5761] usb 3-1: SerialNumber: syz [ 195.006508][ T5761] usb 3-1: config 0 descriptor?? [ 195.036792][ T5761] usb 3-1: selecting invalid altsetting 0 [ 195.354996][ T5761] usb 3-1: USB disconnect, device number 9 [ 196.244410][ T7978] loop0: detected capacity change from 0 to 256 [ 196.265219][ T7978] exfat: Deprecated parameter 'namecase' [ 196.338828][ T7978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 197.091709][ T8004] loop1: detected capacity change from 0 to 1024 [ 197.454819][ T8013] loop1: detected capacity change from 0 to 256 [ 197.490210][ T8013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 198.541773][ T8050] loop0: detected capacity change from 0 to 2048 [ 198.573424][ T8050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.808318][ T8049] nbd0: detected capacity change from 0 to 63 [ 198.864845][ T5787] block nbd0: Receive control failed (result -104) [ 198.872160][ T5785] block nbd0: Receive control failed (result -32) [ 198.943800][ T5761] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.993562][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 199.129205][ T8067] netlink: 136 bytes leftover after parsing attributes in process `syz.0.828'. [ 199.152128][ T8067] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 199.173429][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 199.180788][ T5761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 199.195344][ T5761] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 199.211915][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.228850][ T5761] usb 3-1: Product: syz [ 199.237617][ T5761] usb 3-1: Manufacturer: syz [ 199.250046][ T5761] usb 3-1: SerialNumber: syz [ 199.265145][ T5761] usb 3-1: config 0 descriptor?? [ 199.280859][ T5761] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 199.291321][ T5761] usb 3-1: Detected FT232R [ 199.491727][ T5761] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 199.718211][ T5761] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 199.803420][ T788] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 199.942550][ T5817] usb 3-1: USB disconnect, device number 10 [ 199.977200][ T5817] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 199.995929][ T5817] ftdi_sio 3-1:0.0: device disconnected [ 200.004265][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.020941][ T788] usb 2-1: not running at top speed; connect to a high speed hub [ 200.047709][ T788] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 200.061214][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.074365][ T788] usb 2-1: Product: syz [ 200.078609][ T788] usb 2-1: Manufacturer: syz [ 200.088832][ T788] usb 2-1: SerialNumber: syz [ 200.607714][ T5761] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 200.803354][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 200.822970][ T5761] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 200.840061][ T5761] usb 1-1: config 0 has no interface number 0 [ 200.852121][ T5761] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.880479][ T5761] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 200.905943][ T8089] loop2: detected capacity change from 0 to 1024 [ 200.912432][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.935878][ T5761] usb 1-1: Product: syz [ 200.958098][ T5761] usb 1-1: Manufacturer: syz [ 200.968946][ T8089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.994114][ T5761] usb 1-1: SerialNumber: syz [ 201.030810][ T8089] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.058513][ T5761] usb 1-1: config 0 descriptor?? [ 201.094072][ T5761] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 201.145995][ T5761] em28xx 1-1:0.132: Video interface 132 found: [ 201.211486][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.516926][ T5761] em28xx 1-1:0.132: chip ID is em2765 [ 201.932457][ T5761] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 201.971448][ T5761] em28xx 1-1:0.132: board has no eeprom [ 202.053381][ T5761] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 202.072765][ T5761] em28xx 1-1:0.132: analog set to bulk mode. [ 202.089930][ T2128] em28xx 1-1:0.132: Registering V4L2 extension [ 202.106942][ T788] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 202.130127][ T5761] usb 1-1: USB disconnect, device number 11 [ 202.151187][ T5761] em28xx 1-1:0.132: Disconnecting em28xx [ 202.158390][ T788] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 202.254596][ T788] usb 2-1: USB disconnect, device number 8 [ 202.322622][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.499260][ T2128] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 202.512380][ T2128] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 202.530018][ T2128] em28xx 1-1:0.132: No AC97 audio processor [ 202.553072][ T2128] usb 1-1: Decoder not found [ 202.559017][ T2128] em28xx 1-1:0.132: failed to create media graph [ 202.570740][ T2128] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 202.607237][ T2128] em28xx 1-1:0.132: Remote control support is not available for this card. [ 202.636117][ T5761] em28xx 1-1:0.132: Closing input extension [ 202.739616][ T5761] em28xx 1-1:0.132: Freeing device [ 202.975905][ T8122] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.063807][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 203.081506][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 203.144863][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 203.164607][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 203.304726][ T8133] program syz.2.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.798688][ T8150] loop2: detected capacity change from 0 to 4096 [ 203.832351][ T8150] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 203.928751][ T8150] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 204.733855][ T5814] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 204.784061][ T788] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 204.933679][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 204.941315][ T5814] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.971906][ T5814] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.983684][ T5814] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 204.998579][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.007258][ T788] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 205.018525][ T5814] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.037050][ T788] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 205.047577][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.056054][ T788] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 205.067913][ T5814] usb 3-1: config 0 descriptor?? [ 205.074427][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.729432][ T23] usb 3-1: USB disconnect, device number 11 [ 205.989649][ T8206] loop1: detected capacity change from 0 to 40427 [ 206.003503][ T8206] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 206.014587][ T8206] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x724 [ 206.044761][ T8206] F2FS-fs (loop1): invalid crc value [ 206.062564][ T8206] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.126397][ T788] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 206.140962][ T8206] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 206.165818][ T788] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 206.187197][ T8206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.200404][ T788] input: failed to attach handler kbd to device input10, error: -5 [ 206.249944][ T788] usb 1-1: USB disconnect, device number 12 [ 206.329160][ T8206] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 206.446781][ T5771] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 206.522648][ T8223] tipc: Started in network mode [ 206.529438][ T8223] tipc: Node identity ac14140f, cluster identity 4711 [ 206.537795][ T8223] tipc: New replicast peer: 255.255.255.255 [ 206.548497][ T8223] tipc: Enabled bearer , priority 10 [ 207.033437][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 207.039534][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 207.040574][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 207.093583][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.150479][ T8232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.896'. [ 207.313744][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 207.332728][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.341269][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 207.366959][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.387414][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.420951][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.436745][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.456080][ T23] usb 1-1: config 0 descriptor?? [ 207.547115][ T5761] tipc: Node number set to 2886997007 [ 207.916763][ T23] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 207.946228][ T23] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 208.106572][ T23] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 208.132578][ T23] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 208.166132][ T23] microsoft 0003:045E:07DA.0007: no inputs found [ 208.172603][ T23] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 208.457715][ T23] usb 1-1: USB disconnect, device number 13 [ 208.862598][ T8262] netlink: 88 bytes leftover after parsing attributes in process `syz.3.909'. [ 208.894712][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 209.065560][ T8256] loop1: detected capacity change from 0 to 32768 [ 209.104578][ T8256] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.906 (8256) [ 209.162312][ T8256] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 209.189984][ T8256] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 209.241422][ T8256] BTRFS info (device loop1): using free space tree [ 209.468932][ T8293] loop2: detected capacity change from 0 to 128 [ 209.492171][ T8256] BTRFS info (device loop1): enabling ssd optimizations [ 209.520285][ T8293] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.544611][ T8256] BTRFS info (device loop1): auto enabling async discard [ 209.643407][ T8293] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.874138][ T5771] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 209.887566][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.206052][ T6063] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop1 scanned by udevd (6063) [ 210.443785][ T8317] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 210.975680][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 211.991098][ T8343] loop2: detected capacity change from 0 to 32768 [ 211.993598][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.006143][ T8343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.938 (8343) [ 212.027204][ T8343] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.042407][ T8343] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 212.055449][ T8343] BTRFS info (device loop2): setting nodatasum [ 212.061784][ T8343] BTRFS info (device loop2): force zlib compression, level 3 [ 212.079362][ T8343] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 212.093058][ T8343] BTRFS info (device loop2): use lzo compression, level 0 [ 212.102554][ T8343] BTRFS info (device loop2): turning on flush-on-commit [ 212.114263][ T8343] BTRFS info (device loop2): enabling auto defrag [ 212.121075][ T8343] BTRFS info (device loop2): max_inline at 4096 [ 212.131476][ T8343] BTRFS info (device loop2): using free space tree [ 212.204114][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 212.213777][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.223093][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.234310][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.242981][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.253829][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.264195][ T8343] BTRFS info (device loop2): enabling ssd optimizations [ 212.265844][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.280433][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.289781][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.301323][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.310256][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.337178][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.364281][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.380844][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.402530][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.420189][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.438526][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.449887][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.475619][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.508253][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.527575][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.559115][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.584232][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.603965][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.614663][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.652737][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.677509][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.711630][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.764308][ T9] usb 2-1: Product: syz [ 212.771375][ T9] usb 2-1: Manufacturer: syz [ 212.803770][ T9] usb 2-1: SerialNumber: syz [ 212.828591][ T9] usb 2-1: config 0 descriptor?? [ 212.883968][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 213.159317][ T9] usb 2-1: USB disconnect, device number 9 [ 213.206827][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 213.667820][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.163732][ T8389] loop2: detected capacity change from 0 to 40427 [ 214.189889][ T8389] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 214.218528][ T8389] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 214.240012][ T8389] F2FS-fs (loop2): invalid crc value [ 214.272123][ T8389] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.393785][ T8389] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 214.413373][ T8389] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 214.519522][ T28] audit: type=1800 audit(1776260804.715:10): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.952" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 214.602817][ T5779] syz-executor: attempt to access beyond end of device [ 214.602817][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.626835][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 214.678804][ T8409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.968'. [ 214.835286][ T8411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.961'. [ 214.849644][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.961'. [ 214.866081][ T8401] syz.1.958 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 215.289097][ T8420] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 215.701591][ T8413] loop0: detected capacity change from 0 to 32768 [ 215.761347][ T8413] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 215.783447][ T8413] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.011194][ T8413] XFS (loop0): Ending clean mount [ 216.052643][ T8444] GUP no longer grows the stack in syz.1.974 (8444): 200000004000-200000b36000 (200000000000) [ 216.054397][ T8413] XFS (loop0): Quotacheck needed: Please wait. [ 216.083397][ T8444] CPU: 1 PID: 8444 Comm: syz.1.974 Not tainted syzkaller #0 [ 216.090898][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.101035][ T8444] Call Trace: [ 216.104385][ T8444] [ 216.107373][ T8444] dump_stack_lvl+0x18c/0x250 [ 216.112133][ T8444] ? show_regs_print_info+0x20/0x20 [ 216.117407][ T8444] ? load_image+0x420/0x420 [ 216.121982][ T8444] ? find_vma+0x134/0x1b0 [ 216.126390][ T8444] __get_user_pages+0xf0e/0x1380 [ 216.131420][ T8444] ? populate_vma_page_range+0x380/0x380 [ 216.137119][ T8444] ? __gup_longterm_locked+0x20f6/0x2b80 [ 216.142821][ T8444] ? down_read_killable+0x1d0/0x340 [ 216.148087][ T8444] __gup_longterm_locked+0x2251/0x2b80 [ 216.153627][ T8444] ? pin_user_pages_remote+0x220/0x220 [ 216.159132][ T8444] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 216.165153][ T8444] ? lock_chain_count+0x20/0x20 [ 216.170036][ T8444] ? internal_get_user_pages_fast+0x1fc6/0x2760 [ 216.176309][ T8444] internal_get_user_pages_fast+0x21bf/0x2760 [ 216.182420][ T8444] ? min_deadline_cb_rotate+0x150/0x150 [ 216.188009][ T8444] ? asan.module_dtor+0x20/0x20 [ 216.192896][ T8444] ? get_user_pages_fast_only+0xa0/0xa0 [ 216.198474][ T8444] ? plist_add+0x3d8/0x490 [ 216.202928][ T8444] get_futex_key+0x1aa/0x1010 [ 216.207627][ T8444] ? futex_unqueue+0xcb/0xf0 [ 216.212251][ T8444] ? futex_wait+0x4cc/0x5e0 [ 216.216785][ T8444] ? futex_setup_timer+0xc0/0xc0 [ 216.221772][ T8444] futex_wake+0x127/0x4f0 [ 216.226212][ T8444] ? futex_wake_mark+0x150/0x150 [ 216.231205][ T8444] ? __se_sys_mremap+0x898/0x11f0 [ 216.236291][ T8444] do_futex+0x35d/0x3e0 [ 216.240533][ T8444] ? __ia32_sys_get_robust_list+0x110/0x110 [ 216.246481][ T8444] __se_sys_futex+0x3a9/0x440 [ 216.251204][ T8444] ? __x64_sys_futex+0xf0/0xf0 [ 216.256023][ T8444] ? __x64_sys_futex+0x21/0xf0 [ 216.260841][ T8444] do_syscall_64+0x55/0xa0 [ 216.265328][ T8444] ? clear_bhb_loop+0x40/0x90 [ 216.270040][ T8444] ? clear_bhb_loop+0x40/0x90 [ 216.274754][ T8444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.280689][ T8444] RIP: 0033:0x7f50d099c819 [ 216.285151][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.304798][ T8444] RSP: 002b:00007f50d18d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.313251][ T8444] RAX: ffffffffffffffda RBX: 00007f50d0c15fa0 RCX: 00007f50d099c819 [ 216.321269][ T8444] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000200000000240 [ 216.329277][ T8444] RBP: 00007f50d0a32c91 R08: 0000000000000000 R09: 0000000000000002 [ 216.337282][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.345327][ T8444] R13: 00007f50d0c16038 R14: 00007f50d0c15fa0 R15: 00007ffdc7e519f8 [ 216.353355][ T8444] [ 216.356456][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.393896][ T8413] XFS (loop0): Quotacheck: Done. [ 216.622534][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.710004][ T8429] loop2: detected capacity change from 0 to 32768 [ 216.781372][ T8429] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.897841][ T8429] XFS (loop2): Ending clean mount [ 216.946648][ T8429] XFS (loop2): Quotacheck needed: Please wait. [ 217.022721][ T8429] XFS (loop2): Quotacheck: Done. [ 217.173425][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.773566][ T2128] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.983479][ T2128] usb 1-1: Using ep0 maxpacket: 16 [ 218.025191][ T2128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.054677][ T2128] usb 1-1: no configurations [ 218.066283][ T2128] usb 1-1: can't read configurations, error -22 [ 218.405662][ T8504] loop2: detected capacity change from 0 to 512 [ 218.437690][ T8504] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.996: inode has both inline data and extents flags [ 218.470140][ T8504] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.996: couldn't read orphan inode 15 (err -117) [ 218.519399][ T8504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.586883][ T8510] loop1: detected capacity change from 0 to 2048 [ 218.638005][ T8510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.716274][ T28] audit: type=1800 audit(1776260808.915:11): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.998" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 218.731680][ T8510] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, [ 218.736598][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.751700][ T8510] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 218.768115][ T8515] EXT4-fs: Ignoring removed bh option [ 218.774253][ T8504] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 218.795259][ T8515] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 218.806696][ T8515] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 218.823988][ T8510] EXT4-fs error (device loop1) in ext4_setattr:5682: error 28 [ 218.829275][ T8515] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 218.914260][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.961044][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.740499][ T8546] loop0: detected capacity change from 0 to 128 [ 219.792185][ T8546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 219.844481][ T8546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.941426][ T8552] loop2: detected capacity change from 0 to 512 [ 219.967762][ T8552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.036340][ T8552] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1016: iget: bad extended attribute block 262144 [ 220.083831][ T8552] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1016: couldn't read orphan inode 15 (err -117) [ 220.112541][ T8552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.389505][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.843413][ T5817] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.053319][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 221.070154][ T5817] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.101871][ T5817] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.133370][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.140262][ T5817] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 221.170118][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.186810][ T8589] loop0: detected capacity change from 0 to 128 [ 221.215944][ T8589] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 221.226293][ T5817] usb 2-1: config 0 descriptor?? [ 221.259512][ T8589] hpfs: filesystem error: improperly stopped [ 221.267231][ T8589] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 221.275760][ T8589] hpfs: You really don't want any checks? You are crazy... [ 221.283728][ T8589] hpfs: hpfs_map_sector(): read error [ 221.289208][ T8589] hpfs: code page support is disabled [ 221.298044][ T8589] hpfs: hpfs_map_4sectors(): unaligned read [ 221.305141][ T8589] hpfs: hpfs_map_4sectors(): unaligned read [ 221.311240][ T8589] hpfs: filesystem error: unable to find root dir [ 221.455271][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.477312][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.739253][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.758540][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.777084][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.793326][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.806444][ T8585] loop2: detected capacity change from 0 to 40427 [ 221.813550][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.820660][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.839913][ T8585] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 221.850463][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.859847][ T8585] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 221.873101][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.884481][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.891794][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.900069][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.908094][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.915902][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.937898][ T8585] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.953480][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.966909][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 221.990041][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 222.010382][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 222.031795][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 222.055886][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 222.068869][ T8585] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 222.076229][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 222.085391][ T8585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.099335][ T5817] uclogic 0003:5543:0005.0008: unknown main item tag 0x0 [ 222.116877][ T5817] uclogic 0003:5543:0005.0008: item fetching failed at offset 35/36 [ 222.144271][ T5817] uclogic 0003:5543:0005.0008: parse failed [ 222.161448][ T5817] uclogic: probe of 0003:5543:0005.0008 failed with error -22 [ 222.202158][ T5817] usb 2-1: USB disconnect, device number 10 [ 222.318372][ T28] audit: type=1800 audit(1776260812.515:12): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1030" name="file1" dev="loop2" ino=11 res=0 errno=0 [ 223.255531][ T8606] loop0: detected capacity change from 0 to 32768 [ 223.291326][ T8606] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1036 (8606) [ 223.329131][ T8606] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 223.341286][ T8606] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 223.352736][ T8606] BTRFS info (device loop0): enabling disk space caching [ 223.368866][ T8606] BTRFS info (device loop0): force clearing of disk cache [ 223.377512][ T8606] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.405445][ T8606] BTRFS info (device loop0): use zstd compression, level 3 [ 223.414468][ T8606] BTRFS info (device loop0): disk space caching is enabled [ 223.527208][ T8606] BTRFS info (device loop0): enabling ssd optimizations [ 223.543417][ T8606] BTRFS info (device loop0): auto enabling async discard [ 223.569369][ T8606] BTRFS info (device loop0): rebuilding free space tree [ 223.627406][ T8606] BTRFS info (device loop0): disabling free space tree [ 223.641630][ T8606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.673538][ T8606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.772810][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 223.909636][ T5776] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.080255][ T6063] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (6063) [ 224.395213][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 224.954359][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 225.094654][ T8675] loop2: detected capacity change from 0 to 2048 [ 225.219157][ T8678] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.559190][ T8682] loop0: detected capacity change from 0 to 512 [ 225.701884][ T8686] loop2: detected capacity change from 0 to 512 [ 225.713499][ T8682] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1063: inode has both inline data and extents flags [ 225.818360][ T8686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1064: bg 0: block 393: padding at end of block bitmap is not set [ 225.845906][ T8682] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1063: couldn't read orphan inode 15 (err -117) [ 225.877588][ T8682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.890799][ T8686] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 225.911191][ T8686] EXT4-fs (loop2): 2 truncates cleaned up [ 225.946049][ T8686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.138824][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.360680][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.596187][ T8705] loop1: detected capacity change from 0 to 512 [ 226.664043][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.739140][ T8705] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.905671][ T8705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.950646][ T8705] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 227.045192][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.211430][ T8719] vcan0: tx address claim with different name [ 227.240315][ T8721] loop1: detected capacity change from 0 to 128 [ 227.584471][ T8715] loop2: detected capacity change from 0 to 32768 [ 227.639208][ T8715] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.725535][ T8715] XFS (loop2): Ending clean mount [ 227.733761][ T5817] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.935231][ T5817] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 227.960047][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.974539][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.988637][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.038358][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.069680][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.081677][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.103109][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.123968][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.143524][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.163655][ T788] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.186445][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.199546][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.209791][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.220367][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.253013][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.261714][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.271268][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.292940][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.313763][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.334553][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.367996][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.374986][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 228.389369][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.410362][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.420608][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.440743][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.462426][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.472506][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.481837][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.497634][ T788] usb 2-1: Product: syz [ 228.503510][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.517523][ T788] usb 2-1: Manufacturer: syz [ 228.522182][ T788] usb 2-1: SerialNumber: syz [ 228.527160][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.559743][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.580478][ T5817] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.590061][ T5817] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.608389][ T5817] usb 1-1: Product: syz [ 228.619647][ T5817] usb 1-1: Manufacturer: syz [ 228.643581][ T5817] usb 1-1: SerialNumber: syz [ 228.654998][ T5817] usb 1-1: config 0 descriptor?? [ 228.698650][ T5817] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 228.773662][ T788] usb 2-1: 0:2 : does not exist [ 228.793721][ T788] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 228.827550][ T788] usb 2-1: USB disconnect, device number 11 [ 228.871576][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.975159][ T9] usb 1-1: USB disconnect, device number 16 [ 228.985849][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 228.994813][ T5817] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.186060][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 229.195067][ T5817] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.214058][ T5817] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.226329][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.233024][ T5817] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 229.242286][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.254774][ T5817] usb 3-1: config 0 descriptor?? [ 229.271665][ T97] block nbd0: Connection timed out, retrying (0/2 alive) [ 229.281749][ T97] block nbd0: Connection timed out, retrying (0/2 alive) [ 229.289106][ T97] block nbd0: Connection timed out, retrying (0/2 alive) [ 229.296434][ T97] block nbd0: Connection timed out, retrying (0/2 alive) [ 229.304190][ T97] block nbd0: Dead connection, failed to find a fallback [ 229.320143][ T97] block nbd0: shutting down sockets [ 229.326174][ T97] blk_print_req_error: 26 callbacks suppressed [ 229.326189][ T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.343748][ T97] buffer_io_error: 25 callbacks suppressed [ 229.343764][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 229.358833][ T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.368021][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 229.375962][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.385464][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 229.393438][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.402528][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.412791][ T8748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.423787][ T8748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.432111][ T8748] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 229.441262][ T8748] Buffer I/O error on dev nbd0, logical block 1, async page read [ 229.450780][ T8748] Buffer I/O error on dev nbd0, logical block 2, async page read [ 229.459967][ T8748] Buffer I/O error on dev nbd0, logical block 3, async page read [ 229.473908][ T8748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 229.483062][ T8748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.491077][ T8748] Buffer I/O error on dev nbd0, logical block 1, async page read [ 229.499225][ T8748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.508766][ T8748] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 229.518347][ T8748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.530747][ T5772] ldm_validate_partition_table(): Disk read failed. [ 229.540056][ T5772] Dev nbd0: unable to read RDB block 0 [ 229.548302][ T5772] nbd0: unable to read partition table [ 229.561181][ T5772] ldm_validate_partition_table(): Disk read failed. [ 229.570687][ T5772] Dev nbd0: unable to read RDB block 0 [ 229.579670][ T5772] nbd0: unable to read partition table [ 229.777027][ T5817] hid (null): usage index exceeded [ 230.006624][ T5817] usb 3-1: USB disconnect, device number 12 [ 231.045917][ T8770] loop0: detected capacity change from 0 to 32768 [ 231.076774][ T8770] (syz.0.1097,8770,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.099141][ T8770] (syz.0.1097,8770,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.126579][ T8770] JBD2: Ignoring recovery information on journal [ 231.161915][ T8770] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 231.550385][ T8770] syz.0.1097 (8770) used greatest stack depth: 18768 bytes left [ 231.609334][ T8796] loop1: detected capacity change from 0 to 512 [ 231.663931][ T8796] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1106: inode has both inline data and extents flags [ 231.695041][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 231.743461][ T8796] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1106: couldn't read orphan inode 15 (err -117) [ 231.760429][ T8802] trusted_key: encrypted_key: keyword 'uew' not recognized [ 231.794861][ T8796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.266149][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.505276][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 232.808712][ T8830] program syz.1.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.470701][ T8844] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1129'. [ 233.807334][ T8850] loop0: detected capacity change from 0 to 128 [ 234.250292][ T2953] kworker/u4:9: attempt to access beyond end of device [ 234.250292][ T2953] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 234.836753][ T8864] loop0: detected capacity change from 0 to 4096 [ 234.872460][ T51] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 235.208007][ T8862] loop1: detected capacity change from 0 to 32768 [ 235.218425][ T8862] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 235.400961][ T5772] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 235.566142][ T8875] loop2: detected capacity change from 0 to 1024 [ 235.763588][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 235.803374][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 235.814908][ T2953] hfsplus: b-tree write err: -5, ino 25 [ 235.820790][ T2953] hfsplus: b-tree write err: -5, ino 4 [ 235.843454][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 235.863672][ T2953] hfsplus: b-tree write err: -5, ino 2 [ 235.880295][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 235.938313][ T8880] netlink: 'syz.0.1144': attribute type 6 has an invalid length. [ 236.323454][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 236.381404][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 236.502335][ T8906] xt_hashlimit: size too large, truncated to 1048576 [ 236.543432][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 236.555233][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.581926][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.612310][ T8908] pimreg: entered allmulticast mode [ 236.623830][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 236.651566][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.665163][ T8908] pimreg: left allmulticast mode [ 236.670377][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 236.701547][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.729829][ T9] usb 2-1: config 0 descriptor?? [ 236.944269][ T51] Bluetooth: hci3: command tx timeout [ 237.163901][ T5817] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.259728][ T8918] nbd1: detected capacity change from 0 to 127 [ 237.278377][ T51] block nbd1: Receive control failed (result -104) [ 237.359334][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 237.394667][ T5817] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.428029][ T5817] usb 3-1: config 0 has no interface number 0 [ 237.445096][ T23] usb 2-1: USB disconnect, device number 12 [ 237.458113][ T5817] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 237.475890][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.485386][ T5817] usb 3-1: Product: syz [ 237.489614][ T5817] usb 3-1: Manufacturer: syz [ 237.498042][ T5817] usb 3-1: SerialNumber: syz [ 237.505860][ T5817] usb 3-1: config 0 descriptor?? [ 237.529411][ T5817] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 238.331209][ T5817] gspca_spca1528: reg_w err -71 [ 238.366760][ T5817] spca1528: probe of 3-1:0.1 failed with error -71 [ 238.414553][ T5817] usb 3-1: USB disconnect, device number 13 [ 238.566398][ T8927] loop0: detected capacity change from 0 to 4096 [ 238.946670][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 238.955814][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 238.967263][ T5787] Bluetooth: hci2: hardware error 0x00 [ 239.160913][ T8944] loop2: detected capacity change from 0 to 1024 [ 239.751680][ T8967] loop1: detected capacity change from 0 to 24 [ 240.299493][ T8990] fuse: Bad value for 'fd' [ 240.554034][ T5816] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 240.699231][ T9001] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 240.745395][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.763318][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.791975][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.825626][ T5816] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 240.856146][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.878172][ T5816] usb 1-1: config 0 descriptor?? [ 241.023874][ T5787] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 241.333769][ T5816] acrux 0003:1A34:0802.000B: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 241.367083][ T5816] acrux 0003:1A34:0802.000B: no inputs found [ 241.373172][ T5816] acrux 0003:1A34:0802.000B: Failed to enable force feedback support, error: -19 [ 241.484635][ T9022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1208'. [ 241.532147][ T5817] usb 1-1: USB disconnect, device number 17 [ 241.783347][ T5835] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 241.987666][ T5835] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.003453][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.025307][ T5835] usb 2-1: config 0 descriptor?? [ 242.054472][ T5835] cp210x 2-1:0.0: cp210x converter detected [ 242.664607][ T5835] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 242.683767][ T5835] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 242.725204][ T5835] usb 2-1: cp210x converter now attached to ttyUSB0 [ 242.735786][ T9045] loop0: detected capacity change from 0 to 512 [ 242.744842][ T5835] usb 2-1: USB disconnect, device number 13 [ 242.772330][ T9045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.816688][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.836250][ T5835] cp210x 2-1:0.0: device disconnected [ 242.892507][ T9045] EXT4-fs (loop0): 1 orphan inode deleted [ 242.925411][ T9045] EXT4-fs (loop0): 1 truncate cleaned up [ 242.932681][ T9045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.065413][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.271754][ T9063] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.279544][ T9063] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.298697][ T9059] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 243.305588][ T9059] pim6reg1: linktype set to 6 [ 243.733329][ T788] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.947741][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 243.965336][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.975045][ T788] usb 2-1: config 0 has no interface number 0 [ 243.982261][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.996221][ T788] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.005524][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.016957][ T788] usb 2-1: config 0 descriptor?? [ 244.032622][ T788] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 244.909568][ T9089] loop0: detected capacity change from 0 to 32768 [ 245.032554][ T9089] syz.0.1239: attempt to access beyond end of device [ 245.032554][ T9089] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 245.073471][ T9089] lbmIODone: I/O error in JFS log [ 245.086292][ T9089] *** Log Format Error ! *** [ 245.098446][ T9089] lmLogInit: exit(-22) [ 245.122880][ T9089] lmLogOpen: exit(-22) [ 245.228847][ T9097] loop2: detected capacity change from 0 to 256 [ 245.239398][ T9089] ERROR: (device loop0): jfs_link: read-only filesystem [ 245.239398][ T9089] [ 245.303784][ T9089] ERROR: (device loop0): remounting filesystem as read-only [ 245.346769][ T788] usb 2-1: USB disconnect, device number 14 [ 245.613758][ T9101] loop2: detected capacity change from 0 to 4096 [ 245.759160][ T9104] loop0: detected capacity change from 0 to 512 [ 245.776786][ T9104] EXT4-fs: inline encryption not supported [ 245.797725][ T9104] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.846082][ T9104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.867991][ T9104] EXT4-fs (loop0): Test dummy encryption mode enabled [ 245.898693][ T9104] EXT4-fs (loop0): orphan cleanup on readonly fs [ 245.923395][ T9104] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1244: inode #13: comm syz.0.1244: iget: illegal inode # [ 245.953782][ T9104] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1244: couldn't read orphan inode 13 (err -117) [ 246.050153][ T9104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 246.187231][ T9104] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 246.237112][ T9104] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.1244: Abort forced by user [ 246.263811][ T9104] EXT4-fs (loop0): Remounting filesystem read-only [ 246.278705][ T9104] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 246.419485][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.550543][ T9125] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1256'. [ 246.817364][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1258'. [ 248.089868][ T9160] loop2: detected capacity change from 0 to 256 [ 248.732984][ T9177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1279'. [ 248.785742][ T9176] loop1: detected capacity change from 0 to 512 [ 248.827432][ T9176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 248.986642][ T9183] netem: change failed [ 249.004695][ T9166] loop2: detected capacity change from 0 to 40427 [ 249.023094][ T9166] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 249.067988][ T9166] F2FS-fs (loop2): invalid crc value [ 249.087257][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.115009][ T9166] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.204867][ T9166] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.361116][ T5779] syz-executor: attempt to access beyond end of device [ 249.361116][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.408914][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 249.732915][ T9197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1286'. [ 252.658568][ T9252] loop1: detected capacity change from 0 to 8192 [ 252.677273][ T9252] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.703329][ T9252] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 252.739588][ T9252] REISERFS (device loop1): using ordered data mode [ 252.747536][ T9252] reiserfs: using flush barriers [ 252.765015][ T9252] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.805378][ T9252] REISERFS (device loop1): checking transaction log (loop1) [ 252.836591][ T9252] REISERFS (device loop1): Using r5 hash to sort names [ 252.844028][ T9252] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 253.230328][ T9267] loop2: detected capacity change from 0 to 512 [ 253.278841][ T9270] loop1: detected capacity change from 0 to 512 [ 253.358599][ T9267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.402071][ T9267] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.444455][ T9270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 253.506119][ T9270] ext4 filesystem being mounted at /335/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.561117][ T9282] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.1313: Directory hole found for htree leaf block 0 [ 253.604724][ T9270] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 253.652878][ T9270] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 253.683447][ T9270] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1311: Failed to acquire dquot type 0 [ 253.757447][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.783947][ T9288] loop0: detected capacity change from 0 to 256 [ 253.843117][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 253.939826][ T9288] FAT-fs (loop0): Directory bread(block 64) failed [ 253.953704][ T9288] FAT-fs (loop0): Directory bread(block 65) failed [ 253.960413][ T9288] FAT-fs (loop0): Directory bread(block 66) failed [ 253.984445][ T9288] FAT-fs (loop0): Directory bread(block 67) failed [ 253.991272][ T9288] FAT-fs (loop0): Directory bread(block 68) failed [ 254.053520][ T9288] FAT-fs (loop0): Directory bread(block 69) failed [ 254.060294][ T9288] FAT-fs (loop0): Directory bread(block 70) failed [ 254.095612][ T9288] FAT-fs (loop0): Directory bread(block 71) failed [ 254.102370][ T9288] FAT-fs (loop0): Directory bread(block 72) failed [ 254.114914][ T9288] FAT-fs (loop0): Directory bread(block 73) failed [ 254.196265][ T9294] loop1: detected capacity change from 0 to 2048 [ 254.277386][ T9294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.358531][ T9294] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 254.419558][ T9294] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 254.434942][ T9294] EXT4-fs (loop1): This should not happen!! Data will be lost [ 254.434942][ T9294] [ 254.470207][ T9294] EXT4-fs (loop1): Total free blocks count 0 [ 254.520068][ T9294] EXT4-fs (loop1): Free/Dirty block details [ 254.542582][ T9294] EXT4-fs (loop1): free_blocks=2415919504 [ 254.583426][ T9294] EXT4-fs (loop1): dirty_blocks=32 [ 254.598610][ T9294] EXT4-fs (loop1): Block reservation details [ 254.632073][ T9294] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 254.707993][ T9309] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 254.727901][ T9307] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 254.774226][ T9311] loop2: detected capacity change from 0 to 1024 [ 255.408774][ T9318] loop0: detected capacity change from 0 to 128 [ 255.469195][ T9318] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.621036][ T9318] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.724273][ T9318] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x1b) [ 255.948037][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.151230][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.157862][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.484847][ T9332] sctp: [Deprecated]: syz.2.1336 (pid 9332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.484847][ T9332] Use struct sctp_sack_info instead [ 257.012906][ T9347] loop1: detected capacity change from 0 to 256 [ 257.066167][ T9347] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.151927][ T9330] loop0: detected capacity change from 0 to 32768 [ 257.234492][ T9330] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 257.460685][ T9330] XFS (loop0): Ending clean mount [ 257.696695][ T5776] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 258.323974][ T9380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1349'. [ 258.403941][ T9384] loop2: detected capacity change from 0 to 64 [ 258.634350][ T5779] Trying to free block not in datazone [ 259.605323][ T9412] netlink: 'syz.2.1369': attribute type 3 has an invalid length. [ 259.623283][ T9412] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.1369'. [ 259.879672][ T9420] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.888470][ T9420] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 260.048584][ T9409] loop1: detected capacity change from 0 to 32768 [ 260.100476][ T9409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 260.132757][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1376'. [ 260.137246][ T9409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 260.333346][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 260.359081][ T9409] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 260.408091][ T5816] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 260.422672][ T5816] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 260.535548][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 260.575574][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.604477][ T9] usb 1-1: config 0 descriptor?? [ 260.667791][ T5816] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms [ 260.697445][ T5816] gfs2: fsid=syz:syz.0: jid=0: Done [ 260.705368][ T9409] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 261.072899][ T9] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 261.099280][ T9] [drm] Initialized udl on minor 2 [ 261.146580][ T9409] gfs2: fsid=syz:syz.0: found 1 quota changes [ 261.265177][ T9409] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 261.265177][ T9409] inode = 11 2340 [ 261.265177][ T9409] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 479 [ 261.333504][ T9409] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 261.353285][ T9409] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9409 [syz.1.1368] gfs2_quota_sync+0x411/0x5a0 [ 261.383413][ T9409] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:68719476912 p:0 [ 261.392607][ T9409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 261.434355][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 261.462873][ T9409] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 261.472630][ T9409] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 261.494763][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.503792][ T9409] gfs2: fsid=syz:syz.0: File system withdrawn [ 261.520574][ T9409] CPU: 1 PID: 9409 Comm: syz.1.1368 Not tainted syzkaller #0 [ 261.528020][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.538123][ T9409] Call Trace: [ 261.541452][ T9409] [ 261.544487][ T9409] dump_stack_lvl+0x18c/0x250 [ 261.549229][ T9409] ? kobject_uevent_env+0x363/0x8b0 [ 261.554486][ T9409] ? show_regs_print_info+0x20/0x20 [ 261.559754][ T9409] ? load_image+0x420/0x420 [ 261.564353][ T9409] ? kobject_uevent_env+0x363/0x8b0 [ 261.569625][ T9409] gfs2_withdraw+0xb24/0x13d0 [ 261.574415][ T9409] ? gfs2_lm+0x240/0x240 [ 261.578718][ T9409] ? make_kgid+0x1c8/0x660 [ 261.583098][ T5835] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.591003][ T9409] ? gfs2_consist_inode_i+0xf5/0x110 [ 261.595344][ T9] usb 1-1: USB disconnect, device number 18 [ 261.596586][ T9409] gfs2_inode_refresh+0xc50/0x1160 [ 261.607677][ T9409] ? gfs2_inode_metasync+0xf0/0xf0 [ 261.612843][ T9409] ? gfs2_glock_nq+0xd4f/0x1420 [ 261.617773][ T9409] gfs2_instantiate+0x162/0x220 [ 261.622694][ T9409] gfs2_glock_wait+0x1d4/0x2a0 [ 261.627526][ T9409] do_sync+0x4c6/0xe50 [ 261.631651][ T9409] ? gfs2_quota_sync+0x411/0x5a0 [ 261.636668][ T9409] ? bh_get+0x760/0x760 [ 261.640885][ T9409] ? gfs2_quota_sync+0x31a/0x5a0 [ 261.645879][ T9409] ? gfs2_quota_sync+0x411/0x5a0 [ 261.650864][ T9409] ? do_raw_spin_unlock+0x121/0x230 [ 261.656151][ T9409] ? do_raw_spin_unlock+0x121/0x230 [ 261.656188][ T5835] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.661406][ T9409] gfs2_quota_sync+0x411/0x5a0 [ 261.661450][ T9409] gfs2_sync_fs+0x4c/0xb0 [ 261.677604][ T9409] sync_filesystem+0xea/0x220 [ 261.682350][ T9409] gfs2_reconfigure+0xbb/0xb10 [ 261.687185][ T9409] ? sb_prepare_remount_readonly+0x4b7/0x4f0 [ 261.693232][ T9409] ? reconfigure_super+0x647/0x8a0 [ 261.698400][ T9409] reconfigure_super+0x21e/0x8a0 [ 261.703388][ T9409] path_mount+0xd2f/0xff0 [ 261.707790][ T9409] __se_sys_mount+0x2e7/0x3d0 [ 261.712538][ T9409] ? __x64_sys_mount+0xc0/0xc0 [ 261.717363][ T9409] ? lockdep_hardirqs_on+0x98/0x150 [ 261.722622][ T9409] ? __x64_sys_mount+0x20/0xc0 [ 261.727427][ T9409] do_syscall_64+0x55/0xa0 [ 261.731877][ T9409] ? clear_bhb_loop+0x40/0x90 [ 261.736593][ T9409] ? clear_bhb_loop+0x40/0x90 [ 261.741311][ T9409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.747248][ T9409] RIP: 0033:0x7f50d099c819 [ 261.751731][ T9409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.771369][ T9409] RSP: 002b:00007f50d18d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.779817][ T9409] RAX: ffffffffffffffda RBX: 00007f50d0c15fa0 RCX: 00007f50d099c819 [ 261.787820][ T9409] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 261.795821][ T9409] RBP: 00007f50d0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 261.803833][ T9409] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 261.811842][ T9409] R13: 00007f50d0c16038 R14: 00007f50d0c15fa0 R15: 00007ffdc7e519f8 [ 261.819872][ T9409] [ 261.823040][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.830881][ T9498] loop1: detected capacity change from 0 to 164 [ 264.374110][ T9507] loop2: detected capacity change from 0 to 2048 [ 264.630480][ T9508] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.668956][ T2128] IPVS: starting estimator thread 0... [ 265.693907][ T9534] IPVS: sed: FWM 3 0x00000003 - no destination available [ 265.711805][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 265.763538][ T9535] IPVS: using max 18 ests per chain, 43200 per kthread [ 266.324429][ T9551] loop0: detected capacity change from 0 to 8192 [ 266.379441][ T9551] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.404348][ T9551] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 266.413912][ T9551] REISERFS (device loop0): using ordered data mode [ 266.421431][ T9551] reiserfs: using flush barriers [ 266.429291][ T9551] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.450972][ T9551] REISERFS (device loop0): checking transaction log (loop0) [ 266.470534][ T9551] REISERFS (device loop0): Using r5 hash to sort names [ 266.486033][ T9551] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 266.909997][ T9570] pim6reg1: tun_chr_ioctl cmd 35108 [ 267.344605][ T9568] loop2: detected capacity change from 0 to 32768 [ 267.443335][ T5816] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 267.645286][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.677782][ T55] block nbd1: Possible stuck request ffff888021e08000: control (read@0,4096B). Runtime 30 seconds [ 267.703431][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.728036][ T5816] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 267.737527][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.754493][ T5816] usb 1-1: config 0 descriptor?? [ 268.210875][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.237652][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.244626][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.251492][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.286876][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.307909][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.322929][ T5816] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 268.353430][ T5816] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 268.670526][ T5816] usb 1-1: USB disconnect, device number 19 [ 268.703973][ T9582] loop1: detected capacity change from 0 to 32768 [ 268.721277][ T9582] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1438 (9582) [ 268.759029][ T9582] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 268.800461][ T9582] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 268.838996][ T9582] BTRFS info (device loop1): enabling auto defrag [ 268.850577][ T9582] BTRFS info (device loop1): use no compression [ 268.859416][ T9582] BTRFS info (device loop1): force clearing of disk cache [ 268.888396][ T9582] BTRFS info (device loop1): max_inline at 4096 [ 268.897081][ T9582] BTRFS info (device loop1): disabling free space tree [ 268.990811][ T9582] BTRFS info (device loop1): enabling ssd optimizations [ 269.019609][ T9582] BTRFS info (device loop1): auto enabling async discard [ 269.079115][ T9582] BTRFS info (device loop1): rebuilding free space tree [ 269.140381][ T9582] BTRFS info (device loop1): disabling free space tree [ 269.157116][ T9582] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.169244][ T9582] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.341979][ T5771] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.531796][ T5772] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop1 scanned by udevd (5772) [ 269.547727][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.966948][ T5835] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.193425][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 270.216985][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.257365][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.283241][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.303832][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.331784][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.367267][ T5835] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.386822][ T5835] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.407051][ T5835] usb 2-1: Manufacturer: syz [ 270.434410][ T5835] usb 2-1: config 0 descriptor?? [ 270.661322][ T9636] loop2: detected capacity change from 0 to 32768 [ 270.761426][ T9636] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 270.889504][ T9661] fuse: Bad value for 'fd' [ 270.907449][ T5835] rc_core: IR keymap rc-hauppauge not found [ 270.919896][ T5835] Registered IR keymap rc-empty [ 270.938433][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.022589][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.054543][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 271.105702][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 271.137334][ T9663] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1467'. [ 271.164346][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.180052][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 271.223437][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.273913][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.312490][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.364120][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.399531][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.444511][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.483664][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.533352][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.583802][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.629181][ T5835] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 271.676085][ T5835] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.708632][ T5835] usb 2-1: USB disconnect, device number 15 [ 271.719371][ T5787] Bluetooth: hci3: link tx timeout [ 271.726874][ T5787] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 271.738511][ T51] Bluetooth: hci3: link tx timeout [ 271.744038][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 272.638185][ T9676] loop2: detected capacity change from 0 to 32768 [ 273.665061][ T28] audit: type=1107 audit(1776261119.855:13): pid=9725 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 273.823551][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 274.207682][ T28] audit: type=1326 audit(1776261120.405:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.3.1506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6efd9c819 code=0x0 [ 274.273489][ T9745] loop1: detected capacity change from 0 to 4096 [ 274.286459][ T9745] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 274.750328][ T9760] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 274.778735][ T9762] program syz.2.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.091005][ T9772] loop2: detected capacity change from 0 to 764 [ 275.148833][ T9772] rock: directory entry would overflow storage [ 275.156760][ T9772] rock: sig=0x4654, size=5, remaining=4 [ 275.612927][ T9786] Bluetooth: MGMT ver 1.22 [ 275.798354][ T9764] loop1: detected capacity change from 0 to 32768 [ 275.801601][ T9788] loop0: detected capacity change from 0 to 4096 [ 275.957987][ T9764] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.126117][ T9764] XFS (loop1): Ending clean mount [ 276.388428][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.722497][ T9809] netlink: 'syz.0.1533': attribute type 15 has an invalid length. [ 277.007038][ T9817] loop1: detected capacity change from 0 to 256 [ 277.024454][ T9817] exfat: Deprecated parameter 'utf8' [ 277.029834][ T9817] exfat: Deprecated parameter 'utf8' [ 277.077981][ T9817] exfat: Deprecated parameter 'utf8' [ 277.154889][ T9817] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 278.821178][ T9841] loop2: detected capacity change from 0 to 40427 [ 278.849116][ T9841] F2FS-fs (loop2): invalid crc value [ 278.875989][ T9841] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.024429][ T9841] F2FS-fs (loop2): Start checkpoint disabled! [ 279.065707][ T9841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 279.458368][ T2953] kworker/u4:9: attempt to access beyond end of device [ 279.458368][ T2953] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 279.487759][ T2953] kworker/u4:9: attempt to access beyond end of device [ 279.487759][ T2953] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 279.532824][ T2953] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 279.540309][ T2953] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 279.557489][ T2953] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 279.856884][ T9884] option changes via remount are deprecated (pid=9883 comm=syz.0.1566) [ 280.111584][ T9893] loop2: detected capacity change from 0 to 128 [ 280.154219][ T9893] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 280.187459][ T9893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.468066][ T9902] loop0: detected capacity change from 0 to 2048 [ 280.495662][ T9902] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.543804][ T9906] loop6: detected capacity change from 0 to 8 [ 280.561474][ T9908] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.575864][ T9907] loop1: detected capacity change from 0 to 64 [ 280.582257][ T9906] Dev loop6: unable to read RDB block 8 [ 280.588125][ T9906] loop6: unable to read partition table [ 280.596361][ T9906] loop6: partition table beyond EOD, truncated [ 280.599354][ T5772] udevd[5772]: incorrect nilfs2 checksum on /dev/loop0 [ 280.606411][ T9906] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 280.650125][ T9907] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 280.712829][ T28] audit: type=1804 audit(1776261126.905:15): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1575" name="/newroot/383/bus/file0" dev="loop1" ino=4 res=1 errno=0 [ 280.902394][ T9912] loop2: detected capacity change from 0 to 2048 [ 280.940682][ T9912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.246486][ T9921] macvlan0: entered promiscuous mode [ 281.252872][ T9921] netlink: 'syz.2.1581': attribute type 2 has an invalid length. [ 281.267244][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 281.833404][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 281.997426][ T9939] program syz.0.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.168972][ T9971] syz_tun: entered allmulticast mode [ 283.181212][ T9951] loop0: detected capacity change from 0 to 32768 [ 283.203167][ T9970] syz_tun: left allmulticast mode [ 283.270213][ T9951] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.361928][ T9988] 9pnet_fd: Insufficient options for proto=fd [ 283.444095][ T9951] XFS (loop0): Ending clean mount [ 283.465968][ T9951] XFS (loop0): Quotacheck needed: Please wait. [ 283.616538][ T9951] XFS (loop0): Quotacheck: Done. [ 283.884458][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.948389][T10000] batadv0: entered promiscuous mode [ 283.976349][T10000] bond0: entered promiscuous mode [ 283.981566][T10000] bond_slave_0: entered promiscuous mode [ 284.007056][T10000] bond_slave_1: entered promiscuous mode [ 284.046641][T10000] hsr1: entered allmulticast mode [ 284.072803][T10000] batadv0: entered allmulticast mode [ 284.103576][T10000] bond0: entered allmulticast mode [ 284.113471][T10000] bond_slave_0: entered allmulticast mode [ 284.147290][T10000] bond_slave_1: entered allmulticast mode [ 284.173626][T10000] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 284.216023][T10000] batadv0: left promiscuous mode [ 284.230511][T10000] bond0: left promiscuous mode [ 284.239670][T10000] bond_slave_0: left promiscuous mode [ 284.254496][T10000] bond_slave_1: left promiscuous mode [ 284.584193][T10013] loop2: detected capacity change from 0 to 16 [ 284.628946][T10013] erofs: (device loop2): mounted with root inode @ nid 36. [ 284.684599][T10013] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 284.783489][ T5816] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.990287][ T5816] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 285.019999][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.033717][ T5816] usb 2-1: Product: syz [ 285.037993][ T5816] usb 2-1: Manufacturer: syz [ 285.042630][ T5816] usb 2-1: SerialNumber: syz [ 285.084813][ T5816] usb 2-1: config 0 descriptor?? [ 285.116064][ T5816] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 285.729787][T10029] loop0: detected capacity change from 0 to 32768 [ 285.801027][T10029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 285.801027][T10029] [ 285.815689][T10029] xtLookup: xtSearch returned -5 [ 285.820801][T10029] add_index: get/read_metapage failed! [ 285.830105][T10029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 285.830105][T10029] [ 285.856878][T10029] xtLookup: xtSearch returned -5 [ 285.861909][T10029] free_index: error reading directory table [ 285.886168][T10029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 285.886168][T10029] [ 285.914675][T10029] xtLookup: xtSearch returned -5 [ 285.925799][ T23] usb 2-1: USB disconnect, device number 16 [ 285.952212][T10029] free_index: error reading directory table [ 285.973363][T10029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 285.973363][T10029] [ 286.005096][T10029] xtLookup: xtSearch returned -5 [ 286.031584][T10029] free_index: error reading directory table [ 286.058262][T10029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.058262][T10029] [ 286.110460][T10029] xtLookup: xtSearch returned -5 [ 286.129658][T10029] free_index: error reading directory table [ 286.146545][T10029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.146545][T10029] [ 286.173260][T10029] xtLookup: xtSearch returned -5 [ 286.178400][T10029] free_index: error reading directory table [ 286.689103][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.703769][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.724417][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.739869][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.748279][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.763526][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.952248][T10044] @: renamed from vlan0 (while UP) [ 287.100225][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 287.299660][T10039] chnl_net:caif_netlink_parms(): no params data found [ 287.469398][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.482700][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.490765][T10039] bridge_slave_0: entered allmulticast mode [ 287.504820][T10039] bridge_slave_0: entered promiscuous mode [ 287.522276][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.531918][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.541892][T10039] bridge_slave_1: entered allmulticast mode [ 287.549828][T10039] bridge_slave_1: entered promiscuous mode [ 287.599693][T10039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.612413][T10039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.706115][T10039] team0: Port device team_slave_0 added [ 287.745486][T10039] team0: Port device team_slave_1 added [ 287.854783][T10039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.866836][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.892999][T10039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.911221][T10071] batadv0: entered promiscuous mode [ 287.920025][T10073] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 287.948052][T10071] bond0: entered promiscuous mode [ 287.953163][T10071] bond_slave_0: entered promiscuous mode [ 287.986317][T10071] bond_slave_1: entered promiscuous mode [ 287.997586][T10071] hsr1: entered allmulticast mode [ 288.002729][T10071] batadv0: entered allmulticast mode [ 288.008692][T10071] bond0: entered allmulticast mode [ 288.014061][T10071] bond_slave_0: entered allmulticast mode [ 288.019983][T10071] bond_slave_1: entered allmulticast mode [ 288.028553][T10071] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 288.037902][T10071] batadv0: left promiscuous mode [ 288.050042][T10071] bond0: left promiscuous mode [ 288.065782][T10071] bond_slave_0: left promiscuous mode [ 288.077579][T10071] bond_slave_1: left promiscuous mode [ 288.121057][T10039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.130760][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.158410][T10039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.349146][T10039] hsr_slave_0: entered promiscuous mode [ 288.376030][T10039] hsr_slave_1: entered promiscuous mode [ 288.399615][T10039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.428268][T10039] Cannot create hsr debugfs directory [ 288.536106][T10085] netem: change failed [ 288.865194][ T51] Bluetooth: hci3: command tx timeout [ 288.940016][T10039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.983915][T10039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.005808][T10039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.036931][T10039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.258531][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.481361][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.527186][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.535787][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.637824][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.645081][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.538243][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.954588][ T51] Bluetooth: hci3: command tx timeout [ 291.034120][T10111] loop0: detected capacity change from 0 to 32768 [ 291.054064][T10111] XFS: ikeep mount option is deprecated. [ 291.133045][T10111] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.248956][T10111] XFS (loop0): Ending clean mount [ 291.386203][T10039] veth0_vlan: entered promiscuous mode [ 291.427176][T10039] veth1_vlan: entered promiscuous mode [ 291.461394][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.487713][T10039] veth0_macvtap: entered promiscuous mode [ 291.526857][T10039] veth1_macvtap: entered promiscuous mode [ 291.557332][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.574084][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.593506][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.606198][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.619978][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.637462][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.649104][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.664959][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.681179][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.703654][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.715423][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.734435][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.752198][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.762867][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.779859][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.790250][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.815288][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.855016][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.898009][T10039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.916443][T10039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.949261][T10039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.977882][T10039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.145207][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.153143][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.222085][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.233972][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.442114][T10151] loop1: detected capacity change from 0 to 1024 [ 292.506913][ T28] audit: type=1800 audit(1776261138.705:16): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1680" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 293.031207][ T51] Bluetooth: hci3: command tx timeout [ 293.134795][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.613664][ T5815] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 293.634055][ T2128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 293.839712][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 293.854464][ T2128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.874365][ T2128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.889317][ T5815] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.902200][ T2128] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.915559][ T5815] usb 1-1: config 179 has no interface number 0 [ 293.921902][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 293.943544][ T2128] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.952723][ T2128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.970255][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 293.985053][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.006949][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 294.022336][ T5815] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.042012][ T5815] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.074637][ T2128] usb 5-1: config 0 descriptor?? [ 294.101352][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.173468][T10171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.393266][T10179] loop1: detected capacity change from 0 to 32768 [ 294.422394][T10179] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 294.430716][T10179] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 294.499929][T10179] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 294.509582][ T5835] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 294.534369][ T2128] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 294.540708][ T5835] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 294.579038][ T2128] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 294.685851][ T2128] usb 1-1: USB disconnect, device number 20 [ 294.685921][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 294.685980][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 294.734558][ T5835] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 193ms [ 294.746092][ T788] usb 5-1: USB disconnect, device number 2 [ 294.799166][T10181] fido_id[10181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 294.822279][ T5835] gfs2: fsid=syz:syz.0: jid=0: Done [ 294.839605][T10179] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 295.103854][ T51] Bluetooth: hci3: command tx timeout [ 295.721749][T10196] loop4: detected capacity change from 0 to 2048 [ 295.895122][T10196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.021110][T10196] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 296.048357][T10196] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 296.061564][T10196] EXT4-fs (loop4): This should not happen!! Data will be lost [ 296.061564][T10196] [ 296.071941][T10196] EXT4-fs (loop4): Total free blocks count 0 [ 296.083132][T10196] EXT4-fs (loop4): Free/Dirty block details [ 296.089607][T10196] EXT4-fs (loop4): free_blocks=2415919504 [ 296.103613][T10196] EXT4-fs (loop4): dirty_blocks=32 [ 296.108833][T10196] EXT4-fs (loop4): Block reservation details [ 296.123356][T10196] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 296.146810][T10208] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 296.680624][T10223] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 296.898729][T10207] loop0: detected capacity change from 0 to 40427 [ 296.923697][T10207] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 296.932301][T10207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 296.965518][T10207] F2FS-fs (loop0): invalid crc value [ 296.975846][T10207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 297.175011][T10215] loop1: detected capacity change from 0 to 32768 [ 297.185021][T10207] F2FS-fs (loop0): Start checkpoint disabled! [ 297.199759][T10215] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 297.229301][T10207] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 297.243418][T10207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 297.518642][ T5784] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 297.653391][ T2953] kworker/u4:9: attempt to access beyond end of device [ 297.653391][ T2953] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 297.688613][ T2953] kworker/u4:9: attempt to access beyond end of device [ 297.688613][ T2953] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 297.693582][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 297.723033][ T2953] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 297.739298][ T2953] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 297.760635][ T55] block nbd1: Possible stuck request ffff888021e08000: control (read@0,4096B). Runtime 60 seconds [ 297.774281][ T2953] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 298.623916][T10254] loop0: detected capacity change from 0 to 2048 [ 298.700991][T10254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.841816][T10254] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 298.891281][T10254] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 298.904376][T10254] EXT4-fs (loop0): This should not happen!! Data will be lost [ 298.904376][T10254] [ 298.914516][T10254] EXT4-fs (loop0): Total free blocks count 0 [ 298.920561][T10254] EXT4-fs (loop0): Free/Dirty block details [ 298.926800][T10254] EXT4-fs (loop0): free_blocks=2415919504 [ 298.932603][T10254] EXT4-fs (loop0): dirty_blocks=32 [ 298.937976][T10254] EXT4-fs (loop0): Block reservation details [ 298.945385][T10254] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 298.970095][T10264] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 299.268165][T10269] tap0: tun_chr_ioctl cmd 2147767520 [ 299.836943][T10287] loop1: detected capacity change from 0 to 128 [ 299.908586][T10287] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 299.977922][T10287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.168074][T10291] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 300.189268][T10291] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 300.511210][T10302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1735'. [ 300.710038][T10306] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.726394][T10306] netlink: 'syz.1.1737': attribute type 1 has an invalid length. [ 300.996001][T10309] loop4: detected capacity change from 0 to 8192 [ 301.059732][T10309] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 301.111780][T10309] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 301.171812][T10309] REISERFS (device loop4): using ordered data mode [ 301.214927][T10309] reiserfs: using flush barriers [ 301.241995][T10309] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 301.279679][T10309] REISERFS (device loop4): checking transaction log (loop4) [ 301.324157][T10309] REISERFS (device loop4): Using r5 hash to sort names [ 301.348556][T10309] REISERFS (device loop4): using 3.5.x disk format [ 301.689911][T10329] loop4: detected capacity change from 0 to 64 [ 301.884487][T10325] loop0: detected capacity change from 0 to 8192 [ 301.885373][T10039] Trying to free block not in datazone [ 302.744197][T10327] loop1: detected capacity change from 0 to 32768 [ 302.758854][T10327] XFS: ikeep mount option is deprecated. [ 302.809406][T10327] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.940174][T10358] loop0: detected capacity change from 0 to 128 [ 302.969320][T10327] XFS (loop1): Ending clean mount [ 303.515968][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.748923][T10367] loop0: detected capacity change from 0 to 4096 [ 303.811848][T10367] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 303.849859][T10367] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 303.980718][T10367] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 304.006025][T10374] batadv_slave_0: entered promiscuous mode [ 304.021713][T10374] batman_adv: batadv0: Adding interface: macvtap1 [ 304.030884][T10374] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.061522][T10374] batman_adv: batadv0: Interface activated: macvtap1 [ 306.252028][T10429] sctp: [Deprecated]: syz.3.1788 (pid 10429) Use of int in maxseg socket option. [ 306.252028][T10429] Use struct sctp_assoc_value instead [ 306.355413][T10438] loop0: detected capacity change from 0 to 164 [ 308.969795][T10491] loop0: detected capacity change from 0 to 2048 [ 309.178040][T10494] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.768505][T10496] loop4: detected capacity change from 0 to 40427 [ 310.781529][T10496] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 310.798980][T10496] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 310.844072][T10496] F2FS-fs (loop4): invalid crc value [ 310.866672][T10496] F2FS-fs (loop4): Found nat_bits in checkpoint [ 311.045888][T10496] F2FS-fs (loop4): Start checkpoint disabled! [ 311.064810][T10529] pim6reg1: tun_chr_ioctl cmd 35108 [ 311.093926][T10496] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 311.101089][T10496] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 311.529002][ T2916] kworker/u4:7: attempt to access beyond end of device [ 311.529002][ T2916] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 311.567200][ T2916] kworker/u4:7: attempt to access beyond end of device [ 311.567200][ T2916] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 311.598880][ T2916] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 311.615779][ T2916] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 311.624253][ T2916] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 312.014876][T10547] program syz.0.1837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.284339][ T28] audit: type=1326 audit(1776261670.477:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.321498][ T28] audit: type=1326 audit(1776261670.477:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.363321][ T28] audit: type=1326 audit(1776261670.507:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.413349][ T28] audit: type=1326 audit(1776261670.507:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.472532][ T28] audit: type=1326 audit(1776261670.507:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.605383][ T28] audit: type=1326 audit(1776261670.507:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.675654][ T28] audit: type=1326 audit(1776261670.507:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.774205][ T28] audit: type=1326 audit(1776261670.507:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.836809][T10565] loop1: detected capacity change from 0 to 4096 [ 312.842319][ T28] audit: type=1326 audit(1776261670.507:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 312.879045][T10565] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 312.936252][ T28] audit: type=1326 audit(1776261670.517:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd283d9c819 code=0x7ffc0000 [ 313.052800][T10565] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 313.061070][T10574] loop4: detected capacity change from 0 to 512 [ 313.091327][T10574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.148710][T10574] EXT4-fs (loop4): 1 truncate cleaned up [ 313.164649][T10574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.209407][T10574] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1849: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 313.230214][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.274035][T10574] EXT4-fs (loop4): Remounting filesystem read-only [ 313.369586][T10039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.488533][T10609] loop1: detected capacity change from 0 to 1024 [ 314.666251][ T2942] hfsplus: b-tree write err: -5, ino 25 [ 314.685519][ T2942] hfsplus: b-tree write err: -5, ino 4 [ 314.702169][ T2942] hfsplus: b-tree write err: -5, ino 2 [ 314.708077][ T2942] hfsplus: b-tree write err: -5, ino 26 [ 314.796466][T10613] loop1: detected capacity change from 0 to 128 [ 314.814737][T10613] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 314.864346][T10613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.176206][T10617] loop1: detected capacity change from 0 to 4096 [ 315.210311][T10617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.306118][T10617] EXT4-fs (loop1): shut down requested (0) [ 315.339740][T10623] loop4: detected capacity change from 0 to 512 [ 315.407267][T10623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.422367][T10623] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.490114][T10039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.516210][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.760950][T10634] loop0: detected capacity change from 0 to 1024 [ 315.873534][ T2916] hfsplus: b-tree write err: -5, ino 25 [ 315.880395][ T2916] hfsplus: b-tree write err: -5, ino 4 [ 315.910683][ T2916] hfsplus: b-tree write err: -5, ino 2 [ 315.916630][ T2916] hfsplus: b-tree write err: -5, ino 26 [ 316.383037][T10636] loop4: detected capacity change from 0 to 32768 [ 316.424967][T10636] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 316.554440][T10636] syz.4.1874 (10636) used greatest stack depth: 18704 bytes left [ 316.705403][T10039] ocfs2: Unmounting device (7,4) on (node local) [ 317.038130][T10648] loop1: detected capacity change from 0 to 32768 [ 317.588435][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.597696][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.188557][T10688] netlink: 'syz.0.1896': attribute type 3 has an invalid length. [ 318.883419][ T5815] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 319.078791][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 319.114069][ T5815] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 319.135601][ T5815] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.153662][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.168002][ T5815] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 319.177852][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.197968][ T5815] usb 1-1: config 0 descriptor?? [ 319.254047][T10704] loop4: detected capacity change from 0 to 4096 [ 319.280166][T10704] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 319.417106][ T5815] usbhid 1-1:0.0: can't add hid device: -71 [ 319.433736][ T5815] usbhid: probe of 1-1:0.0 failed with error -71 [ 319.451052][ T5815] usb 1-1: USB disconnect, device number 21 [ 320.095491][T10717] loop4: detected capacity change from 0 to 4096 [ 320.705639][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 320.705656][ T28] audit: type=1326 audit(1776261678.907:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.1.1914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d099c819 code=0x0 [ 320.824842][T10739] netlink: 'syz.4.1925': attribute type 3 has an invalid length. [ 321.623949][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.633061][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.679058][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.713347][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.750509][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.803355][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.830035][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.858763][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.878234][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 321.897763][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 322.378240][T10757] loop1: detected capacity change from 0 to 1024 [ 322.553862][T10749] loop0: detected capacity change from 0 to 32768 [ 322.589481][T10745] loop4: detected capacity change from 0 to 40427 [ 322.626717][T10745] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 322.643343][T10745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 322.681526][T10749] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.701619][T10745] F2FS-fs (loop4): invalid crc value [ 322.795522][T10745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 322.872286][T10749] XFS (loop0): Ending clean mount [ 323.039084][T10745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 323.065499][T10745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 323.090115][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.119133][ T3004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.229437][T10745] syz.4.1917: attempt to access beyond end of device [ 323.229437][T10745] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 323.470957][ T59] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 323.514462][ T59] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 323.529087][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.628395][ T3004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.712187][T10783] loop1: detected capacity change from 0 to 4096 [ 323.782665][T10783] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 323.809595][ T3004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.958037][ T3004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.260055][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.273512][T10787] bridge0: entered allmulticast mode [ 324.409887][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.501921][ T3004] tipc: Disabling bearer [ 324.526661][ T3004] tipc: Left network mode [ 324.956578][T10805] loop0: detected capacity change from 0 to 512 [ 324.985308][T10805] EXT4-fs (loop0): unsupported inode size: 4096 [ 325.021415][T10805] EXT4-fs (loop0): blocksize: 1024 [ 325.441056][T10827] syz.4.1948 uses obsolete (PF_INET,SOCK_PACKET) [ 325.693454][ T5815] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 325.905092][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 325.937983][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.979661][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.001010][ T5815] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.014155][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.067483][ T5815] usb 2-1: config 0 descriptor?? [ 326.075721][ T5815] hub 2-1:0.0: USB hub found [ 326.311879][ T5815] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 326.653977][T10852] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 326.715728][ T5815] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1 [ 326.732943][ T5815] hid-generic: probe of 0003:046D:C31C.000E failed with error -22 [ 327.144510][ T5815] usb 2-1: USB disconnect, device number 17 [ 327.593681][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 327.795416][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 327.817383][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 327.858190][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.869623][ T55] block nbd1: Possible stuck request ffff888021e08000: control (read@0,4096B). Runtime 90 seconds [ 327.923106][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.973293][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.995262][T10893] loop4: detected capacity change from 0 to 2048 [ 328.021127][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.061814][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.103691][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.155830][T10893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.272073][ T3004] hsr_slave_0: left promiscuous mode [ 328.309791][ T3004] hsr_slave_1: left promiscuous mode [ 328.328259][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.362854][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.373201][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 328.378774][ T9] usbtmc 1-1:16.0: can't read capabilities [ 328.409901][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.453592][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.481631][ T3004] bridge_slave_1: left allmulticast mode [ 328.510602][ T3004] bridge_slave_1: left promiscuous mode [ 328.532456][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.632336][ T3004] bridge_slave_0: left allmulticast mode [ 328.657230][ T8] usb 1-1: USB disconnect, device number 22 [ 328.672279][ T3004] bridge_slave_0: left promiscuous mode [ 328.691804][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.830538][ T3004] veth1_macvtap: left promiscuous mode [ 328.850278][ T3004] veth0_macvtap: left promiscuous mode [ 328.861067][ T3004] veth1_vlan: left promiscuous mode [ 328.890647][ T3004] veth0_vlan: left promiscuous mode [ 329.783059][T10899] loop4: detected capacity change from 0 to 40427 [ 329.824518][T10899] F2FS-fs (loop4): invalid crc value [ 329.957494][T10899] F2FS-fs (loop4): Found nat_bits in checkpoint [ 330.037764][T10899] F2FS-fs (loop4): Start checkpoint disabled! [ 330.053391][T10899] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 330.451769][ T2942] kworker/u4:8: attempt to access beyond end of device [ 330.451769][ T2942] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 330.502649][ T2942] kworker/u4:8: attempt to access beyond end of device [ 330.502649][ T2942] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 330.555525][ T2942] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 330.572043][ T2942] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 330.614108][ T2942] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 331.219980][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 331.333398][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 331.460379][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.483047][ T3004] bond_slave_1 (unregistering): left allmulticast mode [ 331.610708][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.635202][ T3004] bond_slave_0 (unregistering): left allmulticast mode [ 331.763951][ T5815] kernel write not supported for file /vcsa (pid: 5815 comm: kworker/1:4) [ 332.460981][ T3004] bond0 (unregistering): Released all slaves [ 332.608471][T10917] syz_tun: entered allmulticast mode [ 332.615974][T10917] syz_tun: left allmulticast mode [ 332.636932][T10943] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 333.004833][T10955] loop1: detected capacity change from 0 to 64 [ 333.362887][T10963] __nla_validate_parse: 43 callbacks suppressed [ 333.362903][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 334.513040][T10982] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 334.639277][T10950] loop0: detected capacity change from 0 to 40427 [ 334.676243][T10950] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 334.702751][T10950] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 334.746299][T10950] F2FS-fs (loop0): invalid crc value [ 334.762441][T10987] loop4: detected capacity change from 0 to 512 [ 334.790356][T10950] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.863135][T10987] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1996: inode has both inline data and extents flags [ 334.918493][T10987] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1996: couldn't read orphan inode 15 (err -117) [ 334.988402][T10987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.062909][T10950] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 335.103253][T10950] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 335.180633][T10039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.284779][T10950] syz.0.1984: attempt to access beyond end of device [ 335.284779][T10950] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 335.383369][ T5815] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 335.414091][T11007] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 335.453478][ T59] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 335.472757][ T59] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 335.573350][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 335.600121][ T5815] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 335.613408][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.655689][ T5815] usb 2-1: config 0 descriptor?? [ 335.692155][ T5815] as10x_usb: device has been detected [ 335.700970][ T5815] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 335.842642][ T5815] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 335.872975][T11002] ------------[ cut here ]------------ [ 335.878697][T11002] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 335.884866][T11002] WARNING: CPU: 1 PID: 11002 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 335.900584][T11002] Modules linked in: [ 335.904745][T11002] CPU: 1 PID: 11002 Comm: syz.1.2000 Not tainted syzkaller #0 [ 335.912270][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.922435][T11002] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 335.927896][T11002] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 44 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb d2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 335.947698][T11002] RSP: 0018:ffffc90003247aa0 EFLAGS: 00010246 [ 335.954398][T11002] RAX: 28c8e906c532ad00 RBX: ffff888067588ce0 RCX: 0000000000080000 [ 335.962525][T11002] RDX: ffffc9000d0ea000 RSI: 0000000000002846 RDI: 0000000000002847 [ 335.970932][T11002] RBP: ffffc90003247bf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 335.979108][T11002] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 335.987382][T11002] R13: 1ffff92000648f64 R14: dffffc0000000000 R15: 0000000000000000 [ 335.995524][T11002] FS: 00007f50d18d16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 336.004566][T11002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.011218][T11002] CR2: 0000001b2da1fff8 CR3: 00000000641a7000 CR4: 00000000003506e0 [ 336.019285][T11002] Call Trace: [ 336.022617][T11002] [ 336.025640][T11002] ? trace_contention_end+0x39/0xe0 [ 336.030930][T11002] ? __mutex_lock+0x315/0xcc0 [ 336.035753][T11002] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 336.041459][T11002] ? mutex_lock_nested+0x20/0x20 [ 336.046542][T11002] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 336.052817][T11002] ? dmx_section_feed_start_filtering+0x55/0x690 [ 336.059422][T11002] ? mutex_lock_nested+0x20/0x20 [ 336.064514][T11002] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 336.070557][T11002] ? lock_chain_count+0x20/0x20 [ 336.075505][T11002] ? _raw_spin_lock_irq+0xbb/0xf0 [ 336.080608][T11002] as102_dvb_dmx_start_feed+0x70/0x280 [ 336.086221][T11002] dmx_section_feed_start_filtering+0x4f5/0x690 [ 336.092551][T11002] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 336.098196][T11002] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 336.103759][T11002] dvb_demux_do_ioctl+0x467/0x530 [ 336.108848][T11002] dvb_usercopy+0x195/0x2b0 [ 336.113448][T11002] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 336.119053][T11002] ? dvb_generic_ioctl+0xb0/0xb0 [ 336.124091][T11002] ? dvb_demux_poll+0x220/0x220 [ 336.129036][T11002] dvb_demux_ioctl+0x29/0x30 [ 336.133741][T11002] __se_sys_ioctl+0xfd/0x170 [ 336.138403][T11002] do_syscall_64+0x55/0xa0 [ 336.142888][T11002] ? clear_bhb_loop+0x40/0x90 [ 336.148078][T11002] ? clear_bhb_loop+0x40/0x90 [ 336.152821][T11002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.159386][T11002] RIP: 0033:0x7f50d099c819 [ 336.163977][T11002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.183699][T11002] RSP: 002b:00007f50d18d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.192167][T11002] RAX: ffffffffffffffda RBX: 00007f50d0c15fa0 RCX: 00007f50d099c819 [ 336.200270][T11002] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 336.208331][T11002] RBP: 00007f50d0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 336.216408][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.224661][T11002] R13: 00007f50d0c16038 R14: 00007f50d0c15fa0 R15: 00007ffdc7e519f8 [ 336.232717][T11002] [ 336.235817][T11002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.243133][T11002] CPU: 1 PID: 11002 Comm: syz.1.2000 Not tainted syzkaller #0 [ 336.250623][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 336.260716][T11002] Call Trace: [ 336.264030][T11002] [ 336.267020][T11002] dump_stack_lvl+0x18c/0x250 [ 336.271733][T11002] ? show_regs_print_info+0x20/0x20 [ 336.277053][T11002] ? load_image+0x420/0x420 [ 336.281590][T11002] panic+0x2dc/0x730 [ 336.285520][T11002] ? bpf_jit_dump+0xd0/0xd0 [ 336.290059][T11002] __warn+0x2e0/0x470 [ 336.294073][T11002] ? __mutex_lock+0xb85/0xcc0 [ 336.298780][T11002] ? __mutex_lock+0xb85/0xcc0 [ 336.303481][T11002] report_bug+0x2be/0x4f0 [ 336.307833][T11002] ? __mutex_lock+0xb85/0xcc0 [ 336.312534][T11002] ? __mutex_lock+0xb85/0xcc0 [ 336.317256][T11002] ? __mutex_lock+0xb87/0xcc0 [ 336.321989][T11002] handle_bug+0xcf/0x120 [ 336.326272][T11002] exc_invalid_op+0x1a/0x50 [ 336.330800][T11002] asm_exc_invalid_op+0x1a/0x20 [ 336.335682][T11002] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 336.341003][T11002] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 44 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb d2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 336.360639][T11002] RSP: 0018:ffffc90003247aa0 EFLAGS: 00010246 [ 336.366732][T11002] RAX: 28c8e906c532ad00 RBX: ffff888067588ce0 RCX: 0000000000080000 [ 336.374725][T11002] RDX: ffffc9000d0ea000 RSI: 0000000000002846 RDI: 0000000000002847 [ 336.382718][T11002] RBP: ffffc90003247bf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 336.390718][T11002] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 336.398806][T11002] R13: 1ffff92000648f64 R14: dffffc0000000000 R15: 0000000000000000 [ 336.406815][T11002] ? trace_contention_end+0x39/0xe0 [ 336.412044][T11002] ? __mutex_lock+0x315/0xcc0 [ 336.416752][T11002] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 336.422416][T11002] ? mutex_lock_nested+0x20/0x20 [ 336.427397][T11002] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 336.433063][T11002] ? dmx_section_feed_start_filtering+0x55/0x690 [ 336.439425][T11002] ? mutex_lock_nested+0x20/0x20 [ 336.444413][T11002] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 336.450425][T11002] ? lock_chain_count+0x20/0x20 [ 336.455299][T11002] ? _raw_spin_lock_irq+0xbb/0xf0 [ 336.460445][T11002] as102_dvb_dmx_start_feed+0x70/0x280 [ 336.465942][T11002] dmx_section_feed_start_filtering+0x4f5/0x690 [ 336.472218][T11002] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 336.477799][T11002] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 336.483287][T11002] dvb_demux_do_ioctl+0x467/0x530 [ 336.488338][T11002] dvb_usercopy+0x195/0x2b0 [ 336.492867][T11002] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 336.498440][T11002] ? dvb_generic_ioctl+0xb0/0xb0 [ 336.503415][T11002] ? dvb_demux_poll+0x220/0x220 [ 336.508307][T11002] dvb_demux_ioctl+0x29/0x30 [ 336.512927][T11002] __se_sys_ioctl+0xfd/0x170 [ 336.517548][T11002] do_syscall_64+0x55/0xa0 [ 336.521986][T11002] ? clear_bhb_loop+0x40/0x90 [ 336.526697][T11002] ? clear_bhb_loop+0x40/0x90 [ 336.531403][T11002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.537328][T11002] RIP: 0033:0x7f50d099c819 [ 336.541775][T11002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.561405][T11002] RSP: 002b:00007f50d18d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.569841][T11002] RAX: ffffffffffffffda RBX: 00007f50d0c15fa0 RCX: 00007f50d099c819 [ 336.577837][T11002] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 336.585834][T11002] RBP: 00007f50d0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 336.593862][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.601852][T11002] R13: 00007f50d0c16038 R14: 00007f50d0c15fa0 R15: 00007ffdc7e519f8 [ 336.609853][T11002] [ 336.613481][T11002] Kernel Offset: disabled [ 336.617815][T11002] Rebooting in 86400 seconds..