last executing test programs: 1m17.40637749s ago: executing program 0 (id=227): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000240)}], 0x2}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m16.74357393s ago: executing program 0 (id=231): r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f00000012c0)=[{r1, 0x480}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) syz_open_pts(r1, 0x103100) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.334387485s ago: executing program 0 (id=233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m13.485692306s ago: executing program 0 (id=246): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xe, &(0x7f00000004c0), 0x3, 0x459, &(0x7f00000005c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 1m12.380204345s ago: executing program 0 (id=253): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 1m11.50972779s ago: executing program 0 (id=259): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x9, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xac, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0xfffffffe, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x80, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0xf0a, 0x4, 0x4007f, 0x3, 0x4, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x6, 0x5, 0xf, 0x4, 0x4, 0x6, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x8004, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0xffffffff, 0x3, 0x9, 0x3, 0x2, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x0, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x800, 0x60a2, 0x2, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x10d500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x3, 0x1], [0xa772, 0x1, 0x6, 0x1afa, 0x6, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xffffffff, 0x8, 0x400001ec, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1m10.939970051s ago: executing program 32 (id=259): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x9, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xac, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0xfffffffe, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x80, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0xf0a, 0x4, 0x4007f, 0x3, 0x4, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x6, 0x5, 0xf, 0x4, 0x4, 0x6, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x8004, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0xffffffff, 0x3, 0x9, 0x3, 0x2, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x0, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x800, 0x60a2, 0x2, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x10d500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x3, 0x1], [0xa772, 0x1, 0x6, 0x1afa, 0x6, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xffffffff, 0x8, 0x400001ec, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1m3.222335917s ago: executing program 2 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000002940)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000000900)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88a86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061cddf2b257cacbba656cda626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34130a0000e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff0552d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9e9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39a8f3f1b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d77a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd37ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x4, 0x42800, 0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x1, {0x7, 0x28, 0xb, 0x2, 0x81, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) 1m2.969927872s ago: executing program 2 (id=302): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r0, &(0x7f00000001c0)=""/93, 0x5d) 1m1.702558124s ago: executing program 2 (id=306): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1m1.458677338s ago: executing program 2 (id=309): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m1.238974988s ago: executing program 2 (id=310): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m0.806687478s ago: executing program 2 (id=312): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) getdents64(r1, &(0x7f0000000180)=""/242, 0x18) 1m0.214809373s ago: executing program 33 (id=312): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) getdents64(r1, &(0x7f0000000180)=""/242, 0x18) 14.545780117s ago: executing program 4 (id=534): socket$netlink(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 13.793032736s ago: executing program 4 (id=539): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="640048d26fd72c3c22f215fcbc070707", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4801}], 0x1, 0x4008000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 13.580366358s ago: executing program 4 (id=541): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) symlink(&(0x7f0000000000)='./file6\x00', &(0x7f00000000c0)='./file6\x00') 13.301074394s ago: executing program 4 (id=543): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14907e, 0x3) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write(r0, &(0x7f0000000540)="953820", 0x3) 12.200181849s ago: executing program 4 (id=558): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_mount_image$ocfs2(&(0x7f0000000500), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4431, &(0x7f0000008940)="$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") r0 = socket(0x8, 0x3, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x42020054, 0x0, 0x0) 11.601684115s ago: executing program 4 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) exit(0x4000007) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 6.557460658s ago: executing program 6 (id=595): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 5.748810733s ago: executing program 3 (id=600): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="8995b3", 0x3, 0x4c041, 0x0, 0x0) 5.345082894s ago: executing program 6 (id=601): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x10000014}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffff7) 3.582302805s ago: executing program 6 (id=604): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000002580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x44) syz_fuse_handle_req(r0, &(0x7f0000004c80)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x3, {0x1000baed}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.339442346s ago: executing program 5 (id=607): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 3.326433035s ago: executing program 3 (id=608): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.300318804s ago: executing program 6 (id=609): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.055780922s ago: executing program 5 (id=610): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) tkill(r0, 0x7) syz_open_dev$usbfs(0x0, 0x77, 0x43501) 3.054524538s ago: executing program 3 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000240)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x1c, 0x3a, 0xff, @local, @loopback, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x1ff, @local, 0x1, 0x0, 0x9, 0x5}}}}}}, 0x0) 2.732314278s ago: executing program 1 (id=613): r0 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) 2.648542374s ago: executing program 5 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001c00)=@delchain={0x2538, 0x65, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xf}, {0xa0ed8acbe6f98686, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_cgroup={{0xb}, {0x24f0, 0x2, [@TCA_CGROUP_POLICE={0x830, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0xffffff64, 0x2, 0x6, 0x5, 0x8, 0x402fc04b, 0x1, 0x0, 0x8000, 0x400, 0x2, 0x80000000, 0x5, 0x4, 0x6, 0x4, 0x81, 0x2, 0x3, 0xfffffffd, 0x6, 0xee, 0x2, 0x2, 0x6, 0xff9, 0x6, 0x0, 0xa, 0x100, 0x3, 0x6, 0x5d8, 0x2, 0x8, 0x1, 0x6, 0xa, 0xd0, 0x40, 0x1, 0x668ad688, 0x9, 0x8, 0x4, 0x3, 0x6, 0x0, 0x3, 0xb, 0xffff, 0x2a06cb5d, 0x6, 0x5, 0x10, 0x5, 0x101, 0x57, 0x3, 0x3, 0x200, 0x2e, 0x3, 0x3, 0x800, 0x81, 0x1, 0x3, 0x100, 0x7, 0x5, 0xce9, 0xffffffff, 0x3, 0x0, 0x10, 0x9, 0x3ff, 0x7fff, 0x4, 0xfde, 0x8, 0x9, 0x7fffffff, 0xa, 0xac26, 0x2, 0x5, 0x6, 0xe, 0x0, 0x9, 0xbd6a, 0x1000, 0x5, 0x3, 0x7, 0x76, 0x40, 0x277420d6, 0x0, 0x6, 0x3, 0xfd, 0x1, 0x9, 0xe04, 0x399d, 0x400, 0x2, 0x8f0, 0x8000, 0x200, 0x91b, 0x7ff, 0x9, 0x1, 0x9, 0xeed, 0x80, 0x6, 0x4, 0x7f, 0x2, 0x4, 0x7, 0x50a, 0x9, 0x5, 0x100, 0xc, 0x58ec456, 0x3, 0x3, 0x0, 0x5, 0x68200e7b, 0x7, 0x101, 0x4, 0x9, 0x5, 0xd, 0x6, 0xe, 0x3ff, 0x0, 0x7, 0x1ff, 0x6, 0x8, 0x573, 0x3, 0x9, 0x8, 0xc, 0x5, 0x2, 0x2f77, 0x8, 0x7, 0x40, 0x7fff, 0x8, 0x40, 0xb, 0x80, 0x7, 0xf, 0x8, 0x9, 0x6429, 0x0, 0x3ff, 0x6, 0x3, 0xb4, 0x101, 0x8, 0x4, 0x7, 0x8000, 0x3, 0x9, 0x1, 0xfffffbff, 0x1000, 0x9, 0x1ff, 0x1, 0x3b7, 0x4, 0xd, 0x6, 0x5, 0x2, 0x6, 0xa, 0x4, 0x5, 0x2, 0x6, 0x600, 0x3ff, 0x8, 0x7ff, 0x200, 0x7, 0xc4, 0x2, 0x5, 0x91, 0x0, 0x8, 0x8, 0x10, 0x3ff, 0x2253, 0x9, 0x9, 0x0, 0x0, 0x10000, 0x8, 0x8000, 0xc, 0x3, 0x8, 0x9, 0xe, 0x5, 0xc5a9, 0x0, 0x10, 0x1, 0x6, 0x1, 0x401, 0x5, 0x36b6, 0x8, 0x9, 0x400, 0x500, 0x5, 0x5, 0x8, 0x3, 0x40, 0x8f, 0x6, 0x3, 0x7fa6, 0x4df2244f, 0x401]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x57f7da32}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x5, 0x408a, 0x0, 0x4, 0xfffffffe, 0x4, 0xc53, 0x8, 0x4, 0x3, 0xda8f, 0xee, 0x7fffffff, 0x80000001, 0x6, 0xffffffff, 0x4, 0x2, 0x1, 0x8, 0xc, 0x85, 0x3ff, 0xeb7, 0x4, 0x4, 0x7, 0xfffffffd, 0x3, 0x1, 0x1, 0x5, 0x57, 0x2, 0x71a, 0x1, 0x2, 0x8001, 0x6, 0x7040, 0x3, 0x7, 0x8, 0x3, 0x6, 0x6, 0x101, 0x7, 0x4, 0x5, 0x80000000, 0x4, 0xa, 0xcf9, 0x4, 0x7, 0x8, 0x7, 0x9, 0x6, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x1ff, 0x2f, 0x2, 0x3d235b7f, 0x100, 0x9, 0x66aa, 0x0, 0x6f, 0x6, 0x4, 0x7, 0x6421, 0x7, 0xfffff964, 0x1, 0xa, 0x2, 0x412, 0x3ff, 0xfffffff9, 0x3, 0xb03, 0x7, 0x9, 0x3, 0x0, 0x0, 0x6, 0x200, 0x4, 0x7, 0x2, 0x9, 0xffffffb6, 0x6, 0x8, 0xff, 0x6, 0x2, 0x3, 0x9, 0x8, 0xfffffffd, 0x6, 0x8, 0xffffffff, 0x28, 0xffffffec, 0xb220, 0x1, 0x8, 0x3, 0x7, 0x4, 0x0, 0xa, 0x841c, 0x4, 0x9, 0x2a4b, 0x3, 0x200, 0x5, 0x0, 0x800, 0x3, 0xc5f, 0x6, 0x1, 0x6, 0x4407e31f, 0x7, 0x9, 0x2, 0x5, 0x5, 0x2, 0x4c7, 0x8, 0x4, 0x27d2, 0x81, 0x1, 0x40, 0x6, 0x8, 0x0, 0x9, 0x5, 0x4, 0x2, 0x3, 0x5, 0x9, 0x9, 0x5, 0x8, 0xfffeffff, 0x400, 0xf629, 0x0, 0x0, 0x9, 0x4, 0x2, 0x5, 0x9, 0x18, 0x0, 0x3, 0xe, 0xcc5, 0x0, 0xa357, 0xa, 0x5, 0x80000000, 0x676d, 0x4, 0x4, 0xd, 0x3, 0xff1, 0x3cfe, 0x200, 0x2d3973ba, 0x2, 0x0, 0x7, 0x1, 0x1415, 0x1, 0x4, 0x1, 0x1a, 0x9, 0xe, 0x4, 0x4, 0x9, 0x5, 0x299f, 0x7fffffff, 0x7fffffff, 0x800, 0x7, 0x0, 0x1, 0x52d5, 0x2, 0x7, 0x7, 0x7, 0x4, 0x2, 0x9, 0x1, 0x2, 0x6, 0xfffffffd, 0x7, 0x1, 0x1ff, 0x100, 0x2, 0x1, 0x1000, 0x1e66, 0x6c, 0x9159, 0x6, 0x7, 0x3, 0x4, 0x0, 0x5, 0x2, 0x8, 0x6, 0x8, 0x3, 0x1, 0x81, 0x6, 0xb2, 0x15, 0x400000, 0x1ba0000]}]}, @TCA_CGROUP_ACT={0x1cbc, 0x1, [@m_pedit={0x1cb8, 0x0, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x5, 0x80000000, 0x8, 0x443c, 0x9}, 0x2, 0x7, [{0x199, 0x6, 0x5, 0x9, 0xe, 0x8001}, {0x7, 0x6e87, 0x0, 0x400, 0x10000000, 0x2cf9}]}, [{0x6, 0x2, 0xfffffffd, 0x2, 0xff, 0x1ff}, {0x2, 0x2, 0x3, 0x8000, 0x0, 0x2}, {0x7, 0x401, 0xffff8001, 0x6, 0xff, 0x9}, {0xbb, 0x0, 0x2, 0x1, 0xfffff001, 0x1}, {0xa, 0xfffffff2, 0x1b4, 0x2, 0x4, 0xa}, {0x2, 0x200, 0x200, 0x1ff, 0x0, 0x3}, {0x8001, 0x6ca, 0xb, 0x2, 0x401, 0xe}, {0xd86, 0x5, 0x2, 0xabbc, 0x1ff, 0x400}, {0x8, 0x10001, 0x8001, 0x1000000, 0x4c, 0x2}, {0x2, 0x2, 0x9, 0x800, 0xb9e, 0x9}, {0x0, 0x5, 0x4, 0x6, 0x7ff, 0x6}, {0x5, 0x80000000, 0x1, 0x5, 0x9, 0x6}, {0x8, 0x9, 0x5, 0x6, 0x780, 0x2}, {0x1a5e2283, 0x7e, 0x29cfd955, 0x7, 0x7f, 0x2}, {0x1, 0x5, 0x8, 0x9e09, 0x0, 0xd}, {0x10000, 0x4, 0x6, 0x7, 0x2, 0x7fffffff}, {0xffff, 0x3, 0x0, 0x7, 0x2, 0xb}, {0x6, 0x1ff, 0x1, 0x8001, 0x6a30f85f, 0x8}, {0x5, 0x9, 0x1, 0x100, 0x6, 0x77}, {0xc8, 0x0, 0x0, 0x1, 0x1000, 0x2}, {0x9, 0x100, 0x7, 0xfffffff7, 0x51b, 0x7}, {0x5, 0x33, 0x1, 0x8, 0x8, 0x9}, {0x5, 0x9bc0, 0x7ff, 0x6, 0x8, 0x8dd1}, {0x6, 0x204c, 0x10, 0x9, 0x6, 0x46a}, {0x0, 0xf, 0x8d5d69f, 0x6, 0xb6, 0x4}, {0x7, 0x7fff, 0x1, 0xfffffff2, 0xf, 0xffffffff}, {0x8, 0xd, 0x7fffffff, 0x101, 0x7, 0x3}, {0xe1, 0x0, 0x9, 0x3, 0x3, 0x2c5}, {0x6, 0x2, 0x5, 0x8a8, 0x4, 0x5}, {0x508, 0x3446, 0x8, 0x8, 0x95, 0x5}, {0x8, 0xffffffff, 0x435, 0x8, 0x1, 0x16}, {0x4, 0x80, 0x0, 0x7, 0xff, 0x4b}, {0x5, 0x9, 0x0, 0x5, 0x24a, 0x9}, {0x3, 0x3, 0x4, 0x7ff, 0x0, 0xfffffffc}, {0x5, 0x0, 0x7730, 0x9, 0x8, 0x6}, {0x4, 0x0, 0x3ff, 0x101, 0x8, 0x6}, {0x4, 0x7, 0x101, 0x3, 0x5, 0x8}, {0x5, 0x80000000, 0x3, 0x2, 0x81f4, 0x2}, {0x3ff, 0xfffffffe, 0x0, 0x0, 0x200, 0x4}, {0x33afefe0, 0x8, 0xfffff235, 0x739c7439, 0x2, 0xffffffb4}, {0x8, 0x6, 0x80000001, 0xa, 0xa, 0x10001}, {0x7, 0x6, 0x1ff, 0xc3, 0xfffffff7, 0x4}, {0x9, 0x7, 0x80, 0x297b, 0x81, 0x40}, {0xfffffffb, 0x1ff, 0x1, 0x96, 0x1}, {0x3, 0x0, 0x7, 0x7, 0x4, 0x8}, {0x200, 0x6, 0x1, 0xcd3, 0x6, 0x8}, {0x40, 0x3, 0x6, 0x94d, 0x1, 0x10000}, {0x75, 0x9e35, 0x0, 0x7, 0x3, 0xdf8e}, {0x6, 0xc, 0x7, 0xf75d, 0x2be5, 0x2}, {0x8, 0x2, 0x5, 0xa, 0xfffff19f, 0xfffffb5b}, {0x0, 0x2, 0x6, 0x6, 0xd, 0xffffff83}, {0x4, 0x91, 0x8, 0x9, 0x5, 0x101}, {0x6, 0x9, 0x3, 0x4, 0x91, 0x8}, {0x7f, 0x7f, 0xffff, 0x2, 0x3, 0xa}, {0x200, 0x7, 0x40, 0xae, 0x6, 0x81}, {0x3, 0x3, 0x3, 0x3, 0x10, 0x2}, {0x0, 0x5, 0x86, 0x7, 0x2, 0xfffffcfd}, {0x269e, 0x5c8f, 0xfffffffe, 0x0, 0x4, 0x1000}, {0x5, 0x3, 0xfffffffb, 0xe, 0x5, 0x4ab8}, {0xff, 0x200, 0x5, 0x89, 0x7, 0x7fffffff}, {0x8, 0x5, 0x8, 0x3, 0x4040, 0x24}, {0x5, 0x10000, 0x1, 0x0, 0x2, 0x40}, {0x7fff, 0x1, 0x9, 0x6, 0x0, 0x800000}, {0xc, 0x5, 0x4, 0x5, 0x5, 0xefb5}, {0xa4b, 0xa9, 0x2d, 0x8}, {0x1, 0x0, 0xc, 0x6, 0x1, 0x400}, {0x39, 0x1, 0xec, 0x3d3, 0x8, 0x4}, {0x3, 0x2, 0x8, 0x7fff, 0xfff, 0x2}, {0xeb7, 0x7, 0x80000000, 0x4, 0x3, 0x3}, {0xa, 0x4, 0x4, 0x3, 0x7a0, 0x87c}, {0x7f, 0x7, 0x7, 0x9, 0x9, 0x3a}, {0x5, 0x4, 0x8, 0x672, 0x7, 0x5}, {0x1, 0x1, 0x1281, 0x1, 0x1, 0xffff}, {0x9, 0x13, 0x8bd3, 0x3, 0x2, 0xd62}, {0x6, 0xfffeffff, 0x9d, 0x7, 0x6, 0x1}, {0x1ff, 0x1, 0x2, 0x5, 0x7, 0x9}, {0x7, 0x0, 0xffff, 0x7, 0x2, 0xb95}, {0x40, 0x1, 0x8, 0x2, 0x5, 0x8}, {0x8000, 0x6, 0x0, 0x4, 0x10}, {0x9, 0x3ec, 0xd, 0x8, 0x0, 0xfffffffe}, {0x3ff, 0xf1, 0x4c7, 0x2b58, 0x693a8524, 0x1000}, {0x400, 0x7, 0xbc6, 0x7ff, 0x8, 0x4}, {0xda, 0xfffffffb, 0x3, 0x7, 0x1, 0x1}, {0xc, 0x81, 0x0, 0x3b80, 0x8, 0x4}, {0x5, 0x6, 0x7f, 0xfffffff7, 0x8, 0x75e9}, {0x8, 0x78, 0x2, 0x6, 0x1c, 0x100}, {0x0, 0x6, 0x7, 0xfffffffb, 0x3, 0x448}, {0x8, 0x1ff, 0x9, 0x9, 0x93, 0xfffffffc}, {0x4, 0xbf00, 0x9, 0x1, 0x4, 0x8001}, {0x3, 0x0, 0x9, 0x7, 0x7, 0x6b}, {0x5, 0x4, 0xbf, 0x2, 0x77e, 0x4}, {0xa3f6, 0x6e14d1bf, 0x8, 0x4, 0xd, 0x8001}, {0x7, 0x5, 0x5, 0xf, 0x9, 0x8000}, {0xf6, 0x9, 0x7, 0xd, 0x6, 0x3}, {0x7, 0x1, 0xffffff7f, 0xd, 0x1ff, 0x8}, {0xcfa, 0x2c, 0x7, 0x2, 0x9, 0x2}, {0x4, 0x2f6, 0x6, 0x5, 0x7, 0x8000}, {0x3, 0x0, 0x2, 0x9, 0x1, 0x6a}, {0x200, 0x0, 0x7ff, 0x0, 0x8, 0x5}, {0xe66e, 0x10001, 0x3, 0x2, 0x9, 0x400}, {0x51723427, 0x7ff, 0x4, 0xf, 0x800, 0x80}, {0x6, 0x2, 0x6, 0x4, 0xfffffff9, 0x3}, {0xcd9, 0x2, 0xa0, 0x8, 0x80, 0x98}, {0x3f, 0x1000, 0x7, 0x6, 0xfffffffe, 0xa9fe}, {0x7fffffff, 0x7, 0x1, 0x1, 0x7eee, 0x4}, {0xfffffff9, 0x6, 0x92, 0x2, 0x7, 0x3}, {0x13b3, 0xcf, 0x7fffffff, 0x2929, 0x100, 0x7f}, {0x0, 0x5, 0x500, 0xfff, 0xffff, 0x8}, {0x6, 0x5, 0x9f, 0x8000, 0x3, 0x5}, {0x22e64c10, 0xfffffffd, 0x7f, 0x2, 0xa, 0x7}, {0x9, 0xbe, 0x4, 0x3, 0x2, 0x2}, {0x4, 0x4, 0x1, 0x6, 0xffffffff, 0x7}, {0x1, 0xe2, 0x9, 0x1353, 0x5}, {0x1000, 0x2, 0xffffffff, 0x9, 0xc8, 0x9}, {0x2, 0x6, 0xff, 0x4, 0x0, 0x5}, {0x3, 0x8, 0x8, 0x2, 0x1, 0x6}, {0x5, 0xc6, 0x9, 0x6, 0x8c7, 0x4}, {0xd3, 0x8, 0x2d1, 0x81, 0xfff, 0x80000001}, {0x80000001, 0x8, 0x3, 0x3, 0xe, 0x1000}, {0x0, 0x9, 0x4, 0x7f, 0x80, 0x67ee}, {0x5, 0x9, 0x10, 0x80000001, 0x1, 0x401}, {0x5, 0xb8, 0x6, 0x8, 0x3, 0x6}, {0xf832, 0x346, 0x6, 0x8, 0x8, 0x6ab6}, {0x72, 0x2, 0x1, 0xacc7, 0x2, 0x3}, {0x8000, 0x5, 0x2, 0x9, 0x1, 0x1}, {0x5, 0x8, 0x6, 0xf, 0x3, 0x5239}, {0x2, 0x5, 0xfb, 0x0, 0x2, 0x800000}, {0xfffffffe, 0x4, 0x2089, 0x3, 0x10000, 0x55a}], [{0x1, 0x1}, {0x5}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x4aeb14450535c572}, {0x5}, {0x4}, {0x4, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x2b5ded1acc28e9c6}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {}, {0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x2, 0xe175c1884898c8b5}, {0x2}, {}, {0x4}, {0x2}, {0x5}, {}, {0x4}, {0x25d4c90391ba65f9}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x3}, {0x5}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xe4db, 0xfffffffd, 0x20000001, 0x8, 0x1}, 0x0, 0x0, [{0xc8b, 0x3, 0x9, 0x1, 0x4, 0x1}]}, [{0x9, 0x9, 0x2, 0x0, 0x6, 0x4}, {0x2, 0x0, 0x9, 0x200, 0xb}, {0x8, 0x7, 0x5, 0xfb, 0xfffffff8, 0x2}, {0x9, 0xffa, 0x9, 0x3ff, 0x9, 0x4}, {0x5, 0x2, 0x10, 0xc863, 0x6, 0x8e16}, {0x7ff, 0x7ff, 0xffff, 0x2, 0x2, 0x1}, {0x2, 0x9, 0xb9, 0x9, 0x6, 0x2}, {0xa6e, 0xb, 0x1000, 0x3, 0x6, 0x400}, {0x8, 0x7, 0x6f, 0xfffffffe, 0x8, 0x3}, {0x0, 0x6c3df2c7, 0x0, 0x3, 0x2, 0x8}, {0x3, 0x31, 0x5, 0x5, 0xae, 0xfb}, {0x7, 0x1, 0x8, 0x7, 0x5, 0xffffffff}, {0x5, 0x6de, 0x78e, 0x63f, 0x7, 0x8}, {0x2, 0x3fe, 0xb92d, 0x0, 0x2, 0x6}, {0x8, 0x7ff, 0x4, 0x80000001, 0x4, 0x4}, {0x4, 0x0, 0x80, 0x6, 0x7, 0x7}, {0x3, 0x8, 0x7, 0x8, 0x0, 0x1}, {0x1ff, 0xfffffff8, 0x5, 0x81, 0x8, 0x5}, {0x3fc, 0x5, 0x1, 0x7, 0x8, 0xb}, {0x8, 0xe, 0x4, 0x6, 0x92, 0x9}, {0x3ff, 0x8, 0xa7, 0x0, 0x57d, 0xffffffff}, {0xa23, 0x1, 0xe, 0x1000000, 0x2, 0x8}, {0x10000, 0xd, 0x9, 0x1, 0xf68e, 0x4}, {0x5, 0x6, 0x7, 0xa, 0x80000000, 0x10000}, {0x6, 0x3, 0x6, 0x4, 0x2000, 0x3}, {0x1, 0x3, 0x7, 0x101, 0x4, 0xfffffff7}, {0x2, 0x3, 0x64, 0x4, 0x3, 0x216}, {0xb378, 0xa7e, 0x7, 0x1ff, 0x4, 0x8001}, {0x1000, 0x1, 0x3ff, 0x10, 0x6410, 0x4}, {0x100000, 0x8, 0x0, 0x4c6, 0x2, 0x44}, {0xf, 0xb33, 0x8, 0x3, 0x8, 0x4}, {0x752, 0xfffffffb, 0xc7c4, 0x9, 0x4, 0xd}, {0x8, 0x166b, 0x80000000, 0xed92, 0x80000001, 0x9}, {0x1000, 0xff, 0x1, 0x0, 0x2, 0x10001}, {0x7e7, 0x5, 0x6b, 0x2, 0x1, 0x8}, {0x9, 0xfffffff7, 0x1c0000, 0x0, 0x0, 0x9}, {0x80000001, 0x9, 0x227, 0x6, 0x3, 0x4}, {0x3, 0x4, 0x0, 0x0, 0x1, 0xffff}, {0xc, 0x2, 0x532f, 0x0, 0xffffff0c, 0x5}, {0x8, 0x6, 0x80000000, 0x0, 0x6, 0x9aee}, {0x6, 0x6, 0x1, 0x0, 0x0, 0xffffffff}, {0xfffffff8, 0x8001, 0x75, 0x1ff, 0xa}, {0xbb2c, 0x8, 0xffffffff, 0x3, 0x3, 0xa7ee}, {0x0, 0x40, 0x1, 0x80000000, 0x400, 0xb3733178}, {0x10000, 0x3, 0x5, 0x101, 0x2, 0x48f}, {0x5, 0x10000, 0x200, 0x80000001, 0x3, 0x9f48}, {0x156800, 0x1ff, 0x0, 0x1c28, 0x3, 0x8}, {0x2, 0x3, 0x7fff, 0xff, 0x3, 0x7}, {0x2, 0x9, 0x4, 0x40, 0x3, 0x2}, {0xd52, 0x2, 0x3, 0xc, 0x80a, 0xff9}, {0x9, 0x3, 0xe05, 0x2b, 0x8, 0x6}, {0x7, 0x1, 0xfffffae7, 0x6, 0x4, 0x481}, {0x9, 0x7, 0x7a0d, 0x7, 0x5, 0x4c}, {0x7a, 0xff, 0x47b2, 0x3, 0x8, 0x1}, {0xfffffc00, 0x1, 0x2, 0x5, 0x7, 0xffffffe1}, {0x0, 0x3, 0x6, 0x3, 0x10000, 0x5}, {0x7fc9, 0x10000, 0x3, 0x6, 0x0, 0xffff}, {0x67a, 0xa, 0xfd, 0x2, 0x8, 0x4800000}, {0x8001, 0x91fe, 0xfd, 0x200, 0xb74, 0x7}, {0xfffffffe, 0x0, 0x9, 0x80, 0x6, 0x8}, {0x80000001, 0xffffffff, 0x9, 0xfffffffb, 0x10, 0x4}, {0x1a495314, 0x8, 0x1, 0x0, 0x6, 0x4}, {0x7fffffff, 0xab71, 0x4, 0x1, 0x5, 0xfff}, {0x3, 0x8, 0x9, 0xffffffee, 0xc3c8000, 0x1}, {0x3, 0x100, 0xfff, 0x6, 0x45f, 0x6}, {0x8, 0x1d93, 0x8, 0x0, 0x80, 0x7}, {0x8000, 0x4, 0x6, 0x687, 0x2, 0x8001}, {0x800, 0xf6c0, 0x6, 0x7f, 0x400}, {0x7, 0xfffffff7, 0x40, 0x8, 0x7, 0xfff}, {0xb0, 0x5, 0xa9b, 0x59, 0x5, 0x3}, {0x7, 0x36, 0x6, 0x101, 0xa228, 0x3ff}, {0x9, 0x80000001, 0x6596ccdd, 0xffffffff, 0x3ff, 0x5}, {0x1, 0x8, 0x6, 0xf, 0x14, 0xca59}, {0x1, 0x8, 0x0, 0x2, 0x1, 0x24fb}, {0x1000, 0x5, 0x5, 0x1, 0x4, 0x1e13}, {0x8, 0x8, 0x3, 0xb1f, 0x0, 0xfff}, {0x2, 0x8d0, 0x3, 0x3ff, 0x7fff, 0x8}, {0xf068, 0xb550, 0x1, 0x9, 0x1, 0xfffffffa}, {0x101, 0x4, 0x9, 0x3, 0xe, 0x558fa50d}, {0x1, 0xffff08d1, 0x2, 0x1, 0x57, 0xd89}, {0x8, 0x20b, 0x7, 0x2, 0xa, 0x10000}, {0x1, 0x7, 0x4, 0x3, 0x80, 0x38cca4fe}, {0xd08, 0x0, 0x800, 0x3b2, 0x10000, 0x6}, {0x9357, 0x6, 0x8441, 0x3, 0x4, 0x9}, {0x0, 0x9, 0x1, 0x2, 0x9, 0x4}, {0xffffffff, 0x20000000, 0x0, 0x6, 0xe, 0x3ff}, {0x6, 0x2, 0x3, 0x9, 0x5, 0xd4cf}, {0x9, 0x101, 0xec0b, 0x8000, 0x1, 0x3}, {0x3, 0x800, 0x3, 0x4, 0x4, 0x3}, {0xfda, 0x6, 0xffffffff, 0x271, 0x9, 0x1}, {0x1, 0x4, 0x566, 0x1, 0x6000, 0xe}, {0x9, 0x101, 0x3, 0x8001, 0xeac7, 0x5}, {0x1, 0xe, 0x9, 0xa3, 0x6, 0x49}, {0x1, 0x5, 0x55, 0x5, 0x7, 0x29}, {0x8, 0x1, 0x1, 0x800, 0x8459, 0xb}, {0x3, 0x3, 0x5, 0x1a, 0x4, 0xdb}, {0x4, 0x4, 0x6, 0x3, 0x2, 0x4}, {0xa, 0x9, 0x4, 0x3983, 0x6e, 0xffffffff}, {0x41c7c64f, 0xfba, 0x101, 0xdd4d990, 0x3, 0x2}, {0x7cfa, 0x84, 0x80, 0x40, 0x1, 0x7}, {0x12dfee91, 0x0, 0x1000, 0x1924, 0x4, 0x55b1}, {0x0, 0x7, 0x5, 0x3, 0x5, 0x6}, {0x800, 0xfffff66a, 0x7, 0x5df, 0x0, 0x11a9}, {0x5, 0x1, 0x1, 0x0, 0x5e24, 0x200}, {0x7, 0x80000001, 0x8426, 0x6b7, 0x4, 0x4}, {0xf, 0x1, 0x11da, 0x10001, 0x1ff, 0x7}, {0x4, 0x8, 0x3, 0xffffffaa, 0x0, 0x5}, {0x40, 0x8, 0xfaa, 0x3, 0x9, 0x1}, {0x8000, 0x7, 0x3, 0x4, 0x7c4, 0x27}, {0x4eb, 0x1, 0x8, 0x8, 0x401, 0xa08}, {0x73f, 0x10000, 0x40, 0x2, 0xb51, 0x2}, {0x1, 0x9, 0x7, 0x10, 0x1, 0x5}, {0x4, 0x80000001, 0xf, 0x2, 0x0, 0x7475}, {0x9, 0x1, 0x8, 0xfffffffe, 0x7fff, 0x1}, {0x7f, 0x79b, 0x0, 0xa, 0x0, 0xc9b}, {0x2, 0x1, 0x5, 0x1, 0x3, 0x8}, {0x5a0089d5, 0x80, 0xe80, 0x3af0, 0x6f1b}, {0x1ff, 0x5, 0xc30b, 0x1ff, 0x5, 0x7}, {0x7, 0x2, 0x4, 0x191a, 0x8, 0x4}, {0x2, 0x9, 0xfff, 0xfff, 0xcee, 0x40}, {0xfff, 0x35, 0xd8, 0x2, 0x3, 0xd}, {0x3ff, 0x3, 0x9, 0x7, 0xb004, 0x6e}, {0x3, 0x2, 0x6, 0x8, 0x101, 0x7}, {0xff, 0x1, 0x46, 0x9, 0xc, 0x2}, {0xffffffff, 0x2, 0x0, 0xca, 0xa87, 0x34c}, {0x4, 0x6, 0x8000000, 0x2, 0x7, 0x2}, {0x7, 0xffff, 0x7f, 0x1000, 0x8, 0x7}, {0x6, 0x0, 0x7025, 0x5, 0x4, 0xb}], [{0x3, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {}, {0x3}, {0x1}, {}, {0x4}, {0x5}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x7}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x64314ca8aebd01e3}, {0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0xe}, {0x2}, {0x5}, {0x5}, {0x4}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x802fff29dd8ac73e, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2fedce8ee758335e, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2538}, 0x1, 0x0, 0x0, 0xc080}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.617801914s ago: executing program 3 (id=615): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000000680)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b348a7fba46e286378a15ee516bac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca1051ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf0", @ANYRESOCT, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445b3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x1, 0x315, &(0x7f0000000880)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) syz_mount_image$bfs(&(0x7f0000000a80), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xb7, &(0x7f0000001a40)="$eJzs0rFJBUEQBuD/3Ts9DkELsAd7MDW3ggsNjRRBK7EDW7GE68DgUpOR5U7BxEAQFb4v2J2dYeGH3efXp9McJ3WfVFUdJhmz1tc3t1eXF23dJ8lj+gxZve/8c13q4y3rpJ2Tl/MMD1uvDeflbpp3meal/YqjqtqGB7+TGQAA+J4uZ1u1+9Qfv7rUJ9l3PxkLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M94CwAA///K8iH3") ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.867666011s ago: executing program 5 (id=616): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="815c"], 0x650) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.611172064s ago: executing program 1 (id=617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) 1.333808969s ago: executing program 5 (id=618): unshare(0x22020600) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x10, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1.250049932s ago: executing program 1 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.158560695s ago: executing program 3 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x40, 0x144, 0x5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) rmdir(&(0x7f0000000080)='./file2\x00') fchown(r0, 0xffffffffffffffff, 0x0) 1.138861812s ago: executing program 5 (id=621): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000140)) 802.518206ms ago: executing program 1 (id=622): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="b8", 0x1}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 792.926866ms ago: executing program 3 (id=623): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000eaff01"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0xfffffffffffffffc, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 442.417621ms ago: executing program 1 (id=624): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xd, 0x8, 0x100000}, 0x20) 277.295952ms ago: executing program 6 (id=625): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0x20) read(r0, &(0x7f00000000c0)=""/66, 0x42) getpeername(r0, 0x0, &(0x7f0000000200)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, 0x0, 0x0) 0s ago: executing program 1 (id=626): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create(0x3) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004340)={0xb0000019}) kernel console output (not intermixed with test programs): 09: 00000000ffffffff [ 81.353444][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda839eb00 [ 81.353455][ T5853] R13: 00007fee81032050 R14: 0000000000013d09 R15: 00007ffda839eb40 [ 81.353480][ T5853] [ 81.355831][ T5853] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 81.421489][ T5842] syz-executor: attempt to access beyond end of device [ 81.421489][ T5842] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 81.806166][ T6038] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 82.082022][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 82.082041][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.082048][ T5842] Call Trace: [ 82.082053][ T5842] [ 82.082058][ T5842] dump_stack_lvl+0xe8/0x150 [ 82.082082][ T5842] f2fs_handle_critical_error+0x37c/0x540 [ 82.082102][ T5842] f2fs_write_end_io+0x1274/0x1740 [ 82.082125][ T5842] __submit_merged_bio+0x256/0x6a0 [ 82.082144][ T5842] __submit_merged_write_cond+0x3c9/0x4e0 [ 82.082164][ T5842] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 82.082191][ T5842] f2fs_write_data_pages+0x287e/0x34f0 [ 82.082208][ T5842] ? is_bpf_text_address+0x26/0x2b0 [ 82.082243][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 82.082268][ T5842] ? do_raw_spin_lock+0x12b/0x2f0 [ 82.082299][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 82.082324][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 82.082345][ T5842] ? do_raw_spin_lock+0x12b/0x2f0 [ 82.082368][ T5842] ? do_raw_spin_unlock+0xf5/0x210 [ 82.082382][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 82.082400][ T5842] do_writepages+0x32e/0x550 [ 82.082419][ T5842] ? do_raw_spin_unlock+0xf5/0x210 [ 82.082436][ T5842] filemap_fdatawrite+0x1e9/0x2f0 [ 82.082452][ T5842] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 82.082489][ T5842] ? do_raw_spin_unlock+0xf5/0x210 [ 82.082506][ T5842] f2fs_sync_dirty_inodes+0x30e/0x830 [ 82.082525][ T5842] f2fs_write_checkpoint+0x9df/0x26a0 [ 82.082535][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 82.082568][ T5842] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 82.082608][ T5842] kill_f2fs_super+0x314/0x720 [ 82.082622][ T5842] ? __pfx_kill_f2fs_super+0x10/0x10 [ 82.082640][ T5842] ? lockdep_hardirqs_on+0x7a/0x110 [ 82.082663][ T5842] deactivate_locked_super+0xbc/0x130 [ 82.082681][ T5842] cleanup_mnt+0x437/0x4d0 [ 82.082693][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.082712][ T5842] task_work_run+0x1d9/0x270 [ 82.082728][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 82.082749][ T5842] exit_to_user_mode_loop+0xed/0x480 [ 82.082764][ T5842] ? rcu_is_watching+0x15/0xb0 [ 82.082778][ T5842] do_syscall_64+0x32d/0xf80 [ 82.082794][ T5842] ? trace_irq_disable+0x3b/0x140 [ 82.082807][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.082818][ T5842] ? clear_bhb_loop+0x40/0x90 [ 82.082832][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.082843][ T5842] RIP: 0033:0x7f64a279d9d7 [ 82.082862][ T5842] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.082871][ T5842] RSP: 002b:00007ffefc801da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.082884][ T5842] RAX: 0000000000000000 RBX: 00007f64a2832050 RCX: 00007f64a279d9d7 [ 82.082892][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefc801e60 [ 82.082899][ T5842] RBP: 00007ffefc801e60 R08: 00007ffefc802e60 R09: 00000000ffffffff [ 82.082906][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefc802ef0 [ 82.082913][ T5842] R13: 00007f64a2832050 R14: 0000000000013d5e R15: 00007ffefc802f30 [ 82.082931][ T5842] [ 82.449976][ T5842] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 82.456970][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 82.456996][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.457007][ T5842] Call Trace: [ 82.457015][ T5842] [ 82.457022][ T5842] dump_stack_lvl+0xe8/0x150 [ 82.457062][ T5842] f2fs_handle_critical_error+0x37c/0x540 [ 82.457095][ T5842] f2fs_write_end_io+0x1274/0x1740 [ 82.457131][ T5842] __submit_merged_bio+0x256/0x6a0 [ 82.457162][ T5842] __submit_merged_write_cond+0x3c9/0x4e0 [ 82.457195][ T5842] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 82.457241][ T5842] f2fs_write_data_pages+0x287e/0x34f0 [ 82.457268][ T5842] ? is_bpf_text_address+0x26/0x2b0 [ 82.457327][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 82.457367][ T5842] ? do_raw_spin_lock+0x12b/0x2f0 [ 82.457421][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 82.457461][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 82.457496][ T5842] ? do_raw_spin_lock+0x12b/0x2f0 [ 82.457529][ T5842] ? do_raw_spin_unlock+0xf5/0x210 [ 82.457553][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 82.457582][ T5842] do_writepages+0x32e/0x550 [ 82.457614][ T5842] ? do_raw_spin_unlock+0xf5/0x210 [ 82.457641][ T5842] filemap_fdatawrite+0x1e9/0x2f0 [ 82.457668][ T5842] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 82.457733][ T5842] ? do_raw_spin_unlock+0xf5/0x210 [ 82.457760][ T5842] f2fs_sync_dirty_inodes+0x30e/0x830 [ 82.457793][ T5842] f2fs_write_checkpoint+0x9df/0x26a0 [ 82.457812][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 82.457876][ T5842] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 82.457948][ T5842] kill_f2fs_super+0x314/0x720 [ 82.457973][ T5842] ? __pfx_kill_f2fs_super+0x10/0x10 [ 82.458000][ T5842] ? lockdep_hardirqs_on+0x7a/0x110 [ 82.458033][ T5842] deactivate_locked_super+0xbc/0x130 [ 82.458058][ T5842] cleanup_mnt+0x437/0x4d0 [ 82.458076][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.458101][ T5842] task_work_run+0x1d9/0x270 [ 82.458127][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 82.458161][ T5842] exit_to_user_mode_loop+0xed/0x480 [ 82.458192][ T5842] ? rcu_is_watching+0x15/0xb0 [ 82.458215][ T5842] do_syscall_64+0x32d/0xf80 [ 82.458238][ T5842] ? trace_irq_disable+0x3b/0x140 [ 82.458260][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.458280][ T5842] ? clear_bhb_loop+0x40/0x90 [ 82.458303][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.458321][ T5842] RIP: 0033:0x7f64a279d9d7 [ 82.458340][ T5842] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.458355][ T5842] RSP: 002b:00007ffefc801da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.458376][ T5842] RAX: 0000000000000000 RBX: 00007f64a2832050 RCX: 00007f64a279d9d7 [ 82.458389][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefc801e60 [ 82.458404][ T5842] RBP: 00007ffefc801e60 R08: 00007ffefc802e60 R09: 00000000ffffffff [ 82.458417][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefc802ef0 [ 82.458429][ T5842] R13: 00007f64a2832050 R14: 0000000000013d5e R15: 00007ffefc802f30 [ 82.458460][ T5842] [ 82.804244][ T5842] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 82.938890][ T6049] input: syz1 as /devices/virtual/input/input5 [ 83.405664][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 83.508992][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 83.533115][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.550910][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.585742][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.781978][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.977305][ T6063] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.877575][ T6090] loop2: detected capacity change from 0 to 2048 [ 84.890225][ T6095] loop4: detected capacity change from 0 to 512 [ 84.952894][ T6095] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.980014][ T6095] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.981814][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.042121][ T6095] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 85.087767][ T6095] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 85.110817][ T6095] System zones: 0-2, 18-18, 34-35 [ 85.161192][ T29] audit: type=1800 audit(1774049693.386:3): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 85.212257][ T6095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.261047][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.408730][ T6010] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.454761][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.491788][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.506630][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.525803][ T24] usb 1-1: Product: syz [ 85.534132][ T24] usb 1-1: Manufacturer: syz [ 85.543717][ T24] usb 1-1: SerialNumber: syz [ 85.602532][ T6010] usb 2-1: Using ep0 maxpacket: 32 [ 85.620603][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.632560][ T6010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.666864][ T6010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.701973][ T6010] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 85.732772][ T6010] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 85.764250][ T6010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.774464][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.811299][ T6010] usb 2-1: config 0 descriptor?? [ 86.308133][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.382057][ T6010] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input6 [ 86.438240][ T24] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 86.470766][ T24] cdc_ncm 1-1:1.0: bind() failure [ 86.490048][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 86.524612][ T5920] usb 3-1: config 0 has no interfaces? [ 86.530476][ T6010] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input7 [ 86.539282][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 86.584859][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 86.602721][ T24] cdc_ncm 1-1:1.1: bind() failure [ 86.621464][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.647714][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 86.682335][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.689529][ T24] usb 1-1: USB disconnect, device number 2 [ 86.841470][ T5920] usb 3-1: config 0 descriptor?? [ 86.972718][ T47] cfg80211: failed to load regulatory.db [ 87.208871][ T5898] usb 3-1: USB disconnect, device number 2 [ 87.210691][ T6010] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 87.507275][ C1] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 87.520271][ T6126] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 87.565501][ T6124] syzkaller1: entered promiscuous mode [ 87.605338][ T6124] syzkaller1: entered allmulticast mode [ 87.715820][ T47] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 88.235435][ T6119] loop3: detected capacity change from 0 to 32768 [ 88.317549][ T6119] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 88.397132][ T6119] XFS (loop3): Ending clean mount [ 88.518405][ T6119] XFS (loop3): Quotacheck needed: Please wait. [ 88.569128][ T6010] usb 2-1: USB disconnect, device number 2 [ 88.723407][ T6119] XFS (loop3): Quotacheck: Done. [ 88.999544][ T5850] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.703576][ T6135] loop0: detected capacity change from 0 to 4096 [ 89.733647][ T6135] ======================================================= [ 89.733647][ T6135] WARNING: The mand mount option has been deprecated and [ 89.733647][ T6135] and is ignored by this kernel. Remove the mand [ 89.733647][ T6135] option from the mount to silence this warning. [ 89.733647][ T6135] ======================================================= [ 89.804523][ T6135] ntfs3: Unknown parameter 'btrfs' [ 91.381973][ T6174] loop4: detected capacity change from 0 to 1024 [ 91.416314][ T6174] EXT4-fs: Ignoring removed nobh option [ 91.436052][ T6174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.517306][ T6174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.937543][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.528724][ T6178] loop0: detected capacity change from 0 to 40427 [ 92.573305][ T6178] F2FS-fs: heap/no_heap options were deprecated [ 92.663375][ T6178] F2FS-fs (loop0): build fault injection rate: 19 [ 92.688314][ T6178] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 92.752320][ T6178] F2FS-fs (loop0): invalid crc value [ 92.872562][ T6178] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 93.037470][ T6198] xt_hashlimit: size too large, truncated to 1048576 [ 93.249416][ T6178] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 93.380324][ T6178] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 93.473919][ T6178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.658804][ T6178] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060 [ 93.734972][ T6213] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80 [ 93.792005][ T6178] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x361/0xd80 [ 93.845944][ T6184] loop1: detected capacity change from 0 to 32768 [ 93.860118][ T6178] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __write_node_folio+0x5ba/0x1a20 [ 93.900167][ T6178] F2FS-fs (loop0): inconsistent node block, node_type:0, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 93.917075][ T6184] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.67 (6184) [ 93.939290][ T6010] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 93.958700][ T6178] CPU: 1 UID: 0 PID: 6178 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) [ 93.958731][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.958743][ T6178] Call Trace: [ 93.958751][ T6178] [ 93.958760][ T6178] dump_stack_lvl+0xe8/0x150 [ 93.958797][ T6178] f2fs_handle_critical_error+0x37c/0x540 [ 93.958830][ T6178] __write_node_folio+0x5dd/0x1a20 [ 93.958863][ T6178] ? mod_memcg_lruvec_state+0xe2/0x220 [ 93.958893][ T6178] ? __pfx___write_node_folio+0x10/0x10 [ 93.958927][ T6178] ? f2fs_inode_chksum_set+0x13e/0x640 [ 93.958956][ T6178] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 93.958993][ T6178] ? folio_clear_dirty_for_io+0x570/0x710 [ 93.959018][ T6178] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 93.959046][ T6178] f2fs_sync_node_pages+0xeb4/0x1680 [ 93.959091][ T6178] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 93.959162][ T6178] f2fs_write_checkpoint+0xeb8/0x26a0 [ 93.959213][ T6178] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 93.959271][ T6178] ? down_write+0x16d/0x200 [ 93.959301][ T6178] ? __pfx_down_write+0x10/0x10 [ 93.959328][ T6178] ? uplift_priority+0xdb/0x700 [ 93.959365][ T6178] f2fs_issue_checkpoint+0x456/0x790 [ 93.959396][ T6178] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 93.959453][ T6178] ? f2fs_sync_fs+0x1f0/0x3c0 [ 93.959479][ T6178] f2fs_do_sync_file+0x818/0x19f0 [ 93.959517][ T6178] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 93.959578][ T6178] ? __fget_files+0x2a/0x420 [ 93.959605][ T6178] ? __fget_files+0x3a0/0x420 [ 93.959631][ T6178] ? __fget_files+0x2a/0x420 [ 93.959661][ T6178] ? f2fs_sync_file+0xe9/0x160 [ 93.959690][ T6178] ? __pfx_f2fs_sync_file+0x10/0x10 [ 93.959715][ T6178] __x64_sys_fdatasync+0xb9/0x110 [ 93.959739][ T6178] do_syscall_64+0x14d/0xf80 [ 93.959764][ T6178] ? trace_irq_disable+0x3b/0x140 [ 93.959787][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.959807][ T6178] ? clear_bhb_loop+0x40/0x90 [ 93.959831][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.959851][ T6178] RIP: 0033:0x7f32be19c799 [ 93.959870][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.959886][ T6178] RSP: 002b:00007f32befbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 93.959908][ T6178] RAX: ffffffffffffffda RBX: 00007f32be415fa0 RCX: 00007f32be19c799 [ 93.959923][ T6178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 93.959935][ T6178] RBP: 00007f32be232c99 R08: 0000000000000000 R09: 0000000000000000 [ 93.959948][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.959961][ T6178] R13: 00007f32be416038 R14: 00007f32be415fa0 R15: 00007ffd7fdf0998 [ 93.960004][ T6178] [ 94.241425][ T6178] F2FS-fs (loop0): Stopped filesystem due to reason: 9 [ 94.302407][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 94.406506][ T6184] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.417946][ T6184] BTRFS info (device loop1): using sha256 checksum algorithm [ 94.489727][ T6010] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.498130][ T6010] usb 5-1: config 0 has no interface number 0 [ 94.504254][ T6010] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.515742][ T6010] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 94.526417][ T6010] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 94.538266][ T6010] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 94.549973][ T6010] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 94.563409][ T6010] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.576858][ T6010] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.586113][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.605362][ T6010] usb 5-1: config 0 descriptor?? [ 94.620084][ T6212] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.630750][ T6212] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.677172][ T6010] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.951004][ T6184] BTRFS error (device loop1): open_ctree failed: -4 [ 95.378668][ T5898] usb 5-1: USB disconnect, device number 2 [ 95.387230][ T6238] netlink: 'syz.1.81': attribute type 12 has an invalid length. [ 95.420109][ T5898] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 95.965824][ T6222] loop3: detected capacity change from 0 to 40427 [ 96.016780][ T6222] F2FS-fs: heap/no_heap options were deprecated [ 96.065130][ T6222] F2FS-fs (loop3): build fault injection rate: 19 [ 96.100089][ T6222] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 96.141771][ T6222] F2FS-fs (loop3): invalid crc value [ 96.180279][ T6250] loop4: detected capacity change from 0 to 64 [ 96.208102][ T6222] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 96.433464][ T6222] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 96.452925][ T6222] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 96.465081][ T6222] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.506493][ T6222] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060 [ 96.531728][ T29] audit: type=1804 audit(1774049704.766:4): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.83" name="/newroot/14/bus/file1" dev="loop4" ino=22 res=1 errno=0 [ 96.602237][ T29] audit: type=1800 audit(1774049704.836:5): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="file1" dev="loop3" ino=14 res=0 errno=0 [ 96.632845][ T6222] syz.3.80: attempt to access beyond end of device [ 96.632845][ T6222] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 96.753935][ T5850] syz-executor: attempt to access beyond end of device [ 96.753935][ T5850] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 96.798107][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 96.798135][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.798144][ T5850] Call Trace: [ 96.798151][ T5850] [ 96.798157][ T5850] dump_stack_lvl+0xe8/0x150 [ 96.798189][ T5850] f2fs_handle_critical_error+0x37c/0x540 [ 96.798231][ T5850] f2fs_write_end_io+0x1274/0x1740 [ 96.798271][ T5850] __submit_merged_bio+0x256/0x6a0 [ 96.798308][ T5850] __submit_merged_write_cond+0x3c9/0x4e0 [ 96.798342][ T5850] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 96.798390][ T5850] f2fs_write_data_pages+0x287e/0x34f0 [ 96.798417][ T5850] ? is_bpf_text_address+0x26/0x2b0 [ 96.798478][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.798520][ T5850] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.798575][ T5850] ? __lock_acquire+0x6b5/0x2cf0 [ 96.798615][ T5850] ? __lock_acquire+0x6b5/0x2cf0 [ 96.798647][ T5850] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.798681][ T5850] ? do_raw_spin_unlock+0xf5/0x210 [ 96.798703][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.798731][ T5850] do_writepages+0x32e/0x550 [ 96.798764][ T5850] ? do_raw_spin_unlock+0xf5/0x210 [ 96.798789][ T5850] filemap_fdatawrite+0x1e9/0x2f0 [ 96.798816][ T5850] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 96.798881][ T5850] ? do_raw_spin_unlock+0xf5/0x210 [ 96.798909][ T5850] f2fs_sync_dirty_inodes+0x30e/0x830 [ 96.798943][ T5850] f2fs_write_checkpoint+0x9df/0x26a0 [ 96.798961][ T5850] ? __lock_acquire+0x6b5/0x2cf0 [ 96.799017][ T5850] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 96.799088][ T5850] kill_f2fs_super+0x314/0x720 [ 96.799113][ T5850] ? __pfx_kill_f2fs_super+0x10/0x10 [ 96.799148][ T5850] ? lockdep_hardirqs_on+0x7a/0x110 [ 96.799186][ T5850] deactivate_locked_super+0xbc/0x130 [ 96.799225][ T5850] cleanup_mnt+0x437/0x4d0 [ 96.799244][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.799271][ T5850] task_work_run+0x1d9/0x270 [ 96.799299][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 96.799334][ T5850] exit_to_user_mode_loop+0xed/0x480 [ 96.799358][ T5850] ? rcu_is_watching+0x15/0xb0 [ 96.799382][ T5850] do_syscall_64+0x32d/0xf80 [ 96.799407][ T5850] ? trace_irq_disable+0x3b/0x140 [ 96.799428][ T5850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.799448][ T5850] ? clear_bhb_loop+0x40/0x90 [ 96.799471][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.799490][ T5850] RIP: 0033:0x7feee2d9d9d7 [ 96.799509][ T5850] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 96.799524][ T5850] RSP: 002b:00007ffd9fe095e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.799545][ T5850] RAX: 0000000000000000 RBX: 00007feee2e32050 RCX: 00007feee2d9d9d7 [ 96.799558][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9fe096a0 [ 96.799570][ T5850] RBP: 00007ffd9fe096a0 R08: 00007ffd9fe0a6a0 R09: 00000000ffffffff [ 96.799584][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9fe0a730 [ 96.799596][ T5850] R13: 00007feee2e32050 R14: 0000000000017985 R15: 00007ffd9fe0a770 [ 96.799627][ T5850] [ 96.799960][ T5850] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 97.122331][ T5929] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.278819][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 97.285785][ T5929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.296536][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.305571][ T5929] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 97.317352][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12645, setting to 64 [ 97.333700][ T5929] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.345260][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.372495][ T5929] hub 5-1:1.0: bad descriptor, ignoring hub [ 97.394469][ T5929] hub 5-1:1.0: probe with driver hub failed with error -5 [ 97.411216][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 97.423367][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 97.433702][ T5929] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 97.616789][ T6271] sctp: [Deprecated]: syz.3.85 (pid 6271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.616789][ T6271] Use struct sctp_sack_info instead [ 97.698687][ T5929] usb 5-1: USB disconnect, device number 3 [ 98.072898][ T6281] loop3: detected capacity change from 0 to 512 [ 98.152573][ T6281] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 98.186392][ T6281] System zones: 0-2, 18-18, 34-34 [ 98.276691][ T6281] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 98.277429][ T6282] mmap: syz.1.92 (6282) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.316270][ T6288] trusted_key: syz.2.95 sent an empty control message without MSG_MORE. [ 98.388003][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 98.394472][ C1] EXT4-fs (loop3): initial error at time 1774049706: ext4_mb_generate_buddy:1315 [ 98.403767][ C1] EXT4-fs (loop3): last error at time 1774049706: ext4_mb_generate_buddy:1315 [ 98.413381][ T6281] EXT4-fs (loop3): Remounting filesystem read-only [ 98.429218][ T6281] EXT4-fs (loop3): 1 truncate cleaned up [ 98.454246][ T3557] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.504519][ T6281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.520370][ T3557] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.557842][ T6281] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.570922][ T3557] Quota error (device loop3): write_blk: dquota write failed [ 98.596876][ T3557] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 98.617226][ T3557] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.646872][ T3557] Quota error (device loop3): write_blk: dquota write failed [ 98.661938][ T6292] loop0: detected capacity change from 0 to 512 [ 98.678573][ T3557] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 98.702505][ T3557] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 98.724143][ T6292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.737744][ T3557] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 98.793308][ T3557] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.812998][ T3557] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 98.839384][ T6292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.852823][ T6292] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.998132][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.046640][ T5850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.056191][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.169893][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 99.185335][ T5929] usb 3-1: config 0 has no interfaces? [ 99.211694][ T5929] usb 3-1: config 0 has no interfaces? [ 99.248464][ T5929] usb 3-1: config 0 has no interfaces? [ 99.260957][ T5929] usb 3-1: config 0 has no interfaces? [ 99.279772][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 99.304889][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.351147][ T5929] usb 3-1: config 0 descriptor?? [ 99.636653][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.102'. [ 100.298092][ T5920] usb 3-1: USB disconnect, device number 3 [ 100.630699][ T6344] loop1: detected capacity change from 0 to 512 [ 100.703010][ T6344] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #15: comm syz.1.113: corrupted inode contents [ 100.715767][ T6344] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.718642][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 100.734292][ C0] EXT4-fs (loop1): initial error at time 1774049708: ext4_do_update_inode:5572: inode 15 [ 100.744217][ C0] EXT4-fs (loop1): last error at time 1774049708: ext4_do_update_inode:5572: inode 15 [ 100.801647][ T6344] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 100.863629][ T6344] loop1: lost filesystem error report for type 5 error -117 [ 100.864116][ T6344] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #15: comm syz.1.113: corrupted inode contents [ 100.919309][ T6344] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.919755][ T6344] EXT4-fs error (device loop1): ext4_evict_inode:303: inode #15: comm syz.1.113: mark_inode_dirty error [ 100.972611][ T6344] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.973208][ T6344] EXT4-fs (loop1): 1 orphan inode deleted [ 101.054152][ T6344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.125495][ T6344] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.450862][ T6368] capability: warning: `syz.3.120' uses 32-bit capabilities (legacy support in use) [ 101.765430][ T6376] process 'syz.1.124' launched './file1' with NULL argv: empty string added [ 101.847002][ T6364] loop2: detected capacity change from 0 to 32768 [ 101.867031][ T6364] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.118 (6364) [ 101.998072][ T6364] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.034549][ T6364] BTRFS info (device loop2): using crc32c checksum algorithm [ 102.268867][ T6364] BTRFS info (device loop2): enabling ssd optimizations [ 102.316153][ T6364] BTRFS info (device loop2): turning on flush-on-commit [ 102.338134][ T6364] BTRFS info (device loop2): enabling free space tree [ 102.363077][ T6364] BTRFS info (device loop2): enabling auto defrag [ 102.392773][ T6364] BTRFS info (device loop2): use lzo compression, level 1 [ 102.424911][ T6364] BTRFS info (device loop2): max_inline set to 4096 [ 102.542654][ T6378] loop0: detected capacity change from 0 to 32768 [ 102.612607][ T6378] BTRFS info: device /dev/loop0 (7:0) using temp-fsid d0ac9a3c-e255-4a49-95f5-23709e5a38dc [ 102.646383][ T6378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.125 (6378) [ 102.705429][ T6378] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.767313][ T6378] BTRFS info (device loop0): using crc32c checksum algorithm [ 103.053957][ T6378] BTRFS info (device loop0): enabling ssd optimizations [ 103.118926][ T6378] BTRFS info (device loop0): turning on flush-on-commit [ 103.146668][ T6378] BTRFS info (device loop0): enabling free space tree [ 103.165743][ T6378] BTRFS info (device loop0): enabling auto defrag [ 103.183573][ T6378] BTRFS info (device loop0): use lzo compression, level 1 [ 103.205581][ T6378] BTRFS info (device loop0): max_inline set to 4096 [ 103.710356][ T5847] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.808100][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.860532][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.022846][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 104.048589][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.079145][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.104677][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.121128][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.132255][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 104.141679][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.152312][ T5929] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.163928][ T5929] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 104.195194][ T5838] BTRFS info (device loop0): last unmount of filesystem d0ac9a3c-e255-4a49-95f5-23709e5a38dc [ 104.199150][ T10] usb 5-1: config 0 descriptor?? [ 104.219245][ T5929] usb 2-1: Manufacturer: syz [ 104.279827][ T5929] usb 2-1: config 0 descriptor?? [ 104.618529][ T6445] capability: warning: `syz.2.141' uses deprecated v2 capabilities in a way that may be insecure [ 104.682445][ T10] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 104.702734][ T10] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 104.717784][ T6445] overlayfs: upper fs does not support file handles, falling back to index=off. [ 104.839301][ T6445] evm: overlay not supported [ 104.870353][ T10] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 105.067179][ T10] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 105.268595][ T10] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 105.340508][ T5929] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input8 [ 105.481974][ T10] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 105.500503][ T5929] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 105.554475][ T5929] usb 2-1: USB disconnect, device number 3 [ 105.636706][ T10] usb 5-1: USB disconnect, device number 4 [ 105.662650][ T5920] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 105.841280][ T5920] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 105.857294][ T5920] usb 1-1: config 2 has no interface number 0 [ 105.870300][ T5920] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 105.883903][ T5920] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 105.885408][ T6474] fido_id[6474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 105.895635][ T5920] usb 1-1: config 2 interface 88 has no altsetting 0 [ 105.975744][ T5920] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 105.990050][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.007786][ T5920] usb 1-1: Product: syz [ 106.012675][ T5920] usb 1-1: Manufacturer: syz [ 106.020161][ T5920] usb 1-1: SerialNumber: syz [ 106.059872][ T6469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.075413][ T6469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.323221][ T6469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.352357][ T6469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.414977][ T6488] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 106.747883][ T6490] bond1: (slave geneve2): making interface the new active one [ 106.785845][ T6490] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.802829][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 106.835179][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 106.857336][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 106.872856][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.006188][ T6500] warning: `syz.3.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.375384][ T5920] asix 1-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 107.408083][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.578096][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 107.584653][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.594408][ T10] usb 5-1: config 0 has no interface number 0 [ 107.602360][ T5920] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 107.612801][ T5920] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 107.624473][ T5920] asix 1-1:2.88: probe with driver asix failed with error -71 [ 107.633736][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 107.643019][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.657817][ T10] usb 5-1: Product: syz [ 107.662536][ T5920] usb 1-1: USB disconnect, device number 3 [ 107.669569][ T10] usb 5-1: Manufacturer: syz [ 107.680492][ T10] usb 5-1: SerialNumber: syz [ 107.692072][ T10] usb 5-1: config 0 descriptor?? [ 107.701357][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 107.823714][ T6516] loop3: detected capacity change from 0 to 128 [ 108.690466][ T5929] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.883472][ T5929] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.914074][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.935779][ T5929] usb 1-1: Product: syz [ 108.949025][ T5929] usb 1-1: Manufacturer: syz [ 108.956526][ T5929] usb 1-1: SerialNumber: syz [ 108.968338][ T5929] usb 1-1: config 0 descriptor?? [ 109.021667][ T6546] netlink: 172 bytes leftover after parsing attributes in process `syz.3.175'. [ 109.127020][ T10] gspca_spca1528: reg_w err -71 [ 109.144266][ T10] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 109.172223][ T10] usb 5-1: USB disconnect, device number 5 [ 109.197307][ T5929] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.269587][ T6553] syz.3.178 uses obsolete (PF_INET,SOCK_PACKET) [ 109.356730][ T5898] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.393882][ T5898] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.629133][ T6561] kvm: emulating exchange as write [ 109.652462][ T6560] overlay: filesystem on ./file1 not supported [ 110.017643][ T5929] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 110.072021][ T5929] usb 1-1: USB disconnect, device number 4 [ 110.376973][ T6586] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.455233][ T6627] loop3: detected capacity change from 0 to 2048 [ 111.537685][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.167890][ T5850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.187385][ T6651] loop1: detected capacity change from 0 to 4096 [ 113.348902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.116931][ T29] audit: type=1326 audit(1774049722.356:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f8799c799 code=0x0 [ 114.738116][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.910399][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 114.930019][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.948352][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.967281][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.976506][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.010492][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.028656][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.058231][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.076431][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.097349][ T10] usb 2-1: config 0 descriptor?? [ 115.120111][ T6703] loop2: detected capacity change from 0 to 512 [ 115.129720][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.148330][ T6703] EXT4-fs: Ignoring removed orlov option [ 115.193138][ T6703] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.205961][ T6703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.251723][ T6703] EXT4-fs (loop2): 1 truncate cleaned up [ 115.264787][ T6703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.312504][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.325184][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.336454][ T5898] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 115.352643][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.361984][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.382477][ T10] usb 2-1: USB disconnect, device number 4 [ 115.408276][ T5898] usb 4-1: config 0 descriptor?? [ 115.450980][ T10] usblp0: removed [ 115.459520][ T6703] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 115.519787][ T6708] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 115.544388][ T6703] EXT4-fs (loop2): shut down requested (1) [ 115.651504][ T6708] overlayfs: upper fs does not support tmpfile. [ 115.820489][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.868070][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.038266][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.059295][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 116.071039][ T5898] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71 [ 116.090063][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.113445][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.139013][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.154996][ T5898] usb 4-1: USB disconnect, device number 2 [ 116.168890][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.202410][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.222246][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 116.224808][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.240554][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.262902][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.284911][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.288992][ T10] usb 2-1: config 0 descriptor?? [ 116.301246][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.316407][ T6709] loop4: detected capacity change from 0 to 32768 [ 116.323688][ T5906] usb 1-1: Product: syz [ 116.329194][ T5906] usb 1-1: Manufacturer: syz [ 116.335105][ T6709] btrfs: Deprecated parameter 'usebackuproot' [ 116.343552][ T5906] usb 1-1: SerialNumber: syz [ 116.349990][ T6709] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.365261][ T5906] usb 1-1: config 0 descriptor?? [ 116.379521][ T6709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.232 (6709) [ 116.412391][ T6709] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.433785][ T6709] BTRFS info (device loop4): using crc32c checksum algorithm [ 116.492207][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 116.523787][ T6709] BTRFS error (device loop4): failed to load root extent [ 116.533069][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.541253][ T6709] BTRFS warning (device loop4): try to load backup roots slot 1 [ 116.569703][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 116.596342][ T6709] BTRFS warning (device loop4): couldn't read tree root [ 116.609092][ T5906] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 116.621201][ T6709] BTRFS warning (device loop4): try to load backup roots slot 2 [ 116.639598][ T12] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 116.660268][ T6709] BTRFS warning (device loop4): couldn't read tree root [ 116.693419][ T6709] BTRFS warning (device loop4): try to load backup roots slot 3 [ 116.731093][ T10] usb 2-1: USB disconnect, device number 5 [ 116.764548][ T6709] BTRFS info (device loop4): rebuilding free space tree [ 116.765934][ T10] usblp0: removed [ 116.973790][ T6709] BTRFS info (device loop4): checking UUID tree [ 116.988993][ T6709] BTRFS info (device loop4): enabling ssd optimizations [ 117.007671][ T6709] BTRFS info (device loop4): turning on async discard [ 117.026522][ T6709] BTRFS info (device loop4): enabling free space tree [ 117.044774][ T6709] BTRFS info (device loop4): force clearing of disk cache [ 117.053973][ T6709] BTRFS info (device loop4): enabling auto defrag [ 117.072377][ T6709] BTRFS info (device loop4): trying to use backup root at mount time [ 117.089995][ T6709] BTRFS info (device loop4): use zstd compression, level 3 [ 117.387368][ T5853] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.813056][ T6737] loop3: detected capacity change from 0 to 32768 [ 117.822750][ T6737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.236 (6737) [ 117.846957][ T5906] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 117.896082][ T6737] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.913411][ T6737] BTRFS info (device loop3): using crc32c checksum algorithm [ 117.919125][ T5906] usb 1-1: USB disconnect, device number 5 [ 117.924958][ T6737] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 117.990074][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 118.032737][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 118.060594][ T6752] ceph: No mds server is up or the cluster is laggy [ 118.109148][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 118.139359][ T6737] BTRFS info (device loop3): rebuilding free space tree [ 118.158288][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 118.257658][ T6737] BTRFS info (device loop3): disabling free space tree [ 118.275911][ T6737] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.289344][ T6737] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.337381][ T6737] BTRFS info (device loop3): enabling ssd optimizations [ 118.358472][ T6737] BTRFS info (device loop3): turning off barriers [ 118.370825][ T6737] BTRFS info (device loop3): enabling disk space caching [ 118.400195][ T6737] BTRFS info (device loop3): force clearing of disk cache [ 118.438030][ T6737] BTRFS info (device loop3): force lzo compression, level 1 [ 118.478605][ T6737] BTRFS info (device loop3): max_inline set to 0 [ 118.624884][ T6780] loop0: detected capacity change from 0 to 512 [ 118.655947][ T6780] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.727380][ T6780] EXT4-fs (loop0): 1 truncate cleaned up [ 118.807777][ T6780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.156573][ T6780] loop0: detected capacity change from 512 to 0 [ 119.181167][ T6795] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.246: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 119.185083][ T6760] loop4: detected capacity change from 0 to 32768 [ 119.274670][ T6760] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.292869][ T6795] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.309647][ T6795] EXT4-fs (loop0): I/O error while writing superblock [ 119.319815][ T6795] EXT4-fs error (device loop0): ext4_get_inode_loc:4923: inode #2: block 5: comm syz.0.246: unable to read itable block [ 119.340087][ T6795] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.348900][ T6795] EXT4-fs (loop0): I/O error while writing superblock [ 119.359301][ T6795] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6249: IO failure [ 119.368663][ T6795] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.377225][ T6795] EXT4-fs (loop0): I/O error while writing superblock [ 119.385364][ T6795] EXT4-fs error (device loop0): ext4_dirty_inode:6453: inode #2: comm syz.0.246: mark_inode_dirty error [ 119.413921][ T5850] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.419491][ T6795] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.434769][ T6795] EXT4-fs (loop0): I/O error while writing superblock [ 119.584972][ T6760] XFS (loop4): Ending clean mount [ 119.591518][ T5838] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 119.640947][ T5838] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.663018][ T6760] XFS (loop4): Quotacheck needed: Please wait. [ 119.673750][ T5838] EXT4-fs (loop0): I/O error while writing superblock [ 119.766880][ T58] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4908: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 119.810697][ T29] audit: type=1326 audit(1774049728.036:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8799c799 code=0x7fc00000 [ 119.867286][ T6760] XFS (loop4): Quotacheck: Done. [ 119.869703][ T58] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.880880][ T58] EXT4-fs (loop0): I/O error while writing superblock [ 119.917934][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.934968][ T5838] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 119.944148][ T5838] EXT4-fs (loop0): I/O error while writing superblock [ 120.075880][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.086835][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.383267][ T5853] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.427437][ T6825] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 120.525699][ T6826] loop2: detected capacity change from 0 to 128 [ 120.628800][ T6826] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 120.675269][ T6826] hpfs: filesystem error: improperly stopped [ 120.726725][ T6826] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 120.748120][ T6826] hpfs: You really don't want any checks? You are crazy... [ 120.782157][ T6826] hpfs: Code page index out of array [ 120.808276][ T6826] hpfs: code page support is disabled [ 120.824772][ T6826] hpfs: hpfs_map_4sectors(): unaligned read [ 120.838934][ T6826] hpfs: hpfs_map_4sectors(): unaligned read [ 120.856640][ T6826] hpfs: filesystem error: unable to find root dir [ 120.946374][ T6825] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.172429][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.317673][ T6836] loop2: detected capacity change from 0 to 128 [ 121.370376][ T6836] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.390085][ T6839] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 121.425586][ T6836] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.483196][ T6836] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.497692][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.511826][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.520749][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.531307][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.539285][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.639913][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.703799][ T6845] bond1: entered allmulticast mode [ 121.710518][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.856729][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.136296][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.148995][ T6841] loop1: detected capacity change from 0 to 32768 [ 122.162395][ T6841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.265 (6841) [ 122.216938][ T6841] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.241606][ T6841] BTRFS info (device loop1): using crc32c checksum algorithm [ 122.447123][ T6841] BTRFS info (device loop1): enabling ssd optimizations [ 122.455299][ T6841] BTRFS info (device loop1): turning on flush-on-commit [ 122.462447][ T6841] BTRFS info (device loop1): enabling free space tree [ 122.469501][ T6841] BTRFS info (device loop1): enabling auto defrag [ 122.476104][ T6841] BTRFS info (device loop1): use lzo compression, level 1 [ 122.484998][ T6841] BTRFS info (device loop1): max_inline set to 4096 [ 122.530435][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.487745][ T5842] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.628369][ T51] Bluetooth: hci0: command tx timeout [ 124.111255][ T58] bridge_slave_1: left allmulticast mode [ 124.140181][ T58] bridge_slave_1: left promiscuous mode [ 124.157682][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.213847][ T58] bridge_slave_0: left allmulticast mode [ 124.236381][ T58] bridge_slave_0: left promiscuous mode [ 124.268395][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.532086][ T6917] loop1: detected capacity change from 0 to 128 [ 124.719490][ T6917] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.800363][ T6917] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.979732][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.158333][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 125.169981][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 125.207504][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.234222][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.257261][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.274480][ T10] usb 3-1: Product: syz [ 125.285426][ T5842] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.286455][ T10] usb 3-1: Manufacturer: syz [ 125.321497][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.347023][ T10] usb 3-1: SerialNumber: syz [ 125.376362][ T10] usb 3-1: config 0 descriptor?? [ 125.386225][ T58] bond0 (unregistering): Released all slaves [ 125.402574][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 125.431444][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 125.432462][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 125.705773][ T51] Bluetooth: hci0: command tx timeout [ 126.015654][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 126.498810][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.525282][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.546174][ T6840] bridge_slave_0: entered allmulticast mode [ 126.568361][ T6840] bridge_slave_0: entered promiscuous mode [ 126.800465][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.828393][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.844906][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 126.860113][ T6840] bridge_slave_1: entered allmulticast mode [ 126.881870][ T6840] bridge_slave_1: entered promiscuous mode [ 126.903002][ T10] em28xx 3-1:0.0: board has no eeprom [ 126.993335][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 127.010295][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 127.039374][ T5929] em28xx 3-1:0.0: Binding DVB extension [ 127.097139][ T10] usb 3-1: USB disconnect, device number 4 [ 127.140270][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 127.161060][ T58] hsr_slave_0: left promiscuous mode [ 127.187191][ T58] hsr_slave_1: left promiscuous mode [ 127.201220][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.232275][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.258608][ T5929] em28xx 3-1:0.0: Registering input extension [ 127.269937][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.283547][ T10] em28xx 3-1:0.0: Closing input extension [ 127.291148][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.359970][ T58] veth1_macvtap: left promiscuous mode [ 127.385205][ T58] veth0_macvtap: left promiscuous mode [ 127.405300][ T58] veth1_vlan: left promiscuous mode [ 127.430491][ T58] veth0_vlan: left promiscuous mode [ 127.549819][ T10] em28xx 3-1:0.0: Freeing device [ 127.778738][ T51] Bluetooth: hci0: command tx timeout [ 128.373935][ T58] team0 (unregistering): Port device team_slave_1 removed [ 128.413776][ T58] team0 (unregistering): Port device team_slave_0 removed [ 128.543350][ T29] audit: type=1800 audit(1774049736.786:8): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.299" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 128.683754][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.700413][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.786585][ T6840] team0: Port device team_slave_0 added [ 128.832608][ T6840] team0: Port device team_slave_1 added [ 128.881791][ T5906] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 128.914580][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.921683][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.960731][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.996593][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.003979][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.038046][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.097606][ T5906] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.141084][ T5906] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.182787][ T5906] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.200557][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.302280][ T6840] hsr_slave_0: entered promiscuous mode [ 129.320932][ T6840] hsr_slave_1: entered promiscuous mode [ 129.336725][ T6840] debugfs: 'hsr0' already exists in 'hsr' [ 129.353192][ T6840] Cannot create hsr debugfs directory [ 129.438183][ T5906] usb 4-1: usb_control_msg returned -32 [ 129.450743][ T5906] usbtmc 4-1:16.0: can't read capabilities [ 129.544118][ T7001] loop1: detected capacity change from 0 to 4096 [ 129.868093][ T5839] Bluetooth: hci0: command tx timeout [ 130.019906][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 130.020759][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.610420][ T6840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.616201][ T7025] loop4: detected capacity change from 0 to 128 [ 130.641580][ T6840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.661332][ T6840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.741265][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.753269][ T6840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.908058][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 130.917181][ T47] usb 2-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 130.955443][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.975331][ T47] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.028998][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.051498][ T47] usb 2-1: Product: syz [ 131.084602][ T47] usb 2-1: Manufacturer: syz [ 131.092500][ T47] usb 2-1: SerialNumber: syz [ 131.127121][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 131.142653][ T47] usb 2-1: 0:2 : does not exist [ 131.280444][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.374300][ T47] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 131.448999][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.462596][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.650795][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.708131][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.715628][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.718410][ T6010] usb 4-1: USB disconnect, device number 3 [ 131.867664][ T47] usb 2-1: USB disconnect, device number 6 [ 131.921671][ T7055] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.315'. [ 132.062318][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.129387][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.311053][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.326525][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.346767][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.370232][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.379349][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.413592][ T7075] loop1: detected capacity change from 0 to 2048 [ 132.433159][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.459526][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.466790][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.524595][ T7075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.652140][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.689213][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.830869][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834051][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.849431][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.873859][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.007899][ T7068] syzkaller0: entered promiscuous mode [ 133.014131][ T7068] syzkaller0: entered allmulticast mode [ 133.024925][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.369115][ T7093] loop1: detected capacity change from 0 to 256 [ 133.507045][ T7093] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 133.564548][ T29] audit: type=1800 audit(1774049741.806:9): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 134.421986][ T5839] Bluetooth: hci2: command tx timeout [ 136.499499][ T5839] Bluetooth: hci2: command tx timeout [ 136.593058][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 136.807234][ T7107] loop4: detected capacity change from 0 to 32768 [ 136.828618][ T7107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.329 (7107) [ 136.868798][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.899384][ T7107] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.938101][ T7107] BTRFS info (device loop4): using crc32c checksum algorithm [ 137.046907][ T7107] BTRFS info (device loop4): enabling ssd optimizations [ 137.049607][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 137.065222][ T7107] BTRFS info (device loop4): turning on flush-on-commit [ 137.085459][ T7107] BTRFS info (device loop4): enabling free space tree [ 137.098468][ T7107] BTRFS info (device loop4): enabling auto defrag [ 137.108628][ T7105] loop1: detected capacity change from 0 to 40427 [ 137.116088][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.131847][ T7107] BTRFS info (device loop4): use lzo compression, level 1 [ 137.153925][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.171958][ T7105] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 137.180128][ T135] bridge_slave_1: left allmulticast mode [ 137.185986][ T7107] BTRFS info (device loop4): max_inline set to 4096 [ 137.196323][ T135] bridge_slave_1: left promiscuous mode [ 137.204423][ T7105] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 137.215028][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.235703][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.265804][ T7105] F2FS-fs (loop1): invalid crc value [ 137.268857][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.283027][ T135] bridge_slave_0: left allmulticast mode [ 137.292592][ T135] bridge_slave_0: left promiscuous mode [ 137.301722][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.337788][ T5898] usb 4-1: config 0 descriptor?? [ 137.367574][ T5898] hub 4-1:0.0: USB hub found [ 137.486985][ T7105] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.541879][ T7105] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 137.558415][ T7105] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.571529][ T5898] hub 4-1:0.0: 6 ports detected [ 137.592283][ T5898] hub 4-1:0.0: insufficient power available to use all downstream ports [ 137.632501][ T5853] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.063167][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.093468][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.112053][ T135] bond0 (unregistering): Released all slaves [ 138.581273][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.583207][ T51] Bluetooth: hci2: command tx timeout [ 138.606707][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.669257][ T5898] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 138.696669][ T5898] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 138.753023][ T5898] usbhid 4-1:0.0: can't add hid device: -32 [ 138.804980][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 138.901488][ T5898] usb 4-1: USB disconnect, device number 4 [ 138.951244][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 139.171714][ T135] hsr_slave_0: left promiscuous mode [ 139.185054][ T135] hsr_slave_1: left promiscuous mode [ 139.199552][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.214965][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.245194][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.258161][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.327303][ T135] veth1_macvtap: left promiscuous mode [ 139.359586][ T135] veth0_macvtap: left promiscuous mode [ 139.369549][ T135] veth1_vlan: left promiscuous mode [ 139.389998][ T135] veth0_vlan: left promiscuous mode [ 140.122368][ T7170] loop1: detected capacity change from 0 to 256 [ 140.159702][ T7170] exfat: Deprecated parameter 'utf8' [ 140.200234][ T7170] exfat: Deprecated parameter 'utf8' [ 140.242987][ T7170] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 140.522277][ T135] team0 (unregistering): Port device team_slave_1 removed [ 140.565265][ T135] team0 (unregistering): Port device team_slave_0 removed [ 140.659013][ T5839] Bluetooth: hci2: command tx timeout [ 141.225616][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.243423][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.264427][ T7065] bridge_slave_0: entered allmulticast mode [ 141.288234][ T7065] bridge_slave_0: entered promiscuous mode [ 141.314073][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.340344][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.367158][ T7065] bridge_slave_1: entered allmulticast mode [ 141.391948][ T7065] bridge_slave_1: entered promiscuous mode [ 141.545157][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 141.581578][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.680374][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.863592][ T7180] loop1: detected capacity change from 0 to 32768 [ 141.865859][ T7065] team0: Port device team_slave_0 added [ 141.943485][ T7065] team0: Port device team_slave_1 added [ 141.974399][ T7180] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.246732][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.264098][ T7180] XFS (loop1): Ending clean mount [ 142.292460][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.388047][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.486531][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.559409][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.796053][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.876191][ T6840] veth0_vlan: entered promiscuous mode [ 142.920555][ T5842] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.007684][ T6840] veth1_vlan: entered promiscuous mode [ 143.095182][ T7065] hsr_slave_0: entered promiscuous mode [ 143.128261][ T7065] hsr_slave_1: entered promiscuous mode [ 143.169662][ T7257] loop4: detected capacity change from 0 to 4096 [ 143.171245][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 143.221508][ T7065] Cannot create hsr debugfs directory [ 143.267646][ T7257] EXT4-fs (loop4): Test dummy encryption mode enabled [ 143.315408][ T7257] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 143.377910][ T7257] System zones: 0-5 [ 143.489496][ T7257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.897663][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.987153][ T6840] veth0_macvtap: entered promiscuous mode [ 144.146362][ T6840] veth1_macvtap: entered promiscuous mode [ 144.396364][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.424646][ T7065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.433718][ T7269] loop3: detected capacity change from 0 to 32768 [ 144.452881][ T7065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.471938][ T7269] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.345 (7269) [ 144.519170][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.537679][ T7065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.573248][ T7269] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.584097][ T7269] BTRFS info (device loop3): using crc32c checksum algorithm [ 144.664479][ T7065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.711434][ T7248] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.753088][ T7269] BTRFS info (device loop3): enabling ssd optimizations [ 144.763960][ T7248] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.795513][ T7248] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.806448][ T7269] BTRFS info (device loop3): turning on flush-on-commit [ 144.837482][ T7269] BTRFS info (device loop3): enabling free space tree [ 144.864788][ T7269] BTRFS info (device loop3): enabling auto defrag [ 144.877790][ T3513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.903636][ T7269] BTRFS info (device loop3): use lzo compression, level 1 [ 144.924488][ T7269] BTRFS info (device loop3): max_inline set to 4096 [ 145.359745][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.396545][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.506301][ T5850] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.612508][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.723680][ T7248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.777515][ T7248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.828238][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.931937][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.939287][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.049627][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.056859][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.403397][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.876604][ T7374] loop5: detected capacity change from 0 to 128 [ 148.019840][ T7374] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.103694][ T7374] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.284142][ T7065] veth0_vlan: entered promiscuous mode [ 148.386853][ T7065] veth1_vlan: entered promiscuous mode [ 148.438677][ T6840] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.724725][ T7065] veth0_macvtap: entered promiscuous mode [ 148.793535][ T7065] veth1_macvtap: entered promiscuous mode [ 148.961569][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.099298][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.173190][ T7236] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.207426][ T7236] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.250146][ T7236] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.282655][ T7236] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.409001][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.590129][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 149.612255][ T7236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.623140][ T5933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.644811][ T7236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.645457][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.677836][ T5933] usb 5-1: config 0 descriptor?? [ 149.721385][ T5933] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 149.759861][ T7243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.794624][ T7243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.919487][ T7392] loop5: detected capacity change from 0 to 32768 [ 149.976669][ T7392] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.104512][ T7392] XFS (loop5): Ending clean mount [ 150.587676][ T6840] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.651904][ T5929] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 150.860421][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.882652][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 150.902949][ T5929] usb 4-1: can't read configurations, error -71 [ 152.200569][ T5898] usb 5-1: USB disconnect, device number 6 [ 152.800351][ T5929] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.958248][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 152.961440][ T7451] loop4: detected capacity change from 0 to 32768 [ 152.967826][ T5929] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.986832][ T5929] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.020309][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.058611][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.064808][ T7451] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.100707][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.132414][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.204789][ T5929] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.259641][ T7451] XFS (loop4): Ending clean mount [ 153.279000][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.327858][ T5929] usb 4-1: config 0 descriptor?? [ 153.399604][ T7451] XFS (loop4): Quotacheck needed: Please wait. [ 153.472625][ T7451] XFS (loop4): Quotacheck: Done. [ 153.581824][ T5929] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 153.642102][ T5929] usb 4-1: USB disconnect, device number 7 [ 153.684152][ T5929] usblp0: removed [ 154.060947][ T5853] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.129306][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.301980][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 154.347187][ T5929] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.377828][ T5929] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.405254][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.442786][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.453432][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.464000][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.480361][ T5929] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.523174][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.577691][ T5929] usb 4-1: config 0 descriptor?? [ 154.851566][ T5929] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.988080][ T5906] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.063357][ T7513] loop1: detected capacity change from 0 to 128 [ 155.158329][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 155.208030][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.238157][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 155.263142][ T5906] usb 5-1: can't read configurations, error -71 [ 155.301262][ T29] audit: type=1800 audit(1774049763.536:10): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.393" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 155.342109][ T7515] usblp0:failed reading printer status (-32) [ 155.374871][ T6010] usb 4-1: USB disconnect, device number 8 [ 155.403444][ T6010] usblp0: removed [ 155.917048][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.400'. [ 156.484579][ T7548] loop3: detected capacity change from 0 to 32768 [ 156.491960][ T7548] btrfs: Deprecated parameter 'usebackuproot' [ 156.501431][ T7548] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 156.525693][ T7548] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.403 (7548) [ 156.552746][ T7548] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.564739][ T7548] BTRFS info (device loop3): using crc32c checksum algorithm [ 156.824472][ T7548] BTRFS info (device loop3): rebuilding free space tree [ 156.936407][ T7548] BTRFS info (device loop3): enabling ssd optimizations [ 156.944069][ T7548] BTRFS info (device loop3): using spread ssd allocation scheme [ 156.951853][ T7548] BTRFS info (device loop3): turning on flush-on-commit [ 156.958856][ T7548] BTRFS info (device loop3): enabling free space tree [ 156.965642][ T7548] BTRFS info (device loop3): force clearing of disk cache [ 156.972825][ T7548] BTRFS info (device loop3): trying to use backup root at mount time [ 156.980988][ T7548] BTRFS info (device loop3): force zlib compression, level 3 [ 157.058617][ T7575] loop6: detected capacity change from 0 to 1024 [ 157.087134][ T7575] EXT4-fs: inline encryption not supported [ 157.141078][ T29] audit: type=1800 audit(1774049765.386:11): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 157.319767][ T5898] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 157.339706][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.406827][ T7575] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.426561][ T29] audit: type=1800 audit(1774049765.666:12): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.404" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 157.471469][ T7575] EXT4-fs error (device loop6): ext4_map_blocks:821: inode #15: block 3: comm syz.6.404: lblock 3 mapped to illegal pblock 3 (length 3) [ 157.535771][ T7575] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 157.545551][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 157.601073][ T7575] EXT4-fs (loop6): This should not happen!! Data will be lost [ 157.601073][ T7575] [ 157.614042][ T5898] usb 5-1: can't read configurations, error -71 [ 157.633704][ T7575] EXT4-fs error (device loop6): ext4_map_blocks:821: inode #15: comm syz.6.404: lblock 0 mapped to illegal pblock 0 (length 3) [ 157.713377][ T7575] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 157.748036][ T7583] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 157.762514][ T7575] EXT4-fs (loop6): This should not happen!! Data will be lost [ 157.762514][ T7575] [ 157.789421][ T5850] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.912859][ T7240] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117 [ 158.009776][ T7240] EXT4-fs (loop6): This should not happen!! Data will be lost [ 158.009776][ T7240] [ 158.086079][ T7065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.642295][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.818401][ T5898] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 158.850061][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 158.876336][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 158.896875][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.919232][ T5906] usb 4-1: Product: syz [ 158.941994][ T5906] usb 4-1: Manufacturer: syz [ 158.952534][ T5906] usb 4-1: SerialNumber: syz [ 158.976459][ T5906] usb 4-1: config 0 descriptor?? [ 158.991373][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.015706][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.036866][ T5898] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 159.046719][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.073795][ T5898] usb 6-1: config 0 descriptor?? [ 159.225120][ T5906] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.455994][ T5906] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 159.487831][ T5906] usb 4-1: USB disconnect, device number 9 [ 159.543928][ T5898] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 159.572566][ T5898] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 159.581332][ T5898] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 159.589546][ T5898] isku 0003:1E7D:319C.0006: unknown main item tag 0x1 [ 159.596814][ T5898] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 159.603957][ T5898] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 159.611854][ T5898] isku 0003:1E7D:319C.0006: item fetching failed at offset 6/7 [ 159.620855][ T5898] isku 0003:1E7D:319C.0006: parse failed [ 159.627067][ T5898] isku 0003:1E7D:319C.0006: probe with driver isku failed with error -22 [ 160.224199][ T7628] netlink: 180 bytes leftover after parsing attributes in process `syz.4.422'. [ 160.233397][ T7628] netlink: 'syz.4.422': attribute type 2 has an invalid length. [ 160.244819][ T7628] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 160.598043][ T5906] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.793175][ T7638] batadv_slave_1: entered promiscuous mode [ 160.804224][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 160.810228][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.813927][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.840301][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.858102][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.878026][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.899310][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.940853][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.952556][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.982705][ T5906] usb 4-1: config 0 descriptor?? [ 161.049125][ T7637] batadv_slave_1: left promiscuous mode [ 161.523591][ T5906] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.591018][ T47] usb 6-1: USB disconnect, device number 2 [ 161.758361][ T5898] usb 4-1: USB disconnect, device number 10 [ 161.774663][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.429'. [ 161.793467][ T7643] fido_id[7643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 161.811353][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.429'. [ 162.584448][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.435'. [ 162.619789][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.435'. [ 162.933474][ T7679] loop4: detected capacity change from 0 to 256 [ 162.973180][ T7679] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 164.300187][ T7730] loop5: detected capacity change from 0 to 64 [ 164.667143][ T7730] syz.5.454: attempt to access beyond end of device [ 164.667143][ T7730] loop5: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 164.770166][ T7730] syz.5.454: attempt to access beyond end of device [ 164.770166][ T7730] loop5: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 164.823639][ T7616] Set syz1 is full, maxelem 65536 reached [ 164.854949][ T7730] syz.5.454: attempt to access beyond end of device [ 164.854949][ T7730] loop5: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 164.967424][ T7730] syz.5.454: attempt to access beyond end of device [ 164.967424][ T7730] loop5: rw=34817, sector=171, nr_sectors = 1 limit=64 [ 165.340623][ T7737] loop3: detected capacity change from 0 to 131072 [ 165.353616][ T7737] F2FS-fs (loop3): Test dummy encryption mode enabled [ 165.373131][ T7737] F2FS-fs (loop3): invalid crc value [ 165.552360][ T7737] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 165.563858][ T7737] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.631996][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 165.692262][ T47] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.532824][ T7776] loop4: detected capacity change from 0 to 4096 [ 166.560632][ T7776] EXT4-fs: Ignoring removed nobh option [ 166.580406][ T7776] EXT4-fs: Ignoring removed orlov option [ 166.606631][ T7776] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.630734][ T7776] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 166.787655][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.011251][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.246099][ T7803] loop4: detected capacity change from 0 to 128 [ 167.285180][ T7803] EXT4-fs (loop4): Test dummy encryption mode enabled [ 167.331945][ T7803] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.419460][ T7803] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.728206][ T5853] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.811691][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 167.856087][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.977533][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.138114][ T5933] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 168.278317][ T7797] loop5: detected capacity change from 0 to 40427 [ 168.307857][ T7797] F2FS-fs (loop5): build fault injection rate: 174 [ 168.315795][ T5933] usb 7-1: Using ep0 maxpacket: 16 [ 168.328052][ T5933] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.341273][ T7797] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 168.354486][ T5933] usb 7-1: config 0 interface 0 has no altsetting 0 [ 168.362354][ T5933] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 168.377139][ T7797] F2FS-fs (loop5): invalid crc value [ 168.394807][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.776785][ T7797] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.883473][ T7797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 169.187356][ T7846] f2fs_printk: 3 callbacks suppressed [ 169.195535][ T7846] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90 [ 169.237405][ T7846] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 169.321195][ T7836] loop1: detected capacity change from 0 to 131072 [ 169.322421][ T7797] syz.5.470: attempt to access beyond end of device [ 169.322421][ T7797] loop5: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 169.344126][ T5933] usb 7-1: config 0 descriptor?? [ 169.355326][ T7836] F2FS-fs (loop1): invalid crc value [ 169.477393][ T7836] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 169.490737][ T7836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 169.521753][ T6840] syz-executor: attempt to access beyond end of device [ 169.521753][ T6840] loop5: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 169.556105][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 169.556142][ T6840] Tainted: [L]=SOFTLOCKUP [ 169.556149][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.556161][ T6840] Call Trace: [ 169.556168][ T6840] [ 169.556178][ T6840] dump_stack_lvl+0xe8/0x150 [ 169.556215][ T6840] f2fs_handle_critical_error+0x37c/0x540 [ 169.556251][ T6840] f2fs_write_end_io+0x1274/0x1740 [ 169.556296][ T6840] __submit_merged_bio+0x256/0x6a0 [ 169.556330][ T6840] __submit_merged_write_cond+0x3c9/0x4e0 [ 169.556363][ T6840] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 169.556408][ T6840] f2fs_write_data_pages+0x287e/0x34f0 [ 169.556435][ T6840] ? __lock_acquire+0x6b5/0x2cf0 [ 169.556494][ T6840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.556563][ T6840] ? __lock_acquire+0x6b5/0x2cf0 [ 169.556607][ T6840] ? __lock_acquire+0x6b5/0x2cf0 [ 169.556656][ T6840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.556686][ T6840] do_writepages+0x32e/0x550 [ 169.556721][ T6840] ? do_raw_spin_unlock+0xf5/0x210 [ 169.556750][ T6840] filemap_fdatawrite+0x1e9/0x2f0 [ 169.556779][ T6840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 169.556845][ T6840] ? do_raw_spin_unlock+0xf5/0x210 [ 169.556872][ T6840] f2fs_sync_dirty_inodes+0x30e/0x830 [ 169.556905][ T6840] f2fs_write_checkpoint+0x9df/0x26a0 [ 169.556924][ T6840] ? __lock_acquire+0x6b5/0x2cf0 [ 169.556976][ T6840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 169.557048][ T6840] kill_f2fs_super+0x314/0x720 [ 169.557074][ T6840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 169.557106][ T6840] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.557143][ T6840] deactivate_locked_super+0xbc/0x130 [ 169.557175][ T6840] cleanup_mnt+0x437/0x4d0 [ 169.557194][ T6840] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.557221][ T6840] task_work_run+0x1d9/0x270 [ 169.557248][ T6840] ? __pfx_task_work_run+0x10/0x10 [ 169.557291][ T6840] exit_to_user_mode_loop+0xed/0x480 [ 169.557316][ T6840] ? rcu_is_watching+0x15/0xb0 [ 169.557338][ T6840] do_syscall_64+0x32d/0xf80 [ 169.557360][ T6840] ? trace_irq_disable+0x3b/0x140 [ 169.557380][ T6840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.557398][ T6840] ? clear_bhb_loop+0x40/0x90 [ 169.557421][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.557440][ T6840] RIP: 0033:0x7ff6b699d9d7 [ 169.557458][ T6840] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 169.557472][ T6840] RSP: 002b:00007ffe009b77c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.557492][ T6840] RAX: 0000000000000000 RBX: 00007ff6b6a32050 RCX: 00007ff6b699d9d7 [ 169.557506][ T6840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe009b7880 [ 169.557519][ T6840] RBP: 00007ffe009b7880 R08: 00007ffe009b8880 R09: 00000000ffffffff [ 169.557533][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe009b8910 [ 169.557546][ T6840] R13: 00007ff6b6a32050 R14: 0000000000029542 R15: 00007ffe009b8950 [ 169.557578][ T6840] [ 169.887676][ T6840] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 170.124100][ T5933] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 170.581921][ T5906] usb 7-1: USB disconnect, device number 2 [ 171.518124][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 171.678674][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 171.692216][ T10] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 171.711382][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.726085][ T10] usb 7-1: Product: syz [ 171.735720][ T10] usb 7-1: Manufacturer: syz [ 171.745133][ T10] usb 7-1: SerialNumber: syz [ 171.766560][ T10] usb 7-1: config 0 descriptor?? [ 172.032966][ T10] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 003 [ 172.097352][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'. [ 172.211325][ T7908] bridge1: entered promiscuous mode [ 172.233368][ T7908] bridge1: left promiscuous mode [ 172.430822][ T7911] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.498'. [ 172.667288][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 172.688188][ T7887] i2c i2c-1: failure reading status [ 172.709398][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.721525][ T5933] usb 7-1: USB disconnect, device number 3 [ 172.753981][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.869556][ T7918] netlink: 'syz.5.501': attribute type 5 has an invalid length. [ 175.380572][ T7962] loop3: detected capacity change from 0 to 40427 [ 175.427069][ T7962] F2FS-fs (loop3): invalid crc value [ 175.716564][ T7962] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 175.752159][ T7962] F2FS-fs (loop3): Start checkpoint disabled! [ 175.878467][ T7962] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 175.904705][ T7962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 176.078018][ T29] audit: type=1800 audit(1774049784.316:13): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.518" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 176.282959][ T7962] syz.3.518: attempt to access beyond end of device [ 176.282959][ T7962] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 176.484712][ T7243] kworker/u8:15: attempt to access beyond end of device [ 176.484712][ T7243] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 176.571104][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.571139][ T7243] Tainted: [L]=SOFTLOCKUP [ 176.571147][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.571159][ T7243] Workqueue: writeback wb_workfn (flush-7:3) [ 176.571191][ T7243] Call Trace: [ 176.571198][ T7243] [ 176.571207][ T7243] dump_stack_lvl+0xe8/0x150 [ 176.571239][ T7243] f2fs_handle_critical_error+0x37c/0x540 [ 176.571273][ T7243] f2fs_write_end_io+0x1274/0x1740 [ 176.571313][ T7243] __submit_merged_bio+0x256/0x6a0 [ 176.571347][ T7243] __submit_merged_write_cond+0x3c9/0x4e0 [ 176.571382][ T7243] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 176.571441][ T7243] f2fs_write_data_pages+0x287e/0x34f0 [ 176.571506][ T7243] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.571548][ T7243] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 176.571600][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 176.571672][ T7243] ? trace_hrtimer_start+0x82/0x200 [ 176.571696][ T7243] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.571725][ T7243] do_writepages+0x32e/0x550 [ 176.571756][ T7243] ? reacquire_held_locks+0x104/0x190 [ 176.571776][ T7243] ? writeback_sb_inodes+0x463/0x19d0 [ 176.571808][ T7243] __writeback_single_inode+0x133/0x10e0 [ 176.571835][ T7243] ? do_raw_spin_unlock+0xf5/0x210 [ 176.571864][ T7243] writeback_sb_inodes+0x979/0x19d0 [ 176.571888][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 176.571945][ T7243] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 176.571968][ T7243] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.572032][ T7243] ? rcu_is_watching+0x15/0xb0 [ 176.572061][ T7243] wb_writeback+0x445/0xb00 [ 176.572091][ T7243] ? queue_io+0x201/0x470 [ 176.572123][ T7243] ? __pfx_wb_writeback+0x10/0x10 [ 176.572145][ T7243] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.572185][ T7243] wb_workfn+0x3f8/0xf10 [ 176.572204][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 176.572229][ T7243] ? look_up_lock_class+0x57/0x110 [ 176.572272][ T7243] ? __pfx_wb_workfn+0x10/0x10 [ 176.572296][ T7243] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.572316][ T7243] ? lock_acquire+0x106/0x350 [ 176.572343][ T7243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.572367][ T7243] ? process_one_work+0x8b7/0x1710 [ 176.572397][ T7243] ? process_one_work+0x8b7/0x1710 [ 176.572444][ T7243] ? process_one_work+0x8b7/0x1710 [ 176.572470][ T7243] process_one_work+0x9a3/0x1710 [ 176.572521][ T7243] ? __pfx_process_one_work+0x10/0x10 [ 176.572546][ T7243] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.572586][ T7243] worker_thread+0xba8/0x11e0 [ 176.572632][ T7243] kthread+0x388/0x470 [ 176.572654][ T7243] ? __pfx_worker_thread+0x10/0x10 [ 176.572670][ T7243] ? __pfx_kthread+0x10/0x10 [ 176.572693][ T7243] ret_from_fork+0x51e/0xb90 [ 176.572724][ T7243] ? __pfx_ret_from_fork+0x10/0x10 [ 176.572750][ T7243] ? __switch_to+0xc7d/0x1420 [ 176.572778][ T7243] ? __pfx_kthread+0x10/0x10 [ 176.572803][ T7243] ret_from_fork_asm+0x1a/0x30 [ 176.572840][ T7243] [ 176.584173][ T7243] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 177.866166][ T8018] xt_hashlimit: max too large, truncated to 1048576 [ 177.897586][ T8018] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 177.987701][ T8022] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 178.752247][ T8038] loop4: detected capacity change from 0 to 1024 [ 178.763415][ T8038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.807157][ T8038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.946664][ T8038] loop4: detected capacity change from 1024 to 0 [ 178.999832][ T8046] EXT4-fs error (device loop4): ext4_get_inode_loc:4923: inode #15: block 8: comm syz.4.543: unable to read itable block [ 179.026245][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.035004][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.054619][ T8046] EXT4-fs error (device loop4): ext4_get_inode_loc:4923: inode #15: block 8: comm syz.4.543: unable to read itable block [ 179.105557][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.138882][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.173020][ T8046] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6249: IO failure [ 179.185639][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.548'. [ 179.205790][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.245338][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.270683][ T8046] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #15: comm syz.4.543: mark_inode_dirty error [ 179.299368][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.321323][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.351207][ T8046] EXT4-fs error (device loop4): ext4_get_inode_loc:4923: inode #15: block 8: comm syz.4.543: unable to read itable block [ 179.396021][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.401911][ T8064] IPv4: Oversized IP packet from 172.20.20.24 [ 179.416206][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 179.422998][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.433451][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 179.464460][ T8046] EXT4-fs error (device loop4): ext4_get_max_inline_size:121: inode #15: comm syz.4.543: can't get inode location 15 [ 179.495823][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.529014][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.560126][ T8046] EXT4-fs error (device loop4): ext4_get_inode_loc:4923: inode #15: block 8: comm syz.4.543: unable to read itable block [ 179.623485][ T8046] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.645370][ T8046] EXT4-fs (loop4): I/O error while writing superblock [ 179.731152][ T8073] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 179.808710][ T5853] EXT4-fs error (device loop4): ext4_get_inode_loc:4923: inode #2: block 5: comm syz-executor: unable to read itable block [ 179.822022][ T5853] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.833297][ T5853] EXT4-fs (loop4): I/O error while writing superblock [ 179.841648][ T5853] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6249: IO failure [ 179.850396][ T5906] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 179.860356][ T5853] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.865938][ T8077] netlink: 208 bytes leftover after parsing attributes in process `syz.3.557'. [ 179.870288][ T5853] EXT4-fs (loop4): I/O error while writing superblock [ 179.884951][ T5853] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #2: comm syz-executor: mark_inode_dirty error [ 179.899863][ T8077] netlink: 208 bytes leftover after parsing attributes in process `syz.3.557'. [ 179.907764][ T5853] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 179.930552][ T8075] bond1: (slave bridge1): making interface the new active one [ 179.955860][ T8075] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 179.997994][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 180.005271][ T5906] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 180.045416][ T5906] usb 7-1: config 0 has no interface number 0 [ 180.060336][ T5906] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 180.074009][ T5906] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 180.087738][ T5906] usb 7-1: config 0 interface 41 has no altsetting 0 [ 180.104461][ T5906] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 180.134030][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.189932][ T5906] usb 7-1: Product: syz [ 180.199745][ T5906] usb 7-1: Manufacturer: syz [ 180.210630][ T5906] usb 7-1: SerialNumber: syz [ 180.238796][ T5906] usb 7-1: config 0 descriptor?? [ 180.247584][ T8070] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.267405][ T8070] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.371034][ T8083] loop1: detected capacity change from 0 to 512 [ 180.495235][ T8070] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.513543][ T8070] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.658873][ T5929] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.695953][ T3513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.824341][ T5929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.838032][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.856407][ T5929] usb 4-1: Product: syz [ 180.866567][ T5929] usb 4-1: Manufacturer: syz [ 180.873185][ T5929] usb 4-1: SerialNumber: syz [ 180.893880][ T29] audit: type=1326 audit(1774049789.136:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.1.566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a279c799 code=0x0 [ 180.918261][ T5929] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.963560][ T3513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.035035][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.063176][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.072588][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.083051][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.093630][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.161387][ T5906] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 181.164597][ T5933] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.237796][ T3513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.334691][ T3513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.397851][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.574502][ T47] usb 6-1: unable to get BOS descriptor or descriptor too short [ 181.584600][ T47] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 181.593607][ T47] usb 6-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config [ 181.611008][ T5906] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 181.625063][ T8085] random: crng reseeded on system resumption [ 181.636487][ T47] usb 6-1: config 63 has no interface number 0 [ 181.650185][ T5906] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 181.660416][ T47] usb 6-1: config 63 interface 66 has no altsetting 0 [ 181.672771][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 181.674930][ T5906] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 181.707214][ T47] usb 6-1: string descriptor 0 read error: -22 [ 181.716512][ T47] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 181.741734][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.760822][ T5906] usb 7-1: USB disconnect, device number 4 [ 181.821375][ T47] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 181.831418][ T5851] usb 4-1: USB disconnect, device number 11 [ 181.862545][ T47] uvcvideo 6-1:63.66: No valid video chain found. [ 182.059749][ T47] usb 6-1: USB disconnect, device number 3 [ 182.230614][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.258604][ T5933] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 182.261563][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.273219][ T5933] ath9k_htc: Failed to initialize the device [ 182.293466][ T5851] usb 4-1: ath9k_htc: USB layer deinitialized [ 182.333276][ T8109] loop6: detected capacity change from 0 to 512 [ 182.337203][ T8093] bridge_slave_0: entered allmulticast mode [ 182.377718][ T8109] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.570: inode has both inline data and extents flags [ 182.385737][ T8093] bridge_slave_0: entered promiscuous mode [ 182.416039][ T8109] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.418004][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 182.422830][ T8109] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.570: couldn't read orphan inode 15 (err -117) [ 182.427233][ C0] EXT4-fs (loop6): initial error at time 1774049790: ext4_orphan_get:1391: inode 15 [ 182.455214][ C0] EXT4-fs (loop6): last error at time 1774049790: ext4_orphan_get:1391: inode 15 [ 182.467240][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.494339][ T8109] loop6: lost filesystem error report for type 5 error -117 [ 182.515245][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.534695][ T8109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.596911][ T8093] bridge_slave_1: entered allmulticast mode [ 182.633005][ T8093] bridge_slave_1: entered promiscuous mode [ 182.800624][ T29] audit: type=1326 audit(1774049791.046:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feee2d9c799 code=0x0 [ 182.865916][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.885367][ T3513] bridge_slave_1: left allmulticast mode [ 182.915032][ T3513] bridge_slave_1: left promiscuous mode [ 182.932215][ T7065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.006653][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.050319][ T3513] bridge_slave_0: left allmulticast mode [ 183.066090][ T3513] bridge_slave_0: left promiscuous mode [ 183.077616][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.218612][ T5839] Bluetooth: hci4: command tx timeout [ 183.603995][ T8145] loop5: detected capacity change from 0 to 128 [ 183.817441][ T8150] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.837519][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.860377][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.878881][ T3513] bond0 (unregistering): Released all slaves [ 183.895631][ T3513] bond1 (unregistering): Released all slaves [ 183.948481][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.967060][ T8127] netlink: 'syz.1.575': attribute type 12 has an invalid length. [ 184.272872][ T8093] team0: Port device team_slave_0 added [ 184.295858][ T8093] team0: Port device team_slave_1 added [ 184.634232][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.646698][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.679260][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.774178][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.792063][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.858286][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.110321][ T8093] hsr_slave_0: entered promiscuous mode [ 185.137253][ T8093] hsr_slave_1: entered promiscuous mode [ 185.163168][ T8093] debugfs: 'hsr0' already exists in 'hsr' [ 185.183018][ T8093] Cannot create hsr debugfs directory [ 185.298244][ T5839] Bluetooth: hci4: command tx timeout [ 185.370465][ T3513] hsr_slave_0: left promiscuous mode [ 185.385356][ T3513] hsr_slave_1: left promiscuous mode [ 185.395535][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.408807][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.444483][ T3513] veth1_macvtap: left promiscuous mode [ 185.455281][ T3513] veth0_macvtap: left promiscuous mode [ 185.473895][ T3513] veth1_vlan: left promiscuous mode [ 185.503718][ T3513] veth0_vlan: left promiscuous mode [ 186.614284][ T8198] loop1: detected capacity change from 0 to 131072 [ 186.814838][ T8198] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 186.848275][ T8198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.921686][ T8198] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 186.932967][ T29] audit: type=1800 audit(1774049795.176:16): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.598" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 186.959138][ T8198] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 186.979869][ T8198] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 187.379297][ T5839] Bluetooth: hci4: command tx timeout [ 187.390463][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 187.432987][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 188.068643][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.079055][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.311784][ T8204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.679477][ T7243] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.726312][ T7243] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.760646][ T7243] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.923611][ T7243] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.949373][ T7243] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.986062][ T7243] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.018027][ T7243] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.036938][ T7243] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.046559][ T7243] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.065707][ T7243] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.079557][ T7243] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.088778][ T7243] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.225139][ T5933] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 189.429870][ T5933] usb 7-1: Using ep0 maxpacket: 32 [ 189.458029][ T5839] Bluetooth: hci4: command tx timeout [ 189.462699][ T5933] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 189.492055][ T5933] usb 7-1: config 0 has no interface number 0 [ 189.534892][ T5933] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.554197][ T8262] loop3: detected capacity change from 0 to 64 [ 189.573354][ T5933] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 189.602791][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.625043][ T5933] usb 7-1: Product: syz [ 189.643138][ T5933] usb 7-1: Manufacturer: syz [ 189.659697][ T5933] usb 7-1: SerialNumber: syz [ 189.694263][ T5933] usb 7-1: config 0 descriptor?? [ 189.757490][ T5933] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 189.808017][ T5933] em28xx 7-1:0.132: Video interface 132 found: [ 190.138416][ T8093] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 190.146250][ T5933] em28xx 7-1:0.132: chip ID is em2874 [ 190.216774][ T8093] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 190.368800][ T8093] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.583352][ T8093] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.753688][ T5933] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 190.806654][ T5933] em28xx 7-1:0.132: board has no eeprom [ 190.890264][ T5933] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 190.917333][ T5933] em28xx 7-1:0.132: analog set to bulk mode. [ 190.944044][ T7403] em28xx 7-1:0.132: Registering V4L2 extension [ 191.123673][ T8233] usb 7-1: USB disconnect, device number 5 [ 191.159581][ T8233] em28xx 7-1:0.132: Disconnecting em28xx [ 191.224294][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 191.237830][ T5164] Bluetooth: hci1: command 0x0406 tx timeout [ 191.331905][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.392751][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.435794][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.443109][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.507990][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.515235][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.620339][ T5851] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.752828][ T7403] usb 7-1: Decoder not found [ 191.799430][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 191.799616][ T7403] em28xx 7-1:0.132: failed to create media graph [ 191.834949][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.864401][ T7403] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 191.886613][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.926299][ T5851] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.973211][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.985203][ T7403] em28xx 7-1:0.132: Remote control support is not available for this card. [ 191.998944][ T8337] ================================================================== [ 192.007052][ T8337] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 192.014271][ T8337] Read of size 4 at addr ffff8880374cc858 by task v4l_id/8337 [ 192.021747][ T8337] [ 192.024094][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 192.024125][ T8337] Tainted: [L]=SOFTLOCKUP [ 192.024131][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.024142][ T8337] Call Trace: [ 192.024151][ T8337] [ 192.024159][ T8337] dump_stack_lvl+0xe8/0x150 [ 192.024187][ T8337] print_address_description+0x55/0x1e0 [ 192.024208][ T8337] ? v4l2_open+0x395/0x3a0 [ 192.024221][ T8337] print_report+0x58/0x70 [ 192.024239][ T8337] kasan_report+0x117/0x150 [ 192.024257][ T8337] ? v4l2_open+0x395/0x3a0 [ 192.024272][ T8337] v4l2_open+0x395/0x3a0 [ 192.024288][ T8337] chrdev_open+0x4cd/0x5e0 [ 192.024306][ T8337] ? __pfx_chrdev_open+0x10/0x10 [ 192.024323][ T8337] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 192.024341][ T8337] ? __pfx_chrdev_open+0x10/0x10 [ 192.024356][ T8337] do_dentry_open+0x785/0x14e0 [ 192.024381][ T8337] vfs_open+0x3b/0x340 [ 192.024397][ T8337] ? path_openat+0x2df0/0x3860 [ 192.024412][ T8337] path_openat+0x2e08/0x3860 [ 192.024431][ T8337] ? __pfx_stack_trace_save+0x10/0x10 [ 192.024451][ T8337] ? stack_depot_save_flags+0x33/0x810 [ 192.024471][ T8337] ? __pfx_path_openat+0x10/0x10 [ 192.024484][ T8337] ? __x64_sys_openat+0x138/0x170 [ 192.024506][ T8337] ? __lock_acquire+0x6b5/0x2cf0 [ 192.024531][ T8337] do_file_open+0x23e/0x4a0 [ 192.024547][ T8337] ? __pfx_do_file_open+0x10/0x10 [ 192.024567][ T8337] ? _raw_spin_unlock+0x28/0x50 [ 192.024583][ T8337] ? alloc_fd+0x64b/0x6c0 [ 192.024604][ T8337] do_sys_openat2+0x113/0x200 [ 192.024635][ T8337] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.024653][ T8337] ? exc_page_fault+0x6a/0xc0 [ 192.024672][ T8337] ? do_user_addr_fault+0xc6f/0x1340 [ 192.024693][ T8337] __x64_sys_openat+0x138/0x170 [ 192.024714][ T8337] do_syscall_64+0x14d/0xf80 [ 192.024734][ T8337] ? trace_irq_disable+0x3b/0x140 [ 192.024750][ T8337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.024765][ T8337] ? clear_bhb_loop+0x40/0x90 [ 192.024781][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.024796][ T8337] RIP: 0033:0x7f8c624a7407 [ 192.024812][ T8337] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 192.024825][ T8337] RSP: 002b:00007ffd153e8d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 192.024844][ T8337] RAX: ffffffffffffffda RBX: 00007f8c62be5880 RCX: 00007f8c624a7407 [ 192.024855][ T8337] RDX: 0000000000000000 RSI: 00007ffd153e9f1b RDI: ffffffffffffff9c [ 192.024866][ T8337] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 192.024875][ T8337] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 192.024884][ T8337] R13: 00007ffd153e8f80 R14: 00007f8c62d4c000 R15: 0000562ef75544d8 [ 192.024901][ T8337] [ 192.024906][ T8337] [ 192.298938][ T8337] Allocated by task 7403: [ 192.303253][ T8337] kasan_save_track+0x3e/0x80 [ 192.307921][ T8337] __kasan_kmalloc+0x93/0xb0 [ 192.312504][ T8337] __kmalloc_cache_noprof+0x31c/0x660 [ 192.317867][ T8337] em28xx_v4l2_init+0x10b/0x2e70 [ 192.322806][ T8337] em28xx_init_extension+0x120/0x1c0 [ 192.328079][ T8337] process_one_work+0x9a3/0x1710 [ 192.333011][ T8337] worker_thread+0xba8/0x11e0 [ 192.337673][ T8337] kthread+0x388/0x470 [ 192.341729][ T8337] ret_from_fork+0x51e/0xb90 [ 192.346321][ T8337] ret_from_fork_asm+0x1a/0x30 [ 192.351073][ T8337] [ 192.353414][ T8337] Freed by task 7403: [ 192.357378][ T8337] kasan_save_track+0x3e/0x80 [ 192.362043][ T8337] kasan_save_free_info+0x46/0x50 [ 192.367062][ T8337] __kasan_slab_free+0x5c/0x80 [ 192.371815][ T8337] kfree+0x1c5/0x640 [ 192.375701][ T8337] em28xx_v4l2_init+0x1683/0x2e70 [ 192.380715][ T8337] em28xx_init_extension+0x120/0x1c0 [ 192.385986][ T8337] process_one_work+0x9a3/0x1710 [ 192.390918][ T8337] worker_thread+0xba8/0x11e0 [ 192.395591][ T8337] kthread+0x388/0x470 [ 192.399651][ T8337] ret_from_fork+0x51e/0xb90 [ 192.404235][ T8337] ret_from_fork_asm+0x1a/0x30 [ 192.408986][ T8337] [ 192.411297][ T8337] The buggy address belongs to the object at ffff8880374cc000 [ 192.411297][ T8337] which belongs to the cache kmalloc-8k of size 8192 [ 192.425350][ T8337] The buggy address is located 2136 bytes inside of [ 192.425350][ T8337] freed 8192-byte region [ffff8880374cc000, ffff8880374ce000) [ 192.439314][ T8337] [ 192.441626][ T8337] The buggy address belongs to the physical page: [ 192.448036][ T8337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x374c8 [ 192.456785][ T8337] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 192.465271][ T8337] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 192.472830][ T8337] page_type: f5(slab) [ 192.476815][ T8337] raw: 00fff00000000040 ffff88801b042280 dead000000000100 dead000000000122 [ 192.485476][ T8337] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 192.494051][ T8337] head: 00fff00000000040 ffff88801b042280 dead000000000100 dead000000000122 [ 192.502717][ T8337] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 192.511379][ T8337] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 192.520041][ T8337] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 192.528694][ T8337] page dumped because: kasan: bad access detected [ 192.535090][ T8337] page_owner tracks the page as allocated [ 192.540791][ T8337] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5850, tgid 5850 (syz-executor), ts 69559815029, free_ts 59378482863 [ 192.562324][ T8337] post_alloc_hook+0x231/0x280 [ 192.567116][ T8337] get_page_from_freelist+0x2418/0x24b0 [ 192.572653][ T8337] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 192.578447][ T8337] allocate_slab+0x77/0x660 [ 192.582940][ T8337] refill_objects+0x339/0x3d0 [ 192.587613][ T8337] __pcs_replace_empty_main+0x321/0x720 [ 192.593150][ T8337] __kmalloc_noprof+0x474/0x760 [ 192.598000][ T8337] ops_init+0x7b/0x5c0 [ 192.602064][ T8337] setup_net+0x118/0x340 [ 192.606302][ T8337] copy_net_ns+0x50e/0x730 [ 192.610721][ T8337] create_new_namespaces+0x3e7/0x6a0 [ 192.616064][ T8337] unshare_nsproxy_namespaces+0x11a/0x160 [ 192.621787][ T8337] ksys_unshare+0x521/0x980 [ 192.626284][ T8337] __x64_sys_unshare+0x38/0x50 [ 192.631034][ T8337] do_syscall_64+0x14d/0xf80 [ 192.635615][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.641617][ T8337] page last free pid 5755 tgid 5755 stack trace: [ 192.647933][ T8337] __free_frozen_pages+0xbc7/0xd30 [ 192.653040][ T8337] __slab_free+0x274/0x2c0 [ 192.657440][ T8337] qlist_free_all+0x99/0x100 [ 192.662025][ T8337] kasan_quarantine_reduce+0x148/0x160 [ 192.667483][ T8337] __kasan_slab_alloc+0x22/0x80 [ 192.672410][ T8337] kmem_cache_alloc_noprof+0x2bc/0x650 [ 192.677860][ T8337] mas_alloc_nodes+0x291/0x350 [ 192.682610][ T8337] mas_preallocate+0x2d6/0x640 [ 192.687362][ T8337] commit_merge+0x21d/0x730 [ 192.691849][ T8337] vma_expand+0x87d/0xf90 [ 192.696172][ T8337] relocate_vma_down+0x375/0x590 [ 192.701102][ T8337] setup_arg_pages+0x70a/0xbd0 [ 192.705856][ T8337] load_elf_binary+0xc5e/0x2980 [ 192.710697][ T8337] bprm_execve+0x956/0x1450 [ 192.715204][ T8337] do_execveat_common+0x595/0x710 [ 192.720219][ T8337] __x64_sys_execve+0x97/0xc0 [ 192.724885][ T8337] [ 192.727191][ T8337] Memory state around the buggy address: [ 192.732828][ T8337] ffff8880374cc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.740890][ T8337] ffff8880374cc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.748950][ T8337] >ffff8880374cc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.756993][ T8337] ^ [ 192.763912][ T8337] ffff8880374cc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.771966][ T8337] ffff8880374cc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.780025][ T8337] ================================================================== [ 192.798286][ T8233] em28xx 7-1:0.132: Closing input extension [ 192.841327][ T5851] usb 4-1: config 0 descriptor?? [ 192.851375][ T5851] hub 4-1:0.0: USB hub found [ 192.856652][ T8337] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.863875][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 192.874397][ T8337] Tainted: [L]=SOFTLOCKUP [ 192.878734][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.888801][ T8337] Call Trace: [ 192.892095][ T8337] [ 192.895017][ T8337] vpanic+0x56c/0xa60 [ 192.898999][ T8337] ? __pfx_vpanic+0x10/0x10 [ 192.903497][ T8337] ? __pfx___schedule+0x10/0x10 [ 192.908341][ T8337] panic+0xc5/0xd0 [ 192.912056][ T8337] ? __pfx_panic+0x10/0x10 [ 192.916472][ T8337] ? preempt_schedule_thunk+0x16/0x30 [ 192.921841][ T8337] ? v4l2_open+0x395/0x3a0 [ 192.926249][ T8337] check_panic_on_warn+0x89/0xb0 [ 192.931186][ T8337] ? v4l2_open+0x395/0x3a0 [ 192.935628][ T8337] end_report+0x73/0x170 [ 192.939885][ T8337] ? v4l2_open+0x395/0x3a0 [ 192.944299][ T8337] kasan_report+0x128/0x150 [ 192.949144][ T8337] ? v4l2_open+0x395/0x3a0 [ 192.953552][ T8337] v4l2_open+0x395/0x3a0 [ 192.957807][ T8337] chrdev_open+0x4cd/0x5e0 [ 192.962248][ T8337] ? __pfx_chrdev_open+0x10/0x10 [ 192.967184][ T8337] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 192.973506][ T8337] ? __pfx_chrdev_open+0x10/0x10 [ 192.978530][ T8337] do_dentry_open+0x785/0x14e0 [ 192.983319][ T8337] vfs_open+0x3b/0x340 [ 192.987384][ T8337] ? path_openat+0x2df0/0x3860 [ 192.992138][ T8337] path_openat+0x2e08/0x3860 [ 192.996724][ T8337] ? __pfx_stack_trace_save+0x10/0x10 [ 193.002092][ T8337] ? stack_depot_save_flags+0x33/0x810 [ 193.007560][ T8337] ? __pfx_path_openat+0x10/0x10 [ 193.012506][ T8337] ? __x64_sys_openat+0x138/0x170 [ 193.017539][ T8337] ? __lock_acquire+0x6b5/0x2cf0 [ 193.022490][ T8337] do_file_open+0x23e/0x4a0 [ 193.026984][ T8337] ? __pfx_do_file_open+0x10/0x10 [ 193.032003][ T8337] ? _raw_spin_unlock+0x28/0x50 [ 193.036875][ T8337] ? alloc_fd+0x64b/0x6c0 [ 193.041201][ T8337] do_sys_openat2+0x113/0x200 [ 193.045872][ T8337] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.051068][ T8337] ? exc_page_fault+0x6a/0xc0 [ 193.055746][ T8337] ? do_user_addr_fault+0xc6f/0x1340 [ 193.061032][ T8337] __x64_sys_openat+0x138/0x170 [ 193.065891][ T8337] do_syscall_64+0x14d/0xf80 [ 193.070476][ T8337] ? trace_irq_disable+0x3b/0x140 [ 193.075530][ T8337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.081590][ T8337] ? clear_bhb_loop+0x40/0x90 [ 193.086258][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.092140][ T8337] RIP: 0033:0x7f8c624a7407 [ 193.096546][ T8337] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 193.116143][ T8337] RSP: 002b:00007ffd153e8d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 193.124557][ T8337] RAX: ffffffffffffffda RBX: 00007f8c62be5880 RCX: 00007f8c624a7407 [ 193.132520][ T8337] RDX: 0000000000000000 RSI: 00007ffd153e9f1b RDI: ffffffffffffff9c [ 193.140523][ T8337] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 193.148517][ T8337] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 193.156482][ T8337] R13: 00007ffd153e8f80 R14: 00007f8c62d4c000 R15: 0000562ef75544d8 [ 193.164449][ T8337] [ 193.168026][ T8337] Kernel Offset: disabled [ 193.172344][ T8337] Rebooting in 86400 seconds..