last executing test programs: 6m44.333207863s ago: executing program 32 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x17}}}]}, 0x58}}, 0x0) 6m9.222269696s ago: executing program 0 (id=941): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000004) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='&(-\x00') 6m8.371069833s ago: executing program 0 (id=949): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 6m7.613776168s ago: executing program 0 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x10, &(0x7f0000000400)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 6m7.490151362s ago: executing program 0 (id=962): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000040)='./file2/file0\x00', 0x2000, 0x81) 6m6.963555169s ago: executing program 0 (id=973): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d3b6d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e75a5cffcdc2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7969d1685a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa439d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000003017808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24ee0c4f1c5e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f29c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e5000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7a97bc641df07720ba2b26b01000000a0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836154faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b000000000000000000000000000000000000f000", 0x1000}}, 0x1006) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 6m6.205796594s ago: executing program 0 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 6m5.970310731s ago: executing program 33 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 5m54.628058397s ago: executing program 5 (id=1090): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) exit(0x10003) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 5m53.693714517s ago: executing program 5 (id=1094): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x1004810, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m52.746917468s ago: executing program 5 (id=1104): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000019080)=@known='security.apparmor\x00') 5m52.581492823s ago: executing program 5 (id=1108): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 5m51.398320441s ago: executing program 5 (id=1121): setresuid(0xee01, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) 5m49.818211242s ago: executing program 5 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 5m49.677279177s ago: executing program 34 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 4m55.951646441s ago: executing program 6 (id=1713): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) exit(0x1f52b4ba) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) 4m55.078635729s ago: executing program 6 (id=1727): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xd833}, @TCA_TAPRIO_ATTR_FLAGS={0x63, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x80], 0x0, [0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9254}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}]}]}}]}, 0xc0}, 0x1, 0x7a00}, 0x0) 4m54.978733862s ago: executing program 6 (id=1730): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 4m54.817537527s ago: executing program 6 (id=1732): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m54.466941029s ago: executing program 6 (id=1733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1}, &(0x7f0000000b00), &(0x7f0000000b40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 4m53.883113157s ago: executing program 6 (id=1740): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0xc32, &(0x7f000001fd40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000100)='./file0\x00') rmdir(&(0x7f00000001c0)='./bus\x00') 4m53.701075934s ago: executing program 35 (id=1740): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0xc32, &(0x7f000001fd40)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000100)='./file0\x00') rmdir(&(0x7f00000001c0)='./bus\x00') 4m52.633711538s ago: executing program 7 (id=1755): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0xf, 0x3, 0x0, 0x2000000000, 0xfffffffffffffffd, 0xe00, 0xffffffffffffffff, 0x0, 0x6, 0x45, 0x7, 0x0, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4, 0x67}) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1) 4m52.522965412s ago: executing program 7 (id=1756): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000100)="5694e2f1cd66a0b15fbff55a319a427f5428593716000000"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 4m52.334479927s ago: executing program 7 (id=1757): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x802, &(0x7f0000000280)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@numtail}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}, {@utf8}, {@shortname_mixed}, {@numtail}]}, 0x1, 0x33e, &(0x7f0000000480)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffece) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 4m51.64227192s ago: executing program 7 (id=1761): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m50.616252783s ago: executing program 7 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000440)={{0xdddd0000, 0xffffffff, 0x3, 0x2, 0xce, 0x6, 0x0, 0x2, 0x49, 0x2, 0x33, 0x1}, {0x2000, 0x0, 0xb, 0x8, 0x4, 0x4, 0x2, 0x1, 0x7, 0x81, 0x2, 0x6}, {0x30000, 0x8000000, 0x10, 0x9, 0xcd, 0x9b, 0x3, 0x6e, 0xe8, 0x52, 0x40, 0x8}, {0x54000, 0x50000, 0x9, 0x4, 0x7, 0x8, 0xe, 0x9, 0x4, 0x8, 0x5, 0x1}, {0x200000, 0x41000, 0xe, 0x8, 0x8, 0x5, 0xfe, 0x3, 0x6, 0xf0, 0x9, 0xd}, {0x54000, 0x5000, 0xa, 0x62, 0x3, 0x7, 0x7c, 0x7, 0x5, 0x3, 0x8, 0xce}, {0x9000, 0x10000, 0x0, 0x2, 0x2, 0x51, 0x38, 0x4, 0x9, 0xf8, 0x1e, 0x3}, {0x2000, 0x1000, 0x8, 0x0, 0x8, 0x3, 0x80, 0x2, 0x40, 0x7, 0xf7, 0x6}, {0xffff1000, 0x9}, {0x7000, 0x3}, 0x80040020, 0x0, 0xfec00000, 0x4, 0xa, 0x2501, 0x80a0000, 0x0, [0x0, 0xbb, 0x3, 0x6]}) 4m49.366331393s ago: executing program 7 (id=1769): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffbfffa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b67040d8c560a06e5ffff7f100000004001000058000b48040e5be8a06eb5a8440038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcffb08802", 0x5b}], 0x1) 4m49.1551053s ago: executing program 36 (id=1769): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffbfffa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b67040d8c560a06e5ffff7f100000004001000058000b48040e5be8a06eb5a8440038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcffb08802", 0x5b}], 0x1) 4m34.140542054s ago: executing program 9 (id=1884): setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 4m33.867546313s ago: executing program 9 (id=1886): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}) 4m33.675530529s ago: executing program 9 (id=1890): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 4m33.449022277s ago: executing program 9 (id=1892): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000005a00)='./file2\x00', 0x0) 4m32.237413256s ago: executing program 9 (id=1899): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 4m31.346323735s ago: executing program 9 (id=1908): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 4m31.160758221s ago: executing program 37 (id=1908): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 12.486354738s ago: executing program 1 (id=4077): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x14a101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x7d) 12.241556656s ago: executing program 1 (id=4078): r0 = syz_io_uring_setup(0x3fde, &(0x7f0000000080)={0x0, 0x3a84, 0x8, 0x82, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) io_uring_enter(r0, 0x41b3, 0x550b, 0x8, 0x0, 0x0) 11.524629869s ago: executing program 1 (id=4082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001240)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e24, @multicast1}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @remote, 0x7c2}], 0x1c) 11.402499623s ago: executing program 1 (id=4084): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f00000144c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]}) 8.883840184s ago: executing program 1 (id=4106): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 6.870251269s ago: executing program 1 (id=4119): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000c40), 0x82, 0x10d802) 6.581794279s ago: executing program 38 (id=4119): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000c40), 0x82, 0x10d802) 6.098216434s ago: executing program 2 (id=4123): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000140)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) 6.044932156s ago: executing program 2 (id=4124): r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5.703528997s ago: executing program 2 (id=4125): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001440)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@fat=@debug}, {@uni_xlate}, {@shortname_win95}, {@fat=@debug}, {@fat=@dmask={'dmask', 0x3d, 0x3ff}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 5.523787243s ago: executing program 2 (id=4127): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.352993368s ago: executing program 2 (id=4128): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 4.916855702s ago: executing program 2 (id=4130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.277973835s ago: executing program 8 (id=4136): unshare(0x26020480) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2.973940734s ago: executing program 8 (id=4139): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.649574465s ago: executing program 8 (id=4144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, r1, 0xf6f43000fca0174d, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c011}, 0x4854) 2.441284791s ago: executing program 8 (id=4145): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.265309357s ago: executing program 3 (id=4147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) 2.134241722s ago: executing program 3 (id=4148): ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r0, &(0x7f0000000080)="71e49d07120ad064a0fc6de0328ac7bf", 0x10) fstat(r0, &(0x7f0000001640)) 1.847030131s ago: executing program 8 (id=4151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x80}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x30}}, 0x0) 1.808796512s ago: executing program 3 (id=4152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="480002"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.593121859s ago: executing program 3 (id=4154): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 1.515164112s ago: executing program 8 (id=4155): syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.397747725s ago: executing program 4 (id=4156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.25988816s ago: executing program 4 (id=4157): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) syz_clone3(&(0x7f0000000500)={0x8000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) 1.159663183s ago: executing program 4 (id=4158): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa0100ff, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @local, @private=0xa010100}}}}}}, 0x0) 1.074743206s ago: executing program 4 (id=4159): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x24) exit(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 719.000687ms ago: executing program 3 (id=4160): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 459.914835ms ago: executing program 3 (id=4161): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x14, 0x45, "1ff6b0c9183f284ef1f624c8d6bd0fbfe8f0e5b6fd8affe92e68415f368f407b06c197f1c4565a396cee50699bb59f6628639a6e1f364800af080b675865e557fc1bbd6545"}, 0x0, 0x0}) 173.199145ms ago: executing program 4 (id=4162): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 4 (id=4163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}}, 0x0) close(0x3) kernel console output (not intermixed with test programs): rupt inode 0xa as bad. Run chkdsk. [ 391.113483][T10764] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 391.122022][T13688] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 391.139198][T10764] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 391.159632][T13688] ntfs: volume version 3.1. [ 391.175004][T10764] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 391.203140][T10764] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 391.231042][T13688] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 391.273555][ T2301] usb 3-1: USB disconnect, device number 25 [ 391.283754][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 391.304621][T10764] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 391.314549][ T2301] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 391.334264][T10764] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 391.358250][ T2301] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 391.373354][T13688] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 391.383094][T10764] microsoft 0003:045E:07DA.001A: no inputs found [ 391.390409][T10764] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 391.400120][ T2301] quatech2 3-1:0.51: device disconnected [ 391.470567][T10123] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 391.580702][ T13] usb 4-1: USB disconnect, device number 21 [ 391.600179][ T1222] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 391.662664][ T1222] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 391.666946][T13686] loop8: detected capacity change from 0 to 32768 [ 391.682717][ T1222] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.682717][ T1222] [ 391.698679][ T1222] EXT4-fs (loop1): Total free blocks count 0 [ 391.705781][ T1222] EXT4-fs (loop1): Free/Dirty block details [ 391.711828][ T1222] EXT4-fs (loop1): free_blocks=66060288 [ 391.726438][ T1222] EXT4-fs (loop1): dirty_blocks=3712 [ 391.731886][ T1222] EXT4-fs (loop1): Block reservation details [ 391.757179][ T1222] EXT4-fs (loop1): i_reserved_data_blocks=232 [ 391.795901][T13686] JBD2: Ignoring recovery information on journal [ 391.840298][ T7136] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1654 with error 28 [ 391.872531][ T7136] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.872531][ T7136] [ 391.945292][T13686] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 392.126034][ T9503] ocfs2: Unmounting device (7,8) on (node local) [ 392.805671][T13734] loop8: detected capacity change from 0 to 64 [ 392.901977][T13734] hfs: request for non-existent node 131072 in B*Tree [ 392.918511][T13734] hfs: request for non-existent node 131072 in B*Tree [ 393.601956][T13762] loop1: detected capacity change from 0 to 512 [ 394.095697][T13777] binder: 13774:13777 ioctl 40046205 0 returned -22 [ 394.471200][T13784] loop3: detected capacity change from 0 to 32768 [ 394.629443][T13784] JBD2: Ignoring recovery information on journal [ 394.637472][T13784] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 394.646756][T13784] JBD2: bad block at offset 32 [ 394.677589][T13784] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 394.701226][T13784] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 394.721355][T13784] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 394.731460][T13784] OCFS2: File system is now read-only. [ 394.737086][T13784] (syz.3.3017,13784,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 394.745158][T13784] (syz.3.3017,13784,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 394.753845][T13784] (syz.3.3017,13784,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 394.761708][T13784] (syz.3.3017,13784,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 394.770523][T13784] (syz.3.3017,13784,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 394.780215][T13784] (syz.3.3017,13784,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 394.788467][T13784] (syz.3.3017,13784,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 394.797385][T13784] (syz.3.3017,13784,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 394.806494][T13784] (syz.3.3017,13784,0):ocfs2_mknod:298 ERROR: status = -5 [ 394.813876][T13784] (syz.3.3017,13784,0):ocfs2_mknod:502 ERROR: status = -5 [ 394.821032][T13784] (syz.3.3017,13784,0):ocfs2_create:676 ERROR: status = -5 [ 395.078195][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 395.707202][T13825] input: syz0 as /devices/virtual/input/input21 [ 395.948298][T13838] loop1: detected capacity change from 0 to 64 [ 396.005408][T13840] loop4: detected capacity change from 0 to 256 [ 396.025035][T13838] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 396.980149][T13881] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3061'. [ 397.000170][T13871] loop4: detected capacity change from 0 to 8192 [ 397.010396][T13881] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3061'. [ 397.069497][T13871] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 397.117295][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'. [ 397.131057][T13871] REISERFS (device loop4): using ordered data mode [ 397.157347][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3062'. [ 397.166759][T13871] reiserfs: using flush barriers [ 397.183602][T13871] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 397.281043][T13871] REISERFS (device loop4): checking transaction log (loop4) [ 397.300736][T13871] REISERFS (device loop4): Using r5 hash to sort names [ 397.316268][T13871] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 397.641463][T13900] loop1: detected capacity change from 0 to 64 [ 397.835789][T13900] MINIX-fs: mounting file system with errors, running fsck is recommended [ 398.086919][T13914] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 398.094497][T13914] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 398.257637][T13919] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3078'. [ 398.269721][T13921] loop1: detected capacity change from 0 to 16 [ 398.313305][T13921] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 398.495952][T13927] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.3081'. [ 398.850261][T13941] netlink: 'syz.3.3087': attribute type 4 has an invalid length. [ 398.859586][T13939] loop4: detected capacity change from 0 to 2048 [ 398.908182][T13944] lo speed is unknown, defaulting to 1000 [ 398.939455][T13944] lo speed is unknown, defaulting to 1000 [ 398.967181][T13944] lo speed is unknown, defaulting to 1000 [ 398.999127][T13939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.323135][T13955] loop4: detected capacity change from 0 to 512 [ 399.471768][T13955] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 399.531106][ T5870] lo speed is unknown, defaulting to 1000 [ 399.540120][T13943] loop8: detected capacity change from 0 to 32768 [ 399.530997][T13944] infiniband syz1: set down [ 399.583876][T13944] infiniband syz1: added lo [ 399.594389][T13955] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.646040][T13955] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #12: comm syz.4.3091: directory missing '.' [ 399.659800][T13955] EXT4-fs (loop4): Remounting filesystem read-only [ 399.796778][T13944] RDS/IB: syz1: added [ 399.801246][T13944] smc: adding ib device syz1 with port count 1 [ 399.812511][T13944] smc: ib device syz1 port 1 has pnetid [ 399.819094][ T13] lo speed is unknown, defaulting to 1000 [ 399.861663][T13944] lo speed is unknown, defaulting to 1000 [ 400.249639][T13978] loop8: detected capacity change from 0 to 1024 [ 400.313032][T13978] EXT4-fs (loop8): Ignoring removed bh option [ 400.406498][T13944] lo speed is unknown, defaulting to 1000 [ 400.451189][T13992] program syz.2.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.463833][T13978] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,nodioread_nolock,barrier=0x0000000000000004,nolazytime,journal_ioprio=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 400.568255][T13993] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 400.596691][T13993] File: /dev/nullb0 PID: 13993 Comm: syz.4.3104 [ 400.883808][ T21] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 400.908519][T13944] lo speed is unknown, defaulting to 1000 [ 401.254154][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.298942][T13944] lo speed is unknown, defaulting to 1000 [ 401.403465][T14024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3119'. [ 401.433938][ T21] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 401.454278][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3119'. [ 401.458850][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.477771][ T21] usb 2-1: Product: syz [ 401.482156][ T21] usb 2-1: Manufacturer: syz [ 401.487911][ T21] usb 2-1: SerialNumber: syz [ 401.497630][ T21] usb 2-1: config 0 descriptor?? [ 401.536321][ T21] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 401.682709][T13944] lo speed is unknown, defaulting to 1000 [ 401.940603][T14028] loop8: detected capacity change from 0 to 32768 [ 402.020650][T14040] loop3: detected capacity change from 0 to 512 [ 402.060211][T14028] XFS (loop8): Mounting V5 Filesystem [ 402.133037][T14040] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.3125: missing EA_INODE flag [ 402.227479][T14040] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3125: error while reading EA inode 12 err=-117 [ 402.246409][T14040] EXT4-fs (loop3): 1 orphan inode deleted [ 402.252277][T14040] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 402.308201][T14028] XFS (loop8): Ending clean mount [ 402.423839][ T21] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 402.430724][ T21] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 402.452726][ T21] usb 2-1: USB disconnect, device number 32 [ 402.473430][ T9503] XFS (loop8): Unmounting Filesystem [ 402.604252][T10348] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 402.944074][T10348] usb 3-1: Using ep0 maxpacket: 32 [ 403.088797][T10348] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 403.123977][T14077] tap0: tun_chr_ioctl cmd 1074025677 [ 403.129744][T14077] tap0: linktype set to 778 [ 403.143797][T10348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 403.154294][T10348] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 403.184500][T10348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.216239][T10348] usb 3-1: config 0 descriptor?? [ 403.240578][T14083] loop8: detected capacity change from 0 to 1024 [ 403.339302][T14087] loop4: detected capacity change from 0 to 512 [ 403.371549][T14083] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.399780][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3144'. [ 403.434095][T14087] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.3142: missing EA_INODE flag [ 403.459523][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 403.478035][T14087] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3142: error while reading EA inode 12 err=-117 [ 403.495546][T14087] EXT4-fs (loop4): 1 orphan inode deleted [ 403.501865][T14087] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 403.697801][T10348] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 403.728863][T10348] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 403.764047][T10348] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 403.797238][T10348] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 403.818355][T10348] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 403.837558][T14113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3153'. [ 403.887942][T10348] corsair-psu 0003:1B1C:1C09.001B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 404.061247][T14121] program syz.3.3156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.275382][T14124] loop1: detected capacity change from 0 to 2048 [ 404.292239][T10348] corsair-psu 0003:1B1C:1C09.001B: unable to initialize device (-110) [ 404.325290][T10348] corsair-psu: probe of 0003:1B1C:1C09.001B failed with error -110 [ 404.364271][T10348] usb 3-1: USB disconnect, device number 26 [ 404.386544][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 404.423834][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 404.498464][T14124] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.515812][T14129] loop8: detected capacity change from 0 to 8192 [ 404.673069][T14133] fido_id[14133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 404.697282][T14129] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 404.718366][T14129] REISERFS (device loop8): using ordered data mode [ 404.753850][T14129] reiserfs: using flush barriers [ 404.781960][T14129] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 404.804239][T14129] REISERFS (device loop8): checking transaction log (loop8) [ 404.877100][T14118] loop4: detected capacity change from 0 to 32768 [ 404.949255][T14148] loop3: detected capacity change from 0 to 512 [ 405.008676][T14129] REISERFS (device loop8): Using tea hash to sort names [ 405.029500][T14129] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 405.131101][T14118] XFS (loop4): Mounting V5 Filesystem [ 405.257163][T14156] device batadv0 entered promiscuous mode [ 405.332898][T14156] device bond0 entered promiscuous mode [ 405.372057][T14156] device bond_slave_0 entered promiscuous mode [ 405.383632][T14156] device bond_slave_1 entered promiscuous mode [ 405.411226][T14118] XFS (loop4): Ending clean mount [ 405.421421][T14156] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.478323][T14156] device batadv0 left promiscuous mode [ 405.533362][T14156] device bond0 left promiscuous mode [ 405.554976][T14156] device bond_slave_0 left promiscuous mode [ 405.561156][T14156] device bond_slave_1 left promiscuous mode [ 405.843368][T10123] XFS (loop4): Unmounting Filesystem [ 405.885578][T14169] netlink: 'syz.3.3171': attribute type 1 has an invalid length. [ 406.133973][ T13] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 406.161720][ T4231] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 406.208565][T14183] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3179'. [ 406.251681][T14185] program syz.3.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.424715][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 406.464113][ T4231] usb 9-1: Using ep0 maxpacket: 16 [ 406.478003][T14192] loop3: detected capacity change from 0 to 512 [ 406.517591][T14192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.554077][ T13] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 406.567083][ T13] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 406.602397][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 406.614839][ T4231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.628442][ T4231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.639322][ T13] usb 2-1: config 1 has no interface number 0 [ 406.645968][ T4231] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 406.663868][ T13] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.676364][ T4231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.684810][ T13] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 406.699575][ T13] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 406.710187][ T4231] usb 9-1: config 0 descriptor?? [ 406.720040][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.788293][ T13] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 407.005464][ T13] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 407.209855][ T13] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 407.228168][ T4231] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 407.305198][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 407.425479][T14213] loop4: detected capacity change from 0 to 2048 [ 407.434152][ T4231] corsair 0003:1B1C:1B02.001C: Read invalid backlight brightness: 57. [ 407.514369][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 407.539054][T14213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.657906][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.670603][ T13] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 407.700721][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.719561][ T4231] usb 9-1: USB disconnect, device number 4 [ 407.727530][ T13] usb 4-1: config 0 descriptor?? [ 407.766754][T10764] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 407.830163][T14224] loop4: detected capacity change from 0 to 1024 [ 407.865743][ T26] audit: type=1800 audit(1781782571.541:62): pid=14224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3196" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 407.874869][T14224] hfsplus: catalog searching failed [ 407.913424][ T4712] hfsplus: bad catalog file entry [ 407.919047][ T4712] hfsplus: b-tree write err: -5, ino 3 [ 408.051387][ T4231] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 408.134078][T10764] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 408.145360][T10764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.158337][T10764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.168338][T10764] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 408.181533][T10764] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 408.190668][T10764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.209688][T10764] usb 3-1: config 0 descriptor?? [ 408.250859][ T13] bigben 0003:146B:0902.001D: unexpected rdesc, please submit for review [ 408.262544][ T13] bigben 0003:146B:0902.001D: unexpected long global item [ 408.270914][ T13] bigben 0003:146B:0902.001D: parse failed [ 408.277871][ T13] bigben: probe of 0003:146B:0902.001D failed with error -22 [ 408.463838][ T5870] usb 4-1: USB disconnect, device number 22 [ 408.695694][T10764] holtek_kbd 0003:04D9:A055.001E: unbalanced delimiter at end of report description [ 408.705744][T10764] holtek_kbd: probe of 0003:04D9:A055.001E failed with error -22 [ 408.826030][ T13] usb 2-1: USB disconnect, device number 33 [ 408.836322][ T13] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 408.932157][ T4231] usb 3-1: USB disconnect, device number 27 [ 409.083299][T14237] loop4: detected capacity change from 0 to 2048 [ 409.148118][T14241] tap0: tun_chr_ioctl cmd 1074025676 [ 409.163947][T14241] tap0: owner set to 0 [ 409.201970][T14237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.241826][ T26] audit: type=1800 audit(1781782572.911:63): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3202" name="file2" dev="loop4" ino=1347 res=0 errno=0 [ 409.263387][ T4938] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 409.378410][T14247] loop1: detected capacity change from 0 to 2048 [ 409.419360][T14249] device vlan0 entered promiscuous mode [ 409.441784][T14249] device team0 entered promiscuous mode [ 409.499583][T14249] device team_slave_0 entered promiscuous mode [ 409.516614][T14249] device team_slave_1 entered promiscuous mode [ 409.576324][T14247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.705154][ T4938] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 409.725452][ T4938] usb 9-1: config 0 has no interface number 0 [ 409.760405][ T4938] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.773629][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 409.836476][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 410.034143][ T4938] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 410.060170][ T4938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.101360][ T4938] usb 9-1: Product: syz [ 410.113956][ T4938] usb 9-1: Manufacturer: syz [ 410.118838][ T4938] usb 9-1: SerialNumber: syz [ 410.144450][ T4938] usb 9-1: config 0 descriptor?? [ 410.225659][ T4938] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 410.406372][ T4938] usb 9-1: USB disconnect, device number 5 [ 410.427132][ T4938] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 411.000195][T14278] loop4: detected capacity change from 0 to 131072 [ 411.113332][T14278] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 411.120786][T14278] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 411.158465][T14278] F2FS-fs (loop4): invalid crc value [ 411.246587][T14278] F2FS-fs (loop4): Found nat_bits in checkpoint [ 411.328553][T14278] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 411.335764][T14278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 411.469270][T14278] fscrypt (loop4, inode 8): Error -61 getting encryption context [ 412.074898][ T4938] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 412.283874][T10764] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 412.344259][ T4938] usb 2-1: Using ep0 maxpacket: 32 [ 412.469941][ T4938] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 412.481985][ T4938] usb 2-1: config 0 has no interface number 0 [ 412.513874][ T4938] usb 2-1: config 0 interface 184 has no altsetting 0 [ 412.602863][T14323] loop4: detected capacity change from 0 to 40427 [ 412.654123][T10764] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 412.676781][T14323] F2FS-fs (loop4): invalid crc value [ 412.695094][T10764] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 412.712195][T10764] usb 4-1: config 0 has no interface number 0 [ 412.724288][ T4938] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 412.749697][ T4938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.791414][ T4938] usb 2-1: Product: syz [ 412.801297][ T4938] usb 2-1: Manufacturer: syz [ 412.810879][ T4938] usb 2-1: SerialNumber: syz [ 412.832729][ T4938] usb 2-1: config 0 descriptor?? [ 412.885124][ T4938] smsc75xx v1.0.0 [ 412.941759][T14323] F2FS-fs (loop4): Found nat_bits in checkpoint [ 413.162263][T14323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 413.423113][T10123] attempt to access beyond end of device [ 413.423113][T10123] loop4: rw=2049, want=45104, limit=40427 [ 413.777936][ T4938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 413.809820][ T4938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 413.884076][ T4938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 413.925484][ T4938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 413.952204][ T4938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 413.978574][ T4938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 414.045347][ T4938] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 414.101652][ T4938] usb 2-1: USB disconnect, device number 34 [ 414.114286][T10764] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 414.153957][T10764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.162294][T10764] usb 4-1: Product: syz [ 414.168043][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.188387][T10764] usb 4-1: Manufacturer: syz [ 414.193056][T10764] usb 4-1: SerialNumber: syz [ 414.223222][T10764] usb 4-1: config 0 descriptor?? [ 414.737827][T10764] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 414.762127][T10764] usb 4-1: No valid video chain found. [ 414.949860][T10764] usb 4-1: USB disconnect, device number 23 [ 414.973182][T14389] [U]  [ 414.994117][T14389] [U] K{‘ [ 414.997426][T14389] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 415.016412][T14389] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 415.103439][T14389] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 415.129464][T14389] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 415.180974][T14389] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 415.239803][T10348] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 415.252205][T14389] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 415.300122][T14389] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 415.315779][T14389] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 415.438207][T14389] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 415.473447][T14389] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 415.488573][T14389] [U] 22½“Æ©ÐÛ©X?0;3U± [ 415.494225][T14389] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 415.520601][T14389] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 415.542516][T14389] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 415.564266][T14389] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 415.571313][T14389] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 415.583838][T10764] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 415.587663][T10348] usb 2-1: Using ep0 maxpacket: 32 [ 415.602258][T14389] [U] ¹ EC [ 415.606355][T14389] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 415.642353][T14406] sctp: [Deprecated]: syz.3.3275 (pid 14406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.642353][T14406] Use struct sctp_sack_info instead [ 415.672345][T14387] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 415.774267][ T4231] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 415.904276][T10348] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 415.920288][T10348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.937938][T10348] usb 2-1: Product: syz [ 415.942669][T10348] usb 2-1: Manufacturer: syz [ 415.948067][T10348] usb 2-1: SerialNumber: syz [ 415.954096][T10764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 415.956824][T10348] usb 2-1: config 0 descriptor?? [ 415.977892][T10764] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.991399][T10764] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 416.000740][T10764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.014948][T10764] usb 5-1: config 0 descriptor?? [ 416.056832][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 416.223364][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.241718][ T4231] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 416.324736][ T4231] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 416.332371][ T4231] usb 3-1: can't read configurations, error -71 [ 416.428860][T14437] loop9: detected capacity change from 0 to 2640 [ 416.441452][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.452936][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.462999][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.474042][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.484978][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.495976][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.509932][T10764] hid-alps 0003:044E:120C.001F: unknown main item tag 0x0 [ 416.517574][T10764] hid-alps 0003:044E:120C.001F: unexpected long global item [ 416.525917][T10764] hid-alps 0003:044E:120C.001F: parse failed [ 416.529289][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.532596][T10764] hid-alps: probe of 0003:044E:120C.001F failed with error -22 [ 416.543129][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.564458][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.575532][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.583982][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.595003][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.604041][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.614996][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.624850][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.635869][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.645261][ T4405] ldm_validate_partition_table(): Disk read failed. [ 416.652612][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.663580][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.685241][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.696228][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.704536][T10348] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 416.733623][T10764] usb 5-1: USB disconnect, device number 6 [ 416.740018][ T4405] Dev loop9: unable to read RDB block 0 [ 416.757825][ T4405] loop9: unable to read partition table [ 416.798551][T14437] ldm_validate_partition_table(): Disk read failed. [ 416.845492][T14437] Dev loop9: unable to read RDB block 0 [ 416.864609][T14437] loop9: unable to read partition table [ 416.875021][T10348] peak_usb: probe of 2-1:0.0 failed with error -71 [ 416.882645][T14437] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 416.896871][T10348] usb 2-1: USB disconnect, device number 35 [ 417.069104][T14447] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3294'. [ 417.079093][T14447] netlink: 22 bytes leftover after parsing attributes in process `syz.8.3294'. [ 417.415271][T14457] netlink: 'syz.4.3299': attribute type 5 has an invalid length. [ 417.718318][T14465] loop1: detected capacity change from 0 to 2048 [ 417.747520][ T4191] block nbd0: Receive control failed (result -32) [ 417.856488][T14471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.244825][T14478] loop4: detected capacity change from 0 to 128 [ 418.336513][T14478] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 418.487414][T14453] loop8: detected capacity change from 0 to 32768 [ 418.911501][T14476] loop3: detected capacity change from 0 to 131072 [ 418.990730][T14476] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 418.999519][T14476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 419.044119][T14476] F2FS-fs (loop3): invalid crc value [ 419.096059][T14476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 419.175472][T14476] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 419.182604][T14476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 419.567587][T14508] loop9: detected capacity change from 0 to 2640 [ 419.601036][T14508] ldm_validate_partition_table(): Disk read failed. [ 419.608846][T14508] Dev loop9: unable to read RDB block 0 [ 419.719982][T14508] loop9: unable to read partition table [ 419.731703][T14508] loop9: partition table beyond EOD, truncated [ 419.759675][T14508] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 419.813858][T10764] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 419.942412][T14517] loop4: detected capacity change from 0 to 8 [ 420.073862][T10764] usb 9-1: Using ep0 maxpacket: 32 [ 420.190279][T14521] loop4: detected capacity change from 0 to 256 [ 420.194897][T10764] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 420.216247][T10764] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.249717][T10764] usb 9-1: config 0 descriptor?? [ 420.320220][T14521] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.382998][T14521] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 420.441706][T14521] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 420.523941][T10764] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 420.552518][T10764] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.614247][T10764] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 420.621702][T10764] usb 9-1: media controller created [ 420.670124][T10764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.793868][T10764] az6027: usb out operation failed. (-71) [ 420.813868][T10764] az6027: usb out operation failed. (-71) [ 420.823796][T10764] stb0899_attach: Driver disabled by Kconfig [ 420.864478][T10764] az6027: no front-end attached [ 420.864478][T10764] [ 420.903870][T10764] az6027: usb out operation failed. (-71) [ 420.923770][T10764] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 420.942570][T10764] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23 [ 421.002591][T10764] dvb-usb: schedule remote query interval to 400 msecs. [ 421.012572][T14519] loop1: detected capacity change from 0 to 40427 [ 421.024932][T10764] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 421.055425][T10764] usb 9-1: USB disconnect, device number 6 [ 421.083147][T14519] F2FS-fs (loop1): invalid crc value [ 421.148767][T14539] loop4: detected capacity change from 0 to 512 [ 421.191531][T14519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 421.200856][T10764] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 421.258536][T14539] EXT4-fs (loop4): inline encryption not supported [ 421.294708][T14543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.327155][T14519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 421.357371][T14543] ext4 filesystem being mounted at /739/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.384554][T14539] EXT4-fs (loop4): 1 orphan inode deleted [ 421.390405][T14539] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,data_err=abort,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 421.441759][T14549] set_capacity_and_notify: 1 callbacks suppressed [ 421.441799][T14549] loop8: detected capacity change from 0 to 2048 [ 421.461520][T14539] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.3331: Directory hole found for htree leaf block 0 [ 421.505545][T14543] EXT4-fs warning (device loop3): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 421.554292][T14519] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 421.609238][T14549] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 422.274128][T10348] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 422.487454][T14566] option changes via remount are deprecated (pid=14564 comm=syz.2.3342) [ 422.607024][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 422.705347][T10348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.729687][T10348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.766467][T10348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.791279][T10348] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.801840][T10348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.830097][T10348] usb 4-1: config 0 descriptor?? [ 423.004040][T14584] loop1: detected capacity change from 0 to 128 [ 423.060877][T14586] loop4: detected capacity change from 0 to 512 [ 423.095702][T14563] loop8: detected capacity change from 0 to 32768 [ 423.114099][T14584] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 423.140996][T14586] EXT4-fs (loop4): Test dummy encryption mode enabled [ 423.167041][T14563] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.3341 (14563) [ 423.197403][T14586] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 423.222515][T14590] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 423.243477][T14586] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 423.253270][T14586] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 423.337079][T10348] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 423.367040][T10348] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 423.401603][T14563] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 423.417303][ T4935] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 423.452419][T14563] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 423.489363][T14563] BTRFS info (device loop8): use zstd compression, level 3 [ 423.519509][T14563] BTRFS info (device loop8): using free space tree [ 423.532406][T14563] BTRFS info (device loop8): has skinny extents [ 423.561753][T14586] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 423.580346][ T2301] usb 4-1: USB disconnect, device number 24 [ 423.821661][T14563] BTRFS info (device loop8): enabling ssd optimizations [ 423.834060][ T4935] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.844286][ T4935] usb 3-1: config 0 has no interface number 0 [ 423.878154][ T4935] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 423.974280][ T4935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.053253][T14630] loop1: detected capacity change from 0 to 128 [ 424.059599][ T4935] usb 3-1: config 0 descriptor?? [ 424.111392][ T4935] usb 3-1: selecting invalid altsetting 1 [ 424.161245][ T4935] dvb_ttusb_budget: ttusb_init_controller: error [ 424.179768][ T4935] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 424.213432][T14630] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 424.368849][ T4935] DVB: Unable to find symbol cx22700_attach() [ 424.548861][ T4935] DVB: Unable to find symbol tda10046_attach() [ 424.566483][ T4935] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 424.582917][T14641] device erspan0 entered promiscuous mode [ 424.660064][ T4935] usb 3-1: USB disconnect, device number 30 [ 424.690696][T14639] loop3: detected capacity change from 0 to 256 [ 424.951693][T14639] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 425.143823][T14628] loop4: detected capacity change from 0 to 32768 [ 425.340923][T14628] XFS (loop4): Mounting V5 Filesystem [ 425.538837][T14662] loop1: detected capacity change from 0 to 2048 [ 425.567418][T14662] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 425.605712][ T4182] udevd[4182]: incorrect nilfs2 checksum on /dev/loop1 [ 425.621609][T14663] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.681802][T14628] XFS (loop4): Ending clean mount [ 425.781307][T14628] XFS (loop4): Quotacheck needed: Please wait. [ 426.055077][T14628] XFS (loop4): Quotacheck: Done. [ 426.114728][T10348] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 426.299946][T10123] XFS (loop4): Unmounting Filesystem [ 426.378392][T10348] usb 4-1: Using ep0 maxpacket: 32 [ 426.554786][T10348] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 426.569323][T10348] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 426.600723][T10348] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 426.633018][T10348] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 426.695028][T10348] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.762130][T14690] loop8: detected capacity change from 0 to 1024 [ 426.919332][T14690] EXT4-fs (loop8): Ignoring removed orlov option [ 426.976595][T10348] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 426.992115][T10348] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 427.016255][T10348] usb 4-1: Product: syz [ 427.025576][T10348] usb 4-1: Manufacturer: syz [ 427.038471][T10348] usb 4-1: SerialNumber: syz [ 427.045192][ T5873] kernel read not supported for file /dsp1 (pid: 5873 comm: kworker/1:17) [ 427.081563][T10348] usb 4-1: config 0 descriptor?? [ 427.119710][T14690] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 427.156183][T10348] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 427.205270][T10348] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 427.503873][ T3854] device veth1_vlan left promiscuous mode [ 427.550347][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.559858][T10348] usb 4-1: USB disconnect, device number 25 [ 427.611462][T10348] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 427.953093][T14716] loop4: detected capacity change from 0 to 4096 [ 428.022339][T14716] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 428.181540][ T1222] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 428.212856][T10123] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 428.235485][T10123] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 428.607031][T14737] loop3: detected capacity change from 0 to 164 [ 429.144167][ T4935] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 429.283911][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 429.464622][T14745] loop8: detected capacity change from 0 to 32768 [ 429.483892][ T5865] Bluetooth: hci5: command 0x1003 tx timeout [ 429.490121][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 429.543883][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 429.556707][T14745] [ 429.556707][T14745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.556707][T14745] [ 429.584499][ T26] audit: type=1800 audit(1781782593.261:64): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3391" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 429.605680][ T4935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.620521][T14745] ERROR: (device loop8): diWrite: ixpxd invalid [ 429.620521][T14745] [ 429.655288][T14745] ERROR: (device loop8): txCommit: [ 429.655288][T14745] [ 429.684030][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.707751][ T4935] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 429.714502][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.726659][ T4935] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 429.750156][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 429.771148][ T5873] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 429.780960][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.799830][ T9503] [ 429.799830][ T9503] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.799830][ T9503] [ 429.820355][ T5873] usb 5-1: config 0 descriptor?? [ 429.829090][ T9503] [ 429.829090][ T9503] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.829090][ T9503] [ 429.954154][ T4935] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 429.974342][ T4935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.982538][ T4935] usb 4-1: Product: syz [ 429.993188][ T4935] usb 4-1: Manufacturer: syz [ 429.998188][ T4935] usb 4-1: SerialNumber: syz [ 430.307926][ T5873] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0021/input/input24 [ 430.314247][ T4935] usb 4-1: USB disconnect, device number 26 [ 430.433882][T14788] loop8: detected capacity change from 0 to 4096 [ 430.436729][ T5873] appleir 0003:05AC:8241.0021: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 430.489786][T14788] EXT4-fs (loop8): Test dummy encryption mode enabled [ 430.527168][T14788] EXT4-fs (loop8): Ignoring removed oldalloc option [ 430.559003][ T5873] usb 5-1: USB disconnect, device number 7 [ 430.580353][T14788] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 430.654047][T14788] System zones: 0-5 [ 430.676957][T14788] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 430.733072][T14792] fido_id[14792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 431.139866][T14808] loop3: detected capacity change from 0 to 512 [ 431.230535][T14814] loop8: detected capacity change from 0 to 128 [ 431.273262][T14808] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.384958][T14814] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 431.611286][ T5865] Bluetooth: hci5: command 0x1001 tx timeout [ 431.617798][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 431.720421][T14822] loop3: detected capacity change from 0 to 4096 [ 431.856398][T14822] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 431.874195][T10348] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 432.144197][T10348] usb 5-1: Using ep0 maxpacket: 8 [ 432.264650][T10348] usb 5-1: config 0 has no interfaces? [ 432.306990][T14841] loop8: detected capacity change from 0 to 512 [ 432.409582][T14841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2826c018, mo2=0002] [ 432.454188][T10348] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 432.463502][T10348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.472276][T10348] usb 5-1: Product: syz [ 432.477172][T10348] usb 5-1: Manufacturer: syz [ 432.481814][T10348] usb 5-1: SerialNumber: syz [ 432.500755][T10348] usb 5-1: config 0 descriptor?? [ 432.506894][T14841] System zones: 1-12 [ 432.622513][T14841] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.3428: corrupted inode contents [ 432.683534][T14841] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 432.744461][T14841] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.3428: corrupted inode contents [ 432.770856][T10348] usb 5-1: USB disconnect, device number 8 [ 432.794127][T14841] EXT4-fs error (device loop8): ext4_evict_inode:332: inode #15: comm syz.8.3428: mark_inode_dirty error [ 432.836808][T14841] EXT4-fs (loop8): 1 orphan inode deleted [ 432.842619][T14841] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,noinit_itable,prjquota,,errors=continue. Quota mode: writeback. [ 432.970862][T14841] EXT4-fs error (device loop8): __ext4_expand_extra_isize:5893: inode #18: comm syz.8.3428: bad extra_isize 6 (inode size 256) [ 433.091181][T14859] loop3: detected capacity change from 0 to 4096 [ 433.249164][T14859] EXT4-fs (loop3): Test dummy encryption mode enabled [ 433.263860][T14859] EXT4-fs (loop3): Ignoring removed oldalloc option [ 433.295832][T14859] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 433.318568][T14859] System zones: 0-5 [ 433.342023][T14859] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 433.644223][ T2301] Bluetooth: hci5: command 0x1009 tx timeout [ 434.290921][T14911] loop8: detected capacity change from 0 to 1024 [ 434.790490][T14930] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 434.790490][T14930] The task syz.4.3469 (14930) triggered the difference, watch for misbehavior. [ 435.085826][T14936] loop3: detected capacity change from 0 to 512 [ 435.189372][T14936] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 435.210010][T14936] ext4 filesystem being mounted at /766/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.348839][T14928] loop8: detected capacity change from 0 to 32768 [ 435.485232][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.634062][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.733862][ T5873] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 435.902938][T14959] loop3: detected capacity change from 0 to 2048 [ 435.921396][T14963] loop8: detected capacity change from 0 to 256 [ 435.978273][T14959] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 435.994077][T14963] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.042433][T14959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.106940][ T5873] usb 3-1: config index 0 descriptor too short (expected 65388, got 18) [ 436.120235][ T5873] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.384186][ T5873] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 436.409362][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.433790][ T5873] usb 3-1: Product: syz [ 436.438043][ T5873] usb 3-1: Manufacturer: syz [ 436.439101][T14975] loop8: detected capacity change from 0 to 1024 [ 436.457143][ T5873] usb 3-1: SerialNumber: syz [ 436.504951][ T5873] rtl8150 3-1:1.0: couldn't find required endpoints [ 436.513364][ T5873] rtl8150: probe of 3-1:1.0 failed with error -5 [ 436.610958][ T5873] kernel write not supported for file /adsp1 (pid: 5873 comm: kworker/1:17) [ 436.714273][ T5873] usb 3-1: USB disconnect, device number 31 [ 436.767655][T14985] loop4: detected capacity change from 0 to 512 [ 436.954794][T14985] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 436.978654][T14985] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.279377][T15000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3501'. [ 437.326785][T15001] program syz.2.3502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.437550][ T5873] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 437.706111][ T5873] usb 9-1: Using ep0 maxpacket: 32 [ 437.864049][ T5873] usb 9-1: unable to get BOS descriptor or descriptor too short [ 437.984971][ T5873] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 437.993396][ T5873] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 438.013845][ T5873] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 438.023329][ T5873] usb 9-1: config 128 has no interface number 0 [ 438.049612][ T5873] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 438.078704][ T5873] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.107847][ T5873] usb 9-1: config 128 interface 127 has no altsetting 0 [ 438.290808][ T5873] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 438.309099][T15006] loop4: detected capacity change from 0 to 32768 [ 438.320949][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.351423][ T5873] usb 9-1: Product: syz [ 438.368918][ T5873] usb 9-1: Manufacturer: syz [ 438.384834][T15003] loop3: detected capacity change from 0 to 32768 [ 438.391437][ T5873] usb 9-1: SerialNumber: syz [ 438.574575][T15003] XFS (loop3): Mounting V5 Filesystem [ 438.693857][T10764] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 438.717205][T15003] XFS (loop3): Ending clean mount [ 438.824919][T15003] XFS (loop3): Quotacheck needed: Please wait. [ 438.917371][ T5873] usb 9-1: USB disconnect, device number 7 [ 438.943354][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.084365][T10764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.117758][T10764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 439.129876][T15030] sch_fq: defrate 0 ignored. [ 439.158640][T10764] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.242776][T15028] loop4: detected capacity change from 0 to 8192 [ 439.261156][T15032] device erspan0 entered promiscuous mode [ 439.267557][T15003] XFS (loop3): Quotacheck: Done. [ 439.294093][T10764] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.332259][T10764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 439.401031][T10764] usb 2-1: SerialNumber: syz [ 439.477647][T10764] hub 2-1:1.0: bad descriptor, ignoring hub [ 439.525523][ T4198] XFS (loop3): Unmounting Filesystem [ 439.541544][T10764] hub: probe of 2-1:1.0 failed with error -5 [ 439.574397][T10764] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 439.596252][T15035] loop8: detected capacity change from 0 to 4096 [ 439.630570][T10764] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 439.638215][T15035] EXT4-fs (loop8): Test dummy encryption mode enabled [ 439.668543][T15035] EXT4-fs (loop8): Ignoring removed orlov option [ 439.708873][T15039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3516'. [ 439.773140][T10764] usb 2-1: USB disconnect, device number 36 [ 439.911061][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.917606][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.143633][T15035] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 440.386259][T15035] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 440.445895][T15059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 440.463256][T15057] EXT4-fs (loop8): Ignoring removed orlov option [ 440.473962][T15057] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option [ 440.569207][T15057] EXT4-fs (loop8): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 441.024663][T15075] nbd1: detected capacity change from 0 to 549764202496 [ 441.065642][ T4191] block nbd1: Receive control failed (result -104) [ 441.624070][T10764] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 441.994925][T15118] loop1: detected capacity change from 0 to 4096 [ 442.025920][T10764] usb 9-1: unable to get BOS descriptor or descriptor too short [ 442.089817][T15122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3542'. [ 442.127664][T10764] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 442.182958][T15123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.314486][T10764] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 442.341253][T10764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.398135][T10764] usb 9-1: Product: ⫡ⷞ潗芨혫졫걮칭ê¬áŒˆä¸•í‚´æ´ží†ãƒ»ì’Šé§…çˆï·¸ê¨›îŸ§á½ë›˜ìž½ [ 442.459479][T10764] usb 9-1: Manufacturer: ႀ쒻鶴瓠ℷ리蟎龅èŠèºè·žèž»æºê£·ë’‹ì¾¤ä¶¤á¬é›£á°¬á«—巜霎ንἢ᫺専噘韖篡犛丘㺚㟴å‹á”·à¤¶à°“ࣴ퓩ᦖ㟩ç®â™ãž‡é¨î¥‡ç²¢ã“²ä¡¬ä¹½è²¤ã£¢ê¯¡îž–ã¨ìŒ†ç˜¾ä¤‘ㆀã©é¤éžæ³Šæ’¼äƒ´ë–‰î­ç¯ºá‹€ê¾ç®ˆë”˜î·»ìŠ£ì‚盹螋䠩䈺좽頫駥ë—陴樀秌æ·èŒî£ä¿žá™ƒè–í‰áŠ§è§™å–ªëƒ€è¬‡ç”’⥬ [ 442.578605][T10764] usb 9-1: SerialNumber: syz [ 442.636345][T15101] loop3: detected capacity change from 0 to 32768 [ 442.652732][T15126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.999088][T15140] netem: change failed [ 443.004448][T10764] usb 9-1: unit 4 not found! [ 443.120218][T10764] usb 9-1: USB disconnect, device number 8 [ 443.178557][T15126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.234106][T15101] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 443.357419][T15101] JBD2: Ignoring recovery information on journal [ 443.463103][T15101] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 443.501867][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.719825][T15126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.044451][ T26] audit: type=1800 audit(1781782607.721:65): pid=15155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3536" name="file0" dev="loop3" ino=17058 res=0 errno=0 [ 444.266414][T15126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.311251][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 444.547002][T15159] loop8: detected capacity change from 0 to 32768 [ 444.672416][T15126] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.752311][T15126] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.814357][T15159] XFS (loop8): Mounting V5 Filesystem [ 444.840059][T15126] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.921919][T15126] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.164576][T15159] XFS (loop8): Ending clean mount [ 445.181634][T15159] XFS (loop8): Quotacheck needed: Please wait. [ 445.404321][T15159] XFS (loop8): Quotacheck: Done. [ 445.636298][ T9503] XFS (loop8): Unmounting Filesystem [ 445.921781][T15202] loop4: detected capacity change from 0 to 64 [ 445.988436][T15204] loop1: detected capacity change from 0 to 512 [ 446.104859][T15202] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 446.207112][T15204] EXT4-fs error (device loop1): ext4_fill_super:4872: inode #2: comm syz.1.3573: inode has both inline data and extents flags [ 446.229207][T15199] kvm [15197]: vcpu3, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 446.458548][T15204] EXT4-fs (loop1): get root inode failed [ 446.464577][T15204] EXT4-fs (loop1): mount failed [ 446.582599][T15208] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3576'. [ 446.668147][T15204] 9p: Unknown Cache mode n [ 447.053788][ T5873] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 447.590337][ T5873] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 447.609036][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.653827][ T5873] usb 4-1: Product: syz [ 447.658297][ T5873] usb 4-1: Manufacturer: syz [ 447.706260][ T5873] usb 4-1: SerialNumber: syz [ 447.744615][ T5873] usb 4-1: config 0 descriptor?? [ 447.785371][ T5873] ch341 4-1:0.0: ch341-uart converter detected [ 448.161883][T15244] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3590'. [ 448.210425][T15246] loop4: detected capacity change from 0 to 2048 [ 448.246101][T15231] loop1: detected capacity change from 0 to 40427 [ 448.341875][ T4178] Alternate GPT is invalid, using primary GPT. [ 448.351419][ T4178] loop4: p1 p2 p3 [ 448.355713][ T4178] loop4: partition table partially beyond EOD, truncated [ 448.412715][T15231] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 448.430490][T15231] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 448.444167][ T5873] usb 4-1: failed to send control message: -71 [ 448.450663][ T5873] ch341-uart: probe of ttyUSB0 failed with error -71 [ 448.515662][ T5873] usb 4-1: USB disconnect, device number 27 [ 448.523315][ T5873] ch341 4-1:0.0: device disconnected [ 448.533733][T15231] F2FS-fs (loop1): invalid crc value [ 448.592979][T15231] F2FS-fs (loop1): Found nat_bits in checkpoint [ 448.703130][T15246] Alternate GPT is invalid, using primary GPT. [ 448.760598][T15246] loop4: p1 p2 p3 [ 448.780871][T15231] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 448.819771][T15246] loop4: partition table partially beyond EOD, truncated [ 449.021980][T15231] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 449.670788][ T5385] udevd[5385]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 449.694340][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 449.696414][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 449.848040][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 449.868545][ T5385] udevd[5385]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 449.901215][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 450.261820][ T4935] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 450.289599][ T26] audit: type=1326 audit(1781782613.961:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.3605" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc875d8e59 code=0x7fc00000 [ 450.409955][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'. [ 450.659843][ T4935] usb 4-1: Using ep0 maxpacket: 8 [ 450.890650][ T4935] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.910591][ T4935] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.939238][T15332] loop8: detected capacity change from 0 to 512 [ 450.953714][ T4935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 450.992159][ T4935] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 450.996804][T15332] EXT4-fs (loop8): Ignoring removed oldalloc option [ 451.021606][T15332] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 451.024149][ T4935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.085821][ T4935] usb 4-1: config 0 descriptor?? [ 451.124028][T15332] EXT4-fs (loop8): 1 truncate cleaned up [ 451.146070][T15332] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 451.312684][T15332] fscrypt (loop8, inode 18): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 451.468595][T15343] sctp: [Deprecated]: syz.2.3624 (pid 15343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.468595][T15343] Use struct sctp_sack_info instead [ 451.589351][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.602754][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.620072][ T4231] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 451.642269][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.666142][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.711054][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.753126][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.785610][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.792926][ T4935] wacom 0003:056A:005D.0022: unknown main item tag 0x0 [ 451.805135][T15354] netlink: 'syz.1.3628': attribute type 1 has an invalid length. [ 451.865751][ T4935] wacom 0003:056A:005D.0022: hidraw0: USB HID v0.03 Device [HID 056a:005d] on usb-dummy_hcd.3-1/input0 [ 451.921902][ T4935] usb 4-1: USB disconnect, device number 28 [ 452.014869][T15359] loop8: detected capacity change from 0 to 2048 [ 452.098364][T15360] fido_id[15360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 452.171043][ T4231] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 452.180392][ T4231] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 452.217827][ T4231] usb 5-1: config 0 has no interface number 0 [ 452.235428][ T4231] usb 5-1: config 0 has no interface number 1 [ 452.254163][ T4231] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 452.303149][T15363] loop1: detected capacity change from 0 to 1024 [ 452.317352][ T4231] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 452.332101][T15359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.372933][ T4231] usb 5-1: config 0 interface 255 has no altsetting 0 [ 452.466604][T15359] UDF-fs: unknown compression code (0) [ 452.632567][ T4231] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 452.669596][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.697998][ T4231] usb 5-1: Product: syz [ 452.702571][ T4231] usb 5-1: Manufacturer: syz [ 452.741146][ T4231] usb 5-1: SerialNumber: syz [ 452.765314][ T4231] usb 5-1: config 0 descriptor?? [ 452.842180][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.021934][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.139463][ T4938] usb 5-1: USB disconnect, device number 9 [ 453.263216][T15387] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3641'. [ 453.407545][T15392] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3644'. [ 453.828926][T15403] loop3: detected capacity change from 0 to 4096 [ 453.836711][T15409] loop4: detected capacity change from 0 to 8 [ 454.029818][T15414] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.066388][T15403] NILFS (loop3): corrupt root inode [ 454.255741][T15409] SQUASHFS error: Unable to read directory block [249:c] [ 454.469978][T15424] loop3: detected capacity change from 0 to 256 [ 454.576153][T15424] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 454.607368][ T5873] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 454.893206][T15431] program syz.4.3662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.051498][T15435] loop4: detected capacity change from 0 to 64 [ 455.143432][ T5873] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.202102][ T5873] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 455.297755][T15435] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 455.306097][T15435] hfs: get root inode failed [ 455.329064][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.357833][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.438827][T15444] loop3: detected capacity change from 0 to 512 [ 455.452489][T15419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 455.595887][T15444] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 455.949971][T15425] loop8: detected capacity change from 0 to 32768 [ 455.999689][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.066690][T15425] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 scanned by syz.8.3659 (15425) [ 456.135241][ T5873] usb 2-1: USB disconnect, device number 37 [ 456.292230][T15425] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 456.315100][T15425] BTRFS info (device loop8): setting nodatacow, compression disabled [ 456.344819][T15425] BTRFS info (device loop8): turning on flush-on-commit [ 456.365924][T15425] BTRFS info (device loop8): using free space tree [ 456.404755][T15425] BTRFS info (device loop8): has skinny extents [ 456.459256][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.876395][T15425] BTRFS info (device loop8): enabling ssd optimizations [ 457.253124][T15487] loop1: detected capacity change from 0 to 4096 [ 457.752621][T15508] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.013853][ T4182] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop8 scanned by udevd (4182) [ 458.274046][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3689'. [ 458.323836][T15520] bond0: option resend_igmp: invalid value (41663) [ 458.365588][T15520] bond0: option resend_igmp: allowed values 0 - 255 [ 459.580187][T15538] tipc: Started in network mode [ 459.645589][T15538] tipc: Node identity ac14140f, cluster identity 4711 [ 459.689727][T15538] tipc: New replicast peer: 172.20.20.187 [ 459.742456][T15538] tipc: Enabled bearer , priority 10 [ 459.783319][T15545] loop1: detected capacity change from 0 to 256 [ 459.848074][T15544] lo speed is unknown, defaulting to 1000 [ 459.949175][T15545] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 460.034087][ T4927] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 460.323825][ T4927] usb 4-1: Using ep0 maxpacket: 32 [ 460.569050][T15530] loop8: detected capacity change from 0 to 32768 [ 460.658138][T15530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.3692 (15530) [ 460.782542][T15559] loop1: detected capacity change from 0 to 512 [ 460.794390][ T4926] tipc: Node number set to 2886997007 [ 460.889332][T15530] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 460.961318][T15530] BTRFS info (device loop8): setting nodatasum [ 461.001918][T15530] BTRFS info (device loop8): force zlib compression, level 3 [ 461.043961][ T4927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 461.086941][T15530] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 461.124850][ T4927] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 461.179837][ T4927] usb 4-1: can't read configurations, error -71 [ 461.189658][T15530] BTRFS info (device loop8): use lzo compression, level 0 [ 461.211766][T15530] BTRFS info (device loop8): turning on flush-on-commit [ 461.223370][T15542] loop4: detected capacity change from 0 to 32768 [ 461.273777][T15530] BTRFS info (device loop8): enabling auto defrag [ 461.327879][T15530] BTRFS info (device loop8): max_inline at 4096 [ 461.335866][T15530] BTRFS info (device loop8): using free space tree [ 461.343325][T15530] BTRFS info (device loop8): has skinny extents [ 461.602984][T15542] XFS (loop4): Mounting V5 Filesystem [ 461.935249][T15542] XFS (loop4): Ending clean mount [ 462.115652][T15530] BTRFS info (device loop8): enabling ssd optimizations [ 462.576106][T10123] XFS (loop4): Unmounting Filesystem [ 463.069010][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop8 scanned by udevd (4178) [ 464.115747][T15612] loop3: detected capacity change from 0 to 32768 [ 464.652152][T15612] XFS (loop3): Mounting V5 Filesystem [ 464.848425][T15643] loop8: detected capacity change from 0 to 256 [ 464.868072][T15643] exfat: Deprecated parameter 'utf8' [ 464.879445][T15643] exfat: Deprecated parameter 'utf8' [ 464.905930][T15645] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3726'. [ 465.156811][T15643] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 465.417901][T15612] XFS (loop3): Ending clean mount [ 465.541878][T15612] XFS (loop3): Quotacheck needed: Please wait. [ 465.983559][T15612] XFS (loop3): Quotacheck: Done. [ 466.646565][ T4198] XFS (loop3): Unmounting Filesystem [ 467.045665][T15694] loop4: detected capacity change from 0 to 164 [ 467.056205][T15695] loop8: detected capacity change from 0 to 256 [ 467.250093][T15695] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.279292][T15695] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 467.317042][T15694] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 467.370207][T15695] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 467.633836][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 469.401105][T15746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3770'. [ 469.726099][T15749] loop3: detected capacity change from 0 to 4096 [ 469.779127][T15714] loop1: detected capacity change from 0 to 32768 [ 469.889436][T15714] XFS: ikeep mount option is deprecated. [ 469.909113][T15714] XFS: ikeep mount option is deprecated. [ 470.077938][T15732] loop4: detected capacity change from 0 to 32768 [ 470.096610][T15714] XFS (loop1): Mounting V5 Filesystem [ 470.297601][T15770] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.340535][T15714] XFS (loop1): Ending clean mount [ 470.410026][T15714] XFS (loop1): Quotacheck needed: Please wait. [ 470.544878][ T4940] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 470.835354][T15714] XFS (loop1): Quotacheck: Done. [ 471.030496][ T4188] XFS (loop1): Unmounting Filesystem [ 471.144425][ T4940] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 471.168183][T15784] loop3: detected capacity change from 0 to 8 [ 471.181805][ T4940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.195077][ T4940] usb 9-1: Product: syz [ 471.200012][ T4940] usb 9-1: Manufacturer: syz [ 471.212474][ T4940] usb 9-1: SerialNumber: syz [ 471.262722][ T263] block nbd1: Possible stuck request ffff888020c30000: control (read@0,4096B). Runtime 30 seconds [ 471.832730][ T26] audit: type=1326 audit(1781782635.501:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.3791" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd26f199e59 code=0x0 [ 471.869888][T15790] loop3: detected capacity change from 0 to 64 [ 472.005125][T15790] Trying to free block not in datazone [ 472.022300][ T4940] rtl8150 9-1:1.0: eth21: rtl8150 is detected [ 472.179837][ T4940] usb 9-1: USB disconnect, device number 9 [ 472.451733][ T6923] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 472.479738][T15804] loop3: detected capacity change from 0 to 64 [ 472.655922][T15804] hfs: request for non-existent node 131072 in B*Tree [ 472.745403][T15804] hfs: request for non-existent node 131072 in B*Tree [ 472.895855][ T6923] usb 5-1: Using ep0 maxpacket: 32 [ 472.903312][T15810] comedi comedi0: Minor 2147483647 is invalid! [ 473.112812][ T6923] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 473.121612][ T6923] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 473.194971][ T6923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 473.221020][ T6923] usb 5-1: config 1 has no interface number 0 [ 473.245056][ T6923] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 473.275572][T15818] loop3: detected capacity change from 0 to 2048 [ 473.297263][ T6923] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 473.329690][T15818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.348767][ T6923] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 473.395570][ T6923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.533044][ T6923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 473.643073][T15825] loop8: detected capacity change from 0 to 512 [ 473.743958][T15828] netlink: 'syz.3.3802': attribute type 10 has an invalid length. [ 473.771146][T15806] loop1: detected capacity change from 0 to 32768 [ 473.818698][T15832] netlink: 'syz.3.3802': attribute type 10 has an invalid length. [ 473.870476][T15825] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 473.934626][T15825] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.111961][ T6923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 474.240392][T15835] loop3: detected capacity change from 0 to 4096 [ 474.340209][T15835] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 474.387297][ T6923] usb 5-1: USB disconnect, device number 10 [ 474.410924][ T6923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 475.178828][ T4926] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 475.702160][T15863] loop4: detected capacity change from 0 to 512 [ 475.799956][ T4926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.828716][ T4926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 475.902582][ T4926] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.020237][T15863] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 476.070855][T15863] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 476.198910][T15863] EXT4-fs (loop4): 1 truncate cleaned up [ 476.244389][T15863] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,nobarrier,grpid,,errors=continue. Quota mode: none. [ 476.336115][ T4926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 476.393909][ T4926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 476.428662][ T4926] usb 2-1: Product: syz [ 476.441052][T15881] loop3: detected capacity change from 0 to 16 [ 476.467830][ T4926] usb 2-1: Manufacturer: syz [ 476.495589][ T4926] usb 2-1: SerialNumber: syz [ 476.594481][T15881] erofs: (device loop3): mounted with root inode @ nid 36. [ 476.846985][ T4926] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 477.093476][ T4940] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 477.137261][ T4926] usb 2-1: USB disconnect, device number 38 [ 477.158274][ T4926] usblp0: removed [ 477.172416][T15898] loop8: detected capacity change from 0 to 64 [ 477.198817][ T4940] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.503925][ T5873] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 477.955071][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 478.034392][ T5873] usb 5-1: not running at top speed; connect to a high speed hub [ 478.134352][ T5873] usb 5-1: config 80 has an invalid interface number: 29 but max is 0 [ 478.179148][ T5873] usb 5-1: config 80 has no interface number 0 [ 478.215119][ T5873] usb 5-1: config 80 interface 29 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 478.250457][ T5873] usb 5-1: config 80 interface 29 has no altsetting 0 [ 478.444388][ T5873] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= c.2a [ 478.488364][T15916] loop1: detected capacity change from 0 to 1024 [ 478.519704][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.559257][ T5873] usb 5-1: Product: syz [ 478.599138][ T5873] usb 5-1: Manufacturer: syz [ 478.638172][ T5873] usb 5-1: SerialNumber: syz [ 479.046432][ T5873] em28xx 5-1:80.29: New device syz syz @ 12 Mbps (eb1a:50a6, interface 29, class 29) [ 479.069959][ T5873] em28xx 5-1:80.29: Device initialization failed. [ 479.080363][ T5873] em28xx 5-1:80.29: Device must be connected to a high-speed USB 2.0 port. [ 479.120618][ T5873] usb 5-1: USB disconnect, device number 11 [ 479.401495][T15931] loop3: detected capacity change from 0 to 736 [ 479.981035][T15920] loop8: detected capacity change from 0 to 32768 [ 480.064008][ T5873] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 480.123940][T15920] ERROR: (device loop8): dtReadFirst: stbl[0] out of bound [ 480.123940][T15920] [ 480.144454][T15948] overlayfs: upper fs does not support tmpfile. [ 480.313803][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 480.407309][T15953] loop1: detected capacity change from 0 to 512 [ 480.435098][ T5873] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 480.491033][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.566879][T15920] ERROR: (device loop8): remounting filesystem as read-only [ 480.586436][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 480.586467][ T5873] pvrusb2: ********** [ 480.586475][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 480.586489][ T5873] pvrusb2: Important functionality might not be entirely working. [ 480.586500][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 480.586512][ T5873] pvrusb2: ********** [ 480.707954][T15956] loop3: detected capacity change from 0 to 2048 [ 480.781336][T15953] EXT4-fs (loop1): Test dummy encryption mode enabled [ 480.789332][T15953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 480.826576][ T2426] pvrusb2: Invalid write control endpoint [ 480.863090][T15956] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 481.000999][T15953] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #17: comm syz.1.3853: inline data xattr refers to an external xattr inode [ 481.068284][ T4926] usb 3-1: USB disconnect, device number 32 [ 481.079176][T15965] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.106397][ T2426] pvrusb2: Invalid write control endpoint [ 481.123742][T15953] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.3853: couldn't read orphan inode 17 (err -117) [ 481.149452][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 481.172029][T15953] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x000000000000000c,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 481.232604][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 481.273893][T15956] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 481.303868][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 481.351944][ T2426] pvrusb2: Device being rendered inoperable [ 481.364185][T15956] Remounting filesystem read-only [ 481.376747][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 481.410287][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 481.465604][ T2426] pvrusb2: Attached sub-driver cx25840 [ 481.562782][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 481.640439][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 481.975258][T15973] loop1: detected capacity change from 0 to 1024 [ 482.274677][T15973] EXT4-fs (loop1): Ignoring removed bh option [ 482.463173][T15973] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,grpjquota=,debug_want_extra_isize=0x0000000000000080,lazytime,bsddf,stripe=0x0000000000080005,bh,init_itable,,errors=continue. Quota mode: none. [ 483.046243][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 484.110982][T15998] loop4: detected capacity change from 0 to 40427 [ 484.209330][T15998] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 484.262748][T15998] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 484.321322][T15998] F2FS-fs (loop4): invalid crc value [ 484.355255][T15998] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 484.649949][T15998] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 484.674062][T15998] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 484.859070][ T26] audit: type=1804 audit(1781782648.521:68): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3872" name="/newroot/361/file1/bus" dev="loop4" ino=10 res=1 errno=0 [ 484.934083][ T26] audit: type=1800 audit(1781782648.531:69): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3872" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 485.045866][T10123] attempt to access beyond end of device [ 485.045866][T10123] loop4: rw=2049, want=45104, limit=40427 [ 485.360002][T16004] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.466786][T16004] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.527690][T16004] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.558375][T16004] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.611420][T16004] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 485.654808][T16004] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 485.694942][T16004] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 485.735820][T16004] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 485.834135][T16015] loop8: detected capacity change from 0 to 256 [ 485.936589][T16018] vivid-001: disconnect [ 485.951474][T16016] vivid-001: reconnect [ 485.974730][T16015] exfat: Deprecated parameter 'utf8' [ 485.981816][T16015] exfat: Deprecated parameter 'utf8' [ 486.391994][T16015] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 486.653806][ T5873] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 486.872717][T16038] loop3: detected capacity change from 0 to 128 [ 486.989316][T16042] genirq: Flags mismatch irq 2. 00000000 (pcl812) vs. 00000000 (pcl816) [ 487.029926][T16038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 487.053012][T16038] ext4 filesystem being mounted at /839/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 487.065042][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.314465][ T5873] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 487.348387][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.404636][ T5873] usb 3-1: Product: syz [ 487.420214][ T5873] usb 3-1: Manufacturer: syz [ 487.435659][T16053] loop3: detected capacity change from 0 to 8 [ 487.443331][ T5873] usb 3-1: SerialNumber: syz [ 487.462903][T16033] loop4: detected capacity change from 0 to 32768 [ 487.569065][ T5873] usb 3-1: selecting invalid altsetting 1 [ 487.588078][ T5873] usb 3-1: unit 6 not found! [ 487.595304][ T5873] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 487.616803][ T5873] usb 3-1: selecting invalid altsetting 1 [ 487.623499][ T5873] usb 3-1: unit 6 not found! [ 487.654891][ T5873] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 487.699944][ T5873] usb 3-1: selecting invalid altsetting 1 [ 487.720188][ T5873] usb 3-1: unit 6 not found! [ 487.753448][T16033] [ 487.753448][T16033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 487.753448][T16033] [ 487.839485][ T5873] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 487.893241][ T4712] ERROR: (device loop4): diWrite: ixpxd invalid [ 487.893241][ T4712] [ 487.974064][T16058] loop3: detected capacity change from 0 to 512 [ 488.040540][T16058] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 488.098180][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.122791][T16058] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 488.191129][T16058] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3894: invalid indirect mapped block 2683928664 (level 1) [ 488.213840][ T4712] ERROR: (device loop4): txCommit: [ 488.213840][ T4712] [ 488.266599][ T4712] jfs_write_inode: jfs_commit_inode failed! [ 488.272765][T10123] [ 488.272765][T10123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 488.272765][T10123] [ 488.293783][ T5857] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 488.306085][T16058] EXT4-fs (loop3): Remounting filesystem read-only [ 488.313455][T10123] [ 488.313455][T10123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 488.313455][T10123] [ 488.332307][T16058] EXT4-fs (loop3): 1 truncate cleaned up [ 488.351146][T16058] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 488.665144][T16058] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 488.684402][ T5857] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 488.705569][ T5857] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 488.724107][T16058] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 488.809838][T16058] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 488.935790][ T5857] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 488.975006][ T5857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.034846][ T5857] usb 9-1: Product: syz [ 489.044906][ T5857] usb 9-1: Manufacturer: syz [ 489.058257][ T5857] usb 9-1: SerialNumber: syz [ 489.093890][T16072] loop4: detected capacity change from 0 to 1024 [ 489.328194][T16072] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.430373][T16072] EXT4-fs error (device loop4): ext4_lookup:1858: inode #14: comm syz.4.3895: casefold flag without casefold feature [ 489.620762][ T4935] usb 3-1: USB disconnect, device number 33 [ 489.976770][T16074] loop1: detected capacity change from 0 to 131072 [ 490.090939][T16074] F2FS-fs (loop1): invalid crc value [ 490.135389][T16074] F2FS-fs (loop1): Found nat_bits in checkpoint [ 490.210307][T16074] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 490.365339][ T5857] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 490.427075][ T5857] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 490.833914][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'. [ 490.892175][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3908'. [ 491.081689][T16104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3911'. [ 491.086829][ T2301] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 491.150560][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 491.318771][ T5857] usb 9-1: USB disconnect, device number 10 [ 491.474253][ T2301] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 491.524352][ T2301] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 491.608867][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 491.693857][ T2301] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 491.770814][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 491.784105][ T2301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 491.861346][ T2301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 491.995727][T12909] udevd[12909]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 491.997462][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.039938][ T4935] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 492.058244][T16127] loop4: detected capacity change from 0 to 764 [ 492.131133][ T5385] udevd[5385]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.211505][ T2301] usb 3-1: string descriptor 0 read error: -22 [ 492.223468][ T2301] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 492.271828][ T2301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.291931][T16127] rock: directory entry would overflow storage [ 492.313935][ T5857] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 492.330889][T16127] rock: sig=0x4654, size=5, remaining=4 [ 492.342211][T16132] loop8: detected capacity change from 0 to 512 [ 492.360469][ T2301] usb 3-1: config 0 descriptor?? [ 492.411585][T16089] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 492.444759][ T2301] hub 3-1:0.0: bad descriptor, ignoring hub [ 492.459943][ T4935] usb 4-1: Using ep0 maxpacket: 32 [ 492.466442][ T2301] hub: probe of 3-1:0.0 failed with error -5 [ 492.493337][T16132] EXT4-fs (loop8): Ignoring removed orlov option [ 492.532281][ T2301] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 492.545228][T16132] EXT4-fs (loop8): Test dummy encryption mode enabled [ 492.552706][T16132] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 492.723520][ T5857] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 492.734242][ T5857] usb 2-1: config 0 has no interface number 0 [ 492.741690][ T5857] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.757300][ T4935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.772232][T16132] EXT4-fs (loop8): 1 truncate cleaned up [ 492.783367][ T4935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.793733][ T4935] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 492.806328][T16132] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 492.837898][ T4935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.858642][ T4935] usb 4-1: config 0 descriptor?? [ 492.901495][ T2301] usb 3-1: USB disconnect, device number 34 [ 492.924192][ T5857] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 492.966683][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.989081][ T5857] usb 2-1: Product: syz [ 493.009072][ T5857] usb 2-1: Manufacturer: syz [ 493.027501][ T5857] usb 2-1: SerialNumber: syz [ 493.048812][ T5857] usb 2-1: config 0 descriptor?? [ 493.110465][ T5857] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 493.418329][ T4935] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 493.426348][ T4935] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 493.440388][ T4935] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 493.463201][ T4935] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 493.493764][ T4935] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 493.508937][ T4935] savu 0003:1E7D:2D5A.0024: unbalanced collection at end of report description [ 493.538860][ T4935] savu 0003:1E7D:2D5A.0024: parse failed [ 493.557336][ T4935] savu: probe of 0003:1E7D:2D5A.0024 failed with error -22 [ 493.643931][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 493.682055][ T5857] usb 2-1: USB disconnect, device number 39 [ 493.735037][ T5857] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 493.747430][ T4935] usb 4-1: USB disconnect, device number 31 [ 494.120916][T16159] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 494.662771][T16177] trusted_key: encrypted_key: keyword 'upäate' not recognized [ 494.979397][T16181] loop4: detected capacity change from 0 to 2048 [ 495.164828][T16181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.416534][ T4935] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 495.525967][T16202] loop1: detected capacity change from 0 to 4096 [ 495.860071][ T4935] usb 3-1: Using ep0 maxpacket: 32 [ 495.920682][T16212] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.069411][ T4935] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 496.113264][ T4935] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 496.172418][ T4935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 496.199842][ T4935] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 496.229884][T16218] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 4132 already freed [ 496.279250][ T4935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.305732][ T4935] usb 3-1: config 0 descriptor?? [ 496.383619][T16218] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 496.512300][T16222] loop4: detected capacity change from 0 to 4096 [ 496.622651][T16196] loop8: detected capacity change from 0 to 32768 [ 496.626743][T16222] EXT4-fs (loop4): Test dummy encryption mode enabled [ 496.705123][T16227] input: syz1 as /devices/virtual/input/input29 [ 496.762138][T16222] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,noblock_validity,resuid=0x0000000000000000,test_dummy_encryption,grpid,,errors=continue. Quota mode: writeback. [ 496.925403][ T4935] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 496.973748][ T4935] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 497.034316][ T4935] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 497.042363][ T4935] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 497.143747][ T4935] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 497.221395][ T4935] corsair-psu 0003:1B1C:1C09.0025: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 497.251378][T16222] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 497.399258][ T4935] corsair-psu 0003:1B1C:1C09.0025: unable to initialize device (-90) [ 497.421473][ T4935] corsair-psu: probe of 0003:1B1C:1C09.0025 failed with error -90 [ 497.520431][ T4935] usb 3-1: USB disconnect, device number 35 [ 497.941304][T16249] fido_id[16249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 498.071668][T16259] loop4: detected capacity change from 0 to 256 [ 498.175193][T16261] loop3: detected capacity change from 0 to 1024 [ 498.341481][T16259] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 498.630716][T16277] loop1: detected capacity change from 0 to 64 [ 498.781958][T16282] loop4: detected capacity change from 0 to 512 [ 498.818752][T16286] program syz.8.3984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.927658][T16282] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 498.943042][T16282] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.757355][T16303] loop4: detected capacity change from 0 to 256 [ 499.842011][T16307] loop3: detected capacity change from 0 to 2048 [ 499.947977][T16303] exfat: Deprecated parameter 'utf8' [ 499.956412][T16303] exfat: Deprecated parameter 'namecase' [ 500.069600][T16307] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 500.078868][T16307] System zones: 0-7 [ 500.085323][T16307] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 500.156725][T16307] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.3988: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 500.259430][T16307] EXT4-fs (loop3): Remounting filesystem read-only [ 500.280837][T16325] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.3988: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 500.319116][T16303] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 500.460709][T16325] EXT4-fs (loop3): Remounting filesystem read-only [ 501.168052][T16351] tun0: tun_chr_ioctl cmd 1074025675 [ 501.223703][ T4935] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 501.248571][T16351] tun0: persist disabled [ 501.325340][ T263] block nbd1: Possible stuck request ffff888020c30000: control (read@0,4096B). Runtime 60 seconds [ 501.354073][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.360927][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.653595][ T4935] usb 9-1: Using ep0 maxpacket: 16 [ 501.920093][ T4935] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 501.929971][ T4935] usb 9-1: config 0 has no interface number 0 [ 502.282098][ T4935] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 502.291562][ T4935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.319081][ T4935] usb 9-1: Product: syz [ 502.329223][ T4935] usb 9-1: Manufacturer: syz [ 502.349301][ T4935] usb 9-1: SerialNumber: syz [ 502.392294][ T4935] usb 9-1: config 0 descriptor?? [ 502.402562][T16353] loop3: detected capacity change from 0 to 32768 [ 502.404611][ T5857] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 502.701868][ T26] audit: type=1800 audit(1781782666.361:70): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4007" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 502.724270][ T4935] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 502.730796][ T4935] usb 9-1: No valid video chain found. [ 502.741606][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 502.762754][ T4935] usb 9-1: USB disconnect, device number 11 [ 502.925994][T16364] loop1: detected capacity change from 0 to 32768 [ 502.970988][ T5857] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 502.980283][ T5857] usb 3-1: config 0 has no interface number 0 [ 503.008065][ T5857] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 503.053703][ T5857] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 503.105660][T16364] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 503.283047][T16364] JBD2: Ignoring recovery information on journal [ 503.303894][ T5857] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 503.315085][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 503.338629][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.377973][ T5857] usb 3-1: Product: syz [ 503.382231][ T5857] usb 3-1: Manufacturer: syz [ 503.388268][T16375] device hsr0 entered promiscuous mode [ 503.428624][ T5857] usb 3-1: SerialNumber: syz [ 503.480271][ T5857] usb 3-1: config 0 descriptor?? [ 503.569490][T16364] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 503.640375][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4027'. [ 503.813516][ T5857] radio-si470x 3-1:0.35: this is not a si470x device. [ 503.907580][T16391] loop4: detected capacity change from 0 to 1024 [ 503.976797][ T5857] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 504.012637][T16364] overlayfs: upper fs does not support tmpfile. [ 504.080248][T16364] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 504.103582][T16364] overlayfs: failed to set xattr on upper [ 504.120756][T16364] overlayfs: ...falling back to index=off,metacopy=off. [ 504.138323][T16364] overlayfs: upper fs missing required features. [ 504.247249][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 504.321188][T16401] Â: renamed from pim6reg1 [ 504.372926][ T2301] usb 3-1: USB disconnect, device number 36 [ 504.640362][T16407] loop8: detected capacity change from 0 to 64 [ 504.690767][T16391] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 504.781331][T16409] loop1: detected capacity change from 0 to 4096 [ 504.922109][T16409] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 504.941181][T16391] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 505.468946][T16421] input: syz0 as /devices/virtual/input/input30 [ 506.084339][ T7] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 506.334012][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 506.474088][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.507038][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.545129][ T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 506.561908][T16448] loop3: detected capacity change from 0 to 4096 [ 506.572103][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.588030][ T7] usb 2-1: config 0 descriptor?? [ 506.693224][T16448] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 507.094086][ T7] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 507.101302][ T7] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 507.116392][ T7] koneplus 0003:1E7D:2D51.0026: item fetching failed at offset 2/5 [ 507.127379][ T7] koneplus 0003:1E7D:2D51.0026: parse failed [ 507.166793][ T7] koneplus: probe of 0003:1E7D:2D51.0026 failed with error -22 [ 507.279059][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 507.301928][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 507.332812][ T4926] usb 2-1: USB disconnect, device number 40 [ 507.484097][ T4940] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 507.677204][T16474] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 507.753956][ T4940] usb 9-1: Using ep0 maxpacket: 8 [ 507.874211][ T4940] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 508.003159][T16480] loop3: detected capacity change from 0 to 4096 [ 508.073765][ T4940] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 508.094415][ T4940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.124946][ T4940] usb 9-1: Product: syz [ 508.162109][ T4940] usb 9-1: Manufacturer: syz [ 508.195325][ T4940] usb 9-1: SerialNumber: syz [ 508.230733][ T4940] usb 9-1: config 0 descriptor?? [ 508.286531][ T4940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 508.335502][T16492] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.360245][ T4940] usb 9-1: setting power ON [ 508.411630][ T4940] dvb-usb: bulk message failed: -22 (2/0) [ 508.471630][ T4940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.488152][T16462] dvb-usb: bulk message failed: -22 (3/0) [ 508.503928][T16462] dvb-usb: bulk message failed: -22 (3/0) [ 508.565897][ T4940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 508.634063][ T4940] usb 9-1: media controller created [ 508.718981][ T4940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.795288][ T4940] usb 9-1: selecting invalid altsetting 6 [ 508.801173][ T4940] usb 9-1: digital interface selection failed (-22) [ 508.852379][T16503] loop4: detected capacity change from 0 to 4096 [ 508.869608][ T4940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 508.945390][ T4940] usb 9-1: setting power OFF [ 508.953264][ T4940] dvb-usb: bulk message failed: -22 (2/0) [ 508.989292][ T4940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 509.009779][ T4940] (NULL device *): no alternate interface [ 509.034494][ T4940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 509.080109][ T4940] usb 9-1: USB disconnect, device number 12 [ 509.107287][T16503] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 509.581438][T16515] loop1: detected capacity change from 0 to 2048 [ 509.702936][T16519] loop4: detected capacity change from 0 to 2048 [ 509.830606][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4086'. [ 509.848974][T16521] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4086'. [ 509.973020][T16505] loop3: detected capacity change from 0 to 32768 [ 510.120102][T16505] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 510.120102][T16505] [ 510.203428][T16505] read_mapping_page failed! [ 510.230842][T16505] ERROR: (device loop3): txCommit: [ 510.230842][T16505] [ 510.368748][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.509410][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4093'. [ 511.300182][T16515] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 511.399204][T16515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.435351][T16519] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 511.535540][T16519] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.635302][T16515] overlayfs: upper fs needs to support d_type. [ 511.771188][T16515] overlayfs: cleanup of 'work/#14' failed (-2) [ 511.836731][T16515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 511.882791][T16515] overlayfs: failed to set xattr on upper [ 511.904169][ T4940] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 511.928924][T16562] loop8: detected capacity change from 0 to 4096 [ 512.041302][ T4188] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 512.058134][T16565] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.088148][ T4188] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 512.294692][ T4940] usb 5-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 512.335845][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.451031][T16568] loop3: detected capacity change from 0 to 1024 [ 512.518712][T16568] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.4108: lblock 2 mapped to illegal pblock 2 (length 1) [ 512.540903][ T4940] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 512.550994][ T4940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.565950][T16568] EXT4-fs (loop3): Remounting filesystem read-only [ 512.572569][T16568] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 512.584026][ T4940] usb 5-1: Product: syz [ 512.588288][ T4940] usb 5-1: Manufacturer: syz [ 512.599008][ T4940] usb 5-1: SerialNumber: syz [ 512.608961][T16568] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.4108: lblock 0 mapped to illegal pblock 48 (length 1) [ 512.631827][T16568] EXT4-fs (loop3): Remounting filesystem read-only [ 512.649964][T16568] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 512.710687][T16568] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4108: Failed to acquire dquot type 0 [ 512.723080][ T4940] usb 5-1: can't set config #1, error -71 [ 512.734306][ T4940] usb 5-1: USB disconnect, device number 12 [ 512.797470][T16568] EXT4-fs (loop3): Remounting filesystem read-only [ 512.828157][T16568] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 512.848330][T16568] EXT4-fs (loop3): Remounting filesystem read-only [ 512.865069][T16568] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.4108: mark_inode_dirty error [ 512.894197][T16568] EXT4-fs (loop3): Remounting filesystem read-only [ 512.906574][T16568] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 512.960333][T16568] EXT4-fs (loop3): 1 orphan inode deleted [ 512.973012][T16568] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none. [ 513.008896][ T4242] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 513.051882][ T4242] EXT4-fs (loop3): Remounting filesystem read-only [ 513.068820][ T4242] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 513.092916][ T4242] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 513.151433][ T4242] EXT4-fs (loop3): Remounting filesystem read-only [ 513.518479][ T4198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 513.554531][ T4198] EXT4-fs (loop3): Remounting filesystem read-only [ 513.561123][ T4198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 513.631448][ T4198] EXT4-fs (loop3): Remounting filesystem read-only [ 513.653698][ T4198] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 513.687736][ T4198] EXT4-fs (loop3): Remounting filesystem read-only [ 514.029684][T16592] loop8: detected capacity change from 0 to 512 [ 514.125825][ T5651] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.516757][T16586] loop4: detected capacity change from 0 to 32768 [ 514.684144][T16586] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 514.718848][T16586] JBD2: Ignoring recovery information on journal [ 514.785344][T16597] lo speed is unknown, defaulting to 1000 [ 514.902417][T16586] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 515.087415][T16586] overlayfs: upper fs does not support tmpfile. [ 515.115114][T16586] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 515.122270][T16586] overlayfs: failed to set xattr on upper [ 515.140127][T16586] overlayfs: ...falling back to index=off,metacopy=off. [ 515.157045][T16586] overlayfs: upper fs missing required features. [ 515.288626][T16597] chnl_net:caif_netlink_parms(): no params data found [ 515.402184][T10123] ocfs2: Unmounting device (7,4) on (node local) [ 515.538672][T16597] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.596993][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.614594][T16597] device bridge_slave_0 entered promiscuous mode [ 515.655232][T16597] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.662373][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.724107][T16597] device bridge_slave_1 entered promiscuous mode [ 515.791153][T16597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.833297][T16597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.911739][T16592] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 515.964532][T16592] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.051833][T16592] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #2: comm syz.8.4118: corrupted inode contents [ 516.111332][T16634] fuse: Bad value for 'fd' [ 516.242854][T16592] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #2: comm syz.8.4118: mark_inode_dirty error [ 516.286630][T16597] team0: Port device team_slave_0 added [ 516.354112][T16592] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #2: comm syz.8.4118: corrupted inode contents [ 516.373044][T16597] team0: Port device team_slave_1 added [ 516.441091][T16635] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #2: comm syz.8.4118: corrupted inode contents [ 516.620253][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'. [ 516.634189][T16635] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #2: comm syz.8.4118: mark_inode_dirty error [ 516.698159][ T5857] Bluetooth: hci0: command 0x0409 tx timeout [ 516.773734][T16635] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #2: comm syz.8.4118: corrupted inode contents [ 516.801084][T16597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.851437][T16635] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #2: comm syz.8.4118: mark_inode_dirty error [ 516.868900][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.965373][T16635] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #2: comm syz.8.4118: corrupted inode contents [ 516.978876][T16597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.037894][T16597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.077839][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.102138][T16635] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #2: comm syz.8.4118: mark_inode_dirty error [ 517.201072][T16597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.572235][ T5651] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.752167][T16597] device hsr_slave_0 entered promiscuous mode [ 517.808907][T16597] device hsr_slave_1 entered promiscuous mode [ 517.834175][T16597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.856649][T16597] Cannot create hsr debugfs directory [ 518.216626][T16665] loop4: detected capacity change from 0 to 64 [ 518.521443][T16672] loop8: detected capacity change from 0 to 256 [ 518.766354][T16672] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 518.802928][ T5870] Bluetooth: hci0: command 0x041b tx timeout [ 519.529264][T16636] ODEBUG: Out of memory. ODEBUG disabled [ 520.753742][ T5870] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 520.888554][ T5857] Bluetooth: hci0: command 0x040f tx timeout [ 520.917912][ T5651] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.945466][ C1] ================================================================== [ 520.954734][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 520.962747][ C1] Read of size 2 at addr ffff888042c74bc0 by task ksoftirqd/1/20 [ 520.970515][ C1] [ 520.972961][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 520.980284][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.990395][ C1] Call Trace: [ 520.993776][ C1] [ 520.996804][ C1] dump_stack_lvl+0x188/0x250 [ 521.001632][ C1] ? show_regs_print_info+0x20/0x20 [ 521.006952][ C1] ? _printk+0xda/0x130 [ 521.011171][ C1] ? __nft_trace_packet+0x135/0x150 [ 521.016532][ C1] ? load_image+0x400/0x400 [ 521.022897][ C1] ? nft_synproxy_do_eval+0x3c9/0x570 [ 521.028406][ C1] print_address_description+0x60/0x2d0 [ 521.034111][ C1] ? __nft_trace_packet+0x135/0x150 [ 521.039351][ C1] kasan_report+0xdf/0x130 [ 521.044019][ C1] ? __nft_trace_packet+0x135/0x150 [ 521.049697][ C1] __nft_trace_packet+0x135/0x150 [ 521.054779][ C1] nft_do_chain+0x12a5/0x14f0 [ 521.059520][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 521.065522][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 521.071081][ C1] ? ipv6_find_tlv+0x270/0x270 [ 521.076083][ C1] nft_do_chain_inet+0x25c/0x340 [ 521.081073][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 521.085965][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 521.090867][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 521.096286][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 521.101868][ C1] ? lock_downgrade+0x820/0x830 [ 521.106840][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 521.112263][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 521.117165][ C1] nf_hook_slow+0xb9/0x200 [ 521.121713][ C1] ? ip6_input+0xa0/0xa0 [ 521.126073][ C1] NF_HOOK+0x1f2/0x390 [ 521.130179][ C1] ? ip6_input+0xa0/0xa0 [ 521.134566][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 521.139463][ C1] ? ip6_input+0xa0/0xa0 [ 521.143780][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 521.149226][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 521.154142][ C1] ? refcount_add+0x80/0x80 [ 521.158707][ C1] NF_HOOK+0x303/0x390 [ 521.162830][ C1] ? refcount_add+0x80/0x80 [ 521.167377][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 521.172453][ C1] ? refcount_add+0x80/0x80 [ 521.177030][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 521.182357][ C1] __netif_receive_skb+0xcc/0x290 [ 521.187533][ C1] process_backlog+0x370/0x790 [ 521.192357][ C1] ? rps_trigger_softirq+0x210/0x210 [ 521.197872][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 521.203921][ C1] ? lock_chain_count+0x20/0x20 [ 521.208824][ C1] ? finish_lock_switch+0x12f/0x280 [ 521.214395][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 521.219827][ C1] __napi_poll+0xc0/0x430 [ 521.224210][ C1] ? net_rx_action+0x307/0xa10 [ 521.229022][ C1] net_rx_action+0x4d4/0xa10 [ 521.233661][ C1] ? lockdep_softirqs_on+0x580/0x580 [ 521.239007][ C1] ? net_tx_action+0x880/0x880 [ 521.243819][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 521.249860][ C1] ? lock_chain_count+0x20/0x20 [ 521.254772][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 521.260927][ C1] handle_softirqs+0x339/0x830 [ 521.265748][ C1] ? run_ksoftirqd+0xa4/0x100 [ 521.270492][ C1] ? do_softirq+0x210/0x210 [ 521.275045][ C1] ? run_ksoftirqd+0x81/0x100 [ 521.279773][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 521.285014][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 521.290347][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 521.295798][ C1] run_ksoftirqd+0xa4/0x100 [ 521.300361][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 521.305603][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 521.311047][ C1] ? smpboot_thread_fn+0x5bc/0x970 [ 521.316309][ C1] smpboot_thread_fn+0x4f6/0x970 [ 521.321312][ C1] kthread+0x436/0x520 [ 521.325438][ C1] ? cpu_report_death+0x180/0x180 [ 521.330507][ C1] ? kthread_blkcg+0xd0/0xd0 [ 521.335189][ C1] ret_from_fork+0x1f/0x30 [ 521.339674][ C1] [ 521.342824][ C1] [ 521.345179][ C1] Allocated by task 20: [ 521.349462][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 521.354399][ C1] slab_post_alloc_hook+0x4c/0x380 [ 521.359553][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 521.364890][ C1] __alloc_skb+0xf4/0x750 [ 521.369336][ C1] synproxy_send_client_synack_ipv6+0x161/0xc60 [ 521.375617][ C1] nft_synproxy_eval_v6+0x347/0x4e0 [ 521.380854][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 521.386090][ C1] nft_do_chain+0x48c/0x14f0 [ 521.391158][ C1] nft_do_chain_inet+0x25c/0x340 [ 521.396227][ C1] nf_hook_slow+0xb9/0x200 [ 521.400694][ C1] NF_HOOK+0x1f2/0x390 [ 521.404820][ C1] NF_HOOK+0x303/0x390 [ 521.409095][ C1] __netif_receive_skb+0xcc/0x290 [ 521.414169][ C1] process_backlog+0x370/0x790 [ 521.418976][ C1] __napi_poll+0xc0/0x430 [ 521.423372][ C1] net_rx_action+0x4d4/0xa10 [ 521.428000][ C1] handle_softirqs+0x339/0x830 [ 521.432808][ C1] run_ksoftirqd+0xa4/0x100 [ 521.437357][ C1] smpboot_thread_fn+0x4f6/0x970 [ 521.442438][ C1] kthread+0x436/0x520 [ 521.446994][ C1] ret_from_fork+0x1f/0x30 [ 521.451530][ C1] [ 521.453888][ C1] Freed by task 20: [ 521.457724][ C1] kasan_set_track+0x4b/0x70 [ 521.462452][ C1] kasan_set_free_info+0x1f/0x40 [ 521.467549][ C1] ____kasan_slab_free+0xd5/0x110 [ 521.472625][ C1] slab_free_freelist_hook+0xea/0x170 [ 521.478065][ C1] kmem_cache_free+0x8f/0x210 [ 521.482784][ C1] nft_synproxy_eval_v6+0x34f/0x4e0 [ 521.488079][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 521.493328][ C1] nft_do_chain+0x48c/0x14f0 [ 521.498079][ C1] nft_do_chain_inet+0x25c/0x340 [ 521.503072][ C1] nf_hook_slow+0xb9/0x200 [ 521.507535][ C1] NF_HOOK+0x1f2/0x390 [ 521.511650][ C1] NF_HOOK+0x303/0x390 [ 521.515751][ C1] __netif_receive_skb+0xcc/0x290 [ 521.520830][ C1] process_backlog+0x370/0x790 [ 521.525633][ C1] __napi_poll+0xc0/0x430 [ 521.530002][ C1] net_rx_action+0x4d4/0xa10 [ 521.534632][ C1] handle_softirqs+0x339/0x830 [ 521.539433][ C1] run_ksoftirqd+0xa4/0x100 [ 521.543984][ C1] smpboot_thread_fn+0x4f6/0x970 [ 521.548961][ C1] kthread+0x436/0x520 [ 521.553068][ C1] ret_from_fork+0x1f/0x30 [ 521.558092][ C1] [ 521.560495][ C1] The buggy address belongs to the object at ffff888042c74b40 [ 521.560495][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 521.575182][ C1] The buggy address is located 128 bytes inside of [ 521.575182][ C1] 232-byte region [ffff888042c74b40, ffff888042c74c28) [ 521.588608][ C1] The buggy address belongs to the page: [ 521.594516][ C1] page:ffffea00010b1d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42c74 [ 521.604738][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 521.612691][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888144bf1140 [ 521.621304][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 521.629923][ C1] page dumped because: kasan: bad access detected [ 521.636475][ C1] page_owner tracks the page as allocated [ 521.642227][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 520943937325, free_ts 520908341873 [ 521.659729][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 521.665357][ C1] __alloc_pages+0x1ee/0x480 [ 521.669995][ C1] new_slab+0xc0/0x4b0 [ 521.674198][ C1] ___slab_alloc+0x80a/0xdd0 [ 521.678832][ C1] kmem_cache_alloc_node+0x1c3/0x2d0 [ 521.684175][ C1] __alloc_skb+0xf4/0x750 [ 521.688592][ C1] synproxy_send_client_synack_ipv6+0x161/0xc60 [ 521.694972][ C1] nft_synproxy_eval_v6+0x347/0x4e0 [ 521.700336][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 521.705579][ C1] nft_do_chain+0x48c/0x14f0 [ 521.710421][ C1] nft_do_chain_inet+0x25c/0x340 [ 521.715418][ C1] nf_hook_slow+0xb9/0x200 [ 521.720054][ C1] NF_HOOK+0x1f2/0x390 [ 521.724179][ C1] NF_HOOK+0x303/0x390 [ 521.728298][ C1] __netif_receive_skb+0xcc/0x290 [ 521.733353][ C1] process_backlog+0x370/0x790 [ 521.738164][ C1] page last free stack trace: [ 521.742866][ C1] free_unref_page_prepare+0x637/0x6c0 [ 521.748366][ C1] free_unref_page+0x8f/0x2a0 [ 521.753063][ C1] __unfreeze_partials+0x1a5/0x200 [ 521.758219][ C1] put_cpu_partial+0x12d/0x190 [ 521.763038][ C1] qlist_free_all+0x35/0x90 [ 521.767593][ C1] kasan_quarantine_reduce+0x150/0x160 [ 521.773094][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 521.777991][ C1] slab_post_alloc_hook+0x4c/0x380 [ 521.783251][ C1] kmem_cache_alloc+0x100/0x290 [ 521.788147][ C1] skb_clone+0x1bd/0x350 [ 521.792407][ C1] hci_cmd_work+0xc1/0x360 [ 521.797289][ C1] process_one_work+0x85f/0x1010 [ 521.802245][ C1] worker_thread+0xaa6/0x1290 [ 521.806944][ C1] kthread+0x436/0x520 [ 521.811060][ C1] ret_from_fork+0x1f/0x30 [ 521.815548][ C1] [ 521.817901][ C1] Memory state around the buggy address: [ 521.823565][ C1] ffff888042c74a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 521.831674][ C1] ffff888042c74b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 521.839856][ C1] >ffff888042c74b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 521.847927][ C1] ^ [ 521.854405][ C1] ffff888042c74c00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 521.862507][ C1] ffff888042c74c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.870601][ C1] ================================================================== [ 521.878691][ C1] Disabling lock debugging due to kernel taint [ 521.885582][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 521.892955][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 521.901761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.911860][ C1] Call Trace: [ 521.915172][ C1] [ 521.918147][ C1] dump_stack_lvl+0x188/0x250 [ 521.922866][ C1] ? show_regs_print_info+0x20/0x20 [ 521.928110][ C1] ? load_image+0x400/0x400 [ 521.932847][ C1] panic+0x2e5/0x810 [ 521.937008][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 521.941562][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 521.947574][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 521.953527][ C1] ? _raw_spin_unlock+0x40/0x40 [ 521.958594][ C1] ? print_memory_metadata+0x314/0x400 [ 521.964107][ C1] ? __nft_trace_packet+0x135/0x150 [ 521.969508][ C1] check_panic_on_warn+0x80/0xa0 [ 521.974554][ C1] ? __nft_trace_packet+0x135/0x150 [ 521.979888][ C1] end_report+0x6d/0xf0 [ 521.984242][ C1] kasan_report+0x102/0x130 [ 521.988768][ C1] ? __nft_trace_packet+0x135/0x150 [ 521.994264][ C1] __nft_trace_packet+0x135/0x150 [ 521.999467][ C1] nft_do_chain+0x12a5/0x14f0 [ 522.004537][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 522.011235][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 522.016552][ C1] ? ipv6_find_tlv+0x270/0x270 [ 522.021344][ C1] nft_do_chain_inet+0x25c/0x340 [ 522.026453][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 522.031347][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 522.036216][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 522.041599][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 522.046985][ C1] ? lock_downgrade+0x820/0x830 [ 522.051891][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 522.057305][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 522.062198][ C1] nf_hook_slow+0xb9/0x200 [ 522.066633][ C1] ? ip6_input+0xa0/0xa0 [ 522.070896][ C1] NF_HOOK+0x1f2/0x390 [ 522.074974][ C1] ? ip6_input+0xa0/0xa0 [ 522.079238][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 522.084102][ C1] ? ip6_input+0xa0/0xa0 [ 522.088380][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 522.093710][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 522.098610][ C1] ? refcount_add+0x80/0x80 [ 522.103163][ C1] NF_HOOK+0x303/0x390 [ 522.107277][ C1] ? refcount_add+0x80/0x80 [ 522.111796][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 522.116672][ C1] ? refcount_add+0x80/0x80 [ 522.121205][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 522.126876][ C1] __netif_receive_skb+0xcc/0x290 [ 522.132082][ C1] process_backlog+0x370/0x790 [ 522.136869][ C1] ? rps_trigger_softirq+0x210/0x210 [ 522.142468][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 522.148591][ C1] ? lock_chain_count+0x20/0x20 [ 522.153494][ C1] ? finish_lock_switch+0x12f/0x280 [ 522.158705][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 522.163918][ C1] __napi_poll+0xc0/0x430 [ 522.168265][ C1] ? net_rx_action+0x307/0xa10 [ 522.173035][ C1] net_rx_action+0x4d4/0xa10 [ 522.177899][ C1] ? lockdep_softirqs_on+0x580/0x580 [ 522.183231][ C1] ? net_tx_action+0x880/0x880 [ 522.188004][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 522.194007][ C1] ? lock_chain_count+0x20/0x20 [ 522.198899][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 522.204924][ C1] handle_softirqs+0x339/0x830 [ 522.209699][ C1] ? run_ksoftirqd+0xa4/0x100 [ 522.214383][ C1] ? do_softirq+0x210/0x210 [ 522.218922][ C1] ? run_ksoftirqd+0x81/0x100 [ 522.223606][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 522.228896][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 522.234194][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 522.239495][ C1] run_ksoftirqd+0xa4/0x100 [ 522.244012][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 522.249286][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 522.254705][ C1] ? smpboot_thread_fn+0x5bc/0x970 [ 522.259854][ C1] smpboot_thread_fn+0x4f6/0x970 [ 522.264809][ C1] kthread+0x436/0x520 [ 522.269408][ C1] ? cpu_report_death+0x180/0x180 [ 522.274515][ C1] ? kthread_blkcg+0xd0/0xd0 [ 522.279127][ C1] ret_from_fork+0x1f/0x30 [ 522.283757][ C1] [ 522.286934][ C1] Kernel Offset: disabled [ 522.291280][ C1] Rebooting in 86400 seconds..